last executing test programs: 2.337188729s ago: executing program 2 (id=1358): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1409, 0x100, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20044090}, 0x800) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8915, 0x0) socket(0x10, 0x2, 0x0) (async) write(r0, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1409, 0x100, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20044090}, 0x800) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8915, 0x0) (async) 2.128333908s ago: executing program 2 (id=1361): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="5d580000000000001c001a8018000a8014000700000000000002"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x26}}, 0x0) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000000)={@default, @null}) 2.036738817s ago: executing program 0 (id=1363): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='xprtrdma_post_recv\x00', r3, 0x0, 0x4000000000}, 0x18) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r6) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f00000007c0)=0x10) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r4, 0x0, 0x1100000000f336, 0x0) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x8045}, 0x0) recvmsg$unix(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/120, 0xc4}, {&(0x7f0000001840)=""/4080, 0xff0}], 0x2}, 0x40002000) recvmsg$unix(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000400)=""/137, 0x89}], 0x2}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x90}, 0x3, 0xd0cc9fcddb9dd1eb}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000340)={r9, r9, 0x8, 0x0, 0x0, 0x82, 0x4a, 0xb, 0x5884, 0x7fe, 0x3, 0x8, 'syz1\x00'}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r12}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 1.890669608s ago: executing program 2 (id=1365): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0xb000)=nil, 0xb000, 0xedc623580215bdcd, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0x4, 0x8000, 0x10, 0x800, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x16, 0x0, 0x290) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x28, 0x6, 0xff, @local, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x4000000000000239, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x28, 0x6, 0xff, @local, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x4000000000000239, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r3, 0x9b85682c52fd9c22, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r3, 0x9b85682c52fd9c22, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r8, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x734f}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) (async) write$cgroup_subtree(r10, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000120065f200"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002e00000000004dd2def0a3973b9240044247d67713c08c318397867034b9f2a5144b14d086e4b60a703e6d0761e84511f6643722c2ca78ddafc20c1ca3f17d8e8798bb8cfb461d7a9c1105f91046f53a70c1af619c8585e5dfb9ab3cceb06e921711772ae96a2df5b4125866c1e60f767c8a5e174a70a012984a45608598f6074b19a50246f8940b4c7d02e90abdf354cc15d957cc6595c6f2e4121a5b5a09e7cff7373a06dc33063a7e699a94b62a13075b90cf5bc4fdb7064823b5d3db37c687ca89cc6e172ae811c79abb217f467fd3ad8abac5ce52748e3a773be2be84c9484a4b"], 0x28}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r11, 0xa773a000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r11, 0xa773a000) r12 = socket$inet6_sctp(0xa, 0x0, 0x84) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r12, 0x84, 0x7, &(0x7f0000000000)={0x5}, 0x4) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r12, 0x84, 0x7, &(0x7f0000000000)={0x5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b89f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.790198389s ago: executing program 3 (id=1367): r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_getroute={0xa0, 0x1a, 0x20, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xc8, 0x6, 0x200}, [@RTA_NEWDST={0x84, 0x13, [{0x6, 0x0, 0x1}, {0xf0f2c}, {0xfff81, 0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x0, 0x1}, {0x3ff}, {0xd73e, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xc0, 0x0, 0x1}, {0x62, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1}, {0x2}, {0x8, 0x0, 0x1}, {0x50, 0x0, 0x1}, {0x5}, {0x6, 0x0, 0x1}, {0xa000}, {0x23c6}, {0x5, 0x0, 0x1}, {0x5080, 0x0, 0x1}, {0xffffe}, {0xf}, {0x7606, 0x0, 0x1}, {0x7f94}, {0x2}, {0x0, 0x0, 0x1}, {0x100, 0x0, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 1.541264994s ago: executing program 3 (id=1369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x40) 1.528831903s ago: executing program 4 (id=1370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x0, 0x0, 0x0, 0xfffffffe}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x5, 0x0, 0x0, 0x10, @dev, @private0, 0x0, 0x0, 0x0, 0x1}}) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000024c0)=""/145, 0x91}], 0x1}}], 0x1, 0x40012000, 0x0) sendto$inet(r3, &(0x7f0000000240)="558ea275236af8aa80fe4c483b2a903a3dc9907c7b0b82b3125c87c036afc95427fe92f8c00729b0acd60ea3afbcfa1757d8c7fa4428cc5524fbe0d21df8c11df3c1f32ef1523db7eb850d2209b206530d345e44e53c9e47ce78717bcc04077b49fc2b881cb7185a8cd5b1a21539586efc8073752788ba0611b5987f3155f584ec286c7e531cbef9e0c9ff4c2aeb0c569285", 0x92, 0x4001, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/30, 0x204000, 0x1c00, 0xc, 0x2}, 0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00000000b0000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED]}, 0x28}}, 0x0) 1.40110141s ago: executing program 1 (id=1372): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x20}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f00000000c0)) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) (rerun: 32) 1.39982215s ago: executing program 2 (id=1373): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) clock_gettime(0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000100)=""/30, 0x1e}, {0x0}, {&(0x7f0000000340)=""/64, 0x40}, {&(0x7f0000000640)=""/160, 0xa0}], 0x5}}], 0x1, 0x100, &(0x7f0000001a40)) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x49}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000280)=""/45, &(0x7f0000000340)=0x2d) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x40, 0x20, 0x0, 0x1, {{0x1b, 0x4, 0x3, 0x17, 0x6c, 0x66, 0x0, 0xfd, 0x29, 0x0, @private=0xa010102, @remote, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x66, 0x1, 0x4, [{@broadcast, 0x6}, {@loopback, 0x9}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x20e}]}, @generic={0x83, 0xe, "754c24f8ff74005c9a332671"}, @noop, @generic={0x82, 0x7, "40f2f9aec4"}, @rr={0x7, 0xf, 0x3b, [@private=0xa010100, @empty, @multicast1]}]}}}}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000040000000000000000500000018210000", @ANYRES32=r3, @ANYBLOB="00000000050000f11712000056f555f07084cd9753408304b8bbf5cbc96debe75c671b644cd883089de70af266b9db88774436dadab3fe2c9408dd84e39314857500b2de6a62be3dfcb3294cacdcc7bd7b17a24845e191d1ea78a8fcb6492adc732baf7ea91932ace14c975f8519c1a69f5addba8b90c45e8517e269906618943cfb4cb7e341744f", @ANYRES32=r3, @ANYRES64=r4], &(0x7f0000000000)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x1d, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000200)={0x2f, @rand_addr=0x64010101, 0x4e21, 0x4, 'sh\x00', 0x0, 0x23, 0x14}, 0x2c) 1.361130535s ago: executing program 3 (id=1374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth0_to_batadv\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000001501050600030080"], 0x16b) 1.203720596s ago: executing program 4 (id=1375): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') (async) r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bd4e54d45303aaaaaaaaaa000806000100000604"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40884) (async) pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0) r5 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r5, 0x111, 0x0, 0x0, 0x90aa62107f0000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2040004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x44, 0x2d, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xc}, {0x5, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xe46}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800) getsockopt$SO_BINDTODEVICE(r6, 0x88, 0x65, 0x0, 0x19c8963c033227bd) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711045100000000077f1000700eeff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.145111921s ago: executing program 1 (id=1376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'a', ' *:* ', 'rm\x00'}, 0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1.143870903s ago: executing program 3 (id=1377): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.071358117s ago: executing program 0 (id=1378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x1c, 0x3e, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, &(0x7f0000000040)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.000755512s ago: executing program 4 (id=1379): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r1, 0x2f, 0x0, 0x0, @void, @value=r2}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001400000004"], 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) accept$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10) recvmmsg$unix(r4, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/14, 0xe}], 0x1}}], 0x1, 0x2, 0x0) 908.997866ms ago: executing program 1 (id=1380): socket$isdn(0x22, 0x2, 0x11) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001400b89500000000000000000a40000093fdea7de0cd1548010021aa1e4ed0cda98f396076e0fea1331c54a2cb97cdd8491a9767c61ebe678dda5fb32a3c", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400cb2ec2110000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) 883.547292ms ago: executing program 4 (id=1381): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="86777418bf55e70840c0250cc8a973e5eeee49475bc358c2d60c54c9702db02d3dafbe76932bbcf86bae0bcd3ff99f07f135175a5f391d64da56d22648ca57c3fe7cae393561fe6a0b876dac04b3b3a5686d5ca2d7cef20bce23780ce2c09e505ca160c07c6617fe90967dc82f14750109554e3d84c5727b643d065075d2c20d1b63e8846e215a69f8457c0d95410a8300a53df738ee31249f0855009713e969e8a53869d5ba076ac566917d071eefbe763e0625a43bc40cdfad9fa1ba50214bdea3c37f5ed90c27060439984ca47bdeafa9722c7067558a5c22b8b54b68e08fa43d1b634a43c72ca31cf196fb72aa2c9fc4a015a9407055"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rpcgss_svc_unwrap_failed\x00', r1, 0x0, 0x1}, 0xfed3) socket$packet(0x11, 0x2, 0x300) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 827.344518ms ago: executing program 0 (id=1382): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r1, 0x4, r1}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup, r0, 0x24, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1403, 0x100, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x2000c080) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)={0x20, 0x1405, 0x1, 0x70bd24, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x1000000}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0xfffff399, 0x9) setsockopt$inet6_int(r2, 0x29, 0xc9, &(0x7f0000000240)=0x9, 0x4) 736.801298ms ago: executing program 1 (id=1383): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xffffffb8, 0xb0b9, 0x2, 0x800, 0xffffffffffffffff, 0x204e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x8, @void, @value, @void, @value}, 0x50) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x44, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @dev, @broadcast}, &(0x7f0000000440)=0xc) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="95001009b7c0fcebf7b9c3816b497fe53737e7025a136c7ce0f7ad708a2b1a5247420f6bb767c1869f8a821d7c5092134b91274fcd12e41258c2170969da9c9e038cd3af18c123261a12f6582ec4eeb10c7d8a38746f5d0e03d8e6353eaac8ff762557aa6bfed1973d23230376011351f7d4a1a188fa48c650a50188e90f749a", 0x80}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000000000002000000ff070000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="7f0000010a010100000000001400000000000114560000ff01000000ffff0000000000001100000000000000000000000100000008000000000000001c000000de0000000000000008000000", @ANYRES32=r8, @ANYBLOB="7f000001ac1414bb000000001400000000000000000000000100000007000000000000004c000000000000000000000007000000890f3fe0000002ac14141eac1414bb94040000070b91ac1e010164010102831b77e000000100000000ffffffff7f000001ffffffff00"/116], 0xf0}, 0x20000040) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet(0x2, 0x3, 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0x188, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x101, 0x5}}, @common=@unspec=@connlabel={{0x28}, {0x7fff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], @ipv6=@local, [0xff, 0x0, 0xffffffff, 0xff000000], @ipv6=@remote, [0xff000000, 0xffffff00, 0xffffff00], 0x2, 0x10001, 0x3c, 0x4e20, 0x4e24, 0x4e21, 0x4e24, 0x300, 0x2001}, 0x80, 0x1000, 0x4e29, 0x4e22, 0x4e23, 0x4e24}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x6}, {}, 0x360, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0500000000000000000006000000ff070300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r9, 0x5, 0xffdfffff, 0x8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x56}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@allocspi={0x12c, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@dev}, {@in=@remote, 0x0, 0x32}, @in6=@empty}, 0x0, 0xa0b1}, [@tfcpad={0x8}, @user_kmaddress={0x2c, 0x1b, {@in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x12c}}, 0x0) (rerun: 32) 637.120005ms ago: executing program 4 (id=1384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'virt_wifi0\x00', 0x112}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 452.246725ms ago: executing program 0 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x3, 0x4}}, 0x2e) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 384.722027ms ago: executing program 2 (id=1386): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x1, {{0x6, 0x4, 0x0, 0x3e, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) writev(r2, &(0x7f0000000100)=[{&(0x7f0000002740)='\x00', 0x1}], 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$key(0xf, 0x3, 0x2) close(r6) (async) listen(r5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xffffff1f}}]}}, &(0x7f0000000f40)=""/4096, 0x32, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r5, 0x802) (async) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000100)=0x2, 0x4) (async) recvmmsg(r4, &(0x7f0000000540)=[{{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/126, 0x7e}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000480)=""/153, 0x99}, 0x1000}], 0x1, 0x0, &(0x7f0000000580)={0x77359400}) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x305, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x138}}, 0x0) 293.722689ms ago: executing program 1 (id=1387): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'veth0_to_bridge\x00', {0x8}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) 260.213611ms ago: executing program 2 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000c2b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000064c0)=0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 201.238135ms ago: executing program 3 (id=1389): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) sendto$l2tp(r2, 0x0, 0x0, 0x8800, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107f000000000004000000000000009508001500040000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 200.74953ms ago: executing program 0 (id=1390): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000100)=0x3, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000240)=0xa, 0x4) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 114.781114ms ago: executing program 3 (id=1391): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x75) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="3a31dee605c3db66981973e1487680b95780ba3ec96b7349b03deb877e14934eb38d47f17bafdd7e3da860dd135ddd969404a42b7cf0c3121e586eba61b70379e8db28dda70c296babc8683df8ce30e9ebc263b7fa334f2886d2d03aac1545f77db5d21f0db0955ffacdd1e70edd7fcb6a187cac5346bb3f3aced48fc5780d44b42acb34b58c2ba126fda2c940749bdb9cd8bcd59822b7ba4fdc506283fc5d29826a42a8ed595610a39a4c35e49c3ad42dc771deee450446d039bf6d1835d2bb3bba513b0893a3cea4ebae8640935f259a6c72", 0xd3, 0x20040000, &(0x7f0000000140)={0xa, 0x4e23, 0x269c711e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c) 110.549297ms ago: executing program 4 (id=1392): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000001100)=0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001c000104670000003f00000002000000", @ANYRES32=r1, @ANYBLOB="e00000000a0001000180c2000000000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x14004011}, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x45, &(0x7f0000000000)="2948e9df72208dac33c7637b2a4770ff19c1d3f7e038bc09c735bec74316c45bdac6a9998cee", 0x26) socket$alg(0x26, 0x5, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) 861.155µs ago: executing program 0 (id=1393): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, r2, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 0s ago: executing program 1 (id=1394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x75, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010003904fcffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="00000000422200001800128008000100677265000c0002"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x844) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)=ANY=[@ANYBLOB="58060000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x658}}, 0x200080d0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 89.290732][ T5815] cgroup: Unknown subsys name 'net' [ 89.450246][ T5815] cgroup: Unknown subsys name 'cpuset' [ 89.459445][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.240764][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.989811][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.014501][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.022497][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.031453][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.039658][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.049524][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.057859][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.066763][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.075095][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.086657][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.094537][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.104132][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.104678][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.112805][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.127833][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.138951][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.146685][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.155698][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.162883][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.171931][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.180154][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.187962][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.196199][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.205188][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.206413][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.660133][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.682223][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.682364][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.702068][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.740004][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.751359][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.778813][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.787026][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.810353][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.819800][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.837549][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.850377][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.903067][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.915465][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.939916][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.957784][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.966193][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.072143][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.085446][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.094160][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.120030][ T5854] Bluetooth: MGMT ver 1.23 [ 95.128219][ T5854] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.142850][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.161178][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.173965][ T5854] gretap0: entered promiscuous mode [ 95.322849][ T5858] xt_HMARK: spi-set and port-set can't be combined [ 95.346411][ T5860] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 95.374505][ T5861] Zero length message leads to an empty skb [ 95.399432][ T5860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.399690][ T5858] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 95.535910][ T5858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.676870][ T5873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.772237][ T5885] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 95.907089][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10'. [ 96.041004][ T5892] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 96.060088][ T5892] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12'. [ 96.084790][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 96.204178][ T5832] Bluetooth: hci0: command tx timeout [ 96.210145][ T5828] Bluetooth: hci1: command tx timeout [ 96.284026][ T5832] Bluetooth: hci4: command tx timeout [ 96.289755][ T5832] Bluetooth: hci3: command tx timeout [ 96.295721][ T5828] Bluetooth: hci2: command tx timeout [ 96.597980][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 96.635944][ T5918] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 97.029395][ T5935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22'. [ 97.145525][ T5938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.375632][ T5943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.405602][ T24] cfg80211: failed to load regulatory.db [ 97.430182][ T5946] warning: `syz.0.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.447892][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 97.458757][ T5943] netlink: 'syz.1.25': attribute type 5 has an invalid length. [ 97.473568][ T5946] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 97.488387][ T5946] netlink: 'syz.0.26': attribute type 3 has an invalid length. [ 97.529658][ T30] audit: type=1800 audit(1748812547.431:2): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.29" name="memory.events" dev="tmpfs" ino=43 res=0 errno=0 [ 97.593283][ T30] audit: type=1804 audit(1748812547.431:3): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.29" name="/newroot/5/memory.events" dev="tmpfs" ino=43 res=1 errno=0 [ 98.283574][ T5832] Bluetooth: hci0: command tx timeout [ 98.290558][ T5832] Bluetooth: hci1: command tx timeout [ 98.364298][ T5828] Bluetooth: hci3: command tx timeout [ 98.364322][ T5832] Bluetooth: hci2: command tx timeout [ 98.370459][ T5828] Bluetooth: hci4: command tx timeout [ 98.691129][ T6011] netlink: 'syz.1.48': attribute type 10 has an invalid length. [ 98.832462][ T6017] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6) [ 99.009406][ T6029] 8021q: VLANs not supported on gre0 [ 99.459476][ T6054] pim6reg: entered allmulticast mode [ 100.363479][ T5828] Bluetooth: hci1: command tx timeout [ 100.364112][ T5832] Bluetooth: hci0: command tx timeout [ 100.445386][ T5832] Bluetooth: hci2: command tx timeout [ 100.451029][ T5832] Bluetooth: hci4: command tx timeout [ 100.451858][ T5828] Bluetooth: hci3: command tx timeout [ 100.683048][ T6104] __nla_validate_parse: 14 callbacks suppressed [ 100.683070][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 100.760628][ T6112] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 100.762447][ T24] IPVS: starting estimator thread 0... [ 100.884632][ T6122] IPVS: using max 29 ests per chain, 69600 per kthread [ 101.074419][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 101.115005][ T6136] netlink: 64 bytes leftover after parsing attributes in process `syz.2.78'. [ 101.234770][ T6140] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 101.332201][ T6140] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 101.545362][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 101.650151][ T6166] netlink: 'syz.4.85': attribute type 29 has an invalid length. [ 101.732470][ T6159] netlink: 'syz.4.85': attribute type 29 has an invalid length. [ 102.443283][ T5828] Bluetooth: hci1: command tx timeout [ 102.443326][ T5832] Bluetooth: hci0: command tx timeout [ 102.523379][ T5832] Bluetooth: hci4: command tx timeout [ 102.523871][ T5828] Bluetooth: hci2: command tx timeout [ 102.528829][ T5148] Bluetooth: hci3: command tx timeout [ 102.720590][ T6209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.913545][ T6219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.915232][ T6217] netlink: 'syz.0.103': attribute type 12 has an invalid length. [ 102.935400][ T6217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.103'. [ 103.017348][ T1167] IPVS: starting estimator thread 0... [ 103.084522][ T6228] : entered promiscuous mode [ 103.123293][ T6225] IPVS: using max 31 ests per chain, 74400 per kthread [ 103.131789][ T6231] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 103.166932][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.188916][ T6231] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 103.223707][ T6231] netlink: 228 bytes leftover after parsing attributes in process `syz.2.106'. [ 103.233096][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 103.318775][ T6231] veth1: entered promiscuous mode [ 103.335875][ T6231] bond0: (slave veth1): Enslaving as an active interface with a down link [ 103.652801][ T6254] raw_sendmsg: syz.2.109 forgot to set AF_INET. Fix it! [ 103.699370][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 103.746832][ T6261] tipc: Started in network mode [ 103.763367][ T6261] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 103.806249][ T6261] tipc: Enabling of bearer rejected, failed to enable media [ 103.841546][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 103.907402][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 104.275033][ T6288] xt_bpf: check failed: parse error [ 104.359848][ T6286] syz.3.119 (6286) used greatest stack depth: 19960 bytes left [ 104.582879][ T6308] xfrm0: entered allmulticast mode [ 104.887090][ T6317] netlink: 'syz.2.129': attribute type 2 has an invalid length. [ 104.924367][ T6316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.360545][ T6343] trusted_key: syz.3.135 sent an empty control message without MSG_MORE. [ 105.385759][ T6347] netlink: 'syz.4.136': attribute type 4 has an invalid length. [ 105.582322][ T6357] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 105.643285][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 105.876826][ T6376] __nla_validate_parse: 8 callbacks suppressed [ 105.876847][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 105.900510][ T6376] netlink: 244 bytes leftover after parsing attributes in process `syz.4.144'. [ 106.091512][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 106.129469][ T6386] netlink: 'syz.4.149': attribute type 21 has an invalid length. [ 106.136098][ T6389] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.150433][ T6392] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 106.156569][ T6386] Bluetooth: MGMT ver 1.23 [ 106.161632][ T6392] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.147'. [ 106.642936][ T6414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.154'. [ 106.714041][ T6417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.888866][ T6426] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 106.954357][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.159'. [ 107.309033][ T6448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.671404][ T6476] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 107.722847][ T6478] xt_socket: unknown flags 0x3c [ 108.400055][ T6516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.408900][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 108.664919][ T6532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.693087][ T6534] netlink: 104 bytes leftover after parsing attributes in process `syz.4.189'. [ 108.747783][ T6534] netlink: 3 bytes leftover after parsing attributes in process `syz.4.189'. [ 108.775778][ T6534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.238549][ T6557] validate_nla: 1 callbacks suppressed [ 109.238570][ T6557] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 109.254573][ T6557] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 109.265937][ T6557] netlink: 48 bytes leftover after parsing attributes in process `syz.0.196'. [ 109.565443][ T6557] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 109.689464][ T6564] syzkaller1: entered promiscuous mode [ 109.719868][ T6564] syzkaller1: entered allmulticast mode [ 109.795621][ T6566] syzkaller0: entered promiscuous mode [ 109.801300][ T6566] syzkaller0: entered allmulticast mode [ 109.912393][ T6574] netlink: 'syz.2.201': attribute type 1 has an invalid length. [ 109.951051][ T6574] Illegal XDP return value 4294967274 on prog (id 55) dev N/A, expect packet loss! [ 110.365238][ T6595] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 110.444767][ T6564] RDS: rds_bind could not find a transport for ::ffff:172.20.20.53, load rds_tcp or rds_rdma? [ 110.483542][ T24] IPVS: starting estimator thread 0... [ 110.585333][ T6603] IPVS: using max 25 ests per chain, 60000 per kthread [ 110.784653][ T6612] sctp: [Deprecated]: syz.0.213 (pid 6612) Use of int in max_burst socket option. [ 110.784653][ T6612] Use struct sctp_assoc_value instead [ 110.827268][ T6612] sctp: [Deprecated]: syz.0.213 (pid 6612) Use of int in max_burst socket option. [ 110.827268][ T6612] Use struct sctp_assoc_value instead [ 110.976021][ T6621] x_tables: duplicate underflow at hook 2 [ 111.004067][ T6622] __nla_validate_parse: 4 callbacks suppressed [ 111.004087][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'. [ 111.051344][ T6622] xt_l2tp: v2 sid > 0xffff: 262144 [ 111.261120][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 111.727624][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 111.766785][ T6659] netlink: 'syz.0.229': attribute type 12 has an invalid length. [ 111.786967][ T6659] netlink: 132 bytes leftover after parsing attributes in process `syz.0.229'. [ 111.824065][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 112.414860][ T1167] IPVS: starting estimator thread 0... [ 112.429623][ T6697] openvswitch: netlink: Tunnel attr 14 has unexpected len 9 expected 0 [ 112.533742][ T6701] IPVS: using max 23 ests per chain, 55200 per kthread [ 113.779049][ T6723] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 114.012715][ T6733] netlink: 'syz.1.248': attribute type 21 has an invalid length. [ 114.077065][ T6736] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 114.242088][ T6736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.269249][ T6736] ip6erspan0: entered promiscuous mode [ 114.518520][ T6758] netlink: 56 bytes leftover after parsing attributes in process `syz.3.255'. [ 114.869036][ T6775] netlink: 52 bytes leftover after parsing attributes in process `syz.2.260'. [ 115.146237][ T6786] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 116.604513][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'. [ 116.671117][ T6853] netlink: 48 bytes leftover after parsing attributes in process `syz.2.279'. [ 116.763104][ T6858] syz_tun: entered promiscuous mode [ 116.790522][ T6858] vlan0: entered promiscuous mode [ 116.969084][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'. [ 117.092059][ T6877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.159187][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.289'. [ 117.169495][ T6880] vlan0: entered promiscuous mode [ 117.179713][ T6880] bond1: entered promiscuous mode [ 117.186321][ T6880] vlan0: entered allmulticast mode [ 117.192571][ T6880] bond1: entered allmulticast mode [ 117.365777][ T6896] unknown channel width for channel at 909000KHz? [ 117.397680][ T6896] netlink: 'syz.3.291': attribute type 10 has an invalid length. [ 117.423341][ T6896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.291'. [ 117.445250][ T6902] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 117.475793][ T6902] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 118.019347][ T6920] netlink: 'syz.4.299': attribute type 32 has an invalid length. [ 118.027619][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 118.101641][ T6920] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 118.517288][ T6943] xt_l2tp: invalid flags combination: c [ 118.901783][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 119.143051][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 119.218510][ T6983] netlink: 10 bytes leftover after parsing attributes in process `syz.4.319'. [ 119.316240][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.320'. [ 119.378858][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.320'. [ 119.541357][ T7000] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.817330][ T7013] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 119.924256][ T7019] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 119.937845][ T7019] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 120.059916][ T7028] IPv6: sit2: Disabled Multicast RS [ 120.067305][ T7028] sit2: entered allmulticast mode [ 120.569074][ T7046] netlink: 'syz.4.339': attribute type 2 has an invalid length. [ 120.647710][ T7051] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 121.202045][ T7078] xt_l2tp: v2 tid > 0xffff: 150994944 [ 121.235535][ T7080] xt_l2tp: v2 tid > 0xffff: 150994944 [ 121.258574][ T7081] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 121.515101][ T7092] openvswitch: netlink: Multiple metadata blocks provided [ 121.893915][ T7114] __nla_validate_parse: 2 callbacks suppressed [ 121.893936][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 122.385592][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 122.390823][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.365'. [ 122.409680][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 122.467194][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 122.671835][ T7148] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.367'. [ 122.681334][ T7148] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 122.786016][ T7162] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 122.849328][ T7166] netlink: 32 bytes leftover after parsing attributes in process `syz.4.372'. [ 122.936230][ T7162] bond3: entered promiscuous mode [ 122.970998][ T7162] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.254619][ T7184] netlink: 56 bytes leftover after parsing attributes in process `syz.3.380'. [ 123.325855][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.409722][ T7191] can: request_module (can-proto-5) failed. [ 123.438271][ T7193] netlink: 232 bytes leftover after parsing attributes in process `syz.2.381'. [ 123.525402][ T7196] netlink: 277 bytes leftover after parsing attributes in process `syz.2.381'. [ 124.104460][ T7187] netlink: 'syz.4.379': attribute type 29 has an invalid length. [ 124.124031][ T7187] netlink: 'syz.4.379': attribute type 29 has an invalid length. [ 124.844587][ T7256] x_tables: duplicate underflow at hook 1 [ 125.089531][ T7270] IPv6: sit2: Disabled Multicast RS [ 125.135421][ T7274] syz_tun: entered allmulticast mode [ 125.180612][ T7272] syz_tun: left allmulticast mode [ 126.471265][ T7336] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 126.577306][ T7336] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 126.622887][ T7336] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 126.680072][ T7337] bond0: (slave gretap1): making interface the new active one [ 126.691820][ T7337] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 126.701570][ T7336] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 126.723786][ T7336] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 126.743601][ T7336] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 126.756075][ T7348] C: renamed from lo [ 126.772603][ T7336] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 127.142773][ T7375] __nla_validate_parse: 6 callbacks suppressed [ 127.142793][ T7375] netlink: 48 bytes leftover after parsing attributes in process `syz.3.429'. [ 127.478782][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.434'. [ 127.506696][ T7398] netlink: 68 bytes leftover after parsing attributes in process `syz.3.436'. [ 127.551995][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 127.597942][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 127.896581][ T7414] netlink: 60 bytes leftover after parsing attributes in process `syz.4.441'. [ 127.898389][ T7416] No such timeout policy "syz0" [ 127.920572][ T7419] No such timeout policy "syz0" [ 128.046554][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 128.060729][ T7427] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 128.485403][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 128.534105][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 128.925273][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.456'. [ 130.131463][ T7496] bond0: entered allmulticast mode [ 130.137966][ T7495] openvswitch: netlink: Unknown nsh attribute 0 [ 130.170527][ T7495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.172944][ T7560] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.205539][ T7559] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.337111][ T7572] validate_nla: 58 callbacks suppressed [ 131.337133][ T7572] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 131.757377][ T7595] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 131.963477][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.228151][ T7623] __nla_validate_parse: 13 callbacks suppressed [ 132.228172][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 132.286475][ T7626] netlink: 'syz.2.494': attribute type 21 has an invalid length. [ 132.302105][ T7623] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 132.315243][ T7626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.494'. [ 132.388195][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.409952][ T7631] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 132.418451][ T7631] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 132.500518][ T7633] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 132.515856][ T7633] netlink: 224 bytes leftover after parsing attributes in process `syz.4.496'. [ 132.530109][ T7633] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.596027][ T7638] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.496'. [ 132.616059][ T7638] netlink: zone id is out of range [ 132.621464][ T7638] netlink: get zone limit has 8 unknown bytes [ 132.758636][ T7642] xt_CT: No such helper "pptp" [ 133.072687][ T7662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.255065][ T7664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.341322][ T7637] netlink: 'syz.3.498': attribute type 4 has an invalid length. [ 133.924560][ T7713] x_tables: duplicate underflow at hook 2 [ 133.962210][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.512'. [ 134.045088][ T7721] netlink: 'syz.0.512': attribute type 41 has an invalid length. [ 134.537179][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 134.560227][ T7747] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 134.823733][ T7761] Unknown options in mask 1f4 [ 134.932139][ T7768] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 135.058878][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'. [ 135.073846][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'. [ 135.113074][ T7776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'. [ 135.197537][ T7778] lo speed is unknown, defaulting to 1000 [ 135.204000][ T7778] lo speed is unknown, defaulting to 1000 [ 135.211752][ T7778] lo speed is unknown, defaulting to 1000 [ 135.222852][ T7778] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.239309][ T7778] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 135.286249][ T7778] lo speed is unknown, defaulting to 1000 [ 135.294289][ T7778] lo speed is unknown, defaulting to 1000 [ 135.301854][ T7778] lo speed is unknown, defaulting to 1000 [ 135.312340][ T7778] lo speed is unknown, defaulting to 1000 [ 135.348848][ T7778] lo speed is unknown, defaulting to 1000 [ 135.505968][ T7783] sctp: [Deprecated]: syz.1.536 (pid 7783) Use of int in maxseg socket option. [ 135.505968][ T7783] Use struct sctp_assoc_value instead [ 135.638386][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 135.727940][ T7790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.259899][ T7820] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 136.301391][ T7828] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 136.325440][ T7828] macsec0: entered allmulticast mode [ 136.362817][ T7828] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 136.400324][ T7828] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 136.436829][ T7828] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 136.655098][ T7853] delete_channel: no stack [ 136.934691][ T7867] bridge0: port 1(batadv0) entered blocking state [ 136.941312][ T7867] bridge0: port 1(batadv0) entered disabled state [ 137.000278][ T7867] batadv0: entered allmulticast mode [ 137.024294][ T5148] Bluetooth: hci0: command tx timeout [ 137.056784][ T7867] batadv0: entered promiscuous mode [ 137.286783][ T7884] netlink: 'syz.0.564': attribute type 39 has an invalid length. [ 137.344896][ T7889] __nla_validate_parse: 2 callbacks suppressed [ 137.344914][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 137.423302][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 137.434190][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 137.454242][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.564'. [ 137.935165][ T7921] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.982049][ T7916] syz_tun: entered allmulticast mode [ 137.998879][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 138.019622][ T7913] syz_tun: left allmulticast mode [ 138.019674][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 138.094144][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 138.314132][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 138.330064][ T7924] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 138.369569][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.383289][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.415510][ T7936] xt_hashlimit: max too large, truncated to 1048576 [ 138.463751][ T7924] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 138.473488][ T7924] gretap1: entered promiscuous mode [ 138.480716][ T7924] gretap1: entered allmulticast mode [ 138.554232][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 138.597620][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 138.670565][ T7940] dvmrp1: entered allmulticast mode [ 138.674772][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.579'. [ 138.935527][ T7958] netlink: 'syz.0.583': attribute type 26 has an invalid length. [ 139.083517][ T7963] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 139.132608][ T7963] netlink: 224 bytes leftover after parsing attributes in process `syz.1.586'. [ 139.195349][ T7970] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 139.501038][ T7985] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 139.524909][ T7985] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 139.550701][ T7985] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 139.575019][ T7985] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 139.593593][ T7985] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 139.613954][ T7985] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 139.647182][ T7985] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 139.846915][ T8002] dvmrp1: entered allmulticast mode [ 139.868417][ T8008] xt_hashlimit: invalid interval [ 140.141791][ T8021] pim6reg527: entered allmulticast mode [ 140.755734][ T8057] SET target dimension over the limit! [ 141.375397][ T8091] tipc: Enabling of bearer rejected, media not registered [ 141.421120][ T8091] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 141.668384][ T8103] veth3: entered allmulticast mode [ 141.801096][ T8103] lo speed is unknown, defaulting to 1000 [ 141.855492][ T8107] xt_CT: No such helper "snmp" [ 142.141360][ T8130] netlink: 'syz.0.640': attribute type 11 has an invalid length. [ 142.151479][ T8130] netlink: 'syz.0.640': attribute type 11 has an invalid length. [ 142.162217][ T8131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.297428][ T8131] validate_nla: 28 callbacks suppressed [ 142.297451][ T8131] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 142.327061][ T8131] netlink: 'syz.0.640': attribute type 3 has an invalid length. [ 142.337713][ T8140] x_tables: unsorted entry at hook 2 [ 142.347436][ T8142] x_tables: unsorted entry at hook 2 [ 142.361999][ T8131] __nla_validate_parse: 40 callbacks suppressed [ 142.362017][ T8131] netlink: 224 bytes leftover after parsing attributes in process `syz.0.640'. [ 142.402181][ T8144] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 142.565394][ T8147] openvswitch: netlink: IPv4 tun info is not correct [ 142.644153][ T8154] netlink: 124 bytes leftover after parsing attributes in process `syz.3.646'. [ 142.672737][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 143.089537][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 143.470161][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 143.500076][ T8199] netlink: 2 bytes leftover after parsing attributes in process `syz.2.658'. [ 143.516269][ T8198] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 143.909737][ T8223] tap0: tun_chr_ioctl cmd 1074025672 [ 143.921274][ T8223] tap0: ignored: set checksum disabled [ 144.747605][ T8264] netlink: 100 bytes leftover after parsing attributes in process `syz.1.671'. [ 144.789854][ T8271] xt_ecn: cannot match TCP bits for non-tcp packets [ 145.273542][ T8292] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.678'. [ 145.861385][ T8324] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 146.469667][ T8354] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 146.591766][ T8362] veth1: entered promiscuous mode [ 146.605702][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 146.625526][ T30] audit: type=1107 audit(1748812596.521:4): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='BܮvFz^ma!RCλS dѼ{c )gP0br啥&jB~HŸƇ3*@H' [ 147.456768][ T8417] netlink: 'syz.4.709': attribute type 1 has an invalid length. [ 147.566525][ T8424] netlink: 'syz.1.711': attribute type 2 has an invalid length. [ 147.585529][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 147.595359][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 147.616030][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 147.639630][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 147.642880][ T8423] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 147.659401][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 147.702671][ T8429] syzkaller1: entered promiscuous mode [ 147.715778][ T8423] netlink: 10 bytes leftover after parsing attributes in process `syz.2.712'. [ 147.731835][ T8429] syzkaller1: entered allmulticast mode [ 147.773346][ T8423] block nbd0: Unsupported socket: shutdown callout must be supported. [ 147.817364][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 148.235699][ T30] audit: type=1800 audit(1748812598.141:5): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.717" name="memory.events" dev="tmpfs" ino=686 res=0 errno=0 [ 148.336859][ T30] audit: type=1804 audit(1748812598.161:6): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.717" name="/newroot/131/memory.events" dev="tmpfs" ino=686 res=1 errno=0 [ 148.603371][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 148.828976][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 149.422625][ T8511] lo speed is unknown, defaulting to 1000 [ 149.617896][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 149.644395][ T8524] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 150.311948][ T8560] netlink: 'syz.3.743': attribute type 2 has an invalid length. [ 150.313999][ T8561] netlink: 'syz.2.744': attribute type 11 has an invalid length. [ 150.351438][ T8560] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.743'. [ 150.687587][ T8580] Cannot find del_set index 17 as target [ 151.022645][ T8591] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.007048][ T8633] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.595284][ T8662] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.606511][ T8660] pim6reg: entered allmulticast mode [ 152.637204][ T8660] netlink: 'syz.4.767': attribute type 4 has an invalid length. [ 152.789343][ T8672] __nla_validate_parse: 103 callbacks suppressed [ 152.789363][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 152.867099][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.774'. [ 152.896318][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.774'. [ 153.097649][ T8683] netlink: 'syz.2.773': attribute type 1 has an invalid length. [ 153.113319][ T8683] netlink: 228 bytes leftover after parsing attributes in process `syz.2.773'. [ 153.290927][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 153.470067][ T8713] openvswitch: netlink: Message has 199 unknown bytes. [ 153.487767][ T8709] lo speed is unknown, defaulting to 1000 [ 153.494133][ T8713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.661868][ T8723] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 153.791622][ T8733] netlink: 156 bytes leftover after parsing attributes in process `syz.3.790'. [ 153.807203][ T8732] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 153.839416][ T8734] tap0: tun_chr_ioctl cmd 1074025676 [ 153.862754][ T8734] tap0: owner set to 0 [ 153.919192][ T8732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.942398][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 154.067503][ T8737] veth3: entered promiscuous mode [ 154.110484][ T8737] bond2: (slave veth3): Enslaving as an active interface with a down link [ 154.151971][ T8732] ip6gretap0: entered allmulticast mode [ 154.187933][ T8732] bond2: (slave ip6gretap0): making interface the new active one [ 154.224723][ T8732] ip6gretap0: entered promiscuous mode [ 154.230517][ T8732] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 154.566822][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 155.206045][ T8792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'. [ 155.415376][ T8798] netlink: 80 bytes leftover after parsing attributes in process `syz.2.806'. [ 155.467988][ T8802] C: renamed from lo [ 155.657347][ T8815] rdma_op ffff8880283b21f0 conn xmit_rdma 0000000000000000 [ 155.668666][ T8815] rdma_op ffff8880283b49f0 conn xmit_rdma 0000000000000000 [ 156.358802][ T8843] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 156.684782][ T8850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.769394][ T8858] vlan0: entered promiscuous mode [ 156.784627][ T8858] bond3: entered promiscuous mode [ 156.789888][ T8858] vlan0: entered allmulticast mode [ 156.820244][ T8858] bond3: entered allmulticast mode [ 157.120602][ T8881] bond0: (slave gretap1): Releasing active interface [ 157.162518][ T8881] batadv0: left allmulticast mode [ 157.173458][ T8881] batadv0: left promiscuous mode [ 157.183573][ T8881] bridge0: port 1(batadv0) entered disabled state [ 158.039031][ T8929] netlink: 'syz.3.843': attribute type 7 has an invalid length. [ 158.087813][ T8929] netlink: 'syz.3.843': attribute type 7 has an invalid length. [ 158.117124][ T8929] netlink: 'syz.3.843': attribute type 7 has an invalid length. [ 158.178663][ T8929] netlink: 'syz.3.843': attribute type 7 has an invalid length. [ 158.196711][ T8933] netlink: 'syz.2.846': attribute type 39 has an invalid length. [ 158.228554][ T8929] netlink: 'syz.3.843': attribute type 7 has an invalid length. [ 158.269477][ T8929] netlink: 'syz.3.843': attribute type 7 has an invalid length. [ 158.313464][ T8929] netlink: 'syz.3.843': attribute type 7 has an invalid length. [ 158.321815][ T8929] netlink: 'syz.3.843': attribute type 7 has an invalid length. [ 158.373469][ T8929] netlink: 'syz.3.843': attribute type 7 has an invalid length. [ 158.653286][ T8958] netlink: 'syz.3.851': attribute type 11 has an invalid length. [ 158.681331][ T8958] netlink: 'syz.3.851': attribute type 11 has an invalid length. [ 158.725620][ T8958] __nla_validate_parse: 6 callbacks suppressed [ 158.725639][ T8958] netlink: 224 bytes leftover after parsing attributes in process `syz.3.851'. [ 158.775674][ T8961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.852'. [ 159.010483][ T8971] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 159.369699][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 159.517484][ T8987] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 160.002778][ T9003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.865'. [ 160.029378][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'. [ 160.066169][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 160.327126][ T9011] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.339085][ T9011] bridge0: port 1(bond6) entered blocking state [ 160.347999][ T9011] bridge0: port 1(bond6) entered disabled state [ 160.354916][ T9011] bond6: entered allmulticast mode [ 160.362366][ T9011] bond6: entered promiscuous mode [ 160.481394][ T9032] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 160.674984][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 160.722506][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 160.966814][ T9056] netlink: 7202 bytes leftover after parsing attributes in process `syz.4.882'. [ 160.999697][ T9049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.028558][ T9056] netlink: 7202 bytes leftover after parsing attributes in process `syz.4.882'. [ 161.114037][ T9055] veth5: entered promiscuous mode [ 161.145567][ T9055] bond4: (slave veth5): Enslaving as an active interface with a down link [ 161.167837][ T9060] vlan1: entered allmulticast mode [ 161.175495][ T9060] bond4: entered allmulticast mode [ 161.186375][ T9060] bond4: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 161.424913][ T1167] IPVS: starting estimator thread 0... [ 161.522325][ T9079] IPVS: using max 26 ests per chain, 62400 per kthread [ 161.604566][ T9089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.017429][ T9110] sctp: [Deprecated]: syz.3.903 (pid 9110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.017429][ T9110] Use struct sctp_sack_info instead [ 162.067301][ T9107] macvtap0: entered promiscuous mode [ 162.072764][ T9107] gretap0: entered promiscuous mode [ 162.117171][ T9107] macvtap0: entered allmulticast mode [ 162.135527][ T9107] gretap0: entered allmulticast mode [ 162.677864][ T9145] x_tables: duplicate underflow at hook 3 [ 162.686782][ T9143] dvmrp0: entered allmulticast mode [ 163.724709][ T9198] 8021q: adding VLAN 0 to HW filter on device bond7 [ 163.837808][ T9210] __nla_validate_parse: 12 callbacks suppressed [ 163.837829][ T9210] netlink: 52 bytes leftover after parsing attributes in process `syz.3.929'. [ 163.900343][ T9214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.930'. [ 163.918680][ T9214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'. [ 164.039601][ T9223] netlink: 72 bytes leftover after parsing attributes in process `syz.4.932'. [ 164.238086][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 164.566993][ T9246] pim6reg: left allmulticast mode [ 165.294872][ T1165] ip6gretap0: left promiscuous mode [ 165.323545][ T1165] wlan0: Trigger new scan to find an IBSS to join [ 165.401802][ T9291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.947'. [ 165.597766][ T9289] syz.4.950 (9289) used greatest stack depth: 17992 bytes left [ 165.924475][ T9315] xt_nfacct: accounting object `syz1' does not exists [ 165.951473][ T9318] netlink: 192 bytes leftover after parsing attributes in process `syz.2.959'. [ 166.060911][ T9318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.959'. [ 166.385447][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 166.416489][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 166.437678][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.457800][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.936623][ T9374] validate_nla: 62 callbacks suppressed [ 166.936645][ T9374] netlink: 'syz.3.977': attribute type 18 has an invalid length. [ 166.974030][ T9376] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 167.441494][ T9405] netlink: 'syz.0.984': attribute type 39 has an invalid length. [ 168.858853][ T9479] __nla_validate_parse: 7 callbacks suppressed [ 168.858875][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 168.909505][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 168.951671][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'. [ 168.990980][ T9479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.366573][ T9506] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 169.573080][ T9521] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 169.822268][ T9543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1023'. [ 170.031310][ T9555] blkio.reset_stats is deprecated [ 170.038713][ T9555] netlink: 'syz.0.1026': attribute type 23 has an invalid length. [ 170.097321][ T9553] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 170.110969][ T9553] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 170.172493][ T9560] netlink: 'syz.4.1029': attribute type 29 has an invalid length. [ 170.193646][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 170.241445][ T9560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1029'. [ 170.255825][ T9559] openvswitch: netlink: Missing key (keys=40, expected=80) [ 170.264553][ T9568] netlink: 'syz.3.1028': attribute type 1 has an invalid length. [ 170.272332][ T9568] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1028'. [ 170.283664][ T1165] wlan0: Trigger new scan to find an IBSS to join [ 170.361928][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'. [ 170.517712][ T9585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.555195][ T9589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.001176][ T9606] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1040'. [ 171.207590][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.337896][ T9623] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1046'. [ 171.412984][ T9628] netlink: 'syz.2.1048': attribute type 12 has an invalid length. [ 171.426894][ T9630] netlink: 'syz.2.1048': attribute type 12 has an invalid length. [ 172.544261][ T9684] xt_l2tp: unknown flags: 18 [ 172.841511][ T9706] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 173.191708][ T9723] GUP no longer grows the stack in syz.4.1069 (9723): 200000006000-20000000a000 (200000005000) [ 173.233428][ T9723] CPU: 0 UID: 0 PID: 9723 Comm: syz.4.1069 Not tainted 6.15.0-syzkaller-07802-g558428921edd #0 PREEMPT(full) [ 173.233459][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.233479][ T9723] Call Trace: [ 173.233487][ T9723] [ 173.233497][ T9723] dump_stack_lvl+0x189/0x250 [ 173.233548][ T9723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.233582][ T9723] ? __pfx__printk+0x10/0x10 [ 173.233601][ T9723] ? find_vma+0xe7/0x160 [ 173.233657][ T9723] __get_user_pages+0x2a96/0x30c0 [ 173.233726][ T9723] ? __pfx___get_user_pages+0x10/0x10 [ 173.233753][ T9723] ? __gup_longterm_locked+0xbf7/0x15b0 [ 173.233782][ T9723] ? down_read_killable+0x1d1/0x350 [ 173.233810][ T9723] ? try_get_folio+0x633/0x660 [ 173.233845][ T9723] __gup_longterm_locked+0xd66/0x15b0 [ 173.233880][ T9723] ? try_grab_folio_fast+0x1be/0x4f0 [ 173.233921][ T9723] ? gup_fast_fallback+0x1afc/0x2260 [ 173.233954][ T9723] gup_fast_fallback+0x1cd4/0x2260 [ 173.234023][ T9723] ? __pfx_gup_fast_fallback+0x10/0x10 [ 173.234049][ T9723] ? trace_contention_end+0x39/0x120 [ 173.234083][ T9723] ? __mutex_lock+0x330/0xe80 [ 173.234115][ T9723] ? is_valid_gup_args+0x11f/0x200 [ 173.234146][ T9723] ? get_user_pages_fast+0x4d/0xb0 [ 173.234178][ T9723] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 173.234208][ T9723] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 173.234240][ T9723] ? wait_for_space+0x24d/0x2d0 [ 173.234273][ T9723] iov_iter_get_pages2+0x5e/0xa0 [ 173.234298][ T9723] __se_sys_vmsplice+0x548/0x10d0 [ 173.234351][ T9723] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 173.234382][ T9723] ? __pfx_futex_wait+0x10/0x10 [ 173.234423][ T9723] ? __lock_acquire+0xab9/0xd20 [ 173.234494][ T9723] ? rcu_is_watching+0x15/0xb0 [ 173.234531][ T9723] ? do_syscall_64+0xbe/0x3b0 [ 173.234569][ T9723] do_syscall_64+0xfa/0x3b0 [ 173.234595][ T9723] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.234619][ T9723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.234641][ T9723] ? clear_bhb_loop+0x60/0xb0 [ 173.234667][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.234688][ T9723] RIP: 0033:0x7f2c50f8e969 [ 173.234707][ T9723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.234725][ T9723] RSP: 002b:00007f2c51e19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 173.234748][ T9723] RAX: ffffffffffffffda RBX: 00007f2c511b6080 RCX: 00007f2c50f8e969 [ 173.234762][ T9723] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 173.234775][ T9723] RBP: 00007f2c51010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 173.234788][ T9723] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 173.234799][ T9723] R13: 0000000000000000 R14: 00007f2c511b6080 R15: 00007ffe4e3bd498 [ 173.234833][ T9723] [ 173.582540][ T9731] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 173.950861][ T9750] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 173.985031][ T9752] __nla_validate_parse: 11 callbacks suppressed [ 173.985050][ T9752] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1074'. [ 174.005513][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 174.030266][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'. [ 174.279156][ T9771] sctp: [Deprecated]: syz.1.1080 (pid 9771) Use of int in max_burst socket option. [ 174.279156][ T9771] Use struct sctp_assoc_value instead [ 174.322521][ T9773] sctp: [Deprecated]: syz.1.1080 (pid 9773) Use of int in max_burst socket option. [ 174.322521][ T9773] Use struct sctp_assoc_value instead [ 174.448607][ T9775] netlink: 'syz.0.1081': attribute type 4 has an invalid length. [ 174.717722][ T9787] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1086'. [ 174.782313][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'. [ 174.903688][ T9796] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1089'. [ 174.914799][ T9796] unsupported nlmsg_type 40 [ 175.229847][ T9809] C speed is unknown, defaulting to 1000 [ 175.514937][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 175.666147][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1098'. [ 175.963998][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 176.113907][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.114570][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.170714][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.184682][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.222040][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 176.245668][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.246456][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.279520][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.295349][ T9856] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 176.302790][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.312658][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.336798][ T9856] netlink: 'syz.3.1105': attribute type 2 has an invalid length. [ 176.341428][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.083692][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 177.207720][ T9904] C speed is unknown, defaulting to 1000 [ 177.251310][ T9907] netlink: 'syz.1.1119': attribute type 11 has an invalid length. [ 177.537624][ T9926] x_tables: duplicate underflow at hook 1 [ 178.039353][ T9932] C speed is unknown, defaulting to 1000 [ 178.451770][ T9961] gtp1: entered promiscuous mode [ 178.499420][ T9964] netlink: 'syz.0.1132': attribute type 11 has an invalid length. [ 179.011473][ T9993] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 179.028361][ T9932] netlink: 'syz.4.1126': attribute type 4 has an invalid length. [ 179.030160][ T9993] netlink: 'syz.0.1139': attribute type 2 has an invalid length. [ 179.428474][T10007] __nla_validate_parse: 3 callbacks suppressed [ 179.428495][T10007] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1142'. [ 179.854331][T10034] netlink: 'syz.0.1147': attribute type 2 has an invalid length. [ 179.878429][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 180.446212][T10062] x_tables: unsorted entry at hook 3 [ 180.991028][T10084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1163'. [ 181.384045][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 181.709292][T10113] xt_ct_set_timeout: 55 callbacks suppressed [ 181.709312][T10113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.883385][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 181.937710][T10106] C speed is unknown, defaulting to 1000 [ 181.943494][T10113] xt_CT: No such helper "pptp" [ 181.955840][T10116] C speed is unknown, defaulting to 1000 [ 182.208425][T10142] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1177'. [ 182.239300][T10142] openvswitch: netlink: Message has 5 unknown bytes. [ 182.576482][T10157] netlink: 'syz.3.1182': attribute type 9 has an invalid length. [ 183.027584][T10169] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1184'. [ 183.092765][T10176] netlink: 'syz.0.1185': attribute type 4 has an invalid length. [ 183.540202][T10196] netlink: 'syz.0.1190': attribute type 1 has an invalid length. [ 183.587122][T10192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.619993][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1189'. [ 183.675117][T10192] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 183.688266][T10192] netlink: 'syz.2.1189': attribute type 2 has an invalid length. [ 183.713351][T10192] netlink: 'syz.2.1189': attribute type 3 has an invalid length. [ 183.755452][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 183.937477][T10209] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1193'. [ 183.966383][T10211] 8021q: VLANs not supported on gre0 [ 183.986220][T10214] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:20004 [ 185.177699][T10277] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1211'. [ 185.327560][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1213'. [ 185.414469][T10290] netlink: 'syz.4.1212': attribute type 1 has an invalid length. [ 185.662810][T10301] xt_l2tp: missing protocol rule (udp|l2tpip) [ 186.105441][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1217'. [ 186.155151][T10308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1217'. [ 186.167867][T10320] openvswitch: netlink: Missing key (keys=40, expected=80) [ 186.454093][T10331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1222'. [ 186.469900][T10331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1222'. [ 186.513095][T10332] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 186.649637][T10338] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1225'. [ 186.696077][T10338] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1225'. [ 186.774844][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1227'. [ 186.787125][T10339] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1225'. [ 187.854225][T10400] pim6reg527: entered allmulticast mode [ 188.021371][T10412] tipc: Enabling of bearer rejected, media not registered [ 188.266486][T10425] netlink: 'syz.4.1249': attribute type 3 has an invalid length. [ 188.458254][T10438] IPVS: set_ctl: invalid protocol: 140 10.1.1.2:20001 [ 188.945822][T10454] pimreg: entered allmulticast mode [ 189.197776][T10467] vlan0: entered allmulticast mode [ 189.259986][T10467] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 189.423719][T10477] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 189.426091][T10479] netlink: 'syz.4.1264': attribute type 3 has an invalid length. [ 189.754519][T10495] xfrm0: entered promiscuous mode [ 189.779010][T10495] xfrm0: entered allmulticast mode [ 189.826125][T10498] netlink: 'syz.3.1269': attribute type 1 has an invalid length. [ 189.910916][T10505] C speed is unknown, defaulting to 1000 [ 190.536635][T10545] __nla_validate_parse: 139 callbacks suppressed [ 190.536659][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 190.815188][T10556] mac80211_hwsim hwsim10 : renamed from wlan1 (while UP) [ 190.832469][T10541] syzkaller1: entered promiscuous mode [ 190.842069][T10541] syzkaller1: entered allmulticast mode [ 191.528007][T10594] netlink: 'syz.3.1297': attribute type 21 has an invalid length. [ 191.542995][T10594] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1297'. [ 191.645532][T10605] xt_bpf: check failed: parse error [ 192.116498][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 192.146236][T10621] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 192.178625][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 192.361388][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1308'. [ 192.380179][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 192.414119][T10631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 192.656293][T10649] netlink: 'syz.1.1312': attribute type 5 has an invalid length. [ 193.247052][T10666] tipc: Started in network mode [ 193.259531][T10666] tipc: Node identity 080211, cluster identity 4711 [ 193.269031][T10666] tipc: Enabled bearer , priority 0 [ 193.295367][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 193.311131][T10671] C speed is unknown, defaulting to 1000 [ 193.397800][T10666] tipc: Resetting bearer [ 193.604975][T10681] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1325'. [ 193.628530][T10681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1325'. [ 193.992158][T10707] netlink: 'syz.3.1329': attribute type 28 has an invalid length. [ 194.001006][T10707] netlink: 'syz.3.1329': attribute type 3 has an invalid length. [ 194.300830][T10721] syzkaller1: entered promiscuous mode [ 194.328296][T10721] syzkaller1: entered allmulticast mode [ 194.384723][ T24] tipc: Node number set to 134353152 [ 199.817317][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.284281][ T37] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 212.236965][T10759] __nla_validate_parse: 2 callbacks suppressed [ 212.236986][T10759] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1334'. [ 212.260411][T10764] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 212.346456][T10769] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 212.357644][T10769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1337'. [ 212.368880][T10772] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.824272][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1342'. [ 212.845856][T10805] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1342'. [ 212.970133][T10814] netlink: 696 bytes leftover after parsing attributes in process `syz.0.1344'. [ 213.190447][T10825] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1348'. [ 213.209381][T10821] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1347'. [ 213.237458][T10829] vlan1: entered allmulticast mode [ 213.242646][T10829] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 213.953271][T10869] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1361'. [ 214.305659][T10896] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 214.339952][T10894] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 214.364959][ T5148] Bluetooth: hci0: command tx timeout [ 214.583074][T10908] netlink: 'syz.1.1372': attribute type 5 has an invalid length. [ 214.917230][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 214.943941][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1376'. [ 214.957183][T10930] netlink: 'syz.1.1376': attribute type 12 has an invalid length. [ 214.967550][T10930] netlink: 'syz.1.1376': attribute type 11 has an invalid length. [ 214.980849][T10934] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 215.110680][T10939] bridge4: entered allmulticast mode [ 215.161425][T10939] delete_channel: no stack [ 215.348395][T10949] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 215.836364][T10970] sit1: entered promiscuous mode [ 215.864823][T10970] sit1: entered allmulticast mode [ 215.989781][T10982] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 216.019569][ T5843] non-paged memory [ 216.025261][ T5843] list_del corruption, ffff888033485580->next is LIST_POISON1 (dead000000000100) [ 216.035503][ T5843] ------------[ cut here ]------------ [ 216.041046][ T5843] kernel BUG at lib/list_debug.c:58! [ 216.049258][ T5843] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 216.055667][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: kworker/u9:6 Not tainted 6.15.0-syzkaller-07802-g558428921edd #0 PREEMPT(full) [ 216.067876][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.078000][ T5843] Workqueue: hci4 hci_conn_timeout [ 216.083165][ T5843] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 216.090401][ T5843] Code: 80 67 e2 8b 48 89 de e8 b0 de 61 fc 90 0f 0b 4c 89 e7 e8 15 e0 3c fd 48 c7 c7 e0 67 e2 8b 48 89 de 4c 89 e2 e8 93 de 61 fc 90 <0f> 0b 4c 89 e7 e8 f8 df 3c fd 48 c7 c7 40 68 e2 8b 48 89 de 4c 89 [ 216.110025][ T5843] RSP: 0018:ffffc9000490f980 EFLAGS: 00010246 [ 216.116118][ T5843] RAX: 000000000000004e RBX: ffff888033485580 RCX: 3788508077ac3300 [ 216.124280][ T5843] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 216.132290][ T5843] RBP: ffffffff8a72cec0 R08: 0000000000000003 R09: 0000000000000004 [ 216.140356][ T5843] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: dead000000000100 [ 216.148340][ T5843] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 216.156416][ T5843] FS: 0000000000000000(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 216.165356][ T5843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.171952][ T5843] CR2: 0000200000033000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 216.179935][ T5843] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.187911][ T5843] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.195894][ T5843] Call Trace: [ 216.199284][ T5843] [ 216.202224][ T5843] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 216.207877][ T5843] hci_cancel_connect_sync+0xc8/0x120 [ 216.213433][ T5843] hci_abort_conn+0x191/0x330 [ 216.218123][ T5843] ? process_scheduled_works+0x9ef/0x17b0 [ 216.223865][ T5843] process_scheduled_works+0xae1/0x17b0 [ 216.229542][ T5843] ? __pfx_process_scheduled_works+0x10/0x10 [ 216.235545][ T5843] worker_thread+0x8a0/0xda0 [ 216.240177][ T5843] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.246515][ T5843] ? __kthread_parkme+0x7b/0x200 [ 216.251470][ T5843] kthread+0x70e/0x8a0 [ 216.255552][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 216.260679][ T5843] ? __pfx_kthread+0x10/0x10 [ 216.265363][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.270568][ T5843] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.275781][ T5843] ? __pfx_kthread+0x10/0x10 [ 216.280375][ T5843] ret_from_fork+0x3fc/0x770 [ 216.284979][ T5843] ? __pfx_ret_from_fork+0x10/0x10 [ 216.290105][ T5843] ? __switch_to_asm+0x39/0x70 [ 216.295159][ T5843] ? __switch_to_asm+0x33/0x70 [ 216.299947][ T5843] ? __pfx_kthread+0x10/0x10 [ 216.304757][ T5843] ret_from_fork_asm+0x1a/0x30 [ 216.309555][ T5843] [ 216.312580][ T5843] Modules linked in: [ 216.320294][ T5843] ---[ end trace 0000000000000000 ]--- [ 216.326337][ T5843] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 216.333896][ T5843] Code: 80 67 e2 8b 48 89 de e8 b0 de 61 fc 90 0f 0b 4c 89 e7 e8 15 e0 3c fd 48 c7 c7 e0 67 e2 8b 48 89 de 4c 89 e2 e8 93 de 61 fc 90 <0f> 0b 4c 89 e7 e8 f8 df 3c fd 48 c7 c7 40 68 e2 8b 48 89 de 4c 89 [ 216.354279][ T5843] RSP: 0018:ffffc9000490f980 EFLAGS: 00010246 [ 216.360403][ T5843] RAX: 000000000000004e RBX: ffff888033485580 RCX: 3788508077ac3300 [ 216.369254][ T5843] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 216.377490][ T5843] RBP: ffffffff8a72cec0 R08: 0000000000000003 R09: 0000000000000004 [ 216.385917][ T5843] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: dead000000000100 [ 216.394057][ T5843] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 216.402067][ T5843] FS: 0000000000000000(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 216.411102][ T5843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.418200][ T5843] CR2: 0000200000033000 CR3: 00000000213b2000 CR4: 00000000003526f0 [ 216.426291][ T5843] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.434737][ T5843] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.442749][ T5843] Kernel panic - not syncing: Fatal exception [ 216.449132][ T5843] Kernel Offset: disabled [ 216.453459][ T5843] Rebooting in 86400 seconds..