last executing test programs: 19.008056338s ago: executing program 4 (id=2269): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) r3 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x60, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6bc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x2e, 0x2, {0x0, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x0) 19.006950512s ago: executing program 4 (id=2270): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd70000000000002200000000000001f000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x3c, r3, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x5c, r3, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x100}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}}, 0x24000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x51, 0x3e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$netlink(0x10, 0x3, 0x1) 18.937249232s ago: executing program 4 (id=2272): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x5, 0x20000000, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x44, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@hopopts={0x11}], "bf0c7de8ed8f6ec5402a1859"}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) 18.869808744s ago: executing program 4 (id=2274): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ef12fc60000000", @ANYRES16=0x0, @ANYBLOB="040427bd7000fcdbdf25190000000c009900010000801d0000000500a3000100000005001c008800000006006d000f00000006006d000800000005001d009700000006006d000008000005001d000d00000005001e0009000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x22000091) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="300129bd7000000000000f0000002800018008000300020000001400020070696d3672656731000000000001f0ffff0003000300000030a2876dc714000180080003000100000014000200776c616e30000000000000000000000008000300000000", @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x147f43, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000180)=0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f0000000380)}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000001440)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c00000008000000beaf973fed7f2cec7d45e7bd05000000020000000a401400", @ANYRES32=r7, @ANYBLOB="eb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300"/28], 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) 18.720030704s ago: executing program 4 (id=2275): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00:\x00', @ANYRES32=0x0, @ANYBLOB="2eb1dde243636473b5984016"], 0x28}}, 0x0) 8.937016308s ago: executing program 4 (id=2275): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00:\x00', @ANYRES32=0x0, @ANYBLOB="2eb1dde243636473b5984016"], 0x28}}, 0x0) 3.718830511s ago: executing program 3 (id=2466): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x3000000}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xc6, &(0x7f0000001040), &(0x7f00000000c0)=0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="f7ffffff", 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020601080000000007000000000000001400074e385fee0a43af961b438ffbfd38a37beced39ce8fba80010000000000000005001500100000000500010006000000050005000a00000005000400000000000900020073797a300000dd23cfeed3c6eb515a0585fce00040208917cf6c43f5d8e4d4e46087cf"], 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x1bc, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6d, 0x5, "7262296dddefed63130263401e56092b66144f10864722c3cbc78c9ce9516e5a00b93065d4237a2194c6d3ef0668ee459dba9122a23a634e90cbfbe370358ca58482a75d44e7f1ad97595d6262585aee908183d8cb86ef553b1202773763ce6f066fcc614aa25d23cb"}, @ETHTOOL_A_BITSET_MASK={0xef, 0x5, "6d23636ce484fbbe74fb6591c62a049cdbea450250dc5a37aa2ce0cbfe8683d66931c64ab587cd8e515a51f6912af11ffb0bbfeb9e4abaac2993351048f664f65eecd614b16b3adce34d01f737e53115b37ac1087b372f81f9c476554f88acd52f0e95cc9f0c6d61bd8b58882d4e4d5bbd291ebb625a2d8678f6f526c3ef4773346bb2636498cfa13057d09f7a44b7a28a3d3af9f504cf9b3d47d8ebf700d853809f92db173c417e8b0844c23c2ad17b990fe9d5254cc61babde0e3ce24f07fd465839bf8b5bc010a3a15be33887506bfe0b90af8e0bff067f693a00302ce1fcd19d1d06bcd3b5eb74b851"}, @ETHTOOL_A_BITSET_VALUE={0x1c, 0x4, "7d2640b5435bb7a65beecbb274aff97d9ce289af93e2a04d"}]}]}, 0x1bc}}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r8, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x378, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3bc4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x70000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1a0000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x128, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x378}}, 0x10) 3.316397737s ago: executing program 3 (id=2471): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001"], 0x114}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r1, &(0x7f0000000640)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)=""/166, 0xa6}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000540)=""/113, 0x71}], 0x8}}], 0x1, 0x0, &(0x7f0000000680)={0x0, 0x3938700}) 2.383145818s ago: executing program 3 (id=2482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x5b8, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x10, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x584, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0xe}, {0x40, 0x4, 0x2, 0x80}, {0xc3, 0x4, 0x1, 0x8}, {0xd3ff, 0x6f, 0xd, 0x5}, {0x5, 0x7f, 0x1}, {0xfef, 0x9, 0x8, 0x2}, {0x5, 0xff, 0x10}, {0x9, 0x6, 0x50, 0x9}]}}, @TCA_BPF_POLICE={0x418, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xb, 0x1ff, 0x63e05c2f, 0xc5, 0x800000, 0x2, 0x0, 0xfff, 0x590, 0x401, 0x0, 0x101, 0x80000000, 0x1, 0x8, 0x4, 0x4, 0x7, 0x10, 0x1000, 0x80, 0x4, 0x4, 0x9b1, 0x80000001, 0x0, 0x0, 0x5, 0xd9, 0x4, 0x0, 0x4, 0xfffffffa, 0x8, 0x6, 0x2, 0x3, 0x0, 0x0, 0x2, 0x2, 0x4, 0x5, 0x8, 0x7, 0x3, 0x7, 0x7fff, 0x70b8, 0x4cb2, 0x1, 0x8000, 0x4, 0x9, 0x3ff, 0xee8, 0x8, 0x9, 0x2, 0x10000, 0x8, 0x7ec1, 0x40, 0x6, 0x0, 0xd, 0x1, 0x2, 0x7, 0x5, 0x5, 0xfffff55a, 0xb2b, 0x80000000, 0x7, 0x1, 0x7f, 0x401, 0x9, 0x9, 0x5fa618d9, 0x8, 0x5, 0x80000001, 0x5, 0x1, 0x4, 0x100, 0x6, 0x9, 0x2, 0x1, 0x42, 0x4, 0x5, 0x2, 0x3, 0x2, 0xd0, 0x40000, 0x1, 0x7fffffff, 0x8, 0x47, 0x8, 0x2, 0xf, 0x1, 0xffffffff, 0x6, 0xc5000000, 0xfffffffa, 0x6, 0x2, 0x5, 0x3e, 0x6, 0x400000, 0x186c, 0x6, 0x9, 0x0, 0x9, 0x2e, 0x96c, 0x4, 0x5e, 0x3, 0xaf, 0x9, 0x101, 0x2, 0x0, 0xb1e, 0x6fa0, 0xc, 0xfffffffc, 0x5, 0x8000, 0x1, 0x7f, 0x4, 0xf, 0x4, 0x4, 0xfffffff7, 0x2, 0xffff7fff, 0x0, 0x5, 0xa2, 0xf30a, 0x0, 0x3, 0x3, 0x9, 0xc7dc, 0xfffffffd, 0x6, 0x9, 0x4, 0x2, 0x8001, 0x1, 0x2, 0x2, 0x0, 0x80000000, 0x7, 0xfffffffe, 0xfffffff7, 0x3, 0x5, 0x7, 0x7fffffff, 0x1, 0x7, 0x2d3, 0xffffffff, 0xffff, 0x8, 0xfffffff9, 0x3ff, 0x80, 0x10, 0x4, 0xfd54, 0x8, 0x4, 0x4, 0xee8, 0xb, 0x9, 0x7, 0x401, 0xd28, 0x4b80, 0x100, 0x7fff, 0x1, 0x0, 0x1, 0x7, 0x9, 0x80000000, 0xb3, 0x1, 0x5, 0x0, 0x10, 0xb, 0x4, 0x9, 0x0, 0x8, 0x0, 0x92b5, 0x4, 0x200, 0x8ec, 0x240268b8, 0x0, 0xffffffff, 0x1, 0x5389, 0x2, 0x3a6, 0xff, 0x8, 0x7, 0x1e, 0x7, 0x0, 0x3, 0x10001, 0xb, 0x1, 0x0, 0x6, 0x2, 0x0, 0x6, 0x0, 0x3, 0x4, 0xffff, 0x3, 0x2, 0xb, 0x1, 0x7fff, 0x8, 0x6, 0x9, 0x7]}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x5, 0x43, 0x4}]}}, @TCA_BPF_ACT={0xf4, 0x1, [@m_mirred={0xf0, 0x1c, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3ff, 0x3, 0xe4f, 0xc8}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x10000002, 0x4, 0x200}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x486, 0x9e, 0x0, 0x3, 0xd}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x20000000, 0x7fff, 0x3}, 0x3, r2}}]}, {0x43, 0x6, "0ab57e9219908b1a6e2ca4ab257c827ac7eb7dcafcaa4d3bf24bed75224281d69c9a9fcb72e4b28447361b686c00a93ee0f391b29512a701c4f24f09a9aa93"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xfff1}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x5b8}}, 0x0) 2.151622496s ago: executing program 3 (id=2488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1753cf954a71bd9eb3ab579e5dfb24ba"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44044) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x2c}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r8, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6, 0x6}, {0x9, 0x2}, {0x6}, {0xf0, 0x1}, {0x9, 0x7}, {0x8, 0x7}, {0x26, 0x4}, {0x8, 0x6}], "37174a9c41fb50db"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x4}, {0x8, 0x5}], "7a5f42e97b158210"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) r9 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000580)) connect$inet6(r9, &(0x7f00000005c0)={0xa, 0x4e20, 0x525a, @mcast1, 0x3}, 0x1c) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000600)={0x0, 0xe1, "264751ba08d2233391f93a55cb808ce997493dd58ca4469c03880307b7d61ff571201cf078aa0b181e423530891616011225b95eab5a27929c3cf072fe9d6db1e31921cdbbc6ee80d29c003ee98f2cb448d2328e44a110653a17d1a701ab872bd5eb901ae68067eaefef9aaf562e55f0ce7e82f4118a96d1b515c3f38b69c4ed2b55b7866f1fecc0f061ff5b1fed0e874374cfb8f15f6f1ea898ba246eda41fde7d95e2f55956cf0e1f435eaf5732f95222da09a7a041b9be475d1c42a654af4dfdb75a1089200604e067526bd47d92ca650107f1507bd92283d860b8b002eb56a"}, &(0x7f0000000700)=0xe9) (async) getpeername(r10, &(0x7f0000000740)=@nfc_llcp, &(0x7f00000007c0)=0x80) (async) setsockopt$inet6_tcp_int(r9, 0x6, 0x3, &(0x7f0000000800)=0x1, 0x4) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r12, 0x800442d3, &(0x7f0000000880)={0x101, 0x5, 0x2, @random="adc72f034fd1", 'wg0\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000008c0)={0xbc, 0x8, 0x20c, 0x7, 0x2, 0x100, 0xffffffff, 0x3, r11}, &(0x7f0000000900)=0x20) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r3) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r13, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvfrom(r10, &(0x7f0000000b80)=""/4096, 0x1000, 0x40000000, 0x0, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e80)={r12, 0x0, 0xc5, 0xaa, &(0x7f0000001b80)="0ad36de3eb4b2484a4e346f762daf0cd78a847c405830b1819189890896c70559eed44e342def55796321bc14c3a90be6e335b5f38e25c45ff3006abf1deeff22a220f252f9254978ccf33bed0e1d2a2306a09f366a851699e8762b73ca6bbc2b0b23fbeb016a885fc7333b8f7c58ca598669a4d8f268ff7ae1d1494e5b1122d94a23fa55e113aaada2000041e425912bc646f654d5184935956c05d97ec2c025e1b7fa8a09f0d17d8dd5d2826a329b2b53c5e28843e41b7305494ca35457f8b3c68218cf2", &(0x7f0000001c80)=""/170, 0x80000001, 0x0, 0xb, 0xf3, &(0x7f0000001d40)="ead30587354c8775ce6ba7", &(0x7f0000001d80)="1a2021a22f33046b01a3746f0c79ed1b76f18032b988eeda5be7eeca7435a68fcac1d42ca4c5543b0e2a1abde1f8a73f287ea34c5a96060f5b5a8cd0c89d10a21fd0c87aa05ead733afd6906c8477916269fb7eb1b30089d9d115b85c8e09af64d310c1003ec4f3bfb28de6442e7b3e10c89ee17e9289646be347819ef6c6829f1d3de6e7ad8c563bea7077e31eba1d3aa6925433a9ae5de1edacf3f9bacb5f5d771caea34d7a1977b5d49a8b86d0734329131a6fb0e6583235d3105f2e726c36ded5ad9493834fafa6c7ac2b10397a953d958dd69fb6f14112ba4153254ccdf705ff3444142ad356d6d551b9d44a9b4b3f0a0", 0x6, 0x0, 0xffff2d02}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001f00)={'wpan1\x00'}) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x30, 0x0, 0xa01, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) 1.928061949s ago: executing program 3 (id=2492): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc00000019000100000000000700000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a0000000000000001f18dc5721c0c2c0d67033c2b6a1cb97db67f16f2a0470b2688fd70806239234fc854e24c4a8cbbbcbf24709723cd518643afb8baf8a0d647d96b6fa02fd7b85c19381a5421c38ec0888b535c9c85fdcf324a18a391f729e2b91cfcb92b691e11d85b8ab55724ef2807d130c16e20d46d3c21f1f25fa66a693150e3908f1304ccdba0951f45611541459f942201939d3469fe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) 1.775959285s ago: executing program 3 (id=2496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000300)=""/157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x840) (async) sendfile(r3, r2, 0x0, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) 1.564289133s ago: executing program 0 (id=2500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x38, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x10, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xa2}]}, 0x38}}, 0x0) (fail_nth: 4) 1.540435064s ago: executing program 1 (id=2502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x58, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000"], 0x64}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000020000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="24e00132", @ANYRES16=r8, @ANYBLOB="10002cbd7000fbdbdf254a00000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x1}, 0x48004) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa4, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x70, 0x6, "9a872d54252c2a677685e0e03a1baaff3b0213d5675b4a69a762324faf6d643d93cab11f5f53bf295067641359c6e2a9120bf657162a73710df0d3d15f437034c1bd5383184ffc28c1e4fcd10188c8b9b2761eb2d14eb39e165c0c4896b43ad98e13aa0d667a14abe0dacc1b"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x884) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r10, &(0x7f0000000040), 0x37) close(r10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 1.107648284s ago: executing program 1 (id=2503): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000300"}) sendmmsg$alg(r0, &(0x7f0000001dc0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="d73190be4496a6f729270f75d6fc1d382f4754f1ab56adca86c7e9e49eba7c390835828dca3a549fe9601eb95f2cf2275e3b297adf4d436ac2405cd840a6ce948025bf19f1e85d68edb91b41ef3776e67de560d9332133c5b158628d573e1f9e0be69fae4e9c47f101f79a9bde486ccff80e41de7854e9e536f9b9a94d1197571168f4583033cc044174ccbd45b7bba6aee19f213979ffe732fc8255dcf3bc751f36ce", 0xa3}, {&(0x7f00000004c0)="f1b7064b278d7ee702850383cb8ed5373b42da68001eec1161f2e0bca79776d887cd4704e4d21a1524f007931ad8e8d7f7cc10f9d5e4ad6c7af2ccba008af989d218cf6bc709fefa522d7f24a34f84356465e1285a4874900b04eea0e7e17a4eb00b336845ce5174cd4681a8ace1f2b25145de67ebf0078c17dda40d0541203c2efe323033c43206b596f809ac262d7be988bc403b", 0x95}, {&(0x7f00000001c0)="c2a89e41", 0x4}], 0x3, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="70a9cb6500600a3673247ce0e81b77330c5d93393f31c65c09dcb39fa8f7bb066deaf1a714a84d16a4aca04786283149bdfb08a838e02279e0c76cc3fb8e66d876", 0x41}], 0x1, &(0x7f00000009c0)=[@iv={0x88, 0x117, 0x2, 0x72, "c5417570f27e2a6f7475b77d259b22d59af1ff63876002d5c56b6c80f59d88fe2efbf37d7c01eaedce74f44e2b93ee57118ce2cbd8842c676e6a087b2e7dc71d83336246068311f064df5de920c9dc322f2862a001b1403f5b9122814dd873f1e38d335401cb933e989d91b25635610b1a5c"}, @iv={0xc8, 0x117, 0x2, 0xb0, "1c03c5d957df3dfe989fc50c0dd5659f5e907d495fae0beabe976106f6760980e5f57b895ebaed4cacbd2f363c5f8ff8d987b3e0eeb8c311784a5b64140e9ea76d664541c3d0f87fcfa422c82de470beb956b43ad22fed620cf78a3245e9fa79fd204abe87fe09eae60ab88d45ee7a6d1ce200f189fbb52cfbb491ae345e0ccc3aad876d7237db55eba2a362d6b80813928f0e8b9790d03e22b6a12be08364a76865a855d44feb9f5961d32efd7f57a2"}, @iv={0x28, 0x117, 0x2, 0xd, "bc651aba1c3d8e89f6c897d2c6"}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x7c}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0xe}], 0x11d8, 0x8080}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="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", 0xfe}, {&(0x7f0000001bc0)="650f006dbfdb5f7025203a5a72d8d6dbf15c66d6605022b8a22b3c50d32661792d235ac94f074302324f1c8b43ed0b338e13f46a6c1777bf22975ae75200d656c677c509185c84d27f2ee09a5663bcd1844053ec67baca94824be901910dfdb93a499cbc42677dfdf95827ac943024ae", 0x70}, {&(0x7f0000001c40)="7790d25d6f1c09321e452f9b99f460b9e4fa752559eabc17eba058e90544de14858ce94357edfa2cad1ab0d903e8d5674203d4781e3db952c415cbca5e5b9b514d3af3c6c5829a5cb2666326cb506a6aeadb7b568917518b59e89aa723194c5727d55952639e61ef2c07e92f4ba611d1ea996b6d275b7806eb180f01d3cf8be5500f714079139f3eca95667855a4995a1501242cb129ec23dfa6ef83a1afa539386fa02af8a5", 0xa6}], 0x3, &(0x7f0000000940)=[@assoc={0x18, 0x117, 0x4, 0x931}], 0x18, 0x8000}, {0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d00)="0f1db89ea622338727e49335787f3292f8653a0b73d0a3e0b3040d8355f68f7e9db50aec3d7c191f587a1c5e55f9f46980649b8fc8b0593546c7f950d8e01c3b33dd043430bad358606daf1cdf653531c84a2f7a4a0dd3d456e957251b01d2378ce6", 0x62}], 0x1, 0x0, 0x0, 0x4040000}], 0x4, 0x20044045) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x34, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4c0ddb65}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0xe0000000}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff00000000711043000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.099058307s ago: executing program 0 (id=2504): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'pimreg1\x00'}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x8, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r2, &(0x7f0000001bc0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f000}, 0x1c, &(0x7f0000001300)=[{&(0x7f00000001c0)="bc245d734037e8edf5e8c00ed978bb8f8ea1b4608201f076364448d254974708654822b9ba424539b6f00a7ddb0cc534be4d6a37b32b9a0ea23fad1965588cd06092c14e010c0d6e6bd2824fc76788a8b4faa2f66a7d7080a55d0e6b44873d11e1501746d4c08cdf38b619a8cb67945e0817bd7611e27e457932d3bc3b2009e5241e548d4012436d275b2fee3b9b747a3cc2fc50faa8ea851bcab3f0834080125e901d58b6722ff3ccaa25ee0ea2e266abd9292622a09b022439", 0xba}, {&(0x7f0000000280)="91928d11", 0x4}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="ec3202dd2db79c4c17426e1283c17a0cd9f7d013b36213bfe73dd3cb02bc8ceb5d728d4575bb3641ec4409a651575b4cac937c430d9979b825545fa91028d4", 0x3f}], 0x4, &(0x7f0000001340)=[@rthdr={{0xa8, 0x29, 0x39, {0x1, 0x12, 0x0, 0x9, 0x0, [@empty, @mcast1, @mcast2, @rand_addr=' \x01\x00', @mcast2, @remote, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x2, 0x7, 0x0, [@local, @private0, @loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0xd9}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x67, 0x14, 0x1, 0x6, 0x0, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @private0, @dev={0xfe, 0x80, '\x00', 0x18}, @loopback, @empty, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @remote]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x3a, 0x5, '\x00', [@generic={0x2, 0x15, "3e2a04681abe3e0eb5850ed1c445c1e28433c2ad1c"}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1}]}}}], 0x260}}, {{&(0x7f00000015c0)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x200}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001600)="1bac05325f370c07f8161ea2456e68b6904ed9a35dcf53d76e7afef5cbf08b2775953058741a055d3aa9a6beae9e6c1a734728249f8f0f6c29a0bada0755495a9d1393c5a636f9cd182fe8ca4231f978f645db108d1ea55375b7aa242adb657971fa2ba46a0698bb6149c9968323b2423889244c6397c9dc336544bda8247bab40b9bf8a943542b7d56c6b0f769601aafaf8ea3b38bb967166639c0170b8a8a51966f758e4afef63a8f4e19de1", 0xad}, {&(0x7f00000016c0)="46d612394c16c5b53fd648a8aa7e90d1e0052fe7f8bd0256742e5c5b2228829af67a784c84deb107a84371a696b52311d62a4e6c936cde272a26e0c5918bb401feeecc133ed47c5cb8737d8cae1febd0df70663ea66c3cf071c58237ca22dc88ccc3cd0a4ded358ba9", 0x69}, {&(0x7f0000001740)="eb71bb439386238afc3caf89bd8d282be0536f881264ca26a8bad1e454be04aff9eede594d752556db3bdc26ae97b23e9b816223526d274727baf5e00aebfaea86cf1c56ea848b51cbc35f91987e5efc7c8528110ced3d383ee4bebe0fc0f2d9bf5718026b51085f18515d", 0x6b}, {&(0x7f00000017c0)="33365fcf9573b153efefb694142449d44b7c6859224ad5b471ba073e5d942ed6418d332d6f4bbb622e08d8d4ef128d95e917de0bf42a824127a0838cd3fd29b23d14a6440c96cfccb65a59efc8936e469b134cea040d28d858a50b0031a85e5cfcf0939d8d6854307bc216cf12936c96d9ca430d8367fea4ea32397e6727b57b4c82dccae3745782eccffda587f4620a401213ea4652a0e201f70eb607f3cab8e4b57abd350005750b564daa597a57cc5988e46a1db37f722e1d542348f8331e3f0921a95914c401b273ca288cf59fd0", 0xd0}, {&(0x7f00000018c0)="902f7dd058a0867e33c1edf6298e3f59ef85ada5c327e8201e9bcd0b967429ec07ac9da63c45b2524342f968b67fa1782b718b499475a7ef28bd87fe5fab3a8ca92a328645189625af612c53319f8dae61d11990b0c4ffd8ac92d34bd8fb6c6898a6e045e606990e708f505c562c6c3b904e2db3a78e8a374c6806636e70e53922ef4d4f8f564a8f9ca79effda5512aa4d95ff0612149160a171980bfb5e6da93b42a6cf4b8860710632ba874d34bbb7c676c93e11dd3648ff33a7fefe23f7016c9cc47a8769e48d00fbfc22be65623b96", 0xd1}, {&(0x7f00000019c0)="192f86d5c0bdb0363b5e7a6a9ece0c2b54e19fc32bd283a03791eb13996c1ca14c866df1d07f006bb0aaed290d7938852b4059e00719fdba2108366cae19fb419d62ee74b3bf6b1b26947ab114321934c84e2425cfa7585b34c2547c5b90bf027163ee6c242896b86d6678905684bf016eea51e3cb4f6b1fb19d46bceecc7c9fae8c40511a8f6c184d1c265ccab8bc9d1b018fc3383e2a51aad477f190aab3cd821f447ecc2f9f104f30ebc45393b97ebb06a7db95aa0ed797a4cfb5ce95a1a03f7e0ddea3c0f0724b56bd6b", 0xcc}, {&(0x7f0000001ac0)="b378cd1bcfbd359f6f4d88919b1886fe08fd5360346119c04f716512c6acf0f90b65b161c21cfd5d593b13ca3c0e036b9030e1c3d455936a42bed1b14c3fa4ae1525be3a8707681c0d332bf117f707233ca616f86ed5be3f197a01d5f897016ac18b7ec0eb59f8357cb8", 0x6a}], 0x7}}], 0x2, 0x4040080) (async) bind$rose(r3, &(0x7f0000001c40)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000001d40)={'broute\x00', 0x0, 0x4, 0x49, [0x7, 0x7, 0x6, 0x9, 0xffffffffffffffff, 0x7], 0x3, &(0x7f0000001c80)=[{}, {}, {}], &(0x7f0000001cc0)=""/73}, &(0x7f0000001dc0)=0x78) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001f80)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x1d, r7}, 0x10, &(0x7f0000002080)={&(0x7f0000002000)={0x5, 0x0, 0x2, {}, {0x77359400}, {0x2, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0xb, 0x3, 0x0, 0x0, "be337e23ad2a203f8a47fbac26cfe92af155b6617e831b501d105d30c25401a196b0567e05bc0881ff9bf5e04b384446c01f053c5a0bc88e1f455ca0ca73f926"}}, 0x80}, 0x1, 0x0, 0x0, 0xc044}, 0x4000045) (async) splice(r3, &(0x7f0000002100)=0x3, r1, &(0x7f0000002140)=0x9ac, 0xaa, 0x8) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000002200)={'sit0\x00', &(0x7f0000002180)={'sit0\x00', r7, 0x1, 0x80, 0x9, 0x9, {{0x12, 0x4, 0x1, 0x9, 0x48, 0x64, 0x0, 0x40, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@generic={0x7, 0x5, 'tuE'}, @rr={0x7, 0x17, 0x9f, [@multicast2, @local, @broadcast, @multicast1, @multicast1]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x80, [@local, @dev={0xac, 0x14, 0x14, 0xf}, @local, @rand_addr=0x64010101]}]}}}}}) (rerun: 64) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002240)={r8, @remote, @remote}, 0xc) (async) sendmsg$nl_route(r3, &(0x7f00000024c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002480)={&(0x7f00000022c0)=@newlinkprop={0x190, 0x6c, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x8000, 0x10}, [@IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_LINKMODE={0x5, 0x11, 0x3}, @IFLA_VF_PORTS={0x128, 0x18, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "23f7fe9a8f785b969203103e2f070696"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x45}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x68a}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8b97f5ee2a67ee47cd6e699af12606c9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "dc77fad2f175daef7f13c403b9f87c06"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d3bb38d836514381259dcee85f1ae00b"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8a91b70c6905a2dc7d47ffd394a40c3b"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "ba9790603a1b680fa83ea0b8ea806eb0"}, @IFLA_PORT_PROFILE={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e73adb250d8d2b729e755a38f019ceb4"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4e}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b0ed704b72af048472d614157651bd5e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "42098052f7615c55c0c1388539de968e"}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xfffffffe}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x6}, @IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x7}, @IFLA_TXQLEN={0x8, 0xd, 0xc}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3f5c6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x190}, 0x1, 0x0, 0x0, 0xc080}, 0x10040004) (async) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000002500)={'veth0_to_team\x00', {0x2, 0x0, @loopback}}) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x28, 0x3f7, 0x202, 0x70bd26, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}}, 0x10840) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x74, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x25, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x10b}, @device_b, @device_a, @random="c7348d156f5b", {0x0, 0x1}}, @addba_resp={0x3, 0x1, {0x0, 0x1b, {0x0, 0x1, 0xa, 0x7}, 0x7}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xfff9, 0x7]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x827}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x107f}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmmsg$inet6(r3, &(0x7f0000002a80)=[{{&(0x7f0000002780)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000001}, 0x1c, &(0x7f00000029c0)=[{&(0x7f00000027c0)="dd3327c0f235c0403595c00c99311aa508966576c77281b92f8f0845a259df0dab4f7159a58632086644c33c1c29f388e4c402d12fede57436755fe95554d4ab7bc5c095ee9a8f4e8453f575e0c4e149a0c73f4ccf0a890b648944547806852b7024821ee6cf1e8e2e281a278572dcf7f89e69e96aa0a5dff85a0a49a9d4e0368e9cb4b5527338d95086d2f5eb906366897a5ddfed49584e0b0afaba09f6c47552e94a9b82ee5bc136a8504b88", 0xad}, {&(0x7f0000002880)="44f35c5e99c121e3eafb79c07d60d9eb7bca14f3ca5bceaa3c5119dbe32df0bc87cefac7a79f818e1aadd9648d", 0x2d}, {&(0x7f00000028c0)="4d693eccbaeffec87909f0370383799e76232f9a994d00794abe15993f7bb059b33ebe90e08a1ada9c5ba2170ca0a8b98f7ee712dc5c95eb9f40906047f1c551e841dd54f2880bb8a149498ceafe5764563890c01882c3dea91772a80e6a6337264e6c1e98d4bf71d2bdf85def0ed5bfa2c887e905e800544940c0b3e7a5e53cd2f18025a3169ba3ba713a8465d153800cc16dd9e615dab00b1183eb0750ec774a3cf05986103e4c8ff44012aba54a21834d7639ce503a2d729d529b628664e79d55f76f069c5820d126fdc7609ed83ab10e3c11cf0f03ca1d347ee741e21afe582c9c93ed427537594ad598c8d2cad02a008e534984db1c", 0xf8}], 0x3, &(0x7f0000002a00)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x21, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1e}, @calipso={0x7, 0x10, {0x1, 0x2, 0x10, 0x9, [0x6]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x48}}], 0x1, 0x804) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000002ac0)) sendmsg$nl_route_sched(r2, &(0x7f0000002dc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d80)={&(0x7f0000002b40)=@gettaction={0x224, 0x32, 0x200, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff7c}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7d9}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x224}}, 0x200088a0) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c850) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x0, 0x2010, r2, 0x65ae5000) (async) recvfrom$inet(r2, &(0x7f0000002f00), 0x0, 0x10040, &(0x7f0000002f40)={0x2, 0x4e22, @empty}, 0x10) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002fc0)=@o_path={&(0x7f0000002f80)='./file0\x00', 0x0, 0x8, r9}, 0x18) 966.632206ms ago: executing program 2 (id=2505): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180100002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000000002500f8ff0600000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='c\x00r\x80\xae\xbd\x12'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596cf"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) sendfile(r2, r2, 0x0, 0x3ffffffffffffe) 908.063114ms ago: executing program 1 (id=2506): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1}], 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 906.895146ms ago: executing program 0 (id=2507): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x50}}, 0x0) 826.680614ms ago: executing program 1 (id=2508): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) r1 = socket$inet(0x2, 0x2000080001, 0x84) r2 = socket$netlink(0x10, 0x3, 0x4) listen(r1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="050000000000", @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x48}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x3}) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/92, 0x5c}], 0x1, 0x2, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x19203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 809.561458ms ago: executing program 2 (id=2509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x16a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x30, 0x4, 0x0, 0x0, 0x15c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x10, 0x87, 0x0, 0xe, [0x3, 0xc4eb, 0x80]}, @end, @cipso={0x86, 0x2b, 0x0, [{0x5, 0xb, "c2d39d864d612c74e0"}, {0x5, 0x12, "21073e64542b9a7d76ebd49c4b1efe76"}, {0x7, 0x8, "7711bb384a52"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x6f, 0x3, 0x9, [{@empty, 0x3}, {@private=0xa010100, 0x1000}, {@multicast2, 0x4}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xc8}, {@empty, 0x10}]}, @cipso={0x86, 0xb, 0x3, [{0x7, 0x5, "6e951c"}]}, @timestamp_prespec={0x44, 0x2c, 0x67, 0x3, 0x5, [{@remote, 0x66444659}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x45}, {@loopback, 0xd5}, {@broadcast, 0x1}, {@rand_addr=0x64010100, 0x8}]}]}}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) (async) syz_emit_ethernet(0x16a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x30, 0x4, 0x0, 0x0, 0x15c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x10, 0x87, 0x0, 0xe, [0x3, 0xc4eb, 0x80]}, @end, @cipso={0x86, 0x2b, 0x0, [{0x5, 0xb, "c2d39d864d612c74e0"}, {0x5, 0x12, "21073e64542b9a7d76ebd49c4b1efe76"}, {0x7, 0x8, "7711bb384a52"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x6f, 0x3, 0x9, [{@empty, 0x3}, {@private=0xa010100, 0x1000}, {@multicast2, 0x4}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xc8}, {@empty, 0x10}]}, @cipso={0x86, 0xb, 0x3, [{0x7, 0x5, "6e951c"}]}, @timestamp_prespec={0x44, 0x2c, 0x67, 0x3, 0x5, [{@remote, 0x66444659}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x45}, {@loopback, 0xd5}, {@broadcast, 0x1}, {@rand_addr=0x64010100, 0x8}]}]}}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0x10) write(r2, &(0x7f00000000c0)="83080000000000000004000e0580a7b6070d63e286a5cefe", 0x18) syz_emit_ethernet(0xfffffffffffffd7e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000000000000d020000e01d0100004b57c34e6cae9919e9f294f5bba6f3a262dd0cd58c2136c4f3d7e9d2291e5f9cb4160c3cb258c44b518f7fdf2b611c94f5f216b984fd3cfc657293c61da094d0"], 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x3c}}, 0x0) 699.838266ms ago: executing program 0 (id=2510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x5b8, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x10, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x584, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0xe}, {0x40, 0x4, 0x2, 0x80}, {0xc3, 0x4, 0x1, 0x8}, {0xd3ff, 0x6f, 0xd, 0x5}, {0x5, 0x7f, 0x1}, {0xfef, 0x9, 0x8, 0x2}, {0x5, 0xff, 0x10}, {0x9, 0x6, 0x50, 0x9}]}}, @TCA_BPF_POLICE={0x418, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xb, 0x1ff, 0x63e05c2f, 0xc5, 0x800000, 0x2, 0x0, 0xfff, 0x590, 0x401, 0x0, 0x101, 0x80000000, 0x1, 0x8, 0x4, 0x4, 0x7, 0x10, 0x1000, 0x80, 0x4, 0x4, 0x9b1, 0x80000001, 0x0, 0x0, 0x5, 0xd9, 0x4, 0x0, 0x4, 0xfffffffa, 0x8, 0x6, 0x2, 0x3, 0x0, 0x0, 0x2, 0x2, 0x4, 0x5, 0x8, 0x7, 0x3, 0x7, 0x7fff, 0x70b8, 0x4cb2, 0x1, 0x8000, 0x4, 0x9, 0x3ff, 0xee8, 0x8, 0x9, 0x2, 0x10000, 0x8, 0x7ec1, 0x40, 0x6, 0x0, 0xd, 0x1, 0x2, 0x7, 0x5, 0x5, 0xfffff55a, 0xb2b, 0x80000000, 0x7, 0x1, 0x7f, 0x401, 0x9, 0x9, 0x5fa618d9, 0x8, 0x5, 0x80000001, 0x5, 0x1, 0x4, 0x100, 0x6, 0x9, 0x2, 0x1, 0x42, 0x4, 0x5, 0x2, 0x3, 0x2, 0xd0, 0x40000, 0x1, 0x7fffffff, 0x8, 0x47, 0x8, 0x2, 0xf, 0x1, 0xffffffff, 0x6, 0xc5000000, 0xfffffffa, 0x6, 0x2, 0x5, 0x3e, 0x6, 0x400000, 0x186c, 0x6, 0x9, 0x0, 0x9, 0x2e, 0x96c, 0x4, 0x5e, 0x3, 0xaf, 0x9, 0x101, 0x2, 0x0, 0xb1e, 0x6fa0, 0xc, 0xfffffffc, 0x5, 0x8000, 0x1, 0x7f, 0x4, 0xf, 0x4, 0x4, 0xfffffff7, 0x2, 0xffff7fff, 0x0, 0x5, 0xa2, 0xf30a, 0x0, 0x3, 0x3, 0x9, 0xc7dc, 0xfffffffd, 0x6, 0x9, 0x4, 0x2, 0x8001, 0x1, 0x2, 0x2, 0x0, 0x80000000, 0x7, 0xfffffffe, 0xfffffff7, 0x3, 0x5, 0x7, 0x7fffffff, 0x1, 0x7, 0x2d3, 0xffffffff, 0xffff, 0x8, 0xfffffff9, 0x3ff, 0x80, 0x10, 0x4, 0xfd54, 0x8, 0x4, 0x4, 0xee8, 0xb, 0x9, 0x7, 0x401, 0xd28, 0x4b80, 0x100, 0x7fff, 0x1, 0x0, 0x1, 0x7, 0x9, 0x80000000, 0xb3, 0x1, 0x5, 0x0, 0x10, 0xb, 0x4, 0x9, 0x0, 0x8, 0x0, 0x92b5, 0x4, 0x200, 0x8ec, 0x240268b8, 0x0, 0xffffffff, 0x1, 0x5389, 0x2, 0x3a6, 0xff, 0x8, 0x7, 0x1e, 0x7, 0x0, 0x3, 0x10001, 0xb, 0x1, 0x0, 0x6, 0x2, 0x0, 0x6, 0x0, 0x3, 0x4, 0xffff, 0x3, 0x2, 0xb, 0x1, 0x7fff, 0x8, 0x6, 0x9, 0x7]}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x5, 0x43, 0x4}]}}, @TCA_BPF_ACT={0xf4, 0x1, [@m_mirred={0xf0, 0x1c, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3ff, 0x3, 0xe4f, 0xc8}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x10000002, 0x4, 0x200}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x486, 0x9e, 0x0, 0x3, 0xd}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x20000000, 0x7fff, 0x3}, 0x3, r3}}]}, {0x43, 0x6, "0ab57e9219908b1a6e2ca4ab257c827ac7eb7dcafcaa4d3bf24bed75224281d69c9a9fcb72e4b28447361b686c00a93ee0f391b29512a701c4f24f09a9aa93"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xfff1}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x5b8}}, 0x0) 698.094501ms ago: executing program 2 (id=2511): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r1 = accept4$alg(r0, 0x0, 0x0, 0x100000) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="63d8b8cadc198f8a0b6a655ead0e438ed13ae4a0f03f8e844431f76b851117c1fa6d427f712b84518848b82e6a140a73e52e3110f2764c9e50378b92d37d", 0x3e}, {&(0x7f0000000100)="252df75eec506025e5ce93206f7329cf6d08ce05d7dfe2932e6daa0c2e5f87c413deea6c62dc99b72750f613360b768664ffbcb99dd5491663a6ed", 0x3b}, {&(0x7f0000000140)="464ddd0317838bd130cb0f85ac4a4c2c8556049874f6e76e834c1cd5cf3a578572f207a9bb1d4e645a7cdd145d6f2af0eefc9979a3f0843361bcf0ebd6ad823e857bbfbe063be739cec31809e010bc049b469cb9268e01bdab6088e879e3a966f0ddadcd61dea823dc7e146e95aeac0acfcbf0a04d4caa765b9452e7fee834ddd85c5b552177bce37554f8269e4804f7f2f5df68591abd4cbe7d79f5e9d198b435f9492182e884e15a15c2acc349a0a9aa9493142f46ed41efabb9675a9f3a0b7f2b994493a8973d9c549eab39d2b68631904747cac182d9b02e7574f8aecbbc1006", 0xe2}, {&(0x7f0000000240)='[', 0x1}, {&(0x7f0000000280)="91c659ad9a9496bcccba791af7350b72168e592fa973f900bb36a6beecd9a3292ade5f", 0x23}, {&(0x7f00000002c0)="74a2eca9a4bb9a0843850205ab1c923058b911783255eb1f770ec0ebb682f8e8a83213bf5969dc58b048e221e2d94b791416aaa84ee97e4e44f18adb1c73ab4f398a1f112ddb33b3df522ab9", 0x4c}], 0x6, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x3f, "0afad34fec5065be1515522af60d89b3f57e2d7fce0842c8d9bdc81b6dfed6bb7eed9d6dfd9be09c54c759b523b69d506b42fc30f9723d3a05f63141b227b1"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x88, 0x4000080}, 0x40014) (async) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r2) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=@deltfilter={0x1078, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {0x5, 0x5}, {0x4, 0x2}}, [@f_rsvp6={{0xa}, {0x1048, 0x2, [@TCA_RSVP_ACT={0x1044, 0x6, [@m_police={0x1040, 0x1c, 0x0, 0x0, {{0xb}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x2, 0x9, 0x5, 0x2, 0x6, 0x2, 0x0, 0x81, 0x3, 0x4, 0x1ff, 0x30a, 0x8, 0x5, 0xfffffd39, 0x6, 0xc0, 0xd20, 0x80000000, 0x14, 0x3, 0xff, 0x5, 0x9, 0x1, 0x2, 0x8001, 0x7f, 0xc70e, 0x101, 0x0, 0x1, 0xfffffffc, 0xfbc, 0xfffffffa, 0x3, 0x4, 0x7, 0x2, 0x2, 0x46, 0x7, 0x6, 0x7ff, 0x101, 0x4, 0x3, 0x8, 0x8, 0x7, 0x300, 0xdfbd, 0x3, 0x88e, 0x3, 0x7, 0xff, 0x8, 0x3, 0x9, 0x5, 0x8000, 0x2, 0x1, 0x81, 0x9, 0xbb3, 0x7, 0x9, 0xd, 0x4, 0xc19, 0x0, 0x3, 0xf602, 0x10, 0xbda, 0xffff, 0x7fffffff, 0xa, 0xfffffffb, 0x10, 0x2c, 0x4, 0x10000, 0x9, 0xeb7d, 0x5, 0xf, 0x9, 0x81, 0x8, 0x4, 0xe, 0x3, 0x9, 0x1, 0x24, 0x0, 0x7, 0xb9af, 0x1, 0x5, 0x8, 0xfffffff9, 0x6, 0xffffffff, 0x7, 0x4, 0xc77e, 0x5, 0x9, 0x2, 0x6, 0x5, 0xd, 0x8, 0x10001, 0x5, 0xee, 0x7fffffff, 0xfffffff1, 0x3, 0x9, 0xffffff00, 0x1, 0x8, 0x23b, 0x1, 0x2, 0xfffffffc, 0x7, 0xfffffff9, 0x6, 0xcd7d, 0x1000, 0x6f, 0x7c6e, 0x3000, 0x5, 0x7, 0x3, 0xfff, 0xffff, 0x9, 0x9, 0x9, 0x12, 0xffff4510, 0x4, 0x6, 0xfffffff9, 0x6, 0x8, 0x14, 0x9, 0xc3, 0x4, 0x6, 0x3, 0xaee0, 0x4, 0x100, 0x10001, 0x5, 0x3, 0x3, 0xb280, 0x5, 0x80000000, 0x7, 0x1, 0x5866, 0x8b7, 0x101, 0x3, 0x80000000, 0x7248, 0xff, 0x86, 0x4e6, 0x0, 0x600, 0x12000000, 0x8, 0x4, 0x2, 0x7fffffff, 0x3, 0x3ff, 0x0, 0x0, 0xfff, 0x5, 0x4, 0x55c, 0x9, 0x3, 0x6, 0x7, 0x3, 0x479, 0x80000001, 0x3, 0x100, 0x227, 0x4, 0xff, 0x7, 0x26e9514b, 0x3, 0x71, 0x1ae5813f, 0x9, 0x2, 0x0, 0x30, 0x0, 0xf7, 0xe, 0x7, 0x4431, 0x6, 0x1721, 0x40, 0x5, 0x3, 0x80, 0xf54, 0x7, 0x7, 0x3, 0x5, 0x68d72c65, 0x100, 0x0, 0x2, 0x15, 0x5, 0x5, 0x9, 0x6, 0x5, 0xa, 0x4, 0x6, 0x790, 0x3, 0x7, 0xffff, 0x8, 0x3, 0x6, 0x2, 0x5]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x615, 0x6, 0xffffffff, 0x41, 0x13, 0x5, 0x7, 0x0, 0x0, 0x2, 0xead, 0x81, 0x2, 0x101, 0x7fffffff, 0x5, 0x0, 0x9, 0x1, 0xe5de, 0x3, 0x7fffffff, 0x2, 0x5, 0x0, 0xa, 0xe0, 0x80000001, 0x10, 0x7, 0x6b, 0x401, 0x80000001, 0x400, 0x3, 0x0, 0x4, 0x4, 0x4, 0x200, 0x6, 0x547, 0x1, 0x5, 0x7, 0x4, 0x200, 0x7, 0xa, 0x200, 0x1ff, 0x7, 0x2, 0x1, 0x5, 0x7fff, 0x2dd, 0xfffffffc, 0x3, 0x2, 0xffffffff, 0x2, 0x4, 0xf0b, 0x1000, 0x9, 0xbc, 0x8, 0x10001, 0x3ff, 0xfffffffe, 0x3, 0x40, 0x7, 0x3, 0xfff, 0x8, 0x7fffffff, 0x2, 0xfffffff7, 0xfffffffa, 0x1, 0x8, 0xce, 0x90, 0x1e, 0x0, 0x4, 0x3, 0x1, 0x18a3, 0x200, 0x3, 0x6, 0x0, 0x7, 0x5, 0x0, 0x9, 0xe4e7, 0x7, 0x7f, 0x4, 0x11d, 0x7, 0x10001, 0x5, 0x7, 0xfff, 0x6, 0x8, 0x400, 0x203, 0x4, 0x8, 0x3d5c, 0x1, 0x6, 0x3, 0xdfdb, 0xfffffff9, 0x7, 0x493c, 0x6, 0x2, 0x101, 0x8, 0x3, 0x0, 0x83a, 0x2, 0x80000001, 0x3, 0x3d, 0x0, 0x4, 0x3, 0x8b, 0x8000, 0x7, 0x20, 0x2, 0x4, 0x10, 0x0, 0x6, 0x7fff, 0x0, 0xf92, 0x0, 0xb37b, 0x5, 0x7, 0x200, 0xf58f, 0xc0000000, 0x6, 0x9, 0x401, 0x5, 0x4, 0x5, 0x1000, 0x7, 0xfff, 0x382, 0x5, 0x4, 0x3, 0x8, 0x3ff, 0xa7200000, 0x7f, 0xd4, 0x2ad2, 0x2, 0x7ff, 0x232, 0x80000000, 0x3, 0x3, 0x8, 0x7, 0xad, 0x0, 0x3, 0x8000, 0x2, 0x6, 0x7ff, 0x8, 0x401, 0x9, 0x6491, 0xc7, 0x9, 0x6a1a365d, 0x7ff, 0x8, 0x40, 0x90, 0x80000000, 0x5, 0x7f, 0x100, 0x80, 0x7, 0x8, 0xf61, 0x8000, 0x0, 0x9, 0x200, 0xff, 0x0, 0x4, 0xb, 0xff, 0x66c, 0x10001, 0x7, 0x9, 0x5, 0x1, 0x2, 0x3, 0x7, 0x7ff, 0x7ff, 0x9778, 0x8, 0x0, 0x1000, 0x80000001, 0x334eb8ab, 0x0, 0x3, 0x7a9, 0x7, 0x8, 0xff, 0xa443, 0x200, 0x7c3, 0x27, 0x9, 0x2, 0xd, 0x1ffc0, 0x2, 0x0, 0xa, 0x10, 0x9, 0xb, 0x9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0xcb37, 0x6, 0x7, 0x1185, 0x2, 0x8, 0x9, 0x7, 0x4, 0x6, 0x74a, 0xd, 0xffff7fff, 0x1, 0xf6, 0x721, 0x80, 0x3, 0x30, 0x6, 0x1, 0x2, 0x2f87, 0x8000, 0xffffffff, 0xf, 0xb1, 0xfffffe00, 0xf, 0x4, 0x207, 0x0, 0x2, 0x56c2b53a, 0x8000, 0x40, 0x2, 0x4, 0x5, 0x0, 0x80000000, 0x10, 0x2af2, 0x4, 0x3ff, 0x200, 0x8, 0x1ff, 0x1ff, 0x3, 0x41f6, 0x1, 0xd98, 0x2, 0x1, 0x10, 0xc3be, 0x1, 0x0, 0x22, 0x0, 0x3, 0x8, 0x8, 0xf, 0x8, 0x7fff, 0xec, 0x6, 0x9, 0x2, 0x5, 0x5, 0x38e7, 0x61, 0x4, 0x3, 0x3, 0x1c00000, 0x7, 0x0, 0x6, 0x5ea, 0x100, 0x2, 0x6bcb, 0x2, 0x6, 0x4f, 0x6, 0x3, 0x1, 0x200, 0xbb2, 0x9180, 0x9, 0x7, 0x8, 0xb, 0x3, 0x4f9, 0x10, 0x9, 0xfd49, 0x0, 0x9, 0xd7, 0x2, 0x4, 0x5, 0x3, 0x7, 0xfff, 0x80, 0x40, 0x2, 0x1, 0x2, 0x0, 0x2, 0xc, 0x48, 0x80000000, 0x9, 0x5, 0x86e, 0x8, 0x9, 0x5, 0xc45, 0x8, 0x80000000, 0xb71, 0x0, 0x2, 0x6, 0x5, 0x5, 0x7f, 0x7, 0x8, 0x10000, 0x400, 0x2, 0x80000000, 0x6, 0x1, 0x10, 0x0, 0x7, 0x4, 0x1, 0x10001, 0x7ff, 0x8, 0xffffffff, 0x1d6000, 0x4, 0x5, 0x2, 0x7, 0x3, 0x7, 0x2, 0x4, 0x0, 0x6c, 0x7fff, 0x8, 0x7bcc, 0x1ff, 0x3, 0x488, 0x6, 0x6, 0x458b, 0xfff, 0x7, 0x8000, 0x1, 0xd, 0x9, 0x3, 0x3, 0x9, 0x400, 0x8, 0x3, 0x58, 0x5, 0x3, 0x9, 0x7, 0x5, 0x24dec887, 0x9, 0x2, 0x529, 0x4, 0x80000001, 0x6, 0x1, 0x6, 0x10001, 0xffff, 0x4, 0x1, 0x400, 0x400, 0x4c24, 0x7fffffff, 0xcb, 0x8, 0x2, 0xfab, 0x400, 0x80000001, 0xb, 0xffff99fe, 0x8000, 0x101, 0x7, 0xd, 0x8, 0x7ff, 0x3, 0x7fffffff, 0xe2, 0x800, 0x7, 0xff, 0x3, 0xb6, 0x6, 0x6, 0x1ff, 0x2, 0x386, 0x9, 0x2, 0x10000, 0x5, 0xa9, 0x7, 0x2, 0xf9f, 0x0, 0x6, 0x6, 0x7, 0x7, 0x2, 0xf8c, 0x400, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7f, 0xb, 0x101, 0x0, 0x9, 0x3, 0x949, 0x1000, 0x8000, 0x7, 0x2, 0x7fff, 0x84d, 0x9, 0xc0, 0x101, 0x3, 0x800, 0x10000, 0x0, 0x3, 0x0, 0x3, 0x1fd, 0x0, 0x8, 0x9, 0x4, 0x401, 0x0, 0xff, 0x8, 0x4, 0xfffffc24, 0x8, 0x80000001, 0x40, 0xd, 0x4, 0x7, 0x8, 0x8, 0x2, 0x7, 0x2, 0x200, 0x2, 0x80000000, 0x3ff, 0x0, 0x5, 0x1, 0x2, 0x3, 0x3, 0x0, 0x201, 0x80000000, 0x2, 0x916, 0x7, 0xe, 0xa, 0x800, 0x80, 0x6, 0x5, 0x80000001, 0x5d, 0x1, 0x0, 0x80000000, 0x8, 0x8000, 0x0, 0x80000001, 0x6, 0x1, 0x16, 0xe5f8, 0xb1b3, 0x1, 0x3, 0xffff, 0x7fffffff, 0x2, 0x40, 0xff, 0x0, 0x3, 0x400, 0x80000000, 0x4, 0x80, 0x200, 0x90, 0xfffffa0c, 0x6, 0x7f, 0x3c, 0x8, 0x1, 0x0, 0x10001, 0x7f, 0x2, 0x7ff, 0x4, 0xb5d7, 0x4, 0x7fff, 0x7, 0x4, 0x1, 0x2, 0x4, 0xc, 0xa6, 0x5, 0x5, 0x3, 0x58, 0xdc63, 0xfffffcd9, 0x8, 0x7, 0x80, 0x5, 0x4723, 0x7, 0x81, 0x6, 0x2, 0x7000, 0x1, 0x3, 0x6, 0xffff, 0x1, 0x1000, 0x7fff, 0xfffffff9, 0x1, 0x6, 0x200, 0xb914, 0x8, 0x753986c2, 0xc699, 0x6, 0x6, 0x3, 0x9, 0xff, 0x8, 0x7, 0xca0, 0xd866, 0x25e9, 0x4, 0x0, 0x1, 0xfffffffa, 0x3ff, 0x4, 0x43d, 0x8000, 0x7, 0x77878283, 0x7, 0x0, 0x0, 0xb, 0x1, 0x10000, 0x6709, 0x7233, 0x6, 0xf0, 0x2, 0x7, 0x6, 0x80000001, 0xd00c, 0x8, 0x9, 0x6, 0x3ff, 0x8, 0xf, 0x1, 0x8, 0x7, 0x1, 0x8, 0xc9, 0x5, 0x6, 0x6, 0x7f, 0x8, 0x200, 0x10000, 0x6, 0x6, 0x3, 0x4, 0x10, 0x10001, 0x7, 0x100, 0x800, 0xc, 0xce, 0x6, 0x2, 0x5, 0x9, 0x264f25be, 0x75f0bca8, 0x4, 0xfff, 0x9, 0x74, 0x2, 0x9, 0x1, 0x8, 0x0, 0x7, 0xa, 0x3, 0x9, 0x5, 0x1, 0xfbc9, 0x80000001, 0x8, 0x200, 0x55e5, 0xe6c, 0x0, 0x3, 0x10000, 0xb5, 0x7fffffff, 0x2, 0x80, 0x10000, 0x4, 0x80000000, 0x100, 0x7, 0x3636, 0x7]}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1078}, 0x1, 0x0, 0x0, 0x480d1}, 0x24008040) 665.507162ms ago: executing program 1 (id=2512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0xfff, 0x8, 0x1, 0x7ff}, &(0x7f0000000240)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x218, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f0000000540), {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xffff00, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0x0, 0xffffffff], 'caif0\x00', 'xfrm0\x00', {}, {}, 0x1, 0x5, 0x1, 0x44}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x21, 0x84}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x10, 0x2b6, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xe, 0x6, 0x1}}, @common=@hl={{0x28}, {0x1, 0xc}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x1, 0x3}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffff00], [0xff000000, 0xff, 0xff, 0xff000000], 'macsec0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x2f, 0xea, 0x3, 0xd}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x20, "0dcb67181fd5b07a9f57187e831fa8565a3cce67e672f0639dd3e21930f1"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000004"], 0x24d8}], 0x1}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r5, 0x101, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028005001600020000000598960000000000080018000000000004001200247200efd0920962d9cc32a9382154c03e362508e877d4f380b04e5cd15fba9c891da12d088c30f7c1e9a400e61a208afcc1f52fb57445da6867111d4ba8efd04d16a4815dd0bb04edd0b21dbf07969ed3001df86ab545b347c7f8489e952993e3fb44d93e0a020fa1e963359db517ced56bacbaa8fce16af50dec84d456069ec28fce5b512eb71a599fcc4b22d958d7f6d8fa6ea005e4f03f468dd0ab57bd088bd6cbaf655c7b038e230d0be950db69e5b4af"], 0x50}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000480)={0x1, 0xf}, 0x8) 616.110961ms ago: executing program 2 (id=2513): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000030400e2ffffffffff0700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600020000000000060001000200000008000500", @ANYRES32=r3], 0x54}}, 0x0) 495.987635ms ago: executing program 0 (id=2514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x38, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x10, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xa2}]}, 0x38}}, 0x0) (fail_nth: 5) 419.905593ms ago: executing program 2 (id=2515): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x81) (async) 382.557227ms ago: executing program 1 (id=2516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x44000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc, 0xc, 0x5, 0x8001}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x34, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) 356.506651ms ago: executing program 2 (id=2517): r0 = socket(0x11, 0x800000003, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, &(0x7f00000000c0)=0x4000000000000006, 0x6) (async, rerun: 32) r4 = socket$inet6(0xa, 0x3, 0x2f) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x4e21, 0xfffc, 0xa}, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x0, 0x8}, {0x0, 0x0, 0x100000000000000}, 0x9, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@loopback}}, 0xe8) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x148, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x40}}, @TCA_RED_STAB={0x104, 0x2, "0600cb5a94dff5e85684af279d4e4b110afd3d082689ad96e4a2565e1f0822fab92e776faef09ba10581c824ee31725bd1289d6e7ba672510bf442b674b2d8b9edbd660d6dc8f3a07f4aeba3311020d973f5e38dc0c2352d6889bc3511fa82dda3a0faf0b4d98c941f6c7b500dd65e0bfdf7cc9f24d3a3ebea21579f480eb1fa7ab10758e796dacc1299e19f1d962362498cb203fd0a8ef9ad31686a9fa62a0ba5b5317eccb5964e3dedb0937847e226b4dece517a5d5e1f2e0bd7dd023a94afbbbe9c9033df1209555962b456e34e2f45558af3dbae45f02008a0ec9f94ecb8dd45dd30443975f9cea60c09fe63cdfeed8df938474a68af1ebbd9d600"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 0 (id=2518): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0xf3f, 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @multicast2}, {0x3be0c33b90025d10, @broadcast}, 0x2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 'bridge_slave_1\x00'}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x31a00000, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x18, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8aec, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @alu={0x4, 0x1, 0x2, 0xa, 0x2, 0x20, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 0 [ 60.744421][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.754335][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.764865][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.776002][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.800415][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.811716][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.828544][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.840159][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.850915][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.860925][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.871524][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.883131][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.893336][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.902306][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.911106][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.919889][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.960142][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.971443][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.982059][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.992768][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.002928][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.014604][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.026377][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.053528][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.063605][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.073079][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.081947][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.094101][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.103342][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.112677][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.121440][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.160159][ T5837] veth0_vlan: entered promiscuous mode [ 61.194174][ T5837] veth1_vlan: entered promiscuous mode [ 61.227157][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.238567][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.307979][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.343337][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.349525][ T5837] veth0_macvtap: entered promiscuous mode [ 61.383605][ T2132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.419265][ T2132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.436327][ T5926] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.449652][ T5837] veth1_macvtap: entered promiscuous mode [ 61.529743][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.564322][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.574865][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.586342][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.601021][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.617337][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 61.622287][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.640391][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.651083][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.661529][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.673017][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.704752][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.715311][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.726918][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.742422][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.755050][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.765711][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.776884][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.787952][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.800560][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.811423][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.822491][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.833559][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.856407][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.873273][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.882266][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.892772][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.999257][ T2132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.041331][ T2132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.049298][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.095714][ T54] Bluetooth: hci2: command tx timeout [ 62.095725][ T5846] Bluetooth: hci4: command tx timeout [ 62.142533][ T2938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.153452][ T2938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.175304][ T5846] Bluetooth: hci3: command tx timeout [ 62.180756][ T5846] Bluetooth: hci0: command tx timeout [ 62.182663][ T54] Bluetooth: hci1: command tx timeout [ 62.238124][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.291256][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.626988][ T5963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 62.663059][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14'. [ 62.697011][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14'. [ 62.767175][ T5968] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 62.846801][ T5964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'. [ 62.904991][ T5962] Zero length message leads to an empty skb [ 63.782563][ T5989] xt_hashlimit: size too large, truncated to 1048576 [ 64.176029][ T54] Bluetooth: hci4: command tx timeout [ 64.176040][ T5846] Bluetooth: hci2: command tx timeout [ 64.259824][ T54] Bluetooth: hci0: command tx timeout [ 64.259842][ T5846] Bluetooth: hci3: command tx timeout [ 64.259876][ T5846] Bluetooth: hci1: command tx timeout [ 65.501216][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.528641][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 65.683175][ T6006] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.29'. [ 65.842140][ T2903] tipc: Subscription rejected, illegal request [ 66.121594][ T6018] Bluetooth: MGMT ver 1.23 [ 66.215575][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 66.902647][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'. [ 67.198561][ T6055] netlink: 220 bytes leftover after parsing attributes in process `syz.2.46'. [ 67.510751][ T6071] netlink: 'syz.4.47': attribute type 10 has an invalid length. [ 67.840097][ T6098] netlink: 'syz.0.58': attribute type 13 has an invalid length. [ 67.849080][ T6098] veth0_macvtap: left promiscuous mode [ 67.855576][ T6098] macvtap0: entered allmulticast mode [ 67.867311][ T6098] macvtap0: refused to change device tx_queue_len [ 67.874160][ T6097] netlink: 'syz.0.58': attribute type 13 has an invalid length. [ 67.888676][ T6097] macvtap0: refused to change device tx_queue_len [ 68.091865][ T6104] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.115259][ T6104] x_tables: unsorted entry at hook 2 [ 68.441865][ T6113] sctp: failed to load transform for md5: -2 [ 68.582247][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 68.634009][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 68.659650][ T6118] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 68.678112][ T6118] nbd: error processing sock list [ 69.200461][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 69.211186][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 69.223555][ T6156] netlink: 'syz.1.72': attribute type 11 has an invalid length. [ 69.249749][ T6159] netlink: 96 bytes leftover after parsing attributes in process `syz.3.76'. [ 69.288999][ T6160] netlink: 96 bytes leftover after parsing attributes in process `syz.3.76'. [ 69.471173][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 69.518985][ T6175] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.81'. [ 69.528649][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.543303][ T6175] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 69.565671][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.590345][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.608433][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.751669][ T6191] netlink: 'syz.4.84': attribute type 1 has an invalid length. [ 69.778716][ T6191] netlink: 'syz.4.84': attribute type 2 has an invalid length. [ 69.881917][ T6196] netlink: 'syz.2.85': attribute type 4 has an invalid length. [ 70.090620][ T6207] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 71.007860][ T6270] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 71.036910][ T6272] netlink: 'syz.2.102': attribute type 10 has an invalid length. [ 71.122870][ T6278] syz.3.107 uses obsolete (PF_INET,SOCK_PACKET) [ 71.159110][ T6272] team0: Device ipvlan1 failed to register rx_handler [ 71.326717][ T6289] nbd: illegal input index 61504 [ 71.618659][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.626202][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.673692][ T6312] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 72.505366][ T6368] __nla_validate_parse: 8 callbacks suppressed [ 72.505385][ T6368] netlink: 5304 bytes leftover after parsing attributes in process `syz.3.131'. [ 72.510101][ T6355] sctp: failed to load transform for md5: -2 [ 72.888604][ T6392] netlink: 100 bytes leftover after parsing attributes in process `syz.1.138'. [ 72.960848][ T6397] netlink: 132 bytes leftover after parsing attributes in process `syz.2.140'. [ 73.249964][ T6415] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 73.265391][ T6421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.147'. [ 73.274586][ T6415] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 73.344434][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.147'. [ 73.580101][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 73.652307][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 73.779834][ T5892] IPVS: starting estimator thread 0... [ 73.814867][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 73.861327][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'. [ 73.886377][ T6456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.157'. [ 73.913551][ T6449] IPVS: using max 18 ests per chain, 43200 per kthread [ 74.537235][ T6500] vlan2: entered allmulticast mode [ 74.555230][ T6500] bond0: entered allmulticast mode [ 74.572935][ T6500] bond_slave_0: entered allmulticast mode [ 74.599684][ T6500] bond_slave_1: entered allmulticast mode [ 74.618485][ T6500] bond0: left allmulticast mode [ 74.642909][ T6500] bond_slave_0: left allmulticast mode [ 74.650271][ T6500] bond_slave_1: left allmulticast mode [ 74.687202][ T6512] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 2, id = 0 [ 74.702365][ T6505] Cannot find del_set index 4 as target [ 75.049546][ T6510] infiniband syz2: set active [ 75.061994][ T6510] infiniband syz2: added bond_slave_0 [ 75.236662][ T6510] RDS/IB: syz2: added [ 75.241619][ T6510] smc: adding ib device syz2 with port count 1 [ 75.249881][ T6510] smc: ib device syz2 port 1 has pnetid [ 75.393307][ T6546] sock: sock_set_timeout: `syz.3.187' (pid 6546) tries to set negative timeout [ 75.654787][ T6563] tipc: Started in network mode [ 75.659830][ T6563] tipc: Node identity 7f000001, cluster identity 4711 [ 75.721792][ T6563] tipc: Enabled bearer , priority 10 [ 75.929773][ T6578] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 76.104148][ T6587] netlink: 'syz.2.198': attribute type 5 has an invalid length. [ 76.139020][ T6587] openvswitch: netlink: Actions may not be safe on all matching packets [ 76.203338][ T6589] ebtables: ebtables: counters copy to user failed while replacing table [ 76.388685][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.479347][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.752210][ T25] cfg80211: failed to load regulatory.db [ 76.835575][ T5891] tipc: Node number set to 2130706433 [ 77.313888][ T6624] Êü: entered promiscuous mode [ 77.674138][ T5892] IPVS: starting estimator thread 0... [ 77.765391][ T6645] IPVS: using max 18 ests per chain, 43200 per kthread [ 77.932504][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.945249][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.061918][ T6668] __nla_validate_parse: 3 callbacks suppressed [ 78.061937][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 78.613936][ T6705] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 78.901709][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 78.914315][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 79.101801][ T6739] netlink: 48 bytes leftover after parsing attributes in process `syz.3.246'. [ 79.319960][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 79.357287][ T6762] netlink: 68 bytes leftover after parsing attributes in process `syz.4.253'. [ 79.501383][ T6774] pim6reg527: entered allmulticast mode [ 79.521833][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 79.644170][ T6784] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 79.818260][ T6804] netlink: 'syz.4.261': attribute type 3 has an invalid length. [ 79.875654][ T6804] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.261'. [ 79.908365][ T6797] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.264'. [ 80.006994][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 80.092461][ T6825] netlink: 'syz.0.268': attribute type 2 has an invalid length. [ 80.198445][ T6832] ebtables: ebtables: counters copy to user failed while replacing table [ 80.504394][ T6859] netlink: 'syz.2.278': attribute type 21 has an invalid length. [ 80.840862][ T6891] netlink: 'syz.4.288': attribute type 4 has an invalid length. [ 80.949958][ T6905] x_tables: duplicate underflow at hook 2 [ 80.971569][ T6905] openvswitch: netlink: Actions may not be safe on all matching packets [ 81.020743][ T6909] netlink: 'syz.2.289': attribute type 9 has an invalid length. [ 81.990761][ T6990] netlink: zone id is out of range [ 82.097612][ T6994] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 82.729322][ T7053] veth0: entered promiscuous mode [ 82.750585][ T7053] batadv_slave_1: entered promiscuous mode [ 82.953509][ T7052] batadv_slave_1: left promiscuous mode [ 82.964084][ T7052] veth0: left promiscuous mode [ 83.154115][ T7090] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 83.186700][ T7091] __nla_validate_parse: 10 callbacks suppressed [ 83.186719][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 83.321892][ T7106] netlink: 32 bytes leftover after parsing attributes in process `syz.4.337'. [ 83.382197][ T7106] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 83.563865][ T7127] netlink: 'syz.3.344': attribute type 7 has an invalid length. [ 83.583122][ T7127] : entered promiscuous mode [ 83.689903][ T7130] xt_cluster: node mask cannot exceed total number of nodes [ 84.054081][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'. [ 84.063330][ T7144] netlink: 32 bytes leftover after parsing attributes in process `syz.2.349'. [ 84.076599][ T7144] gretap1: entered promiscuous mode [ 84.081828][ T7144] gretap1: entered allmulticast mode [ 84.318479][ T7158] netlink: 48 bytes leftover after parsing attributes in process `syz.1.354'. [ 84.341043][ T7161] netlink: 256 bytes leftover after parsing attributes in process `syz.0.355'. [ 84.583289][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 84.734432][ T7196] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.366'. [ 84.743991][ T7196] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 84.761939][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'. [ 84.885589][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 85.818622][ T7263] tipc: Started in network mode [ 85.823786][ T7263] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 85.839504][ T7263] tipc: Enabling of bearer rejected, failed to enable media [ 86.021268][ T7277] netem: unknown loss type 0 [ 86.027537][ T7277] netem: change failed [ 86.061818][ T7279] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 86.079127][ T7279] netlink: 'syz.3.397': attribute type 4 has an invalid length. [ 86.574517][ T7303] netlink: 'syz.2.404': attribute type 7 has an invalid length. [ 86.831369][ T7323] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 86.969222][ T7336] veth0_to_hsr: entered promiscuous mode [ 87.070352][ T7347] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 87.108273][ T7347] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.443968][ T7369] x_tables: duplicate underflow at hook 2 [ 87.495816][ T7371] Unsupported ieee802154 address type: 0 [ 87.698697][ T7328] veth0_to_hsr: left promiscuous mode [ 88.209720][ T7431] __nla_validate_parse: 8 callbacks suppressed [ 88.209740][ T7431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.446'. [ 88.233250][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 88.395909][ T7441] netlink: 'syz.4.449': attribute type 5 has an invalid length. [ 88.403708][ T7441] netlink: 140 bytes leftover after parsing attributes in process `syz.4.449'. [ 88.526154][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 88.553883][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 88.568370][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 88.581862][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 88.595322][ T7459] Bluetooth: MGMT ver 1.23 [ 88.597572][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 88.612522][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 88.629962][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 89.491701][ T7538] netlink: 'syz.0.477': attribute type 10 has an invalid length. [ 89.508351][ T7538] bridge0: port 3(dummy0) entered blocking state [ 89.518605][ T7538] bridge0: port 3(dummy0) entered disabled state [ 89.526381][ T7538] dummy0: entered allmulticast mode [ 89.538281][ T7538] dummy0: entered promiscuous mode [ 89.548796][ T7538] bridge0: port 3(dummy0) entered blocking state [ 89.555600][ T7538] bridge0: port 3(dummy0) entered forwarding state [ 89.613874][ T7546] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 89.872624][ T7561] openvswitch: netlink: Flow actions attr not present in new flow. [ 89.910147][ T7565] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 91.639536][ T7578] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 91.724257][ T7607] netlink: 'syz.4.498': attribute type 3 has an invalid length. [ 91.970474][ T7628] netlink: 'syz.1.503': attribute type 2 has an invalid length. [ 92.016388][ T7638] netlink: 'syz.4.507': attribute type 29 has an invalid length. [ 92.245656][ T7661] sch_fq: defrate 8 ignored. [ 92.708205][ T7705] openvswitch: netlink: Actions may not be safe on all matching packets [ 92.805052][ T7696] team0 (unregistering): Port device team_slave_0 removed [ 92.824107][ T7696] team0 (unregistering): Port device team_slave_1 removed [ 92.850766][ T7711] bond0: option resend_igmp: invalid value (7540) [ 92.857594][ T7711] bond0: option resend_igmp: allowed values 0 - 255 [ 93.207231][ T7740] veth1_to_team: entered promiscuous mode [ 93.233954][ T7739] vlan0: entered promiscuous mode [ 93.415572][ T7752] team_slave_0: entered promiscuous mode [ 93.421619][ T7752] team_slave_1: entered promiscuous mode [ 93.441416][ T7752] vlan2: entered promiscuous mode [ 93.446752][ T7752] team0: entered promiscuous mode [ 93.452393][ T7752] vlan2: entered allmulticast mode [ 93.459179][ T7752] team0: entered allmulticast mode [ 93.466021][ T7752] team_slave_0: entered allmulticast mode [ 93.471950][ T7752] team_slave_1: entered allmulticast mode [ 93.479682][ T7752] team0: Device vlan2 is already an upper device of the team interface [ 93.489721][ T7752] team0: left allmulticast mode [ 93.495031][ T7752] team_slave_0: left allmulticast mode [ 93.501100][ T7752] team_slave_1: left allmulticast mode [ 93.507521][ T7752] team0: left promiscuous mode [ 93.512649][ T7752] team_slave_0: left promiscuous mode [ 93.518122][ T7752] team_slave_1: left promiscuous mode [ 93.542807][ T7759] __nla_validate_parse: 87 callbacks suppressed [ 93.542821][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 93.600413][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'. [ 93.609950][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'. [ 93.714542][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.542'. [ 93.818764][ T7781] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.545'. [ 93.829580][ T7781] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 95.349599][ T7811] netlink: 'syz.4.550': attribute type 10 has an invalid length. [ 95.459352][ T7817] sit1: entered promiscuous mode [ 95.464356][ T7817] sit1: entered allmulticast mode [ 95.483051][ T7819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.554'. [ 95.830426][ T7853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.887082][ T7853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.980268][ T7856] tls_set_device_offload: netdev not found [ 96.021480][ T7860] netlink: 'syz.2.566': attribute type 2 has an invalid length. [ 96.030785][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 96.073277][ T7862] tls_set_device_offload: netdev not found [ 96.115397][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.568'. [ 96.163050][ T7866] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 96.208547][ T7870] dccp_v6_rcv: dropped packet with invalid checksum [ 96.455876][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 96.600028][ T7891] netlink: 256 bytes leftover after parsing attributes in process `syz.2.577'. [ 96.730050][ T7907] sctp: [Deprecated]: syz.1.581 (pid 7907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.730050][ T7907] Use struct sctp_sack_info instead [ 96.948714][ T7923] netlink: 'syz.4.586': attribute type 6 has an invalid length. [ 97.042913][ T7929] netlink: 'syz.2.588': attribute type 2 has an invalid length. [ 97.150847][ T7939] Êü: entered promiscuous mode [ 97.440605][ T7961] netlink: 'syz.0.600': attribute type 29 has an invalid length. [ 97.453562][ T7961] netlink: 'syz.0.600': attribute type 29 has an invalid length. [ 97.663389][ T7972] IPVS: persistence engine module ip_vs_pe_À not found [ 97.845849][ T7988] netlink: 'syz.3.609': attribute type 7 has an invalid length. [ 97.957687][ T7998] x_tables: duplicate underflow at hook 1 [ 97.972274][ T7997] vlan0: entered promiscuous mode [ 97.982654][ T25] IPVS: starting estimator thread 0... [ 97.984254][ T7997] team0: Port device vlan0 added [ 98.115427][ T8003] IPVS: using max 21 ests per chain, 50400 per kthread [ 98.592324][ T8049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.789552][ T8054] __nla_validate_parse: 18 callbacks suppressed [ 98.789573][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 98.891453][ T8059] xt_cgroup: invalid path, errno=-2 [ 98.994094][ T8065] netlink: 'syz.0.633': attribute type 14 has an invalid length. [ 99.132354][ T8076] openvswitch: netlink: Missing valid actions attribute. [ 99.159787][ T8076] openvswitch: netlink: Actions may not be safe on all matching packets [ 99.174485][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.637'. [ 99.302301][ T8085] netlink: 68 bytes leftover after parsing attributes in process `syz.1.639'. [ 99.472766][ T8095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.641'. [ 99.627544][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.645'. [ 99.664270][ T8109] netlink: 'syz.3.646': attribute type 21 has an invalid length. [ 99.673872][ T8109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.646'. [ 99.691250][ T8109] netlink: 300 bytes leftover after parsing attributes in process `syz.3.646'. [ 99.840887][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.649'. [ 100.448980][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 100.737420][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.671'. [ 100.912760][ T8205] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 101.107208][ T8224] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.268330][ T8233] x_tables: duplicate underflow at hook 2 [ 101.330306][ T8237] netlink: 'syz.2.690': attribute type 6 has an invalid length. [ 101.339786][ T8238] netlink: 'syz.2.690': attribute type 6 has an invalid length. [ 101.389365][ T8242] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 101.869954][ T8276] vcan0 speed is unknown, defaulting to 1000 [ 101.886484][ T8276] vcan0 speed is unknown, defaulting to 1000 [ 101.893285][ T8276] vcan0 speed is unknown, defaulting to 1000 [ 102.040167][ T8276] infiniband syz1: set active [ 102.045292][ T5927] vcan0 speed is unknown, defaulting to 1000 [ 102.053432][ T8276] infiniband syz1: added vcan0 [ 102.118767][ T8276] RDS/IB: syz1: added [ 102.148693][ T8276] smc: adding ib device syz1 with port count 1 [ 102.170885][ T8276] smc: ib device syz1 port 1 has pnetid [ 102.201175][ T5890] vcan0 speed is unknown, defaulting to 1000 [ 102.211732][ T8276] vcan0 speed is unknown, defaulting to 1000 [ 102.482842][ T8276] vcan0 speed is unknown, defaulting to 1000 [ 102.535444][ T8325] sctp: [Deprecated]: syz.3.721 (pid 8325) Use of int in max_burst socket option deprecated. [ 102.535444][ T8325] Use struct sctp_assoc_value instead [ 102.569331][ T8326] veth1_macvtap: left promiscuous mode [ 102.593850][ T8326] macsec0: entered promiscuous mode [ 102.598305][ T8328] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 102.603254][ T8326] macsec0: entered allmulticast mode [ 102.619668][ T8328] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 102.631305][ T8330] veth1_macvtap: entered promiscuous mode [ 102.654709][ T8330] veth1_macvtap: entered allmulticast mode [ 102.665087][ T8330] macsec0: left promiscuous mode [ 102.670339][ T8330] macsec0: left allmulticast mode [ 102.684758][ T8330] veth1_macvtap: left allmulticast mode [ 102.696585][ T8332] netlink: 'syz.2.723': attribute type 13 has an invalid length. [ 102.714377][ T8332] veth0_macvtap: left promiscuous mode [ 102.720857][ T8332] macvtap0: entered allmulticast mode [ 102.755852][ T8332] macvtap0: refused to change device tx_queue_len [ 102.770288][ T8276] vcan0 speed is unknown, defaulting to 1000 [ 102.939452][ T8276] vcan0 speed is unknown, defaulting to 1000 [ 103.013188][ T8343] tipc: Enabling of bearer rejected, failed to enable media [ 103.046485][ T8351] trusted_key: syz.0.728 sent an empty control message without MSG_MORE. [ 103.142855][ T8354] xt_CT: No such helper "pptp" [ 103.256650][ T8276] vcan0 speed is unknown, defaulting to 1000 [ 103.602357][ T8383] pim6reg1: entered promiscuous mode [ 103.614935][ T8383] pim6reg1: entered allmulticast mode [ 103.664451][ T8388] 0·: renamed from hsr0 (while UP) [ 103.671894][ T8388] 0·: entered promiscuous mode [ 103.680449][ T8388] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 103.851939][ T8400] __nla_validate_parse: 20 callbacks suppressed [ 103.851957][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.750'. [ 103.977714][ T8410] sctp: [Deprecated]: syz.1.752 (pid 8410) Use of int in max_burst socket option. [ 103.977714][ T8410] Use struct sctp_assoc_value instead [ 104.003218][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 104.134559][ T8425] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.755'. [ 104.161869][ T8425] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.755'. [ 104.216439][ T8430] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 104.260342][ T8430] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 104.458917][ T8449] netlink: 'syz.2.762': attribute type 33 has an invalid length. [ 104.500275][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 104.537420][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 104.542428][ T8453] netlink: 52 bytes leftover after parsing attributes in process `syz.0.766'. [ 104.568397][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.765'. [ 104.739408][ T8470] IPv6: sit1: Disabled Multicast RS [ 105.207172][ T8499] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 105.237712][ T8502] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 105.255101][ T8502] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 105.371132][ T8512] netlink: 32 bytes leftover after parsing attributes in process `syz.4.786'. [ 105.393307][ T8517] netlink: 'syz.1.788': attribute type 10 has an invalid length. [ 105.407749][ T8517] batman_adv: batadv0: Adding interface: wlan0 [ 105.414522][ T8517] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.442162][ T8517] batman_adv: batadv0: Interface activated: wlan0 [ 105.463422][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'. [ 105.536225][ T8527] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 105.931544][ T8558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.949391][ T8559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.118017][ T8573] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 106.158199][ T8576] wlan1: mtu less than device minimum [ 106.364465][ T8593] openvswitch: netlink: Actions may not be safe on all matching packets [ 106.555513][ T8611] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 106.779138][ T8623] xt_time: unknown flags 0x4 [ 106.937704][ T8636] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 107.026896][ T8635] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 107.158209][ T8653] xt_nfacct: accounting object `syz0' does not exists [ 107.176446][ T8655] xt_nfacct: accounting object `syz0' does not exists [ 107.577794][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.552026][ T8749] __nla_validate_parse: 14 callbacks suppressed [ 109.552047][ T8749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.855'. [ 109.590370][ T8746] netlink: 216 bytes leftover after parsing attributes in process `syz.0.853'. [ 109.613805][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 109.959877][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 109.978105][ T8790] macvlan0: entered allmulticast mode [ 109.987796][ T8790] veth1_vlan: entered allmulticast mode [ 110.062328][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 110.119935][ T8799] netlink: 50 bytes leftover after parsing attributes in process `syz.2.866'. [ 110.211412][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'. [ 110.235819][ T8812] openvswitch: netlink: Actions may not be safe on all matching packets [ 110.241086][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'. [ 110.283243][ T8808] batadv0: entered promiscuous mode [ 110.290287][ T8808] batadv_slave_1: entered promiscuous mode [ 110.305178][ T8808] batadv_slave_1: left promiscuous mode [ 110.320800][ T8808] batadv0: left promiscuous mode [ 110.441031][ T8827] tipc: Enabled bearer , priority 0 [ 110.535712][ T8840] netlink: 'syz.1.876': attribute type 24 has an invalid length. [ 110.726266][ T8851] netlink: 48 bytes leftover after parsing attributes in process `syz.1.881'. [ 110.759952][ T8851] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 110.794602][ T8860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 111.261388][ T8883] syzkaller0: entered promiscuous mode [ 111.284531][ T8883] syzkaller0: entered allmulticast mode [ 111.557125][ T5891] tipc: Node number set to 4278255617 [ 112.790626][ T8916] netlink: 'syz.1.898': attribute type 10 has an invalid length. [ 112.821359][ T8916] team0: Device hsr_slave_0 failed to register rx_handler [ 112.939988][ T8926] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 112.985088][ T8926] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 113.078910][ T8937] hsr0: entered allmulticast mode [ 113.084000][ T8937] hsr_slave_0: entered allmulticast mode [ 113.095143][ T8937] hsr_slave_1: entered allmulticast mode [ 113.102209][ T8937] hsr_slave_0: left promiscuous mode [ 113.113788][ T8937] hsr_slave_1: left promiscuous mode [ 113.198603][ T8937] hsr0 (unregistering): left allmulticast mode [ 113.211330][ T8943] netlink: 'syz.1.904': attribute type 30 has an invalid length. [ 113.762370][ T8996] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 113.767640][ T8998] xt_time: unknown flags 0x4 [ 114.093849][ T9026] ieee802154 phy0 wpan0: encryption failed: -90 [ 114.278592][ T9036] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.362604][ T9048] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 114.710026][ T9076] __nla_validate_parse: 17 callbacks suppressed [ 114.710044][ T9076] netlink: 148 bytes leftover after parsing attributes in process `syz.2.948'. [ 115.001784][ T9052] vcan0 speed is unknown, defaulting to 1000 [ 115.113139][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.952'. [ 115.281841][ T9103] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.954'. [ 115.343761][ T9104] netlink: 'syz.2.954': attribute type 9 has an invalid length. [ 115.365971][ T9121] netlink: 'syz.0.955': attribute type 7 has an invalid length. [ 115.395798][ T9103] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 115.423106][ T9104] netlink: 'syz.2.954': attribute type 6 has an invalid length. [ 115.447704][ T9121] netlink: 140 bytes leftover after parsing attributes in process `syz.0.955'. [ 115.474892][ T9103] netlink: 121 bytes leftover after parsing attributes in process `syz.2.954'. [ 115.638525][ T9062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.932949][ T9149] netlink: 'syz.0.961': attribute type 29 has an invalid length. [ 116.017609][ T9154] netlink: 830 bytes leftover after parsing attributes in process `syz.1.964'. [ 116.047752][ T9155] netlink: 'syz.1.964': attribute type 12 has an invalid length. [ 116.065987][ T9155] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 116.490287][ T9193] netlink: 5 bytes leftover after parsing attributes in process `syz.1.974'. [ 116.499903][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 116.521196][ T9193] netlink: 5 bytes leftover after parsing attributes in process `syz.1.974'. [ 116.523798][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 116.704833][ T9199] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 116.714342][ T9199] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 117.065106][ T9220] infiniband syz0: set active [ 117.071824][ T9220] infiniband syz0: added team0 [ 117.112188][ T9220] RDS/IB: syz0: added [ 117.116642][ T9220] smc: adding ib device syz0 with port count 1 [ 117.122884][ T9220] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 117.130515][ T9229] netlink: 'syz.4.985': attribute type 1 has an invalid length. [ 117.435550][ T9233] ip6t_REJECT: ECHOREPLY is not supported [ 117.936069][ T9260] netlink: 'syz.3.993': attribute type 4 has an invalid length. [ 118.061600][ T9273] Bluetooth: MGMT ver 1.23 [ 118.093688][ T9277] netlink: 'syz.0.1003': attribute type 142 has an invalid length. [ 118.244056][ T9289] netlink: 'syz.0.1006': attribute type 11 has an invalid length. [ 118.631955][ T9308] netlink: 'syz.1.1011': attribute type 12 has an invalid length. [ 118.663207][ T9310] netlink: 'syz.0.1012': attribute type 21 has an invalid length. [ 118.836594][ T9315] netlink: 'syz.0.1013': attribute type 3 has an invalid length. [ 118.844375][ T9315] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 118.931717][ T9323] openvswitch: netlink: Tunnel attr 7947 out of range max 16 [ 119.160028][ T9334] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 119.219532][ T9336] block nbd0: not configured, cannot reconfigure [ 119.324421][ T9340] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 119.607659][ T9364] xt_TCPMSS: Only works on TCP SYN packets [ 120.258846][ T9404] __nla_validate_parse: 33 callbacks suppressed [ 120.258866][ T9404] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1040'. [ 120.341398][ T9406] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 120.604255][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 120.637938][ T9431] geneve2: entered promiscuous mode [ 120.679196][ T9431] geneve2: entered allmulticast mode [ 120.687266][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 120.793031][ T9443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1054'. [ 120.858226][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1055'. [ 120.948356][ T9456] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1057'. [ 121.219076][ T5846] Bluetooth: hci0: command tx timeout [ 121.325892][ T9489] validate_nla: 1 callbacks suppressed [ 121.325911][ T9489] netlink: 'syz.4.1066': attribute type 3 has an invalid length. [ 121.846930][ T9521] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 121.940441][ T9534] netlink: 'syz.4.1076': attribute type 10 has an invalid length. [ 121.964804][ T9534] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1076'. [ 122.101926][ T9545] syz.0.1081[9545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.191769][ T9561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1083'. [ 122.291355][ T9569] x_tables: duplicate underflow at hook 1 [ 122.314882][ T9561] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1083'. [ 122.516173][ T9586] veth3: entered allmulticast mode [ 122.692665][ T9596] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.780347][ T9609] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 122.950597][ T9621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1105'. [ 123.236896][ T9626] siw: device registration error -23 [ 123.331352][ T9631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.369334][ T9630] bond4: entered allmulticast mode [ 124.310734][ T9663] vlan2: entered allmulticast mode [ 124.361875][ T9661] tipc: Started in network mode [ 124.367908][ T9661] tipc: Node identity ac14140f, cluster identity 4711 [ 124.374083][ T9670] xt_TCPMSS: Only works on TCP SYN packets [ 124.375953][ T9661] tipc: New replicast peer: 255.255.255.255 [ 124.387641][ T9661] tipc: Enabled bearer , priority 10 [ 124.469154][ T9675] openvswitch: netlink: Actions may not be safe on all matching packets [ 124.481031][ T9675] netlink: 'syz.1.1124': attribute type 5 has an invalid length. [ 124.647952][ T9691] delete_channel: no stack [ 124.654055][ T9696] ipt_rpfilter: unknown options [ 124.674559][ T9691] delete_channel: no stack [ 124.758811][ T9703] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 125.109759][ T9730] macvlan0: entered allmulticast mode [ 125.115549][ T9730] veth1_vlan: entered allmulticast mode [ 125.126803][ T9730] veth1_vlan: left allmulticast mode [ 125.183737][ T9730] macvlan0 (unregistering): left allmulticast mode [ 125.333699][ T9746] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 125.351891][ T9746] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 125.449637][ T9750] __nla_validate_parse: 11 callbacks suppressed [ 125.449658][ T9750] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1146'. [ 125.476636][ T9750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1146'. [ 125.508618][ T9750] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1146'. [ 125.519169][ T9756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1152'. [ 125.531191][ T25] tipc: Node number set to 2886997007 [ 125.533488][ T9750] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1146'. [ 125.613141][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.859455][ T9778] veth5: entered allmulticast mode [ 125.924154][ T9785] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1162'. [ 125.981633][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1165'. [ 126.688782][ T9846] netlink: 'syz.1.1181': attribute type 11 has an invalid length. [ 126.717446][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 126.732583][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 126.745511][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 126.755637][ T9847] netlink: 'syz.0.1180': attribute type 20 has an invalid length. [ 126.774711][ T9850] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 127.061470][ T9874] delete_channel: no stack [ 127.083432][ T9874] delete_channel: no stack [ 127.100658][ T9875] openvswitch: netlink: Actions may not be safe on all matching packets [ 127.202113][ T9888] netlink: 'syz.4.1195': attribute type 11 has an invalid length. [ 127.626935][ T9923] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.744414][ T9935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.781340][ T9935] netlink: 'syz.2.1211': attribute type 1 has an invalid length. [ 127.818851][ T9935] netlink: 'syz.2.1211': attribute type 2 has an invalid length. [ 127.868241][ T9943] netlink: 'syz.4.1213': attribute type 3 has an invalid length. [ 128.048254][ T9958] netlink: 'syz.3.1218': attribute type 5 has an invalid length. [ 128.274995][ T9977] netlink: 'syz.2.1226': attribute type 5 has an invalid length. [ 128.293424][ T9979] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 128.784420][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.791962][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.826644][ T9998] infiniband syz1: set down [ 128.972403][ T9998] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 128.997770][ T5893] vcan0 speed is unknown, defaulting to 1000 [ 129.004314][ T5893] vcan0 speed is unknown, defaulting to 1000 [ 129.393343][T10044] tap0: tun_chr_ioctl cmd 1074812118 [ 129.464483][T10049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 129.805239][T10075] geneve3: entered promiscuous mode [ 129.822265][T10075] geneve3: entered allmulticast mode [ 130.567241][T10124] __nla_validate_parse: 18 callbacks suppressed [ 130.567260][T10124] netlink: 93804 bytes leftover after parsing attributes in process `syz.4.1268'. [ 130.623780][T10078] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 130.712952][T10132] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1270'. [ 130.733214][T10133] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1270'. [ 130.799458][T10139] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 131.519092][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 131.730310][T10204] validate_nla: 7 callbacks suppressed [ 131.730328][T10204] netlink: 'syz.1.1293': attribute type 1 has an invalid length. [ 131.749217][T10204] netlink: 9116 bytes leftover after parsing attributes in process `syz.1.1293'. [ 131.758804][T10204] netlink: 'syz.1.1293': attribute type 2 has an invalid length. [ 131.773364][T10204] netlink: 185 bytes leftover after parsing attributes in process `syz.1.1293'. [ 131.812282][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1294'. [ 131.829684][T10207] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 131.855724][ T5846] Bluetooth: hci1: command 0x0401 tx timeout [ 132.094538][T10230] netlink: 'syz.4.1301': attribute type 10 has an invalid length. [ 132.185865][T10228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.432989][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1308'. [ 132.459768][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1308'. [ 132.488726][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'. [ 132.706528][T10291] xt_ipcomp: unknown flags B [ 132.809449][T10298] netlink: 'syz.1.1321': attribute type 1 has an invalid length. [ 132.821543][T10298] block nbd0: not configured, cannot reconfigure [ 133.056458][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.127906][T10327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.378028][T10345] xt_HMARK: spi-set and port-set can't be combined [ 133.404311][T10341] tc_dump_action: action bad kind [ 133.568590][T10358] macvtap0: entered promiscuous mode [ 133.597247][T10358] macvtap0: left promiscuous mode [ 133.624494][T10364] batadv0: entered promiscuous mode [ 133.725627][T10372] xt_bpf: check failed: parse error [ 133.823707][T10381] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 133.921557][T10391] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 133.947706][T10386] openvswitch: netlink: Key type 29 is not supported [ 133.976058][ T9119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.995450][ T9119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.503817][T10427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 134.633211][T10439] geneve2: entered promiscuous mode [ 134.642745][T10439] geneve2: entered allmulticast mode [ 135.070943][T10474] netlink: 'syz.2.1379': attribute type 4 has an invalid length. [ 135.140977][T10480] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 135.148577][T10480] pim6reg0: ignored: set checksum disabled [ 135.234529][T10491] netlink: 'syz.1.1385': attribute type 8 has an invalid length. [ 135.248283][T10492] netlink: 'syz.1.1385': attribute type 8 has an invalid length. [ 135.360108][T10498] nftables ruleset with unbound set [ 135.745077][T10516] __nla_validate_parse: 18 callbacks suppressed [ 135.745099][T10516] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1394'. [ 135.846745][T10518] ebt_among: src integrity fail: 300 [ 135.860566][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'. [ 135.913777][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'. [ 135.959481][T10526] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1398'. [ 135.979411][T10526] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1398'. [ 136.079495][T10542] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1399'. [ 136.180778][T10547] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1401'. [ 136.222881][T10547] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 136.306133][T10556] netlink: 'syz.4.1403': attribute type 10 has an invalid length. [ 136.474808][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 136.483796][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 136.503797][T10553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.526244][T10561] netlink: 'syz.3.1404': attribute type 3 has an invalid length. [ 136.534027][T10561] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1404'. [ 136.987745][T10605] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 136.997621][T10606] netlink: 'syz.3.1416': attribute type 9 has an invalid length. [ 137.007280][T10605] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 137.016602][T10606] netlink: 'syz.3.1416': attribute type 9 has an invalid length. [ 137.123277][T10613] tipc: Started in network mode [ 137.135328][T10613] tipc: Node identity bae1b0f4129f, cluster identity 4711 [ 137.142586][T10613] tipc: Enabled bearer , priority 10 [ 137.912128][T10672] netlink: 'syz.3.1441': attribute type 1 has an invalid length. [ 138.254917][ T5891] tipc: Node number set to 2826875124 [ 138.712832][T10670] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 139.250603][T10752] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 139.868813][T10802] openvswitch: netlink: Message has 4 unknown bytes. [ 139.887145][T10802] openvswitch: netlink: Actions may not be safe on all matching packets [ 139.931397][T10802] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 139.939939][ T5846] Bluetooth: hci1: command 0x0401 tx timeout [ 140.182825][T10832] netlink: 'syz.2.1487': attribute type 12 has an invalid length. [ 140.218104][T10832] netlink: 'syz.2.1487': attribute type 11 has an invalid length. [ 140.239272][T10832] netlink: 'syz.2.1487': attribute type 11 has an invalid length. [ 140.250885][T10832] netlink: 'syz.2.1487': attribute type 11 has an invalid length. [ 140.263629][T10832] netlink: 'syz.2.1487': attribute type 11 has an invalid length. [ 140.277132][T10832] netlink: 'syz.2.1487': attribute type 11 has an invalid length. [ 140.289494][T10832] netlink: 'syz.2.1487': attribute type 4 has an invalid length. [ 140.301904][T10832] netlink: 'syz.2.1487': attribute type 5 has an invalid length. [ 140.542874][T10858] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 140.563382][T10858] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 140.813945][T10878] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 140.872370][T10888] __nla_validate_parse: 30 callbacks suppressed [ 140.872389][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 140.901485][T10878] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 141.070893][T10900] netlink: 200836 bytes leftover after parsing attributes in process `syz.4.1507'. [ 141.083091][T10900] openvswitch: netlink: Duplicate key (type 0). [ 141.101483][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 141.141553][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 141.160036][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 141.173895][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 141.256387][T10914] xt_addrtype: ipv6 does not support BROADCAST matching [ 141.317947][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 141.560743][T10922] team0 (unregistering): Port device team_slave_0 removed [ 141.574167][T10922] team0 (unregistering): Port device team_slave_1 removed [ 141.764833][T10947] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1522'. [ 141.799903][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 141.837365][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1523'. [ 142.148632][T10979] delete_channel: no stack [ 142.170453][T10981] validate_nla: 3 callbacks suppressed [ 142.170471][T10981] netlink: 'syz.4.1534': attribute type 1 has an invalid length. [ 142.202418][T10981] ip6tnl1: entered promiscuous mode [ 142.213191][T10981] ip6tnl1: entered allmulticast mode [ 142.288002][T10986] unsupported nlmsg_type 40 [ 142.552889][T11003] pim6reg527: entered allmulticast mode [ 142.851321][T11031] macvlan0: entered promiscuous mode [ 142.857582][T11031] macvlan0: entered allmulticast mode [ 142.915859][T11034] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 143.437293][T11070] veth1_macvtap: left promiscuous mode [ 143.695010][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 143.706539][T11088] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 143.860012][T11108] xt_l2tp: unknown flags: 18 [ 144.103425][T11137] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.086770][T11185] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 146.104801][T11177] __nla_validate_parse: 21 callbacks suppressed [ 146.104821][T11177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1596'. [ 146.344519][T11199] netlink: 199792 bytes leftover after parsing attributes in process `syz.4.1604'. [ 146.372827][T11199] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1604'. [ 146.482124][T11216] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.518280][T11219] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1611'. [ 146.608574][T11216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1609'. [ 146.609316][T11228] netlink: 9392 bytes leftover after parsing attributes in process `syz.1.1613'. [ 146.627484][T11228] netlink: 'syz.1.1613': attribute type 1 has an invalid length. [ 146.669218][T11230] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1614'. [ 146.685744][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'. [ 146.769168][T11240] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1617'. [ 146.919893][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 147.024425][T11193] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 147.521259][T11290] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.668030][T11299] netlink: 'syz.4.1633': attribute type 10 has an invalid length. [ 147.716832][T11304] nbd: illegal input index -8454144 [ 147.724123][T11304] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 147.733852][T11304] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.003500][T11320] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 148.280076][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.287620][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.299087][T11344] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.834509][T11389] veth0: entered promiscuous mode [ 148.862230][T11388] veth0: left promiscuous mode [ 149.093886][T11416] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 149.182129][T11424] netlink: 'syz.3.1671': attribute type 10 has an invalid length. [ 149.205346][T11424] hsr0: entered promiscuous mode [ 149.216857][T11424] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.229981][T11424] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 149.240371][T11424] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 149.253210][T11424] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 149.262306][T11426] netem: change failed [ 149.282711][T11422] bridge0: port 4(veth0_to_bridge) entered blocking state [ 149.301923][T11422] bridge0: port 4(veth0_to_bridge) entered disabled state [ 149.321643][T11422] veth0_to_bridge: entered allmulticast mode [ 149.340296][T11422] veth0_to_bridge: entered promiscuous mode [ 149.364475][T11428] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 149.512680][T11445] rdma_rxe: rxe_newlink: failed to add lo [ 149.558953][T11453] netlink: 'syz.3.1679': attribute type 2 has an invalid length. [ 149.920815][T11482] netlink: 'syz.3.1692': attribute type 27 has an invalid length. [ 149.929788][T11482] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 149.951612][T11482] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 149.960285][T11482] tipc: Enabled bearer , priority 10 [ 150.500070][T11535] veth0_to_hsr: invalid flags given to default FDB implementation [ 150.509443][T11531] 0·: renamed from hsr0 (while UP) [ 150.567110][T11531] 0·: entered promiscuous mode [ 150.572466][T11531] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 150.607924][T11545] raw_sendmsg: syz.0.1712 forgot to set AF_INET. Fix it! [ 150.691453][T11540] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 150.812633][T11558] x_tables: duplicate underflow at hook 2 [ 150.965530][T11563] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 151.047334][T11555] netlink: 'syz.4.1715': attribute type 32 has an invalid length. [ 151.205942][T11581] netlink: 'syz.0.1724': attribute type 10 has an invalid length. [ 151.217304][T11581] __nla_validate_parse: 25 callbacks suppressed [ 151.217321][T11581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1724'. [ 151.389424][T11592] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1728'. [ 151.411350][T11559] atomic_op ffff888027f58198 conn xmit_atomic 0000000000000000 [ 151.503365][T11602] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1730'. [ 151.530485][T11602] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1730'. [ 151.668174][T11616] IPVS: set_ctl: invalid protocol: 162 100.1.1.1:20004 [ 151.786152][T11620] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000 [ 151.793244][T11622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.877166][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'. [ 151.897733][T11636] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1737'. [ 151.908325][T11630] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.925268][T11636] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 151.958076][T11629] team0 (unregistering): Port device team_slave_0 removed [ 151.959396][T11640] xt_hashlimit: max too large, truncated to 1048576 [ 152.012796][T11629] team0 (unregistering): Port device team_slave_1 removed [ 152.171303][T11649] gtp0: entered promiscuous mode [ 152.197254][T11649] gtp0: entered allmulticast mode [ 152.223880][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1739'. [ 152.301958][T11646] ebtables: ebtables: counters copy to user failed while replacing table [ 152.335488][T11661] netdevsim netdevsim1: Direct firmware load for . [ 152.335488][T11661] failed with error -2 [ 152.356335][T11661] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 152.356335][T11661] [ 152.665980][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 152.716438][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 152.762069][T11694] netlink: 'syz.0.1754': attribute type 10 has an invalid length. [ 152.803356][T11694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1754'. [ 152.845605][T11701] netlink: 'syz.0.1754': attribute type 4 has an invalid length. [ 152.858589][T11701] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 153.055415][T11714] netlink: 'syz.0.1763': attribute type 3 has an invalid length. [ 153.146465][T11723] can: request_module (can-proto-0) failed. [ 153.221640][T11730] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 153.271866][T11732] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 153.297310][T11732] netlink: 'syz.0.1765': attribute type 2 has an invalid length. [ 153.329270][T11735] tap0: tun_chr_ioctl cmd 1074812118 [ 153.509823][T11752] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 153.638710][ T5924] IPVS: starting estimator thread 0... [ 153.745315][T11769] IPVS: using max 20 ests per chain, 48000 per kthread [ 153.838551][T11780] tunl0: entered promiscuous mode [ 153.851992][T11780] netlink: 'syz.1.1784': attribute type 3 has an invalid length. [ 153.868140][T11784] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 153.944341][T11785] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 153.959906][T11785] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 153.971159][T11785] bond1: (slave xfrm1): making interface the new active one [ 153.980043][T11785] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 154.007126][T11794] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 154.016400][T11794] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 154.025555][T11794] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 154.034461][T11794] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 154.044874][T11794] geneve3: entered promiscuous mode [ 154.054878][T11794] geneve3: entered allmulticast mode [ 154.188945][T11807] xt_cgroup: xt_cgroup: no path or classid specified [ 154.237234][T11810] dvmrp0: entered allmulticast mode [ 156.295053][T11843] __nla_validate_parse: 15 callbacks suppressed [ 156.295073][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 156.327329][T11843] (unnamed net_device) (uninitialized): option mode: invalid value (9) [ 156.370882][T11860] unknown channel width for channel at 909000KHz? [ 156.482556][T11873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1811'. [ 156.541896][T11875] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1812'. [ 156.610165][T11878] pim6reg1: entered promiscuous mode [ 156.619772][T11878] pim6reg1: entered allmulticast mode [ 157.652579][T11908] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 158.721702][T11942] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1827'. [ 158.732608][T11942] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1827'. [ 158.774061][T11942] netlink: 'syz.4.1827': attribute type 6 has an invalid length. [ 158.793889][T11942] netlink: 'syz.4.1827': attribute type 5 has an invalid length. [ 158.817987][T11942] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1827'. [ 158.871574][T11955] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1830'. [ 158.935450][T11963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.043269][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 159.061009][T11974] netlink: 'syz.2.1837': attribute type 29 has an invalid length. [ 159.084532][T11976] x_tables: unsorted underflow at hook 3 [ 159.201593][T11987] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1839'. [ 159.212655][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1839'. [ 159.252276][T11987] netlink: 'syz.3.1839': attribute type 3 has an invalid length. [ 159.325327][T11987] netlink: 'syz.3.1839': attribute type 2 has an invalid length. [ 159.669007][T12020] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 159.747471][T12025] netlink: 'syz.1.1851': attribute type 15 has an invalid length. [ 160.013751][T12053] netlink: 'syz.1.1860': attribute type 11 has an invalid length. [ 160.138460][T12060] pimreg: entered allmulticast mode [ 160.342111][T12080] netlink: 'syz.0.1867': attribute type 9 has an invalid length. [ 160.593999][T12098] bridge0: port 5(gretap0) entered blocking state [ 160.611032][T12098] bridge0: port 5(gretap0) entered disabled state [ 160.623301][T12098] gretap0: entered allmulticast mode [ 160.637711][T12098] gretap0: entered promiscuous mode [ 160.644357][T12098] bridge0: port 5(gretap0) entered blocking state [ 160.650991][T12098] bridge0: port 5(gretap0) entered forwarding state [ 160.880383][T12114] vlan3: entered promiscuous mode [ 160.920297][T12115] netlink: 'syz.0.1877': attribute type 24 has an invalid length. [ 160.932338][T12114] netlink: 'syz.0.1877': attribute type 24 has an invalid length. [ 161.321857][T12141] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.410928][T12147] xt_l2tp: missing protocol rule (udp|l2tpip) [ 161.512645][T12158] Êü: entered promiscuous mode [ 161.619770][T12164] __nla_validate_parse: 12 callbacks suppressed [ 161.619792][T12164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1890'. [ 162.044497][T12184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.151081][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'. [ 162.453932][T12222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1910'. [ 162.481421][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 162.492394][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 162.522188][T12228] sctp: [Deprecated]: syz.2.1911 (pid 12228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.522188][T12228] Use struct sctp_sack_info instead [ 162.881073][T12263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1921'. [ 163.122182][T12277] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1926'. [ 163.489163][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'. [ 163.502961][T12286] vcan0 speed is unknown, defaulting to 1000 [ 164.006923][T12299] vcan0 speed is unknown, defaulting to 1000 [ 164.361900][T12333] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.370867][T12333] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.381573][T12333] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.390898][T12333] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.402167][T12333] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.411285][T12333] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.421604][T12333] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.430833][T12333] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.442104][T12333] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.494065][T12300] vcan0 speed is unknown, defaulting to 1000 [ 164.665068][T12339] macvtap0: entered promiscuous mode [ 164.691251][T12339] macvtap0: left promiscuous mode [ 164.714577][T12342] validate_nla: 7 callbacks suppressed [ 164.714594][T12342] netlink: 'syz.3.1944': attribute type 4 has an invalid length. [ 164.734166][T12342] net_ratelimit: 24 callbacks suppressed [ 164.734176][T12342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.878119][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 164.970957][T12350] openvswitch: netlink: Actions may not be safe on all matching packets [ 165.446841][T12373] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1953'. [ 165.456991][T12373] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 165.518063][T12370] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 166.150384][T12384] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 166.621470][T12417] netlink: 'syz.0.1964': attribute type 32 has an invalid length. [ 166.760189][T12424] __nla_validate_parse: 3 callbacks suppressed [ 166.760208][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 166.885288][T12443] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 166.924498][T12436] xt_policy: output policy not valid in PREROUTING and INPUT [ 166.953809][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 167.039091][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 167.052835][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1977'. [ 167.063223][T12453] netlink: 'syz.3.1977': attribute type 15 has an invalid length. [ 167.090719][T12452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1976'. [ 167.281318][T12457] IPv6: NLM_F_REPLACE set, but no existing node found! [ 167.386078][T12477] netem: unknown loss type 0 [ 167.391064][T12477] netem: change failed [ 167.437183][T12486] netlink: 'syz.2.1986': attribute type 1 has an invalid length. [ 167.454060][T12489] netlink: 'syz.2.1986': attribute type 1 has an invalid length. [ 167.480228][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1985'. [ 167.491326][T12493] nft_compat: unsupported protocol 0 [ 167.504178][T12493] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1988'. [ 167.527214][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 167.550388][T12493] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1988'. [ 167.561142][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 167.911451][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.954386][T12526] netlink: 'syz.4.2000': attribute type 3 has an invalid length. [ 167.978437][T12527] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.985652][T12527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.071253][T12530] delete_channel: no stack [ 168.239135][T12546] 0·: renamed from hsr_slave_1 (while UP) [ 168.252751][T12546] 0·: entered allmulticast mode [ 168.262727][T12546] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 168.432693][T12564] batadv_slave_1: entered promiscuous mode [ 168.447149][T12562] batadv_slave_1: left promiscuous mode [ 168.556194][T12570] NCSI netlink: No device for ifindex 0 [ 168.784574][T12591] netlink: 'syz.1.2021': attribute type 9 has an invalid length. [ 168.876567][T12595] bond2: entered allmulticast mode [ 168.884360][T12595] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.907902][T12589] bond3: entered allmulticast mode [ 168.931638][T12606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.964014][T12606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.995699][T12606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.003173][T12606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.119528][T12621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.586528][T12659] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.595956][T12659] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.603053][T12659] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.610416][T12659] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.617717][T12659] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.625070][T12659] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.632145][T12659] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.641410][T12659] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.650642][T12659] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.651968][T12662] sock: sock_set_timeout: `syz.3.2040' (pid 12662) tries to set negative timeout [ 169.661192][T12659] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.720374][T12666] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073592111109) [ 169.733108][T12666] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 169.806682][T12671] netlink: 'syz.0.2046': attribute type 5 has an invalid length. [ 170.311826][T12712] SET target dimension over the limit! [ 170.689936][T12715] team0: Port device vlan0 removed [ 171.555801][T12791] netlink: 'syz.1.2079': attribute type 3 has an invalid length. [ 171.700504][T12746] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 171.955585][T12822] __nla_validate_parse: 52 callbacks suppressed [ 171.955604][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 172.073664][T12835] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 172.247362][T12854] netlink: 'syz.2.2099': attribute type 1 has an invalid length. [ 172.382281][T12862] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2102'. [ 172.492737][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 172.583662][T12879] set match dimension is over the limit! [ 172.656617][T12885] FAULT_INJECTION: forcing a failure. [ 172.656617][T12885] name failslab, interval 1, probability 0, space 0, times 1 [ 172.709736][T12885] CPU: 0 UID: 0 PID: 12885 Comm: syz.1.2107 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 172.720554][T12885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.730623][T12885] Call Trace: [ 172.733897][T12885] [ 172.736822][T12885] dump_stack_lvl+0x241/0x360 [ 172.741522][T12885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.746716][T12885] ? __pfx__printk+0x10/0x10 [ 172.751305][T12885] ? ref_tracker_alloc+0x332/0x490 [ 172.756413][T12885] should_fail_ex+0x3b0/0x4e0 [ 172.761090][T12885] ? skb_clone+0x20c/0x390 [ 172.765509][T12885] should_failslab+0xac/0x100 [ 172.770189][T12885] ? skb_clone+0x20c/0x390 [ 172.774602][T12885] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 172.779982][T12885] skb_clone+0x20c/0x390 [ 172.784222][T12885] __netlink_deliver_tap+0x3cc/0x7c0 [ 172.789513][T12885] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.794702][T12885] netlink_deliver_tap+0x19d/0x1b0 [ 172.799809][T12885] netlink_unicast+0x7c4/0x990 [ 172.804576][T12885] ? __pfx_netlink_unicast+0x10/0x10 [ 172.809859][T12885] ? __virt_addr_valid+0x183/0x530 [ 172.814972][T12885] ? __check_object_size+0x48e/0x900 [ 172.820260][T12885] netlink_sendmsg+0x8e4/0xcb0 [ 172.825028][T12885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.830319][T12885] ? aa_sock_msg_perm+0x91/0x160 [ 172.835261][T12885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.840540][T12885] __sock_sendmsg+0x221/0x270 [ 172.845221][T12885] ____sys_sendmsg+0x52a/0x7e0 [ 172.849989][T12885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.855280][T12885] __sys_sendmsg+0x292/0x380 [ 172.859868][T12885] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.864992][T12885] ? __pfx_vfs_write+0x10/0x10 [ 172.869779][T12885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.876105][T12885] ? do_syscall_64+0x100/0x230 [ 172.880874][T12885] ? do_syscall_64+0xb6/0x230 [ 172.885554][T12885] do_syscall_64+0xf3/0x230 [ 172.890057][T12885] ? clear_bhb_loop+0x35/0x90 [ 172.894739][T12885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.900640][T12885] RIP: 0033:0x7fa30b97e719 [ 172.905059][T12885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.924670][T12885] RSP: 002b:00007fa30c775038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.933085][T12885] RAX: ffffffffffffffda RBX: 00007fa30bb35f80 RCX: 00007fa30b97e719 [ 172.941055][T12885] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 172.949019][T12885] RBP: 00007fa30c775090 R08: 0000000000000000 R09: 0000000000000000 [ 172.956981][T12885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.964949][T12885] R13: 0000000000000000 R14: 00007fa30bb35f80 R15: 00007ffd02513948 [ 172.972934][T12885] [ 173.010264][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 173.071501][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2111'. [ 173.142726][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 173.162443][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 173.340017][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 173.349159][T12916] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2120'. [ 173.351468][T12920] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2120'. [ 173.600797][T12938] netlink: 'syz.1.2129': attribute type 21 has an invalid length. [ 173.608979][T12938] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 173.741490][T12948] sit1: entered promiscuous mode [ 173.750378][T12948] sit1: entered allmulticast mode [ 173.830456][T12956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.845847][T12956] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 173.846069][T12957] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 174.058693][T12980] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 174.612097][T13027] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.747709][T13036] SET target dimension over the limit! [ 174.861133][T13046] netlink: 'syz.1.2161': attribute type 1 has an invalid length. [ 174.879775][T13046] netlink: 'syz.1.2161': attribute type 1 has an invalid length. [ 174.898697][T13046] netlink: 'syz.1.2161': attribute type 2 has an invalid length. [ 174.950305][T13050] netlink: 'syz.2.2163': attribute type 21 has an invalid length. [ 175.058677][T13057] netlink: 'syz.4.2165': attribute type 1 has an invalid length. [ 175.089201][T13057] netlink: 'syz.4.2165': attribute type 4 has an invalid length. [ 175.591451][T13102] netlink: 'syz.1.2180': attribute type 2 has an invalid length. [ 175.622806][T13102] netlink: 'syz.1.2180': attribute type 1 has an invalid length. [ 175.842825][T13131] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 175.879749][T13133] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 175.899908][T13133] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 176.094503][T13149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.116111][T13149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.254802][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 176.318055][T13166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.991835][T13222] __nla_validate_parse: 39 callbacks suppressed [ 176.991855][T13222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2217'. [ 177.056487][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 177.132775][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2216'. [ 177.143921][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2221'. [ 177.154269][T13233] FAULT_INJECTION: forcing a failure. [ 177.154269][T13233] name failslab, interval 1, probability 0, space 0, times 0 [ 177.167347][T13233] CPU: 0 UID: 0 PID: 13233 Comm: syz.3.2221 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 177.178138][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.188194][T13233] Call Trace: [ 177.191471][T13233] [ 177.194399][T13233] dump_stack_lvl+0x241/0x360 [ 177.199085][T13233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.204334][T13233] ? __pfx__printk+0x10/0x10 [ 177.208956][T13233] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 177.214964][T13233] ? __pfx___might_resched+0x10/0x10 [ 177.220285][T13233] should_fail_ex+0x3b0/0x4e0 [ 177.225001][T13233] should_failslab+0xac/0x100 [ 177.229700][T13233] ? __alloc_skb+0x1c3/0x440 [ 177.234291][T13233] kmem_cache_alloc_node_noprof+0x71/0x320 [ 177.240134][T13233] __alloc_skb+0x1c3/0x440 [ 177.244555][T13233] ? __pfx___alloc_skb+0x10/0x10 [ 177.249500][T13233] ? netlink_ack_tlv_len+0x6e/0x200 [ 177.254724][T13233] netlink_ack+0x13f/0xa30 [ 177.259136][T13233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.264607][T13233] netlink_rcv_skb+0x262/0x430 [ 177.269375][T13233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.274842][T13233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.280148][T13233] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.285354][T13233] netlink_unicast+0x7f6/0x990 [ 177.290126][T13233] ? __pfx_netlink_unicast+0x10/0x10 [ 177.295408][T13233] ? __virt_addr_valid+0x183/0x530 [ 177.300517][T13233] ? __check_object_size+0x48e/0x900 [ 177.305801][T13233] netlink_sendmsg+0x8e4/0xcb0 [ 177.310600][T13233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.315903][T13233] ? aa_sock_msg_perm+0x91/0x160 [ 177.320860][T13233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.326156][T13233] __sock_sendmsg+0x221/0x270 [ 177.330846][T13233] ____sys_sendmsg+0x52a/0x7e0 [ 177.335611][T13233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.340926][T13233] __sys_sendmsg+0x292/0x380 [ 177.345534][T13233] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.350676][T13233] ? __pfx_sched_clock_cpu+0x10/0x10 [ 177.355971][T13233] ? __pfx___schedule+0x10/0x10 [ 177.360831][T13233] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.367173][T13233] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.373622][T13233] ? do_syscall_64+0xb6/0x230 [ 177.378328][T13233] do_syscall_64+0xf3/0x230 [ 177.382837][T13233] ? clear_bhb_loop+0x35/0x90 [ 177.387600][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.393493][T13233] RIP: 0033:0x7f8f69f7e719 [ 177.397905][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.417507][T13233] RSP: 002b:00007f8f6adb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.425924][T13233] RAX: ffffffffffffffda RBX: 00007f8f6a135f80 RCX: 00007f8f69f7e719 [ 177.433904][T13233] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 177.441870][T13233] RBP: 00007f8f6adb3090 R08: 0000000000000000 R09: 0000000000000000 [ 177.449841][T13233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.457806][T13233] R13: 0000000000000000 R14: 00007f8f6a135f80 R15: 00007ffe4e3fb0c8 [ 177.465786][T13233] [ 177.567354][T13238] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2223'. [ 177.860198][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2230'. [ 178.026694][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 178.051346][T13269] FAULT_INJECTION: forcing a failure. [ 178.051346][T13269] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 178.079253][T13269] CPU: 1 UID: 0 PID: 13269 Comm: syz.4.2233 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 178.090078][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.100160][T13269] Call Trace: [ 178.103477][T13269] [ 178.106565][T13269] dump_stack_lvl+0x241/0x360 [ 178.111295][T13269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.116521][T13269] ? __pfx__printk+0x10/0x10 [ 178.121149][T13269] ? snprintf+0xda/0x120 [ 178.125435][T13269] should_fail_ex+0x3b0/0x4e0 [ 178.130152][T13269] _copy_to_user+0x31/0xb0 [ 178.134610][T13269] simple_read_from_buffer+0xca/0x150 [ 178.140022][T13269] proc_fail_nth_read+0x1e9/0x250 [ 178.145094][T13269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.150735][T13269] ? rw_verify_area+0x55e/0x6f0 [ 178.155627][T13269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.161211][T13269] vfs_read+0x1fc/0xb70 [ 178.165410][T13269] ? fdget_pos+0x24e/0x320 [ 178.169868][T13269] ? __pfx_vfs_read+0x10/0x10 [ 178.174686][T13269] ? __fget_files+0x3f3/0x470 [ 178.179404][T13269] ? fdget_pos+0x24e/0x320 [ 178.183854][T13269] ksys_read+0x183/0x2b0 [ 178.188131][T13269] ? __pfx_ksys_read+0x10/0x10 [ 178.192936][T13269] ? do_syscall_64+0x100/0x230 [ 178.197739][T13269] ? do_syscall_64+0xb6/0x230 [ 178.202462][T13269] do_syscall_64+0xf3/0x230 [ 178.207002][T13269] ? clear_bhb_loop+0x35/0x90 [ 178.211714][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.217637][T13269] RIP: 0033:0x7fb9cd57d15c [ 178.222079][T13269] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 178.241888][T13269] RSP: 002b:00007fb9ce29f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.248216][T13285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2238'. [ 178.250330][T13269] RAX: ffffffffffffffda RBX: 00007fb9cd735f80 RCX: 00007fb9cd57d15c [ 178.267376][T13269] RDX: 000000000000000f RSI: 00007fb9ce29f0a0 RDI: 0000000000000004 [ 178.275460][T13269] RBP: 00007fb9ce29f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.283447][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.291436][T13269] R13: 0000000000000000 R14: 00007fb9cd735f80 R15: 00007fff5084da58 [ 178.299446][T13269] [ 178.694053][T13303] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 178.703412][T13310] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 178.724185][T13306] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.2246'. [ 178.741802][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 179.393195][T13363] netem: unknown loss type 0 [ 179.402741][T13363] netem: change failed [ 179.507757][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2262'. [ 179.728125][T13389] tc_dump_action: action bad kind [ 180.053832][ T2938] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.157152][ T2938] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.267862][ T2938] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.371166][ T2938] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.419802][T13411] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 180.487602][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.504944][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.519312][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.544892][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.563665][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 180.576107][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.692965][ T2938] bridge_slave_1: left allmulticast mode [ 180.704560][ T2938] bridge_slave_1: left promiscuous mode [ 180.713204][ T2938] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.749338][ T2938] bridge_slave_0: left allmulticast mode [ 180.775114][ T2938] bridge_slave_0: left promiscuous mode [ 180.782405][ T2938] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.011649][T13439] validate_nla: 2 callbacks suppressed [ 181.011669][T13439] netlink: 'syz.1.2284': attribute type 7 has an invalid length. [ 181.220624][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 181.222376][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 181.228294][ T5848] Bluetooth: hci1: command 0x0401 tx timeout [ 181.303524][ T2938] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 181.635516][ T2938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.647774][ T2938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.660233][ T2938] bond0 (unregistering): Released all slaves [ 181.670476][ T2938] bond1 (unregistering): Released all slaves [ 181.683282][T13413] vcan0 speed is unknown, defaulting to 1000 [ 181.693821][T13438] –eth0_vlan: renamed from bridge_slave_1 [ 181.814806][ T2938] tipc: Disabling bearer [ 181.842708][ T2938] tipc: Left network mode [ 181.875294][ T2938] IPVS: stopping backup sync thread 6512 ... [ 181.968221][T13460] geneve2: entered promiscuous mode [ 181.973483][T13460] geneve2: entered allmulticast mode [ 182.102130][T13475] __nla_validate_parse: 9 callbacks suppressed [ 182.102150][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'. [ 182.180180][T13475] netlink: 'syz.0.2293': attribute type 9 has an invalid length. [ 182.195159][T13478] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.2296'. [ 182.204753][T13475] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.2293'. [ 182.214244][T13478] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.266738][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'. [ 182.286697][T13483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.299599][T13483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.428040][T13497] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.2300'. [ 182.441154][T13497] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 182.654913][ T54] Bluetooth: hci4: command tx timeout [ 182.702311][T13507] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2304'. [ 182.732404][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 182.826990][T13413] chnl_net:caif_netlink_parms(): no params data found [ 182.845329][T13510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.002965][T13510] netlink: 'syz.2.2305': attribute type 21 has an invalid length. [ 183.014919][T13510] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2305'. [ 183.027078][T13510] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2305'. [ 183.060257][ T2938] hsr_slave_0: left promiscuous mode [ 183.067966][ T2938] 0·: left promiscuous mode [ 183.187735][ T2938] pim6reg527 (unregistering): left allmulticast mode [ 183.952072][ T9119] smc: removing ib device syz1 [ 183.999728][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 184.032822][T13536] 8021q: VLANs not supported on lo [ 184.618830][T13413] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.633797][T13413] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.646896][T13413] bridge_slave_0: entered allmulticast mode [ 184.664097][T13413] bridge_slave_0: entered promiscuous mode [ 184.734949][ T54] Bluetooth: hci4: command tx timeout [ 184.813292][T13413] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.847945][T13413] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.925110][T13413] bridge_slave_1: entered allmulticast mode [ 184.932163][T13413] bridge_slave_1: entered promiscuous mode [ 185.058053][T13413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.090052][T13413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.213896][T13413] team0: Port device team_slave_0 added [ 185.233400][T13413] team0: Port device team_slave_1 added [ 185.298688][T13413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.308747][ T2938] IPVS: stop unused estimator thread 0... [ 185.310530][T13413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.364253][T13413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.391894][T13413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.401766][T13589] netlink: 'syz.1.2329': attribute type 1 has an invalid length. [ 185.409739][T13413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.414757][T13589] netlink: 'syz.1.2329': attribute type 10 has an invalid length. [ 185.442571][T13413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.570238][T13413] hsr_slave_0: entered promiscuous mode [ 185.583804][T13413] hsr_slave_1: entered promiscuous mode [ 185.690285][T13413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.707618][T13413] Cannot create hsr debugfs directory [ 185.798508][T13619] xt_l2tp: v2 sid > 0xffff: 262144 [ 186.034379][T13634] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 186.307300][T13646] tipc: Enabling of bearer rejected, already enabled [ 186.339515][T13413] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.364331][T13413] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.385669][T13413] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.416178][T13413] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.545045][T13663] netlink: 'syz.2.2351': attribute type 12 has an invalid length. [ 186.603255][T13413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.624717][T13670] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 186.717184][T13413] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.758602][ T2132] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.765790][ T2132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.798694][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.805971][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.816360][ T54] Bluetooth: hci4: command tx timeout [ 187.053220][T13698] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 187.090144][T13698] ieee802154 phy0 wpan0: encryption failed: -90 [ 187.107598][T13698] __nla_validate_parse: 9 callbacks suppressed [ 187.107616][T13698] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2359'. [ 187.221864][T13413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.281309][T13708] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 187.465546][T13725] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2367'. [ 187.493997][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2368'. [ 187.790773][T13413] veth0_vlan: entered promiscuous mode [ 187.812213][T13413] veth1_vlan: entered promiscuous mode [ 187.852638][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 187.910980][T13413] veth0_macvtap: entered promiscuous mode [ 187.921294][T13756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2376'. [ 187.942226][T13413] veth1_macvtap: entered promiscuous mode [ 187.978385][T13758] netlink: 'syz.2.2377': attribute type 10 has an invalid length. [ 188.031220][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.057472][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.078495][T13413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.090986][T13760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.110448][T13770] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2381'. [ 188.111688][T13769] netlink: 'syz.2.2381': attribute type 1 has an invalid length. [ 188.124537][T13764] netlink: 'syz.3.2379': attribute type 1 has an invalid length. [ 188.142171][T13764] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 188.168862][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.211921][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.227889][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.245324][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.255760][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.266471][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.277902][T13413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.331525][T13413] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.386787][T13413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.402150][T13413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.429625][T13413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.442766][T13796] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 188.453984][T13796] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 188.471422][T13783] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2383'. [ 188.479807][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2385'. [ 188.493788][T13783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'. [ 188.630001][T13413] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 188.640230][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.653944][T13798] netlink: 'syz.1.2386': attribute type 11 has an invalid length. [ 188.692013][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.701482][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.768234][ T9119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.784304][ T9119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.802707][T13809] IPv6: sit1: Disabled Multicast RS [ 188.828485][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'. [ 188.860649][T13812] IPVS: ip_vs_add_dest(): server weight less than zero [ 188.895993][ T54] Bluetooth: hci4: command tx timeout [ 189.672697][T13867] dccp_invalid_packet: P.Data Offset(0) too small [ 189.758081][T13873] IPVS: length: 50 != 8 [ 189.883512][ T9119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.142254][T13888] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.246324][T13896] xt_time: unknown flags 0x4 [ 190.263905][T13899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.289410][T13899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.331742][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.345024][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.363216][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.373968][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.382748][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 190.390309][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.600231][ T9119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.717965][ T9119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.848636][ T9119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.082533][ T9119] bridge_slave_1: left allmulticast mode [ 191.098628][ T9119] bridge_slave_1: left promiscuous mode [ 191.108653][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.144301][ T9119] bridge_slave_0: left allmulticast mode [ 191.160971][ T9119] bridge_slave_0: left promiscuous mode [ 191.170272][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.574791][ T9119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.586309][ T9119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.601294][ T9119] bond0 (unregistering): Released all slaves [ 191.836522][T13902] chnl_net:caif_netlink_parms(): no params data found [ 192.252359][T13902] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.311281][T13902] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.318931][T13902] bridge_slave_0: entered allmulticast mode [ 192.360933][T13902] bridge_slave_0: entered promiscuous mode [ 192.369114][T13902] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.376303][T13902] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.383528][T13902] bridge_slave_1: entered allmulticast mode [ 192.399877][T13902] bridge_slave_1: entered promiscuous mode [ 192.410096][T13985] __nla_validate_parse: 3 callbacks suppressed [ 192.410114][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2441'. [ 192.424907][ T54] Bluetooth: hci4: command tx timeout [ 192.505598][T13988] openvswitch: netlink: ct_state flags 00004000 unsupported [ 192.598966][ T9119] hsr_slave_0: left promiscuous mode [ 192.651623][ T9119] hsr_slave_1: left promiscuous mode [ 192.681625][ T9119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.694216][ T9119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.723933][ T9119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.754394][ T9119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.794558][T14015] nbd: must specify an index to disconnect [ 192.816147][ T9119] veth1_macvtap: left promiscuous mode [ 192.821981][ T9119] veth0_macvtap: left promiscuous mode [ 192.827845][ T9119] veth1_vlan: left promiscuous mode [ 192.834703][ T9119] veth0_vlan: left promiscuous mode [ 193.308059][ T9119] team0 (unregistering): Port device team_slave_1 removed [ 193.360023][ T9119] team0 (unregistering): Port device team_slave_0 removed [ 193.767443][T13902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.781881][T13902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.869786][T13902] team0: Port device team_slave_0 added [ 193.896048][T13902] team0: Port device team_slave_1 added [ 193.979147][T13902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.994985][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.031493][T13902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.045095][T14035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2454'. [ 194.086447][T14038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2456'. [ 194.103465][T13902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.110635][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.120153][T14038] FAULT_INJECTION: forcing a failure. [ 194.120153][T14038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.146817][T13902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.166577][T14038] CPU: 1 UID: 0 PID: 14038 Comm: syz.3.2456 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 194.177407][T14038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.187496][T14038] Call Trace: [ 194.190796][T14038] [ 194.193762][T14038] dump_stack_lvl+0x241/0x360 [ 194.198482][T14038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.203720][T14038] ? __pfx__printk+0x10/0x10 [ 194.208354][T14038] ? __pfx_lock_release+0x10/0x10 [ 194.213422][T14038] should_fail_ex+0x3b0/0x4e0 [ 194.218237][T14038] _copy_from_user+0x2f/0xc0 [ 194.222860][T14038] copy_msghdr_from_user+0xae/0x680 [ 194.228071][T14038] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 194.233885][T14038] __sys_sendmsg+0x22d/0x380 [ 194.238492][T14038] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.243646][T14038] ? __pfx_vfs_write+0x10/0x10 [ 194.248466][T14038] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.254822][T14038] ? do_syscall_64+0x100/0x230 [ 194.259611][T14038] ? do_syscall_64+0xb6/0x230 [ 194.264315][T14038] do_syscall_64+0xf3/0x230 [ 194.268840][T14038] ? clear_bhb_loop+0x35/0x90 [ 194.273546][T14038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.279464][T14038] RIP: 0033:0x7f8f69f7e719 [ 194.283900][T14038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.303537][T14038] RSP: 002b:00007f8f6adb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.311959][T14038] RAX: ffffffffffffffda RBX: 00007f8f6a135f80 RCX: 00007f8f69f7e719 [ 194.319931][T14038] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 194.328079][T14038] RBP: 00007f8f6adb3090 R08: 0000000000000000 R09: 0000000000000000 [ 194.336065][T14038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.344045][T14038] R13: 0000000000000000 R14: 00007f8f6a135f80 R15: 00007ffe4e3fb0c8 [ 194.352070][T14038] [ 194.503085][ T54] Bluetooth: hci4: command tx timeout [ 194.528756][T13902] hsr_slave_0: entered promiscuous mode [ 194.585454][T13902] hsr_slave_1: entered promiscuous mode [ 194.621919][T13902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.631949][T13902] Cannot create hsr debugfs directory [ 194.721172][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'. [ 194.793905][T14065] veth0_: entered promiscuous mode [ 194.819834][T14065] veth0_: entered allmulticast mode [ 195.174005][T14091] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.215517][T14091] tipc: Enabled bearer , priority 10 [ 195.222835][T14089] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2466'. [ 195.304872][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.408666][T14102] netlink: 4332 bytes leftover after parsing attributes in process `syz.0.2469'. [ 195.492717][T14108] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2471'. [ 195.504324][T14104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2468'. [ 195.531550][T14106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2470'. [ 195.574880][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.621065][T14106] FAULT_INJECTION: forcing a failure. [ 195.621065][T14106] name failslab, interval 1, probability 0, space 0, times 0 [ 195.641519][T14106] CPU: 1 UID: 0 PID: 14106 Comm: syz.2.2470 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 195.652337][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 195.662420][T14106] Call Trace: [ 195.663184][T14113] xt_limit: Overflow, try lower: 2147483649/128 [ 195.665703][T14106] [ 195.665716][T14106] dump_stack_lvl+0x241/0x360 [ 195.665745][T14106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.665765][T14106] ? __pfx__printk+0x10/0x10 [ 195.665787][T14106] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 195.665810][T14106] ? __pfx___might_resched+0x10/0x10 [ 195.700750][T14106] should_fail_ex+0x3b0/0x4e0 [ 195.705469][T14106] should_failslab+0xac/0x100 [ 195.710172][T14106] ? __alloc_skb+0x1c3/0x440 [ 195.714798][T14106] kmem_cache_alloc_node_noprof+0x71/0x320 [ 195.720679][T14106] __alloc_skb+0x1c3/0x440 [ 195.725116][T14106] ? __pfx___alloc_skb+0x10/0x10 [ 195.730068][T14106] ? netlink_autobind+0xd6/0x2f0 [ 195.735017][T14106] ? netlink_autobind+0x2b0/0x2f0 [ 195.740067][T14106] netlink_sendmsg+0x638/0xcb0 [ 195.744851][T14106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.750142][T14106] ? aa_sock_msg_perm+0x91/0x160 [ 195.755107][T14106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.760406][T14106] __sock_sendmsg+0x221/0x270 [ 195.765088][T14106] ____sys_sendmsg+0x52a/0x7e0 [ 195.769857][T14106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.775161][T14106] __sys_sendmsg+0x292/0x380 [ 195.779760][T14106] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.784875][T14106] ? __pfx_vfs_write+0x10/0x10 [ 195.789645][T14106] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.795970][T14106] ? do_syscall_64+0x100/0x230 [ 195.800729][T14106] ? do_syscall_64+0xb6/0x230 [ 195.805406][T14106] do_syscall_64+0xf3/0x230 [ 195.809914][T14106] ? clear_bhb_loop+0x35/0x90 [ 195.814604][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.820504][T14106] RIP: 0033:0x7f775437e719 [ 195.824918][T14106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.844605][T14106] RSP: 002b:00007f77550c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.853040][T14106] RAX: ffffffffffffffda RBX: 00007f7754535f80 RCX: 00007f775437e719 [ 195.861004][T14106] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 195.868996][T14106] RBP: 00007f77550c3090 R08: 0000000000000000 R09: 0000000000000000 [ 195.876974][T14106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.884973][T14106] R13: 0000000000000000 R14: 00007f7754535f80 R15: 00007ffc99f245a8 [ 195.892945][T14106] [ 196.071427][T13902] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.083796][T13902] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.097166][T13902] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.104810][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 196.128548][T13902] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.292197][T13902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.352919][T13902] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.356596][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 196.410675][ T2132] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.417859][ T2132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.441669][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.448903][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.575094][ T54] Bluetooth: hci4: command tx timeout [ 196.670473][T14156] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 196.749698][ T2938] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.860817][ T25] hid-generic 0005:0C45:FFF9.0001: item fetching failed at offset 0/2 [ 196.882263][ T25] hid-generic 0005:0C45:FFF9.0001: probe with driver hid-generic failed with error -22 [ 197.018080][T13902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.134843][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.285992][T14201] netlink: 'syz.1.2502': attribute type 1 has an invalid length. [ 197.294555][T14199] FAULT_INJECTION: forcing a failure. [ 197.294555][T14199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.316916][T14199] CPU: 0 UID: 0 PID: 14199 Comm: syz.0.2500 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 197.327739][T14199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.337831][T14199] Call Trace: [ 197.341142][T14199] [ 197.344109][T14199] dump_stack_lvl+0x241/0x360 [ 197.348831][T14199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.354071][T14199] ? __pfx__printk+0x10/0x10 [ 197.358701][T14199] ? __pfx_lock_release+0x10/0x10 [ 197.363868][T14199] should_fail_ex+0x3b0/0x4e0 [ 197.368585][T14199] _copy_from_iter+0x21f/0x1e70 [ 197.373478][T14199] ? __virt_addr_valid+0x183/0x530 [ 197.378616][T14199] ? __pfx_lock_release+0x10/0x10 [ 197.383688][T14199] ? __alloc_skb+0x28f/0x440 [ 197.388316][T14199] ? __pfx__copy_from_iter+0x10/0x10 [ 197.393642][T14199] ? __virt_addr_valid+0x183/0x530 [ 197.398782][T14199] ? __virt_addr_valid+0x183/0x530 [ 197.399034][T13902] veth0_vlan: entered promiscuous mode [ 197.403900][T14199] ? __virt_addr_valid+0x45f/0x530 [ 197.403928][T14199] ? __check_object_size+0x48e/0x900 [ 197.403954][T14199] netlink_sendmsg+0x73d/0xcb0 [ 197.424589][T14199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.428251][T13902] veth1_vlan: entered promiscuous mode [ 197.429889][T14199] ? aa_sock_msg_perm+0x91/0x160 [ 197.429922][T14199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.429943][T14199] __sock_sendmsg+0x221/0x270 [ 197.429978][T14199] ____sys_sendmsg+0x52a/0x7e0 [ 197.455165][T14199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.460495][T14199] __sys_sendmsg+0x292/0x380 [ 197.462040][T13902] veth0_macvtap: entered promiscuous mode [ 197.465094][T14199] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.465132][T14199] ? __pfx_vfs_write+0x10/0x10 [ 197.480743][T14199] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.482285][T13902] veth1_macvtap: entered promiscuous mode [ 197.487081][T14199] ? do_syscall_64+0x100/0x230 [ 197.487111][T14199] ? do_syscall_64+0xb6/0x230 [ 197.487134][T14199] do_syscall_64+0xf3/0x230 [ 197.487154][T14199] ? clear_bhb_loop+0x35/0x90 [ 197.507614][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.511430][T14199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.511458][T14199] RIP: 0033:0x7f4736d7e719 [ 197.522147][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.527718][T14199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.527737][T14199] RSP: 002b:00007f4737afd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.527759][T14199] RAX: ffffffffffffffda RBX: 00007f4736f35f80 RCX: 00007f4736d7e719 [ 197.527773][T14199] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 197.527785][T14199] RBP: 00007f4737afd090 R08: 0000000000000000 R09: 0000000000000000 [ 197.527797][T14199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.527808][T14199] R13: 0000000000000000 R14: 00007f4736f35f80 R15: 00007ffc1a3c8638 [ 197.527838][T14199] [ 197.565281][T14204] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 197.588879][T13902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.638160][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.649117][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.659149][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.669672][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.691479][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.710443][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.736160][T13902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.750009][T14205] netlink: 'syz.2.2501': attribute type 4 has an invalid length. [ 197.778403][T13902] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.807549][T13902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.819856][T13902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.829428][T13902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.983544][T14222] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 198.059286][T13902] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 198.074975][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.098075][ T9125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.104027][T14229] __nla_validate_parse: 8 callbacks suppressed [ 198.104046][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2510'. [ 198.106915][ T9125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.174718][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 198.195927][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.207854][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'. [ 198.220786][T14235] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 198.220813][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.228853][T14237] sit0: Master is either lo or non-ether device [ 198.243351][T14235] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.2512'. [ 198.280444][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2512'. [ 198.300266][T14239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2514'. [ 198.385135][T14239] FAULT_INJECTION: forcing a failure. [ 198.385135][T14239] name failslab, interval 1, probability 0, space 0, times 0 [ 198.408880][T14239] CPU: 1 UID: 0 PID: 14239 Comm: syz.0.2514 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 198.419690][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 198.429750][T14239] Call Trace: [ 198.433023][T14239] [ 198.435953][T14239] dump_stack_lvl+0x241/0x360 [ 198.440642][T14239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.445836][T14239] ? __pfx__printk+0x10/0x10 [ 198.450432][T14239] ? ref_tracker_alloc+0x332/0x490 [ 198.455543][T14239] should_fail_ex+0x3b0/0x4e0 [ 198.460218][T14239] ? skb_clone+0x20c/0x390 [ 198.464636][T14239] should_failslab+0xac/0x100 [ 198.469324][T14239] ? skb_clone+0x20c/0x390 [ 198.473737][T14239] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 198.479113][T14239] skb_clone+0x20c/0x390 [ 198.483356][T14239] __netlink_deliver_tap+0x3cc/0x7c0 [ 198.488648][T14239] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.493846][T14239] netlink_deliver_tap+0x19d/0x1b0 [ 198.498962][T14239] netlink_unicast+0x7c4/0x990 [ 198.503741][T14239] ? __pfx_netlink_unicast+0x10/0x10 [ 198.509023][T14239] ? __virt_addr_valid+0x183/0x530 [ 198.514137][T14239] ? __check_object_size+0x48e/0x900 [ 198.519426][T14239] netlink_sendmsg+0x8e4/0xcb0 [ 198.524202][T14239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.529488][T14239] ? aa_sock_msg_perm+0x91/0x160 [ 198.534427][T14239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.539705][T14239] __sock_sendmsg+0x221/0x270 [ 198.544385][T14239] ____sys_sendmsg+0x52a/0x7e0 [ 198.549150][T14239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.554440][T14239] __sys_sendmsg+0x292/0x380 [ 198.559051][T14239] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.564176][T14239] ? __pfx_vfs_write+0x10/0x10 [ 198.568961][T14239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.575291][T14239] ? do_syscall_64+0x100/0x230 [ 198.580051][T14239] ? do_syscall_64+0xb6/0x230 [ 198.584726][T14239] do_syscall_64+0xf3/0x230 [ 198.589223][T14239] ? clear_bhb_loop+0x35/0x90 [ 198.593896][T14239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.599810][T14239] RIP: 0033:0x7f4736d7e719 [ 198.604232][T14239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.623843][T14239] RSP: 002b:00007f4737afd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.632256][T14239] RAX: ffffffffffffffda RBX: 00007f4736f35f80 RCX: 00007f4736d7e719 [ 198.640230][T14239] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 198.648198][T14239] RBP: 00007f4737afd090 R08: 0000000000000000 R09: 0000000000000000 [ 198.656175][T14239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.664148][T14239] R13: 0000000000000000 R14: 00007f4736f35f80 R15: 00007ffc1a3c8638 [ 198.672151][T14239] [ 198.677506][ T54] Bluetooth: hci4: command tx timeout [ 198.725684][T14173] ================================================================== [ 198.733799][T14173] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6c0/0xd70 [ 198.741295][T14173] Read of size 8 at addr ffff88803399c060 by task khidpd_0c45fff9/14173 [ 198.749637][T14173] [ 198.751971][T14173] CPU: 1 UID: 0 PID: 14173 Comm: khidpd_0c45fff9 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 198.763177][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 198.773245][T14173] Call Trace: [ 198.776527][T14173] [ 198.779462][T14173] dump_stack_lvl+0x241/0x360 [ 198.784239][T14173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.789430][T14173] ? __pfx__printk+0x10/0x10 [ 198.794036][T14173] ? _printk+0xd5/0x120 [ 198.798189][T14173] ? __virt_addr_valid+0x183/0x530 [ 198.803292][T14173] ? __virt_addr_valid+0x183/0x530 [ 198.808397][T14173] print_report+0x169/0x550 [ 198.812900][T14173] ? __virt_addr_valid+0x183/0x530 [ 198.818004][T14173] ? __virt_addr_valid+0x183/0x530 [ 198.823103][T14173] ? __virt_addr_valid+0x45f/0x530 [ 198.828206][T14173] ? __phys_addr+0xba/0x170 [ 198.832697][T14173] ? __mutex_lock+0x6c0/0xd70 [ 198.837365][T14173] kasan_report+0x143/0x180 [ 198.841860][T14173] ? __mutex_lock+0x6c0/0xd70 [ 198.846530][T14173] __mutex_lock+0x6c0/0xd70 [ 198.851022][T14173] ? __mutex_lock+0x52a/0xd70 [ 198.855687][T14173] ? l2cap_unregister_user+0x6a/0x1c0 [ 198.861052][T14173] ? __pfx___mutex_lock+0x10/0x10 [ 198.866096][T14173] ? __pfx___timer_delete_sync+0x10/0x10 [ 198.871725][T14173] l2cap_unregister_user+0x6a/0x1c0 [ 198.876916][T14173] hidp_session_thread+0x450/0x490 [ 198.882015][T14173] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 198.887899][T14173] ? __pfx_hidp_session_thread+0x10/0x10 [ 198.893518][T14173] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 198.899400][T14173] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 198.905634][T14173] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 198.911871][T14173] ? __kthread_parkme+0x169/0x1d0 [ 198.916893][T14173] ? __pfx_hidp_session_thread+0x10/0x10 [ 198.922511][T14173] kthread+0x2f0/0x390 [ 198.926571][T14173] ? __pfx_hidp_session_thread+0x10/0x10 [ 198.932192][T14173] ? __pfx_kthread+0x10/0x10 [ 198.936799][T14173] ret_from_fork+0x4b/0x80 [ 198.941211][T14173] ? __pfx_kthread+0x10/0x10 [ 198.945795][T14173] ret_from_fork_asm+0x1a/0x30 [ 198.950560][T14173] [ 198.953565][T14173] [ 198.955874][T14173] Allocated by task 13902: [ 198.960269][T14173] kasan_save_track+0x3f/0x80 [ 198.964931][T14173] __kasan_kmalloc+0x98/0xb0 [ 198.969509][T14173] __kmalloc_noprof+0x1fc/0x400 [ 198.974345][T14173] hci_alloc_dev_priv+0x27/0x2030 [ 198.979360][T14173] vhci_create_device+0x116/0x6a0 [ 198.984384][T14173] vhci_write+0x3cf/0x490 [ 198.988705][T14173] vfs_write+0xaeb/0xd30 [ 198.992937][T14173] ksys_write+0x183/0x2b0 [ 198.997254][T14173] do_syscall_64+0xf3/0x230 [ 199.001763][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.007653][T14173] [ 199.009967][T14173] Freed by task 13902: [ 199.014016][T14173] kasan_save_track+0x3f/0x80 [ 199.018701][T14173] kasan_save_free_info+0x40/0x50 [ 199.023715][T14173] __kasan_slab_free+0x59/0x70 [ 199.028468][T14173] kfree+0x1a0/0x440 [ 199.032354][T14173] hci_release_dev+0x1525/0x16b0 [ 199.037284][T14173] bt_host_release+0x83/0x90 [ 199.041875][T14173] device_release+0x99/0x1c0 [ 199.046465][T14173] kobject_put+0x22f/0x480 [ 199.050902][T14173] vhci_release+0x88/0xd0 [ 199.055227][T14173] __fput+0x23f/0x880 [ 199.059201][T14173] task_work_run+0x24f/0x310 [ 199.063786][T14173] do_exit+0xa2f/0x28e0 [ 199.067934][T14173] do_group_exit+0x207/0x2c0 [ 199.072511][T14173] __x64_sys_exit_group+0x3f/0x40 [ 199.077522][T14173] x64_sys_call+0x2634/0x2640 [ 199.082192][T14173] do_syscall_64+0xf3/0x230 [ 199.086688][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.092569][T14173] [ 199.094880][T14173] Last potentially related work creation: [ 199.100577][T14173] kasan_save_stack+0x3f/0x60 [ 199.105243][T14173] __kasan_record_aux_stack+0xac/0xc0 [ 199.110643][T14173] insert_work+0x3e/0x330 [ 199.114971][T14173] __queue_work+0xc8b/0xf50 [ 199.119475][T14173] call_timer_fn+0x18e/0x650 [ 199.124060][T14173] __run_timer_base+0x695/0x8e0 [ 199.128904][T14173] run_timer_softirq+0xb7/0x170 [ 199.133747][T14173] handle_softirqs+0x2c5/0x980 [ 199.138508][T14173] __irq_exit_rcu+0xf4/0x1c0 [ 199.143089][T14173] irq_exit_rcu+0x9/0x30 [ 199.147320][T14173] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 199.152942][T14173] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 199.158910][T14173] [ 199.161223][T14173] Second to last potentially related work creation: [ 199.167791][T14173] kasan_save_stack+0x3f/0x60 [ 199.172469][T14173] __kasan_record_aux_stack+0xac/0xc0 [ 199.178268][T14173] insert_work+0x3e/0x330 [ 199.182933][T14173] __queue_work+0xb66/0xf50 [ 199.187431][T14173] queue_work_on+0x1c2/0x380 [ 199.192017][T14173] process_scheduled_works+0xa63/0x1850 [ 199.197560][T14173] worker_thread+0x870/0xd30 [ 199.202143][T14173] kthread+0x2f0/0x390 [ 199.206212][T14173] ret_from_fork+0x4b/0x80 [ 199.210626][T14173] ret_from_fork_asm+0x1a/0x30 [ 199.214704][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.215376][T14173] [ 199.215383][T14173] The buggy address belongs to the object at ffff88803399c000 [ 199.215383][T14173] which belongs to the cache kmalloc-8k of size 8192 [ 199.238704][T14173] The buggy address is located 96 bytes inside of [ 199.238704][T14173] freed 8192-byte region [ffff88803399c000, ffff88803399e000) [ 199.252491][T14173] [ 199.254807][T14173] The buggy address belongs to the physical page: [ 199.261211][T14173] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33998 [ 199.269960][T14173] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 199.278445][T14173] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 199.286415][T14173] page_type: f5(slab) [ 199.290383][T14173] raw: 00fff00000000040 ffff88801ac42280 0000000000000000 dead000000000001 [ 199.298953][T14173] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 199.307523][T14173] head: 00fff00000000040 ffff88801ac42280 0000000000000000 dead000000000001 [ 199.316182][T14173] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 199.324839][T14173] head: 00fff00000000003 ffffea0000ce6601 ffffffffffffffff 0000000000000000 [ 199.333494][T14173] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 199.342145][T14173] page dumped because: kasan: bad access detected [ 199.348558][T14173] page_owner tracks the page as allocated [ 199.354257][T14173] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7690, tgid 7687 (syz.2.518), ts 92533813802, free_ts 92523346125 [ 199.375342][T14173] post_alloc_hook+0x1f3/0x230 [ 199.380102][T14173] get_page_from_freelist+0x303f/0x3190 [ 199.385632][T14173] __alloc_pages_noprof+0x292/0x710 [ 199.390831][T14173] alloc_pages_mpol_noprof+0x3e8/0x680 [ 199.396276][T14173] alloc_slab_page+0x6a/0x120 [ 199.400941][T14173] allocate_slab+0x5a/0x2f0 [ 199.405429][T14173] ___slab_alloc+0xcd1/0x14b0 [ 199.410096][T14173] __slab_alloc+0x58/0xa0 [ 199.414415][T14173] __kmalloc_noprof+0x25a/0x400 [ 199.419258][T14173] gtp_newlink+0x221/0xf60 [ 199.423672][T14173] rtnl_newlink+0x1591/0x20a0 [ 199.428335][T14173] rtnetlink_rcv_msg+0x73f/0xcf0 [ 199.433263][T14173] netlink_rcv_skb+0x1e3/0x430 [ 199.438013][T14173] netlink_unicast+0x7f6/0x990 [ 199.442769][T14173] netlink_sendmsg+0x8e4/0xcb0 [ 199.447532][T14173] __sock_sendmsg+0x221/0x270 [ 199.452220][T14173] page last free pid 7686 tgid 7686 stack trace: [ 199.458546][T14173] free_unref_page+0xcfb/0xf20 [ 199.463310][T14173] __put_partials+0xeb/0x130 [ 199.467897][T14173] put_cpu_partial+0x17c/0x250 [ 199.472654][T14173] __slab_free+0x2ea/0x3d0 [ 199.477064][T14173] qlist_free_all+0x9a/0x140 [ 199.481640][T14173] kasan_quarantine_reduce+0x14f/0x170 [ 199.487098][T14173] __kasan_slab_alloc+0x23/0x80 [ 199.491941][T14173] __kmalloc_noprof+0x1a6/0x400 [ 199.496785][T14173] tomoyo_encode+0x26f/0x540 [ 199.501366][T14173] tomoyo_path_perm+0x3ca/0x740 [ 199.506204][T14173] tomoyo_path_symlink+0xde/0x120 [ 199.511237][T14173] security_path_symlink+0x16f/0x370 [ 199.516544][T14173] do_symlinkat+0x136/0x3a0 [ 199.521046][T14173] __x64_sys_symlinkat+0x95/0xb0 [ 199.525982][T14173] do_syscall_64+0xf3/0x230 [ 199.530477][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.536365][T14173] [ 199.538701][T14173] Memory state around the buggy address: [ 199.544316][T14173] ffff88803399bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 199.552367][T14173] ffff88803399bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 199.560418][T14173] >ffff88803399c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.568551][T14173] ^ [ 199.575730][T14173] ffff88803399c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.583778][T14173] ffff88803399c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.591831][T14173] ================================================================== [ 199.601207][T14173] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 199.608426][T14173] CPU: 1 UID: 0 PID: 14173 Comm: khidpd_0c45fff9 Not tainted 6.12.0-rc5-syzkaller-00209-g26a2bebd2c0c #0 [ 199.619631][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.629705][T14173] Call Trace: [ 199.632991][T14173] [ 199.635923][T14173] dump_stack_lvl+0x241/0x360 [ 199.640598][T14173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.645795][T14173] ? __pfx__printk+0x10/0x10 [ 199.650374][T14173] ? vscnprintf+0x5d/0x90 [ 199.654700][T14173] panic+0x349/0x880 [ 199.658586][T14173] ? check_panic_on_warn+0x21/0xb0 [ 199.663685][T14173] ? __pfx_panic+0x10/0x10 [ 199.668090][T14173] ? mark_lock+0x9a/0x360 [ 199.672407][T14173] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 199.678290][T14173] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 199.684173][T14173] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.690488][T14173] ? print_report+0x502/0x550 [ 199.695164][T14173] check_panic_on_warn+0x86/0xb0 [ 199.700094][T14173] ? __mutex_lock+0x6c0/0xd70 [ 199.704761][T14173] end_report+0x77/0x160 [ 199.708996][T14173] kasan_report+0x154/0x180 [ 199.713489][T14173] ? __mutex_lock+0x6c0/0xd70 [ 199.718159][T14173] __mutex_lock+0x6c0/0xd70 [ 199.722656][T14173] ? __mutex_lock+0x52a/0xd70 [ 199.727329][T14173] ? l2cap_unregister_user+0x6a/0x1c0 [ 199.732717][T14173] ? __pfx___mutex_lock+0x10/0x10 [ 199.737735][T14173] ? __pfx___timer_delete_sync+0x10/0x10 [ 199.743362][T14173] l2cap_unregister_user+0x6a/0x1c0 [ 199.748562][T14173] hidp_session_thread+0x450/0x490 [ 199.753690][T14173] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 199.759574][T14173] ? __pfx_hidp_session_thread+0x10/0x10 [ 199.765196][T14173] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 199.771078][T14173] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 199.777323][T14173] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 199.783568][T14173] ? __kthread_parkme+0x169/0x1d0 [ 199.788606][T14173] ? __pfx_hidp_session_thread+0x10/0x10 [ 199.794243][T14173] kthread+0x2f0/0x390 [ 199.798308][T14173] ? __pfx_hidp_session_thread+0x10/0x10 [ 199.803940][T14173] ? __pfx_kthread+0x10/0x10 [ 199.808526][T14173] ret_from_fork+0x4b/0x80 [ 199.812950][T14173] ? __pfx_kthread+0x10/0x10 [ 199.817529][T14173] ret_from_fork_asm+0x1a/0x30 [ 199.822293][T14173] [ 199.825626][T14173] Kernel Offset: disabled [ 199.829937][T14173] Rebooting in 86400 seconds..