last executing test programs: 1m5.379736245s ago: executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x83, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x0, 0x0) 1m4.722369253s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x0) 1m4.669178668s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1m4.63107273s ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff00c}, {}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1m4.55293536s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) 1m4.520942015s ago: executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010001", 0x7) 1m4.441176566s ago: executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, 0x0, 0x0, 0x6400c0c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000030000000900010073797a310000000028000000000a01040000000000000000030000000900010073797a30000000000800024000000001140000001100010000000000000000000000000aaed6d69edde21d00ec3761d1b48d9594400e50ff73d926a1716e9f0d4dd7e21b4d8a53ca1273d8110361e34f776af4ec3f16cbd480dc79e2d12f8b28391e45ba257bc607a66add4574a06fceb69becd309cd6e2ce95ca1eccd95a47e442cc84bacbea3cf07506056be17"], 0x70}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x12, [@private=0xa010102, @local, @local, @local]}, @generic={0x7, 0x5, "2535af"}, @timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x1, [{@broadcast, 0x8005}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5100}, {@remote, 0x6}]}, @rr={0x7, 0x7, 0x0, [@empty]}]}}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1801027caf8c975ce47281088e94edb9290ad9d6cf6fc552cd68dfd9e9546df2030000"], 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) ppoll(&(0x7f00000003c0)=[{r1, 0x8000}, {r1, 0x154}, {r0, 0x8000}, {r5, 0x5110}, {r2, 0xb056}, {r1, 0x1}, {r1, 0x10}], 0x7, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440), 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x20, 0x0) r6 = socket(0x11, 0x80a, 0x0) sendto$rxrpc(r6, &(0x7f0000000300)="08c4d1a79a54ad74fe5015c4363c2cad7ae15ff8aae7fd3aa03bbebe43c39207579f7664cfca6c698edfd1e826775873db3939513cfbfb8ab8d060ffe3bf5cb7176f6190a2315a225fde3af3c47ed5112f2b51b2de116b29b6a8792eaa6af0cb8ba4d753e822a56768cdaecc96046838b8da766589d01e21a7b2af16c76a243a45995560494c42aa28d516b6b838ecb648b22a32edc62c5123565196f8c062a968be54127ef4b0a19c066dffcd", 0xad, 0xc1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) 1m4.378501903s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) 1m4.340170409s ago: executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x83, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x0, 0x0) 1m3.730717368s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 51.890238752s ago: executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x92}, 0x8) 51.648736222s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) socketpair(0xb, 0x4, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0x1d, 0x0, 0x20) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8040) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200000051e7e0796237a8b258a22bbbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781a000000000000000500000100186371ae9b1c03"], 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@initdev, @dev, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8900002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x6, 0xfff1}, {0xe, 0x8}, {0xfff3, 0x8}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8014) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "000000009b993e68", "75e29881592b9fd38bcad042e286f2cd", '\x00', "578619a280c847dd"}, 0x28) sendfile(r8, r9, &(0x7f0000000100), 0x10001) 51.535788194s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x28}, {0x80000006}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 51.422673712s ago: executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, 0x0, 0x0, 0x6400c0c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000030000000900010073797a310000000028000000000a01040000000000000000030000000900010073797a30000000000800024000000001140000001100010000000000000000000000000aaed6d69edde21d00ec3761d1b48d9594400e50ff73d926a1716e9f0d4dd7e21b4d8a53ca1273d8110361e34f776af4ec3f16cbd480dc79e2d12f8b28391e45ba257bc607a66add4574a06fceb69becd309cd6e2ce95ca1eccd95a47e442cc84bacbea3cf07506056be173442c4"], 0x70}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x12, [@private=0xa010102, @local, @local, @local]}, @generic={0x7, 0x5, "2535af"}, @timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x1, [{@broadcast, 0x8005}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5100}, {@remote, 0x6}]}, @rr={0x7, 0x7, 0x0, [@empty]}]}}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1801027caf8c975ce47281088e94edb9290ad9d6cf6fc552cd68dfd9e9546df2030000"], 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) ppoll(&(0x7f00000003c0)=[{r1, 0x8000}, {r1, 0x154}, {r0, 0x8000}, {r5, 0x5110}, {r2, 0xb056}, {r1, 0x1}, {r1, 0x10}], 0x7, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440), 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x20, 0x0) r6 = socket(0x11, 0x80a, 0x0) sendto$rxrpc(r6, &(0x7f0000000300)="08c4d1a79a54ad74fe5015c4363c2cad7ae15ff8aae7fd3aa03bbebe43c39207579f7664cfca6c698edfd1e826775873db3939513cfbfb8ab8d060ffe3bf5cb7176f6190a2315a225fde3af3c47ed5112f2b51b2de116b29b6a8792eaa6af0cb8ba4d753e822a56768cdaecc96046838b8da766589d01e21a7b2af16c76a243a45995560494c42aa28d516b6b838ecb648b22a32edc62c5123565196f8c062a968be54127ef4b0a19c066dffcd", 0xad, 0xc1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) 51.339262622s ago: executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010001", 0x7) 51.255640538s ago: executing program 4: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="100028bd7000fedbdf250300000008000c0002000000060003000400000008001100050000000500140009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040014) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) setsockopt(r2, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0) 36.368715913s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.336188319s ago: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x57c, 0x30, 0x800, 0x0, 0x0, {0x9}, [{0x568, 0x1, [@m_police={0x564, 0x0, 0x0, 0x0, {{0xb}, {0x464, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x965}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc1}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa2, 0x6, 0x0, 0x0, 0x7, 0xfff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44775b92, 0xfffffc01, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6cff5218, 0xfffffffd, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x927, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd58, 0x40, 0x1f, 0x2, 0x5df, 0xffffffff, 0xc2c, 0x40000000, 0x0, 0x0, 0xff, 0x2, 0xff, 0xfff, 0x81, 0x101, 0xd8e, 0xffff, 0x4, 0x9, 0x0, 0x3f, 0x7, 0x20, 0x6, 0xffff0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x1000, 0x3, 0x4, 0x6, 0xd51, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x80000001, 0x9, 0x0, 0x0, 0x6, 0x0, 0xbd3, 0x0, 0x0, 0x0, 0x0, 0x991, 0xfed8, 0xffffffff, 0x6df965b1, 0x400, 0xfff, 0x0, 0x0, 0x0, 0x8b5c556, 0x8, 0x80000001, 0x3ff, 0xc09, 0x9, 0x80000001, 0xb995, 0x2, 0x0, 0x8001, 0x3, 0x8000, 0x800, 0x70e, 0x0, 0x6, 0x3, 0xfff, 0x0, 0x6, 0x0, 0x0, 0x3b3, 0x0, 0x0, 0x20, 0xf726, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x3ae5, 0x1, 0x0, 0x7, 0x2, 0x0, 0x201e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x3, 0x2, 0x8ca, 0xe7b, 0x353fb285, 0xfff, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x87, 0x7, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd079, 0xffffffffffffffff, 0x1, 0x20, 0x8b0, {0x0, 0x2, 0x0, 0x6, 0x4}, {0x0, 0x0, 0x0, 0x9, 0xea12, 0xc4fe}, 0x9, 0x764c, 0x100}}], []]}, {0xd8, 0x6, "504ddfd7b93d7a32dddf0e494bde9a926770f2f8c74bce51effe05329b9e049505948861b574dc016047d46463593ff6a01ec5e7c54e432a3d4c7746b6681cd82d7315c8ad2f68e1aa305bf6164b9a1a8ea107203e29f83d563729947f828f6e0d3146a4c1d584f1f7c6b15e060db38dc24c2608dbc65bec23b4305cf03b26edf8f3e364e87b415cbe4f1fd4c264cc82958b84a3b01f5ec65ad2bd1cf7fcf5a476db5eb67b7f85feccb7985c12d6859ddd19ad0d6ef41f36313921827c389b018c3d321bc7f181e34655ba441af84f36e4f0b855"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x57c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) write(r3, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) shutdown(r5, 0x1) 35.455438108s ago: executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) 35.388208778s ago: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x16d0, 0x30, 0x800, 0x0, 0x0, {0x9}, [{0x16bc, 0x1, [@m_police={0x16b8, 0x10, 0x0, 0x0, {{0xb}, {0x15b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x965}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc1}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x5, 0x8000, 0x401, 0x1, 0x7fff, 0x0, 0x4, 0x800, 0x9, 0x2, 0x9, 0x1ff, 0x0, 0xb98, 0x1, 0xd03f, 0xfff, 0x8, 0xcee, 0x5, 0x9, 0x4, 0x81, 0x1, 0x2, 0x3, 0xa4f, 0x7, 0x781, 0xe9b8, 0xb989, 0xfffffff8, 0x3, 0x9, 0xffffff80, 0x5, 0x80000000, 0x4, 0xffffffc1, 0xff, 0xee, 0x0, 0x6, 0x6, 0xec9f, 0x0, 0x8, 0x67, 0x7, 0xff, 0x5, 0x8, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, 0x401, 0x146, 0x400, 0xdc7, 0x0, 0x3, 0x1, 0x7, 0x8001, 0x3, 0x6, 0x3, 0xffff, 0x101, 0x5, 0xb8, 0xfffffffe, 0x9, 0xd5a6, 0x80000001, 0x7fffffff, 0x27d5, 0x80, 0x800, 0x3f, 0x1, 0x80000001, 0x8, 0x4, 0x3, 0x1, 0x1, 0x3c97d071, 0x1, 0x5, 0x3f, 0x200, 0x2, 0x7, 0x0, 0x2, 0xfffffff7, 0xb2, 0x6, 0x8, 0x9, 0x7fff, 0x4, 0x800, 0x3, 0xffffffff, 0x9, 0x0, 0x3, 0x101, 0x6, 0x7, 0x9, 0xffffffff, 0x8, 0x0, 0xffffffff, 0x2, 0x7, 0x6, 0x4, 0x6, 0x7, 0x7f, 0x8, 0x101, 0x7, 0x400, 0x1ff, 0x3, 0x9, 0x31a, 0x3, 0x7, 0x7, 0x9, 0x7, 0x96a, 0x10000, 0x7, 0x2, 0x7ff, 0x3, 0x20, 0x80000000, 0x5, 0x8, 0x2, 0x7ff, 0x7, 0x1, 0x2, 0x81, 0x8, 0x8, 0x0, 0xfffffffe, 0x6, 0x44, 0x6, 0xfff, 0x8f, 0x7b98, 0x9, 0x0, 0x836, 0x8001, 0x9, 0x7, 0x1, 0xffffffff, 0xaa, 0x3, 0x5, 0x100, 0x5442010b, 0xba1d, 0x0, 0x4, 0x1000, 0x3f, 0x101, 0x2, 0x9, 0x7ff, 0x9, 0xffffff90, 0x0, 0xffffff30, 0x8, 0x9, 0x3, 0x1, 0x1, 0x7fff, 0x200, 0x5, 0x5ea2, 0xff, 0x7f, 0x0, 0x73af, 0x2, 0x800, 0x101, 0x80000001, 0xffffffff, 0x5, 0x6, 0x0, 0x7, 0x2, 0x9, 0x401, 0x0, 0x3ff, 0x2, 0x800, 0x0, 0x6, 0x6, 0x2, 0x5, 0x800000, 0xff, 0xffff42e9, 0x3, 0x2, 0x81, 0xb61, 0x1, 0x101, 0x0, 0x2, 0x0, 0x6, 0x54aa, 0xfffffe00, 0x1, 0x1, 0x3, 0xfff, 0x4, 0x9, 0xffffffff, 0x401, 0x5, 0x7, 0xf1, 0xce47, 0x4, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x2, 0x80000001, 0x2, 0x0, 0x5, 0x1, 0x6d43, 0x2, 0x400, 0xe1, 0x80000000, 0x5, 0xea79, 0x7, 0xa2, 0x6, 0x7, 0xeb, 0x7, 0xfff, 0x5, 0x4, 0x8, 0x1000, 0x7, 0x4, 0x8978, 0x7fff, 0x1, 0x6, 0x7fffffff, 0x1000, 0x1, 0x1, 0x0, 0x7e77, 0x7da2, 0x8, 0xb3c, 0x4, 0x8, 0x1000, 0x44775b92, 0xfffffc01, 0x62d3, 0x9, 0x8, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x1b6, 0xc2fd, 0x80000000, 0x0, 0x8001, 0x4, 0x81, 0x1f, 0x1000, 0x1ff, 0x8, 0x3, 0x6, 0x6cff5218, 0xfffffffd, 0x1, 0x3, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x5f, 0x10000, 0x5, 0x927, 0x3, 0x0, 0x8, 0x7926, 0x4, 0xd58, 0x40, 0x1f, 0x2, 0x5df, 0xffffffff, 0xc2c, 0x40000000, 0xff, 0x100, 0xff, 0x2, 0xff, 0xfff, 0x81, 0x101, 0xd8e, 0xffff, 0x4, 0x9, 0x0, 0x3f, 0x7, 0x20, 0x6, 0xffff0001, 0x2bd1, 0x0, 0x3, 0x9, 0x8021, 0xfffffff7, 0x888, 0x5, 0x2, 0x1, 0x0, 0x1000, 0x3, 0x4, 0x6, 0xd51, 0x1f, 0xffffffff, 0x8, 0x8001, 0x70c2, 0x5, 0x8, 0x80000001, 0x9, 0x0, 0x0, 0x6, 0xe56, 0xbd3, 0x7, 0xff, 0x0, 0x0, 0x991, 0xfed8, 0xffffffff, 0x6df965b1, 0x400, 0xfff, 0x4, 0x1010, 0x8, 0x8b5c556, 0x8, 0x80000001, 0x3ff, 0xc09, 0x9, 0x80000001, 0xb995, 0x2, 0x0, 0x8001, 0x3, 0x8000, 0x800, 0x70e, 0x0, 0x6, 0x3, 0xfff, 0x3f, 0x6, 0x4, 0x0, 0x3b3, 0x0, 0x40, 0x20, 0xf726, 0x4, 0x8, 0x2605, 0xb95, 0xffff, 0x20, 0x0, 0x3, 0x7, 0x3ae5, 0x1, 0x1e9a, 0x7, 0x2, 0x7c, 0x201e, 0x7, 0x6, 0x5, 0xe6, 0x401, 0x3, 0x2, 0x8ca, 0xe7b, 0x353fb285, 0xfff, 0xfffffff8, 0x1, 0x0, 0x3, 0x19f, 0x7fffffff, 0x1ff, 0x8, 0x3ff, 0xffffffdf, 0x0, 0x401, 0x2, 0x9, 0x9, 0x2, 0x1, 0x9a7, 0xffff, 0x87, 0x7, 0x0, 0xfff, 0x10000, 0x9, 0x8, 0xfffffffc, 0x1, 0x4, 0x0, 0x6, 0x8000000, 0x0, 0x5, 0xfffffff8, 0x0, 0xfffffff8, 0x0, 0x3, 0x726, 0x6ab, 0xff, 0xffffff81, 0xfffffff9, 0x98, 0xa268, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd079, 0xffffffffffffffff, 0x1, 0x20, 0x8b0, {0x0, 0x2, 0x8, 0x6, 0x4, 0x2}, {0xc4, 0x0, 0xd1, 0x9, 0xea12, 0xc4fe}, 0x9, 0x764c, 0x100}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcc31}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3f, 0xfffffff7, 0x5, 0x401, 0x2, 0x2, 0x9, 0xcd63, 0x8, 0x2, 0x0, 0x8000, 0x8, 0xfffffffd, 0x8, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0x4, 0x80000000, 0x9, 0x6, 0x1, 0x6, 0x1ff, 0x9, 0xfff, 0xa9, 0xa7, 0x0, 0x6, 0x1f, 0xfffffff8, 0x9, 0x4, 0x4d, 0x600000, 0x2, 0x0, 0x1f, 0x3, 0x3, 0x0, 0x2, 0x8001, 0x9, 0x400, 0x7, 0x3, 0x1d26f65d, 0xfffffffd, 0x80, 0x3, 0x1, 0x4, 0xfffffffc, 0x4ae2558a, 0x2, 0x8000, 0x7fffffff, 0x0, 0x80, 0xff, 0x4, 0x7, 0x9, 0x4, 0x6, 0x6, 0x0, 0xffffffff, 0x8, 0xfe, 0x401, 0x8, 0x4, 0x7, 0xbad5, 0x2, 0xa7a6, 0x719ce842, 0x5a45, 0x7, 0x8, 0x3, 0x20, 0x5, 0x20, 0x0, 0x7, 0x1f, 0x3, 0x2, 0x7fffffff, 0xfffffffc, 0x0, 0x8, 0x6, 0x4, 0x80000000, 0x2, 0x1, 0x10000, 0x9, 0x2, 0x3019159c, 0xffffa51d, 0x3, 0x7, 0x9, 0x1f, 0x7, 0xfffffffc, 0x6, 0x1f, 0x1, 0x1, 0xffff, 0x0, 0xb377, 0x3, 0x1, 0xcc24, 0x0, 0x401, 0x22aa, 0x4, 0x8, 0x800000, 0x1, 0x393, 0x3f, 0x0, 0x9f, 0x3, 0x3, 0x7, 0x7, 0x5, 0x8001, 0x1, 0x8, 0x1, 0x7, 0x2, 0x2, 0xbd8f, 0x101, 0x80000000, 0x10000, 0x28, 0x0, 0x7, 0x8001, 0x2, 0xffff, 0x80000000, 0xff, 0x5, 0x53, 0xc3, 0x1, 0x401, 0x1, 0x0, 0xeab4, 0x6, 0x401, 0x9, 0x1, 0x3, 0xfff, 0x80000000, 0x800, 0x5, 0x5, 0x0, 0x8, 0x8, 0xfff, 0x100, 0x4, 0xfffffffe, 0x4, 0x30, 0xba22, 0x81, 0x3c, 0x1, 0x1, 0xfff, 0x9, 0xffff, 0x5, 0x1f, 0x874f, 0x6, 0xad00, 0x6, 0x3, 0x401, 0xffff3716, 0x4, 0x400, 0xfffffffd, 0xfff, 0x0, 0x9, 0x800, 0x7ff, 0x0, 0x9, 0x4, 0x10001, 0x6, 0x8, 0x4, 0x8000, 0xff, 0x3, 0x6, 0xffff, 0x1be, 0x4b, 0x5, 0x0, 0x0, 0x7, 0x3, 0x8d, 0x7f, 0xfffffff8, 0x0, 0x7, 0x1, 0x9, 0xe3, 0x8, 0x1, 0x8000, 0x8, 0x4, 0x6, 0x8, 0x80000001, 0x9, 0x2, 0xff, 0x40, 0x9, 0xfffff001, 0x4]}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x80000001, 0x6, 0x80000001, 0x9, 0x1, 0xfffff001, 0xfc8, 0x2, 0x0, 0x8, 0x75b5, 0x40, 0x9, 0x7, 0x559, 0xe7d, 0x10001, 0x1d9f, 0x8, 0x1f5, 0x435, 0xfff, 0x81, 0xe1, 0x1000, 0x1, 0x9, 0x5, 0x401, 0x2, 0x5, 0x1, 0x7, 0xff, 0x1000, 0x7fff00, 0x101, 0x8, 0x2, 0x6, 0x4, 0x9, 0x20da8aef, 0xfffffffe, 0x2, 0xb86, 0x3ff, 0x808, 0x2, 0x8138, 0x0, 0x1, 0x2800000, 0x400, 0x3, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4ef, 0x6, 0x0, 0xe3, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x40, 0x0, 0x0, 0xb5a7, 0x0, 0x10000, 0x1f, 0x7, 0x40, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x400, 0x86, 0x0, 0x0, 0x10000, 0xee, 0x3, 0x0, 0x6, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x660, 0x0, 0x0, 0x9, 0x9, 0x1, 0x464, 0x61, 0x1, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x13, 0xffffffff, 0x0, 0x1000, 0x0, 0x7, 0x7, 0x1, 0x100, 0x0, 0x0, 0x7, 0x400, 0x1, 0x5, 0x7, 0x3, 0x34, 0x2, 0x7, 0x2, 0x5, 0x0, 0x8, 0x9, 0x9, 0x40, 0xa1, 0x5, 0x9, 0x0, 0x3, 0x4980, 0x2, 0x400, 0x2000400, 0x9, 0x0, 0x100, 0xd4b3, 0x7fffffff, 0xfffffff8, 0x6, 0x586, 0x87, 0x10001, 0x6, 0x7b, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x8, 0x6, 0x6, 0x3, 0x7, 0x0, 0x8, 0x8, 0x1, 0x6, 0x7, 0x4, 0x7, 0x5a8, 0x0, 0x2, 0x5, 0x2, 0x800, 0x5, 0x8000000, 0xc8e7, 0x8000, 0x272, 0x8, 0x0, 0x0, 0x4, 0x400, 0x7, 0x5, 0xfffffffd, 0x0, 0x1, 0x0, 0x1ff, 0x1f, 0x80000001, 0x574, 0x7fffffff, 0x200, 0xe8, 0x1, 0x0, 0x469, 0xcc, 0x6, 0x4, 0x200, 0x1f19e668, 0x0, 0x0, 0x2, 0x3, 0xff73, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0xffffffff, 0x80000001, 0x7, 0x200, 0x100, 0x200, 0x4, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x0, 0x3f0, 0x7, 0x3, 0xfffffff9, 0x2, 0x57, 0x5, 0x40, 0x22b0, 0x3ff, 0x6, 0x3, 0x7f8, 0x0, 0x7fffffff, 0x0, 0x80000001, 0x0, 0x0, 0x1f, 0x0, 0x9, 0x0, 0x2, 0x81, 0x0, 0x6, 0x400, 0x4, 0x100, 0xffffffff, 0x5, 0x2, 0x9, 0x9, 0x8, 0x1, 0x8000, 0x0, 0x2, 0x3ff, 0x4, 0xff, 0x4, 0x5, 0x0, 0x7ff, 0x8, 0x0, 0x3, 0x0, 0xe34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5c40, 0x0, 0x2, 0x200, 0x517, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7ff, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2, 0xcdf, 0x2, 0x4, 0x7, 0x3, 0x0, 0x0, 0x90d7, 0x1, 0x80000001, 0x3, 0x0, 0x7, 0x0, 0x6, 0x1ff, 0x8000, 0x0, 0x0, 0x0, 0x7, 0x6, 0xe2, 0x0, 0x0, 0x0, 0x4, 0x9, 0xc6, 0x1, 0xa2e9, 0x0, 0x9, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x1, 0x6, 0x5, 0x0, 0x5b2, 0x0, 0x1000, 0x0, 0x3, 0x5d7, 0x1, 0x1ff, 0xa22b, 0x3, 0x5, 0x1000, 0x0, 0xbff, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x44cd140, 0x0, 0x0, 0x3fff800, 0x0, 0x0, 0x0, 0x9, 0x6, 0x40, 0x6, 0x1ff, 0xff, 0x3, 0x7ff, 0x80, 0x6, 0x80000000, 0x3ff, 0x2, 0x6, 0x80000000, 0x1f, 0x3, 0x5, 0x1, 0x6, 0x2, 0xffffff01, 0x8001, 0x401, 0x100, 0x1, 0x9, 0x3, 0x0, 0x8, 0x2, 0x273d, 0xffffffc3, 0x7, 0x80000001, 0x8, 0x100, 0x4, 0x101, 0x6, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x9, 0x20, 0xffffff45, 0x5, 0x101, 0x6, 0x8, 0x9, 0x5, 0x0, 0x5, 0x200, 0x1ff, 0x4, 0x9, 0x401, 0x100, 0x9, 0x80, 0x446e, 0x1, 0x400, 0x6, 0xfffffffb, 0x0, 0x28a, 0x9, 0x0, 0x0, 0x1f, 0x100, 0x1, 0x101, 0x6, 0xffff, 0x62c, 0x9, 0x9, 0xffffff7f, 0x1, 0x2, 0x5, 0x9, 0x1f, 0x7b, 0xfffffff8, 0x5124, 0x4, 0xa1, 0x6, 0xffa, 0x3, 0x0, 0x3f, 0x200, 0x6, 0x3, 0x8, 0x822, 0x5b]}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x3, 0xa15b, 0xd8, {0x1f, 0x0, 0xa7, 0x1, 0x3ff, 0x2}, {0x0, 0x2, 0x2, 0xfe00, 0x0, 0xfff0}, 0x31, 0x4, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc01, 0xffffffffffffffff, 0x2, 0x8, 0x3f, {0xc5, 0x0, 0xff02, 0x7cc, 0x1, 0x10000}, {0x1, 0x0, 0x81, 0x80, 0xdbd4, 0x6}, 0xffff, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc7f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x0, 0x5, 0x1, {0x0, 0x0, 0x7b9, 0x9, 0x80, 0x4}, {0x6, 0x1, 0x0, 0x4, 0x5, 0x8}, 0x800, 0x0, 0xfffffffe}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_PEAKRATE64={0xc}]]}, {0xd8, 0x6, "504ddfd7b93d7a32dddf0e494bde9a926770f2f8c74bce51effe05329b9e049505948861b574dc016047d46463593ff6a01ec5e7c54e432a3d4c7746b6681cd82d7315c8ad2f68e1aa305bf6164b9a1a8ea107203e29f83d563729947f828f6e0d3146a4c1d584f1f7c6b15e060db38dc24c2608dbc65bec23b4305cf03b26edf8f3e364e87b415cbe4f1fd4c264cc82958b84a3b01f5ec65ad2bd1cf7fcf5a476db5eb67b7f85feccb7985c12d6859ddd19ad0d6ef41f36313921827c389b018c3d321bc7f181e34655ba441af84f36e4f0b855"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x16d0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0x4eca, 0x33, 0x6}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8000f28, 0x0) splice(r7, 0x0, r5, 0x0, 0x100000000007f, 0x0) write(r5, 0x0, 0x0) bind$vsock_stream(r4, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) shutdown(0xffffffffffffffff, 0x1) listen(r4, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x28, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100)=[{r10}], 0x1, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0x80000001, 0xf3, 0x8, r2, 0x0, '\x00', 0x0, r3, 0x2, 0x5, 0x2, 0xa}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000200), &(0x7f0000000180)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) 34.504689527s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x20003f00) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) socket$inet(0x2, 0x0, 0x7ff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000100f1ff0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000140), 0x4) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x4c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003ac0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @multicast1}}}], 0x20}}], 0x1, 0x0) 34.351484737s ago: executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) 33.704450626s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x0) 31.872557703s ago: executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010001", 0x7) 31.826502328s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x16d0, 0x30, 0x800, 0x0, 0x0, {0x9}, [{0x16bc, 0x1, [@m_police={0x16b8, 0x10, 0x0, 0x0, {{0xb}, {0x15b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x965}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc1}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x5, 0x8000, 0x401, 0x1, 0x7fff, 0x0, 0x4, 0x800, 0x9, 0x2, 0x9, 0x1ff, 0x0, 0xb98, 0x1, 0xd03f, 0xfff, 0x8, 0xcee, 0x5, 0x9, 0x4, 0x81, 0x1, 0x2, 0x3, 0xa4f, 0x7, 0x781, 0xe9b8, 0xb989, 0xfffffff8, 0x3, 0x9, 0xffffff80, 0x5, 0x80000000, 0x4, 0xffffffc1, 0xff, 0xee, 0x0, 0x6, 0x6, 0xec9f, 0x0, 0x8, 0x67, 0x7, 0xff, 0x5, 0x8, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, 0x401, 0x146, 0x400, 0xdc7, 0x0, 0x3, 0x1, 0x7, 0x8001, 0x3, 0x6, 0x3, 0xffff, 0x101, 0x5, 0xb8, 0xfffffffe, 0x9, 0xd5a6, 0x80000001, 0x7fffffff, 0x27d5, 0x80, 0x800, 0x3f, 0x1, 0x80000001, 0x8, 0x4, 0x3, 0x1, 0x1, 0x3c97d071, 0x1, 0x5, 0x3f, 0x200, 0x2, 0x7, 0x0, 0x2, 0xfffffff7, 0xb2, 0x6, 0x8, 0x9, 0x7fff, 0x4, 0x800, 0x3, 0xffffffff, 0x9, 0x0, 0x3, 0x101, 0x6, 0x7, 0x9, 0xffffffff, 0x8, 0x0, 0xffffffff, 0x2, 0x7, 0x6, 0x4, 0x6, 0x7, 0x7f, 0x8, 0x101, 0x7, 0x400, 0x1ff, 0x3, 0x9, 0x31a, 0x3, 0x7, 0x7, 0x9, 0x7, 0x96a, 0x10000, 0x7, 0x2, 0x7ff, 0x3, 0x20, 0x80000000, 0x5, 0x8, 0x2, 0x7ff, 0x7, 0x1, 0x2, 0x81, 0x8, 0x8, 0x0, 0xfffffffe, 0x6, 0x44, 0x6, 0xfff, 0x8f, 0x7b98, 0x9, 0x0, 0x836, 0x8001, 0x9, 0x7, 0x1, 0xffffffff, 0xaa, 0x3, 0x5, 0x100, 0x5442010b, 0xba1d, 0x0, 0x4, 0x1000, 0x3f, 0x101, 0x2, 0x9, 0x7ff, 0x9, 0xffffff90, 0x0, 0xffffff30, 0x8, 0x9, 0x3, 0x1, 0x1, 0x7fff, 0x200, 0x5, 0x5ea2, 0xff, 0x7f, 0x0, 0x73af, 0x2, 0x800, 0x101, 0x80000001, 0xffffffff, 0x5, 0x6, 0x0, 0x7, 0x2, 0x9, 0x401, 0x0, 0x3ff, 0x2, 0x800, 0x0, 0x6, 0x6, 0x2, 0x5, 0x800000, 0xff, 0xffff42e9, 0x3, 0x2, 0x81, 0xb61, 0x1, 0x101, 0x0, 0x2, 0x0, 0x6, 0x54aa, 0xfffffe00, 0x1, 0x1, 0x3, 0xfff, 0x4, 0x9, 0xffffffff, 0x401, 0x5, 0x7, 0xf1, 0xce47, 0x4, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x2, 0x80000001, 0x2, 0x0, 0x5, 0x1, 0x6d43, 0x2, 0x400, 0xe1, 0x80000000, 0x5, 0xea79, 0x7, 0xa2, 0x6, 0x7, 0xeb, 0x7, 0xfff, 0x5, 0x4, 0x8, 0x1000, 0x7, 0x4, 0x8978, 0x7fff, 0x1, 0x6, 0x7fffffff, 0x1000, 0x1, 0x1, 0x0, 0x7e77, 0x7da2, 0x8, 0xb3c, 0x4, 0x8, 0x1000, 0x44775b92, 0xfffffc01, 0x62d3, 0x9, 0x8, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x1b6, 0xc2fd, 0x80000000, 0x0, 0x8001, 0x4, 0x81, 0x1f, 0x1000, 0x1ff, 0x8, 0x3, 0x6, 0x6cff5218, 0xfffffffd, 0x1, 0x3, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x5f, 0x10000, 0x5, 0x927, 0x3, 0x0, 0x8, 0x7926, 0x4, 0xd58, 0x40, 0x1f, 0x2, 0x5df, 0xffffffff, 0xc2c, 0x40000000, 0xff, 0x100, 0xff, 0x2, 0xff, 0xfff, 0x81, 0x101, 0xd8e, 0xffff, 0x4, 0x9, 0x0, 0x3f, 0x7, 0x20, 0x6, 0xffff0001, 0x2bd1, 0x0, 0x3, 0x9, 0x8021, 0xfffffff7, 0x888, 0x5, 0x2, 0x1, 0x0, 0x1000, 0x3, 0x4, 0x6, 0xd51, 0x1f, 0xffffffff, 0x8, 0x8001, 0x70c2, 0x5, 0x8, 0x80000001, 0x9, 0x0, 0x0, 0x6, 0xe56, 0xbd3, 0x7, 0xff, 0x0, 0x0, 0x991, 0xfed8, 0xffffffff, 0x6df965b1, 0x400, 0xfff, 0x4, 0x1010, 0x8, 0x8b5c556, 0x8, 0x80000001, 0x3ff, 0xc09, 0x9, 0x80000001, 0xb995, 0x2, 0x0, 0x8001, 0x3, 0x8000, 0x800, 0x70e, 0x0, 0x6, 0x3, 0xfff, 0x3f, 0x6, 0x4, 0x0, 0x3b3, 0x0, 0x40, 0x20, 0xf726, 0x4, 0x8, 0x2605, 0xb95, 0xffff, 0x20, 0x0, 0x3, 0x7, 0x3ae5, 0x1, 0x1e9a, 0x7, 0x2, 0x7c, 0x201e, 0x7, 0x6, 0x5, 0xe6, 0x401, 0x3, 0x2, 0x8ca, 0xe7b, 0x353fb285, 0xfff, 0xfffffff8, 0x1, 0x0, 0x3, 0x19f, 0x7fffffff, 0x1ff, 0x8, 0x3ff, 0xffffffdf, 0x0, 0x401, 0x2, 0x9, 0x9, 0x2, 0x1, 0x9a7, 0xffff, 0x87, 0x7, 0x0, 0xfff, 0x10000, 0x9, 0x8, 0xfffffffc, 0x1, 0x4, 0x0, 0x6, 0x8000000, 0x0, 0x5, 0xfffffff8, 0x0, 0xfffffff8, 0x0, 0x3, 0x726, 0x6ab, 0xff, 0xffffff81, 0xfffffff9, 0x98, 0xa268, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd079, 0xffffffffffffffff, 0x1, 0x20, 0x8b0, {0x0, 0x2, 0x8, 0x6, 0x4, 0x2}, {0xc4, 0x0, 0xd1, 0x9, 0xea12, 0xc4fe}, 0x9, 0x764c, 0x100}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcc31}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3f, 0xfffffff7, 0x5, 0x401, 0x2, 0x2, 0x9, 0xcd63, 0x8, 0x2, 0x0, 0x8000, 0x8, 0xfffffffd, 0x8, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0x4, 0x80000000, 0x9, 0x6, 0x1, 0x6, 0x1ff, 0x9, 0xfff, 0xa9, 0xa7, 0x0, 0x6, 0x1f, 0xfffffff8, 0x9, 0x4, 0x4d, 0x600000, 0x2, 0x0, 0x1f, 0x3, 0x3, 0x0, 0x2, 0x8001, 0x9, 0x400, 0x7, 0x3, 0x1d26f65d, 0xfffffffd, 0x80, 0x3, 0x1, 0x4, 0xfffffffc, 0x4ae2558a, 0x2, 0x8000, 0x7fffffff, 0x0, 0x80, 0xff, 0x4, 0x7, 0x9, 0x4, 0x6, 0x6, 0x0, 0xffffffff, 0x8, 0xfe, 0x401, 0x8, 0x4, 0x7, 0xbad5, 0x2, 0xa7a6, 0x719ce842, 0x5a45, 0x7, 0x8, 0x3, 0x20, 0x5, 0x20, 0x0, 0x7, 0x1f, 0x3, 0x2, 0x7fffffff, 0xfffffffc, 0x0, 0x8, 0x6, 0x4, 0x80000000, 0x2, 0x1, 0x10000, 0x9, 0x2, 0x3019159c, 0xffffa51d, 0x3, 0x7, 0x9, 0x1f, 0x7, 0xfffffffc, 0x6, 0x1f, 0x1, 0x1, 0xffff, 0x0, 0xb377, 0x3, 0x1, 0xcc24, 0x0, 0x401, 0x22aa, 0x4, 0x8, 0x800000, 0x1, 0x393, 0x3f, 0x0, 0x9f, 0x3, 0x3, 0x7, 0x7, 0x5, 0x8001, 0x1, 0x8, 0x1, 0x7, 0x2, 0x2, 0xbd8f, 0x101, 0x80000000, 0x10000, 0x28, 0x0, 0x7, 0x8001, 0x2, 0xffff, 0x80000000, 0xff, 0x5, 0x53, 0xc3, 0x1, 0x401, 0x1, 0x0, 0xeab4, 0x6, 0x401, 0x9, 0x1, 0x3, 0xfff, 0x80000000, 0x800, 0x5, 0x5, 0x0, 0x8, 0x8, 0xfff, 0x100, 0x4, 0xfffffffe, 0x4, 0x30, 0xba22, 0x81, 0x3c, 0x1, 0x1, 0xfff, 0x9, 0xffff, 0x5, 0x1f, 0x874f, 0x6, 0xad00, 0x6, 0x3, 0x401, 0xffff3716, 0x4, 0x400, 0xfffffffd, 0xfff, 0x0, 0x9, 0x800, 0x7ff, 0x0, 0x9, 0x4, 0x10001, 0x6, 0x8, 0x4, 0x8000, 0xff, 0x3, 0x6, 0xffff, 0x1be, 0x4b, 0x5, 0x0, 0x0, 0x7, 0x3, 0x8d, 0x7f, 0xfffffff8, 0x0, 0x7, 0x1, 0x9, 0xe3, 0x8, 0x1, 0x8000, 0x8, 0x4, 0x6, 0x8, 0x80000001, 0x9, 0x2, 0xff, 0x40, 0x9, 0xfffff001, 0x4]}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x80000001, 0x6, 0x80000001, 0x9, 0x1, 0xfffff001, 0xfc8, 0x2, 0x0, 0x8, 0x75b5, 0x40, 0x9, 0x7, 0x559, 0xe7d, 0x10001, 0x1d9f, 0x8, 0x1f5, 0x435, 0xfff, 0x81, 0xe1, 0x1000, 0x1, 0x9, 0x5, 0x401, 0x2, 0x5, 0x1, 0x7, 0xff, 0x1000, 0x7fff00, 0x101, 0x8, 0x2, 0x6, 0x4, 0x9, 0x20da8aef, 0xfffffffe, 0x2, 0xb86, 0x3ff, 0x808, 0x2, 0x8138, 0x0, 0x1, 0x2800000, 0x400, 0x3, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4ef, 0x6, 0x0, 0xe3, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x40, 0x0, 0x0, 0xb5a7, 0x0, 0x10000, 0x1f, 0x7, 0x40, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x400, 0x86, 0x0, 0x0, 0x10000, 0xee, 0x3, 0x0, 0x6, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x660, 0x0, 0x0, 0x9, 0x9, 0x1, 0x464, 0x61, 0x1, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x13, 0xffffffff, 0x0, 0x1000, 0x0, 0x7, 0x7, 0x1, 0x100, 0x0, 0x0, 0x7, 0x400, 0x1, 0x5, 0x7, 0x3, 0x34, 0x2, 0x7, 0x2, 0x5, 0x0, 0x8, 0x9, 0x9, 0x40, 0xa1, 0x5, 0x9, 0x0, 0x3, 0x4980, 0x2, 0x400, 0x2000400, 0x9, 0x0, 0x100, 0xd4b3, 0x7fffffff, 0xfffffff8, 0x6, 0x586, 0x87, 0x10001, 0x6, 0x7b, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x8, 0x6, 0x6, 0x3, 0x7, 0x0, 0x8, 0x8, 0x1, 0x6, 0x7, 0x4, 0x7, 0x5a8, 0x0, 0x2, 0x5, 0x2, 0x800, 0x5, 0x8000000, 0xc8e7, 0x8000, 0x272, 0x8, 0x0, 0x0, 0x4, 0x400, 0x7, 0x5, 0xfffffffd, 0x0, 0x1, 0x0, 0x1ff, 0x1f, 0x80000001, 0x574, 0x7fffffff, 0x200, 0xe8, 0x1, 0x0, 0x469, 0xcc, 0x6, 0x4, 0x200, 0x1f19e668, 0x0, 0x0, 0x2, 0x3, 0xff73, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0xffffffff, 0x80000001, 0x7, 0x200, 0x100, 0x200, 0x4, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x0, 0x3f0, 0x7, 0x3, 0xfffffff9, 0x2, 0x57, 0x5, 0x40, 0x22b0, 0x3ff, 0x6, 0x3, 0x7f8, 0x0, 0x7fffffff, 0x0, 0x80000001, 0x0, 0x0, 0x1f, 0x0, 0x9, 0x0, 0x2, 0x81, 0x0, 0x6, 0x400, 0x4, 0x100, 0xffffffff, 0x5, 0x2, 0x9, 0x9, 0x8, 0x1, 0x8000, 0x0, 0x2, 0x3ff, 0x4, 0xff, 0x4, 0x5, 0x0, 0x7ff, 0x8, 0x0, 0x3, 0x0, 0xe34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5c40, 0x0, 0x2, 0x200, 0x517, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7ff, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2, 0xcdf, 0x2, 0x4, 0x7, 0x3, 0x0, 0x0, 0x90d7, 0x1, 0x80000001, 0x3, 0x0, 0x7, 0x0, 0x6, 0x1ff, 0x8000, 0x0, 0x0, 0x0, 0x7, 0x6, 0xe2, 0x0, 0x0, 0x0, 0x4, 0x9, 0xc6, 0x1, 0xa2e9, 0x0, 0x9, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x1, 0x6, 0x5, 0x0, 0x5b2, 0x0, 0x1000, 0x0, 0x3, 0x5d7, 0x1, 0x1ff, 0xa22b, 0x3, 0x5, 0x1000, 0x0, 0xbff, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x44cd140, 0x0, 0x0, 0x3fff800, 0x0, 0x0, 0x0, 0x9, 0x6, 0x40, 0x6, 0x1ff, 0xff, 0x3, 0x7ff, 0x80, 0x6, 0x80000000, 0x3ff, 0x2, 0x6, 0x80000000, 0x1f, 0x3, 0x5, 0x1, 0x6, 0x2, 0xffffff01, 0x8001, 0x401, 0x100, 0x1, 0x9, 0x3, 0x0, 0x8, 0x2, 0x273d, 0xffffffc3, 0x7, 0x80000001, 0x8, 0x100, 0x4, 0x101, 0x6, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x9, 0x20, 0xffffff45, 0x5, 0x101, 0x6, 0x8, 0x9, 0x5, 0x0, 0x5, 0x200, 0x1ff, 0x4, 0x9, 0x401, 0x100, 0x9, 0x80, 0x446e, 0x1, 0x400, 0x6, 0xfffffffb, 0x0, 0x28a, 0x9, 0x0, 0x0, 0x1f, 0x100, 0x1, 0x101, 0x6, 0xffff, 0x62c, 0x9, 0x9, 0xffffff7f, 0x1, 0x2, 0x5, 0x9, 0x1f, 0x7b, 0xfffffff8, 0x5124, 0x4, 0xa1, 0x6, 0xffa, 0x3, 0x0, 0x3f, 0x200, 0x6, 0x3, 0x8, 0x822, 0x5b]}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x3, 0xa15b, 0xd8, {0x1f, 0x0, 0xa7, 0x1, 0x3ff, 0x2}, {0x0, 0x2, 0x2, 0xfe00, 0x0, 0xfff0}, 0x31, 0x4, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc01, 0xffffffffffffffff, 0x2, 0x8, 0x3f, {0xc5, 0x0, 0xff02, 0x7cc, 0x1, 0x10000}, {0x1, 0x0, 0x81, 0x80, 0xdbd4, 0x6}, 0xffff, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc7f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x0, 0x5, 0x1, {0x0, 0x0, 0x7b9, 0x9, 0x80, 0x4}, {0x6, 0x1, 0x0, 0x4, 0x5, 0x8}, 0x800, 0x0, 0xfffffffe}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_PEAKRATE64={0xc}]]}, {0xd8, 0x6, "504ddfd7b93d7a32dddf0e494bde9a926770f2f8c74bce51effe05329b9e049505948861b574dc016047d46463593ff6a01ec5e7c54e432a3d4c7746b6681cd82d7315c8ad2f68e1aa305bf6164b9a1a8ea107203e29f83d563729947f828f6e0d3146a4c1d584f1f7c6b15e060db38dc24c2608dbc65bec23b4305cf03b26edf8f3e364e87b415cbe4f1fd4c264cc82958b84a3b01f5ec65ad2bd1cf7fcf5a476db5eb67b7f85feccb7985c12d6859ddd19ad0d6ef41f36313921827c389b018c3d321bc7f181e34655ba441af84f36e4f0b855"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x16d0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0x4eca, 0x33, 0x6}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8000f28, 0x0) splice(r7, 0x0, r5, 0x0, 0x100000000007f, 0x0) write(r5, 0x0, 0x0) bind$vsock_stream(r4, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) shutdown(0xffffffffffffffff, 0x1) listen(r4, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x28, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100)=[{r10}], 0x1, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0x80000001, 0xf3, 0x8, r2, 0x0, '\x00', 0x0, r3, 0x2, 0x5, 0x2, 0xa}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000200), &(0x7f0000000180)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) 30.954037388s ago: executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, 0x0, 0x0, 0x6400c0c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000030000000900010073797a310000000028000000000a01040000000000000000030000000900010073797a30000000000800024000000001140000001100010000000000000000000000000aaed6d69edde21d00ec3761d1b48d9594400e50ff73d926a1716e9f0d4dd7e21b4d8a53ca1273d8110361e34f776af4ec3f16cbd480dc79e2d12f8b28391e45ba257bc607a66add4574a06fceb69becd309cd6e2ce95ca1eccd95a47e442cc84bacbea3cf07506056be173442c4"], 0x70}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x12, [@private=0xa010102, @local, @local, @local]}, @generic={0x7, 0x5, "2535af"}, @timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x1, [{@broadcast, 0x8005}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5100}, {@remote, 0x6}]}, @rr={0x7, 0x7, 0x0, [@empty]}]}}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1801027caf8c975ce47281088e94edb9290ad9d6cf6fc552cd68dfd9e9546df2030000"], 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) ppoll(&(0x7f00000003c0)=[{r1, 0x8000}, {r1, 0x154}, {r0, 0x8000}, {r5, 0x5110}, {r2, 0xb056}, {r1, 0x1}, {r1, 0x10}], 0x7, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440), 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x20, 0x0) r6 = socket(0x11, 0x80a, 0x0) sendto$rxrpc(r6, &(0x7f0000000300)="08c4d1a79a54ad74fe5015c4363c2cad7ae15ff8aae7fd3aa03bbebe43c39207579f7664cfca6c698edfd1e826775873db3939513cfbfb8ab8d060ffe3bf5cb7176f6190a2315a225fde3af3c47ed5112f2b51b2de116b29b6a8792eaa6af0cb8ba4d753e822a56768cdaecc96046838b8da766589d01e21a7b2af16c76a243a45995560494c42aa28d516b6b838ecb648b22a32edc62c5123565196f8c062a968be54127ef4b0a19c066dffcd", 0xad, 0xc1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) 30.907563465s ago: executing program 3: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt(r1, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) 30.018953644s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) 4.486560995s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 0s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x57c, 0x30, 0x800, 0x0, 0x0, {0x9}, [{0x568, 0x1, [@m_police={0x564, 0x0, 0x0, 0x0, {{0xb}, {0x464, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x965}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc1}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa2, 0x6, 0x0, 0x0, 0x7, 0xfff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44775b92, 0xfffffc01, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6cff5218, 0xfffffffd, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x927, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd58, 0x40, 0x1f, 0x2, 0x5df, 0xffffffff, 0xc2c, 0x40000000, 0x0, 0x0, 0xff, 0x2, 0xff, 0xfff, 0x81, 0x101, 0xd8e, 0xffff, 0x4, 0x9, 0x0, 0x3f, 0x7, 0x20, 0x6, 0xffff0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x1000, 0x3, 0x4, 0x6, 0xd51, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x80000001, 0x9, 0x0, 0x0, 0x6, 0x0, 0xbd3, 0x0, 0x0, 0x0, 0x0, 0x991, 0xfed8, 0xffffffff, 0x6df965b1, 0x400, 0xfff, 0x0, 0x0, 0x0, 0x8b5c556, 0x8, 0x80000001, 0x3ff, 0xc09, 0x9, 0x80000001, 0xb995, 0x2, 0x0, 0x8001, 0x3, 0x8000, 0x800, 0x70e, 0x0, 0x6, 0x3, 0xfff, 0x0, 0x6, 0x0, 0x0, 0x3b3, 0x0, 0x0, 0x20, 0xf726, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x3ae5, 0x1, 0x0, 0x7, 0x2, 0x0, 0x201e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x3, 0x2, 0x8ca, 0xe7b, 0x353fb285, 0xfff, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x87, 0x7, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd079, 0xffffffffffffffff, 0x1, 0x20, 0x8b0, {0x0, 0x2, 0x0, 0x6, 0x4}, {0x0, 0x0, 0x0, 0x9, 0xea12, 0xc4fe}, 0x9, 0x764c, 0x100}}], []]}, {0xd8, 0x6, "504ddfd7b93d7a32dddf0e494bde9a926770f2f8c74bce51effe05329b9e049505948861b574dc016047d46463593ff6a01ec5e7c54e432a3d4c7746b6681cd82d7315c8ad2f68e1aa305bf6164b9a1a8ea107203e29f83d563729947f828f6e0d3146a4c1d584f1f7c6b15e060db38dc24c2608dbc65bec23b4305cf03b26edf8f3e364e87b415cbe4f1fd4c264cc82958b84a3b01f5ec65ad2bd1cf7fcf5a476db5eb67b7f85feccb7985c12d6859ddd19ad0d6ef41f36313921827c389b018c3d321bc7f181e34655ba441af84f36e4f0b855"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x57c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) write(r3, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) shutdown(r5, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. 2024/06/14 09:10:25 fuzzer started 2024/06/14 09:10:25 dialing manager at 10.128.0.169:30016 [ 58.459843][ T5088] cgroup: Unknown subsys name 'net' [ 58.607254][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/06/14 09:10:27 starting 5 executor processes [ 59.846092][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.859830][ T5095] syz-executor (5095) used greatest stack depth: 19600 bytes left [ 60.772939][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.781615][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.800083][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.807761][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.815267][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.820719][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.823574][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.836392][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.837368][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.845594][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.851360][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.866103][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.869378][ T5126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.881625][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.881653][ T5126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.888688][ T5122] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.896813][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.903891][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.910793][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.924088][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.924382][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.932236][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.940009][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.953631][ T4489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.960997][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.970126][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.983286][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.995519][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.004794][ T5126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.012345][ T4489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.457696][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 61.527022][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 61.558822][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 61.761173][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.768615][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.776246][ T5112] bridge_slave_0: entered allmulticast mode [ 61.783984][ T5112] bridge_slave_0: entered promiscuous mode [ 61.821926][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.829221][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.836878][ T5112] bridge_slave_1: entered allmulticast mode [ 61.844405][ T5112] bridge_slave_1: entered promiscuous mode [ 61.851376][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 61.861726][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 61.884008][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.891199][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.898489][ T5108] bridge_slave_0: entered allmulticast mode [ 61.905451][ T5108] bridge_slave_0: entered promiscuous mode [ 61.945947][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.953572][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.960969][ T5110] bridge_slave_0: entered allmulticast mode [ 61.968580][ T5110] bridge_slave_0: entered promiscuous mode [ 61.976169][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.983516][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.990829][ T5108] bridge_slave_1: entered allmulticast mode [ 61.997915][ T5108] bridge_slave_1: entered promiscuous mode [ 62.019520][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.032468][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.080111][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.087599][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.094986][ T5110] bridge_slave_1: entered allmulticast mode [ 62.101892][ T5110] bridge_slave_1: entered promiscuous mode [ 62.132180][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.184138][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.215010][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.249210][ T5112] team0: Port device team_slave_0 added [ 62.258336][ T5112] team0: Port device team_slave_1 added [ 62.281443][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.304588][ T5108] team0: Port device team_slave_0 added [ 62.355691][ T5108] team0: Port device team_slave_1 added [ 62.384994][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.392133][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.399507][ T5121] bridge_slave_0: entered allmulticast mode [ 62.406503][ T5121] bridge_slave_0: entered promiscuous mode [ 62.416570][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.423746][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.430947][ T5121] bridge_slave_1: entered allmulticast mode [ 62.438456][ T5121] bridge_slave_1: entered promiscuous mode [ 62.447794][ T5110] team0: Port device team_slave_0 added [ 62.457611][ T5110] team0: Port device team_slave_1 added [ 62.486710][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.494238][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.520594][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.532111][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.539417][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.546841][ T5109] bridge_slave_0: entered allmulticast mode [ 62.553897][ T5109] bridge_slave_0: entered promiscuous mode [ 62.591381][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.598541][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.625251][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.637232][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.649174][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.675451][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.686782][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.694203][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.701325][ T5109] bridge_slave_1: entered allmulticast mode [ 62.708330][ T5109] bridge_slave_1: entered promiscuous mode [ 62.729925][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.750176][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.757226][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.783178][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.817487][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.837512][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.844551][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.870802][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.884221][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.891182][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.917594][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.963953][ T5119] Bluetooth: hci1: command tx timeout [ 63.009749][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.021610][ T5121] team0: Port device team_slave_0 added [ 63.031176][ T5121] team0: Port device team_slave_1 added [ 63.045569][ T5119] Bluetooth: hci3: command tx timeout [ 63.055969][ T5119] Bluetooth: hci2: command tx timeout [ 63.055990][ T4489] Bluetooth: hci0: command tx timeout [ 63.058689][ T5110] hsr_slave_0: entered promiscuous mode [ 63.073392][ T5110] hsr_slave_1: entered promiscuous mode [ 63.096040][ T5112] hsr_slave_0: entered promiscuous mode [ 63.103792][ T5112] hsr_slave_1: entered promiscuous mode [ 63.109854][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.117743][ T5112] Cannot create hsr debugfs directory [ 63.123249][ T5119] Bluetooth: hci4: command tx timeout [ 63.131126][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.165346][ T5108] hsr_slave_0: entered promiscuous mode [ 63.171543][ T5108] hsr_slave_1: entered promiscuous mode [ 63.181589][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.189246][ T5108] Cannot create hsr debugfs directory [ 63.260214][ T5109] team0: Port device team_slave_0 added [ 63.269770][ T5109] team0: Port device team_slave_1 added [ 63.276167][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.284186][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.310196][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.363813][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.370801][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.397169][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.450624][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.457878][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.483942][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.522583][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.529577][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.556131][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.671020][ T5121] hsr_slave_0: entered promiscuous mode [ 63.677510][ T5121] hsr_slave_1: entered promiscuous mode [ 63.685264][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.692847][ T5121] Cannot create hsr debugfs directory [ 63.775357][ T5109] hsr_slave_0: entered promiscuous mode [ 63.781945][ T5109] hsr_slave_1: entered promiscuous mode [ 63.788647][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.796295][ T5109] Cannot create hsr debugfs directory [ 63.999955][ T5112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.011550][ T5112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.035722][ T5112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.057112][ T5112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.135647][ T5110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.146860][ T5110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.157711][ T5110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.178159][ T5110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.246273][ T5108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.285000][ T5108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.301874][ T5108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.319289][ T5108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.365515][ T5121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.376923][ T5121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.399176][ T5121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.412449][ T5121] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.488447][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.521197][ T5109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.532390][ T5109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.546215][ T5109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.559384][ T5109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.632522][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.660890][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.668172][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.679595][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.686749][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.718708][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.762896][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.801714][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.808843][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.847745][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.854904][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.938807][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.971895][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.988223][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.043833][ T5119] Bluetooth: hci1: command tx timeout [ 65.051211][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.117174][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.123523][ T5119] Bluetooth: hci2: command tx timeout [ 65.124254][ T4489] Bluetooth: hci3: command tx timeout [ 65.129155][ T5119] Bluetooth: hci0: command tx timeout [ 65.145230][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.152376][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.169108][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.176280][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.204936][ T5119] Bluetooth: hci4: command tx timeout [ 65.229875][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.237061][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.264339][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.281948][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.296644][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.303851][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.372520][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.412922][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.420091][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.459388][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.519533][ T5121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.532334][ T5121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.548900][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.556077][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.581012][ T5112] veth0_vlan: entered promiscuous mode [ 65.616500][ T5112] veth1_vlan: entered promiscuous mode [ 65.757372][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.807295][ T5112] veth0_macvtap: entered promiscuous mode [ 65.840134][ T5112] veth1_macvtap: entered promiscuous mode [ 65.864969][ T5110] veth0_vlan: entered promiscuous mode [ 65.951996][ T5110] veth1_vlan: entered promiscuous mode [ 65.990446][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.045676][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.077243][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.089216][ T5112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.111232][ T5112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.146223][ T5112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.157994][ T5112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.171604][ T5110] veth0_macvtap: entered promiscuous mode [ 66.197412][ T5110] veth1_macvtap: entered promiscuous mode [ 66.275645][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.285827][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.297959][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.309630][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.321995][ T5108] veth0_vlan: entered promiscuous mode [ 66.341156][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.351791][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.363572][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.381240][ T5108] veth1_vlan: entered promiscuous mode [ 66.421144][ T5110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.430752][ T5110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.439782][ T5110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.448685][ T5110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.508846][ T5121] veth0_vlan: entered promiscuous mode [ 66.529962][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.538917][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.571218][ T5121] veth1_vlan: entered promiscuous mode [ 66.620972][ T5108] veth0_macvtap: entered promiscuous mode [ 66.659362][ T5108] veth1_macvtap: entered promiscuous mode [ 66.673157][ T5109] veth0_vlan: entered promiscuous mode [ 66.680530][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.690990][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.712796][ T5109] veth1_vlan: entered promiscuous mode [ 66.719246][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.745437][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.781600][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.800332][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.810888][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.822979][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.837131][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.860432][ T5121] veth0_macvtap: entered promiscuous mode [ 66.872723][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.886947][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.897118][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.907586][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.919677][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.957500][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.958036][ T5121] veth1_macvtap: entered promiscuous mode [ 66.971510][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.980842][ T5108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.992354][ T5108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.004821][ T5108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.015228][ T5108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.102299][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.117211][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.128081][ T5119] Bluetooth: hci1: command tx timeout [ 67.130462][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.149219][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.159108][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.183054][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.199830][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.204125][ T5119] Bluetooth: hci0: command tx timeout [ 67.207685][ T4489] Bluetooth: hci3: command tx timeout [ 67.212432][ T5119] Bluetooth: hci2: command tx timeout [ 67.229344][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.249460][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.261375][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.272132][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.282082][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.292985][ T5119] Bluetooth: hci4: command tx timeout [ 67.299893][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.311202][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.341786][ T5121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.351681][ T5121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.362428][ T5121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.372557][ T5121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.426539][ T5109] veth0_macvtap: entered promiscuous mode [ 67.460876][ T5109] veth1_macvtap: entered promiscuous mode [ 67.499165][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.525097][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.568575][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.582372][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.599152][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.622582][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.632806][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.644284][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.654971][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.666634][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.679003][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.748603][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.751297][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.772108][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.774319][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.782820][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.799915][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.809809][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.821655][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.834678][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.853991][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.867853][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.900461][ T5109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.921144][ T5109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.937915][ T5109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.949386][ T5109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.970841][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.991626][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.127367][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.149600][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.227071][ T5208] Bluetooth: MGMT ver 1.22 [ 68.265425][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.291741][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.368013][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.401793][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.032042][ T5232] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 69.068694][ T5232] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 69.100528][ T5232] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 69.136254][ T5235] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 69.149458][ T5235] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.159772][ T5235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.167240][ T5235] IPv6: NLM_F_CREATE should be set when creating new route [ 69.174679][ T5235] IPv6: NLM_F_CREATE should be set when creating new route [ 69.181919][ T5235] IPv6: NLM_F_CREATE should be set when creating new route [ 69.204564][ T4489] Bluetooth: hci1: command tx timeout [ 69.212585][ T5232] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 69.285586][ T4489] Bluetooth: hci2: command tx timeout [ 69.291159][ T4489] Bluetooth: hci3: command tx timeout [ 69.293292][ T5126] Bluetooth: hci0: command tx timeout [ 69.326872][ T5243] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.360222][ T5243] netlink: 6332 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.379771][ T5126] Bluetooth: hci4: command tx timeout [ 70.197064][ T5272] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.233750][ T5272] netlink: 6332 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.842112][ T5307] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.873913][ T5306] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.933241][ T5306] netlink: 6332 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.169221][ T5324] netlink: del zone limit has 4 unknown bytes [ 71.451394][ T5126] Bluetooth: hci4: command 0x0405 tx timeout [ 71.468846][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.481775][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.735546][ T5347] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.753932][ T5347] netlink: 6332 bytes leftover after parsing attributes in process `syz-executor.4'. [ 72.646731][ T5369] syz-executor.0[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.646875][ T5369] syz-executor.0[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.666190][ T5369] syz-executor.0[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.708671][ T5369] syz-executor.0[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.056497][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.139591][ T5387] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.165033][ T5387] hsr_slave_0: entered allmulticast mode [ 73.516547][ T5399] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 74.748053][ T5457] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 74.756471][ T5457] __nla_validate_parse: 1 callbacks suppressed [ 74.756487][ T5457] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 75.571303][ T5500] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 75.592811][ T5500] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.751399][ T5553] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 77.492551][ T5574] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 77.520971][ T5578] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.178335][ T5604] Zero length message leads to an empty skb [ 78.528878][ T5614] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 80.399952][ T5706] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.432287][ T5713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.135935][ T5750] hsr0: entered promiscuous mode [ 81.161581][ T5752] hsr_slave_0: left promiscuous mode [ 81.185991][ T5752] hsr_slave_1: left promiscuous mode [ 81.280959][ T5752] hsr0 (unregistering): left promiscuous mode [ 81.704637][ T785] cfg80211: failed to load regulatory.db [ 82.111248][ T5795] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 82.132776][ T5795] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 82.394067][ T5809] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 82.694204][ T5827] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 82.709114][ T5827] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.868250][ T5890] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.896969][ T5890] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.930820][ T5894] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.686676][ T6038] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 86.711443][ T6038] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 86.742720][ T6038] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.597106][ T6082] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 87.962660][ T6100] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 88.011389][ T6100] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.212634][ T6101] "syz-executor.1" (6101) uses obsolete ecb(arc4) skcipher [ 90.312326][ T6215] syz-executor.4 (6215) used obsolete PPPIOCDETACH ioctl [ 90.416841][ T6222] netlink: 212912 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.437104][ T6224] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 90.444875][ T6222] openvswitch: netlink: IP tunnel dst address not specified [ 90.649075][ T6237] netlink: 3084 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.690360][ T6237] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 90.742897][ T6237] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.051490][ T6259] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.541397][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.102321][ T6370] IPv6: Can't replace route, no match found [ 93.605309][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.417032][ T6433] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.638187][ T6494] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 95.657426][ T6494] macsec1: entered promiscuous mode [ 95.676393][ T6494] macsec1: entered allmulticast mode [ 95.690055][ T6494] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 95.722641][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.305572][ T6527] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 96.342750][ T6527] macsec1: entered promiscuous mode [ 96.363969][ T6527] macsec1: entered allmulticast mode [ 96.370118][ T6527] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 97.787997][ T6607] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 97.813784][ T6607] macsec1: entered promiscuous mode [ 97.832326][ T6607] macsec1: entered allmulticast mode [ 97.852871][ T6607] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 98.043341][ T6619] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 98.096498][ T6619] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 98.448153][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.476542][ T6636] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 100.355567][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.364796][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.372673][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.384770][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.394361][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.401804][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.508641][ T5109] syz-executor.3 (5109) used greatest stack depth: 19504 bytes left [ 100.710274][ T1106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.846633][ T1106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.951953][ T1106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.090042][ T1106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.294041][ T1106] bridge_slave_1: left allmulticast mode [ 101.299954][ T1106] bridge_slave_1: left promiscuous mode [ 101.332297][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.409513][ T1106] bridge_slave_0: left allmulticast mode [ 101.428630][ T1106] bridge_slave_0: left promiscuous mode [ 101.435056][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.517694][ T6798] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 101.533504][ T6798] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.962584][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.985574][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.001915][ T1106] bond0 (unregistering): Released all slaves [ 102.021364][ T1106] bond1 (unregistering): Released all slaves [ 102.045922][ T6737] chnl_net:caif_netlink_parms(): no params data found [ 102.493328][ T5119] Bluetooth: hci3: command tx timeout [ 102.624470][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.655444][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.679411][ T6737] bridge_slave_0: entered allmulticast mode [ 102.700282][ T6737] bridge_slave_0: entered promiscuous mode [ 102.805484][ T6846] Illegal XDP return value 4294967274 on prog (id 131) dev N/A, expect packet loss! [ 102.854927][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.893292][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.915838][ T6737] bridge_slave_1: entered allmulticast mode [ 102.938756][ T6737] bridge_slave_1: entered promiscuous mode [ 103.170169][ T1106] hsr_slave_0: left promiscuous mode [ 103.195500][ T1106] hsr_slave_1: left promiscuous mode [ 103.248125][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.271057][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.296875][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.321565][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.350997][ T1106] veth1_macvtap: left promiscuous mode [ 103.357075][ T1106] veth0_macvtap: left promiscuous mode [ 103.363814][ T1106] veth1_vlan: left promiscuous mode [ 103.369431][ T1106] veth0_vlan: left promiscuous mode [ 103.811151][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 103.844963][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 104.130160][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.203895][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.412446][ T6737] team0: Port device team_slave_0 added [ 104.448850][ T6737] team0: Port device team_slave_1 added [ 104.564155][ T5119] Bluetooth: hci3: command tx timeout [ 104.664794][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.668077][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.722593][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.818338][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.857176][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.888321][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.947375][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.211663][ T6737] hsr_slave_0: entered promiscuous mode [ 105.220682][ T6737] hsr_slave_1: entered promiscuous mode [ 105.260343][ T6737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.292128][ T6737] Cannot create hsr debugfs directory [ 105.383523][ T6947] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.465920][ T6951] xt_NFQUEUE: number of total queues is 0 [ 106.165045][ T6986] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.263371][ T6737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.288943][ T6737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.309646][ T6737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.328705][ T6737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.559102][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.614711][ T6737] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.643337][ T5119] Bluetooth: hci3: command tx timeout [ 106.647869][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.655909][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.737141][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.744448][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.879176][ T6737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.008467][ T7017] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.567039][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.792506][ T6737] veth0_vlan: entered promiscuous mode [ 107.821450][ T7063] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.850168][ T6737] veth1_vlan: entered promiscuous mode [ 107.988070][ T6737] veth0_macvtap: entered promiscuous mode [ 107.990650][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 108.028002][ T6737] veth1_macvtap: entered promiscuous mode [ 108.079116][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.111772][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.148180][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.193860][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.214976][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.257919][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.291440][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.323506][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.342580][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.366935][ T7084] ·U*: renamed from vxcan1 (while UP) [ 108.415332][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.443128][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.491847][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.541300][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.592078][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.640118][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.684225][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.715465][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.723394][ T5119] Bluetooth: hci3: command tx timeout [ 108.749770][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.771676][ T6737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.787445][ T6737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.797704][ T6737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.807360][ T6737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.203840][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.238696][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.369324][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.433621][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.444893][ T7127] bridge: RTM_NEWNEIGH with invalid ether address [ 110.768859][ T7193] tun0: tun_chr_ioctl cmd 1074025684 [ 111.223654][ T7203] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.420956][ T7218] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.592554][ T7227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.938912][ T7243] tipc: Started in network mode [ 111.948086][ T7243] tipc: Node identity 2007ff, cluster identity 4711 [ 111.956974][ T7243] tipc: Node number set to 2099199 [ 111.969352][ T975] tipc: Subscription rejected, illegal request [ 112.250570][ T7248] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.607625][ T5126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.636467][ T5126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.645431][ T5126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.664215][ T5126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.678283][ T5126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.687126][ T5126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.786614][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.922879][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.977861][ T975] tipc: Subscription rejected, illegal request [ 113.042765][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.267284][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.658451][ T7256] chnl_net:caif_netlink_parms(): no params data found [ 113.742490][ T7301] tipc: Started in network mode [ 113.754092][ T7301] tipc: Node identity 2007ff, cluster identity 4711 [ 113.764637][ T7301] tipc: Node number set to 2099199 [ 113.782281][ T2914] tipc: Subscription rejected, illegal request [ 113.975907][ T12] bridge_slave_1: left allmulticast mode [ 113.981797][ T12] bridge_slave_1: left promiscuous mode [ 113.988845][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.005205][ T12] bridge_slave_0: left allmulticast mode [ 114.019803][ T12] bridge_slave_0: left promiscuous mode [ 114.026102][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.725720][ T5126] Bluetooth: hci4: command tx timeout [ 114.754805][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.770295][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.783409][ T12] bond0 (unregistering): Released all slaves [ 114.872741][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.882504][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.894932][ T7256] bridge_slave_0: entered allmulticast mode [ 114.902377][ T7256] bridge_slave_0: entered promiscuous mode [ 114.976517][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.995754][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.002951][ T7256] bridge_slave_1: entered allmulticast mode [ 115.021316][ T7256] bridge_slave_1: entered promiscuous mode [ 115.070579][ T1106] tipc: Subscription rejected, illegal request [ 115.269307][ T7256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.369704][ T7256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.716297][ T7256] team0: Port device team_slave_0 added [ 115.765212][ T7256] team0: Port device team_slave_1 added [ 115.858118][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.873730][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.914032][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.927761][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.030250][ T12] veth1_macvtap: left promiscuous mode [ 116.043388][ T12] veth0_macvtap: left promiscuous mode [ 116.049063][ T12] veth1_vlan: left promiscuous mode [ 116.064779][ T12] veth0_vlan: left promiscuous mode [ 116.432826][ T7401] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.807295][ T5126] Bluetooth: hci4: command tx timeout [ 116.999995][ T12] team0 (unregistering): Port device team_slave_1 removed [ 117.038730][ T12] team0 (unregistering): Port device team_slave_0 removed [ 117.096481][ T7427] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.428345][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.451638][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.486189][ T7256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.527541][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.556440][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.656862][ T7256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.880538][ T7256] hsr_slave_0: entered promiscuous mode [ 117.896264][ T7256] hsr_slave_1: entered promiscuous mode [ 117.939293][ T7256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.977970][ T7256] Cannot create hsr debugfs directory [ 117.993248][ T7453] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.893435][ T5126] Bluetooth: hci4: command tx timeout [ 119.215029][ T7256] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.247325][ T7256] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.329333][ T7256] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.398382][ T7256] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.770017][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.867627][ T7256] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.905640][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.912854][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.970352][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.977538][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.188816][ T7256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.819702][ T7256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.973406][ T5126] Bluetooth: hci4: command tx timeout [ 120.978518][ T7256] veth0_vlan: entered promiscuous mode [ 121.039782][ T7256] veth1_vlan: entered promiscuous mode [ 121.155405][ T7256] veth0_macvtap: entered promiscuous mode [ 121.185544][ T7256] veth1_macvtap: entered promiscuous mode [ 121.239613][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.254301][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.266200][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.284304][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.313731][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.343125][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.383140][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.399042][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.425428][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.466400][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.522113][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.562959][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.579488][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.593963][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.605117][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.615373][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.640715][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.668939][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.728600][ T7256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.776574][ T7256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.824728][ T7256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.853247][ T7256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.068288][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.139023][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.218738][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.234178][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.781788][ T7859] xt_ecn: cannot match TCP bits for non-tcp packets [ 125.986380][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.187758][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.384614][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.828143][ T7935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.289686][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.702403][ T7998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.811058][ T8010] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.113826][ T8030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.171340][ T8034] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.549846][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.646955][ T8139] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 130.111673][ T8171] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 131.094039][ T8246] __nla_validate_parse: 20 callbacks suppressed [ 131.094061][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.120273][ T8250] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.151797][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.317945][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.580832][ T8284] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 131.616735][ T8285] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.732360][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.762355][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.781180][ T8296] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.118064][ T8319] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.129076][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.135210][ T8325] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 132.890781][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.898518][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.531944][ T8436] batadv1: entered promiscuous mode [ 133.560494][ T8436] batadv1: entered allmulticast mode [ 134.064929][ T8475] batadv1: entered promiscuous mode [ 134.070188][ T8475] batadv1: entered allmulticast mode [ 134.680733][ T8520] batadv1: entered promiscuous mode [ 134.689554][ T8520] batadv1: entered allmulticast mode [ 134.992392][ T8545] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 135.151729][ T8553] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 135.277941][ T8562] batadv1: entered promiscuous mode [ 135.300714][ T8562] batadv1: entered allmulticast mode [ 135.583730][ T8585] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 135.950197][ T8619] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 136.877740][ T8688] __nla_validate_parse: 19 callbacks suppressed [ 136.877760][ T8688] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.149716][ T8763] syzkaller0: entered promiscuous mode [ 138.182887][ T8763] syzkaller0: entered allmulticast mode [ 140.617816][ T8901] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.120557][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.130307][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.153627][ T8931] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.648600][ T8968] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.128812][ T9003] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.508999][ T9037] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.886889][ T9065] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.067404][ T9078] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.341936][ T9098] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.507559][ T9107] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.723424][ T9123] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.778738][ T9126] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.007569][ T9137] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.129364][ T9147] Bluetooth: MGMT ver 1.22 [ 144.199672][ T9150] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.818028][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.827207][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.882284][ T9268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.079519][ T9283] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 146.120663][ T9283] bond1: entered promiscuous mode [ 146.139508][ T9283] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 146.157666][ T9283] bond1: (slave ip6gretap1): making interface the new active one [ 146.165776][ T9283] ip6gretap1: entered promiscuous mode [ 146.175254][ T9283] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 146.201693][ T9283] syz-executor.3 (9283) used greatest stack depth: 18896 bytes left [ 146.506940][ T9311] Cannot find add_set index 0 as target [ 147.248148][ T9364] __nla_validate_parse: 14 callbacks suppressed [ 147.248167][ T9364] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.133121][ T9416] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.151110][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.228023][ T9419] bond1 (unregistering): Released all slaves [ 148.598046][ T9444] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.073418][ T9473] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.352566][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.430307][ T9491] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.899054][ T9526] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.370233][ T9553] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.297046][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.662405][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.819523][ T9671] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.674733][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.727561][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.602571][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.667436][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.622203][ T9890] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 157.633378][ T9890] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.641638][ T9890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.648955][ T9890] IPv6: NLM_F_CREATE should be set when creating new route [ 157.656262][ T9890] IPv6: NLM_F_CREATE should be set when creating new route [ 157.663537][ T9890] IPv6: NLM_F_CREATE should be set when creating new route [ 158.183708][ T9922] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 158.192075][ T9922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.053344][T10148] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.938852][T10182] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.778466][T10209] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.759256][T10235] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.738216][T10267] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.373400][T10295] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.968102][T10321] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.186464][T10353] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.383830][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.392462][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.400802][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.409897][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.417820][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 174.431991][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.225549][T10377] Bluetooth: MGMT ver 1.22 [ 175.364299][T10379] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.485348][ T5126] Bluetooth: hci0: command tx timeout [ 177.446187][T10406] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.563056][ T5119] Bluetooth: hci0: command tx timeout [ 180.250994][T10436] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.643189][ T5119] Bluetooth: hci0: command 0x040f tx timeout [ 181.956193][T10462] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.723089][ T5119] Bluetooth: hci0: command 0x040f tx timeout [ 183.510273][T10485] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.956579][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.319143][T10510] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.771087][ T29] audit: type=1804 audit(1718356352.059:2): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1840182785/syzkaller.yndWRM/352/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 185.257687][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.312221][T10537] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.165644][ T4489] Bluetooth: hci2: command 0x0406 tx timeout [ 186.173235][ T5119] Bluetooth: hci1: command 0x0406 tx timeout [ 186.429021][ T29] audit: type=1804 audit(1718356353.719:3): pid=10555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2900364073/syzkaller.np56cb/299/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 186.903643][T10565] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.486604][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.992078][ T29] audit: type=1804 audit(1718356355.279:4): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1840182785/syzkaller.yndWRM/363/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 188.666935][T10595] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.048763][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.062564][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.072610][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.081083][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.089642][ T5116] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 190.104134][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.705340][ T4489] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.714905][ T4489] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.722615][ T4489] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.731626][ T4489] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.740499][ T4489] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 190.749317][ T4489] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.163508][ T5116] Bluetooth: hci5: command tx timeout [ 192.803186][ T5116] Bluetooth: hci6: command tx timeout [ 194.243356][ T5116] Bluetooth: hci5: command 0x041b tx timeout [ 194.338697][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348271][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.893795][ T5126] Bluetooth: hci6: command 0x041b tx timeout [ 196.323643][ T4489] Bluetooth: hci5: command 0x041b tx timeout [ 196.964130][ T4489] Bluetooth: hci6: command 0x041b tx timeout [ 198.403541][ T4489] Bluetooth: hci5: command 0x041b tx timeout [ 199.043153][ T4489] Bluetooth: hci6: command 0x041b tx timeout [ 200.483404][ T4489] Bluetooth: hci5: command 0x041b tx timeout [ 201.123211][ T4489] Bluetooth: hci6: command 0x041b tx timeout [ 220.018857][ T5126] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.034500][ T5126] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.042483][ T5126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.050730][ T5126] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.059435][ T5126] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.067030][ T5126] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 222.163186][ T4489] Bluetooth: hci7: command tx timeout [ 224.243772][ T4489] Bluetooth: hci7: command tx timeout [ 224.360347][ T5126] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 224.369386][ T5126] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 224.377406][ T5126] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 224.387805][ T5126] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 224.395888][ T5126] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 224.403779][ T5126] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 226.323223][ T5126] Bluetooth: hci7: command tx timeout [ 226.485211][ T5126] Bluetooth: hci8: command tx timeout [ 227.123109][ T5126] Bluetooth: hci3: command 0x0406 tx timeout [ 228.403520][ T4489] Bluetooth: hci7: command tx timeout [ 228.575121][ T4489] Bluetooth: hci8: command tx timeout [ 230.643178][ T4489] Bluetooth: hci8: command tx timeout [ 232.728066][ T4489] Bluetooth: hci8: command tx timeout [ 237.366895][ T5126] Bluetooth: hci4: command 0x0405 tx timeout [ 239.145220][ T4489] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 239.159483][ T4489] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 239.167314][ T4489] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 239.186531][ T4489] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 239.197432][ T4489] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 239.207599][ T4489] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 241.283225][ T4489] Bluetooth: hci9: command tx timeout [ 243.363227][ T4489] Bluetooth: hci9: command tx timeout [ 245.443161][ T4489] Bluetooth: hci9: command tx timeout [ 247.523255][ T4489] Bluetooth: hci9: command tx timeout [ 255.118174][ T5126] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 255.126966][ T5126] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 255.134968][ T5126] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 255.143526][ T5126] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 255.153376][ T5126] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 255.160770][ T5126] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 255.739600][ T4489] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 255.753212][ T4489] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 255.761627][ T4489] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 255.771369][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.771453][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.797576][ T4489] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 255.805529][ T4489] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 255.812905][ T4489] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 257.203167][ T5126] Bluetooth: hci10: command tx timeout [ 257.850401][ T5126] Bluetooth: hci11: command tx timeout [ 259.293066][ T5126] Bluetooth: hci10: command tx timeout [ 259.923223][ T5126] Bluetooth: hci11: command tx timeout [ 261.381743][ T5126] Bluetooth: hci10: command tx timeout [ 262.003207][ T5126] Bluetooth: hci11: command tx timeout [ 263.443269][ T5126] Bluetooth: hci10: command tx timeout [ 264.083131][ T5126] Bluetooth: hci11: command tx timeout [ 285.251508][ T4489] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 285.268915][ T4489] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 285.278811][ T4489] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 285.291386][ T4489] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 285.299572][ T4489] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 285.307154][ T4489] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 287.368543][ T4489] Bluetooth: hci12: command tx timeout [ 289.448916][ T4489] Bluetooth: hci12: command tx timeout [ 289.505792][ T5126] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 289.514716][ T5126] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 289.522641][ T5126] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 289.531366][ T5126] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 289.539668][ T5126] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 289.547155][ T5126] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 291.523114][ T4489] Bluetooth: hci12: command tx timeout [ 291.604603][ T4489] Bluetooth: hci13: command tx timeout [ 293.603037][ T4489] Bluetooth: hci12: command tx timeout [ 293.691278][ T4489] Bluetooth: hci13: command tx timeout [ 295.763085][ T4489] Bluetooth: hci13: command tx timeout [ 297.843233][ T5126] Bluetooth: hci13: command tx timeout [ 298.803054][ T5126] Bluetooth: hci0: command 0x040f tx timeout [ 300.883051][ T4489] Bluetooth: hci0: command 0x040f tx timeout [ 302.968780][ T4489] Bluetooth: hci0: command 0x040f tx timeout [ 303.773121][ T30] INFO: task syz-executor.2:10012 blocked for more than 143 seconds. [ 303.781239][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 303.788951][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 303.808467][ T30] task:syz-executor.2 state:D stack:28960 pid:10012 tgid:10009 ppid:5110 flags:0x00000006 [ 303.819177][ T30] Call Trace: 2024/06/14 09:14:31 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 303.822568][ T30] [ 303.863063][ T30] __schedule+0x17e8/0x4a20 [ 303.867678][ T30] ? __pfx___schedule+0x10/0x10 [ 303.872556][ T30] ? __pfx_lock_release+0x10/0x10 [ 303.893109][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 303.900200][ T30] ? schedule+0x90/0x320 [ 303.915155][ T30] schedule+0x14b/0x320 [ 303.919366][ T30] schedule_preempt_disabled+0x13/0x30 [ 303.932998][ T30] __mutex_lock+0x6a4/0xd70 [ 303.937542][ T30] ? __mutex_lock+0x527/0xd70 [ 303.942234][ T30] ? wext_ioctl_dispatch+0x106/0x640 [ 303.962966][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 303.968024][ T30] ? full_name_hash+0x93/0xe0 [ 303.972829][ T30] ? dev_load+0x21/0x1f0 [ 303.992974][ T30] wext_ioctl_dispatch+0x106/0x640 [ 303.999347][ T30] ? __pfx_ioctl_standard_call+0x10/0x10 [ 304.013284][ T30] ? __pfx_ioctl_private_call+0x10/0x10 [ 304.018853][ T30] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 304.042985][ T30] ? __might_fault+0xc6/0x120 [ 304.047706][ T30] wext_handle_ioctl+0x15f/0x270 [ 304.052668][ T30] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 304.072989][ T30] sock_ioctl+0x17f/0x8e0 [ 304.077363][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 304.082231][ T30] ? __fget_files+0x29/0x470 [ 304.112964][ T30] ? __fget_files+0x3f6/0x470 [ 304.117684][ T30] ? __fget_files+0x29/0x470 [ 304.122297][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 304.142943][ T30] ? security_file_ioctl+0x87/0xb0 [ 304.148102][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 304.162961][ T30] __se_sys_ioctl+0xfc/0x170 [ 304.167589][ T30] do_syscall_64+0xf3/0x230 [ 304.172112][ T30] ? clear_bhb_loop+0x35/0x90 [ 304.192988][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.198935][ T30] RIP: 0033:0x7fbfb2a7cea9 [ 304.212950][ T30] RSP: 002b:00007fbfb37db0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.221399][ T30] RAX: ffffffffffffffda RBX: 00007fbfb2bb4050 RCX: 00007fbfb2a7cea9 [ 304.242963][ T30] RDX: 0000000020000000 RSI: 0000000000008b24 RDI: 0000000000000004 [ 304.250967][ T30] RBP: 00007fbfb2aebff4 R08: 0000000000000000 R09: 0000000000000000 [ 304.282979][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.290987][ T30] R13: 000000000000006e R14: 00007fbfb2bb4050 R15: 00007ffcec87da28 [ 304.312978][ T30] [ 304.316142][ T30] [ 304.316142][ T30] Showing all locks held in the system: [