last executing test programs: 2.794134981s ago: executing program 0 (id=877): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x4, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x3c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="021800000a000000000000000008000700080000000a00000000fc000001000000000a00000000000000be8000000000400000000000000000bb000000000000000000000000000000000000004b031ed183e23901cebe2062575889fd28f0590e5d9731e8175ee7867250a6ce65e593dc9eb110d86ab02491f8bb91a04844b00f6ba039624ecce798c39bde8714982ebe1be3145b56fa00e5c799349b6a8312b19b5703f5de853549bafce31bd73bf98a1f2e17862e856e8af1463e0d"], 0x50}}, 0x0) bind$inet6(r12, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0xd, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "54f120d98f739b49a6fc9e844a709d4516eeb3d385cb27f76a5e93ee4b55a738d2ad3d895cdebdc21c9c4329e6a758b35a8a24943c64de64e1c6b640eb2efd94f847cc0171b4cc56dd3718b416205244"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0x2, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "c51c890b4b0639236379ca8e20cad851569a39b70816979654127f3d5cdd22aa0d7f28378d98092fead3ee097d0295b0c3ad6cc064180ab099c8831980f247927a224036888a99aef70ef6ad0a0515da"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000000c0)={r15, 0x3, 0x6, @dev}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.577894437s ago: executing program 0 (id=880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x1, 0x3f}, @eth={@dev, @broadcast, @val, {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0x0, "8e", "f8adff"}}}}}}}, 0x28) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="8557fba58fc0e2252453d84f8230cc96659d0e4458e818b02b45ec882ed49305fd6a8bbf97ee86aba2872b72a7d93e714516be85372a95879bde9ab3b114cca01d5595df98c7ee87ad4addf15645ba13c7ba07fff86217b25afaea809398a3bca505b5920766e3aad747a6726c6b383d080300331a00588f1c4128e371acb756d9c7627ecd8059d5def7692c79ea1d947b", 0x91}, {&(0x7f0000000140)="383f64d83a04ee94219d9e4b8a44c8e7a53731d262650dafe882ea140e87", 0x1e}, {&(0x7f0000000d40)="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", 0x362}], 0x3}}], 0x1, 0x40440c1) sendto$inet(r2, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) listen(r1, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r3, 0x10d, 0xed, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) (async) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x1, 0x3f}, @eth={@dev, @broadcast, @val, {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0x0, "8e", "f8adff"}}}}}}}, 0x28) (async) socket$inet6(0xa, 0x6, 0x0) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="8557fba58fc0e2252453d84f8230cc96659d0e4458e818b02b45ec882ed49305fd6a8bbf97ee86aba2872b72a7d93e714516be85372a95879bde9ab3b114cca01d5595df98c7ee87ad4addf15645ba13c7ba07fff86217b25afaea809398a3bca505b5920766e3aad747a6726c6b383d080300331a00588f1c4128e371acb756d9c7627ecd8059d5def7692c79ea1d947b", 0x91}, {&(0x7f0000000140)="383f64d83a04ee94219d9e4b8a44c8e7a53731d262650dafe882ea140e87", 0x1e}, {&(0x7f0000000d40)="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", 0x362}], 0x3}}], 0x1, 0x40440c1) (async) sendto$inet(r2, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) (async) listen(r1, 0x80080400) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) (async) getsockopt$inet_int(r3, 0x10d, 0xed, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) (async) 2.107878567s ago: executing program 2 (id=885): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000507000000000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x435}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x3}, {0x0, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc2d2}}]}]}}]}, 0x5c}}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) 2.107725453s ago: executing program 1 (id=886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x500, &(0x7f0000000640)={&(0x7f0000000040)=@gettaction={0x34, 0x32, 0x203, 0x0, 0xffffa888, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x34}}, 0x0) 2.107471572s ago: executing program 0 (id=887): socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002540)=ANY=[@ANYBLOB="2002000012001307"], 0x220}}, 0x0) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/97, 0x61}, {&(0x7f0000001a00)=""/154, 0x9a}, {&(0x7f0000001ac0)=""/172, 0xac}, {&(0x7f0000001b80)=""/238, 0xee}, {&(0x7f0000002c80)=""/115, 0x73}, {&(0x7f0000002d00)=""/98, 0x62}], 0x8}, 0x4}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x101}, {{&(0x7f0000006640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x10000, &(0x7f0000007000)) 1.962575727s ago: executing program 0 (id=888): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/20, 0x14, 0x1, &(0x7f0000000040)}, &(0x7f00000000c0)=0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pK \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f00000001c0)="0cb3fc0c9a17d2b259244e658d59d1ee5e2bc27e5349c7f0547cb0465004162e17809c6a7a7914"}, 0x20) (async) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x40040) r4 = socket$igmp(0x2, 0x3, 0x2) readv(r4, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000500)=""/183, 0xb7}], 0x3) (async, rerun: 64) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000940)={&(0x7f0000000600)="423475c35767c0d7e49c85a3ef865ff4d1c9fdf6c7122188b1b7dfd1c5b9032f0328791a73987c5d37288f83e3fc445386022349ff4a6e254469f22054183bbd5d0e34", &(0x7f0000000680)=""/139, &(0x7f0000000740)="c1c6e422575c0de75f0486e5a077bee53acba5656af095e32956998c916e7d9da0340bc5a0538ef35bf8f2b4160f2f63be36378b4542f37aabb49c3fd6a36e6b192b45658209aac787ad4002a44266d5201cb285cb5547ae34991e923bb48f131125d5be7a10f7c30204bee2b7ff79ed47107aada3d14d5119a6437492808a0b85293aa750fbe89e1b7a55f7f6aad08b0a5a9804f028bfd33c491a5c3b211f2007b285777106c7402be3461503debe19401344f1491cfd6222e4ff73268fd947be0440095a7e234d0a21dbf993b1885478fafca20432c3ae6322bc17e333db", &(0x7f0000000840)="cf4e9eeebcc1a688bf543e9d8ba3d56ec9b7a21d23fb0f11929d8b013c3d7a52463c017f5350c47b53e347a64c438cc24950ab59b5d434fcb222f989ae20a388ded30136da1b6ca6fd44e259b508feb46613998a2b4777eb14ec6556e3f78a6ec4ddbf5e123a12771ab0c95e119968f290c9ab671c1ac812e60ae7bbfea8f349eef947f262fbaa41333564ed0eb36276b22e8f696e2386805807aaa754f59d8d617ec3d2e8ceee8421bc880fc699153684327e191f7447c371fe11fa3fefcc6c1e0940d6f92c2fe6a2bdb7ceaea7d2659a5f75", 0x6, r1}, 0x38) (async, rerun: 64) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000009c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x88, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000980)='pimreg0\x00', 0xf, 0x8000000000000000, 0xe6}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, r7, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x24000010) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x40000) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=@ipv4_newrule={0x48, 0x20, 0x100, 0x70bd2c, 0x25dfdbfc, {0x2, 0x14, 0x20, 0x4b, 0x9, 0x0, 0x0, 0x0, 0x12}, [@FRA_FLOW={0x8, 0xb, 0x8001}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x1}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x48}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001100)={'ip_vti0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x1ff, 0x84, {{0xa, 0x4, 0x1, 0x1, 0x28, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @generic={0x83, 0xd, "f915674d1a2d55ff660cc8"}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000001140)={@mcast2, 0x3d, r11}) (async) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x11, 0x1, &(0x7f0000001180)=@raw=[@ldst={0x2, 0x2, 0x4, 0x4, 0xa, 0xfffffffffffffff4}], &(0x7f00000011c0)='syzkaller\x00', 0x7209, 0xd7, &(0x7f0000001200)=""/215, 0x41000, 0x40, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001340)={0x1, 0x9, 0x8001, 0xffffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001380)=[r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f00000013c0)=[{0x8000, 0x5, 0xb, 0xc}, {0x2, 0x5, 0x7, 0xb}, {0x4, 0x3, 0x10, 0x8}], 0x10, 0x7}, 0x90) write$binfmt_script(r4, &(0x7f00000014c0)={'#! ', './file0', [{0x20, '\\:\xd6:%,%0@['}, {0x20, '{]{\"\x90'}, {0x20, '/)L@'}, {0x20, '{\'.'}, {0x20, '\''}, {0x20, 'l2tp\x00'}, {0x20, '**\\'}, {0x20, 'NLBL_UNLBL\x00'}, {}, {}], 0xa, "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"}, 0x103f) (async) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000002540)={@multicast1, @local, 0x0}, &(0x7f0000002580)=0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f00000026c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002680)={&(0x7f00000025c0)={0xa4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) (async) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0xa4234ca5aea0d6f7}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x7d}}}}, ["", "", "", "", ""]}, 0x28}}, 0x1) 1.892200944s ago: executing program 2 (id=889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @private0, 0xb}, 0x1c) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xac2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x17, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xca}, @tail_call, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x49}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x39c33f082c641d23}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f5002c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00a24e22d8b5e363e2cd564a46a739e2b978abc51e73182465a21d2fa90a8a29a91eb885cd123a3e733c680fdf52d055a784a09512b926338b9177301dcb346d684bab42979b98b0c3a72998cdaa6ba2de5dad91a98ba97c9c6549ce1b5b6fe5df6a6636252b6bafe9c1388c44913d5934668ea9a96861bdcea08da128faa6aebf4b324632e0cc10b05329bb9ef2205ff94a14b8f8d6", @ANYRES64=r0, @ANYBLOB="b0c20000907800001e0c6000000000eb00000000080a0000000000000000", @ANYRES16], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000013c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) 1.807859896s ago: executing program 1 (id=892): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async, rerun: 32) r0 = socket(0x1d, 0x2, 0x2) (rerun: 32) getsockopt$bt_BT_SECURITY(r0, 0x29, 0x12, 0x0, 0x0) 1.656587399s ago: executing program 0 (id=893): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006"], 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}, 0x1, 0x16000000}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) 1.627402919s ago: executing program 4 (id=894): socket(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) getsockname$qrtr(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="1400000010000100000000000000c0000000000a20000000000a01010000000000000000052c00000900010073797a300000000078000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a320000000008000a40000000032800048008000240000000000800014000000000140003"], 0xc0}}, 0x0) 1.527915862s ago: executing program 1 (id=895): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB, @ANYRES32], 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, 0x0, 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x0, 0x40012040, &(0x7f0000000200)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYBLOB="01000000000007000000000000003c0000000080"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4884) 1.126977605s ago: executing program 1 (id=897): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000890c00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="0000004001"], 0x80}}, 0x0) listen(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0179e03}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) 951.865122ms ago: executing program 3 (id=898): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0xfffffffffffffffe) 951.612323ms ago: executing program 4 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) listen(r1, 0x0) listen(r2, 0x0) shutdown(r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x1, 0x2, 0x0, 0x1}, 0x48) syz_emit_ethernet(0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="8e969c57af6cb9aaaaaaaa8bfb012fa5125e8000b4798c5e5e5a"], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = socket$can_bcm(0x1d, 0x2, 0x2) close(r5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b3586fb121c6"}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000003c0)={r9, 0x0, 0x7, 0x3}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000100)=0xe, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000b0603000000000000070000000000000900020073797a30000000000500010007000000100007800c000180", @ANYBLOB="91872f44b54d25da12dfba7866334db8ee75edaeeb095b4adb4c6308fb966c943884a5ba1a86864a4031efcc9326047d04a5e20b93787cf5a7dbe23da345f8c0f662c8407b03cb5e465f3c05a6a4b2a6419e6a76bb12915ce6c6d55b51ec6a416a1bc7fe0f30bdb087d90e79299defaaf1f5136023ef06b03f587d84ce033c686e6a0d1362cf121c8a29ce7ee354aab4f58e58c254041c6ce87302139d8e3dcfce5d60339a2416a1dda7fa35e9a5f909298c6b9e2cd2bfa89dc6fe7a4dc73edf29a3cf00430715b343daa866ca8c880a69d8f41e32113fd2987b", @ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 936.19061ms ago: executing program 0 (id=900): syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000080)=ANY=[], 0x44) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x120a0, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000), 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0xe}}, 0x0, 0x3f, {0x0, 0x6, @default_ibss_ssid}, @val, @void, [{0xdd, 0x6, "62160a9990ee"}, {0xdd, 0x6, "e23956979c93"}]}, 0x36) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x4, "1c4542", 0x7, 0x3f}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x1, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x2c) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000ffffffffffff08020100000000000000000000640000000301ae160200007206030303030303"], 0x33) 871.004569ms ago: executing program 2 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="b93a59cc5aa9"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x40}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r4}, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x350, 0x350, 0x350, 0x0, 0x350, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000008000300110000", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELRULE={0x160, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xffffffc1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x80}]}}}]}, @NFTA_RULE_USERDATA={0x90, 0x7, 0x1, 0x0, "dd979fdf33d14c3a2dcb4fca55b0c4361529141a04b04e6992df30e7134684715009401342e36af8916389cfe6e4196ac4bb56bc5566eb66ded68645c125b5dcce294184d8f22fc3e16cada50bffa4de4f803687db235a13fad2f09a9a3c9e03c142cb28ad6570c9f7729392b2d9c980e487254ffa5f7a00a895494fc1c45e5193d5508e85782aef3f1cea9d"}]}], {0x14}}, 0x188}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004840) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x6000000, [{0x2}, {}]}]}}, &(0x7f0000000f40)=""/4096, 0x36, 0x1000, 0x1}, 0x20) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000001f40)={0x277c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x3c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x0, 0x9, 0x1, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x4, 0x9, 0x200]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x9e, 0xfffd, 0x401, 0x0, 0x7ff, 0x9, 0x6, 0xffff, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}]}, @NL80211_ATTR_CSA_IES={0xd3c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xe, 0x7f, [@sec_chan_ofs={0x3e, 0x1}, @supported_rates, @tim={0x5, 0x3, {0x7f}}]}, @NL80211_ATTR_PROBE_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@random_vendor={0xdd, 0x6, "613602bc5bd4"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x4c, 0x80, [@mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0x8}}, @peer_mgmt={0x75, 0x14, {0x1, 0x5, @void, @void, @val="3ceae96fdad082fd8573672a7eee8386"}}, @chsw_timing={0x68, 0x4, {0x20, 0x5}}, @supported_rates, @challenge={0x10, 0x1, 0xfa}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xad}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x493, 0x91, "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"}, @NL80211_ATTR_IE={0x6e, 0x2a, [@random={0x57, 0x68, "bb11c9a8d03e2471845bbb9f36fb6b024d1245c4ced5527a7d78039d8e628f5e2214032de1fd0d6eea55415bb5db0ed401ec59fd74041a1b70341e3cb415106ab3dcfd960299d1a144af9f319e71b3f9e415015a3dbe0c393eba35577d4f14576849a6eb5285937c"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x0, 0x0, 0x8, 0x0, 0x1000]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x73f, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x3c, 0x80, [@cf={0x4, 0x6, {0x6, 0x0, 0xff, 0x5}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x2, @broadcast, 0x6, @value=@broadcast, 0xfff, 0x1, @device_b, 0x9}}, @chsw_timing={0x68, 0x4, {0x7ff, 0x6}}, @erp={0x2a, 0x1}]}], @beacon_params, @beacon_params=[@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x20, 0x7f, [@random={0x0, 0x1a, "78520054389cc79604379d6e2b8a16740720005fec892ce2c736"}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x19ec, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0xe4, 0x5, 0x9, 0x9, 0x4ae, 0x395, 0xa, 0x1, 0x1ff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x2, 0x4, 0x7f, 0x3, 0x6, 0x101]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x5b22, 0x5, 0x9, 0x7, 0x8, 0x6, 0x3, 0x1]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x1cd, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @challenge={0x10, 0x1, 0x94}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x9, 0x6, @device_b, 0x80, 0x80000000, 0xd7f}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @perr={0x84, 0x102, {0x54, 0x10, [{{}, @device_b, 0x6, @void, 0x4}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0xb}, {{}, @device_b, 0x6, @void, 0x8}, {{0x0, 0x1}, @device_b, 0x7f, @value=@device_b, 0x1d}, {{}, @device_a, 0xe8, @void, 0x34}, {{0x0, 0x1}, @device_b, 0x800, @value=@device_b, 0x6}, {{}, @broadcast, 0x3, @void, 0x42}, {{0x0, 0x1}, @device_b, 0x680, @value, 0x22}, {{}, @device_b, 0xdf93, @void, 0x1f}, {{}, @broadcast, 0x401, @void, 0x26}, {{}, @device_a, 0x7, @void, 0x29}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x35}, {{}, @broadcast, 0xd, @void, 0x24}, {{0x0, 0x1}, @device_b, 0xf, @value=@device_b, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x9}]}}, @measure_req={0x26, 0x9b, {0xc, 0xee, 0x9, "521297df73f6b4f105a36c3e8f7214ce3a68bf528c6e2d1d3b6da49b771f2cb6e43019cb115322f17560c3d361a8ac1d69a9bef3052639445b82ecd66d5092fd5d1e47f12b97398719410483cbd1a465aa56e98a3cfa9d7c96c65c82c7db000d128c4002ec81dd395fcc25f9dacdf99af4aa42a298db2fe0ea3b1d3ddc46e16b20b59630cf87e349ef1732006ad63565eb991dd8e42485fb"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE={0x131, 0x2a, [@mic={0x8c, 0x18, {0x867, "9e9de2c6faf2", @long="593451bb2faa2c2e8042d08dd8260dcc"}}, @fast_bss_trans={0x37, 0x111, {0xe0, 0x9, "1fe11aa6076739b929388ec400b57a94", "5fc93f9138243471def57d70a2e1a44f205dcd00d54cad3c34f4cb7309d92d8a", "2321ee10890dece71a097d86d4a82f0f01b16f0a925ba5df8cfb4e5d6557c6ed", [{0x4, 0x8, "3ea0bc36a467baf5"}, {0x2, 0x26, "b8923979f98e0199b7343c8b8c83b03689e55cfd47e519fefde30753aa7f444c4366546b8b3f"}, {0x2, 0x10, "b9d3bb750b5d3d4f972389f3a20683f8"}, {0x3, 0x11, "2174af48822cd132d9e849be17e970b1ed"}, {0x2, 0x11, "ce723d499ef0c36fca349a0c7e9e4a1a58"}, {0x1, 0x10, "a50a8a4be2a60ddd982e52bbfed5d99b"}, {0x4, 0x26, "c87dc1add4ed6c9742c4257581280fa5762167f61ae8d3cfb88def7024cc26e1ded81f025e41"}, {0x1, 0xa, "ba5a49e085ee687e5d78"}, {0x4, 0xd, "3b9038f6a0884bb57c9330bd50"}]}}]}, @NL80211_ATTR_IE={0xc7, 0x2a, [@challenge={0x10, 0x1, 0x67}, @random_vendor={0xdd, 0xb6, "396790914108f7d00f93a97ba7063cd17d1bf4dd942d6e21c91610a2320947d46bff7964278f88c93cd6572dcc384cc6a637ed716a7fd4f807025e7e950827a3c3395384f8fc19978fd7b4095bb940e27cf8c840c754a69af7bbc961faf828abae4d0be9cf9b6ed5b5a4baee24c23f5a3b29a3e315ab580143ec85ce8050d5dff3b0f1a76df9d9a49724e7515e4dee0279d6c2e2308f45a889beecef48b9e4e8ebcd5dbde4290e4dfeeeddfccb2bc993a161e532d0a3"}, @ssid={0x0, 0x6, @default_ibss_ssid}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x200, 0xff, 0xffff]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0xc1, 0xf, [@random_vendor={0xdd, 0xa4, "c5ede037386764c9c6bba13dc549c5772e1d1ab51e61d94fdfa0cc2bce444277f6fb18066766deee452cc4db06b255d4917646683e15cca5b67b0eb1301a20b8deef047b012bd43222e46e1b63527c2a9ea48d93ea91ccb6a7e0710f296fc9c74066438070f8ecb2f18e1b05c59e325d5386cc280381d200cea029f95580963784b42e5e8395ce2c99b5bacfa3b8d22b16ead98076e74a6916e34096cbaac60948fedf56"}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ibss={0x6, 0x2, 0xdb}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x81, 0x9, 0x26, 0xd}}]}, @NL80211_ATTR_BEACON_TAIL={0x9, 0xf, [@channel_switch={0x25, 0x3, {0x1, 0xd3, 0x2}}]}, @NL80211_ATTR_BEACON_TAIL={0x17b, 0xf, [@random_vendor={0xdd, 0xb3, "d13787030fbda204d15cd8638830a2777c614d7746c4004c43af8d0b26d4fc0b8be017bfee586bee508411d00735a9086d8f3c509a6b2455ce1a1b65a82841e729d2c5522978102fda57cb57a794291e11e6151cd3c56890aeeeb2b79264cad3aa2f2498f6833a7b1531b64905ff8e8d553e1370fc16a4827acdd312b100e4830121c5816ca56f2fd1a1c10598ae402297b6399c878add0cefb4a7c3ab2456f6d58b12fc70f01ef2bc21c7f2e0661e621de69f"}, @ibss={0x6, 0x2, 0xd79}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @fast_bss_trans={0x37, 0x79, {0x3, 0x1, "80215724536883e57b578b118cf037d2", "18e0dfcb0fa51d77a81904fb06e80d67ef2a2a1e3c56f209f5e16e44779094bd", "cd8ca50ec1c08f24764cc9a18bef9fba9548b23ff0766b3e4942718d93eea594", [{0x1, 0x25, "349aea471db6c6a716a3c1799e4a6ddf7a8ddb8bdaf49417d260504954a2734c972da2a506"}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x81, @broadcast, 0x4, @value=@broadcast, 0x9, 0x3, @device_a, 0x6}}, @supported_rates={0x1, 0x3, [{0x30}, {0x6c, 0x1}, {0x5, 0x1}]}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd, 0x40}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x149, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @from_mac, {0x3, 0xf4}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x8001, @random=0xdef, 0x2a02, @void, @val={0x1, 0x7, [{0x1}, {0xb}, {0x30, 0x1}, {0x1, 0x1}, {0x16}, {0x19, 0x1}, {0x60}]}, @val={0x3, 0x1, 0x4}, @void, @val={0x6, 0x2}, @val={0x5, 0xc, {0x7, 0xcc, 0x8d, "6231866fe30d2f52f0"}}, @val={0x25, 0x3, {0x0, 0x1, 0x5}}, @void, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x0, 0x0, {0x7, 0x10, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x80000001, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0xe0}}, @void, [{0xdd, 0x4c, "25aea1af34a2c9d52355912abc4a9ae5b4982ff5fb29251a450cdc514dd9c23b1ab544c446b0ce8c782f5da122b4d067bdae9b4de076710d73243ddca5fc3a927499becd16cbead054a19251"}, {0xdd, 0x52, "f7ed24c4511ef4e3020e37341b15a25256b6458fda727a03e7c02d62d2c53c7f9eb3e24771a7f67f019990f00a12a57b42fbe2de3ea362e825da5ff6e7539b0cab6e454dbd67387b7de44a3e5280312244ee"}, {0xdd, 0x29, "82c35fe49bec091f7a3ba25cbe620d388236fd682c835d39bdf8cf460729c866451686eeabc990f122"}]}}, @NL80211_ATTR_BEACON_HEAD={0x4d9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x44}, @device_a, @broadcast, @initial, {0xa, 0x8}}, 0x5, @default, 0x160, @void, @val, @val={0x3, 0x1, 0x38}, @val={0x4, 0x6, {0x8, 0x3, 0x2, 0xfff}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0xc0, {0xfb, 0xcf, 0x7f, "e12b963aae72076adf0489b2094ab55024dffe6f19309c52b0a4c3dcce99625cb8f273481b4cef9c98cb8c576d5af34109681328421f43d43b657975cf83d2606c08a5c9fb6e43588199e8f479202d3409cdefe632e73e620ece158675173d5a74a4b9107ef33efe65f534c45fb1b6748040ed2fcc560a184fb28142bdb1af9de852099c9a8ac5853913b6f1022a490ddcfad53561bf80e2a03b75a5218b0aefc501e2b8334e0f7834bc21a649213e75b7cf82893840105b4df5636ca6"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x66, 0x28}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0xc, 0x40}}, @void, [{0xdd, 0xd6, "fded894961a870a1f44403399c159b447d76c6095fe9c65708000e5df2d50f4faec17841c16e5966b709c35de4e818f891f6a432191db71404389bc425935d9e8d763a4152e2684fbf12b32ce3b5cada3d2cb6a929e8a518224007f1f4654b718932106a5ceb49e81affba469840db6df144d21f94afa68b0d175bbb8e6dc8947147d207a57da0c4228aafa7dbc367a2ce9d476b5e0ba9a3a849535f2ace1112c5ad2cb9ef9d807199adc02d9b283636acec4bbf4217fc3923f330b523116f81bdd4f986bdd85db27d70f43e47520a2b7f350a43a744"}, {0xdd, 0x3c, "490c585d5de2d9c194dc308e4bf68733040cb5dceb22ee04e636be7f10491bd14dd280db20b2d2853e99bcbb06a5f38405351ecfa913f3241d08a424"}, {0xdd, 0x3a, "cfb33c2be16d9d3ddab698b63cc8bfad2a575fbc87d7a510326ec061f925f358e22cc0eb4d88692c009549df1f6fffe2ab3fe60ecc907262273f"}, {0xdd, 0xaa, "a207484d2f2ce4c936656e9e1afa500b86a0978b6b5b53e091fd17fee09f6b5e9ef5b2fc4341d9896d7c40e6661356f2f41caf31d613c9fee6ee627d66c0f234d9876eb308bd97e63dd135b855125fa8b97f4e5db9c8479d28340646890cde6f631ec15ec97a1738b378e8b7efaafc6ee0004e42c08dba7ba84b8237afd624d0cab55787b2d1b3be29f345a02457964e96092624407d5b68d5919ffb68defe6f0402c60abd3d4dc63838"}, {0xdd, 0xe, "8d410e4aefef8f1e386872789248"}, {0xdd, 0x90, "4ed47f2c1759c9d9cbfab6d5175bcfe6c40916bfb861740e0998fd42011d9ee6e8a263bbc2db7fc968719b54ceefb5c6e63b3bbaafe094ceacef171541934efc4cd64a085d2fd3918dd72562704fb188e12d6743fb8d5069c8fa657ae3e564235a39d2dea8989ac94e29efe1acd8762261dab704adbcbfa026c1a2650d378b982c74a90921e7cc9b385d5b857cd8b7a7"}, {0xdd, 0x97, "2847806735a04cb0180f626efe3c474ed1a28e64aabdace99abd3857f469cab94b39c0180f12581321692c8a0f3eac156b0d659e7b1b28433dbdca09b67ba1718fd7e2375aac7726cbc1e3e88fb5a1f73ab27078a0a72979e7564c2721cd9cef759c73cbead875fc6ee5059d2fcf590a8312e2bfd45b7ae2f9501d721288273132a9874e08201e04e1554c66128d082f5848026dcd6c66"}, {0xdd, 0x33, "95face753398ebefc7e834a653948959b5257346f684568bfdb314a9cda2ea9a802c0ab8527c3d8c6264f26137ea19878d5855"}, {0xdd, 0x5f, "1013aeca7c4a3697a2559a7d1b5f22f97f0800f7565125ce00141a99d81c86cd10e6da7dabedaf2bcf66a3816ab89b738cb460ceda67c8d0bdadbc583c9eb5dce67576ad4bfed7b21fb7295cbe0ac2e8e65d0deab78a4ea900989ed8c25207"}]}}, @NL80211_ATTR_PROBE_RESP={0x432, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xa0, 0x80, [@perr={0x84, 0x8e, {0x1, 0x8, [{{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1e}, {{}, @device_b, 0x7, @void, 0x39}, {{0x0, 0x1}, @device_a, 0x7fffffff, @value, 0xc}, {{0x0, 0x1}, @device_a, 0x6194ac62, @value=@broadcast, 0x16}, {{}, @device_a, 0x1c, @void, 0x3f}, {{0x0, 0x1}, @device_a, 0x3ff, @value=@device_b, 0x28}, {{0x0, 0x1}, @device_b, 0x171, @value, 0x24}, {{0x0, 0x1}, @device_a, 0xfffffffb, @value=@device_b, 0x41}]}}, @supported_rates={0x1, 0x1, [{0x1b}]}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0xb, 0x9}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x10d, 0x80, [@mic={0x8c, 0x18, {0xa82, "a10d75fe93e2", @long="69de886eb8ae1176db7e92818a4b375e"}}, @dsss={0x3, 0x1, 0x38}, @measure_req={0x26, 0x14, {0x5, 0x2, 0x80, "6e13b61db4548173095f0b9a4d39653e65"}}, @fast_bss_trans={0x37, 0x7c, {0x81, 0x1, "21d711ef52305364559246ad448003eb", "70f439f9e32e9000c82b67f58d8d3457373153cdaa14bfc5b39bfd85d4744cc0", "572609fed4de33a1384ef73d79f083240134cd0a108669f2e61fe2c32240f927", [{0x3, 0x28, "235bfd804464230aa8e08d16a8009fa7d266efb498c6a082f7cb5342f80fc82e74da36fc6f5eb11a"}]}}, @dsss={0x3, 0x1, 0xad}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ibss_ssid}, @supported_rates={0x1, 0x2, [{0x1b, 0x1}, {0x60}]}, @peer_mgmt={0x75, 0x18, {0x1, 0x4, @val=0x5, @val=0x14, @val="33885e01223332fccac5284060eeda33"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xfd, 0x4, @device_a, 0x33ffa24d, @value, 0x8, 0x7, @device_b}}]}, @NL80211_ATTR_BEACON_HEAD={0x76f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ff8}, @device_a, @device_b, @initial, {0x8, 0x3}}, 0x10, @random=0x5, 0x40, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x84}, @val={0x4, 0x6, {0x6, 0xff, 0x7, 0x8}}, @void, @val={0x5, 0x5e, {0x6, 0x11, 0x8, "af5d59c9517324ab91174b29c8b5426ae260d5b97fc6ab95d7c12cc1591412d68721412f9826c808631156d8a1b3877fcbf3e2a4191bfa96255f454bd430b6c7bceb3de1a947dea8b7f41d5f9bc08214022721cb40eb69286409ba"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x45, 0xb4, 0x12}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x1}}, @void, [{0xdd, 0xad, "d88fe64b27667f22d19328e8a0a6754829360dff926ecdd32292d071b7593b1a13ef1575c4896582fc57f9e8419ec840daa9adfa8ce22999d0fec88c9152be1eabab0c9830a99666865d8b0124cfd4cd89f156270ef2ace32e3d9e33ef2d0b6f7132c78a219d839823b0bd3f9c18fcc2608e642498407a0860115c4908028b4b5786446cfe2010fc3fc874197adb8a824ff4b4bdcc70bd8be4b4103693417e94a0566613c40c12ef4f401a2266"}, {0xdd, 0xda, "d52d5fe56f706d42dd5b2955d5757daf255af26d3068d01090cffcf96650da1490da0958f6a2c0c99494706a8871ab2923d9022b8ef5ad4b5fee46ad5538fa977cb4354312b31e357482eabb82740b380310fa73e181b581f77742d8f3f1531f548d0e1bf50b45bc7eccab2b99dbf939db715af27cd1ed85e226f58b6504663fcd78fd2f9e9ab496821055de621d5f447bcfa0e7c397cf2be8dae4419bef12828919873d1a454c65eff7b920085a42ee26340250eb8209a4666690b908ae42ef56b2946a65475ab9bafa0209d8898e51de146d02cd2d241788da"}, {0xdd, 0x9c, "2cca08c7efedc29b6e19e154e9b5129a7ab96619b14f0b6d2ac986dd58d8bbc8ab8da75d5599d0f625e1cb6f16ecb0fa28c48413e940356c90b29cda032332b9e7cb5551d8e17239234a7429acca921fc59525e8c091d015e1dfa273dc7319227c8e0ac4e45c162eb516788b4a586f125ff2c6bafc3f86cd76a05ba996ebef9ac99d42d11f72adec37153e9d920d0ba921c945793250886e81209052"}, {0xdd, 0x52, "59a4d924adbc9734058ee8a06a3e49a428fb5ee74314c0ec2593ae49a509930c72ee6ffc3e4945216cc301d27d38a7c87520f0eb127065aea39a671ef817df5ac67ea26c24333495beb9552b3736d7481344"}, {0xdd, 0xa2, "6c2759f4cbca5710b3e344a7a1ca69fb8c0ef9e5f7c7f5165166c50d8c4b76b3d4881d6c31d4a03fdfebdae26f4842576fd85dfe190df8c47b8bc7e9d41afeda24dfba6e7abe057c2d5688c9f6eb2512780ed876e69812ae374c2c34443223db9644df924a208a3d9ec5456ea948e5199d7e5e40d26cc4568312065ba0112e612af8212340a566b9a66cbe07d51ac8f419e1aef73ab97db6d2ecc1641779c39cc48d"}, {0xdd, 0x2d, "48a60e9a8b735b83355920828b472a2e4ab524c279f75304cdfdfeafe8252ab3d9478fb1eb9edd2392db9c7858"}, {0xdd, 0xe8, "c822cb8fc516817d26730c39bd27a32244f94abf119abac83f4578208b5ab9e856e5eba3437835c0b77edd7f26b166ac3e38522cc13d4c798496cddc9bc5f3a9614c676692466107e545389b73d190b422afd0fa9302b41f0fd5903a12a263b996c397f8fff334245d6e775ac0c4e007be735e543594762cc371b06f8f4502c93479007f362e125747c939807adb069bfd21ede1f11a59ff4dfa13c959e04eab2b7473f3b15fc02710629668a9eb880a58491c2e3fdbb2e8486e84fbfbee46040c147da55667e7cb5a2db1344f4e3fa9d79481da04a5a8306dca9b7e36c6c660317152d82dab39f1"}, {0xdd, 0xc2, "b153a0290ad0bd9297dc9b74e10f92e15ac616db412b6591e720fefecfe94cd7dcff264940a071b9b77f5fdf1fc0f8927fe6a95fb860e28b57cabbbb840eb977c8a8f9dbda78a8f459869d1d0ee4643b74b32c3f4e4da9769bd1e938ab61c7ab8ec8c158a1f20756fb730434d004238f7ebddf949286a0e877c30822a40a2145f6e8b53ccad78fdb7652c672d79181a2acef7e7d3533f5aa369d49d83f81a2ded7c88310cc20452ce3c3decfdcc0425547795fd2cd90147354a7fea7a47600cf9be7"}, {0xdd, 0xfa, "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"}, {0xdd, 0xc1, "0a13f57d600f07565b1eb679063be13d4a7fa8e6e363535203b82c77e2c29133a7afc3096170fb3d6d55723e979222aab8339d7e0b0878014177a59c2aec209b136032faa968bde85f3837d66712b9c0ab753d5b5e62c177dec365e46c2b6483989ecbdfeb568080502084f3946bb8c8c2ee6495258b62658df32e464912b507caa038973f31494c2114e4237ddbf4e6e85b9819b047aac20417e80ef8e18ea438ddf8e322354808c5bbb17ded3dda3a751f0b7d27c37b60387ef6175ed93f29aa"}]}}]]}]}, 0x277c}}, 0x800) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xa00, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) 766.611225ms ago: executing program 3 (id=902): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x3000000000000) 764.12855ms ago: executing program 4 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f00000002c0)=""/4083, 0xff3}, {&(0x7f00000012c0)=""/119, 0x77}], 0x3}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001740)=""/243, 0xf3}, {&(0x7f0000002b00)=""/210, 0xd2}, {&(0x7f0000001680)=""/136, 0x88}, {&(0x7f0000001840)=""/202, 0x107}, {&(0x7f0000002c00)=""/4100, 0x1004}, {&(0x7f0000000080)=""/114, 0x72}], 0x6, 0x0, 0x0, 0xc3ffffff}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 551.868354ms ago: executing program 3 (id=904): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket(0x1d, 0x2, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket(0x2, 0x80802, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x0) socket(0x2, 0x80805, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0xd) 550.151087ms ago: executing program 4 (id=905): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x6000, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x84, 0x1, [@m_sample={0x80, 0x1, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x9, 0x0, 0x6}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x0, 0x7, 0x5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x98}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xe}, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x2e}, {0x80000006}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000206000000000000000000000000000005000100070008"], 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e0001ff"], 0x40}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000fc00000000100000001000000008000000030000000000000e00090000000000000000002e30300200"], &(0x7f0000000180)=""/49, 0x30, 0x31, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) 476.285872ms ago: executing program 1 (id=906): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x4, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x3c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="021800000a000000000000000008000700080000000a00000000fc000001000000000a00000000000000be8000000000400000000000000000bb000000000000000000000000000000000000004b031ed183e23901cebe2062575889fd28f0590e5d9731e8175ee7867250a6ce65e593dc9eb110d86ab02491f8bb91a04844b00f6ba039624ecce798c39bde8714982ebe1be3145b56fa00e5c799349b6a8312b19b5703f5de853549bafce31bd73bf98a1f2e17862e856e8af1463e0d888ef1"], 0x50}}, 0x0) bind$inet6(r12, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0xd, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "54f120d98f739b49a6fc9e844a709d4516eeb3d385cb27f76a5e93ee4b55a738d2ad3d895cdebdc21c9c4329e6a758b35a8a24943c64de64e1c6b640eb2efd94f847cc0171b4cc56dd3718b416205244"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0x2, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "c51c890b4b0639236379ca8e20cad851569a39b70816979654127f3d5cdd22aa0d7f28378d98092fead3ee097d0295b0c3ad6cc064180ab099c8831980f247927a224036888a99aef70ef6ad0a0515da"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000000c0)={r15, 0x3, 0x6, @dev}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 460.047812ms ago: executing program 3 (id=907): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400000000000a000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}}, 0x0) 339.97014ms ago: executing program 2 (id=908): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x3000000) 283.041888ms ago: executing program 3 (id=909): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3800003, 0x11, r3, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0x40305839, &(0x7f0000000000)=ANY=[]) read(r2, &(0x7f0000009180)=""/91, 0x5b) 245.910365ms ago: executing program 4 (id=910): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000a001e00000038002f800c00020000000000000000002800038008000100000000001c00038006000300000000000600010000000000080002000200000008000300", @ANYRES32=r3], 0x54}}, 0x0) 143.793761ms ago: executing program 1 (id=911): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8030000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100", @ANYRES16, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74020076616c00000000000000000000000500030003000000880004000300000040000100240001007072696f726974790000000000000000000000000000ffffffffffffffff0000050003000e000000080004000100000008000600", @ANYRES32, @ANYBLOB="b000028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005"], 0x3d8}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r10, r8, 0x4, r6}, 0x10) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0xe, 0x0, 0x20001f00) 143.568225ms ago: executing program 2 (id=912): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000c0000001800018014000200697036677265300000000000000000001000ff0008000200000000009f02de3c"], 0x3c}}, 0x0) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendfile(r3, r4, 0x0, 0x4) sendto$packet(r4, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x4002015, &(0x7f0000000140)={0x11, 0x15, r2, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000000000000000086dd6002000b00442f0000000000000000000000ffff00000000fe8000000000000000000000000000aa24206558000000000000080000000000008000000000ffff"], 0x0) 69.838613ms ago: executing program 4 (id=913): unshare(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x7}, 0x90) syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000001c00000000532db6df08000300", @ANYRES32=r2], 0x38}}, 0x0) 50.213493ms ago: executing program 3 (id=914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f00000005c0)}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x21, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5e}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x26cc9ad4d8a255d, 0xe, 0x2, 0xfffffffffffffff4, 0xffffffffffffffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x1, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) 0s ago: executing program 2 (id=915): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000004a00010000f0ff00000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 68.740071][ T5082] cgroup: Unknown subsys name 'net' [ 68.907821][ T5082] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.641474][ T5082] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.811408][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.818490][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.022387][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.031359][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.042924][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.056996][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.069802][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.078254][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.086230][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.089669][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.093749][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.102627][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.117819][ T4490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.125764][ T4490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.132902][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.143565][ T5109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.152355][ T4490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.160557][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.162018][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.175674][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.176340][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.191616][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.191637][ T5109] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.198982][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.206474][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.227433][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.238886][ T4490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.246428][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.262926][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.272067][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.286706][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.294201][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.733771][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 73.988786][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.996146][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.005127][ T5092] bridge_slave_0: entered allmulticast mode [ 74.013285][ T5092] bridge_slave_0: entered promiscuous mode [ 74.022071][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 74.037927][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 74.074351][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.085432][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.092993][ T5092] bridge_slave_1: entered allmulticast mode [ 74.101857][ T5092] bridge_slave_1: entered promiscuous mode [ 74.213974][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.248026][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 74.273041][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.352303][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 74.406036][ T5092] team0: Port device team_slave_0 added [ 74.432650][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.443573][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.451850][ T5091] bridge_slave_0: entered allmulticast mode [ 74.462086][ T5091] bridge_slave_0: entered promiscuous mode [ 74.485151][ T5092] team0: Port device team_slave_1 added [ 74.531214][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.539207][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.547192][ T5091] bridge_slave_1: entered allmulticast mode [ 74.554375][ T5091] bridge_slave_1: entered promiscuous mode [ 74.575012][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.582466][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.589854][ T5104] bridge_slave_0: entered allmulticast mode [ 74.597760][ T5104] bridge_slave_0: entered promiscuous mode [ 74.621694][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.628914][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.655144][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.669554][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.676535][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.702978][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.743223][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.750596][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.758460][ T5104] bridge_slave_1: entered allmulticast mode [ 74.765584][ T5104] bridge_slave_1: entered promiscuous mode [ 74.804122][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.811969][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.819730][ T5103] bridge_slave_0: entered allmulticast mode [ 74.827661][ T5103] bridge_slave_0: entered promiscuous mode [ 74.839596][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.889965][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.898079][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.905364][ T5103] bridge_slave_1: entered allmulticast mode [ 74.913595][ T5103] bridge_slave_1: entered promiscuous mode [ 74.941865][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.954146][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.968132][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.032550][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.072618][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.079886][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.088071][ T5094] bridge_slave_0: entered allmulticast mode [ 75.095227][ T5094] bridge_slave_0: entered promiscuous mode [ 75.103378][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.111001][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.118792][ T5094] bridge_slave_1: entered allmulticast mode [ 75.125826][ T5094] bridge_slave_1: entered promiscuous mode [ 75.147722][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.167972][ T5098] Bluetooth: hci1: command tx timeout [ 75.206424][ T5104] team0: Port device team_slave_0 added [ 75.231256][ T5092] hsr_slave_0: entered promiscuous mode [ 75.241779][ T5092] hsr_slave_1: entered promiscuous mode [ 75.257251][ T5098] Bluetooth: hci3: command tx timeout [ 75.269659][ T5103] team0: Port device team_slave_0 added [ 75.279892][ T5091] team0: Port device team_slave_0 added [ 75.288393][ T5104] team0: Port device team_slave_1 added [ 75.311117][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.324456][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.333928][ T5098] Bluetooth: hci4: command tx timeout [ 75.334104][ T5108] Bluetooth: hci0: command tx timeout [ 75.339952][ T5095] Bluetooth: hci2: command tx timeout [ 75.353821][ T5103] team0: Port device team_slave_1 added [ 75.362454][ T5091] team0: Port device team_slave_1 added [ 75.489642][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.497095][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.527481][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.540879][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.548603][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.574668][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.591107][ T5094] team0: Port device team_slave_0 added [ 75.610660][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.617704][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.643768][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.656067][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.663192][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.690338][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.723602][ T5094] team0: Port device team_slave_1 added [ 75.745166][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.752325][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.778933][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.797566][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.804549][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.834203][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.888525][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.895597][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.923139][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.995119][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.002523][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.032549][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.071409][ T5104] hsr_slave_0: entered promiscuous mode [ 76.078420][ T5104] hsr_slave_1: entered promiscuous mode [ 76.084866][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.093131][ T5104] Cannot create hsr debugfs directory [ 76.221092][ T5103] hsr_slave_0: entered promiscuous mode [ 76.230093][ T5103] hsr_slave_1: entered promiscuous mode [ 76.236434][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.244415][ T5103] Cannot create hsr debugfs directory [ 76.280188][ T5091] hsr_slave_0: entered promiscuous mode [ 76.287132][ T5091] hsr_slave_1: entered promiscuous mode [ 76.293360][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.301362][ T5091] Cannot create hsr debugfs directory [ 76.394603][ T5094] hsr_slave_0: entered promiscuous mode [ 76.402366][ T5094] hsr_slave_1: entered promiscuous mode [ 76.410362][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.418538][ T5094] Cannot create hsr debugfs directory [ 76.690012][ T5092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.744030][ T5092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.760944][ T5092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.776056][ T5092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.957795][ T5104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.969110][ T5104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.987950][ T5104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.999593][ T5104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.125386][ T5103] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.154526][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.163735][ T5103] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.174195][ T5103] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.193020][ T5103] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.247611][ T5095] Bluetooth: hci1: command tx timeout [ 77.270197][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.311863][ T5091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.327063][ T5095] Bluetooth: hci3: command tx timeout [ 77.356292][ T5091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.369087][ T5091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.388453][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.395742][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.406495][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.407312][ T5095] Bluetooth: hci0: command tx timeout [ 77.414063][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.427206][ T5108] Bluetooth: hci4: command tx timeout [ 77.432688][ T5095] Bluetooth: hci2: command tx timeout [ 77.472761][ T5091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.520715][ T5094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.535563][ T5094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.548029][ T5094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.592004][ T5094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.744743][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.859738][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.893849][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.920760][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.941785][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.949213][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.980747][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.987990][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.025102][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.103007][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.110221][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.121376][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.128624][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.162424][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.188790][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.195943][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.239920][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.271761][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.279030][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.324184][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.385602][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.528742][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.603752][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.611126][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.710305][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.717797][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.845186][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.992070][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.123047][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.161482][ T5092] veth0_vlan: entered promiscuous mode [ 79.224079][ T5091] veth0_vlan: entered promiscuous mode [ 79.252323][ T5092] veth1_vlan: entered promiscuous mode [ 79.266974][ T5104] veth0_vlan: entered promiscuous mode [ 79.325972][ T5091] veth1_vlan: entered promiscuous mode [ 79.337148][ T5095] Bluetooth: hci1: command tx timeout [ 79.363651][ T5104] veth1_vlan: entered promiscuous mode [ 79.381684][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.409073][ T5095] Bluetooth: hci3: command tx timeout [ 79.434552][ T5092] veth0_macvtap: entered promiscuous mode [ 79.460476][ T5092] veth1_macvtap: entered promiscuous mode [ 79.475949][ T5103] veth0_vlan: entered promiscuous mode [ 79.487761][ T5095] Bluetooth: hci2: command tx timeout [ 79.493241][ T5095] Bluetooth: hci4: command tx timeout [ 79.499309][ T5108] Bluetooth: hci0: command tx timeout [ 79.516200][ T5104] veth0_macvtap: entered promiscuous mode [ 79.531951][ T5103] veth1_vlan: entered promiscuous mode [ 79.554645][ T5104] veth1_macvtap: entered promiscuous mode [ 79.600715][ T5091] veth0_macvtap: entered promiscuous mode [ 79.625817][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.649573][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.658102][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.671926][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.683723][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.703292][ T5091] veth1_macvtap: entered promiscuous mode [ 79.732531][ T5092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.744712][ T5092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.754620][ T5092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.763482][ T5092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.781136][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.792414][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.805745][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.833720][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.844486][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.855241][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.866253][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.879027][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.891030][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.902506][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.914196][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.925495][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.937707][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.948124][ T5094] veth0_vlan: entered promiscuous mode [ 79.970432][ T5104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.980486][ T5104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.990173][ T5104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.999036][ T5104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.012290][ T5103] veth0_macvtap: entered promiscuous mode [ 80.059660][ T5094] veth1_vlan: entered promiscuous mode [ 80.076024][ T5103] veth1_macvtap: entered promiscuous mode [ 80.090747][ T5091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.099944][ T5091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.110648][ T5091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.120078][ T5091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.203378][ T2792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.215175][ T2792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.265057][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.276211][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.287617][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.298899][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.309800][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.320473][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.331967][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.343612][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.355891][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.365827][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.376942][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.386847][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.397343][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.410342][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.467647][ T5103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.477356][ T5103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.486112][ T5103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.495302][ T5103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.545697][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.558568][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.573550][ T5094] veth0_macvtap: entered promiscuous mode [ 80.610120][ T2792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.614234][ T5094] veth1_macvtap: entered promiscuous mode [ 80.629133][ T2792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.695183][ T2792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.705667][ T2792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.795028][ T2850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.804146][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.815523][ T2850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.824264][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.834867][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.845416][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.855448][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.867279][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.877333][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.887879][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.904409][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.925748][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.942511][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.953085][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.972984][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.994557][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.007054][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.017575][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.028532][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.040751][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.060832][ T5094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.070559][ T5094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.080254][ T5094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.090305][ T5094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.113498][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.131333][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.139723][ T5180] Zero length message leads to an empty skb [ 81.267430][ T5179] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.314613][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.349147][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.407655][ T5095] Bluetooth: hci1: command tx timeout [ 81.488150][ T5095] Bluetooth: hci3: command tx timeout [ 81.555001][ T2792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.573114][ T5095] Bluetooth: hci2: command tx timeout [ 81.579826][ T5108] Bluetooth: hci4: command tx timeout [ 81.579842][ T5098] Bluetooth: hci0: command tx timeout [ 81.599133][ T2792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.636670][ T2792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.644545][ T2792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.663144][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.681853][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.151940][ T5205] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 82.318541][ T5210] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 82.858993][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 82.935552][ T5205] syz.1.2 (5205) used greatest stack depth: 17432 bytes left [ 83.169002][ T5249] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.224541][ T5248] xt_policy: too many policy elements [ 83.329983][ T5260] Bluetooth: MGMT ver 1.22 [ 83.334798][ T5260] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 83.382039][ T5251] can: request_module (can-proto-0) failed. [ 83.750070][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 83.932185][ T5281] Bluetooth: hci3: invalid length 0, exp 2 for type 22 [ 84.119947][ T5285] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.34'. [ 84.123889][ T5283] netlink: 'syz.2.33': attribute type 4 has an invalid length. [ 84.234685][ T5289] netlink: 'syz.2.33': attribute type 4 has an invalid length. [ 84.435624][ T5292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.592226][ T5297] can: request_module (can-proto-0) failed. [ 84.647155][ T5298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.688017][ T5297] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 84.904586][ T5312] netlink: 'syz.4.43': attribute type 7 has an invalid length. [ 85.189415][ T5328] netlink: 64 bytes leftover after parsing attributes in process `syz.0.47'. [ 85.395300][ T5336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.52'. [ 85.499999][ T5341] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 85.678300][ T5347] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 85.804979][ T5349] vxcan1: tx address claim with dest, not broadcast [ 85.921361][ T5355] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.970554][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 86.277897][ T5370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.65'. [ 86.295330][ T5361] IPVS: persistence engine module ip_vs_pe_À not found [ 86.455340][ T5375] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 86.566249][ T5382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.825643][ T5386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.149842][ T5414] netlink: 'syz.1.77': attribute type 10 has an invalid length. [ 87.359763][ T5420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 87.385496][ T5422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.80'. [ 87.779020][ T5435] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 88.414704][ T5462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.92'. [ 88.755069][ T5469] pimreg12: entered allmulticast mode [ 88.945488][ T5478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.036414][ T5481] netlink: 52 bytes leftover after parsing attributes in process `syz.3.100'. [ 89.165437][ T5487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.388603][ T5494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.104'. [ 89.689575][ T5504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 89.822061][ T5508] netlink: 167456 bytes leftover after parsing attributes in process `syz.0.110'. [ 89.963345][ T5516] smc: net device lo applied user defined pnetid SYZ2 [ 89.987685][ T5516] smc: net device lo erased user defined pnetid SYZ2 [ 90.137453][ T5521] netlink: 332 bytes leftover after parsing attributes in process `syz.1.114'. [ 90.153968][ T5521] netlink: 104 bytes leftover after parsing attributes in process `syz.1.114'. [ 90.173475][ T5521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.114'. [ 90.239905][ T5527] netlink: 596 bytes leftover after parsing attributes in process `syz.3.115'. [ 90.433428][ T5527] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.442700][ T5527] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.451677][ T5527] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.460569][ T5527] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.474130][ T5534] FAULT_INJECTION: forcing a failure. [ 90.474130][ T5534] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.518850][ T5534] CPU: 0 PID: 5534 Comm: syz.0.117 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 90.528910][ T5534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.539016][ T5534] Call Trace: [ 90.542332][ T5534] [ 90.545303][ T5534] dump_stack_lvl+0x241/0x360 [ 90.550044][ T5534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.555281][ T5534] ? __pfx__printk+0x10/0x10 [ 90.559924][ T5534] ? __pfx_lock_release+0x10/0x10 [ 90.565092][ T5534] should_fail_ex+0x3b0/0x4e0 [ 90.569825][ T5534] _copy_from_user+0x2f/0xe0 [ 90.574457][ T5534] copy_msghdr_from_user+0xae/0x680 [ 90.579718][ T5534] ? _parse_integer_limit+0x1b5/0x200 [ 90.585154][ T5534] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 90.591023][ T5534] __sys_sendmmsg+0x374/0x740 [ 90.595760][ T5534] ? __pfx___sys_sendmmsg+0x10/0x10 [ 90.601052][ T5534] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 90.607004][ T5534] ? ksys_write+0x23e/0x2c0 [ 90.611562][ T5534] ? __pfx_lock_release+0x10/0x10 [ 90.616640][ T5534] ? vfs_write+0x7c4/0xc90 [ 90.621108][ T5534] ? __mutex_unlock_slowpath+0x21d/0x750 [ 90.626789][ T5534] ? __pfx_vfs_write+0x10/0x10 [ 90.631627][ T5534] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.637653][ T5534] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.644197][ T5534] ? do_syscall_64+0x100/0x230 [ 90.649009][ T5534] __x64_sys_sendmmsg+0xa0/0xb0 [ 90.653948][ T5534] do_syscall_64+0xf3/0x230 [ 90.658494][ T5534] ? clear_bhb_loop+0x35/0x90 [ 90.663226][ T5534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.669171][ T5534] RIP: 0033:0x7fdb3c975bd9 [ 90.674328][ T5534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.695283][ T5534] RSP: 002b:00007fdb3c3ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 90.704096][ T5534] RAX: ffffffffffffffda RBX: 00007fdb3cb03f60 RCX: 00007fdb3c975bd9 [ 90.712547][ T5534] RDX: 0000000000000001 RSI: 00000000200019c0 RDI: 0000000000000003 [ 90.721690][ T5534] RBP: 00007fdb3c3ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.729794][ T5534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.737812][ T5534] R13: 000000000000000b R14: 00007fdb3cb03f60 R15: 00007fff38a94088 [ 90.745843][ T5534] [ 90.857520][ T5544] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 90.893276][ T5545] netlink: 6 bytes leftover after parsing attributes in process `syz.3.121'. [ 91.309578][ T5558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.450452][ T5563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.756712][ T5571] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 91.990258][ T5584] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 92.128132][ T5588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.293190][ T57] cfg80211: failed to load regulatory.db [ 92.725910][ T5608] FAULT_INJECTION: forcing a failure. [ 92.725910][ T5608] name failslab, interval 1, probability 0, space 0, times 1 [ 92.756809][ T5608] CPU: 0 PID: 5608 Comm: syz.1.143 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 92.766856][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 92.776930][ T5608] Call Trace: [ 92.780219][ T5608] [ 92.783158][ T5608] dump_stack_lvl+0x241/0x360 [ 92.787855][ T5608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.793068][ T5608] ? __pfx__printk+0x10/0x10 [ 92.797844][ T5608] ? __local_bh_enable_ip+0x168/0x200 [ 92.803231][ T5608] ? dev_hard_start_xmit+0x773/0x7e0 [ 92.809684][ T5608] ? __dev_queue_xmit+0x2da/0x3e90 [ 92.814854][ T5608] should_fail_ex+0x3b0/0x4e0 [ 92.819569][ T5608] ? __alloc_skb+0x1c3/0x440 [ 92.824507][ T5608] should_failslab+0x9/0x20 [ 92.829036][ T5608] kmem_cache_alloc_node_noprof+0x71/0x320 [ 92.834872][ T5608] __alloc_skb+0x1c3/0x440 [ 92.839301][ T5608] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 92.844347][ T5608] ? __pfx___alloc_skb+0x10/0x10 [ 92.849394][ T5608] ? netlink_ack_tlv_len+0x6e/0x200 [ 92.854604][ T5608] netlink_ack+0x13f/0xa30 [ 92.859090][ T5608] netlink_rcv_skb+0x262/0x430 [ 92.863893][ T5608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.869375][ T5608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.874691][ T5608] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.879904][ T5608] netlink_unicast+0x7f0/0x990 [ 92.884690][ T5608] ? __pfx_netlink_unicast+0x10/0x10 [ 92.889990][ T5608] ? __virt_addr_valid+0x183/0x520 [ 92.895126][ T5608] ? __check_object_size+0x49c/0x900 [ 92.900435][ T5608] ? bpf_lsm_netlink_send+0x9/0x10 [ 92.906102][ T5608] netlink_sendmsg+0x8e4/0xcb0 [ 92.911261][ T5608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.916831][ T5608] ? __import_iovec+0x536/0x820 [ 92.921736][ T5608] ? aa_sock_msg_perm+0x91/0x160 [ 92.926803][ T5608] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 92.932107][ T5608] ? security_socket_sendmsg+0x87/0xb0 [ 92.937579][ T5608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.942875][ T5608] __sock_sendmsg+0x221/0x270 [ 92.947568][ T5608] ____sys_sendmsg+0x525/0x7d0 [ 92.952383][ T5608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.957699][ T5608] __sys_sendmmsg+0x3b2/0x740 [ 92.962400][ T5608] ? __pfx___sys_sendmmsg+0x10/0x10 [ 92.967659][ T5608] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.973678][ T5608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.980032][ T5608] ? irqentry_exit+0x63/0x90 [ 92.984735][ T5608] ? arch_irq_work_raise+0x4e/0x80 [ 92.989952][ T5608] ? bpf_trace_run2+0x1fc/0x540 [ 92.994821][ T5608] ? __pfx_lock_release+0x10/0x10 [ 92.999957][ T5608] ? bpf_ringbuf_discard+0x117/0x170 [ 93.005272][ T5608] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 93.011264][ T5608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.017611][ T5608] __x64_sys_sendmmsg+0xa0/0xb0 [ 93.022569][ T5608] do_syscall_64+0xf3/0x230 [ 93.027085][ T5608] ? clear_bhb_loop+0x35/0x90 [ 93.031776][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.037679][ T5608] RIP: 0033:0x7fc98a975bd9 [ 93.042105][ T5608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.061717][ T5608] RSP: 002b:00007fc98b6d8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 93.070145][ T5608] RAX: ffffffffffffffda RBX: 00007fc98ab03f60 RCX: 00007fc98a975bd9 [ 93.078131][ T5608] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 93.086107][ T5608] RBP: 00007fc98b6d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.094267][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.102424][ T5608] R13: 000000000000000b R14: 00007fc98ab03f60 R15: 00007ffea6f518b8 [ 93.111560][ T5608] [ 93.563903][ T5627] netlink: 'syz.3.149': attribute type 2 has an invalid length. [ 93.640232][ T5633] __nla_validate_parse: 2 callbacks suppressed [ 93.640260][ T5633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.152'. [ 93.916474][ T5641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.115739][ T5645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 94.153333][ T5650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.204714][ T786] wlan1: No basic rates, using min rate instead [ 94.257626][ T786] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 94.300091][ T786] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 94.327723][ T62] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 94.337219][ T5653] netlink: 'syz.2.158': attribute type 6 has an invalid length. [ 94.351118][ T62] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 94.360941][ T62] wlan1: authentication with 08:02:11:00:00:00 timed out [ 95.324708][ T5681] netdevsim netdevsim1 : renamed from netdevsim0 [ 95.514474][ T5687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.596512][ T5696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.715617][ T5699] Bluetooth: hci3: invalid length 0, exp 2 for type 22 [ 95.849750][ T5687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.026353][ T5711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.074869][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 96.143238][ T5716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.169518][ T57] wlan1: No basic rates, using min rate instead [ 96.199898][ T57] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 96.227697][ T57] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 96.237397][ T51] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 96.244933][ T51] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 96.264946][ T51] wlan1: authentication with 08:02:11:00:00:00 timed out [ 96.477132][ T5727] netlink: 104 bytes leftover after parsing attributes in process `syz.2.185'. [ 96.703134][ T5736] Bluetooth: hci3: invalid length 0, exp 2 for type 22 [ 96.893566][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 97.417697][ T5765] Bluetooth: hci3: invalid length 0, exp 2 for type 22 [ 97.470097][ T5771] sctp: [Deprecated]: syz.1.204 (pid 5771) Use of int in maxseg socket option. [ 97.470097][ T5771] Use struct sctp_assoc_value instead [ 97.489831][ T5770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.507123][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 97.673212][ T5777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.693847][ T5781] syz.4.206 uses obsolete (PF_INET,SOCK_PACKET) [ 97.808652][ T5785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.049783][ T5800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.154332][ T5803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.163481][ T5806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 98.344669][ T5814] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 98.625137][ T5826] ip6tnl0: entered promiscuous mode [ 98.694788][ T5826] ip6tnl0: left promiscuous mode [ 99.156660][ T5845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.231'. [ 99.183346][ T5853] xt_cgroup: path and classid specified [ 99.197488][ T5854] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 99.220966][ T5853] netlink: zone id is out of range [ 99.236068][ T5853] netlink: zone id is out of range [ 99.267730][ T5853] netlink: zone id is out of range [ 99.290437][ T5853] netlink: zone id is out of range [ 99.295150][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 99.320112][ T5853] netlink: zone id is out of range [ 99.330807][ T5853] netlink: zone id is out of range [ 99.351858][ T5853] netlink: zone id is out of range [ 99.387270][ T5853] netlink: zone id is out of range [ 99.402854][ T5853] netlink: zone id is out of range [ 100.237836][ T5894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.382810][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 100.395631][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.409052][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.427539][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.445427][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.460838][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.468426][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.547458][ T5908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.567864][ T5907] Bluetooth: MGMT ver 1.22 [ 100.573212][ T5907] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 100.619922][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.666335][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 100.835275][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.930459][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 101.005389][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.171732][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.241445][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 101.355166][ T5942] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 101.524904][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 101.572109][ T5951] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 101.584227][ T5951] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 101.595365][ T5951] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 101.603769][ T5951] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 101.646960][ T5951] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 101.697737][ T5951] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 101.716416][ T5956] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 101.724869][ T5951] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 101.753543][ T5951] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 101.761672][ T5951] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 101.964746][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 102.002429][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 102.111762][ T51] bridge_slave_1: left allmulticast mode [ 102.138520][ T51] bridge_slave_1: left promiscuous mode [ 102.168298][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.210720][ T5982] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 102.219193][ T5982] netlink: 228 bytes leftover after parsing attributes in process `syz.1.269'. [ 102.279767][ T51] bridge_slave_0: left allmulticast mode [ 102.302574][ T51] bridge_slave_0: left promiscuous mode [ 102.330640][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.378508][ T5989] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 102.470885][ T5994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.528022][ T5095] Bluetooth: hci3: command tx timeout [ 102.699864][ T6004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.152713][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.171389][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.185178][ T51] bond0 (unregistering): Released all slaves [ 103.207116][ T5967] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 103.222937][ T5967] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 103.302527][ T5976] wireguard0: entered promiscuous mode [ 103.315283][ T5976] wireguard0: entered allmulticast mode [ 103.371526][ T6018] Bluetooth: MGMT ver 1.22 [ 103.816320][ T6037] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 104.158489][ T6052] tipc: Started in network mode [ 104.198233][ T6052] tipc: Node identity str_len:, cluster identity 4711 [ 104.213613][ T6052] tipc: Enabling of bearer rejected, failed to enable media [ 104.274424][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.290676][ T6057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.310031][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.330720][ T5899] bridge_slave_0: entered allmulticast mode [ 104.349684][ T5899] bridge_slave_0: entered promiscuous mode [ 104.397366][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.404595][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.442038][ T5899] bridge_slave_1: entered allmulticast mode [ 104.487591][ T5899] bridge_slave_1: entered promiscuous mode [ 104.512986][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.603918][ T51] hsr_slave_0: left promiscuous mode [ 104.610112][ T5095] Bluetooth: hci3: command 0x041b tx timeout [ 104.638488][ T51] hsr_slave_1: left promiscuous mode [ 104.640879][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.663717][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.683076][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.703627][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.714071][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.764611][ T51] veth1_macvtap: left promiscuous mode [ 104.780044][ T51] veth0_macvtap: left promiscuous mode [ 104.791202][ T51] veth1_vlan: left promiscuous mode [ 104.802743][ T51] veth0_vlan: left promiscuous mode [ 105.394106][ T51] team0 (unregistering): Port device team_slave_1 removed [ 105.407795][ T5108] Bluetooth: hci0: command tx timeout [ 105.434236][ T51] team0 (unregistering): Port device team_slave_0 removed [ 105.785721][ T6071] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 105.890239][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 105.910461][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 105.980178][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.032440][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.129794][ T6098] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 106.177026][ T6091] geneve0: entered promiscuous mode [ 106.233400][ T6091] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 106.353961][ T5899] team0: Port device team_slave_0 added [ 106.369597][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 106.422371][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 106.519310][ T5899] team0: Port device team_slave_1 added [ 106.567487][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 106.687830][ T5108] Bluetooth: hci3: command 0x041b tx timeout [ 106.723803][ T6120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.744339][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.781683][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.811891][ T6126] validate_nla: 5 callbacks suppressed [ 106.811913][ T6126] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 106.859294][ T6126] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 106.892849][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.906188][ T6130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.948945][ T6120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.975043][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 107.040261][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.054328][ T6130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.080011][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.144462][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.191602][ T6141] netlink: 1584 bytes leftover after parsing attributes in process `syz.3.307'. [ 107.419709][ T5899] hsr_slave_0: entered promiscuous mode [ 107.437478][ T5899] hsr_slave_1: entered promiscuous mode [ 107.454506][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.476681][ T5899] Cannot create hsr debugfs directory [ 107.880731][ T6162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.109640][ T6162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.151107][ T6173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.441684][ T6178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.502362][ T6177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.543252][ T6177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.654065][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'. [ 108.767188][ T5095] Bluetooth: hci3: command 0x041b tx timeout [ 109.370341][ T6216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.378034][ T6216] IPv6: NLM_F_CREATE should be set when creating new route [ 109.410417][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.429950][ T5899] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.461772][ T5899] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.507277][ T5899] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.541244][ T5899] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.635247][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.669867][ T786] wlan1: No basic rates, using min rate instead [ 109.701831][ T786] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 109.717561][ T786] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 109.750707][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.842792][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.934828][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.034719][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.065050][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.072315][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.104195][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.111840][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.257457][ T2792] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 110.278735][ T2792] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 110.285399][ T2792] wlan1: authentication with 08:02:11:00:00:00 timed out [ 110.569838][ T6257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.612243][ T6256] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 110.630387][ T6256] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 110.654751][ T6261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.677024][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 110.682503][ T6261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.753548][ T6257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.789985][ T6257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.814404][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.853294][ T5095] Bluetooth: hci3: command 0x041b tx timeout [ 110.938797][ T6269] netlink: 164 bytes leftover after parsing attributes in process `syz.1.336'. [ 110.991208][ T6268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.084917][ T5899] veth0_vlan: entered promiscuous mode [ 111.148290][ T5899] veth1_vlan: entered promiscuous mode [ 111.176997][ T6277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.268007][ T6278] netlink: 'syz.0.338': attribute type 10 has an invalid length. [ 111.336441][ T5899] veth0_macvtap: entered promiscuous mode [ 111.375773][ T6283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.398039][ T5899] veth1_macvtap: entered promiscuous mode [ 111.424222][ T6277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.441447][ T786] wlan1: No basic rates, using min rate instead [ 111.460372][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.469072][ T786] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 111.492690][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.525872][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.547160][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.557250][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.562597][ T786] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 111.569946][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.586623][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 111.589851][ T6283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.616739][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.630089][ T6283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.641437][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.668842][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.711057][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.734528][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.745745][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.757732][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.768447][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.779969][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.791134][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.802323][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.817215][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.862687][ T5899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.899581][ T5899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.937445][ T5899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.964090][ T5899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.216978][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.224857][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.255031][ T6312] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 112.270868][ T6312] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 112.288086][ T2792] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 112.325859][ T2792] wlan1: authentication with 08:02:11:00:00:00 timed out [ 112.358770][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.383444][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.404536][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 112.666309][ T6322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.673826][ T6322] IPv6: NLM_F_CREATE should be set when creating new route [ 112.753489][ T6333] Driver unsupported XDP return value 0 on prog (id 88) dev N/A, expect packet loss! [ 112.926962][ T5108] Bluetooth: hci3: command 0x041b tx timeout [ 112.975501][ T6345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.089783][ T6350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.167653][ T6350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.316940][ T6359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.417340][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.456782][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.492395][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.506687][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.540164][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.571684][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.607170][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.639785][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.676768][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.971629][ T6367] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 54411 - 0 [ 114.006819][ T6367] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 54411 - 0 [ 114.035011][ T6367] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 54411 - 0 [ 114.044545][ T6367] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 54411 - 0 [ 114.058784][ T6367] netdevsim netdevsim1 : set [1, 2] type 2 family 0 port 56181 - 0 [ 114.101833][ T6367] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 56181 - 0 [ 114.112807][ T6367] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 56181 - 0 [ 114.148545][ T6367] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 56181 - 0 [ 114.193757][ T6381] netlink: 'syz.2.357': attribute type 8 has an invalid length. [ 114.198268][ T6367] geneve2: entered promiscuous mode [ 114.242189][ T6381] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.357'. [ 114.267073][ T6367] geneve2: entered allmulticast mode [ 114.334532][ T6383] bond_slave_0: entered promiscuous mode [ 114.341072][ T6383] bond_slave_1: entered promiscuous mode [ 114.392870][ T6383] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.479152][ T6383] bond_slave_0: left promiscuous mode [ 114.484651][ T6383] bond_slave_1: left promiscuous mode [ 114.616846][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 114.656049][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.363'. [ 114.670783][ T6398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.745975][ T6400] macvlan2: entered allmulticast mode [ 114.773335][ T6400] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 114.806402][ T6400] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 114.915744][ T6400] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 115.048470][ T6421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.368'. [ 115.123522][ T6425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.242059][ T6428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.514004][ T6434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.651884][ T6439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.703747][ T6439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.817983][ T6436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.861669][ T6436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.148852][ T6456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.390373][ T6468] tipc: Trying to set illegal importance in message [ 116.425624][ T6468] netlink: 'syz.1.378': attribute type 11 has an invalid length. [ 116.437330][ T6470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.379'. [ 116.457410][ T6468] netlink: 224 bytes leftover after parsing attributes in process `syz.1.378'. [ 117.075698][ T6499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.083108][ T6499] IPv6: NLM_F_CREATE should be set when creating new route [ 117.330764][ T6513] netlink: 'syz.3.389': attribute type 4 has an invalid length. [ 117.562279][ T6525] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 117.931474][ T6536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.978839][ T6536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.020142][ T6536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.110288][ T6545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.122432][ T6546] netlink: 596 bytes leftover after parsing attributes in process `syz.2.398'. [ 118.157321][ T6545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.456402][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 118.635517][ T6572] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 118.708454][ T6578] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 118.738410][ T6578] netlink: 244 bytes leftover after parsing attributes in process `syz.2.410'. [ 118.772536][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 118.813737][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.409'. [ 118.854421][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.409'. [ 119.859188][ T6620] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 120.023742][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 120.110818][ T6628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.147807][ T6630] FAULT_INJECTION: forcing a failure. [ 120.147807][ T6630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.167568][ T6630] CPU: 1 PID: 6630 Comm: syz.0.429 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 120.177621][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 120.187805][ T6630] Call Trace: [ 120.191113][ T6630] [ 120.194071][ T6630] dump_stack_lvl+0x241/0x360 [ 120.198895][ T6630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.204127][ T6630] ? __pfx__printk+0x10/0x10 [ 120.208766][ T6630] should_fail_ex+0x3b0/0x4e0 [ 120.213521][ T6630] _copy_from_user+0x2f/0xe0 [ 120.218167][ T6630] move_addr_to_kernel+0x82/0x150 [ 120.223239][ T6630] copy_msghdr_from_user+0x43e/0x680 [ 120.228574][ T6630] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 120.234437][ T6630] __sys_sendmsg+0x23d/0x3a0 [ 120.239085][ T6630] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.244238][ T6630] ? vfs_write+0x7c4/0xc90 [ 120.248739][ T6630] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.255109][ T6630] ? do_syscall_64+0x100/0x230 [ 120.259922][ T6630] ? do_syscall_64+0xb6/0x230 [ 120.264644][ T6630] do_syscall_64+0xf3/0x230 [ 120.269188][ T6630] ? clear_bhb_loop+0x35/0x90 [ 120.273910][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.279852][ T6630] RIP: 0033:0x7fdb3c975bd9 [ 120.284318][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.303976][ T6630] RSP: 002b:00007fdb3c3ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.312538][ T6630] RAX: ffffffffffffffda RBX: 00007fdb3cb03f60 RCX: 00007fdb3c975bd9 [ 120.322032][ T6630] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 120.330045][ T6630] RBP: 00007fdb3c3ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.338054][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.346066][ T6630] R13: 000000000000000b R14: 00007fdb3cb03f60 R15: 00007fff38a94088 [ 120.354097][ T6630] [ 120.377471][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 120.432596][ T6637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.477325][ T6637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.491983][ T6639] net_ratelimit: 1 callbacks suppressed [ 120.492004][ T6639] netlink: del zone limit has 8 unknown bytes [ 120.558905][ T6628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.607463][ T6628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.845147][ T6652] netlink: 'syz.2.434': attribute type 3 has an invalid length. [ 121.007743][ T6663] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 121.391959][ T6677] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 121.678486][ T6686] veth1_to_batadv: entered allmulticast mode [ 121.876045][ T6698] bridge0: entered promiscuous mode [ 121.935236][ T6698] __nla_validate_parse: 3 callbacks suppressed [ 121.935278][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 122.286072][ T6711] vlan2: entered promiscuous mode [ 122.311233][ T6711] bridge0: entered promiscuous mode [ 122.349103][ T6711] team0: Port device vlan2 added [ 122.392295][ T6697] bridge0: left promiscuous mode [ 122.508930][ T6727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.643281][ T6727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.689665][ T6739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.800519][ T6739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.845735][ T6728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.850923][ T6744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.862828][ T6744] IPv6: NLM_F_CREATE should be set when creating new route [ 123.228454][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.471'. [ 123.261735][ T6766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.472'. [ 123.273265][ T6766] tipc: Started in network mode [ 123.279926][ T6766] tipc: Node identity 6, cluster identity 4711 [ 123.286246][ T6766] tipc: Node number set to 6 [ 123.561622][ T6778] netlink: 'syz.1.476': attribute type 9 has an invalid length. [ 123.570949][ T6778] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.476'. [ 124.095512][ T6798] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 124.441644][ T6818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.558686][ T6822] netlink: 116 bytes leftover after parsing attributes in process `syz.3.492'. [ 124.600018][ T6824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.664117][ T6824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.721888][ T6830] netlink: 'syz.3.494': attribute type 3 has an invalid length. [ 124.744250][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.494'. [ 124.758826][ T6824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.796306][ T29] audit: type=1107 audit(1720513528.576:2): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{§4·Táöiõ %Ñ<×&¡‰ãjÓ.ä°Þ/)ОgÏe4!ëAÖ]hßX¥:[œ}3] !€›ÐzôØÔžïšžêKý7µ ¶W‚ .®âÚ‰t.—Ÿ¯-¾ çÿì;Êaˆ]ø]ï´À0 [ 124.796306][ T29] ÞÌáh'X‡K#»q•Ùì½’óQb•K•h?ó3£5^â.[ãPÇ·I3ßÇ_ [ 124.796306][ T29] fÿ1xÉô· [ 125.548715][ T6865] dump_stack_lvl+0x241/0x360 [ 125.553525][ T6865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.558768][ T6865] ? __pfx__printk+0x10/0x10 [ 125.563537][ T6865] should_fail_ex+0x3b0/0x4e0 [ 125.568276][ T6865] prepare_alloc_pages+0x1da/0x5d0 [ 125.573534][ T6865] __alloc_pages_noprof+0x166/0x6c0 [ 125.578780][ T6865] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 125.584571][ T6865] alloc_pages_mpol_noprof+0x3e8/0x680 [ 125.590180][ T6865] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 125.596267][ T6865] ? alloc_pages_noprof+0xef/0x170 [ 125.601459][ T6865] get_free_pages_noprof+0xc/0x30 [ 125.606556][ T6865] kasan_populate_vmalloc_pte+0x38/0xe0 [ 125.612257][ T6865] __apply_to_page_range+0x8a8/0xe50 [ 125.617607][ T6865] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 125.623893][ T6865] ? __pfx___apply_to_page_range+0x10/0x10 [ 125.629735][ T6865] ? do_raw_spin_unlock+0x13c/0x8b0 [ 125.634989][ T6865] ? kmem_cache_alloc_node_noprof+0x1c4/0x320 [ 125.641113][ T6865] alloc_vmap_area+0x1d41/0x23e0 [ 125.646115][ T6865] ? __pfx_alloc_vmap_area+0x10/0x10 [ 125.651439][ T6865] ? __kasan_kmalloc+0x98/0xb0 [ 125.656251][ T6865] ? kmalloc_node_trace_noprof+0x1d3/0x300 [ 125.662100][ T6865] ? __get_vm_area_node+0x113/0x270 [ 125.667356][ T6865] ? bloom_map_alloc+0x21a/0x450 [ 125.672348][ T6865] __get_vm_area_node+0x1a9/0x270 [ 125.677425][ T6865] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 125.683369][ T6865] ? bloom_map_alloc+0x21a/0x450 [ 125.688362][ T6865] ? __lock_acquire+0x1346/0x1fd0 [ 125.693446][ T6865] ? aa_get_newest_label+0xff/0x6f0 [ 125.698726][ T6865] ? __pfx_aa_get_newest_label+0x10/0x10 [ 125.704483][ T6865] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 125.712670][ T6865] ? apparmor_capable+0x138/0x1b0 [ 125.717752][ T6865] bpf_map_area_alloc+0xfc/0x120 [ 125.722751][ T6865] ? bloom_map_alloc+0x21a/0x450 [ 125.727742][ T6865] bloom_map_alloc+0x21a/0x450 [ 125.732554][ T6865] map_create+0x90c/0x1200 [ 125.737012][ T6865] ? security_bpf+0x87/0xb0 [ 125.741539][ T6865] __sys_bpf+0x6d1/0x810 [ 125.745810][ T6865] ? __pfx___sys_bpf+0x10/0x10 [ 125.750604][ T6865] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.756603][ T6865] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.762941][ T6865] ? do_syscall_64+0x100/0x230 [ 125.767805][ T6865] __x64_sys_bpf+0x7c/0x90 [ 125.772239][ T6865] do_syscall_64+0xf3/0x230 [ 125.776758][ T6865] ? clear_bhb_loop+0x35/0x90 [ 125.781464][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.787368][ T6865] RIP: 0033:0x7faf4c575bd9 [ 125.791809][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.811442][ T6865] RSP: 002b:00007faf4d309048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.819879][ T6865] RAX: ffffffffffffffda RBX: 00007faf4c703f60 RCX: 00007faf4c575bd9 [ 125.827870][ T6865] RDX: 0000000000000048 RSI: 00000000200003c0 RDI: 0000000000000000 [ 125.835850][ T6865] RBP: 00007faf4d3090a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.843828][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.851805][ T6865] R13: 000000000000000b R14: 00007faf4c703f60 R15: 00007ffed0290e68 [ 125.859810][ T6865] [ 125.973438][ T6877] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 126.182599][ T6886] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.518'. [ 126.660299][ T6910] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 126.884768][ T6921] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 126.911965][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 126.938260][ T6921] netlink: 9340 bytes leftover after parsing attributes in process `syz.3.534'. [ 126.976724][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 127.095135][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 127.106478][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 127.138231][ T6929] vxcan1: tx address claim with dest, not broadcast [ 127.180972][ T6926] syzkaller0: entered allmulticast mode [ 127.333732][ T6921] syzkaller0 (unregistering): left allmulticast mode [ 127.347912][ T6937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.538'. [ 127.624839][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 127.697283][ T6950] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 127.813233][ T6959] xt_TCPMSS: Only works on TCP SYN packets [ 128.141357][ T6983] team0: entered promiscuous mode [ 128.157903][ T6983] team_slave_0: entered promiscuous mode [ 128.200004][ T6983] team_slave_1: entered promiscuous mode [ 128.282081][ T6980] team0: left promiscuous mode [ 128.307290][ T6980] team_slave_0: left promiscuous mode [ 128.313769][ T6980] team_slave_1: left promiscuous mode [ 128.332739][ T6990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.454085][ T6990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.479392][ T6999] hsr0: entered promiscuous mode [ 128.501371][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 128.521092][ T6993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.552814][ T7001] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 128.684112][ T6993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.751853][ T6993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.753847][ T7009] atomic_op ffff88802f07a998 conn xmit_atomic 0000000000000000 [ 128.791112][ T7009] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 128.858259][ T7011] IPVS: persistence engine module ip_vs_pe_À not found [ 128.884987][ T7009] bridge0: port 3(vlan2) entered blocking state [ 128.911764][ T7014] IPVS: Scheduler module ip_vs_sip not found [ 128.914308][ T7009] bridge0: port 3(vlan2) entered disabled state [ 128.926155][ T7009] vlan2: entered allmulticast mode [ 128.933464][ T7009] vlan2: entered promiscuous mode [ 129.345177][ T7037] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 129.363862][ T7037] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 129.378379][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 129.454484][ T7042] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 129.495289][ T7039] hsr0: entered promiscuous mode [ 129.613834][ T7048] @ÿ: renamed from veth0_vlan (while UP) [ 129.624402][ T7049] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 129.652318][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 129.847465][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 129.933109][ T7059] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 130.048640][ T7068] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 130.079221][ T7068] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 130.114421][ T7070] bridge0: port 3(macvlan3) entered blocking state [ 130.148675][ T7070] bridge0: port 3(macvlan3) entered disabled state [ 130.165679][ T7070] macvlan3: entered allmulticast mode [ 130.176323][ T7073] Bluetooth: hci3: unsupported parameter 65535 [ 130.184826][ T7070] macvlan3: entered promiscuous mode [ 130.191470][ T7073] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 130.254334][ T7065] macvlan3 (unregistering): left allmulticast mode [ 130.266752][ T7065] macvlan3 (unregistering): left promiscuous mode [ 130.296406][ T7065] bridge0: port 3(macvlan3) entered disabled state [ 130.453333][ T7088] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 130.472307][ T7087] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.571260][ T7088] 0ªX¹¦Dö»: entered allmulticast mode [ 130.647765][ T7093] macvlan2: entered promiscuous mode [ 130.653140][ T7093] macvlan2: entered allmulticast mode [ 130.775059][ T7102] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 130.952360][ T7110] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 130.992100][ T7110] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 131.067315][ T7114] Bluetooth: hci3: unsupported parameter 65535 [ 131.079374][ T7114] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 131.434031][ T7135] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 131.755326][ T7147] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 131.822169][ T7150] Bluetooth: hci3: unsupported parameter 65535 [ 131.829414][ T7150] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 132.993341][ T7147] __nla_validate_parse: 7 callbacks suppressed [ 132.993365][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 133.188582][ T7156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.617'. [ 133.253457][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.261373][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.430608][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 133.560178][ T7174] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 65023 - 0 [ 133.569180][ T7174] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 133.578465][ T7174] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 133.587442][ T7174] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 133.610237][ T7174] vxlan0: entered promiscuous mode [ 133.659485][ T7185] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 133.667222][ T7184] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.627'. [ 133.732328][ T7184] batadv_slave_1: entered promiscuous mode [ 133.764820][ T7184] vlan1: entered promiscuous mode [ 133.778183][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 133.790745][ T7189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.798364][ T7189] IPv6: NLM_F_CREATE should be set when creating new route [ 133.883938][ T7184] vlan1 (unregistering): left promiscuous mode [ 133.946062][ T7197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.964936][ T7182] batadv_slave_1: left promiscuous mode [ 133.974464][ T7197] syz.4.632[7197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.975847][ T7197] syz.4.632[7197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.193857][ T7206] xt_cgroup: path and classid specified [ 134.252536][ T7206] netlink: zone id is out of range [ 134.268202][ T7206] netlink: zone id is out of range [ 134.297262][ T7207] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 134.318879][ T7206] netlink: zone id is out of range [ 134.328344][ T7206] netlink: zone id is out of range [ 134.333855][ T7207] team0: Failed to send options change via netlink (err -105) [ 134.352812][ T7206] netlink: zone id is out of range [ 134.354571][ T7207] team0: Port device netdevsim0 added [ 134.362875][ T7206] netlink: zone id is out of range [ 134.370012][ T7206] netlink: zone id is out of range [ 134.373582][ T7208] validate_nla: 3 callbacks suppressed [ 134.373599][ T7208] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 134.376220][ T7206] netlink: zone id is out of range [ 134.397739][ T7206] netlink: zone id is out of range [ 134.398476][ T7208] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 134.543696][ T7216] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 134.552864][ T7218] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 134.568331][ T7218] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 134.590755][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 134.673000][ T7220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.680507][ T7220] IPv6: NLM_F_CREATE should be set when creating new route [ 134.785029][ T7224] xt_connbytes: Forcing CT accounting to be enabled [ 134.794536][ T7224] Cannot find add_set index 0 as target [ 134.794942][ T7226] xt_TCPMSS: Only works on TCP SYN packets [ 134.828317][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.643'. [ 135.415628][ T7249] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 135.432096][ T7253] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 135.449891][ T7253] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 135.468532][ T7252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.484751][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'. [ 135.955895][ T7277] netlink: 'syz.3.663': attribute type 30 has an invalid length. [ 135.991186][ T7281] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.665'. [ 136.109238][ T7284] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 136.170108][ T7289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.211510][ T7292] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 136.238509][ T7292] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 136.264302][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 136.656115][ T7312] vlan3: entered promiscuous mode [ 136.664315][ T7312] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 136.672877][ T7312] vlan3: entered allmulticast mode [ 136.678281][ T7312] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 136.804362][ T7321] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 136.863573][ T7323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.878695][ T7343] netlink: 'syz.0.689': attribute type 13 has an invalid length. [ 138.090960][ T7347] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 138.115331][ T7349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.440553][ T7355] __nla_validate_parse: 3 callbacks suppressed [ 138.440576][ T7355] netlink: 3 bytes leftover after parsing attributes in process `syz.4.691'. [ 138.463914][ T7355] 0ªX¹¦À: renamed from caif0 [ 138.539664][ T7355] 0ªX¹¦À: entered allmulticast mode [ 138.555946][ T7355] net_ratelimit: 2 callbacks suppressed [ 138.555966][ T7355] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 138.784694][ T7372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.785229][ T7370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.700'. [ 138.989926][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.213935][ T7388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.278352][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 139.906464][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.709'. [ 140.265582][ T7418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.464963][ T7426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.525808][ T7424] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 140.544564][ T7424] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 140.748747][ T7428] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 140.868587][ T7428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.912133][ T7449] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 140.922450][ T7449] netlink: 244 bytes leftover after parsing attributes in process `syz.0.724'. [ 141.071062][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.274704][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.306786][ T7467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.498000][ T7473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.515835][ T7522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.805931][ T7541] hsr0: entered promiscuous mode [ 142.845930][ T7539] netlink: 'syz.0.755': attribute type 20 has an invalid length. [ 143.021157][ T7547] sctp: [Deprecated]: syz.2.756 (pid 7547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.021157][ T7547] Use struct sctp_sack_info instead [ 143.029708][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.758'. [ 143.092815][ T7551] xt_l2tp: v2 tid > 0xffff: 150994944 [ 143.400148][ T7565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.755119][ T7578] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 143.803277][ T7578] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 143.884756][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 144.239018][ T7600] hsr0: entered promiscuous mode [ 144.303995][ T7599] vlan2: entered promiscuous mode [ 144.314481][ T7599] bridge0: entered promiscuous mode [ 144.347050][ T7599] team0: Port device vlan2 added [ 144.666953][ T7606] IPVS: Scheduler module ip_vs_sip not found [ 144.737942][ T7617] netlink: zone id is out of range [ 144.778402][ T7617] netlink: set zone limit has 4 unknown bytes [ 144.815839][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'. [ 144.844860][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.780'. [ 144.943505][ T7619] sctp: [Deprecated]: syz.3.779 (pid 7619) Use of int in max_burst socket option deprecated. [ 144.943505][ T7619] Use struct sctp_assoc_value instead [ 145.181081][ T7631] netlink: 3 bytes leftover after parsing attributes in process `syz.0.782'. [ 145.217171][ T7631] 0ªX¹¦À: renamed from caif0 [ 145.266830][ T7631] 0ªX¹¦À: entered allmulticast mode [ 145.283935][ T7631] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 145.622889][ T7654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.817348][ T7656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.841960][ T7662] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 146.219370][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 146.273419][ T7679] ipip0: entered promiscuous mode [ 146.352187][ T7681] netlink: 'syz.2.800': attribute type 10 has an invalid length. [ 146.383410][ T7681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.415801][ T7681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.485180][ T7687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.803'. [ 146.670292][ T7697] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 146.766021][ T7701] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.805'. [ 146.781888][ T7701] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 146.830770][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.933682][ T7707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.997828][ T7714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.112007][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.113444][ T7719] FAULT_INJECTION: forcing a failure. [ 147.113444][ T7719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.149626][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.154148][ T7719] CPU: 0 PID: 7719 Comm: syz.2.811 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 147.169380][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 147.179474][ T7719] Call Trace: [ 147.182787][ T7719] [ 147.185748][ T7719] dump_stack_lvl+0x241/0x360 [ 147.190475][ T7719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.195716][ T7719] ? __pfx__printk+0x10/0x10 [ 147.200399][ T7719] should_fail_ex+0x3b0/0x4e0 [ 147.205219][ T7719] prepare_alloc_pages+0x1da/0x5d0 [ 147.210395][ T7719] __alloc_pages_noprof+0x166/0x6c0 [ 147.215653][ T7719] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 147.221451][ T7719] alloc_pages_mpol_noprof+0x3e8/0x680 [ 147.226970][ T7719] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 147.233005][ T7719] ? alloc_pages_noprof+0xef/0x170 [ 147.238171][ T7719] get_free_pages_noprof+0xc/0x30 [ 147.239146][ T7725] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.814'. [ 147.243221][ T7719] kasan_populate_vmalloc_pte+0x38/0xe0 [ 147.243257][ T7719] __apply_to_page_range+0x8a8/0xe50 [ 147.243306][ T7719] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 147.269500][ T7719] ? __pfx___apply_to_page_range+0x10/0x10 [ 147.275360][ T7719] ? do_raw_spin_unlock+0x13c/0x8b0 [ 147.280672][ T7719] ? kmem_cache_alloc_node_noprof+0x1c4/0x320 [ 147.286765][ T7719] alloc_vmap_area+0x1d41/0x23e0 [ 147.291754][ T7719] ? __pfx_alloc_vmap_area+0x10/0x10 [ 147.298217][ T7719] ? __kasan_kmalloc+0x98/0xb0 [ 147.303176][ T7719] ? kmalloc_node_trace_noprof+0x1d3/0x300 [ 147.308988][ T7719] ? __get_vm_area_node+0x113/0x270 [ 147.314199][ T7719] ? bloom_map_alloc+0x21a/0x450 [ 147.319150][ T7719] __get_vm_area_node+0x1a9/0x270 [ 147.324193][ T7719] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 147.330098][ T7719] ? bloom_map_alloc+0x21a/0x450 [ 147.335047][ T7719] ? __lock_acquire+0x1346/0x1fd0 [ 147.340089][ T7719] ? aa_get_newest_label+0xff/0x6f0 [ 147.345329][ T7719] ? __pfx_aa_get_newest_label+0x10/0x10 [ 147.351003][ T7719] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.357354][ T7719] ? apparmor_capable+0x138/0x1b0 [ 147.362402][ T7719] bpf_map_area_alloc+0xfc/0x120 [ 147.367355][ T7719] ? bloom_map_alloc+0x21a/0x450 [ 147.372308][ T7719] bloom_map_alloc+0x21a/0x450 [ 147.377087][ T7719] map_create+0x90c/0x1200 [ 147.381526][ T7719] ? security_bpf+0x87/0xb0 [ 147.386164][ T7719] __sys_bpf+0x6d1/0x810 [ 147.390444][ T7719] ? __pfx___sys_bpf+0x10/0x10 [ 147.395262][ T7719] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.401554][ T7719] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.408697][ T7719] ? do_syscall_64+0x100/0x230 [ 147.413476][ T7719] __x64_sys_bpf+0x7c/0x90 [ 147.417922][ T7719] do_syscall_64+0xf3/0x230 [ 147.422472][ T7719] ? clear_bhb_loop+0x35/0x90 [ 147.427182][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.433175][ T7719] RIP: 0033:0x7faf4c575bd9 [ 147.437612][ T7719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.457356][ T7719] RSP: 002b:00007faf4d309048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.465807][ T7719] RAX: ffffffffffffffda RBX: 00007faf4c703f60 RCX: 00007faf4c575bd9 [ 147.473795][ T7719] RDX: 0000000000000048 RSI: 00000000200003c0 RDI: 0000000000000000 [ 147.481777][ T7719] RBP: 00007faf4d3090a0 R08: 0000000000000000 R09: 0000000000000000 [ 147.489758][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.497834][ T7719] R13: 000000000000000b R14: 00007faf4c703f60 R15: 00007ffed0290e68 [ 147.506276][ T7719] [ 147.750579][ T7734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.816'. [ 148.193656][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.824'. [ 148.219210][ T7757] bridge_slave_1: left allmulticast mode [ 148.232812][ T7757] bridge_slave_1: left promiscuous mode [ 148.261953][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.323599][ T7757] bridge_slave_0: left allmulticast mode [ 148.340694][ T7757] bridge_slave_0: left promiscuous mode [ 148.362342][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.662315][ T7774] IPv6: NLM_F_REPLACE set, but no existing node found! [ 148.890480][ T7778] __nla_validate_parse: 3 callbacks suppressed [ 148.890501][ T7778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.830'. [ 149.566418][ T7824] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 149.609996][ T7824] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.843'. [ 149.675011][ T7826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.844'. [ 149.934170][ T7835] netlink: 'syz.2.847': attribute type 13 has an invalid length. [ 149.934202][ T7840] netlink: 44 bytes leftover after parsing attributes in process `syz.4.850'. [ 150.456799][ T7872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.859'. [ 150.683072][ T7886] netlink: 'syz.2.863': attribute type 1 has an invalid length. [ 150.708922][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 150.925043][ T7845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.981983][ T7899] FAULT_INJECTION: forcing a failure. [ 150.981983][ T7899] name failslab, interval 1, probability 0, space 0, times 0 [ 151.026714][ T7899] CPU: 0 PID: 7899 Comm: syz.4.870 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 151.036760][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 151.046859][ T7899] Call Trace: [ 151.050179][ T7899] [ 151.053150][ T7899] dump_stack_lvl+0x241/0x360 [ 151.057881][ T7899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.063147][ T7899] ? __pfx__printk+0x10/0x10 [ 151.067786][ T7899] ? __pfx___might_resched+0x10/0x10 [ 151.073136][ T7899] should_fail_ex+0x3b0/0x4e0 [ 151.077875][ T7899] should_failslab+0x9/0x20 [ 151.082605][ T7899] kmalloc_node_track_caller_noprof+0xda/0x440 [ 151.088816][ T7899] ? cpuset_write_resmask+0x214/0x2b00 [ 151.094339][ T7899] kmemdup_noprof+0x2a/0x60 [ 151.099164][ T7899] cpuset_write_resmask+0x214/0x2b00 [ 151.106269][ T7899] ? mark_lock+0x9a/0x350 [ 151.110662][ T7899] ? __lock_acquire+0x1346/0x1fd0 [ 151.115776][ T7899] ? __pfx_cpuset_write_resmask+0x10/0x10 [ 151.121577][ T7899] ? __pfx_lock_acquire+0x10/0x10 [ 151.126663][ T7899] ? __pfx_cpuset_write_resmask+0x10/0x10 [ 151.132452][ T7899] cgroup_file_write+0x2ce/0x6d0 [ 151.137453][ T7899] ? kernfs_fop_write_iter+0x1eb/0x500 [ 151.142971][ T7899] ? __pfx_cgroup_file_write+0x10/0x10 [ 151.148480][ T7899] ? __virt_addr_valid+0x183/0x520 [ 151.153663][ T7899] ? __pfx_cgroup_file_write+0x10/0x10 [ 151.159169][ T7899] kernfs_fop_write_iter+0x3a1/0x500 [ 151.164525][ T7899] vfs_write+0xa72/0xc90 [ 151.168836][ T7899] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 151.174698][ T7899] ? __pfx_vfs_write+0x10/0x10 [ 151.179546][ T7899] ksys_write+0x1a0/0x2c0 [ 151.183947][ T7899] ? __pfx_ksys_write+0x10/0x10 [ 151.188861][ T7899] ? do_syscall_64+0x100/0x230 [ 151.193762][ T7899] ? do_syscall_64+0xb6/0x230 [ 151.198578][ T7899] do_syscall_64+0xf3/0x230 [ 151.203172][ T7899] ? clear_bhb_loop+0x35/0x90 [ 151.207907][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.214460][ T7899] RIP: 0033:0x7fcb14575bd9 [ 151.219103][ T7899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.238762][ T7899] RSP: 002b:00007fcb15275048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.247233][ T7899] RAX: ffffffffffffffda RBX: 00007fcb14703f60 RCX: 00007fcb14575bd9 [ 151.255257][ T7899] RDX: 000000000000006a RSI: 00000000200000c0 RDI: 0000000000000004 [ 151.263278][ T7899] RBP: 00007fcb152750a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.271294][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.279316][ T7899] R13: 000000000000000b R14: 00007fcb14703f60 R15: 00007ffdc7a4eec8 [ 151.287382][ T7899] [ 151.390034][ T7913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.873'. [ 151.614590][ T7922] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 151.776059][ T7927] hsr0: entered promiscuous mode [ 152.291904][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 152.314100][ T7954] tipc: Started in network mode [ 152.319209][ T7954] tipc: Node identity , cluster identity 8 [ 152.329099][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 152.436397][ T7958] netlink: 528 bytes leftover after parsing attributes in process `syz.0.887'. [ 153.013800][ T7994] FAULT_INJECTION: forcing a failure. [ 153.013800][ T7994] name failslab, interval 1, probability 0, space 0, times 0 [ 153.058294][ T7994] CPU: 1 PID: 7994 Comm: syz.3.896 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 153.068351][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 153.078445][ T7994] Call Trace: [ 153.081757][ T7994] [ 153.084729][ T7994] dump_stack_lvl+0x241/0x360 [ 153.089451][ T7994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.096037][ T7994] ? __pfx__printk+0x10/0x10 [ 153.101203][ T7994] ? ref_tracker_alloc+0x332/0x490 [ 153.106379][ T7994] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 153.111918][ T7994] should_fail_ex+0x3b0/0x4e0 [ 153.116651][ T7994] ? skb_clone+0x20c/0x390 [ 153.121125][ T7994] should_failslab+0x9/0x20 [ 153.125667][ T7994] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 153.131100][ T7994] skb_clone+0x20c/0x390 [ 153.135402][ T7994] __netlink_deliver_tap+0x3cc/0x7c0 [ 153.140748][ T7994] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.145981][ T7994] netlink_deliver_tap+0x19d/0x1b0 [ 153.151134][ T7994] netlink_sendskb+0x68/0x140 [ 153.155852][ T7994] netlink_unicast+0x39d/0x990 [ 153.160641][ T7994] ? __asan_memcpy+0x40/0x70 [ 153.165249][ T7994] ? __pfx_netlink_unicast+0x10/0x10 [ 153.170576][ T7994] netlink_rcv_skb+0x262/0x430 [ 153.175355][ T7994] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.180827][ T7994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.186146][ T7994] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.191446][ T7994] netlink_unicast+0x7f0/0x990 [ 153.196231][ T7994] ? __pfx_netlink_unicast+0x10/0x10 [ 153.201635][ T7994] ? __virt_addr_valid+0x183/0x520 [ 153.206943][ T7994] ? __check_object_size+0x49c/0x900 [ 153.212245][ T7994] ? bpf_lsm_netlink_send+0x9/0x10 [ 153.217376][ T7994] netlink_sendmsg+0x8e4/0xcb0 [ 153.222170][ T7994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.227468][ T7994] ? __import_iovec+0x536/0x820 [ 153.232325][ T7994] ? aa_sock_msg_perm+0x91/0x160 [ 153.237282][ T7994] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 153.242576][ T7994] ? security_socket_sendmsg+0x87/0xb0 [ 153.248055][ T7994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.253350][ T7994] __sock_sendmsg+0x221/0x270 [ 153.258072][ T7994] ____sys_sendmsg+0x525/0x7d0 [ 153.262861][ T7994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.268181][ T7994] __sys_sendmmsg+0x3b2/0x740 [ 153.272882][ T7994] ? __pfx___sys_sendmmsg+0x10/0x10 [ 153.278130][ T7994] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 153.284040][ T7994] ? ksys_write+0x23e/0x2c0 [ 153.288557][ T7994] ? __pfx_lock_release+0x10/0x10 [ 153.293596][ T7994] ? vfs_write+0x7c4/0xc90 [ 153.298041][ T7994] ? __mutex_unlock_slowpath+0x21d/0x750 [ 153.303689][ T7994] ? __pfx_vfs_write+0x10/0x10 [ 153.308487][ T7994] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.314478][ T7994] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.320818][ T7994] ? do_syscall_64+0x100/0x230 [ 153.325604][ T7994] __x64_sys_sendmmsg+0xa0/0xb0 [ 153.330484][ T7994] do_syscall_64+0xf3/0x230 [ 153.335004][ T7994] ? clear_bhb_loop+0x35/0x90 [ 153.339707][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.345611][ T7994] RIP: 0033:0x7f9d9cd75bd9 [ 153.350045][ T7994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.369748][ T7994] RSP: 002b:00007f9d9dc31048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.378178][ T7994] RAX: ffffffffffffffda RBX: 00007f9d9cf03f60 RCX: 00007f9d9cd75bd9 [ 153.386181][ T7994] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000006 [ 153.394163][ T7994] RBP: 00007f9d9dc310a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.402851][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.411009][ T7994] R13: 000000000000000b R14: 00007f9d9cf03f60 R15: 00007ffefb16b0d8 [ 153.419008][ T7994] [ 153.488602][ T7998] netlink: 'syz.1.897': attribute type 9 has an invalid length. [ 153.551216][ T7998] bond0: entered promiscuous mode [ 153.564169][ T7998] bond_slave_0: entered promiscuous mode [ 153.589357][ T7998] bond_slave_1: entered promiscuous mode [ 153.608032][ T7998] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.654076][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.670318][ T7998] bond0: left promiscuous mode [ 153.677325][ T7998] bond_slave_0: left promiscuous mode [ 153.683113][ T7998] bond_slave_1: left promiscuous mode [ 153.766437][ T8009] x_tables: ip_tables: osf match: only valid for protocol 6 [ 153.793536][ T8011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.824848][ T8011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.936391][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.962894][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.043628][ T8020] __nla_validate_parse: 3 callbacks suppressed [ 154.043649][ T8020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.905'. [ 154.499227][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.913'. [ 154.568703][ T137] ================================================================== [ 154.576828][ T137] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 154.584935][ T137] Read of size 8 at addr ffff888011e220b8 by task kworker/u8:5/137 [ 154.592858][ T137] [ 154.595301][ T137] CPU: 0 PID: 137 Comm: kworker/u8:5 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 154.605743][ T137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 154.615834][ T137] Workqueue: l2tp l2tp_tunnel_del_work [ 154.621344][ T137] Call Trace: [ 154.624649][ T137] [ 154.627607][ T137] dump_stack_lvl+0x241/0x360 [ 154.632322][ T137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.637564][ T137] ? __pfx__printk+0x10/0x10 [ 154.642186][ T137] ? _printk+0xd5/0x120 [ 154.646384][ T137] ? __virt_addr_valid+0x183/0x520 [ 154.651534][ T137] ? __virt_addr_valid+0x183/0x520 [ 154.656689][ T137] print_report+0x169/0x550 [ 154.661236][ T137] ? __virt_addr_valid+0x183/0x520 [ 154.666475][ T137] ? __virt_addr_valid+0x183/0x520 [ 154.671623][ T137] ? __virt_addr_valid+0x44e/0x520 [ 154.676782][ T137] ? __phys_addr+0xba/0x170 [ 154.681328][ T137] ? l2tp_tunnel_del_work+0xe5/0x330 [ 154.686657][ T137] kasan_report+0x143/0x180 [ 154.691229][ T137] ? l2tp_tunnel_del_work+0xe5/0x330 [ 154.696646][ T137] l2tp_tunnel_del_work+0xe5/0x330 [ 154.702224][ T137] ? process_scheduled_works+0x945/0x1830 [ 154.709974][ T137] process_scheduled_works+0xa2c/0x1830 [ 154.715563][ T137] ? __pfx_process_scheduled_works+0x10/0x10 [ 154.721597][ T137] ? assign_work+0x364/0x3d0 [ 154.726280][ T137] worker_thread+0x86d/0xd50 [ 154.730897][ T137] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 154.736807][ T137] ? __kthread_parkme+0x169/0x1d0 [ 154.741852][ T137] ? __pfx_worker_thread+0x10/0x10 [ 154.747004][ T137] kthread+0x2f0/0x390 [ 154.751081][ T137] ? __pfx_worker_thread+0x10/0x10 [ 154.756194][ T137] ? __pfx_kthread+0x10/0x10 [ 154.760878][ T137] ret_from_fork+0x4b/0x80 [ 154.765332][ T137] ? __pfx_kthread+0x10/0x10 [ 154.769933][ T137] ret_from_fork_asm+0x1a/0x30 [ 154.774723][ T137] [ 154.777754][ T137] [ 154.780097][ T137] Allocated by task 8038: [ 154.784870][ T137] kasan_save_track+0x3f/0x80 [ 154.789555][ T137] __kasan_kmalloc+0x98/0xb0 [ 154.794150][ T137] __kmalloc_noprof+0x1f9/0x400 [ 154.799031][ T137] l2tp_session_create+0x3b/0xc20 [ 154.804622][ T137] pppol2tp_connect+0xca3/0x17a0 [ 154.809577][ T137] __sys_connect+0x2df/0x310 [ 154.814345][ T137] __x64_sys_connect+0x7a/0x90 [ 154.819154][ T137] do_syscall_64+0xf3/0x230 [ 154.823665][ T137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.829601][ T137] [ 154.831938][ T137] Freed by task 24: [ 154.835769][ T137] kasan_save_track+0x3f/0x80 [ 154.840459][ T137] kasan_save_free_info+0x40/0x50 [ 154.845505][ T137] poison_slab_object+0xe0/0x150 [ 154.850444][ T137] __kasan_slab_free+0x37/0x60 [ 154.855209][ T137] kfree+0x149/0x360 [ 154.859118][ T137] __sk_destruct+0x58/0x5f0 [ 154.863624][ T137] rcu_core+0xafd/0x1830 [ 154.867880][ T137] handle_softirqs+0x2c4/0x970 [ 154.872648][ T137] run_ksoftirqd+0xca/0x130 [ 154.877173][ T137] smpboot_thread_fn+0x544/0xa30 [ 154.882128][ T137] kthread+0x2f0/0x390 [ 154.886199][ T137] ret_from_fork+0x4b/0x80 [ 154.890619][ T137] ret_from_fork_asm+0x1a/0x30 [ 154.895404][ T137] [ 154.897732][ T137] Last potentially related work creation: [ 154.903555][ T137] kasan_save_stack+0x3f/0x60 [ 154.909112][ T137] __kasan_record_aux_stack+0xac/0xc0 [ 154.914686][ T137] call_rcu+0x167/0xa70 [ 154.918850][ T137] pppol2tp_release+0x24b/0x350 [ 154.923720][ T137] sock_close+0xbc/0x240 [ 154.927971][ T137] __fput+0x24a/0x8a0 [ 154.931969][ T137] task_work_run+0x24f/0x310 [ 154.936575][ T137] syscall_exit_to_user_mode+0x168/0x360 [ 154.942225][ T137] do_syscall_64+0x100/0x230 [ 154.946823][ T137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.952822][ T137] [ 154.955143][ T137] The buggy address belongs to the object at ffff888011e22000 [ 154.955143][ T137] which belongs to the cache kmalloc-1k of size 1024 [ 154.969196][ T137] The buggy address is located 184 bytes inside of [ 154.969196][ T137] freed 1024-byte region [ffff888011e22000, ffff888011e22400) [ 154.983169][ T137] [ 154.985501][ T137] The buggy address belongs to the physical page: [ 154.991922][ T137] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e20 [ 155.000687][ T137] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 155.009206][ T137] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 155.016800][ T137] page_type: 0xffffefff(slab) [ 155.021480][ T137] raw: 00fff00000000040 ffff888015041dc0 ffffea0000afcc00 dead000000000002 [ 155.030067][ T137] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 155.038665][ T137] head: 00fff00000000040 ffff888015041dc0 ffffea0000afcc00 dead000000000002 [ 155.047448][ T137] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 155.056229][ T137] head: 00fff00000000003 ffffea0000478801 ffffffffffffffff 0000000000000000 [ 155.064918][ T137] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 155.073586][ T137] page dumped because: kasan: bad access detected [ 155.080018][ T137] page_owner tracks the page as allocated [ 155.085740][ T137] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5092, tgid 5092 (syz-executor), ts 79474504502, free_ts 79456391463 [ 155.108513][ T137] post_alloc_hook+0x1f3/0x230 [ 155.113288][ T137] get_page_from_freelist+0x2e4c/0x2f10 [ 155.118864][ T137] __alloc_pages_noprof+0x256/0x6c0 [ 155.124074][ T137] alloc_slab_page+0x5f/0x120 [ 155.128766][ T137] allocate_slab+0x5a/0x2f0 [ 155.133294][ T137] ___slab_alloc+0xcd1/0x14b0 [ 155.137973][ T137] __slab_alloc+0x58/0xa0 [ 155.142306][ T137] __kmalloc_node_noprof+0x286/0x440 [ 155.147604][ T137] qdisc_alloc+0x97/0xa80 [ 155.151942][ T137] qdisc_create_dflt+0x62/0x4b0 [ 155.156810][ T137] dev_activate+0x3c0/0x1240 [ 155.161403][ T137] __dev_open+0x352/0x450 [ 155.165730][ T137] __dev_change_flags+0x1e2/0x6f0 [ 155.170756][ T137] dev_change_flags+0x8b/0x1a0 [ 155.175521][ T137] do_setlink+0xccd/0x41f0 [ 155.179939][ T137] rtnl_newlink+0x180d/0x20a0 [ 155.184625][ T137] page last free pid 5104 tgid 5104 stack trace: [ 155.190958][ T137] free_unref_page+0xd22/0xea0 [ 155.195746][ T137] __slab_free+0x31b/0x3d0 [ 155.200165][ T137] qlist_free_all+0x9e/0x140 [ 155.205100][ T137] kasan_quarantine_reduce+0x14f/0x170 [ 155.210993][ T137] __kasan_slab_alloc+0x23/0x80 [ 155.215855][ T137] kmalloc_trace_noprof+0x132/0x2c0 [ 155.221095][ T137] netdevice_event+0x37d/0x950 [ 155.225864][ T137] notifier_call_chain+0x19f/0x3e0 [ 155.230993][ T137] dev_set_mac_address+0x3d9/0x510 [ 155.236152][ T137] dev_set_mac_address_user+0x31/0x50 [ 155.241549][ T137] do_setlink+0x8b3/0x41f0 [ 155.245966][ T137] rtnl_newlink+0x180d/0x20a0 [ 155.250650][ T137] rtnetlink_rcv_msg+0x89b/0x1180 [ 155.255673][ T137] netlink_rcv_skb+0x1e3/0x430 [ 155.260437][ T137] netlink_unicast+0x7f0/0x990 [ 155.265197][ T137] netlink_sendmsg+0x8e4/0xcb0 [ 155.269964][ T137] [ 155.272281][ T137] Memory state around the buggy address: [ 155.277923][ T137] ffff888011e21f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 155.285994][ T137] ffff888011e22000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.294052][ T137] >ffff888011e22080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.302122][ T137] ^ [ 155.308009][ T137] ffff888011e22100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.316069][ T137] ffff888011e22180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.324158][ T137] ================================================================== [ 155.332276][ T137] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 155.339491][ T137] CPU: 0 PID: 137 Comm: kworker/u8:5 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 155.349673][ T137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 155.359750][ T137] Workqueue: l2tp l2tp_tunnel_del_work [ 155.365226][ T137] Call Trace: [ 155.368833][ T137] [ 155.371853][ T137] dump_stack_lvl+0x241/0x360 [ 155.376563][ T137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.381792][ T137] ? __pfx__printk+0x10/0x10 [ 155.386423][ T137] ? vscnprintf+0x5d/0x90 [ 155.390801][ T137] panic+0x349/0x860 [ 155.394772][ T137] ? check_panic_on_warn+0x21/0xb0 [ 155.400128][ T137] ? __pfx_panic+0x10/0x10 [ 155.404567][ T137] ? mark_lock+0x9a/0x350 [ 155.408933][ T137] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 155.414840][ T137] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 155.420741][ T137] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.427085][ T137] ? print_report+0x502/0x550 [ 155.431792][ T137] check_panic_on_warn+0x86/0xb0 [ 155.436738][ T137] ? l2tp_tunnel_del_work+0xe5/0x330 [ 155.442024][ T137] end_report+0x77/0x160 [ 155.446278][ T137] kasan_report+0x154/0x180 [ 155.450798][ T137] ? l2tp_tunnel_del_work+0xe5/0x330 [ 155.456112][ T137] l2tp_tunnel_del_work+0xe5/0x330 [ 155.461230][ T137] ? process_scheduled_works+0x945/0x1830 [ 155.466950][ T137] process_scheduled_works+0xa2c/0x1830 [ 155.472508][ T137] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.478505][ T137] ? assign_work+0x364/0x3d0 [ 155.483131][ T137] worker_thread+0x86d/0xd50 [ 155.487737][ T137] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 155.493637][ T137] ? __kthread_parkme+0x169/0x1d0 [ 155.498662][ T137] ? __pfx_worker_thread+0x10/0x10 [ 155.503870][ T137] kthread+0x2f0/0x390 [ 155.507959][ T137] ? __pfx_worker_thread+0x10/0x10 [ 155.513101][ T137] ? __pfx_kthread+0x10/0x10 [ 155.517704][ T137] ret_from_fork+0x4b/0x80 [ 155.522133][ T137] ? __pfx_kthread+0x10/0x10 [ 155.526740][ T137] ret_from_fork_asm+0x1a/0x30 [ 155.531561][ T137] [ 155.534853][ T137] Kernel Offset: disabled [ 155.539179][ T137] Rebooting in 86400 seconds..