last executing test programs: 15.706177499s ago: executing program 1 (id=685): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) close(0x5) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, 0x0, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) 13.311495976s ago: executing program 1 (id=685): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) close(0x5) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, 0x0, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) 10.95074804s ago: executing program 1 (id=685): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) close(0x5) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, 0x0, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) 7.691747625s ago: executing program 1 (id=685): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) close(0x5) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, 0x0, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) 5.61723684s ago: executing program 1 (id=685): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) close(0x5) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, 0x0, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) 3.075680527s ago: executing program 2 (id=887): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000801000100010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000000000000000a6c00000000000002000000400004803c00018008000100636d700030000280080861facc3408000240000000011c000380150001003f25378bcaaee148996b36d592161073a20000000900010073797a30000000000900020073797a32000000001400000011000100"/141], 0x94}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400000000000200}, 0x0, 0xfffffffffffffffc, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400000000000200}, 0x0, 0xfffffffffffffffc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='rpcgss_svc_authenticate\x00', r0, 0x0, 0x80}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18040000000000000000000000000000711236000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 2.962889503s ago: executing program 4 (id=890): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000190001002dbd7000fedbdf251a201498ff02fd010016000008000f0077ffffff"], 0x24}}, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 2.73891773s ago: executing program 4 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8}}}]}, 0x40}}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="857fd7b9ca4b6142466e43b6c74720200b7d0a477e94b63a1e5d", 0x1a) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a120050df40d153bcd41816000000050005000200000014000780050015000200000008001240000000000500134e3fde9d581b5d0300686173683a6e65742c706f7274000000"], 0x60}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'wlan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r11, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'wlan0\x00'}}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000129bd7000fedbdf254400000008000300d3773bea4bae35e2cf4cfe51c29d19449b7952cd33ecadb2755b4118a4944f12febcfe83df1301800826862ef670be6ef5dfeb78a4", @ANYRES32=r10, @ANYBLOB="0400cc000400240008006b000000000008006b00ff0000000400cc002c002380080014008dffffff060010000900000008001a000200000005000f0001000000060016000300000008006b00010001000a0018000303030303030000"], 0x78}, 0x1, 0x0, 0x0, 0xc004840}, 0x20008000) sendmsg$AUDIT_USER(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"/4112], 0x1010}, 0x1, 0x0, 0x0, 0x14811}, 0x20000001) 2.73257179s ago: executing program 2 (id=894): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x75}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 2.671393769s ago: executing program 1 (id=685): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) close(0x5) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, 0x0, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) 1.297404265s ago: executing program 2 (id=897): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="190000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) 1.280315753s ago: executing program 3 (id=898): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000009600824091101f00000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x20000400) (async) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) (async) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000002200"/20], 0x14}], 0x1}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) syz_emit_ethernet(0x2f, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="164784c76f1034d256288c69a89f0f2682b647b28a6c84df7d37c9fad76eb2eddd9dbe1948737c2b23f27cd3fca45fd90dd0964f7310e8704635279fbee533852bfb99fa7b7cf45ea2ad83cf96204fd98abe1853928a0c192ba8410512953b686a5e2fbf5a1e8f3d90f3abf602192254b18f60d9c7b07d4130bb25afcef8f070a7e7a9f007281a941f277cf5e480a14b12bcf3f71891232b62caa48b"], 0x0) (async) syz_emit_ethernet(0x2f, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="164784c76f1034d256288c69a89f0f2682b647b28a6c84df7d37c9fad76eb2eddd9dbe1948737c2b23f27cd3fca45fd90dd0964f7310e8704635279fbee533852bfb99fa7b7cf45ea2ad83cf96204fd98abe1853928a0c192ba8410512953b686a5e2fbf5a1e8f3d90f3abf602192254b18f60d9c7b07d4130bb25afcef8f070a7e7a9f007281a941f277cf5e480a14b12bcf3f71891232b62caa48b"], 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r5, &(0x7f00000001c0)="28cfa18dae9fa96b07de008b9063cb4a053203e567bdbefaa9311ab9754f7cc2b13df8900b02604c0c65fd3e5ccddd11a9763c8b8751e16844f82106a0640f077b5ff5f14deca5202971fb82fa1e4a1d5b455f444c2fcfbf9b528c7de417626c487420fc66a4f456c3617370b4d603d93b99ba8ab18873c07afece03b445715c49222e3aa512b3d12299dde3a7f4941568db4c932a64603ff63e57ee854e0279d3c81cfc847c92392ea340faec941af8d29ae52033d088a1b47b893841cfc6d91922", 0xc2, 0x5, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x1080, @rand_addr, 0x3}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x970b) syz_emit_ethernet(0x9a, &(0x7f0000000400)=ANY=[], 0x0) 1.279952552s ago: executing program 4 (id=899): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(ccm-aes-ce)\x00'}, 0x0, 0x180}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x184}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.186630692s ago: executing program 4 (id=900): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)='H', 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xbc, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x5, 0xfff2}}, [@TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xd, 0x3, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xbe, 0x3, 0xffffcd5e, 0x1, 0xffffff17, 0x7, 0x8}}, {0x14, 0x2, [0x7f, 0x401, 0x652, 0x9, 0x2, 0x1, 0x9, 0x7]}}, {{0x1c, 0x1, {0x5, 0x3, 0x1, 0x7, 0x2, 0x8, 0x4, 0x1}}, {0x6, 0x2, [0x7e85]}}]}]}, 0xbc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xe, &(0x7f0000f59ffc)=0xc, 0x4) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1f1161050000000100000069117600080000008500000000000000bd2bf4ff0100000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffdfffd, @void, @value}, 0x94) 1.099646744s ago: executing program 2 (id=901): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x8, 0xffff, 0x9]}, &(0x7f0000000180)=0x44) 1.098167017s ago: executing program 3 (id=902): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)="04", 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000280)) syz_extract_tcp_res(&(0x7f0000000000), 0xbd, 0x2) r2 = socket(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) syz_emit_ethernet(0x2a, &(0x7f0000001700)=ANY=[@ANYBLOB="e0aaaa00"/19], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a108080000000031600000014000202fc0200000000000000000000000000001400b942add643d012d9729b5b4e700100200100"], 0x44}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@allocspi={0x1f0, 0x16, 0x1, 0x70bd29, 0x0, {{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20}, {@in6=@remote, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x4, 0x10}, 0x2, 0x1a0b1}, [@etimer_thresh={0x8, 0xc, 0xc4}, @offload={0xc}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@mcast2, 0x4e21, 0x1, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3c}, {@in=@private=0xa010100, 0x4d3, 0x6c}, @in=@broadcast, {0x7ff, 0x2, 0xfffffffffffffffb, 0x5ca42eb8, 0x8, 0xd, 0x101, 0x2}, {0x2, 0xdf, 0x6, 0x2}, {0x40000401, 0x2, 0x3}, 0x70bd28, 0x3506, 0x2, 0x1, 0xd1, 0x55}}]}, 0x1f0}}, 0x0) 1.055066897s ago: executing program 4 (id=903): socket$nl_route(0x10, 0x3, 0x0) 991.932327ms ago: executing program 3 (id=905): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbb, 0xbb, 0x5, [@restrict={0x9, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x8}}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}, @enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0x1, 0x9}, {0x0, 0x101}, {0x10, 0x4}, {0xd, 0xfffffff8}, {0xc, 0x8}, {0x3, 0x2}, {0x2, 0x2}]}, @fwd={0xb}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x19, 0x5}, @datasec={0x10, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x7, 0x8}], "f16b3e"}, @ptr={0x1}]}, {0x0, [0x0, 0x2e, 0x61]}}, &(0x7f0000000280)=""/99, 0xd9, 0x63, 0x1, 0x7fffffff, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 916.803808ms ago: executing program 4 (id=906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r5, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffffffff, 0x7770da1a416eac}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xedc}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x20000400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r7, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r6, 0x1) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fa}, 0xe) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r8, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)=""/220, 0xdc}], 0x1}}], 0x1, 0x7fb14727dcaa, 0x0) close(r9) splice(r5, 0x0, r4, 0x0, 0x7ffff041, 0x1200000000000000) 910.437543ms ago: executing program 0 (id=907): sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffd82, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005c5ffffff000d000000ec0091c913000180f0ff9250f76a319a55879ec00b67000c15bccc96785eb1923ba79767305a85072c0300"/71, 0x24}], 0x1}, 0x0) r0 = socket(0x0, 0x3, 0xfffffffc) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) 839.846983ms ago: executing program 3 (id=908): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x75}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 724.044149ms ago: executing program 0 (id=909): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getpid() 649.002686ms ago: executing program 0 (id=910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x6}, 0x81, 0x0, 0x7, 0x800, 0x48, 'syz1\x00', "ba34d459039550206fca97d92ad8b1f4fd02ffa5ac236232a2ae9313642c7c52", "2e5153c04c59cd6a8ce8f4758ba1d83532000000008c0c00", [{0x6, 0xf0c6, {0x0, 0x2844}}, {0x1, 0x1, {0x0, 0x9}}, {0x90, 0x7d, {0x2, 0x9}}, {0xffff, 0xff, {0x3, 0xb31}}, {0x0, 0x85ec, {0x1, 0x3000}}, {0x100, 0xcf, {0x2, 0xff}}, {0x8ffe, 0xbe20, {0x2, 0xd9}}, {0x4, 0x1, {0x3, 0x89a}}, {0x1, 0x6, {0x3, 0x7fff}}, {0x1, 0x4, {0x0, 0x8}}, {0x5, 0x1, {0x0, 0x78cc8ffb}}, {0x6, 0x1, {0x2}}, {0x5, 0x3, {0x3, 0xb5c7}}, {0x1, 0x4, {0x2, 0x1}}, {0x7, 0x6, {0x0, 0x7fffffff}}, {0x6, 0x0, {0x1, 0x9}}, {0x8fd, 0x8, {0x1, 0x158}}, {0xfa, 0x2, {0x3, 0x4}}, {0x3, 0x9, {0x3, 0x3ff}}, {0x8, 0xffff, {0x3, 0x9}}, {0x0, 0xa, {0x2, 0x3}}, {0x4, 0x5, {0x1, 0xe}}, {0x2e, 0xae, {0x3, 0xcdc}}, {0xfffe, 0x100, {0x3, 0x5}}, {0x95, 0x7, {0x3, 0x10001}}, {0x6, 0x0, {0xd6c74c513e323015, 0x100}}, {0x5, 0x2, {0x0, 0x3}}, {0x7, 0x9, {0x0, 0x3}}, {0x2, 0x5, {0x1, 0x80000000}}, {0xfa, 0x8, {0x3, 0x2}}, {0x4, 0x1000, {0x3, 0x9}}, {0x3, 0x4, {0x2, 0x8000}}, {0xfffd, 0x10, {0x1, 0x5}}, {0x0, 0x1d07, {0x1, 0x3}}, {0x2, 0xe6, {0x1}}, {0x7fff, 0x2ec, {0x0, 0x1}}, {0x7, 0x3, {0x2, 0x2189}}, {0x401, 0x9, {0x3, 0x4}}, {0x401, 0xa, {0x0, 0x3}}, {0x4, 0x1, {0x0, 0x3}}]}}}]}, 0x268}}, 0x40880) 591.72768ms ago: executing program 3 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="189a53ee63c0d3786bd8d80e3420cbeef6dc23d2520046775313dc20d964902cf508cc7791e6ac001de3566f458b1b734fbd7eabe67301ac9e319ecb096596932c12f180b3ebfa8f8bc1374ad9b5956c020fa5e7d409381de44471c7d280b39f4bf315de13b99c2a96b6b47c66ac0f010becb586fa9c9a09a100e8851e5c8ecbcacdc71fc2ed86b0727da0228acc076e8820bafa33691465cd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) listen(r1, 0xb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'wlan0\x00', 0x400}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448df, &(0x7f00000002c0)) ioctl$SIOCRSSL2CALL(r4, 0x8915, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB="08000a00e408"], 0x44}}, 0x20008040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x3f}]}}}]}, 0x3c}}, 0x0) 552.464152ms ago: executing program 0 (id=912): r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="3c0000001900010000000000000000001d01000015000200000000000000000089543896f10eee1e0200000008000e00", @ANYRES32=0x0, @ANYBLOB="0000000004000000"], 0x3c}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_pwait(r0, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r5, 0x2b5}, 0x8) epoll_pwait(r0, &(0x7f0000000480)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x9}) 367.374038ms ago: executing program 3 (id=913): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x78b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048000}, 0x4) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdrlabel={0x4c, 0x49, 0x100, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x78, 0x0, r3, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4010015) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, 0x1, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xd2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9205}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7b9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r7, 0x30c, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/time\x00') r10 = gettid() getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) r12 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r8, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000001) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=@newtclass={0x70, 0x28, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff1, 0x8}, {0xa, 0x10}, {0xfff2, 0xe}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x1a}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x6}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x40}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x10000018) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b80), r0) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r15, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d00), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r16, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r16, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "42a93b68eb663bd10fa4"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2812ee4917"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4008094) 279.966975ms ago: executing program 0 (id=914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002280)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x400c0c0) 216.228248ms ago: executing program 2 (id=915): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = accept(r0, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@netrom, @rose, @default, @null, @remote, @null, @default]}, &(0x7f00000000c0)=0x80) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async, rerun: 64) r10 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]}}]}, 0x45c}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x38c, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "804a007b9d32f7bee05f1aebf8be35f4383c588b30059fb8fe28db817620f176b28887d65087a177b8204e2f5062289ad6e4e8fa1a738ea74c9bb9a5ebf2738e299e6a0b4dc624acd8b3e7b3d00d96411a1d184529eab445962f047462e7e1c7b385bd4bf4a6a643f3242cc5eef4fa048c2a7f4d77e29e16a765a3a2bcec23052a5431365eaa49db2e2f0edba014338fb9848345e6c60e4cf15294ee9ed89cf5ddc1b04bd3b9193deee974d7c38ea46c02aa3428e9a82debe29869e75394fc2d268abd71e69a5bf7a965a0"}, @ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "d348e5b3ef3c51c54cd1a0f5a5c475dec51726ba4fee75a13c2dad8cec35a223ceaa03bfec6c67defa5fcda09c05556113ebf8ee3f2796e6df6aa2506cd0f262a78cf0ebec11ed3593c4b31e558d99c141f24e763d1ec50773e9f0b69b8e473e0152de972543faea05875620327d5b1621c8ce598683e7f0f476867382dc3a4ccfdf3f04d5ab3c04055b45"}, @ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "6cf97181886137d879312413a0fe83ddc8a912d5938e03fc84948d56a48b5f0119f2f5f340623417f3f2f86e547d4fdb40ca4e9d52b84317d903286e7f0a674e8e23a916798e92"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'siw\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x49b5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'siw\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '*-!*]}}]$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'P\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3804}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '}](]\'\xb5^@:'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc844}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x3c, 0x4, "61370dbf36c2473aa13c5d3cc1760016ee067534e46e024bdb8a952715b520682987aeb9ecdb451cff2ff2b692b1f666a5eb8f0def2effee"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x80}, 0x24000040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 159.435925ms ago: executing program 0 (id=916): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) connect$rose(r1, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x5, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}]}]}]}, @NFT_MSG_NEWTABLE={0x1d4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x78, 0x6, "d75c9df4d96ada44a86fa5aa7430d431968b80cd31ebfe6453874a97a160cb7233a9d694aec4b5b264d1a52244956ea89c5b968365d89b216c41ef3767428fc05f3716a6454bb97d81e4dc9139b560c4fcf5f904f8f71cebe1318be5cf631490a84239f369f9c0fdd947351ac0505ed39d775a66"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x103, 0x6, "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"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14}}, 0x254}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) (async) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) (async) shutdown(r5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) syz_emit_ethernet(0x4a, &(0x7f000001f8c0)={@local, @broadcast, @void, {@ipv4={0x8864, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x21, 0xe, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000040)=0xcf, 0x4) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) (async) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000140)="f790250f74a3049d300ab68556ffcce55c3b069c7fcde9638a74550751c7cbc7ab22f312859f65110a4e222fbb5f4a61e90e2b926e", 0x35}, {&(0x7f00000001c0)="2aa15a1f72576b1d39f49e35071bb7edfbece971e870cd5ee02ddf28b8a219144c5035a20592ddf167838f2a0ef9036bfb8275c49b764c995af781", 0x3b}, {&(0x7f0000000340)="3a38da8e8212d9b0437e432dcd2699c19c2c5ea976c9a55de9bf922abe8c141857a502f1c246d4f15e7b1e57e2a4a56b10d9a049bfac76a13b2f62", 0x3b}], 0x3) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x11, 0xa, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000040)) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r11, @ANYBLOB="0400848038002d800a000000010181010101000004"], 0x58}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000007c738338426f654c0ee13505e389d632ecd5ff3da907720e95f5bbe40a57962ae373e0027f41008b326e", @ANYRESDEC=r6, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) 0s ago: executing program 2 (id=917): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4) r1 = accept(r0, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x80) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)}, 0x10062) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@loopback}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/12], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 84.953758][ T5818] cgroup: Unknown subsys name 'net' [ 85.124923][ T5818] cgroup: Unknown subsys name 'cpuset' [ 85.134057][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.924565][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.715637][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.755180][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.763234][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.767298][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.771603][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.778183][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.786062][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.793247][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.800412][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.807266][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.814601][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.822313][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.827689][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.835352][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.849863][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.857061][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.857760][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.864831][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.883364][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.891086][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.899602][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.899693][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.907898][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.927324][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.936769][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.376106][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.384427][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.404380][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.412864][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.454938][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.465235][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.485997][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.495081][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.519112][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.529074][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.570836][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.578711][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.617067][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.629544][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.667484][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.688507][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.711382][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.730157][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.760819][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.841902][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.849779][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.891029][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.219233][ T5870] tipc: Enabling of bearer rejected, failed to enable media [ 91.275104][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 91.544012][ T5887] Zero length message leads to an empty skb [ 91.588186][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 91.610592][ T5890] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 91.627837][ T5886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.661312][ T5893] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 91.829230][ T5897] netlink: 'syz.2.16': attribute type 32 has an invalid length. [ 91.841380][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 91.867754][ T5897] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 91.891851][ T5847] Bluetooth: hci0: command tx timeout [ 91.899379][ T977] cfg80211: failed to load regulatory.db [ 91.920575][ T5903] Bluetooth: MGMT ver 1.23 [ 91.960537][ T5905] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 91.972435][ T5847] Bluetooth: hci2: command tx timeout [ 91.972442][ T5833] Bluetooth: hci3: command tx timeout [ 92.051129][ T5847] Bluetooth: hci4: command tx timeout [ 92.051396][ T5833] Bluetooth: hci1: command tx timeout [ 92.093668][ T5908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.233975][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 92.553485][ T5929] Bluetooth: MGMT ver 1.23 [ 92.564310][ T5929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27'. [ 92.941935][ T5955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.125376][ T5959] netlink: 'syz.1.33': attribute type 21 has an invalid length. [ 93.269536][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.576587][ T5926] openvswitch: netlink: Flow actions attr not present in new flow. [ 93.595139][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37'. [ 93.888435][ T5995] netlink: 'syz.0.40': attribute type 29 has an invalid length. [ 93.903645][ T5991] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 93.982683][ T5833] Bluetooth: hci0: command tx timeout [ 94.050875][ T5833] Bluetooth: hci2: command tx timeout [ 94.050950][ T5847] Bluetooth: hci3: command tx timeout [ 94.130819][ T5847] Bluetooth: hci1: command tx timeout [ 94.130828][ T5833] Bluetooth: hci4: command tx timeout [ 94.689059][ T6045] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 94.804295][ T6057] netlink: 44 bytes leftover after parsing attributes in process `syz.3.45'. [ 94.882534][ T6057] netlink: 43 bytes leftover after parsing attributes in process `syz.3.45'. [ 94.923015][ T6057] netlink: 'syz.3.45': attribute type 5 has an invalid length. [ 94.958955][ T6061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.969366][ T6064] openvswitch: netlink: Message has 199 unknown bytes. [ 94.998379][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.023435][ T6064] openvswitch: netlink: Message has 199 unknown bytes. [ 95.042481][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.055965][ T6064] openvswitch: netlink: Message has 199 unknown bytes. [ 95.091989][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.380009][ T6074] veth1: entered allmulticast mode [ 95.429094][ T6077] syz.3.53 uses obsolete (PF_INET,SOCK_PACKET) [ 95.938755][ T6106] netlink: 'syz.4.60': attribute type 1 has an invalid length. [ 95.952889][ T6106] netlink: 'syz.4.60': attribute type 2 has an invalid length. [ 95.963237][ T6106] __nla_validate_parse: 6 callbacks suppressed [ 95.963254][ T6106] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.60'. [ 95.985745][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.61'. [ 96.010439][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.018662][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.054834][ T5847] Bluetooth: hci0: command tx timeout [ 96.096349][ T6111] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 96.129954][ T6111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.131821][ T5847] Bluetooth: hci3: command tx timeout [ 96.136877][ T5833] Bluetooth: hci2: command tx timeout [ 96.211058][ T5833] Bluetooth: hci4: command tx timeout [ 96.211744][ T5847] Bluetooth: hci1: command tx timeout [ 96.272779][ T6116] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 96.718205][ T6131] netlink: 64 bytes leftover after parsing attributes in process `syz.0.69'. [ 96.788213][ T6137] xfrm0: entered allmulticast mode [ 97.145960][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.76'. [ 97.174061][ T6155] netlink: 'syz.4.76': attribute type 7 has an invalid length. [ 97.184309][ T6155] netlink: 'syz.4.76': attribute type 8 has an invalid length. [ 97.204549][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 97.224956][ T6155] gretap0: entered promiscuous mode [ 97.245459][ T6155] gretap0: left promiscuous mode [ 97.440943][ T6169] netlink: 80 bytes leftover after parsing attributes in process `syz.2.80'. [ 97.511674][ T6175] netlink: 'syz.4.82': attribute type 11 has an invalid length. [ 97.953406][ T6189] netlink: 'syz.1.86': attribute type 27 has an invalid length. [ 98.132995][ T5847] Bluetooth: hci0: command tx timeout [ 98.183121][ T6199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.90'. [ 98.197468][ T6198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.90'. [ 98.212711][ T5847] Bluetooth: hci3: command tx timeout [ 98.212759][ T5833] Bluetooth: hci2: command tx timeout [ 98.294237][ T5833] Bluetooth: hci4: command tx timeout [ 98.294246][ T5847] Bluetooth: hci1: command tx timeout [ 98.404869][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.92'. [ 98.695691][ T6222] netlink: 13 bytes leftover after parsing attributes in process `syz.4.93'. [ 99.333983][ T6247] bond0: entered promiscuous mode [ 99.346172][ T6247] bond0: entered allmulticast mode [ 99.354012][ T6247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.387946][ T6265] Unsupported ieee802154 address type: 0 [ 99.433130][ T6247] bond0 (unregistering): Released all slaves [ 100.345787][ T6312] ipt_ECN: cannot use operation on non-tcp rule [ 100.371210][ T5833] Bluetooth: hci4: command tx timeout [ 100.397129][ T6316] netlink: 'syz.3.125': attribute type 12 has an invalid length. [ 100.414669][ T6322] x_tables: ip_tables: ECN target: only valid in mangle table, not NĒ [ 100.426087][ T6316] netlink: 'syz.3.125': attribute type 2 has an invalid length. [ 101.013811][ T6347] net_ratelimit: 93 callbacks suppressed [ 101.013834][ T6347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.131822][ T6351] __nla_validate_parse: 9 callbacks suppressed [ 101.131843][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 101.191504][ T6351] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 101.225699][ T6351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.271134][ T6354] openvswitch: netlink: Key type 16144 is out of range max 32 [ 101.296855][ T6354] Bluetooth: MGMT ver 1.23 [ 101.343381][ T6354] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 101.351205][ T6354] netlink: 'syz.0.136': attribute type 2 has an invalid length. [ 101.370930][ T6354] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 101.378650][ T6354] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.136'. [ 101.448305][ T6367] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 101.850852][ T6384] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 101.955813][ T6396] xt_policy: too many policy elements [ 102.175148][ T6399] netlink: 252 bytes leftover after parsing attributes in process `syz.3.149'. [ 102.192678][ T6405] xt_TCPMSS: Only works on TCP SYN packets [ 102.267277][ T6408] netlink: 'syz.1.151': attribute type 2 has an invalid length. [ 102.285509][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 103.087301][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 103.120467][ T6406] veth1: entered allmulticast mode [ 103.131184][ T6415] warning: `syz.2.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.361449][ T6428] xt_l2tp: missing protocol rule (udp|l2tpip) [ 103.409533][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 103.582503][ T6436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.160'. [ 103.651060][ T6440] ip6t_rpfilter: unknown options [ 103.812201][ T5833] Bluetooth: hci0: command 0x0c20 tx timeout [ 103.999518][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 104.850907][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'. [ 104.919946][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 104.943049][ T6513] xt_TPROXY: Can be used only with -p tcp or -p udp [ 105.091049][ T6507] "syz.4.176" (6507) uses obsolete ecb(arc4) skcipher [ 105.823986][ T6547] netlink: 'syz.4.187': attribute type 9 has an invalid length. [ 105.864029][ T6553] openvswitch: netlink: IP tunnel TTL not specified. [ 106.105061][ T6564] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 106.191213][ T6569] __nla_validate_parse: 4 callbacks suppressed [ 106.191242][ T6569] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.193'. [ 106.707315][ T6597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.198'. [ 106.770804][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 106.849244][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 107.347401][ T6625] netlink: 104 bytes leftover after parsing attributes in process `syz.3.206'. [ 107.394669][ T6619] bond0 (unregistering): Released all slaves [ 107.981824][ T6657] openvswitch: netlink: Message has 20 unknown bytes. [ 107.999046][ T6657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.191204][ T6667] netlink: 208 bytes leftover after parsing attributes in process `syz.4.215'. [ 108.264529][ T6669] lo: entered promiscuous mode [ 108.269965][ T6669] netlink: 'syz.0.216': attribute type 2 has an invalid length. [ 108.287967][ T6669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.507879][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 108.527368][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 108.545316][ T6685] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 108.745855][ T6696] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 108.904372][ T6705] pimreg: entered allmulticast mode [ 109.043833][ T6711] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 109.093604][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.102589][ T6722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.228'. [ 109.313166][ T6736] netlink: 'syz.4.234': attribute type 10 has an invalid length. [ 109.356091][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.235'. [ 109.406829][ T6742] netlink: 'syz.3.236': attribute type 2 has an invalid length. [ 109.758862][ T6765] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.084613][ T6781] xt_cgroup: path and classid specified [ 110.141025][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 110.175166][ T6787] gretap0: entered promiscuous mode [ 110.210722][ T6787] gretap0: left promiscuous mode [ 110.935490][ T6835] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 111.327591][ T6860] __nla_validate_parse: 3 callbacks suppressed [ 111.327611][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 111.406161][ T6862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.267'. [ 111.533857][ T6875] netlink: 'syz.3.270': attribute type 29 has an invalid length. [ 111.556932][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 111.828466][ T6895] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 111.893235][ T6902] tipc: Enabling of bearer rejected, failed to enable media [ 111.922177][ T6905] tipc: Enabling of bearer rejected, failed to enable media [ 112.041031][ T6916] trusted_key: syz.3.279 sent an empty control message without MSG_MORE. [ 112.065031][ T6916] netlink: 256 bytes leftover after parsing attributes in process `syz.3.279'. [ 112.234814][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 112.298755][ T6927] netlink: 'syz.1.283': attribute type 2 has an invalid length. [ 112.362245][ T6932] sctp: failed to load transform for md5: -2 [ 112.370245][ T6933] sctp: failed to load transform for md5: -2 [ 112.544855][ T6955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.289'. [ 112.807075][ T6967] netlink: 64 bytes leftover after parsing attributes in process `syz.2.292'. [ 112.969484][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 113.287242][ T7004] xt_hashlimit: size too large, truncated to 1048576 [ 113.346442][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 113.410058][ T7013] C: renamed from lo [ 113.446535][ T7013] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 113.830086][ T7036] netlink: 'syz.0.315': attribute type 29 has an invalid length. [ 113.845879][ T7036] netlink: 'syz.0.315': attribute type 29 has an invalid length. [ 113.866377][ T7036] netlink: 500 bytes leftover after parsing attributes in process `syz.0.315'. [ 113.885230][ T7036] unsupported nla_type 58 [ 114.026545][ T7045] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 114.329666][ T7064] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 114.343266][ T7062] netlink: 'syz.0.325': attribute type 1 has an invalid length. [ 114.354228][ T7064] netlink: 'syz.3.327': attribute type 11 has an invalid length. [ 114.486684][ T7075] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 115.014035][ T7115] netlink: 'syz.4.342': attribute type 2 has an invalid length. [ 115.625316][ T7147] ip6t_rpfilter: unknown options [ 115.659271][ T7149] netlink: 'syz.3.352': attribute type 8 has an invalid length. [ 116.294511][ T7177] netlink: 'syz.4.358': attribute type 1 has an invalid length. [ 116.426652][ T7181] bond1: (slave gretap1): making interface the new active one [ 116.442765][ T7181] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 116.608327][ T7192] __nla_validate_parse: 12 callbacks suppressed [ 116.608347][ T7192] netlink: 104 bytes leftover after parsing attributes in process `syz.3.364'. [ 116.830580][ T7205] netlink: 'syz.3.368': attribute type 6 has an invalid length. [ 116.846298][ T7203] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 117.323015][ T7231] vlan0: entered allmulticast mode [ 117.557769][ T7247] xt_HMARK: proto mask must be zero with L3 mode [ 117.568834][ T7248] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 117.614711][ T7248] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 117.795693][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 118.398731][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 118.423832][ T7298] netlink: 50 bytes leftover after parsing attributes in process `syz.4.392'. [ 118.448266][ T7298] netlink: 50 bytes leftover after parsing attributes in process `syz.4.392'. [ 118.489466][ T7302] openvswitch: netlink: IPv6 tunnel dst address is zero [ 118.498140][ T7301] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 118.527013][ T7303] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.394'. [ 118.774448][ T7322] netlink: 244 bytes leftover after parsing attributes in process `syz.1.401'. [ 118.865522][ T7328] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 118.902588][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 118.914269][ T7328] validate_nla: 2 callbacks suppressed [ 118.914287][ T7328] netlink: 'syz.0.402': attribute type 3 has an invalid length. [ 118.942635][ T7328] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 119.049500][ T7342] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 119.375399][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 119.512202][ T7357] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 119.572273][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 120.035442][ T7393] tipc: Enabling of bearer rejected, failed to enable media [ 120.068542][ T7399] Cannot find add_set index 3 as target [ 120.088227][ T7393] syzkaller0: entered promiscuous mode [ 120.104815][ T7393] syzkaller0: entered allmulticast mode [ 120.665867][ T7429] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 121.089213][ T7453] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 121.641060][ T7484] ieee802154 phy1 wpan1: encryption failed: -22 [ 121.844525][ T7498] __nla_validate_parse: 6 callbacks suppressed [ 121.844545][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 121.896722][ T7498] netlink: 48 bytes leftover after parsing attributes in process `syz.3.445'. [ 121.992897][ T7497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.906360][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 122.956387][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 123.006768][ T7567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.459'. [ 123.264653][ T7589] netlink: 'syz.4.463': attribute type 5 has an invalid length. [ 123.291913][ T7589] x_tables: duplicate underflow at hook 1 [ 123.320410][ T7595] netlink: ct family unspecified [ 123.339398][ T7595] openvswitch: netlink: Actions may not be safe on all matching packets [ 123.556965][ T7608] tipc: Failed to obtain node identity [ 123.582782][ T7608] tipc: Enabling of bearer rejected, failed to enable media [ 123.880011][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'. [ 123.918375][ T7626] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 123.941882][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 123.951756][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 123.988013][ T7626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.651069][ T7669] netlink: 'syz.0.486': attribute type 3 has an invalid length. [ 124.684791][ T7669] netlink: 'syz.0.486': attribute type 3 has an invalid length. [ 125.164768][ T7699] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 125.232979][ T7707] netlink: 'syz.1.497': attribute type 41 has an invalid length. [ 125.455416][ T7722] x_tables: duplicate entry at hook 2 [ 125.461492][ T7724] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 125.531042][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 125.554715][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 125.578904][ T7730] Bluetooth: MGMT ver 1.23 [ 125.593313][ T7728] netlink: 'syz.2.504': attribute type 20 has an invalid length. [ 126.485485][ T7799] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 126.494981][ T10] IPVS: starting estimator thread 0... [ 126.590890][ T7801] IPVS: using max 27 ests per chain, 64800 per kthread [ 126.863875][ T7820] netlink: 'syz.1.526': attribute type 13 has an invalid length. [ 126.953498][ T977] IPVS: starting estimator thread 0... [ 127.064938][ T7832] IPVS: using max 26 ests per chain, 62400 per kthread [ 127.139827][ T7841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.310428][ T7846] bond0: entered promiscuous mode [ 127.352472][ T7846] bond0: entered allmulticast mode [ 127.358786][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.387985][ T7858] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 127.572243][ T7873] mac80211_hwsim hwsim6 ˙: renamed from wlan1 (while UP) [ 128.200396][ T7909] sctp: [Deprecated]: syz.3.555 (pid 7909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.200396][ T7909] Use struct sctp_sack_info instead [ 128.296759][ T7919] sctp: [Deprecated]: syz.3.555 (pid 7919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.296759][ T7919] Use struct sctp_sack_info instead [ 128.678073][ T7935] sctp: [Deprecated]: syz.1.562 (pid 7935) Use of int in maxseg socket option. [ 128.678073][ T7935] Use struct sctp_assoc_value instead [ 128.694891][ T7937] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 128.703474][ T7935] sctp: [Deprecated]: syz.1.562 (pid 7935) Use of int in maxseg socket option. [ 128.703474][ T7935] Use struct sctp_assoc_value instead [ 128.718849][ T7934] syzkaller1: entered promiscuous mode [ 129.149163][ T7980] __nla_validate_parse: 7 callbacks suppressed [ 129.149185][ T7980] netlink: 176 bytes leftover after parsing attributes in process `syz.2.573'. [ 129.162156][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 129.174455][ T7980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.573'. [ 129.440940][ T8000] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.479624][ T8001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.580'. [ 129.515262][ T8001] : entered promiscuous mode [ 129.796659][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 129.861993][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 130.178784][ T8030] netlink: 240 bytes leftover after parsing attributes in process `syz.0.588'. [ 130.214063][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 130.223219][ T8037] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 130.232265][ T8037] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 130.322213][ T8049] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 130.337265][ T8048] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 130.586340][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 130.870233][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 131.069106][ T8100] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 131.083261][ T8100] sit0: entered promiscuous mode [ 131.088704][ T8100] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 131.552833][ T8127] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 131.597726][ T8126] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 131.627943][ T8121] openvswitch: netlink: Message has 199 unknown bytes. [ 131.659395][ T8121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.867177][ T8141] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.919736][ T8141] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 132.639218][ T8191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.767294][ T8195] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 132.798619][ T8195] macsec0: entered allmulticast mode [ 132.810250][ T8201] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 132.812752][ T8195] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 132.858211][ T8195] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 132.865818][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.886697][ T8195] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 132.950069][ T8209] sctp: [Deprecated]: syz.0.646 (pid 8209) Use of int in max_burst socket option. [ 132.950069][ T8209] Use struct sctp_assoc_value instead [ 132.973762][ T8209] x_tables: duplicate underflow at hook 2 [ 132.991819][ T8211] raw_sendmsg: syz.2.645 forgot to set AF_INET. Fix it! [ 133.013896][ T977] hid-generic 0005:04F3:FFF9.0001: item fetching failed at offset 0/1 [ 133.029405][ T977] hid-generic 0005:04F3:FFF9.0001: probe with driver hid-generic failed with error -22 [ 133.235348][ C1] Unknown status report in ack skb [ 133.668245][ T8248] block nbd1: not configured, cannot reconfigure [ 133.685839][ T8250] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 133.699963][ T8253] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 134.473662][ T8302] __nla_validate_parse: 16 callbacks suppressed [ 134.473682][ T8302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.673'. [ 134.757013][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.678'. [ 134.859565][ T8319] bond3: entered allmulticast mode [ 134.865557][ T8319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.903524][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.683'. [ 134.950766][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.683'. [ 135.253197][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.686'. [ 135.277943][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 135.448564][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 135.651966][ T8364] openvswitch: netlink: IPv6 tunnel dst address is zero [ 135.665220][ T8361] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 135.697697][ T8360] netlink: 'syz.4.693': attribute type 1 has an invalid length. [ 135.724291][ T8360] netlink: 224 bytes leftover after parsing attributes in process `syz.4.693'. [ 135.759676][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 135.797386][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.808325][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.817954][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.834709][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.843291][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.887824][ T8374] netlink: 48 bytes leftover after parsing attributes in process `syz.3.695'. [ 136.626840][ T8412] veth3: entered promiscuous mode [ 136.664312][ T8415] syz_tun: entered allmulticast mode [ 136.718853][ T8414] syz_tun: left allmulticast mode [ 136.731458][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.739499][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.780620][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.790158][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.172722][ T8445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.306726][ T8451] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.393016][ T8456] IPVS: length: 157 != 21314091480 [ 138.629564][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.646608][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.660253][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.673372][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.682363][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.779980][ T8511] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 139.071515][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.079386][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.147138][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.155225][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.434384][ T8540] vlan1: entered allmulticast mode [ 139.440826][ T8540] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 139.496735][ T8545] __nla_validate_parse: 15 callbacks suppressed [ 139.496755][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'. [ 139.890177][ T8558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.743'. [ 140.356646][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 140.516033][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.529413][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.551601][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.562972][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.573463][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.842131][ T6013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.864019][ T6013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.908502][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.927147][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.951227][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 141.172062][ T8624] sch_fq: defrate 0 ignored. [ 141.421970][ T8636] netlink: 'syz.0.765': attribute type 3 has an invalid length. [ 142.146004][ T8645] netlink: 'syz.0.766': attribute type 28 has an invalid length. [ 142.194047][ T8645] netlink: 'syz.0.766': attribute type 3 has an invalid length. [ 142.202016][ T8645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.766'. [ 142.583826][ T8672] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 142.713567][ T8678] netlink: 248 bytes leftover after parsing attributes in process `syz.2.777'. [ 142.746066][ T8678] netlink: 52 bytes leftover after parsing attributes in process `syz.2.777'. [ 142.798091][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.799174][ T8684] sctp: [Deprecated]: syz.3.779 (pid 8684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.799174][ T8684] Use struct sctp_sack_info instead [ 142.827317][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.842690][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.881008][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.889634][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.143332][ T8704] x_tables: duplicate underflow at hook 2 [ 143.187640][ T8706] netlink: 'syz.2.785': attribute type 2 has an invalid length. [ 143.220898][ T6013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.232813][ T6013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.347832][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.372482][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.394234][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.407012][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.522914][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.792'. [ 143.541911][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 143.561170][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 144.740989][ T8750] syzkaller0: entered promiscuous mode [ 144.746712][ T8750] syzkaller0: entered allmulticast mode [ 145.188105][ T8775] netlink: 'syz.4.806': attribute type 10 has an invalid length. [ 145.227591][ T8775] __nla_validate_parse: 2 callbacks suppressed [ 145.227612][ T8775] netlink: 40 bytes leftover after parsing attributes in process `syz.4.806'. [ 145.232161][ T8779] netlink: 256 bytes leftover after parsing attributes in process `syz.2.807'. [ 145.263131][ T8775] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 145.271688][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.293026][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.302338][ T8775] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check. [ 145.321917][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.336820][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.345615][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.667644][ T8799] netlink: 'syz.2.810': attribute type 1 has an invalid length. [ 145.675633][ T8799] netlink: 224 bytes leftover after parsing attributes in process `syz.2.810'. [ 145.685581][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.702525][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.781751][ T8803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.812'. [ 145.791075][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.806530][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.144611][ T8829] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 146.240462][ T8823] syz.4.818 (8823) used greatest stack depth: 17992 bytes left [ 147.032714][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 147.141459][ T8841] ip6t_rpfilter: unknown options [ 147.235243][ T8850] 8021q: VLANs not supported on ip_vti0 [ 147.644353][ T8873] netlink: zone id is out of range [ 147.649718][ T8873] netlink: zone id is out of range [ 147.661288][ T8873] netlink: zone id is out of range [ 147.666467][ T8873] netlink: zone id is out of range [ 147.673139][ T8873] netlink: zone id is out of range [ 147.678411][ T8873] netlink: zone id is out of range [ 147.683934][ T8873] netlink: zone id is out of range [ 147.689603][ T8873] netlink: zone id is out of range [ 147.695853][ T8873] netlink: zone id is out of range [ 147.843793][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.853962][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.867978][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.878636][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.891640][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.132735][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.838'. [ 148.155289][ T8895] netlink: 'syz.3.840': attribute type 2 has an invalid length. [ 148.173822][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 148.391674][ T8906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.415704][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.450397][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.659039][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.681672][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.826725][ T8922] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 150.428674][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 150.480994][ T8953] dvmrp1: entered allmulticast mode [ 150.554177][ T8956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.850'. [ 150.585566][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 150.682809][ T8959] unknown channel width for channel at 909000KHz? [ 150.833656][ T8967] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 150.842032][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.853567][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.862057][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.870832][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.879262][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.101707][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.114167][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.155367][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.164740][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.770087][ T9004] netlink: 72 bytes leftover after parsing attributes in process `syz.2.868'. [ 153.033062][ T9020] net_ratelimit: 395 callbacks suppressed [ 153.033083][ T9020] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 153.086882][ T9020] netlink: 80 bytes leftover after parsing attributes in process `syz.2.870'. [ 153.271596][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.280574][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.290983][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.300508][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.309877][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.549499][ T9050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.878'. [ 153.700434][ T9055] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 153.830815][ T6013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.849371][ T6013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.928868][ T6029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.947361][ T6029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.108548][ T9076] netlink: 104 bytes leftover after parsing attributes in process `syz.0.891'. [ 154.165342][ T9080] netlink: 244 bytes leftover after parsing attributes in process `syz.3.889'. [ 154.618632][ T9086] netlink: 56 bytes leftover after parsing attributes in process `syz.4.893'. [ 156.128469][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 156.154162][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 156.306554][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.315892][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.324848][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.333550][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.345038][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.453709][ T9144] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 156.461700][ T9144] macsec0: entered allmulticast mode [ 156.470648][ T9144] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 156.506794][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 156.586672][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.596538][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.662207][ T6013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.676951][ T6013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.723509][ T9157] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 156.743251][ T9157] netlink: 'syz.0.914': attribute type 2 has an invalid length. [ 156.953274][ T9131] [ 156.955656][ T9131] ========================= [ 156.960174][ T9131] WARNING: held lock freed! [ 156.964716][ T9131] 6.15.0-syzkaller-07802-g558428921edd #0 Not tainted [ 156.971502][ T9131] ------------------------- [ 156.976018][ T9131] syz.4.906/9131 is freeing memory ffff88807f68c000-ffff88807f68c7ff, with a lock still held there! [ 156.986783][ T9131] ffff88807f68c258 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP){+.+.}-{0:0}, at: bt_accept_dequeue+0xfc/0x590 [ 156.997800][ T9131] 2 locks held by syz.4.906/9131: [ 157.002838][ T9131] #0: ffff888061cf2c08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 157.013059][ T9131] #1: ffff88807f68c258 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP){+.+.}-{0:0}, at: bt_accept_dequeue+0xfc/0x590 [ 157.024507][ T9131] [ 157.024507][ T9131] stack backtrace: [ 157.030415][ T9131] CPU: 1 UID: 0 PID: 9131 Comm: syz.4.906 Not tainted 6.15.0-syzkaller-07802-g558428921edd #0 PREEMPT(full) [ 157.030437][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.030453][ T9131] Call Trace: [ 157.030460][ T9131] [ 157.030468][ T9131] dump_stack_lvl+0x189/0x250 [ 157.030498][ T9131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.030524][ T9131] ? __pfx__printk+0x10/0x10 [ 157.030547][ T9131] debug_check_no_locks_freed+0x18b/0x1c0 [ 157.030573][ T9131] ? __sk_destruct+0x4e1/0x660 [ 157.030589][ T9131] kfree+0xfd/0x440 [ 157.030613][ T9131] __sk_destruct+0x4e1/0x660 [ 157.030633][ T9131] bt_accept_dequeue+0x3ce/0x590 [ 157.030663][ T9131] l2cap_sock_cleanup_listen+0x2f/0x3e0 [ 157.030683][ T9131] l2cap_sock_release+0x5d/0x1d0 [ 157.030700][ T9131] sock_close+0xc3/0x240 [ 157.030720][ T9131] ? __pfx_sock_close+0x10/0x10 [ 157.030739][ T9131] __fput+0x44c/0xa70 [ 157.030761][ T9131] task_work_run+0x1d1/0x260 [ 157.030782][ T9131] ? __pfx_task_work_run+0x10/0x10 [ 157.030802][ T9131] ? kmem_cache_free+0x18f/0x400 [ 157.030833][ T9131] do_exit+0x8d1/0x2550 [ 157.030856][ T9131] ? __pfx_do_exit+0x10/0x10 [ 157.030877][ T9131] ? cgroup_freezing+0x20/0x360 [ 157.030894][ T9131] ? cgroup_freezing+0x20/0x360 [ 157.030914][ T9131] do_group_exit+0x21c/0x2d0 [ 157.030933][ T9131] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.030954][ T9131] get_signal+0x1286/0x1340 [ 157.030985][ T9131] arch_do_signal_or_restart+0x9a/0x750 [ 157.031009][ T9131] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 157.031035][ T9131] ? exit_to_user_mode_loop+0x40/0x110 [ 157.031059][ T9131] exit_to_user_mode_loop+0x75/0x110 [ 157.031080][ T9131] do_syscall_64+0x2bd/0x3b0 [ 157.031101][ T9131] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.031120][ T9131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.031137][ T9131] ? clear_bhb_loop+0x60/0xb0 [ 157.031155][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.031172][ T9131] RIP: 0033:0x7f5f8bf8e969 [ 157.031189][ T9131] Code: Unable to access opcode bytes at 0x7f5f8bf8e93f. [ 157.031198][ T9131] RSP: 002b:00007f5f8cddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 157.031215][ T9131] RAX: fffffffffffffe00 RBX: 00007f5f8c1b5fa0 RCX: 00007f5f8bf8e969 [ 157.031228][ T9131] RDX: 0000000000000001 RSI: 0000200000002e00 RDI: 000000000000000b [ 157.031238][ T9131] RBP: 00007f5f8c010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 157.031249][ T9131] R10: 00007fb14727dcaa R11: 0000000000000246 R12: 0000000000000000 [ 157.031259][ T9131] R13: 0000000000000000 R14: 00007f5f8c1b5fa0 R15: 00007ffeda4fff48 [ 157.031278][ T9131] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 157.510702][ T9131] ================================================================== [ 157.518833][ T9131] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 157.526677][ T9131] Read of size 4 at addr ffff88807f68c1c4 by task syz.4.906/9131 [ 157.534414][ T9131] [ 157.536760][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.4.906 Not tainted 6.15.0-syzkaller-07802-g558428921edd #0 PREEMPT(full) [ 157.536784][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.536795][ T9131] Call Trace: [ 157.536802][ T9131] [ 157.536810][ T9131] dump_stack_lvl+0x189/0x250 [ 157.536840][ T9131] ? __virt_addr_valid+0x1c8/0x5c0 [ 157.536856][ T9131] ? rcu_is_watching+0x15/0xb0 [ 157.536881][ T9131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.536906][ T9131] ? rcu_is_watching+0x15/0xb0 [ 157.536930][ T9131] ? lock_release+0x4b/0x3e0 [ 157.536954][ T9131] ? __virt_addr_valid+0x1c8/0x5c0 [ 157.536969][ T9131] ? __virt_addr_valid+0x4a5/0x5c0 [ 157.536986][ T9131] print_report+0xd2/0x2b0 [ 157.537008][ T9131] ? do_raw_spin_lock+0x23d/0x290 [ 157.537024][ T9131] kasan_report+0x118/0x150 [ 157.537050][ T9131] ? do_raw_spin_lock+0x23d/0x290 [ 157.537070][ T9131] do_raw_spin_lock+0x23d/0x290 [ 157.537086][ T9131] ? lock_acquire+0x5f/0x360 [ 157.537107][ T9131] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 157.537124][ T9131] ? __sk_destruct+0x4e1/0x660 [ 157.537141][ T9131] ? release_sock+0x2f/0x1f0 [ 157.537165][ T9131] release_sock+0x2f/0x1f0 [ 157.537188][ T9131] bt_accept_dequeue+0x512/0x590 [ 157.537216][ T9131] l2cap_sock_cleanup_listen+0x2f/0x3e0 [ 157.537236][ T9131] l2cap_sock_release+0x5d/0x1d0 [ 157.537254][ T9131] sock_close+0xc3/0x240 [ 157.537273][ T9131] ? __pfx_sock_close+0x10/0x10 [ 157.537293][ T9131] __fput+0x44c/0xa70 [ 157.537319][ T9131] task_work_run+0x1d1/0x260 [ 157.537340][ T9131] ? __pfx_task_work_run+0x10/0x10 [ 157.537360][ T9131] ? kmem_cache_free+0x18f/0x400 [ 157.537387][ T9131] do_exit+0x8d1/0x2550 [ 157.537410][ T9131] ? __pfx_do_exit+0x10/0x10 [ 157.537430][ T9131] ? cgroup_freezing+0x20/0x360 [ 157.537448][ T9131] ? cgroup_freezing+0x20/0x360 [ 157.537469][ T9131] do_group_exit+0x21c/0x2d0 [ 157.537487][ T9131] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.537509][ T9131] get_signal+0x1286/0x1340 [ 157.537564][ T9131] arch_do_signal_or_restart+0x9a/0x750 [ 157.537587][ T9131] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 157.537614][ T9131] ? exit_to_user_mode_loop+0x40/0x110 [ 157.537638][ T9131] exit_to_user_mode_loop+0x75/0x110 [ 157.537660][ T9131] do_syscall_64+0x2bd/0x3b0 [ 157.537682][ T9131] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.537701][ T9131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.537718][ T9131] ? clear_bhb_loop+0x60/0xb0 [ 157.537736][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.537753][ T9131] RIP: 0033:0x7f5f8bf8e969 [ 157.537767][ T9131] Code: Unable to access opcode bytes at 0x7f5f8bf8e93f. [ 157.537777][ T9131] RSP: 002b:00007f5f8cddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 157.537796][ T9131] RAX: fffffffffffffe00 RBX: 00007f5f8c1b5fa0 RCX: 00007f5f8bf8e969 [ 157.537808][ T9131] RDX: 0000000000000001 RSI: 0000200000002e00 RDI: 000000000000000b [ 157.537819][ T9131] RBP: 00007f5f8c010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 157.537830][ T9131] R10: 00007fb14727dcaa R11: 0000000000000246 R12: 0000000000000000 [ 157.537841][ T9131] R13: 0000000000000000 R14: 00007f5f8c1b5fa0 R15: 00007ffeda4fff48 [ 157.537859][ T9131] [ 157.537865][ T9131] [ 157.841738][ T9131] Allocated by task 5847: [ 157.846075][ T9131] kasan_save_track+0x3e/0x80 [ 157.850782][ T9131] __kasan_kmalloc+0x93/0xb0 [ 157.855378][ T9131] __kmalloc_noprof+0x27a/0x4f0 [ 157.860237][ T9131] sk_prot_alloc+0xe7/0x220 [ 157.864741][ T9131] sk_alloc+0x3a/0x370 [ 157.868815][ T9131] bt_sock_alloc+0x3b/0x310 [ 157.873336][ T9131] l2cap_sock_new_connection_cb+0xe2/0x2b0 [ 157.879153][ T9131] l2cap_connect_cfm+0x37a/0x1040 [ 157.884175][ T9131] hci_remote_features_evt+0x581/0x8e0 [ 157.889646][ T9131] hci_event_packet+0x7e3/0x1200 [ 157.894590][ T9131] hci_rx_work+0x46a/0xe80 [ 157.899025][ T9131] process_scheduled_works+0xae1/0x17b0 [ 157.904602][ T9131] worker_thread+0x8a0/0xda0 [ 157.909219][ T9131] kthread+0x70e/0x8a0 [ 157.913299][ T9131] ret_from_fork+0x3fc/0x770 [ 157.917904][ T9131] ret_from_fork_asm+0x1a/0x30 [ 157.922672][ T9131] [ 157.925001][ T9131] Freed by task 9131: [ 157.928979][ T9131] kasan_save_track+0x3e/0x80 [ 157.933665][ T9131] kasan_save_free_info+0x46/0x50 [ 157.938701][ T9131] __kasan_slab_free+0x62/0x70 [ 157.943478][ T9131] kfree+0x18e/0x440 [ 157.947395][ T9131] __sk_destruct+0x4e1/0x660 [ 157.951999][ T9131] bt_accept_dequeue+0x3ce/0x590 [ 157.956949][ T9131] l2cap_sock_cleanup_listen+0x2f/0x3e0 [ 157.962590][ T9131] l2cap_sock_release+0x5d/0x1d0 [ 157.967596][ T9131] sock_close+0xc3/0x240 [ 157.971855][ T9131] __fput+0x44c/0xa70 [ 157.975856][ T9131] task_work_run+0x1d1/0x260 [ 157.980458][ T9131] do_exit+0x8d1/0x2550 [ 157.984670][ T9131] do_group_exit+0x21c/0x2d0 [ 157.989276][ T9131] get_signal+0x1286/0x1340 [ 157.993794][ T9131] arch_do_signal_or_restart+0x9a/0x750 [ 157.999351][ T9131] exit_to_user_mode_loop+0x75/0x110 [ 158.004648][ T9131] do_syscall_64+0x2bd/0x3b0 [ 158.009248][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.015147][ T9131] [ 158.017475][ T9131] The buggy address belongs to the object at ffff88807f68c000 [ 158.017475][ T9131] which belongs to the cache kmalloc-2k of size 2048 [ 158.031539][ T9131] The buggy address is located 452 bytes inside of [ 158.031539][ T9131] freed 2048-byte region [ffff88807f68c000, ffff88807f68c800) [ 158.045430][ T9131] [ 158.047756][ T9131] The buggy address belongs to the physical page: [ 158.054200][ T9131] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f688 [ 158.062962][ T9131] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 158.071462][ T9131] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 158.079019][ T9131] page_type: f5(slab) [ 158.083003][ T9131] raw: 00fff00000000040 ffff88801a442000 dead000000000100 dead000000000122 [ 158.091590][ T9131] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 158.100197][ T9131] head: 00fff00000000040 ffff88801a442000 dead000000000100 dead000000000122 [ 158.108888][ T9131] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 158.117564][ T9131] head: 00fff00000000003 ffffea0001fda201 00000000ffffffff 00000000ffffffff [ 158.126241][ T9131] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 158.134916][ T9131] page dumped because: kasan: bad access detected [ 158.141337][ T9131] page_owner tracks the page as allocated [ 158.147075][ T9131] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5189, tgid 5189 (klogd), ts 136744823310, free_ts 136725759181 [ 158.168022][ T9131] post_alloc_hook+0x240/0x2a0 [ 158.172810][ T9131] get_page_from_freelist+0x21e0/0x22c0 [ 158.178365][ T9131] __alloc_frozen_pages_noprof+0x181/0x370 [ 158.184175][ T9131] alloc_pages_mpol+0x232/0x4a0 [ 158.189039][ T9131] allocate_slab+0x8a/0x3b0 [ 158.193549][ T9131] ___slab_alloc+0xbfc/0x1480 [ 158.198229][ T9131] __kmalloc_cache_noprof+0x296/0x3d0 [ 158.203615][ T9131] syslog_print+0xd2/0x590 [ 158.208044][ T9131] do_syslog+0x544/0x760 [ 158.212297][ T9131] __x64_sys_syslog+0x7c/0x90 [ 158.216990][ T9131] do_syscall_64+0xfa/0x3b0 [ 158.221514][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.227415][ T9131] page last free pid 8416 tgid 8414 stack trace: [ 158.233750][ T9131] __free_frozen_pages+0xc6e/0xe50 [ 158.238865][ T9131] __folio_put+0x21b/0x2c0 [ 158.243284][ T9131] do_exit+0x1a3a/0x2550 [ 158.247530][ T9131] do_group_exit+0x21c/0x2d0 [ 158.252123][ T9131] get_signal+0x1286/0x1340 [ 158.256635][ T9131] arch_do_signal_or_restart+0x9a/0x750 [ 158.262188][ T9131] exit_to_user_mode_loop+0x75/0x110 [ 158.267477][ T9131] do_syscall_64+0x2bd/0x3b0 [ 158.272073][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.277976][ T9131] [ 158.280300][ T9131] Memory state around the buggy address: [ 158.285944][ T9131] ffff88807f68c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.294008][ T9131] ffff88807f68c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.302069][ T9131] >ffff88807f68c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.310131][ T9131] ^ [ 158.316284][ T9131] ffff88807f68c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.324361][ T9131] ffff88807f68c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.332455][ T9131] ================================================================== [ 158.340809][ T9131] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.348152][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.4.906 Not tainted 6.15.0-syzkaller-07802-g558428921edd #0 PREEMPT(full) [ 158.359708][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.369776][ T9131] Call Trace: [ 158.373064][ T9131] [ 158.375999][ T9131] dump_stack_lvl+0x99/0x250 [ 158.380617][ T9131] ? __asan_memcpy+0x40/0x70 [ 158.385255][ T9131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.390494][ T9131] ? __pfx__printk+0x10/0x10 [ 158.395095][ T9131] panic+0x2db/0x790 [ 158.399006][ T9131] ? __pfx_panic+0x10/0x10 [ 158.403452][ T9131] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 158.409350][ T9131] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 158.415248][ T9131] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 158.421587][ T9131] ? print_memory_metadata+0x314/0x400 [ 158.427072][ T9131] ? do_raw_spin_lock+0x23d/0x290 [ 158.432110][ T9131] check_panic_on_warn+0x89/0xb0 [ 158.437061][ T9131] ? do_raw_spin_lock+0x23d/0x290 [ 158.442094][ T9131] end_report+0x78/0x160 [ 158.446352][ T9131] kasan_report+0x129/0x150 [ 158.450982][ T9131] ? do_raw_spin_lock+0x23d/0x290 [ 158.456015][ T9131] do_raw_spin_lock+0x23d/0x290 [ 158.460869][ T9131] ? lock_acquire+0x5f/0x360 [ 158.465470][ T9131] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 158.470847][ T9131] ? __sk_destruct+0x4e1/0x660 [ 158.475620][ T9131] ? release_sock+0x2f/0x1f0 [ 158.480218][ T9131] release_sock+0x2f/0x1f0 [ 158.484650][ T9131] bt_accept_dequeue+0x512/0x590 [ 158.489616][ T9131] l2cap_sock_cleanup_listen+0x2f/0x3e0 [ 158.495172][ T9131] l2cap_sock_release+0x5d/0x1d0 [ 158.500119][ T9131] sock_close+0xc3/0x240 [ 158.504368][ T9131] ? __pfx_sock_close+0x10/0x10 [ 158.509223][ T9131] __fput+0x44c/0xa70 [ 158.513217][ T9131] task_work_run+0x1d1/0x260 [ 158.517863][ T9131] ? __pfx_task_work_run+0x10/0x10 [ 158.522985][ T9131] ? kmem_cache_free+0x18f/0x400 [ 158.527942][ T9131] do_exit+0x8d1/0x2550 [ 158.532137][ T9131] ? __pfx_do_exit+0x10/0x10 [ 158.536739][ T9131] ? cgroup_freezing+0x20/0x360 [ 158.541598][ T9131] ? cgroup_freezing+0x20/0x360 [ 158.546456][ T9131] do_group_exit+0x21c/0x2d0 [ 158.551058][ T9131] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.556266][ T9131] get_signal+0x1286/0x1340 [ 158.560797][ T9131] arch_do_signal_or_restart+0x9a/0x750 [ 158.566353][ T9131] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 158.572521][ T9131] ? exit_to_user_mode_loop+0x40/0x110 [ 158.577988][ T9131] exit_to_user_mode_loop+0x75/0x110 [ 158.583284][ T9131] do_syscall_64+0x2bd/0x3b0 [ 158.587974][ T9131] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.593196][ T9131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.599287][ T9131] ? clear_bhb_loop+0x60/0xb0 [ 158.603972][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.609886][ T9131] RIP: 0033:0x7f5f8bf8e969 [ 158.614307][ T9131] Code: Unable to access opcode bytes at 0x7f5f8bf8e93f. [ 158.621503][ T9131] RSP: 002b:00007f5f8cddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 158.629925][ T9131] RAX: fffffffffffffe00 RBX: 00007f5f8c1b5fa0 RCX: 00007f5f8bf8e969 [ 158.637906][ T9131] RDX: 0000000000000001 RSI: 0000200000002e00 RDI: 000000000000000b [ 158.645904][ T9131] RBP: 00007f5f8c010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 158.653884][ T9131] R10: 00007fb14727dcaa R11: 0000000000000246 R12: 0000000000000000 [ 158.661857][ T9131] R13: 0000000000000000 R14: 00007f5f8c1b5fa0 R15: 00007ffeda4fff48 [ 158.669839][ T9131] [ 158.673120][ T9131] Kernel Offset: disabled [ 158.677533][ T9131] Rebooting in 86400 seconds..