last executing test programs: 4.363237769s ago: executing program 2 (id=4209): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002e00)=""/4095, 0xfff}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x103}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4076, 0xfec}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000600)=""/135, 0x87}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0xa}, {{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000000c0)=""/139, 0x8b}, {&(0x7f00000006c0)=""/126, 0x7e}, {&(0x7f0000000a00)=""/248, 0xf8}, {&(0x7f0000000b00)=""/167, 0xa7}, {&(0x7f0000000bc0)=""/168, 0xa8}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000c80)=""/77, 0x4d}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0xa, &(0x7f00000002c0)=""/44, 0x2c}, 0xfffffffa}], 0x9, 0x40010020, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x140) writev(r1, &(0x7f0000001740)=[{&(0x7f0000001180)="ab320f3c8e8f82c22b2c131138d7c13e517ac263fbfcfeef48843c59d3cae002f54de3049d9f205b03334e2db7efeb478a57b22df406aa8911ddc4c7b7437116200c6c9031717b2f11da64c60d22252b4dc87412209e595df6f5e551b92fffe1abff0e02dac9eed8a719b09cb3d7f23c77b83aeadee999ca98924a34fe67e379463a7020ac2298175b9729597492e2d76cfa09f46ef0b187bb32e4318957d970f93fb85dcd535fd2b3e898f3a7", 0xad}, {&(0x7f0000001240)="674e6d48f778733268e7097ad49640b1eb40d5eaf0cb55fe40fa9f611880af66d134fcff92644fab995aab1964d3e3ea4c00a76ad3c29170b8329dcdf7fbfbc6d16b34a42c323c08e41b07370784f356af7b6877834d0f60c74ad5fa4ec6f03a17c077768e4bb6c4c33ccd87b607c69e75c70b1153327f77", 0x78}, {&(0x7f00000012c0)="3d10c3bef178f0df4ffb4f7eb28886f3c4a8dde6858231c0a1dd619eecb5a4cfbceb0546db71e02d1b6d724d72f29fd23d10dcfc253d21770dcaec8d465d1dd0653d250f213c2dff89998e961b4fb7f98700f0431cb4606e3ebb6ce0b868d68f189dacd4d017489e100adf65f9a24f82b5cbe78af45a142474", 0x79}, {&(0x7f0000001340)="19cb357fab8a8a528e60f32fab89b5c0864beb1eb7dd625543a5e0836bcc687eddfd5ce0d25a6d687a81c8a48ce036e1b6b5adfcb30bc850e2d8d6457aa5c17091f1c49b1cc6366d83f2c17365f3ec93b2c95d0e957004265be7", 0x5a}, {&(0x7f00000013c0)="5b0d739ddfcddbaa775d57ac6de4a109c815452fd288d9575df7351d8bf9a08588d11843a2ddd2d8e26cf13c10f7121253008e4426dae38845fa8b1883dad442055f59213ddbf7a14f93a4f6c8a9b9bb50", 0x51}, {&(0x7f0000001440)="6a2eacab4b99b2f20d811cbbaaef35789f05b00a15d1", 0x16}, {&(0x7f0000001480)="00857209c9dcd6cb9a76a3301e28056f1f329c29baea9a4f9ee5b176eb37ce73678d634565f6f2952c9e465b0ec2f5dd83d9cf82860f76d407158fd8f113d8bdcf264512f624500eb18739db896bfe8e6ff60a75788d679ffb87d18fd09fcdfbe0cb61546532176f4791df3a3ee7afb5f1e950ae794d3c4dde077045ee9fbddce2cbb46b57492bc3d5f524739fa766c3aa1e41b852be469b6251b5e56a7c8d", 0x9f}, {&(0x7f0000001540)="d3c9ce40db85e947af41b80f43ed43cf91d41e13862a71e9f2d80c5e075188f832ead87db19e4ef736acc6573d3db861e5d5e4714677c3a8db8441c05c84b87e007541683d3d4512fe2642e9537230213c095f8f24604029fa723cd4c9b284f8ab0661b4f8b46d8c6712db6f9015ab12d8a489419aec44d78767ee10a0f54e6f2eeca76d722142628e8e5d71ba0034086bc4e452ab9765e9894ba1e934d50a9e4742d0f80216a645266cd41651f934dcf131a03c826ede17c45eeaaaa82c8ef890980c93dd1f998287c1d2ec542e6a1f87cd35", 0xd3}, {&(0x7f0000001640)="fe5f2e8b0f0ffef85401f4301472ef8cd094d358d0e3fad10157687ac570156043817faec62e085af256a8f679d80931b91a2e173bad226e2cc09f3c48ac3d3866bba21ca933900c91cfb0c7b5d4c9342624f5ba28ef37de97039ef45a696e75396abd6d1a494affb01d54d169963ba3855918dfaa9ca7e76109da0ee8df470b19ef8a5c7eef5737133aea514f8e62ad399786f2a8595fc2520a807d1fa556d587456fd304187f8727be65d932ce6774d0cd1d81f207937ac990748d45c9ab4e19e4b22132533963b9ef599921fabdda43103523fd94f7b5f2c5493677489807c6b15af78621b6517fa6e6ba0e", 0xed}], 0x9) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'syztnl1\x00', 0x0, 0x0, 0x73, 0xf, 0xfffffff9, 0x40, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x10, 0x9, 0x7f}}) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000001140)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 4.357761531s ago: executing program 0 (id=4210): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000140001800d0001007564700822f2f26788"], 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd478, 0x25}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc0}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44891}, 0x4000000) r4 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r5, &(0x7f0000001280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r11, @ANYRES32=r10], 0x44}}, 0x0) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) 3.778740059s ago: executing program 0 (id=4214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) 3.567577017s ago: executing program 0 (id=4217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x34}, 0xe) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r6, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x1, &(0x7f00000000c0)='\x00', 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6d}}}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x48}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa05000300020000002400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1.356133807s ago: executing program 0 (id=4218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0xeed0b46ffaee1393, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x12010}}, 0x20}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000400000004000000dddf000014000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000006d3a43b86aa5b6577b83", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110af000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000063110800000000008510000002000000850000000500000095000000000000000000000000000000609e5b0d9f01b39790feb427c6027e1c3bb2756563de551632ef02671ea988b429de5badd21b02925445cc"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r1, 0x13, 0x8, 0x2}) 1.352776503s ago: executing program 1 (id=4220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x2}, 0x8}], 0x3, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1f}, 0x90) 1.35171445s ago: executing program 4 (id=4221): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r0, 0xc08ba000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r0, 0xe93f6000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 1.230586452s ago: executing program 2 (id=4222): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r10 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x1b, 0xdb, [@multicast1, @rand_addr=0x64010102, @local, @remote, @multicast1, @private=0xa010100]}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x60}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) syz_emit_ethernet(0x147, &(0x7f0000000140)={@random="32924cf23ec9", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x111, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}, {"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"}}}}}}}, 0x0) 1.203025822s ago: executing program 0 (id=4223): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x1c, 0x3a, 0xff, @dev, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x4, 0x3, @loopback, 0x5, 0x1, 0x0, 0x5}}}}}}, 0x0) recvmsg(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x4140}}}}}}]}, 0x48}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r5, 0x10, 0x70b929, 0x25dfdbfc, {{}, {}, {0x13, 0x19, {0x1, 0x7271, 0x800, 0xd}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1.152635575s ago: executing program 1 (id=4224): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xf}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0xffffffffffffff3a, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x48003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @remote}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@loopback, 0x3d, r3}) (async) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@loopback, 0x3d, r3}) 1.086464968s ago: executing program 4 (id=4225): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) close(r3) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r1, 0x1) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_delroute={0x24, 0x19, 0x2, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000}, [@RTA_PRIORITY={0x8, 0x6, 0x3aa}]}, 0x24}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000200)={r10}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10) close(r7) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x80}}, 0x7, 0x4}, 0x90) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x30}}, 0x4810) 1.085789778s ago: executing program 3 (id=4226): syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff1704345adbde0800450000300000000000019078ac1e0001acfe13aa05009078e00000e04500000000000000001100000200000000000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000000000000080005000000000008000400ac14140008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002000002"], 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x2}, {0x0, 0xe}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x2}, {0x0, 0xe}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYRESOCT=r3], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB='\x00', @ANYRES32=r6, @ANYBLOB="060006000000000008000100", @ANYRES32=r8, @ANYBLOB="14000c00200100"/20], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB='\x00', @ANYRES32=r6, @ANYBLOB="060006000000000008000100", @ANYRES32=r8, @ANYBLOB="14000c00200100"/20], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) sendmsg$can_bcm(r6, 0x0, 0x4000085) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000080)=0x80000001, 0x4) r9 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @ipv4={'\x00', '\xff\xff', @loopback}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, &(0x7f0000000400)={0x1, 0x4, [0x9b1, 0xa1, 0x96c, 0xcb3]}) (async) syz_emit_ethernet(0x42, &(0x7f0000000380)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @ipv4={'\x00', '\xff\xff', @loopback}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, &(0x7f0000000400)={0x1, 0x4, [0x9b1, 0xa1, 0x96c, 0xcb3]}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 887.534635ms ago: executing program 2 (id=4227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x9}]}, @generic='V']}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x3fb, 0x712, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x6, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x6, 0x2}, {0xc, 0x1}, {0x0, 0x4}, {0x8}]}, @struct={0xe, 0x2, 0x0, 0x4, 0x0, 0x33a7, [{0x2, 0x1, 0x1}, {0x9, 0x1, 0x4}]}]}, {0x0, [0x30, 0x0, 0x2e, 0x61]}}, &(0x7f0000000380)=""/88, 0x76, 0x58, 0x1, 0x4, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x100, 0x80000001, 0xb, 0x20000, r2, 0x1, '\x00', r3, r5, 0x4, 0x5, 0x5}, 0x50) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000006801088054000780080006006e000000080005000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500946fa5"], 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c00)={0x13ac, 0x1c, 0x100, 0x70bd2b, 0x25dfdbfd, {0x14}, [@generic="1b1806b9bc3737e73d6711ddaf9cc335b9c08a7bfb3b1e47a79b137f5618de4767caaa62c89e3d13cea0d6014e3106f00643c2e343a93c56e7c30edec3715354f414daaa5f067bf1424c4c", @typed={0x4, 0x12c}, @generic="48cc390570c2a526655e0d5117227c9a5739a6f9a4b29239178a1d765687ef7e3aec89c7cd2b80c9d9de15c7333a9a01f98698ef8ac31c511ea0e66944f14848dba237a33505d60a66ef5af27f6ff7079246ce9b3f186999ce758c701a8a697088a08384c9b1f89604b11f7caeb6607cdbf4b1c079ce3a948c230799896869336fe2e270e81f2ba736be8120", @typed={0x85, 0x11b, 0x0, 0x0, @binary="d199a4b7ad59a9a62a910d8841ca65a16b7da979aae27b31680fb7b4379be2b1d05ca5d77521dce1e562d76956d767e8bc22cbcf70e64fa7073e0c45025b38a69b6823400b5364e10e4ef836b856f83356ed4b8fda1178fb5497dbf3050a86208df0e91f891996db86049be797c645e760fc4549d50b11579e242094354b6e808c"}, @typed={0x8, 0xd2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x1bf, 0x100, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @u32=0xd}, @nested={0x4, 0xc0}, @typed={0x8, 0x94, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x10f}, @generic="8c9a76a172319586163ad01e5edd337c0cfcc4b58f3f14bc3b37c6512f3f2147a65931a458dc438000aa11bd81e2403ce1fbd924c84133646995825e49978686f9e20e32e565479f22e37c6a587b50937b8efeb5f7024682284f2cfdb6a3e9c01494ee8bc52f196aafef0068546d0abb479724b701bd62e31957b542294c16b2add0527de2f70c0cc34357c5d827879af64677493955a8214240227e44ece4e98a676f7c6c875edfad361fc9ca129f0cbd0c7e6b3f7f9989a7ecdce97b8f5bb978c690c9466e", @generic="68e12ec80a51126ad704532546b23312c438bb534828b629768490ed72ff1a3cdf69b740e79aeefd53e11a857fa85ae7f20f4b872469de1bb34b3d951fef8e3fbecbe590e00724c785210f91fcf4b1d834dbb788a2cf7cc5e89ffb59c445eac7a1262143afaf194e38a0003f98f5ad19ce209e2e9c6ca9ad6a9b5da891f22cfb6e47a1dbf84de702d5d7c0f35f348234ae068303e2e4bac6eb71e126df22722a5e0dad1e2f3a724ebe1edc3fa4bdb9eb8089a52001c6b461712932404387c78585d45fbcd32f92e416df0a311a92efbd94", @typed={0xc, 0x3e, 0x0, 0x0, @u64=0xffffffff00000001}]}, @nested={0x1063, 0xb8, 0x0, 0x1, [@generic="09d66503edcb5a77a2f7d591bcfed9277955a0d4b4cc5d6cbd4c7908645f58cb4d5124e8eef0dba03bbc0cf71a72c07d042953390dc89ba42422bd6d9bc895acb576a3", @typed={0x8, 0x71, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @nested={0x4, 0x28}, @typed={0x9, 0x117, 0x0, 0x0, @str=']:&,\x00'}, @nested={0x4, 0xbe}]}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}]}, 0x13ac}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 843.995316ms ago: executing program 3 (id=4228): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d0191f883355f933a738000000000000000f01000000de0000"], 0x0, 0x36}, 0x28) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) close(0x3) r3 = socket(0xa, 0x3, 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100)=0x80, 0x4) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a000200000000001a5300000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 769.255006ms ago: executing program 1 (id=4229): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) readv(r0, &(0x7f0000002100)=[{&(0x7f0000000040)=""/153, 0x99}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000002140)={{}, [@bcast, @bcast, @netrom, @null, @bcast, @null, @rose, @netrom]}, &(0x7f00000021c0)=0x48) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000002200)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0xc, 0x1, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x6c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5567, 0x38}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x44011) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000002400)={0x0, 0xe6a}, 0x8) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000002440)=0x8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000002980)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002940)={&(0x7f0000002540)={0x3d0, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x31}}}}, [@NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x0, 0x9, 0x8, 0xfff9, 0xa, 0x4]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x48, 0x5, 0x36, 0x12, 0x6, 0x12, 0xb, 0x60, 0x24, 0x3, 0x2, 0x4, 0x5, 0x5, 0x0, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0xc5, 0x200, 0x401, 0x101, 0x400, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x9}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x4}, {0x3, 0x9}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x24, 0xb, 0x36, 0x18, 0x6c, 0x30, 0x0, 0x0, 0x67, 0x9, 0x0, 0x12, 0x6, 0x2, 0xc, 0x6, 0x60, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2d, 0x1ff, 0x1000, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x5c, 0x1, 0x401, 0x3, 0x1, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x2, 0x4, 0x0, 0x5b, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4e4, 0x0, 0xfffc, 0xb, 0x0, 0x9, 0xc00]}}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x40, 0x0, 0x21c, 0xcc48, 0x0, 0x4, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x642f, 0x5, 0x8, 0xf801, 0x2853, 0x1, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x0, 0x0, 0xfff9, 0xa1, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x6}, {0x4, 0xa}, {}, {0x0, 0x2}, {0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffd, 0x4, 0x6, 0x6, 0x1, 0x42e5, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0xe, 0x8de, 0x1, 0x0, 0x2, 0xd93f]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x2}, {0x2, 0x2}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0x5}, {0x3, 0x4}, {0x7}, {0x6, 0x7}, {0x3, 0x2}, {0x7, 0x4}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x2, 0x8, 0x5, 0x10, 0x62e6, 0x1, 0x7f]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0xa}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x3, 0x1}, {0x3, 0x6}, {0x6, 0xa}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x3, 0x1}, {0x6, 0x1}, {}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x8}, {0x3, 0x7}, {0x6, 0x9}, {0x1}, {0x5, 0x4}, {0x2, 0x3}, {0x7}, {0x7, 0x3}, {0x3, 0x8}, {0x4, 0x5}, {}, {0x2, 0x8}, {0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x9}, {0x2, 0x1}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0x7}, {0x0, 0xa}, {0x3, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x2, 0x7}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x9}, {0x0, 0x8}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x18, 0x6, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x2, 0x3, 0x2, 0xe, 0xffff, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1, 0x8, 0x6, 0x9, 0x7, 0x2, 0x1]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc51d, 0x2, 0xa8, 0x2, 0x4, 0x9, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x4, 0x2}, {0x6}, {0x1}, {0x6, 0x7}, {0x5, 0x5}, {0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x5, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6d, 0x4, 0x5, 0x18, 0x16, 0x18, 0x1b, 0xdd827201680fd5, 0x12, 0x1b, 0x18, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x48, 0x5, 0x30, 0x30, 0x1, 0x3, 0x16, 0x30, 0x18, 0x4, 0x5, 0x1, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0xd}, {0x4, 0x5}, {0x2, 0x4}, {0x6, 0xa}, {0x1}, {0x7, 0x9}, {0x3, 0x7}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0x5}, {0x7, 0x9}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x5, 0xa}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x3}, {0x4, 0x8}, {0x4, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x4}, {0x2, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x0, 0x2}, {0x2, 0x4}, {0x5}, {0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x8}, {0x6, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x4}, {0x5, 0x4}, {0x4, 0x9}, {0x1, 0x9}, {0x6, 0x5}, {}, {0x6, 0x4}, {0x5, 0xa}, {0x4}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x7, 0x2}, {0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x5}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x7}, {0x7, 0xa}, {0x4}, {0x6, 0x5}, {0x5, 0x8}, {0x4, 0x5}, {0x3, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0x9}, {0x3}, {}, {0x2, 0x1}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x3}, {0x6, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x81}, 0x40000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002bc0)={'erspan0\x00', &(0x7f0000002b40)={'erspan0\x00', 0x0, 0x700, 0x20, 0x9, 0x6c7, {{0x10, 0x4, 0x2, 0x3c, 0x40, 0x67, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x48, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x5}]}, @generic={0x7, 0xa, "e6abfa67d0615ccd"}, @generic={0x86, 0xe, "e0e8fa1a3086a1cefbcf0e54"}]}}}}}) (async, rerun: 64) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002c00), 0x4) (async, rerun: 64) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002ec0)=@bpf_ext={0x1c, 0x7, &(0x7f0000002cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8001}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000002d00)='GPL\x00', 0x7, 0x93, &(0x7f0000002d40)=""/147, 0x40f00, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002e00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002e40)={0x0, 0x10, 0xf, 0x6f1}, 0x10, 0x12690, 0xffffffffffffffff, 0x0, &(0x7f0000002e80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x11, 0x1a, &(0x7f00000029c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002ac0)='GPL\x00', 0x2, 0x30, &(0x7f0000002b00)=""/48, 0x41000, 0x41, '\x00', r8, @fallback=0x23, r9, 0x8, &(0x7f0000002c40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002c80)={0x5, 0x9, 0x2, 0xfffffff9}, 0x10, 0xffffffffffffffff, r10, 0x5, 0x0, &(0x7f0000002f80)=[{0x4, 0x4, 0x2, 0x8}, {0x5, 0x3, 0xd, 0xa}, {0x2, 0x4, 0x9, 0x5}, {0x0, 0x3, 0x2, 0x6}, {0x3, 0x4, 0xc, 0x2}], 0x10, 0x4}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r11, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x30, r12, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x20, r3, 0x2, 0x7e9, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x35}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000444) (async, rerun: 32) bind$ax25(r1, &(0x7f0000003300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000003380), 0x8) connect$packet(r14, &(0x7f00000033c0)={0x11, 0x6, r8, 0x1, 0x6, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_NEW_INTERFACE(r14, &(0x7f0000003540)={&(0x7f0000003400), 0xc, &(0x7f0000003500)={&(0x7f0000003440)={0x84, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x79161988, 0x69}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0863f4b87c438d56ac13bb68094c3c68c4f10d8232f95b9a"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) (async) r15 = syz_genetlink_get_family_id$devlink(&(0x7f00000035c0), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r13, &(0x7f0000003740)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003700)={&(0x7f0000003600)={0xec, r15, 0x404, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) 686.718839ms ago: executing program 4 (id=4230): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000040000900fffffffffddbdf250200001a04001f000800018004001f80100004800400"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x24, r2, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8}]}, 0x24}}, 0x20000000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8000, 0x58}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4008004) socket$nl_route(0x10, 0x3, 0x0) 686.106102ms ago: executing program 2 (id=4231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb}, {0xfff3, 0x2}, {0xffff, 0xe}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) 657.038863ms ago: executing program 3 (id=4232): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x0, 0x14, {{0x5, 0x4, 0x1, 0x34, 0x14, 0x64, 0x0, 0x94, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1f}}}}}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) socket$inet(0x2, 0x3, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffc, @local}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x0, 0x14, {{0x5, 0x4, 0x1, 0x34, 0x14, 0x64, 0x0, 0x94, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1f}}}}}) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffc, @local}}}, 0x108) (async) 566.991634ms ago: executing program 2 (id=4233): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x44040, &(0x7f0000000040)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x841}, 0x4) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x800) accept$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000240)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf254a00000008000300", @ANYRES32=r6, @ANYBLOB="b4fabc06040002000c0075800400080004000800"], 0x30}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000000) 510.674411ms ago: executing program 1 (id=4234): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_ext={0x1c, 0x11, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], &(0x7f0000000140)='syzkaller\x00', 0x7fffffff, 0xf, &(0x7f0000000040)=""/15, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x9, 0xc, 0x9}, 0x10, 0x1ce86, 0xffffffffffffffff, 0x1, &(0x7f0000000d00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000d40)=[{0x1, 0x1, 0x2, 0x1}], 0x10, 0x1000}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000004c0)={0x0, @aes128, 0x0, @desc1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x100a108, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r4, 0x58, &(0x7f0000000580)}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r7 = accept$inet6(r3, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000440)=0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000000480)=0xffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES32=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000000)={0x40000000, 0x5}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 509.767668ms ago: executing program 4 (id=4235): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r2, 0x80089000) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) (async) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) 474.591517ms ago: executing program 3 (id=4236): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x3c67032e14c713a, 0xffffffffffffffff, 0x16aa5000) (rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, "001863718e9bf703"}}}}}, 0x0) 443.191257ms ago: executing program 1 (id=4237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newtaction={0x48, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x34, 0x1, [@m_vlan={0x30, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0xc, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x2000094}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) r6 = getuid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000009c0)={0x568, 0x3d, 0x200, 0x70bd26, 0x25dfdbfe, {0x19}, [@nested={0x30, 0xf4, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @fd=r0}, @typed={0x21, 0x143, 0x0, 0x0, @binary="afff51babdebddc1cc10ffbe73c661d8bd370e212f236a8341b6df2d6a"}]}, @nested={0x358, 0x138, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @uid=r5}, @generic="04819f44ca0b3fa868bbddca9bd29baf3ebdb0a144c301bd1ee0c4ded533cbd9d26badc8e3af1582efdfc72ffa01773ca7ba3d1908cc83800a3dc2a128b11169aa06d61a07f30753876a842cb569570dbe9f895459e7a7b6ea1aa0ac5806838e374a6cab0e9a856d90693a4f4b5caa15b3ca5e27a2f53b5246ed2af9db1fee3dbabce11b8a0204bb48c4f2cd4f1e", @typed={0x4, 0x131}, @generic="c0be36b19942f7e18ab9c7a64fb0bbc87e832873fa3a1d48becb25ac01e73cd34ce120921e66479717674c913eec2f86a483cccd2d0b054c96fa93103b52ad2ccc35eb22ba90fed562afa6137aacf85993", @generic="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", @generic="cf890b60fa2c25ef14eb0d3525692a54d9c9b70737dbfe24edd416ad2bc3f912428e15e82470c35510f8e7b08dda7f1fae0c1fa6a9ffe4787f0815a39715a4b19f03c19fca80f293e1e73d1383a8c57d95319e0d67b56d2b7cd1d75e34620fa35660044a", @typed={0x8, 0x11f, 0x0, 0x0, @ipv4=@multicast1}, @generic="c894ffb4732e83532df2d99704a00fd2e9df1deb81ac2a9fc255bca07c2b5feb2afbb9b36f7bc8c305cf0f13c45e99dfac69bfdf48a358f5ebb062bb9932f805c5606db0561b77afe803c82170704841a4fb1e3ab501f7ac75b6e2fad09cad79887b4150981af6845984fcf22eebe604372371bd493381895606a5b72860247e33623522c9124b4c4ca3167303c9dfeb07ef8f3e8bffaf507a33599b80224e57dcb7dfb7ba3abdf1eee7ae7d4cc3f225809ac94a9ad6fee9fe10da32d4ac7b30bb882aa2a137d3df137e02eb7c392babf695de0b90436750c4e2d99cc1bd529da0e2a23af562e90bdc3cd80d8f5d7ed1de12c0c4b60c68", @typed={0xc, 0x149, 0x0, 0x0, @u64=0x800}]}, @nested={0xf7, 0x131, 0x0, 0x1, [@generic="8935d0e4efd359eb9494688108a0fa7bfe685f903e6f08d905763a5b4ec605a1bdcd0ca5176e4f680ee5f6ce5c263c988d66dee892d227b038c998fa0bacd8dfc2a52f853c4799b1a796987bf1e2bc4e4f5e4539d7c96b0df0bba020780b55533f8d098d8d130175446304d5742b15f898e3a9da9e1a66b703e8426b3caf8b19baa0158e84bf69954d8ab2aa3d1bc6c8f55bc38c1a5f5edd049d0428e1778eb973a328ffb5296c4408dddde67248ad9aaf37529797197210021ef2f65595720a753e58a51497ff12baafbe", @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x76}, @typed={0xc, 0xfc, 0x0, 0x0, @u64=0x9}, @typed={0x4, 0x12f}]}, @nested={0x14, 0xcb, 0x0, 0x1, [@typed={0xc, 0x129, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0x45}]}, @typed={0x8, 0x79, 0x0, 0x0, @uid=r6}, @nested={0xa3, 0x109, 0x0, 0x1, [@generic="b176c6463f572527b79d2843c21ab33879efcc89a52401c525c05f3769e47dda646703eca26d397cc1548d065ccb60db77b43216a1df647ad3675904b91a25b3543b2b115dcf29bb87cf038baa56b3d2a8c3c5f87006a3dba02d9db8fbad3afb8aaca28f0f03ed4ddd0152115f6fc94f5252d8987716ca7ba732cb303e43a139887d780738911c878f5146af6de4e70d46c43285f67a9436a247b2c8051b75"]}, @typed={0x4, 0xb6}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0xfffffff7}, @typed={0x8, 0x14c, 0x0, 0x0, @pid=r7}]}, 0x568}, 0x1, 0x0, 0x0, 0x80}, 0x24008080) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) close(r0) 334.741119ms ago: executing program 4 (id=4238): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x140, 0x0) listen(r1, 0x100) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000f0fc13b7d4106ddb400000000000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc000000210029040000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac14140e000000000000000000000000fe8800000000000000000000000000010a010100000000000000000000000000fc0200000000000000000000000000003c0000000000000000000a002c0013"], 0xcc}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) bind$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x1, @remote}}, 0x1e) r6 = socket$inet(0xa, 0x801, 0x8000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007010000002200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r9, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r10}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) 288.158831ms ago: executing program 3 (id=4239): getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x80000000, 0x2, {{0x1c, 0x4, 0x3, 0x17, 0x70, 0x65, 0x0, 0x7d, 0x0, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0xe, 0xfffffffffffffffd, [{0x6, 0x8, "5cd14085366a"}]}, @timestamp={0x44, 0x2c, 0x96, 0x0, 0x5, [0x3, 0x3, 0x2, 0x6, 0x8000, 0x4, 0xfffffff9, 0x0, 0x8, 0x8]}, @rr={0x7, 0x1b, 0x8f, [@loopback, @remote, @initdev={0xac, 0x1e, 0x5, 0x0}, @private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) recvfrom(r0, &(0x7f00000000c0)=""/140, 0x8c, 0x60, &(0x7f0000000280)=@xdp={0x2c, 0x1, r1, 0x2c}, 0x80) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c, 0x0) sendmmsg$inet6(r2, &(0x7f0000004800)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}}, 0x1c, &(0x7f0000002780)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="d28496b69f3486558eb0ef73f360d54d8d6315bee8667b6d7d894eddbdbe94dba8ac4563bbb862a667db81161421131d93de2c3d4d4d640c75699d4fcfc39641819dbd1da02e2e79d5244f3ceb448971bf51a003d96e0e0f15184c90387a8bab1c7ff5f99b1726db166cf0c7d1031c0e282779cb1334438af6fa28e734f82015c48572cb28ddb3aa6fab3d9683929726", 0x90}, {&(0x7f0000001480)="0c8a59774179350dc996fa77aa4dfa518141d47fa55f50b899ab8b52a6d69d0d6436fc", 0x23}, {&(0x7f00000014c0)="733c2cbe30b0d25d28c9e18222d5f166054c1d94cb34824d65528b39ce66fc3baa3b8a8959f295481b1043141f0b01947cf18f09c974f8a984d2fbe8bc295706787fca7c6a978ede4c3cfb623a6c69414eea22d98f01ca4a33ee5c2f9d51c1d3ea5ea039e9c82cdfbb8b4a087847be66be65be084958e9827451d35d389747d8171221562603dc62bc0de54de33059d6b97379b0897f040619e0b0f22d176cb55cd510aa5a840ed2313c7bd0bd4a75ed36fbc592a11b2e36fcd2fd672ce0ec3c4439b92e97dad9e568ab080dcb0fdd055401ed5c25fb54958e5f7c690796", 0xde}, {&(0x7f00000015c0)="b2716aa81aea106499dd2f9d41bbe8c344df253062b259459f", 0x19}, {&(0x7f0000001600)="f46e917fc9df7c20bb72eaab30308aa565bdb76a25e374bcdbe30aada9f8deb283e688f1199cdd2891b27b7bafec846418cdb3711bde56c67b082995ce5deb32eaa5cdc5c3791d930fc5e42a7e7f731d88a7ace985", 0x55}, {&(0x7f0000001680)="ec5e2354d2181d47637ab8a2d650e036a65b55fb63ab106a6b29521d40d234fa8782d592ebb9dcf97991d35b86bacb3f3076430a6d64e020950beafc63d7abb4c91046bcdedb4301b5ccf8f18d1f99c21952899ccf80e47983a61ca4cfc8", 0x5e}, {&(0x7f0000001700)="1271e7ef25e14b2ac8ff3b14b983277cc3da7b5f8eb6c9d247c7bd5a4edb42b46eb812a5f85672d88447a3a4d1b0f2667df252ab00ab98816ce598559eb6f319da3bb068724b3ead56d334537d5ab0dc7f324f3e3bc0cf310ada82469be3992fe49964764464ce2f5cb7e05159db94d29f687c79d1d5925df391c6879c2f744eafd99f873945fca69203c03ab2d8ce70c9027b1710326bd74af5865f6e05703ae563f28fb57bc5ea661ae9164481da314a86ec35543bf339c98004c06a1c15b8f3c0a7879c797766a6d48ea8ca2c2790cf9de5d500d8e8fa0e0dc4ea8f843f38dafb1606552109789b846ac6df414342a85c83b84016b06bf71ae31467af9b8d648678f9fe1e363b57907b4408b239ac87cdfd32f79d280a918764fa1d02dc11fe382b4fbcc74e10ab5edadfb175de1e162ac5f7f2dc87cbae3eba1c545a30f76c96d3039e2dc20436c8bba800f93b02eb0b782b393096b39a8dcffae61e75de127b044da667a0bc6d4e143c7532be73144c456d840f74ab35b1b8cdad7fd6e8682ec8f9e3d96c53a60d4438f145495e5f14737cb7d787b78e5547a05fe23b80ca0ea224c06527da69c9bf65dc8fc0e224909422195ae182a1d040cc8a015dbe3bf830e41407bedac2ba99a19d93adc7346f70930b0192451917f06cfe90a82fba656c43c132c38dc7d4d03d082393051d057a967a73a9b1258509bbf13e2ea166fc2f9cd687792a2399f033f49d55f7e260e923096989608d74d04d790339bb8119b8b70ef117b9ddec0d1fc65d33535509a5902fdd5c5afba8c2b18a653eee65d309a03bf49153c3a0ccdab617748380096554e818b06821da9883197fa14d74d3fa9d0d845b5eb2d6a2887d0e9a39b98eda93046f3ae8832ba96317b7e72c2b26f13ec4f7e7f9f2d8558a7ea0e553dbbadac9a47b5ad9393e63e3efe55f239a0f7ce5c8f684de8bc3a9c4fa0fbebab3194ddee5909732b5eb105a4976bfa57c8807d887e78a3e3a81229aa71ed4fd27b77202baa664b26c884236d011e25da1d3f7aad908a82448da51a245cd007132357c7c762d0a0d834d333f42785d78680f942f123f5d10cc0e9b4e3ccc6f7828523183d7c9c143aa28595b4f0a5649b889e7869d81cf2f351c1d9a7aa093085866efb98ff6ec25c7a1d79da305950d4e6b0ffbb23956f8de656ea1f2cea8e64be98b49b6ec5f886da6b4338952a4d809f80264721e5307f89c1fa036522b281b7205f23b368fece517d0c08b5a1f9971e4dd975a5380e6465e0b5ad8f5d6fd57f01ee31a4bc29637acf5a9e4ae9752eaaebe78f6678090a2f4e763dc2ae74a2e123bb5165faa1e6b5abd8fe370eed035b867f345864c0580c927858c08e9d3f1c1f68be8fb93bfeff34fcf197e073c2befb055db26fa0bbfb0c1337c197041711450ae8160bf377a907ab184814eca80d55a3ce29d0773d742b310cf035a8209fd32ae8af4c2fee00cda26509a8aab705837468a96a383fe44c9f7effdd28ab8281df3872fc7e94725881c2b22d04e6ec4a9b1eb5284b4f998dedfc0360bb213c802896e5bea7b7de82060e0206f0fe37a8562d1301682225edaa8d1de498638f21c0ccdfb7fe17cc9ea99a46f0eac42d42914e452f06cd8f336961dbead75a316750c75b7ad7b8e080f95c016e43cd160915ad8ac9e86360486abc15931175b5003a691a7cfa16b3a7800e27d785b1e29b0493a71bd5cf40ee33b9e7ea9a75e104b6c637f6ed0312a2d3f3d743514fae300ba82cff58697457dcd6ffed2e3f605b855d1360033492294b018db3d0a50edf919a4053f4afb235575c0433c01e4ceb33fcd79cfbc5fe79cfd868ea8d60a10d5ba961432fc8002a682452497b163e25bf1ecef480f0b407b9908d15a735eafd2f7fb305410c499c8cee92b940283ea4120dff56007022dd821571eaf74c2a7f814c9cb6bb68a18375d2c5099986115fe5d2b9273c1aa7cba29b3272701102078b98e9d2bb5fd9964643938786613328db80bd077b70db090da9cb2ccfce1b2122745cbb08ce1fcaa026369fd2f255daa484637340b2dea380ffd65323b105db475c5e4afc83d8bdbae530da693cd231beb7fc95ea374c5ce6e96be171b8c3ba8a6bfe366b52e3c84053413728c0518c71a0545652c328def627c0750bc92b47eafbc51c7a328318570dbff266b1d8ca30f784e24aaa5b9b338e5af1371b94cc2f8c5197e5086876d29056f629a97009cbdb629d322f0d0d2bf004c60c3a114383618e6fa08c0cd73f7b37812cc87af5e5458bb67cea03e4a4d5037f614d7dd2723bde769374ab63da825b1a0b871f45582098bca4cc2643e87f7b7fb0af1985b89f3cf1571067373a92785b2e02a2e1300e9558673da86b58f860a86e62bbde3780b8f857150ec8f5111a765dfc4e33c808330472d75025d8b22d378e1aaaabf7b795db9576a089309ee47ec6b2d2c6a827144c62b9228247f1e61bae967f637ff3d70353797ab5beb2d4333ba3101481d5d6d5ff4be3ed2451c194f43ed97739fc6a3cc9c31b938b0bbad1fac0c955b10568cf232dda03267ee535b4495ced5dd8136ab19b988f451b68e56728205b8257834e9b07ab4c6aa9d3a845c7d97bb1e8dabaf6b676e9d42bed33057c95a69096c181a442a547d8bd2f08363ba81c80259970662f2f6b40b908c39dbe38b1df49c8da4c91fe6b3c337ce87abc946afeb963b884b4f69e784ac8f685eed4c8a47793cdf21b2810d7c7a81f8108ffd250e313d654a0ca3559fbb1a0c0ad16cddc36e6b97879e280ee670c01c2787bdf8064cefe7d146ac608adcbc6cd9f6a907eb0eed1f64d3243146311649fc8ba6e5f81f9cf9c4c5f68c5eb796c8cd1bf4af42d0b52843e72785f79df93f146d44298ee90dfa41f1694036ae1a4975a098e0b9d6fbaffa8769c93615ede92f0ac10a20f4065430bdb94e857594e62867b1b955a7dfda1fde87f78b10cea9e3ad2aab7709deea18ecffb9fbbe10c78a7545b2c064f3d8e2f856d019490f8fc20c4809265a34bc4275b0c5588bf85ca1f05d9141517e42ab1ca52e99baa4fef227a583e30e1bdd2a508d10b93399691fac65046515695e791b2228e7d00c520a722582a22e7344a0ee2579c0f48d4e80bfed517ec9980c068957f0a5d6b12fe4e8f98f9aaad8a3e13ddbd1339810798d1cdc3f0192173ba93585345741d7c65d725132fbbb245f25d847cd59cbe4f6732b9ea7cf4da610d44a7b8512683e7df48bff6cbad25526782f7679969f02d904f8aac4acbe303b6f434ef4620926fbf31f60145916905319021a73b77d0158165b74437b65bb32e658e2386de7307d4d1f9fb1f7c5dc1671cb3a7224ce4389dbe4f64809e469d2a856be44d6140e53b521e8e47963318f099b30078cc768bb9c57675860b24d6699e3a718b3abe63df16fc53b1377fc97fb3410f7e528111680f7dfcbfc17f8cb58de1738aef4b7f6e7b767849110c4d5c5e7b964e7bb01641b64dc2fefbb49b86ff56cb14bb178f1080188f0ab15cffbfffc3d628131108c126f05ee2c284ea1c3c8f19f080220bc42d4cbc8d53d1b628b131d09e0e7aa36b3a9fc99ab379b4511a7e5c348dbc4f4867050acd80db3f11c78a01a402d75484f6068c2db2669ddc4a13d5de957bc2a60c1f0b0119ca501821ca4d8d01f7500f19c274b224635f5273e3461a5cdc7fee4bd416c63185f7ff7dde440f003b0fd9841cee181aded20fe985032101e0e58f6200e843117deaac41296f4f3f05d83f44d01a2bb74132b167365671c7ab098c55d62884d66067d2453312d8d47910fa4a2291ae2f2511c76832b9b07b3d2f4c4aba256d4db0211b8579812f6bebb416b2c6927e885e8a7cd1cb7d3aef64ac470646d028923778b2e1fbac43d440d1ae16693c94129587b17a52bd71d252f02b4b7f3e9fc480579f250d8abd2a16b3f68a8d930dd3f9b947ead3b05daed3ab4a9d92c9fc71f7b3b343620a6b8d52944b474c2ce76711aba7b746945f1f25c5a3048f0036cb3c94b1aa07271f5fad049463d01f14328d84f370751fb1aa8e5d37243cf220647a55bcd6e0b8d2d89c43a29826410ba0a2833ca7362f7a92f81a48897ae89b3d7d3654f7412e6d113f81350a0e4ba4362524eee1206f9fe19eb51a354625bb84cc72d2d31e61de51ed3c7f439a1deed0899edd5078b9f15bdc5df2e435420dfbf09c3e7b0f5506a4b3caed9baf4ac3b3eaeaa67769c6f27051171635411e38b1914f243fe23449a17b1e61cd8bcceb4d78a116ed6376d702481ff89a7a2a6413ec153af289c11002e3bb0fa9383f000f5135d580988879f8a9752f7cf2c6a40a214617b371222c0db51561985081c5b10d7ea30a0e86c5831c632453c646de4456d19b7b8d6ea77017f6eca36361c2bba558d130c3f7a7315b6131e1106d72f5e8b6362541132e3c5df987c6fdc7a59a28cb702b3325468f17e4aab7a2f3d1d6efb45ac6a8da3241e77d005f1598aaf1db498068dd1fb3d8d3d58d54051f656e963d46b92ebd7187419ddeecaa085a2ee41ef6b61928bebac1cb78535a604f64c8791caba477ca3c5bb5e21fd25d5cdccdf075c38e2066f79a433cee73e25c31ae872bcfe6b8f5f858806bf65f6cc589e452b65a86540be4bb076437e600935bb54af64a003c5b5023326a2b3c18498935b37d6dbc4a4c5d222ff5c9dea58cb0206ccb5f01c7f455bcc037e61f714ef294ae17e330ac1190a9fc2ba87889240d29c050aeb6526b0664ba898d906a6973cc185bee290f40fa7043326bd1f3364313347deecb7121cde551ebbf741e416cbf209119e59eb1f1d7a8872a90fa499d5ddc1ee225aea29913532be6e49a5ae372876b915b07f968079a819f5f4c53e7969cf3979ffc7f60ed78396d632941e2e389bdcbc8e0680fd478c20bdeca7cc48490f5d77efbf15afe74639ea46600e1f8052042db1f1ab246a44f6d086d9ada1322f7c6e1eb419678df4d4b3a182871569d785c3f769a84bd62b5a21c0af1820cb725c4bc54b5f9113a4b0e55c4d12cea82ab6f03f19837be16269f6d3a144a25643e7cc2c2ff00281fbb9504926967aad6d43525f438457cc2f588f44832e041c8de0a277a5d9caf1bb9a76553c69cbe40bdb4159d54a3265d54f3a7f48e5589070ad5bf490224b58fec7aaad2028788e8b516673569db4314ceee76282872b2c6e4023c119c77173930e7ac56ab571c00e61d68eb21bf0c37b6f23db2deb1c51df2f90ff278016ef43de4f12208093077cdb79f372ddac22f5949cae61f2a9929befedee72cb5f96c4fbfd37464959ff4cc28fcb57b193fa93c0692764cf0a642cbc91d1d60f23f56f36505a36f7613a39bc4e6a5c4257c0623526a9f86bebead46a709b10dec229c4f6fba6639e590f36d4efd7b0f77c4898da56e953999a5f73e5fe6de2df3ed9035f8fcca16e23aab27bc9d39ba8943550e3f8760c417fec6a6baee1bfc90d5d8c954f5c9c21742f813545e235f08941353afa808bf7bd7a49abdf060ed77d58088810bf18dc408f674c7200b963454ab49cb20279232e44447c6de5b9b269b7afade6fc51acd10daba14be5da2467332d1a960c063d5277cafac6fc3f1866985c5476ca736aaca10fc2c0840ecf854a1600fe837751b3dbe569938c0f5132cbddedd680c42ce5b3a33a49d80e8f45e8096d0aa1d11b261aed6f1d7af4e8e7c5b801090ed69cf7801d416c11675788cb0e652a1698b0603074b2bb15606b19da563968bac827a486c690f8771c0d254e4982", 0x1000}, {&(0x7f0000002700)="abe8686caec3afed60dfc2828221b7f8731aec63a096ef18074983cfd3e6687943a05326219a7ded0336880a03847afe22aa56712d63188a0ba039b8ad56ff74bcede68ccdfb9141c7032df11a9747925aa0e83139ebf9898ab9dfc2ff5cb203ba3284773478a1f0bbe5410404e5d898f3d0", 0x72}], 0x9, &(0x7f0000002840)}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000002880)="103ff2692b56c85eed4d19f0bea51523cda470d276d1215d530b539c46717e3ce797d4beb0cbfb1d4f6bb650a759278411c1ae1eabf0e03e2c4bddea29c3827eb9c54f5807ef5954f4c7fb62a07f03d9f68333755742db357bc4fdcf95e5ac6335dcdd37faf2edd7b0ae4194927e46cbaa5e784a962cb7dc0ceda62ef20c8d0f6ff3e8caad72b94076b37f6a427ca4e94a47b929ebcbaa342b", 0x99}, {&(0x7f0000002940)="60805a7283ebaa858603d746a8f5716cff3cfcb8b9202d1c5fdb7e", 0x1b}, {&(0x7f0000002980)="8bf6bf44c399be30ad7de6e90c7ec1e2c973f64d34652fb354b99dcecb24bb7ba5ac88be0f9c084704ebe12cb914cd2fa6ced8c863bc3e51cbfe202764e5ff4107144a85f13524fd7af21918e03b0836789b7a776e0b2e5f9b8e8b9f86499433304fe147e64b5ec824fbca334b6a0932126274c4", 0x74}, {&(0x7f0000002a00)="f856ec9af05b6369c16c6fb4eda4db20c4c32841da3524ba9a31969c937b322ca0c2a104d8fc05f53facd68707b331f38c9039b2a9b9a62f42c03de8fc7d09b7aba750a2a794fd997032506317c85dcca8e1ef9c49089d46a07ab68025d76afc4573acf793255d7abf8c8efa8864ae5755e88a4412e697a348766e04474613738dfa80227d84f5881507d9c388070b1ee436c6cdc00cf28ccc8aeb61d91f1ad326eb75a58a70d30fb959e5811c9b7ee71256c764853738d27f2a920c6780921e29fefd5e", 0xc4}, {&(0x7f0000002b00)="b4641ebfd5214c338f25ba4541c17b8a0699bff517800efb39a9787814", 0x1d}, {&(0x7f0000002b40)="696b4f02a71ab026b9845e0f4b7886131690c47216e575d765f50fb7556b1c7ca4f42c9cec2da48c8620aa5aa6cd75d397e1635d2a992ea9e0069c5c1c1277bdbb964b9ca71c2c8c711e09edf7cd37ea530f", 0x52}, {&(0x7f0000002bc0)="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", 0x1000}, {&(0x7f0000003bc0)="bdaecd6f6cc2c23dc83b73", 0xb}, {&(0x7f0000003c00)="c28567cfc4ba77a7a02f5f971b0fb94cfb1bf5d7c3f4b0dd2460e7fb634fd33a4b33f6432f6173ec46e309ff86ab1bac73269b8c3244b7df3168e721668044917045a4f48908210454", 0x49}], 0x9, &(0x7f0000003d40)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x2c, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x8}]}}}, @hoplimit_2292={{0x14}}, @hopopts_2292={{0x130, 0x29, 0x36, {0x87, 0x23, '\x00', [@hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}, @generic={0xa, 0x75, "27f46f3181213a6f45f5522c39093b383e9f47c8c2d6897d002d09980ecbc9e85e3288e08bb4ebd7376490cdf2e48eb5ff49a0d896cb3b49f0ce22e482d5c46020b9c4bc6ee91663d2d92410503865f2e8bcb94165a2d85cf5240ec30b30e3024e873221fccaa22ba7c0fdac4e9a9a4f5108585a18"}, @jumbo={0xc2, 0x4, 0x8001}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x8001, [0x3, 0x5, 0x0, 0xb, 0x4]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x0, [0x6, 0xd6, 0x9a, 0x5, 0xef0, 0x1]}}]}}}, @hopopts={{0x28, 0x29, 0x36, {0xff, 0x2, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x1, [0x0]}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x67, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x84, 0x4, 0x2, 0x3, 0x0, [@local, @private1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r1}}}, @hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x270}}, {{&(0x7f0000003fc0)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xcd0b89b2}, 0x1c, &(0x7f0000004140)=[{&(0x7f0000004000)="313f9c1e31cb335f601c0d8e0fff3f025c35e4d51d158e0d67d61da1480c7607cbad140924d40b79795151e019e5ac61214921b78c8fafaed9ab8433b687eda1d21c2fdaa0d2b05ef01464bc1036ad214511c325e973d08db63dc51847462c0a670798aece0da649a21527c84aae001576d175c0ea23f38bd06f2bf3be9dfea4fd3a9d17bf4717a447e07c5cff980952d3699b1869057da4743f047af4411c92dc445b991d9620bc6d75761a66f0516497e4df2c23094ed548c0f0e01bddc340f9310752dee54d6b51eccb912420a2cc32c815b7c09a01da5d2dc84876f75712cdab18e9", 0xe4}, {&(0x7f0000004100)="c7f0ea6fd456f4a9469b64d51c73c6084bb4a7702a93c6", 0x17}], 0x2, &(0x7f0000004180)=[@dstopts={{0xf0, 0x29, 0x37, {0x16, 0x1a, '\x00', [@generic={0x18, 0x9, "d2a729dfe4188cff6c"}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0x81, [0x10001, 0x8, 0x6, 0x2, 0x1000, 0x8000]}}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x79, 0xc5f7, [0x3, 0x2, 0x1000, 0x0]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x5, [0x8000, 0x4]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0x5, [0x8, 0x1, 0x0, 0x684e]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x108}}, {{&(0x7f00000042c0)={0xa, 0x4e24, 0x10001, @private2, 0x4d33ba09}, 0x1c, &(0x7f0000004580)=[{&(0x7f0000004300)="0a03c37192982ac4998847d647951ef749e28e84aa247da9f94ab7aded8ef0de9a2d1c1a8498be633fd684e1d0566335caea157d0b529eebb1f0cd3fee1be5abaf78000b43f25f120419da09e5d57678fc90259aac173d2c9b8804158ae223b387938e0a3614c14d30cbfe8a0661019f3272f21b8925c18906d46f880614de3a0896f92a2edd79829c307ab99a1c1c7a065497d800f3dd47e1057f292f6546c81cd61654", 0xa4}, {&(0x7f00000043c0)="a5bd5ccbfdc70c17cdb2893961c3d9114667e608f374fe8fe05c4e2e8322f283f4ce2dafe7d8dcee51304d9880c05343fe156dc56f888b567b5dd7c70fe2e36db7c40da01dc0d4888236ea0d6453170fce07cc06d2c4263e3b3ab7a734ada807e3553d6d4f6dddba033b2bc030e608b291b5ebeddfba27c1420197b7d7", 0x7d}, {&(0x7f0000004440)="9887bc8ab1", 0x5}, {&(0x7f0000004480)="cfc3e7996d064f2ae283e2a3b6aae60d24d0ccc572aad39a15e308039beb0605b3adc63ff0f5b2c6b506ae60756ebaf1e93e05dcd9411d41d0f238749447a9371d113fa09e9584d827f0394235e77f075a093b4499446809d91605417a7d4ac37d407c578e7290b006a2df0b11523a15b354daaab02ae810f8aab77f042ffa5cc1b4cc3f89ea8cecc6c0172390e0357357606df551933de1a6b393b838fc91f298cb1fa6ee5b5c823d67bc1ab7fb2d0f376f8ffc3a7dee4f9c1d1e5308fdc4187ce4d99ec159d219dce1efb87d5aecb4605da79981b9894948b5b52f413cbb0f", 0xe0}], 0x4, &(0x7f00000045c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2f, 0xa, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x1d, 0x8, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x4, 0x8001, [0x4, 0x81, 0x8]}}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x32}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x4}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r1}}}, @hopopts_2292={{0xe8, 0x29, 0x36, {0xc, 0x19, '\x00', [@hao={0xc9, 0x10, @remote}, @generic={0x4c, 0x7c, "e9f0e6c8b21144797556c86815ac81afcd0ae652ade35542d6759eacda1d92bea229f2e1d4a6c952887f7654c6e77b221bbf4cdaccfb2fc549d5ccd4df1e6ee176b4d317a7168c0668fd2d5a3531a19d47826e448c3452fa2e1140d678d739aced808a72b966e997085c5bcbd0b02fbda8a440cc9b6c0a0b8abfc722"}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @empty}]}}}], 0x220}}], 0x4, 0x8) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000004900)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000004940)={0x2, 'wg0\x00', {}, 0x7}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000004980)={0x0, 'vcan0\x00', {0x3}, 0x800}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000049c0)={0x6, 0xe4, 0x7, 0x5, 0x2}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004a00)={r3}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000004a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000004b80)={&(0x7f0000004a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004b40)={&(0x7f0000004ac0)={0x68, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000890) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000004bc0), 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000004c00)={{r0}, "e89b993c718344e7f5a4363265678bb0fae51c4a60b6bc50efb7149eb6b1c0aa2417848e8ab7a4e00e1af0a747aa981a06aabf6b9ad676dab21fee4a0a80c236c6fe3894785a7ae9dc91be63d7945c9ba46342430f0511070e368e63d725ff12634cba4a5bf1daef2fa38931724cf4ddf1f40be517ebf539687e663bb73e2c1419bb37324ecbee37cf094114e19815d97491fd0b42e88ef4523a01e1accd147106ba9dc5a8c6f8e728fde45d137cbda0a850753a4554b3cb57664c3befbbec7d1b18c0e28ed14071e97fd65ecc82fc9b5fd8b03c3bf7c032eb33fb00834e4c0021d48d0931f9fde76ada91a1fb1076658d7ffbfbead48fb62b88c92bae5b84d60722c5774a30f791852fb089a4936c5c5e5ff06024eca660a7427f022d942cd486c6b9fb69cf983204c3cfbcb443b729a75271babf2b55ec637d5e7ddc9aa4c62b47803843d382645b3d91a7b1f317cb9322c90845a818228e1c5e59cfe29fe65b6c869142453dcded9db4d095851099a9a23a54d0e8f7f71bbe6e4ff0ef9145cb43b2016c3a20ba3cfe288957548372c364ebdcf8086643392224f969e067d9c086977a473b453492b5b1d5c7e945b590e0f64ef2f5f12525f7cbb311e6ff606eca54cd883cfa0f90ae6a5386a9a087de9079f64e89726c36e21946e36a8d8dff835fa874ffc43e6221d011a3bd827d7d6f1c15b3957af03e15b342911130c91c00893403cfc9d3cbdfa53aead152654301999842a005ea1b2e29ec6786a2582a46e01d3d11a943f9b153d80ea51b8090ec43937c67488cfbf2ac9ab8a47a6ebc8d91c49aa84df663e14764bedc2b29dfc9741e703230bf32103b5bc085d200672d5e3b8c8a900ec7c44fc3c15b9299cb77b6e747ff952c85023b6a81563034b02d30c50c75c906110b66b6f9890a98ef8bae4dd7e315d3d92a48320a1a8b4971fcf9643772f243d5f886fb8dc57b0b3d03c9a77f5842546a211988fac7fca8014a2b5140cde421c9ae283eff06c4f15579af6bb97e76628df7ea2191b3beb94316c3c8c23cc0417578f7fadef944011efd8ea29103f3167963027cdeb72e89371b34c4dbab7ca2ed2273c6bf4eb1d91a923bce88b69b2039171a95f6d64f6d7e03e428698312ee6af28cf56f64210131da831b14fd439477f4b1d6265aa53d541ef5758d7a4fb2678d93a7ab2e0a08eeb7897b99295e787e2c0cf5c042b3334ba541be4e67c3b5efe29adfee2de2315f578d832832ea375046c67c58ee301960857220b6df329af054bef0ad397fd78622e8eff061612d83708942509e5036e06fc3f2215a4770106ad1fa2622e51e6b3a053f0c4f948060335155dd2dabd777c4940cedbd2630f11ff1ae0e0a60a54b3b9efb3a38c400df37fd192d914b8f34087b1ca6da38b261b68141761425811e2ef2bbd0287ffa64997161db46d30488b678d6ddd63886cc2a38c966236dbe692d6a27bacdd1a199b9d684adbfaf1fa36e5fc40b83c62bcfa46ba13e965e2efef8f932b1dcef48d184387060fcf121849183f81bd93ca6b547055493a8d823ad7033a80a076a8dc81ad025b9dcf8270877ec8c4b62fc29572467f6c613a8f635e53d845f5352dfe419cf016690850c773f75ca94d175e3e8a31ed522746ec105a418ef87ff6c2d8c9cef779428a73b6518e782983e58c50ecad5471f7cc730ff548d3324511a7a804cc5927ff9224d4bca7691c99c5d5c45aff713b170c7774e2eabdb0b82eaab322d8973043e3f11d37b00aa70033ed50b45edf6a2382a3a1be35552ffbbad11dda9e98c5b015e967e17932a2ec36c55f2ea95fe2657511008525ef82e202aa3a7e6b3339062cc6e09947fabf49eee9a4fc2f7d68a71b0059953da194282e65423b9c5fd55fc50a244c2c0bc6f711e64c0c97f176aa4fe101f123314fb0ff0b60ab7c3e40cc2320f3fe2350f5387a958b03be190746bb512b944457543e683364172b95dcd168127fa190da7077142bdd1710e3f658891b7e6fb5b8ac8d865edd7997a442fc8b2c2dffb1aa669d7b2d3bb20449aa59f3095f3ef9380abf6b7d7f21ac0968ad3af13d54113dc9be807095d1a2cb4c0612a82a4d94d9fc4b3d3aea30c2c5001e18a27fcc04e62bb3d1cda00f11d37ac8416c633bb6bf10cd230c24695883e94f26e0baaded577ac462bbe7cafa410ae4120cad183579f79c244cc884440732cd22ec9d59c5f4bb555511cc29995c13ef10717aaa790b9e3b89fced14ddb2568d601e40d157080f37a35470aa4fb3b127a7e6fd1377d91e5ef6c82fe322a5a5d3da987c797e811eb3495bde04381290879819c3da909efdc2428431186c08e4f238b5980190851f8091252daac13f8f42c447f1ff44cbe84f7ba14410ae26f3b57aa15486af37763057f1b34ddee0eed07ec5f3313a425aed3647aed8b46fd769dc6390ddf7cdfe3a81f0efc591186a933c9e4f812c6722fedc8eb232c1c9245466da2c21aa4e2703a96bc51c1e14ec46fa28fcc15b0d661286ba976ef68b26054bf7bde1b3d033064973f8d1bdca7ba5b226e603812fac8c7c1ac0b42422309d18e6c944814203cd71f897b8057f2e4f34a7cf781786bce9f00844a4c0c9aff7e02db93ab5201bd228eab14bf437d5d92101cc863676f3ba18c12f1f330573d7011fc876461ab5451445f6d943150b1af4eb1d9258f173115d73da39477128cd4e88a30bc55fd8ecbbf7805095c4bffff2925ac5a324bd3de5d350ca0a968f544ce8941e0b0bb30a25c7bddc0224c133a68c9287c7fef8653bb8ad3f8c2fbd020172b416822f7ac572c15b6ce1bba692cb0807d5354bfc566de6181b5b6df9d2a5bc4fe05bacee472ab9a5d326b821ad6fd549e1ea46dbad6276e55cb0610177632828ae7bc19ad13fb26cabb8a0e5290e9b26a729ce9fae73c895a4db1677a6a6ef7b07314aee2cfd11ec637f6028434543346e2e7d9d31085c295a7d058d36e1b473d45e334a8eb7900756784b81e15443696fe9d5fd4eee4d4409cfdd870cc9ebafb9eda14b6675f08c19503df985e3ae380de03db6e991dcda3ae075d23df78234e3970446c82329ad63955b60493ec9232c17638b52d9990c5e02ec52101e4363a1cdb25c6082668da07dcbbe374b49fc0bf7195ab9d255aad071b8089bdc12f60118d6a241c109bce5422ca7551bc55d54a57ff1cd59b3d9c765d6adef485309986a44cc9d8b9b90d94aeaa0be1aa7ab84ac43ec59e86eca43fa1a7dac4ec46bf929607723af25b4b44daf41803d565962e0d6aed128ee8b210b800ac19caf791e6517f921af538e36bd45a9b444e670a76e6449caabbf44ae3c93b48f1d6174eeac458136accd68376f695c876fee75ded1c455c1495f0f0dd1ae40cde912352d402cdc36b2d71ef1c44b833923afef20e98a3db77136a4a03b80db127cacf2c94fe40b28d23994efba0ec506d5c70a5c6a43ee46d067ce6e2d45534076f7f3e85c3345a44d8ad4f095e8c57321dad9aa28c17c6521b175b0b5e192bf5713b03226bc6e6f0fc93efde58cc2fd76e9b54f029be80fb59b42f4566ae9f5ddced122a48e6cadc4ea047f9c15c6a071a318bccd1782b260ec55ab6fda4efd96bec5a6806f5e0211a64adc78cb5e1428e15c23e811c5a2dc4c5540d3faa14302f16cdb926bac2192744b7cdca222c5c99484ae5a617e6707b77ee994a7185f6084c6cc444cab647451926b666e41246467535f2587f2e3ad822a28a870d0bfaf888cf1907c959573b5fab7aec6d75f690fc95eebefcb4fff588bfa084be22a28aea7106bc7a73ad95daa141053c41055b11b2136dd250374fb8401e54745b6bb599b688fa4d2a5d6e7ce46b9bf26b793d067edbe497223f18184a4de1ce59f6ec194b75b7427e265bdcad5febf77766d9f11907fdda5f04bd9f41f73b7caca8fbbcd4c5359641b29530ed85fc6a428bf00eae8863fe14636c138176bee35e4f3e544e67f19781528ee8cd3672e118a3792bacccfeb292067cc76cc9471572a371ef274fa9a5396bc8921976d8b4fcd185056125b8438f5d57c4bb1438a816b18d33ceee326ff0a02a880b9c4456532f70c197310309693d33ea59c85e40a9fe8c0507cbf9cab9209624667c7fa011e1608eb7dc84f4dbe840ed70647b98863fed22e3e76d5016aa37d8f393fb1f0370099561584a58252ea1e0be6b7d4e2e181ca9fc776b813d1c0ed32f37b31cea59531287d2ce5661bf4d5e5afe50a8d0fd9c90db81a8a80350b107358e05156193f4df27e31892ba9291a5e0656d9c1f423605861847b068839d0b9ae2e38be90818a08378041903482e7c13c1da3072b10b2e9471bdbe42ec11bc1ddf0316157cfcd8f6da7eb8ea9c69eaf42b4f9ed689de7c4e1793e5a28e996ba6c49677ede13ec6df500e29a1921ff8d880257712d8be9730a90b831fddfe9ebe7d71a3b030e319ffa0675e96fe65843f09403330be1bcb2a9d26e42b83a2e1b1e57d3f8237144e4389e854f77ee6ea32a62794d141f82d48de96460e032cf7bb3a86a7f41f8737088aff54c1912125723e0480160cbd765aa523019f6a48c797244f8f94758d529c54f69abc163fb15eb745bf17e2e2222b8e9b27ad9c1ef9d8466cc59f61f9327e997e5ca7f9d970a8ba4d27b7ec7e66e6e45d8b3f4f6c33e7e6a2aea17b53e819f4ea98e7b83bde2aee563ef79fa2ce297dc62e7771c412e8afb446aaafb78a097809e0fd5a055c0afeae5c0c0295474dad1dfddf4579174adf23c704af7af8844cf2f3e95f2edb62e1404220e99e138b15e650db37c30c7ed4eb670302e76d2093a71fe68cf17f147c60cff2ee853280f137e9b025e733bab1ea59d7a9eac898284fb8eaa74b0eaaf9fbf0e3f4263b9eec2f21bfc01000610b5a236556475953002125a365c8e80cf4e39d59815356263afaeff4ec1a2dc2b69558b087cd54a75daf8c3fd354a190f564f88e207a951d951eb0bb523ba52ede5757a0777199feb083770fed8a8e5d53def2058c84dd19ecea9407dfd2cd03a3da5098c181dfbe313d83bae1302a9f6434d1c7bd244f5f857528b5f68c6b16de0b40984ab129a1f7d327edc5cf1f11385785434640930bb1200c31af613beb0f140ff001e1bd2a6640d78f70ea5a7cb77b420a3bb50010cbfc5a76876bc9be466d2a4b3889218c8f2ee99809b4d6ce58055d190e307cdfde52e90cf8480f5f1793754befc67c0dffa921851a10db5f0a50c1e2b62539df2b0df2478313f1d34070e9d221ba068bad16d0b4deb9e88086826cfc24ee77035f834103a10486657e9793ce3d9a52f68e9890ee5a705a3603eac516cc53f7f2ce41da10e1b506860d35e730a26fbe1e06ea152ea13d6e4b5572289898a5b97795f6917a3ce546c9e3fbd2128dc48c671940ab262805440c0824f05c5538db85e132ddee02a9c84feef3c846550fc0a4561f313ef4a8eb225b9e23237a6cddb83c1f81c40cbea8657dfef6e73d78be2c890ec8050a1f09f53837cbfb6e67c8a288f28027fca4d2401f661dbe5e23cef4fb63e413b26596b8148565c9ed07b39f52bda65b5d1c9c85829faf0dd19939f4e8be50431254520d0d749f77e13714292afc8866ff315bba82d255705daea985d21ef752765f76d3138390d27034451b72fdf10877eb37bd6cee866fe4910f0baa7f6acdf5211902c54e8a82536f1b432e7748b6d58d2b0c215cc16e0194eb2042862b825bef5fff82fe18db57de0eab4d27aad63ea19f79a679d87fdff2f8ba99bb9af64224f2"}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000005c00)={r0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000005c40), &(0x7f0000005c80)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000005d00), &(0x7f0000005d40)}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006f40)={&(0x7f0000006e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0x10, 0x1}, {0xc}, {0x9, 0x4}, {0x4, 0x1}, {0xb, 0x5}]}, @func={0xa, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0]}}, &(0x7f0000006f00)=""/8, 0x63, 0x8, 0x1, 0x4, 0x10000}, 0x28) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007080)={0x6, 0xf, &(0x7f0000005dc0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ldst={0x3, 0x1, 0x3, 0x5, 0x8, 0x80, 0xfffffffffffffff0}], &(0x7f0000005e40)='syzkaller\x00', 0xa2, 0x1000, &(0x7f0000005e80)=""/4096, 0x40f00, 0xa, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000006f80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000006fc0)={0x5, 0x9, 0x9, 0x9e}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000007000)=[{0x0, 0x4, 0x7, 0x8}, {0x2, 0x4, 0x9, 0x4}, {0x1, 0x1, 0x6}, {0x0, 0x3, 0x3, 0xb}, {0x0, 0x5, 0xd, 0x9}, {0x3, 0x3, 0x7, 0x6}, {0x1, 0x5, 0xd, 0x9}], 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007140)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000007180)={"232ac9380924bc1ec3719147d0127f4c", 0x0, 0x0, {0x3, 0x21}, {0x4, 0x2}, 0x9, [0x6, 0x5, 0x6, 0x9, 0x9, 0x1, 0x6, 0x10000, 0x8, 0xfc, 0x1, 0x9, 0x8, 0x101, 0x23, 0x7fff]}) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000007280)=r10) r11 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r11, &(0x7f00000072c0)={0x18, 0x2, {0x0, @loopback}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_buf(r4, 0x6, 0xe, &(0x7f0000007300)=""/242, &(0x7f0000007400)=0xf2) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000007440)=0x6, 0x4) 275.923267ms ago: executing program 1 (id=4240): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"/289], 0x110}}, 0x0) sendto$inet(r3, &(0x7f0000004480)="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", 0xfe0, 0x40000, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002ab909000000000000000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa49"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x1}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 174.566195ms ago: executing program 0 (id=4241): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000170a0101000000000000000002000007090001"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002d00090027bd7000000000000500000014000a00020000000000000000000000000000014c764f47ed79740ba6e132b7c583a5e649514d23a533e533c206bb35f5ed332165a5c111eb15bd2a1362a0c2f0254234dd2682be30ea8ffa0c507b664284c6a6f1a9b2cff36c98d6442f73d84f72758e91b5bf02641fdd85c8edf22c528415480dc0985750e2739867871172cf38cce11aa364aaf9899bf35db2cc78ea"], 0x28}}, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r9, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x48}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0x6, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="150a28bd7000fbdbdf2502000000cfe3da5fce5cce1c2139de33d3977abcbec540f85d33f2b9ba0e5ba42e34ed512e84353f7701514a8b235452a2d27795edacf590fe5c8a49343a0271eb1b45b55e604bcbd9c30a325ac2ba91e6a031ad8b7d7bfbde6adba3576e1f2f98fd96563e28b71a0401a4627f0e8a70a56d8891cf2364731d4128a5b47f548145a38f06c8e9678d00"], 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x80) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r10) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=""/122, 0x0, 0x1000, 0x23ea, 0x2}, 0x20) (async) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=""/122, 0x0, 0x1000, 0x23ea, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r10, @ANYRES32=0x0], 0x30}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x1c, 0x18, 0x200, 0x70bd27, 0x25dfdbfc, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r1}]}, 0x1c}}, 0x0) 174.041056ms ago: executing program 4 (id=4242): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/103, 0x67}, {&(0x7f0000000900)=""/213, 0xd5}], 0x8}, 0x1}], 0x1, 0x832b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000001500)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e340c0c440c096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f65224e2348d0ef505fd8fc5b0eb2a6ad1c909e503fee5b7d7360c08faf9d16768b208f44ca12848e956908eb8c9a1f55b32fb8ceef547cde12cd8b", 0x5bb, 0x6d91fb6102d8990d, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x14, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 95.147223ms ago: executing program 3 (id=4243): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x33, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x100}, '+'}}}}}}, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000400), &(0x7f0000000300)=@tcp6=r7}, 0x20) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r9) sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-arm\x00'}, 0x58) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 0s ago: executing program 2 (id=4244): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) gettid() (async) r2 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x37, 0x400, 0x70bd26, 0x25dfdbfb, {0x11}, [@typed={0x8, 0x93, 0x0, 0x0, @pid=r2}, @typed={0x8, 0xfe, 0x0, 0x0, @uid=r3}, @generic="bea6f307cd96179b6abcb511356285bc012493fcfdf86a2af91ea537227662b188ba06c53d9b1baf8e26ce4f7ad027dc8d5bf93264296a40e53040d784a1006e"]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x880) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x9) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e00000000a5fe0280060001000020000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e00000000a5fe0280060001000020000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f00000003c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x1000, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffffffb, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) (async) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f00000003c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x1000, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffffffb, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) recvmmsg(r6, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) (async) recvmmsg(r6, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022c2a352f9040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r9, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r9, 0x0) kernel console output (not intermixed with test programs): med from eth1 [ 343.156022][T15998] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.216123][T15998] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.550597][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.565148][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.708372][T15998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.783766][T15998] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.838420][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.845924][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.896918][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.904313][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.251503][T16307] netlink: 'syz.2.2904': attribute type 3 has an invalid length. [ 344.504939][T16316] openvswitch: netlink: IPv4 tunnel dst address is zero [ 344.630643][ T5876] Bluetooth: hci5: command tx timeout [ 344.781444][T16339] netlink: 'syz.2.2912': attribute type 3 has an invalid length. [ 344.872677][T15998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.937535][T16332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.984313][T16342] __nla_validate_parse: 2 callbacks suppressed [ 344.984339][T16342] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2915'. [ 345.053297][T15998] veth0_vlan: entered promiscuous mode [ 345.146398][T15998] veth1_vlan: entered promiscuous mode [ 345.403856][T16369] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2920'. [ 345.428251][T15998] veth0_macvtap: entered promiscuous mode [ 345.471055][T15998] veth1_macvtap: entered promiscuous mode [ 345.551880][T15998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.606166][T15998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.695224][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.719878][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.720771][T16383] atomic_op ffff888054f93998 conn xmit_atomic 0000000000000000 [ 345.754714][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.803326][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.098484][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.117042][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.218208][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2926'. [ 346.241185][T16402] netlink: 'syz.2.2928': attribute type 12 has an invalid length. [ 346.251948][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.260930][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.711639][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2932'. [ 346.747795][T16426] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2932'. [ 347.350107][ T5182] Bluetooth: hci5: command 0x0405 tx timeout [ 347.475189][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 347.496407][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 348.333223][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2957'. [ 348.536411][ T5182] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.547275][ T5182] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.556523][ T5182] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.565731][ T5182] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.579140][ T5182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.596171][T16506] bond9: entered promiscuous mode [ 348.612167][T16506] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.764256][T16512] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.801501][T16512] bond10: entered promiscuous mode [ 348.830415][T16512] bond9: (slave bond10): Enslaving as an active interface with an up link [ 348.993343][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'. [ 349.050532][T16535] syzkaller1: entered promiscuous mode [ 349.073274][T16535] syzkaller1: entered allmulticast mode [ 349.163166][T16515] vxcan1 speed is unknown, defaulting to 1000 [ 349.361121][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'. [ 349.372433][T16558] bond0: option ad_select: unable to set because the bond device is up [ 349.394127][T16560] unknown channel width for channel at 909000KHz? [ 349.404095][T16560] unknown channel width for channel at 909000KHz? [ 349.424779][T16560] unknown channel width for channel at 909000KHz? [ 349.650437][T16573] netlink: 'syz.3.2976': attribute type 8 has an invalid length. [ 349.669906][T16568] nbd3: detected capacity change from 0 to 549764202496 [ 349.697368][ T5876] block nbd3: Receive control failed (result -104) [ 349.751563][T16515] lo speed is unknown, defaulting to 1000 [ 350.065561][T16588] __nla_validate_parse: 5 callbacks suppressed [ 350.065583][T16588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2981'. [ 350.166782][T16589] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2981'. [ 350.193576][T16589] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2981'. [ 350.603105][T16611] netlink: 'syz.2.2986': attribute type 1 has an invalid length. [ 350.609493][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 350.615841][T16611] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2986'. [ 350.639576][ T5876] Bluetooth: hci4: command tx timeout [ 350.663322][T16613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2987'. [ 351.135947][T16515] chnl_net:caif_netlink_parms(): no params data found [ 351.154421][T16641] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2992'. [ 351.505274][T16515] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.515511][T16515] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.523175][T16515] bridge_slave_0: entered allmulticast mode [ 351.534817][T16515] bridge_slave_0: entered promiscuous mode [ 351.562589][T16515] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.578729][T16515] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.591119][T16515] bridge_slave_1: entered allmulticast mode [ 351.598967][T16515] bridge_slave_1: entered promiscuous mode [ 351.627420][T16659] 8021q: VLANs not supported on ip6gre0 [ 351.707898][T16515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.726019][T16515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.917036][T16515] team0: Port device team_slave_0 added [ 351.927240][T16671] syz_tun: entered allmulticast mode [ 351.942154][T16671] netlink: 'syz.2.3000': attribute type 10 has an invalid length. [ 351.951880][T16670] syz_tun: left allmulticast mode [ 351.993187][T16676] tipc: Enabled bearer , priority 0 [ 352.003031][T16515] team0: Port device team_slave_1 added [ 352.025994][T16676] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 352.055444][T16676] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 352.091630][T16676] tipc: Resetting bearer [ 352.270081][T16515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.316977][T16515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.352995][T16515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.384167][T16515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.409522][T16515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.456407][T16515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.501567][T16693] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 352.520950][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.608813][T16704] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3007'. [ 352.711977][ T5876] Bluetooth: hci4: command tx timeout [ 352.763829][T16515] hsr_slave_0: entered promiscuous mode [ 352.781016][T16515] hsr_slave_1: entered promiscuous mode [ 352.787650][T16515] debugfs: 'hsr0' already exists in 'hsr' [ 352.806611][T16515] Cannot create hsr debugfs directory [ 352.815740][T16710] netlink: 'syz.2.3008': attribute type 1 has an invalid length. [ 352.899436][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.067298][T16729] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3012'. [ 353.083188][T16543] tipc: Node number set to 3990227145 [ 353.210779][T16730] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 353.226639][T16732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.242149][T16732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.270776][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 353.503724][T16732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.520463][T16732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.669861][T16732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.691350][T16732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.898948][T16732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.941984][T16732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.003849][T16515] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 354.097488][T16515] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 354.182188][T16515] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 354.258148][ T5967] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.274066][ T5967] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.331553][T16515] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 354.376100][T16765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.437439][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.461198][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.520082][T16778] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 354.531941][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.555760][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.666522][ T1017] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.683469][ T1017] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.794829][ T5876] Bluetooth: hci4: command tx timeout [ 354.832659][T16515] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.875201][T16515] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.896674][T16515] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.974003][T16788] sctp: [Deprecated]: syz.4.3029 (pid 16788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.974003][T16788] Use struct sctp_sack_info instead [ 354.987844][T16515] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.209681][T16814] __nla_validate_parse: 4 callbacks suppressed [ 355.209704][T16814] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3034'. [ 355.230257][T16815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3034'. [ 355.349289][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 355.471434][T16515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.502331][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3036'. [ 355.514979][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3038'. [ 355.522198][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3036'. [ 355.537117][T16824] netlink: 'syz.3.3037': attribute type 1 has an invalid length. [ 355.547612][T16824] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3037'. [ 355.578741][T16820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3036'. [ 355.626491][T16824] netlink: 'syz.3.3037': attribute type 3 has an invalid length. [ 355.635227][T16824] netlink: 'syz.3.3037': attribute type 3 has an invalid length. [ 355.677785][T16515] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.725146][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.732425][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.783394][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.790658][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.957173][T16515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.137975][ T5967] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.192500][ T5967] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.220099][ T5967] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.254407][ T5967] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.540622][T16856] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.609722][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3046'. [ 356.629967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.640928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 356.687417][T16515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.869843][ T5876] Bluetooth: hci4: command tx timeout [ 356.892869][T16515] veth0_vlan: entered promiscuous mode [ 356.905131][T16872] netlink: 'syz.2.3048': attribute type 1 has an invalid length. [ 356.937223][T16515] veth1_vlan: entered promiscuous mode [ 356.983998][T16878] netlink: 'syz.3.3051': attribute type 58 has an invalid length. [ 356.994721][T16878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3051'. [ 357.025703][T16515] veth0_macvtap: entered promiscuous mode [ 357.157311][T16515] veth1_macvtap: entered promiscuous mode [ 357.247364][T16515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.308466][T16515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.338845][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.398503][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.426356][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.456942][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.583602][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.618554][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.720592][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.752915][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.869472][T16907] netlink: 'syz.3.3059': attribute type 25 has an invalid length. [ 358.053873][T16918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2952'. [ 358.205388][T16924] tipc: Enabled bearer , priority 10 [ 358.482340][T16938] netlink: 'syz.2.3071': attribute type 30 has an invalid length. [ 358.519692][T16937] netlink: 'syz.0.3069': attribute type 1 has an invalid length. [ 358.689287][T16941] vxcan1 speed is unknown, defaulting to 1000 [ 358.933723][T16941] lo speed is unknown, defaulting to 1000 [ 359.395080][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.406711][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.431266][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.454688][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.463948][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.676438][T16960] vxcan1 speed is unknown, defaulting to 1000 [ 360.616722][T16960] lo speed is unknown, defaulting to 1000 [ 360.668879][T17004] Bluetooth: MGMT ver 1.23 [ 360.837714][T17006] netlink: 'syz.0.3082': attribute type 10 has an invalid length. [ 360.863544][T17006] __nla_validate_parse: 6 callbacks suppressed [ 360.863568][T17006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3082'. [ 360.917636][T17006] team0: Port device geneve0 added [ 360.944580][T17010] lo: entered promiscuous mode [ 360.950700][T17010] tunl0: entered promiscuous mode [ 360.956978][T17010] gre0: entered promiscuous mode [ 360.976536][T17010] gretap0: entered promiscuous mode [ 361.011683][T17010] erspan0: entered promiscuous mode [ 361.025255][T17010] ip_vti0: entered promiscuous mode [ 361.043260][T17010] ip6_vti0: entered promiscuous mode [ 361.072372][T17010] sit0: entered promiscuous mode [ 361.095189][T17010] ip6tnl0: entered promiscuous mode [ 361.106782][T17010] ip6gre0: entered promiscuous mode [ 361.121256][T17010] syz_tun: entered promiscuous mode [ 361.138320][T17010] ip6gretap0: entered promiscuous mode [ 361.156508][T17010] bond0: entered promiscuous mode [ 361.162579][T17010] geneve1: entered promiscuous mode [ 361.168260][T17010] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 361.190658][T17010] dummy0: entered promiscuous mode [ 361.205209][T17010] nlmon0: entered promiscuous mode [ 361.214440][T17010] caif0: entered promiscuous mode [ 361.221609][T17010] vxcan0: entered promiscuous mode [ 361.230468][T17010] vxcan1: entered promiscuous mode [ 361.238744][T17010] veth0: entered promiscuous mode [ 361.250187][T17010] veth1: entered promiscuous mode [ 361.263031][T17010] wg0: entered promiscuous mode [ 361.273924][T17010] wg1: entered promiscuous mode [ 361.286216][T17010] veth0_to_bridge: entered promiscuous mode [ 361.303063][T17010] bridge_slave_0: entered promiscuous mode [ 361.314225][T17010] veth1_to_bridge: entered promiscuous mode [ 361.327063][T17010] bridge_slave_1: entered promiscuous mode [ 361.346478][T17010] veth0_to_bond: entered promiscuous mode [ 361.357657][T17010] bond_slave_0: entered promiscuous mode [ 361.365191][T17010] veth0_to_team: entered promiscuous mode [ 361.375966][T17010] team_slave_0: entered promiscuous mode [ 361.383602][T17010] veth1_to_team: entered promiscuous mode [ 361.395049][T17010] team_slave_1: entered promiscuous mode [ 361.402833][T17010] veth0_to_batadv: entered promiscuous mode [ 361.415124][T17010] batadv_slave_0: entered promiscuous mode [ 361.437440][T17010] veth1_to_batadv: entered promiscuous mode [ 361.464321][T17010] batadv_slave_1: entered promiscuous mode [ 361.476933][T17010] tipc: Resetting bearer [ 361.487862][T17010] xfrm0: entered promiscuous mode [ 361.508523][T17010] veth0_to_hsr: entered promiscuous mode [ 361.516381][ T5182] Bluetooth: hci0: command tx timeout [ 361.545495][T17010] veth1_to_hsr: entered promiscuous mode [ 361.568662][T17010] hsr0: entered promiscuous mode [ 361.580821][T17010] veth1_virt_wifi: entered promiscuous mode [ 361.593708][T17010] veth0_virt_wifi: entered promiscuous mode [ 361.613945][T17010] macvtap0: entered promiscuous mode [ 361.625390][T17010] macsec0: entered promiscuous mode [ 361.636319][T17010] geneve0: entered promiscuous mode [ 361.660114][T17010] bridge1: entered promiscuous mode [ 361.668860][T17010] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 361.678383][T17010] gtp0: entered promiscuous mode [ 361.690113][T17010] bridge2: entered promiscuous mode [ 361.701009][T17010] bridge3: entered promiscuous mode [ 361.709952][T17010] bridge4: entered promiscuous mode [ 361.716153][T17010] bridge5: entered promiscuous mode [ 361.727596][T17010] bridge6: entered promiscuous mode [ 361.736390][T17010] geneve2: entered promiscuous mode [ 361.742691][T17010] geneve2: left allmulticast mode [ 361.756370][T17010] bridge7: entered promiscuous mode [ 361.765094][T17010] bridge8: entered promiscuous mode [ 361.774109][T17010] bridge9: entered promiscuous mode [ 361.783059][T17010] ip6erspan0: entered promiscuous mode [ 361.791520][T17010] bridge10: entered promiscuous mode [ 361.802201][T17010] bridge11: entered promiscuous mode [ 361.813633][T17010] bridge12: entered promiscuous mode [ 361.822141][T17010] gre1: entered promiscuous mode [ 361.862845][T17010] bridge13: entered promiscuous mode [ 361.882211][T17010] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 361.890678][T17010] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 361.906318][T17010] bond1: entered promiscuous mode [ 361.911666][T17010] gretap1: entered promiscuous mode [ 361.926120][T17010] vlan3: entered promiscuous mode [ 361.932123][T17010] vlan3: left allmulticast mode [ 361.937092][T17010] bond1: left allmulticast mode [ 361.943132][T17010] gretap1: left allmulticast mode [ 361.950648][T17010] bond2: entered promiscuous mode [ 361.955925][T17010] gretap2: entered promiscuous mode [ 361.962325][T17010] bridge0: entered promiscuous mode [ 361.967723][T17010] bridge14: entered promiscuous mode [ 361.974144][T17010] bridge15: entered promiscuous mode [ 361.984287][T17010] bridge16: entered promiscuous mode [ 361.993442][T17010] bridge17: entered promiscuous mode [ 362.002437][T17010] bridge18: entered promiscuous mode [ 362.008962][T17010] veth2: entered promiscuous mode [ 362.014973][T17010] veth3: entered promiscuous mode [ 362.025890][T17010] bond3: entered promiscuous mode [ 362.031095][T17010] geneve3: entered promiscuous mode [ 362.044386][T17010] sit1: entered promiscuous mode [ 362.068911][T17010] vlan0: entered promiscuous mode [ 362.076347][T17010] gretap3: entered promiscuous mode [ 362.081962][T17010] gretap3: left allmulticast mode [ 362.091379][T17010] bond4: entered promiscuous mode [ 362.097891][T17010] veth4: entered promiscuous mode [ 362.103679][T17010] veth5: entered promiscuous mode [ 362.110436][T17010] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 362.117712][T17010] vti0: entered promiscuous mode [ 362.124515][T17010] vxlan0: entered promiscuous mode [ 362.134678][T17010] vxlan1: entered promiscuous mode [ 362.143626][T17010] netdevsim netdevsim2 eth0: entered promiscuous mode [ 362.151690][T17010] netdevsim netdevsim2 eth1: entered promiscuous mode [ 362.158709][T17010] netdevsim netdevsim2 eth2: entered promiscuous mode [ 362.167112][T17010] netdevsim netdevsim2 eth3: entered promiscuous mode [ 362.174293][T17010] bond5: entered promiscuous mode [ 362.259222][ T59] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.273496][ T59] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.298872][ T59] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.318719][ T59] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.328618][ T59] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.338472][T17023] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3087'. [ 362.338911][ T59] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.391219][ T36] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.400792][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.922764][T17046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3091'. [ 362.970991][T17049] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3091'. [ 363.001960][T17049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3091'. [ 363.012320][T17046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3091'. [ 363.365463][T16960] chnl_net:caif_netlink_parms(): no params data found [ 363.476263][T17057] netlink: 'syz.4.3095': attribute type 1 has an invalid length. [ 363.479096][T17058] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 363.564426][T17058] netlink: 'syz.2.3096': attribute type 1 has an invalid length. [ 363.593151][ T5182] Bluetooth: hci0: command tx timeout [ 363.783918][T17058] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.006076][T17064] veth0_to_bond: left promiscuous mode [ 364.058710][T17064] bond4: (slave veth0_to_bond): Releasing active interface [ 364.137633][T17072] : entered promiscuous mode [ 364.407905][T16960] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.427834][T16960] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.447209][T16960] bridge_slave_0: entered allmulticast mode [ 364.490783][T16960] bridge_slave_0: entered promiscuous mode [ 364.517086][T16960] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.541651][T16960] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.583781][T16960] bridge_slave_1: entered allmulticast mode [ 364.591316][T17086] netlink: 'syz.2.3101': attribute type 10 has an invalid length. [ 364.632382][T16960] bridge_slave_1: entered promiscuous mode [ 364.901426][T16960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.962071][T16960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.148274][T17099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.236904][T16960] team0: Port device team_slave_0 added [ 365.275142][T16960] team0: Port device team_slave_1 added [ 365.478689][T17110] netlink: 'syz.2.3107': attribute type 33 has an invalid length. [ 365.507087][T17110] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3107'. [ 365.545591][T16960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.569327][T16960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.606552][ T94] block nbd2: Possible stuck request ffff8880251de000: control (read@0,4096B). Runtime 120 seconds [ 365.628875][T16960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.669164][ T5182] Bluetooth: hci0: command tx timeout [ 365.678130][T16960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.720159][T16960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.774362][T16960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.926440][T17130] netlink: 'syz.0.3111': attribute type 11 has an invalid length. [ 365.935116][T17130] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3111'. [ 365.981752][T17144] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3115'. [ 366.087225][T16960] hsr_slave_0: entered promiscuous mode [ 366.101953][T16960] hsr_slave_1: entered promiscuous mode [ 366.117720][T16960] debugfs: 'hsr0' already exists in 'hsr' [ 366.124690][T16960] Cannot create hsr debugfs directory [ 366.174801][T17149] netlink: 'syz.3.3116': attribute type 4 has an invalid length. [ 366.231118][T17154] netlink: 'syz.3.3116': attribute type 4 has an invalid length. [ 366.262503][T17155] tc_dump_action: action bad kind [ 366.270467][T17156] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3118'. [ 366.324828][T17152] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3118'. [ 366.345506][T17152] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3118'. [ 366.785106][T16960] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.852387][T16960] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.017401][T17191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3127'. [ 367.045695][T17195] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3128'. [ 367.077676][T17195] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3128'. [ 367.102605][T16960] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.133510][T16960] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.193769][T17200] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3129'. [ 367.278786][T16960] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.331352][T16960] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.493517][T16960] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.538140][T16960] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.752666][ T5182] Bluetooth: hci0: command tx timeout [ 367.872016][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'. [ 368.072170][T16960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 368.123019][T16960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 368.183962][T16960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 368.223751][T16960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 368.525199][T16960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.636436][T16960] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.673342][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.680596][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.765440][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.772907][ T7266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.540612][T17291] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 369.572055][T17291] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 369.969111][T16960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.283551][T17321] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 370.306740][T16960] veth0_vlan: entered promiscuous mode [ 370.310250][T17321] netlink: 'syz.3.3163': attribute type 10 has an invalid length. [ 370.337425][T17321] bridge0: port 3(team0) entered blocking state [ 370.348412][T17321] bridge0: port 3(team0) entered disabled state [ 370.355703][T17321] team0: entered allmulticast mode [ 370.361279][T17321] team_slave_0: entered allmulticast mode [ 370.367486][T17321] team_slave_1: entered allmulticast mode [ 370.377634][T17321] team0: entered promiscuous mode [ 370.387438][T17321] team_slave_0: entered promiscuous mode [ 370.408578][T17321] team_slave_1: entered promiscuous mode [ 370.424886][T17321] bridge0: port 3(team0) entered blocking state [ 370.431414][T17321] bridge0: port 3(team0) entered forwarding state [ 370.495724][T16960] veth1_vlan: entered promiscuous mode [ 370.684489][T16960] veth0_macvtap: entered promiscuous mode [ 370.722550][T16960] veth1_macvtap: entered promiscuous mode [ 370.796536][T16960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.834003][T16960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.897141][ T7266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.955797][ T7266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.980214][ T7266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.004533][ T7266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.018565][T17360] __nla_validate_parse: 14 callbacks suppressed [ 371.018591][T17360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3174'. [ 371.049510][T17355] netlink: 'syz.4.3172': attribute type 24 has an invalid length. [ 371.217469][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.250148][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.358544][ T7266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.385974][ T7266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.446101][T17365] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.3175'. [ 371.872540][ T1017] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.906945][ T1017] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.961140][T17387] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 371.978887][ T7265] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.989958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.001238][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 372.014766][ T94] block nbd1: Possible stuck request ffff8880251a0000: control (read@0,4096B). Runtime 240 seconds [ 372.030263][ T25] block nbd0: Possible stuck request ffff88802517e000: control (read@0,4096B). Runtime 240 seconds [ 372.058506][ T7265] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.293621][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 372.309567][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 372.324507][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 372.339499][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 372.352008][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.444735][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3187'. [ 372.455456][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3187'. [ 372.479655][T17402] vxcan1 speed is unknown, defaulting to 1000 [ 372.494497][T17411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3186'. [ 372.630322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.294567][T17435] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3194'. [ 373.323123][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 373.376970][T17435] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3194'. [ 373.483314][T17451] netlink: 'syz.0.3196': attribute type 3 has an invalid length. [ 373.513497][T17451] netlink: 'syz.0.3196': attribute type 1 has an invalid length. [ 373.670399][T17402] lo speed is unknown, defaulting to 1000 [ 373.766754][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3199'. [ 374.072986][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 374.117313][ T59] bond5: left promiscuous mode [ 374.132051][ T59] bridge0: port 1(bond5) entered disabled state [ 374.389567][ T5182] Bluetooth: hci1: command tx timeout [ 375.916884][ T59] dvmrp0 (unregistering): left allmulticast mode [ 376.472949][ T5876] Bluetooth: hci1: command tx timeout [ 376.947054][ T59] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 376.970483][ T59] bond0 (unregistering): Released all slaves [ 376.987918][ T59] bond1 (unregistering): Released all slaves [ 377.106807][ T59] bond2 (unregistering): Released all slaves [ 377.231737][ T59] bond3 (unregistering): Released all slaves [ 377.248106][ T59] bond4 (unregistering): Released all slaves [ 377.382475][ T59] bond5 (unregistering): Released all slaves [ 377.404402][ T59] bond6 (unregistering): Released all slaves [ 377.421626][ T59] bond7 (unregistering): Released all slaves [ 377.543457][ T59] bond8 (unregistering): Released all slaves [ 377.668519][ T59] bond9 (unregistering): (slave bond10): Releasing backup interface [ 377.680404][ T59] bond10 (unregistering): left promiscuous mode [ 377.687019][ T59] bond9 (unregistering): Released all slaves [ 377.826629][ T59] bond10 (unregistering): Released all slaves [ 378.101989][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 378.151371][ T59] : left promiscuous mode [ 378.315468][ T59] tipc: Disabling bearer [ 378.380447][ T59] tipc: Disabling bearer [ 378.416672][ T59] tipc: Left network mode [ 378.529647][T17511] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 378.550275][ T5876] Bluetooth: hci1: command 0x040f tx timeout [ 378.622715][T17515] netlink: 'syz.2.3217': attribute type 10 has an invalid length. [ 378.709226][T17402] chnl_net:caif_netlink_parms(): no params data found [ 379.447240][T17402] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.470048][T17402] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.489425][T17402] bridge_slave_0: entered allmulticast mode [ 379.510239][T17402] bridge_slave_0: entered promiscuous mode [ 379.563142][T17402] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.599324][T17402] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.620795][T17402] bridge_slave_1: entered allmulticast mode [ 379.633561][T17550] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3221'. [ 379.639799][T17402] bridge_slave_1: entered promiscuous mode [ 379.769433][ T59] hsr_slave_0: left promiscuous mode [ 379.785356][ T59] hsr_slave_1: left promiscuous mode [ 379.838149][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3226'. [ 380.320346][ T25] block nbd3: Possible stuck request ffff88802520e000: control (read@0,4096B). Runtime 30 seconds [ 380.631054][ T5182] Bluetooth: hci1: command 0x040f tx timeout [ 380.871580][T17550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3221'. [ 381.107489][T17402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.187518][T17402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.315113][T17402] team0: Port device team_slave_0 added [ 381.364324][T17402] team0: Port device team_slave_1 added [ 381.516229][T17402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.530583][T17402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.557989][T17402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.640572][T17402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.675171][T17402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.727424][T17402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.792374][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 381.816502][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3239'. [ 381.927995][ T59] IPVS: stop unused estimator thread 0... [ 381.955600][T17402] hsr_slave_0: entered promiscuous mode [ 381.984221][T17402] hsr_slave_1: entered promiscuous mode [ 382.228471][T17620] netlink: zone id is out of range [ 382.240531][T17620] netlink: zone id is out of range [ 382.245723][T17620] netlink: zone id is out of range [ 382.303165][T17620] netlink: zone id is out of range [ 382.353502][T17620] netlink: zone id is out of range [ 382.395673][T17620] netlink: zone id is out of range [ 382.445775][T17620] netlink: zone id is out of range [ 382.461277][T17631] netlink: 'syz.0.3246': attribute type 33 has an invalid length. [ 382.500844][T17620] netlink: zone id is out of range [ 382.506047][T17620] netlink: zone id is out of range [ 382.535649][T17631] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 382.716718][ T5182] Bluetooth: hci1: command 0x040f tx timeout [ 383.265549][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3255'. [ 383.701497][T17402] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.766570][T17677] net_ratelimit: 18 callbacks suppressed [ 383.766594][T17677] netlink: zone id is out of range [ 383.789802][T17402] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.808256][T17679] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3259'. [ 383.833029][T17677] netlink: zone id is out of range [ 383.841035][T17402] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.874480][T17677] netlink: zone id is out of range [ 383.898929][T17677] netlink: zone id is out of range [ 383.904917][T17677] netlink: zone id is out of range [ 383.921851][T17402] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.950016][T17677] netlink: zone id is out of range [ 383.964811][T17677] netlink: zone id is out of range [ 384.031193][T17677] netlink: zone id is out of range [ 384.060328][T17677] netlink: zone id is out of range [ 384.098296][T17677] netlink: zone id is out of range [ 384.289615][T17693] bond1: entered promiscuous mode [ 384.319320][T17693] bond1: entered allmulticast mode [ 384.325340][T17693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.748435][T17693] bond1 (unregistering): Released all slaves [ 384.784847][T17707] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 384.803357][ T5182] Bluetooth: hci1: command 0x040f tx timeout [ 384.817042][T17708] tipc: Started in network mode [ 384.823525][T17708] tipc: Node identity ac1414aa, cluster identity 4711 [ 384.832128][T17708] tipc: Enabling of bearer rejected, failed to enable media [ 384.908625][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3264'. [ 384.938120][T17402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.984200][T17713] delete_channel: no stack [ 385.005269][T17402] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.038525][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.047466][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.084709][T17719] netlink: 'syz.0.3267': attribute type 1 has an invalid length. [ 385.107754][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.115310][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.320783][T17402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.410263][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3269'. [ 385.518724][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3270'. [ 385.730056][T17744] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3274'. [ 385.770288][T17744] netlink: 1056 bytes leftover after parsing attributes in process `syz.2.3274'. [ 385.900338][T17747] netlink: 'syz.0.3275': attribute type 1 has an invalid length. [ 385.923980][T17747] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3275'. [ 385.962972][T17747] netlink: 'syz.0.3275': attribute type 1 has an invalid length. [ 385.984295][T17402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.234823][T17766] netlink: 'syz.0.3279': attribute type 4 has an invalid length. [ 386.293100][T17771] netlink: 'syz.0.3279': attribute type 4 has an invalid length. [ 386.446690][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3284'. [ 386.765751][T17789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3286'. [ 386.776821][T17790] netlink: 'syz.1.3287': attribute type 2 has an invalid length. [ 386.855914][T17402] veth0_vlan: entered promiscuous mode [ 386.880799][T17402] veth1_vlan: entered promiscuous mode [ 386.962968][T17402] veth0_macvtap: entered promiscuous mode [ 386.995126][T17402] veth1_macvtap: entered promiscuous mode [ 387.020148][T17402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.053819][T17402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.073302][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.085152][ T1002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.098086][ T1002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.111266][ T1002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.377746][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.395063][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.554806][T17810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.613270][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.634184][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.998860][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.226767][T17846] netlink: 'syz.0.3303': attribute type 32 has an invalid length. [ 388.510330][T17855] netlink: 'syz.1.3308': attribute type 1 has an invalid length. [ 388.561684][T17857] __nla_validate_parse: 2 callbacks suppressed [ 388.561708][T17857] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3306'. [ 388.603737][T17855] : entered promiscuous mode [ 388.678489][T17861] netlink: 'syz.4.3309': attribute type 2 has an invalid length. [ 388.710246][T17861] netlink: 'syz.4.3309': attribute type 8 has an invalid length. [ 388.718067][T17861] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3309'. [ 389.332218][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.359279][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.367996][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.380132][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.389847][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.874447][T17878] vxcan1 speed is unknown, defaulting to 1000 [ 389.967440][T17900] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3320'. [ 389.993889][T17900] netlink: 5136 bytes leftover after parsing attributes in process `syz.4.3320'. [ 390.023268][T17900] netlink: 5136 bytes leftover after parsing attributes in process `syz.4.3320'. [ 390.069557][T17900] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3320'. [ 390.237000][T17912] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3321'. [ 390.412864][T17920] net_ratelimit: 19 callbacks suppressed [ 390.412888][T17920] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 390.557240][T17878] lo speed is unknown, defaulting to 1000 [ 390.652854][T17931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3327'. [ 390.682389][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'. [ 390.704892][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3329'. [ 390.724822][T17939] netlink: 'syz.1.3330': attribute type 1 has an invalid length. [ 390.961350][T17946] netlink: 'syz.1.3332': attribute type 10 has an invalid length. [ 391.070728][T17946] team0: Port device dummy0 added [ 391.121035][T17951] sctp: [Deprecated]: syz.3.3333 (pid 17951) Use of int in max_burst socket option deprecated. [ 391.121035][T17951] Use struct sctp_assoc_value instead [ 391.137828][T17946] netlink: 'syz.1.3332': attribute type 10 has an invalid length. [ 391.150688][T17950] syzkaller1: entered promiscuous mode [ 391.156548][T17950] syzkaller1: entered allmulticast mode [ 391.187462][T17946] team0: Port device dummy0 removed [ 391.211203][T17946] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 391.435245][ T5182] Bluetooth: hci2: command tx timeout [ 391.505396][T17959] netlink: 'syz.4.3336': attribute type 10 has an invalid length. [ 391.507389][T17878] chnl_net:caif_netlink_parms(): no params data found [ 391.789408][T17878] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.815856][T17878] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.870473][T17878] bridge_slave_0: entered allmulticast mode [ 391.879328][T17878] bridge_slave_0: entered promiscuous mode [ 391.953055][T17878] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.969216][T17878] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.977037][T17878] bridge_slave_1: entered allmulticast mode [ 392.012665][T17878] bridge_slave_1: entered promiscuous mode [ 392.087912][T17989] netlink: 'syz.1.3343': attribute type 9 has an invalid length. [ 392.152751][T17878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.215088][T17878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.394128][T17878] team0: Port device team_slave_0 added [ 392.453752][T18001] veth3: entered allmulticast mode [ 392.468167][T17878] team0: Port device team_slave_1 added [ 392.592676][T17878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.600056][T17878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.628458][T17878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.646342][T17878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.654616][T17878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.703124][T17878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.738251][T18019] netlink: 'syz.0.3352': attribute type 1 has an invalid length. [ 392.759432][T18019] netlink: 'syz.0.3352': attribute type 2 has an invalid length. [ 393.062012][T17878] hsr_slave_0: entered promiscuous mode [ 393.075671][T17878] hsr_slave_1: entered promiscuous mode [ 393.104788][T17878] debugfs: 'hsr0' already exists in 'hsr' [ 393.137045][T17878] Cannot create hsr debugfs directory [ 393.158929][T18035] netlink: 'syz.3.3357': attribute type 11 has an invalid length. [ 393.252069][T18037] netlink: 'syz.1.3358': attribute type 1 has an invalid length. [ 393.262402][T18037] nbd: error processing sock list [ 393.273308][T18037] block nbd4: shutting down sockets [ 393.519440][ T5182] Bluetooth: hci2: command tx timeout [ 393.691285][T18054] netlink: 'syz.3.3363': attribute type 17 has an invalid length. [ 393.719588][T18054] __nla_validate_parse: 7 callbacks suppressed [ 393.719611][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3363'. [ 393.763225][T18054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3363'. [ 393.769629][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3363'. [ 393.819750][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3363'. [ 393.835384][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3363'. [ 393.844721][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3363'. [ 394.136114][T18075] netlink: 'syz.4.3366': attribute type 1 has an invalid length. [ 394.144381][T18075] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3366'. [ 394.208823][T18069] team0 (unregistering): Port device team_slave_0 removed [ 394.225102][T18069] team0 (unregistering): Port device team_slave_1 removed [ 394.238433][T18069] team0 (unregistering): Port device geneve0 removed [ 394.424449][T18077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3368'. [ 394.698299][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3374'. [ 394.827883][T17878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.883440][T17878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.925533][T17878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.982316][T17878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.373075][T17878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.436818][T17878] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.478776][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.486076][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.546355][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.553639][ T7266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.593340][ T5182] Bluetooth: hci2: command tx timeout [ 395.623957][T18131] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 395.635872][T18131] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 395.674153][ T25] block nbd2: Possible stuck request ffff8880251de000: control (read@0,4096B). Runtime 150 seconds [ 395.746922][T17878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.854731][T18136] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 395.894630][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3390'. [ 396.302849][T17878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.490584][T17878] veth0_vlan: entered promiscuous mode [ 396.536789][T17878] veth1_vlan: entered promiscuous mode [ 396.617913][T17878] veth0_macvtap: entered promiscuous mode [ 396.662000][T17878] veth1_macvtap: entered promiscuous mode [ 396.721566][T17878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.761461][T17878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.800590][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.818236][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.836231][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.857529][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.040626][T18182] pimreg: entered allmulticast mode [ 397.669745][ T5182] Bluetooth: hci2: command tx timeout [ 397.792125][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.816767][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.916593][T18204] vlan0: entered allmulticast mode [ 397.922740][T18204] bond0: entered allmulticast mode [ 397.928346][T18204] bond_slave_0: entered allmulticast mode [ 397.935439][T18204] bond_slave_1: entered allmulticast mode [ 397.986989][T18214] validate_nla: 2 callbacks suppressed [ 397.987014][T18214] netlink: 'syz.0.3411': attribute type 4 has an invalid length. [ 398.082369][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.098008][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.512217][T18238] 8021q: VLANs not supported on ip6_vti0 [ 398.698541][T18249] netlink: 'syz.4.3424': attribute type 21 has an invalid length. [ 398.758775][T18240] syzkaller0: entered promiscuous mode [ 398.775585][T18240] syzkaller0: entered allmulticast mode [ 398.788553][T18249] netlink: 'syz.4.3424': attribute type 4 has an invalid length. [ 398.802647][T18249] netlink: 'syz.4.3424': attribute type 5 has an invalid length. [ 398.811257][T18249] __nla_validate_parse: 50 callbacks suppressed [ 398.811279][T18249] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3424'. [ 398.815341][T18262] netlink: 'syz.4.3424': attribute type 11 has an invalid length. [ 401.263368][T18290] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3435'. [ 401.370394][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 401.440432][T18302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3437'. [ 401.545721][T18307] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 401.702641][T18309] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 401.715990][T18309] CPU: 0 UID: 0 PID: 18309 Comm: syz.1.3440 Not tainted syzkaller #0 PREEMPT(full) [ 401.716037][T18309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.716066][T18309] Call Trace: [ 401.716075][T18309] [ 401.716086][T18309] dump_stack_lvl+0x189/0x250 [ 401.716130][T18309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.716158][T18309] ? __pfx__printk+0x10/0x10 [ 401.716196][T18309] ? kernfs_path_from_node+0x2f/0x290 [ 401.716224][T18309] ? kernfs_path_from_node+0x250/0x290 [ 401.716246][T18309] ? kernfs_path_from_node+0x2f/0x290 [ 401.716275][T18309] sysfs_warn_dup+0x8e/0xa0 [ 401.716299][T18309] sysfs_do_create_link_sd+0xc0/0x110 [ 401.716326][T18309] device_add_class_symlinks+0x1cf/0x240 [ 401.716357][T18309] device_add+0x475/0xb50 [ 401.716449][T18309] wiphy_register+0x1ba6/0x28d0 [ 401.716511][T18309] ? __pfx_wiphy_register+0x10/0x10 [ 401.716540][T18309] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 401.716572][T18309] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 401.716615][T18309] ieee80211_register_hw+0x3425/0x4080 [ 401.716661][T18309] ? ieee80211_register_hw+0x1471/0x4080 [ 401.716695][T18309] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 401.716725][T18309] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 401.716766][T18309] ? __hrtimer_setup+0x187/0x210 [ 401.716788][T18309] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 401.716852][T18309] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 401.716919][T18309] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 401.716945][T18309] ? trace_kmalloc+0x1f/0xd0 [ 401.716977][T18309] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 401.717008][T18309] ? kstrndup+0xbf/0x160 [ 401.717044][T18309] hwsim_new_radio_nl+0xea4/0x1b10 [ 401.717075][T18309] ? __pfx___nla_validate_parse+0x10/0x10 [ 401.717129][T18309] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 401.717174][T18309] ? __nla_parse+0x40/0x60 [ 401.717211][T18309] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 401.717251][T18309] genl_family_rcv_msg_doit+0x212/0x300 [ 401.717285][T18309] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 401.717343][T18309] ? bpf_lsm_capable+0x9/0x20 [ 401.717374][T18309] ? security_capable+0x7e/0x2e0 [ 401.717415][T18309] genl_rcv_msg+0x60e/0x790 [ 401.717448][T18309] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.717480][T18309] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 401.717526][T18309] netlink_rcv_skb+0x205/0x470 [ 401.717555][T18309] ? __lock_acquire+0xab9/0xd20 [ 401.717590][T18309] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.717616][T18309] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.717672][T18309] ? down_read+0x1ad/0x2e0 [ 401.717708][T18309] genl_rcv+0x28/0x40 [ 401.717729][T18309] netlink_unicast+0x82f/0x9e0 [ 401.717769][T18309] ? __pfx_netlink_unicast+0x10/0x10 [ 401.717800][T18309] ? netlink_sendmsg+0x642/0xb30 [ 401.717830][T18309] ? skb_put+0x11b/0x210 [ 401.717856][T18309] netlink_sendmsg+0x805/0xb30 [ 401.717900][T18309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.717937][T18309] ? aa_sock_msg_perm+0xf1/0x1d0 [ 401.717975][T18309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.717998][T18309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.718032][T18309] __sock_sendmsg+0x219/0x270 [ 401.718066][T18309] ____sys_sendmsg+0x505/0x830 [ 401.718096][T18309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.718131][T18309] ? import_iovec+0x74/0xa0 [ 401.718162][T18309] ___sys_sendmsg+0x21f/0x2a0 [ 401.718210][T18309] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.718280][T18309] ? __fget_files+0x2a/0x420 [ 401.718312][T18309] ? __fget_files+0x3a0/0x420 [ 401.718358][T18309] __x64_sys_sendmsg+0x19b/0x260 [ 401.718384][T18309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.718420][T18309] ? rcu_is_watching+0x15/0xb0 [ 401.718449][T18309] ? do_syscall_64+0xbe/0x3b0 [ 401.718493][T18309] do_syscall_64+0xfa/0x3b0 [ 401.718522][T18309] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.718551][T18309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.718574][T18309] ? clear_bhb_loop+0x60/0xb0 [ 401.718600][T18309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.718621][T18309] RIP: 0033:0x7f0174f8ebe9 [ 401.718642][T18309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.718662][T18309] RSP: 002b:00007f01731d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.718692][T18309] RAX: ffffffffffffffda RBX: 00007f01751b6090 RCX: 00007f0174f8ebe9 [ 401.718709][T18309] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 401.718722][T18309] RBP: 00007f0175011e19 R08: 0000000000000000 R09: 0000000000000000 [ 401.718736][T18309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.718749][T18309] R13: 00007f01751b6128 R14: 00007f01751b6090 R15: 00007fff7fd3eaa8 [ 401.718786][T18309] [ 402.184358][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.200742][ T94] block nbd0: Possible stuck request ffff88802517e000: control (read@0,4096B). Runtime 270 seconds [ 402.212119][ T25] block nbd1: Possible stuck request ffff8880251a0000: control (read@0,4096B). Runtime 270 seconds [ 402.398550][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 402.594603][T18338] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 402.838209][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3454'. [ 402.847605][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 403.097407][T18360] sctp: [Deprecated]: syz.3.3460 (pid 18360) Use of int in maxseg socket option. [ 403.097407][T18360] Use struct sctp_assoc_value instead [ 403.343002][T18373] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3463'. [ 403.357244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.490333][T18374] vxcan1 speed is unknown, defaulting to 1000 [ 403.892376][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3469'. [ 403.910364][T18395] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.3470'. [ 403.986737][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3472'. [ 404.393303][T18374] lo speed is unknown, defaulting to 1000 [ 404.487172][T18422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.520376][T18422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3477'. [ 405.034457][T18442] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3481'. [ 405.045961][T18441] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3481'. [ 406.160523][T18480] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 406.181294][T18482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3492'. [ 406.191942][T18480] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 406.210222][T18484] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 406.365834][T18486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.609964][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3496'. [ 406.671983][T18502] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3495'. [ 406.716906][T18502] netem: invalid attributes len -24 [ 406.771447][T18502] netem: change failed [ 406.943232][T18515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3499'. [ 407.185676][T18521] netlink: 'syz.4.3501': attribute type 10 has an invalid length. [ 407.457194][T18521] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 407.842038][T18550] netlink: 'syz.0.3510': attribute type 11 has an invalid length. [ 408.134801][T18573] netlink: 'syz.1.3515': attribute type 2 has an invalid length. [ 409.353230][T18629] __nla_validate_parse: 7 callbacks suppressed [ 409.353265][T18629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3532'. [ 409.388524][T18629] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3532'. [ 409.422716][T18632] netlink: 'syz.1.3533': attribute type 1 has an invalid length. [ 409.449643][T18632] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3533'. [ 409.609349][T18638] netlink: 'syz.4.3536': attribute type 12 has an invalid length. [ 409.660520][T18638] tipc: Started in network mode [ 409.685315][T18638] tipc: Node identity 080211000001, cluster identity 4711 [ 409.700225][T18638] tipc: Enabled bearer , priority 0 [ 409.726068][T18638] tipc: Resetting bearer [ 410.399361][ T25] block nbd3: Possible stuck request ffff88802520e000: control (read@0,4096B). Runtime 60 seconds [ 410.729545][T16540] tipc: Node number set to 134418688 [ 410.980021][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3554'. [ 411.072419][T18701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3556'. [ 411.108409][T18701] delete_channel: no stack [ 411.250519][T18707] netlink: 'syz.0.3559': attribute type 9 has an invalid length. [ 411.272827][T18705] netlink: 664 bytes leftover after parsing attributes in process `syz.1.3558'. [ 411.301342][T18708] netlink: 'syz.0.3559': attribute type 9 has an invalid length. [ 411.322437][T18705] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.3558'. [ 412.707634][T18769] netlink: 'syz.3.3582': attribute type 4 has an invalid length. [ 412.728871][T18769] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3582'. [ 412.838853][T18770] sch_fq: defrate 0 ignored. [ 412.845465][T18779] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 413.053345][T18791] rdma_rxe: rxe_newlink: failed to add lo [ 413.129567][T16536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.141700][T18797] netlink: 'syz.4.3586': attribute type 10 has an invalid length. [ 413.158114][T18791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.203424][T18801] netlink: 'syz.4.3586': attribute type 10 has an invalid length. [ 413.254021][T18797] team0: Port device dummy0 added [ 413.343342][T18801] team0: Port device dummy0 removed [ 413.354728][T18801] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 413.364095][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout [ 413.370623][ T5182] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 413.445906][T18809] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3591'. [ 413.504671][T18812] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3594'. [ 413.676229][T18823] bond0: entered promiscuous mode [ 413.700743][T18823] bond_slave_0: entered promiscuous mode [ 413.732286][T18823] bond_slave_1: entered promiscuous mode [ 413.741600][T18823] bond0: left promiscuous mode [ 413.746605][T18823] bond_slave_0: left promiscuous mode [ 413.766677][T18823] bond_slave_1: left promiscuous mode [ 414.072359][T16536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.373769][T18861] __nla_validate_parse: 1 callbacks suppressed [ 414.373794][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3608'. [ 414.428059][T18864] tipc: Started in network mode [ 414.458845][T18864] tipc: Node identity 7e9f7e1dbabc, cluster identity 4711 [ 414.467765][T18864] tipc: Enabled bearer , priority 0 [ 414.482345][T18865] syzkaller0: entered promiscuous mode [ 414.488367][T18865] syzkaller0: entered allmulticast mode [ 414.606128][T18865] tipc: Resetting bearer [ 414.670669][T18865] tipc: Disabling bearer [ 414.705715][T18879] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3614'. [ 415.444245][T18912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.586027][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3625'. [ 415.611407][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3625'. [ 415.774057][T18926] tap0: tun_chr_ioctl cmd 1074025678 [ 415.779770][T18926] tap0: group set to 0 [ 415.813536][T18936] IPVS: set_ctl: invalid protocol: 98 172.30.1.2:20001 [ 416.091438][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3634'. [ 416.149696][T18949] netlink: 'syz.2.3633': attribute type 1 has an invalid length. [ 416.192012][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3634'. [ 416.204833][T18949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.220635][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3636'. [ 416.235331][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3636'. [ 416.468930][T18972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3640'. [ 416.745774][T18978] vxcan1 speed is unknown, defaulting to 1000 [ 416.802176][ T30] audit: type=1800 audit(1755815083.525:3): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3642" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=301 res=0 errno=0 [ 417.174791][T18997] netlink: 'syz.3.3646': attribute type 1 has an invalid length. [ 417.416579][T19010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3649'. [ 417.440568][T18966] veth0: entered promiscuous mode [ 417.497000][T18952] veth0: left promiscuous mode [ 417.551631][T18978] lo speed is unknown, defaulting to 1000 [ 417.805069][ C1] Unknown status report in ack skb [ 418.350736][T19040] tipc: Enabling of bearer rejected, already enabled [ 418.624417][T19053] openvswitch: netlink: VXLAN extension 13 out of range max 1 [ 419.248272][T19079] wg1: entered promiscuous mode [ 419.935621][T19109] : renamed from hsr0 (while UP) [ 420.330063][T19137] __nla_validate_parse: 25 callbacks suppressed [ 420.330090][T19137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3682'. [ 420.343278][T19142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3685'. [ 420.398019][T19147] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3684'. [ 420.542821][T19144] syz.2.3684: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 420.588035][T19144] CPU: 1 UID: 0 PID: 19144 Comm: syz.2.3684 Not tainted syzkaller #0 PREEMPT(full) [ 420.588070][T19144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.588085][T19144] Call Trace: [ 420.588094][T19144] [ 420.588104][T19144] dump_stack_lvl+0x189/0x250 [ 420.588145][T19144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.588180][T19144] ? __pfx__printk+0x10/0x10 [ 420.588212][T19144] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 420.588241][T19144] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 420.588268][T19144] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 420.588294][T19144] warn_alloc+0x214/0x310 [ 420.588336][T19144] ? __pfx_warn_alloc+0x10/0x10 [ 420.588381][T19144] ? __get_vm_area_node+0x28f/0x300 [ 420.588413][T19144] ? nf_tables_newset+0x132b/0x2530 [ 420.588442][T19144] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 420.588504][T19144] ? alloc_pages_mpol+0x3cd/0x4a0 [ 420.588539][T19144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 420.588576][T19144] ? rcu_is_watching+0x15/0xb0 [ 420.588600][T19144] ? nf_tables_newset+0x132b/0x2530 [ 420.588622][T19144] ? nf_tables_newset+0x132b/0x2530 [ 420.588642][T19144] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 420.588682][T19144] ? nf_tables_newset+0x132b/0x2530 [ 420.588712][T19144] ? nft_table_lookup+0x211/0x230 [ 420.588738][T19144] ? nft_set_lookup+0x128/0x150 [ 420.588770][T19144] ? nft_hash_privsize+0xf/0xf0 [ 420.588826][T19144] nf_tables_newset+0x132b/0x2530 [ 420.588877][T19144] ? __pfx_nf_tables_newset+0x10/0x10 [ 420.588927][T19144] ? __nla_parse+0x40/0x60 [ 420.588971][T19144] nfnetlink_rcv+0x112f/0x2520 [ 420.589035][T19144] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 420.589082][T19144] ? ref_tracker_free+0x63a/0x7d0 [ 420.589146][T19144] ? __netlink_deliver_tap+0x807/0x850 [ 420.589176][T19144] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.589228][T19144] netlink_unicast+0x82f/0x9e0 [ 420.589267][T19144] ? __pfx_netlink_unicast+0x10/0x10 [ 420.589297][T19144] ? netlink_sendmsg+0x642/0xb30 [ 420.589325][T19144] ? skb_put+0x11b/0x210 [ 420.589350][T19144] netlink_sendmsg+0x805/0xb30 [ 420.589405][T19144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.589444][T19144] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.589481][T19144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.589506][T19144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.589537][T19144] __sock_sendmsg+0x219/0x270 [ 420.589570][T19144] ____sys_sendmsg+0x505/0x830 [ 420.589662][T19144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.589704][T19144] ? import_iovec+0x74/0xa0 [ 420.589734][T19144] ___sys_sendmsg+0x21f/0x2a0 [ 420.589760][T19144] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.589827][T19144] ? __fget_files+0x2a/0x420 [ 420.589860][T19144] ? __fget_files+0x3a0/0x420 [ 420.589906][T19144] __x64_sys_sendmsg+0x19b/0x260 [ 420.589933][T19144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.589969][T19144] ? rcu_is_watching+0x15/0xb0 [ 420.589998][T19144] ? do_syscall_64+0xbe/0x3b0 [ 420.590035][T19144] do_syscall_64+0xfa/0x3b0 [ 420.590065][T19144] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.590094][T19144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.590116][T19144] ? clear_bhb_loop+0x60/0xb0 [ 420.590143][T19144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.590164][T19144] RIP: 0033:0x7f7f78f8ebe9 [ 420.590187][T19144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.590206][T19144] RSP: 002b:00007f7f79dd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.590230][T19144] RAX: ffffffffffffffda RBX: 00007f7f791b5fa0 RCX: 00007f7f78f8ebe9 [ 420.590246][T19144] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 420.590259][T19144] RBP: 00007f7f79011e19 R08: 0000000000000000 R09: 0000000000000000 [ 420.590271][T19144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.590284][T19144] R13: 00007f7f791b6038 R14: 00007f7f791b5fa0 R15: 00007fff34e44168 [ 420.590318][T19144] [ 420.994798][T19144] Mem-Info: [ 420.998075][T19144] active_anon:5290 inactive_anon:0 isolated_anon:0 [ 420.998075][T19144] active_file:3398 inactive_file:39970 isolated_file:0 [ 420.998075][T19144] unevictable:768 dirty:52 writeback:0 [ 420.998075][T19144] slab_reclaimable:12713 slab_unreclaimable:125103 [ 420.998075][T19144] mapped:31627 shmem:1564 pagetables:1183 [ 420.998075][T19144] sec_pagetables:0 bounce:0 [ 420.998075][T19144] kernel_misc_reclaimable:0 [ 420.998075][T19144] free:1293602 free_pcp:10737 free_cma:0 [ 421.048105][T19144] Node 0 active_anon:21260kB inactive_anon:0kB active_file:13592kB inactive_file:159676kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126708kB dirty:208kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14484kB pagetables:4596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 421.095060][T19144] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 421.129534][T19144] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.159989][T19144] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 421.165897][T19144] Node 0 DMA32 free:1267692kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22132kB inactive_anon:0kB active_file:13592kB inactive_file:158108kB unevictable:1536kB writepending:208kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:30512kB local_pcp:22952kB free_cma:0kB [ 421.203200][T19144] lowmem_reserve[]: 0 0 1 1 1 [ 421.208118][T19144] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 421.238488][T19144] lowmem_reserve[]: 0 0 0 0 0 [ 421.243400][T19144] Node 1 Normal free:3891312kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11828kB local_pcp:3172kB free_cma:0kB [ 421.278318][T19144] lowmem_reserve[]: 0 0 0 0 0 [ 421.283222][T19144] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 421.299590][T19144] Node 0 DMA32: 1077*4kB (UME) 585*8kB (ME) 199*16kB (ME) 33*32kB (ME) 31*64kB (UME) 19*128kB (ME) 7*256kB (ME) 8*512kB (UME) 7*1024kB (UM) 4*2048kB (UM) 300*4096kB (M) = 1267692kB [ 421.317771][T19144] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 421.330861][T19144] Node 1 Normal: 166*4kB (UME) 47*8kB (UME) 44*16kB (UME) 203*32kB (UME) 55*64kB (UME) 5*128kB (UME) 4*256kB (UM) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3891312kB [ 421.350098][T19144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.360177][T19144] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 421.369826][T19144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.379489][T19144] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 421.390073][T19144] 45331 total pagecache pages [ 421.395443][T19144] 0 pages in swap cache [ 421.403255][T19144] Free swap = 124996kB [ 421.407538][T19144] Total swap = 124996kB [ 421.411981][T19144] 2097051 pages RAM [ 421.415917][T19144] 0 pages HighMem/MovableOnly [ 421.421030][T19144] 425656 pages reserved [ 421.425231][T19144] 0 pages cma reserved [ 421.597501][T19173] nbd: nbd3 already in use [ 421.974720][T19183] syzkaller1: entered promiscuous mode [ 421.984931][T19183] syzkaller1: entered allmulticast mode [ 422.103485][T19191] tipc: Started in network mode [ 422.108433][T19191] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 422.179849][T19191] tipc: Enabled bearer , priority 10 [ 422.282739][T19198] netlink: 'syz.1.3699': attribute type 23 has an invalid length. [ 422.305735][T19198] netlink: 'syz.1.3699': attribute type 23 has an invalid length. [ 422.348625][T19198] netlink: 'syz.1.3699': attribute type 23 has an invalid length. [ 422.387883][T19198] netlink: 'syz.1.3699': attribute type 23 has an invalid length. [ 422.417149][T19202] veth0: entered promiscuous mode [ 422.438722][T19198] netlink: 'syz.1.3699': attribute type 23 has an invalid length. [ 422.478905][T19198] netlink: 'syz.1.3699': attribute type 23 has an invalid length. [ 422.516561][T19198] netlink: 'syz.1.3699': attribute type 23 has an invalid length. [ 422.533560][T19202] veth0: left promiscuous mode [ 422.572162][T19198] netlink: 'syz.1.3699': attribute type 23 has an invalid length. [ 422.615226][T19198] netlink: 'syz.1.3699': attribute type 23 has an invalid length. [ 422.661944][T19198] netlink: 'syz.1.3699': attribute type 23 has an invalid length. [ 423.052157][T19217] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 423.289987][ T5865] tipc: Node number set to 10136234 [ 423.577414][T19232] openvswitch: netlink: IPv4 tunnel dst address is zero [ 423.628304][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 423.931303][T19250] tipc: Enabled bearer , priority 0 [ 423.951251][T19250] syzkaller0: entered promiscuous mode [ 423.969172][T19250] syzkaller0: entered allmulticast mode [ 424.008102][T19254] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3719'. [ 424.034266][T19250] tipc: Resetting bearer [ 424.089391][T19248] tipc: Resetting bearer [ 424.186189][T19264] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3724'. [ 424.197551][T19248] tipc: Disabling bearer [ 424.256730][T19270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3726'. [ 424.277487][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.300448][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.317044][T19268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 424.341747][ T59] bond0: (slave wlan1): link status definitely down, disabling slave [ 424.382223][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.426555][ T1017] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.683639][T19281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.794253][T19283] bond1: (slave veth7): Enslaving as an active interface with a down link [ 424.807891][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3730'. [ 424.834927][T19295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3730'. [ 425.255171][T19322] tap0: tun_chr_ioctl cmd 1074025676 [ 425.268031][T19322] tap0: owner set to 0 [ 425.431685][T19333] __nla_validate_parse: 3 callbacks suppressed [ 425.431711][T19333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3741'. [ 425.759092][ T25] block nbd2: Possible stuck request ffff8880251de000: control (read@0,4096B). Runtime 180 seconds [ 426.138178][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3747'. [ 426.270868][ T5232] udevd[5232]: worker [8863] /devices/virtual/block/nbd2 timeout; kill it [ 426.290613][ T5232] udevd[5232]: seq 15351 '/devices/virtual/block/nbd2' killed [ 426.318713][ T5232] udevd[5232]: worker [6719] /devices/virtual/block/nbd3 is taking a long time [ 426.579865][T19375] dvmrp0: entered allmulticast mode [ 427.079978][T19395] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3760'. [ 427.615828][T19419] validate_nla: 29 callbacks suppressed [ 427.615851][T19419] netlink: 'syz.3.3768': attribute type 4 has an invalid length. [ 427.660672][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3768'. [ 427.769947][T19429] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3771'. [ 428.012266][T19439] netlink: 'syz.4.3774': attribute type 17 has an invalid length. [ 428.040318][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3774'. [ 428.051535][T19443] nftables ruleset with unbound chain [ 428.059164][T19439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3774'. [ 428.483257][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.490606][T19466] IPv6: NLM_F_CREATE should be set when creating new route [ 428.528362][T19471] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 428.587131][T19469] macvlan2: entered promiscuous mode [ 428.602774][T19469] macvlan2: entered allmulticast mode [ 428.687584][T19475] netlink: 'syz.2.3786': attribute type 1 has an invalid length. [ 428.705544][T19475] netlink: 'syz.2.3786': attribute type 1 has an invalid length. [ 428.925395][T19487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3791'. [ 428.940669][T19485] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3789'. [ 429.155505][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3788'. [ 429.237846][T19500] vlan3: entered promiscuous mode [ 429.554847][T19516] netlink: 'syz.0.3801': attribute type 1 has an invalid length. [ 429.563021][T19516] netlink: 'syz.0.3801': attribute type 2 has an invalid length. [ 429.667513][T19526] tipc: Enabled bearer , priority 0 [ 429.717229][T19526] tipc: Disabling bearer [ 429.802763][T19534] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 429.844308][T16541] IPVS: starting estimator thread 0... [ 429.939416][T19537] IPVS: using max 26 ests per chain, 62400 per kthread [ 430.153876][T19556] IPv6: Can't replace route, no match found [ 430.230822][T19559] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 430.277419][T19559] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 430.534623][T19575] __nla_validate_parse: 3 callbacks suppressed [ 430.534647][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3821'. [ 430.567525][T19575] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.575370][T19575] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.623229][T19578] netlink: 340 bytes leftover after parsing attributes in process `syz.0.3823'. [ 430.647454][ T30] audit: type=1804 audit(1755815097.365:4): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3824" name="/newroot/88/cgroup.controllers" dev="tmpfs" ino=464 res=1 errno=0 [ 430.686043][ T30] audit: type=1800 audit(1755815097.365:5): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3824" name="cgroup.controllers" dev="tmpfs" ino=464 res=0 errno=0 [ 430.846930][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3827'. [ 431.083372][T19595] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.103637][T19597] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3830'. [ 431.131000][T19602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3832'. [ 431.142864][T19601] netlink: 'syz.1.3831': attribute type 8 has an invalid length. [ 431.186835][T19604] syzkaller1: entered promiscuous mode [ 431.193216][T19604] syzkaller1: entered allmulticast mode [ 431.216220][T19604] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.224180][T19604] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.243691][T19604] bridge0: entered allmulticast mode [ 431.562183][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3841'. [ 431.571649][T19625] netlink: 'syz.4.3841': attribute type 11 has an invalid length. [ 431.616508][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.616591][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3841'. [ 431.661195][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.665909][T19625] netlink: 'syz.4.3841': attribute type 11 has an invalid length. [ 431.680964][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.733686][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.913370][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3843'. [ 431.990305][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3844'. [ 432.029323][T19642] bridge_slave_1: left allmulticast mode [ 432.041634][T19642] bridge_slave_1: left promiscuous mode [ 432.058257][T19642] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.147741][T19642] bridge_slave_0: left allmulticast mode [ 432.159953][T19642] bridge_slave_0: left promiscuous mode [ 432.198029][T19642] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.352468][T19657] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3848'. [ 432.591444][T19671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.723596][T19674] vlan2: entered allmulticast mode [ 432.729148][T19674] veth1: entered allmulticast mode [ 432.804085][ T94] block nbd1: Possible stuck request ffff8880251a0000: control (read@0,4096B). Runtime 300 seconds [ 432.816653][ T25] block nbd0: Possible stuck request ffff88802517e000: control (read@0,4096B). Runtime 300 seconds [ 433.004511][T19695] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 433.596352][ T5876] Bluetooth: hci2: command 0x0405 tx timeout [ 435.092539][T19691] netlink: 'syz.4.3859': attribute type 1 has an invalid length. [ 435.638241][T19719] delete_channel: no stack [ 435.664664][T19710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.693057][T19710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.755109][T19728] __nla_validate_parse: 1 callbacks suppressed [ 435.755135][T19728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3871'. [ 435.854157][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3874'. [ 435.962605][T19710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.997575][T19710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.047316][T19738] can: request_module (can-proto-0) failed. [ 436.154092][T19710] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 436.175309][T19710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.190223][T19710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.256585][T19742] bridge5: port 1(veth9) entered blocking state [ 436.268208][T19742] bridge5: port 1(veth9) entered disabled state [ 436.278336][T19742] veth9: entered allmulticast mode [ 436.290714][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3880'. [ 436.305428][T19742] veth9: entered promiscuous mode [ 436.393185][T19710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.418817][T19710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.437454][T19756] tipc: New replicast peer: 255.255.255.255 [ 436.445784][T19756] tipc: Enabled bearer , priority 10 [ 436.809755][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3881'. [ 436.865123][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.878814][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.888454][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.897185][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.988910][ T1017] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.000519][T19783] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3885'. [ 437.017156][ T1017] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.074583][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.086594][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.517233][T19809] netlink: 'syz.1.3889': attribute type 7 has an invalid length. [ 437.569639][T16541] tipc: Node number set to 3290660381 [ 437.743932][T19821] tipc: Started in network mode [ 437.768580][T19821] tipc: Node identity 4ee323aa788d, cluster identity 4711 [ 437.800525][T19821] tipc: Enabled bearer , priority 0 [ 437.809977][T19825] syzkaller0: entered promiscuous mode [ 437.825642][T19825] syzkaller0: entered allmulticast mode [ 437.913615][T19819] tipc: Resetting bearer [ 437.949339][T19818] tipc: Resetting bearer [ 438.037836][T19818] tipc: Disabling bearer [ 438.518799][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3907'. [ 438.657056][T19846] team0 (unregistering): Port device team_slave_0 removed [ 438.686421][T19846] team0 (unregistering): Port device team_slave_1 removed [ 438.845078][T19869] bond0: entered promiscuous mode [ 438.859575][T19869] bond_slave_0: entered promiscuous mode [ 438.865790][T19869] bond_slave_1: entered promiscuous mode [ 438.885036][T19869] batadv0: entered promiscuous mode [ 438.900224][T19869] batadv0: left promiscuous mode [ 438.929665][T19869] bond0: left promiscuous mode [ 438.934659][T19869] bond_slave_0: left promiscuous mode [ 438.958666][T19869] bond_slave_1: left promiscuous mode [ 439.001569][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3914'. [ 439.046235][T19885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3913'. [ 439.058815][T19886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3912'. [ 439.096270][T19886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3912'. [ 439.404859][T19901] openvswitch: netlink: Missing key (keys=40, expected=80) [ 439.864098][T19918] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 439.975052][T19925] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 440.030877][T19916] "syz.1.3926" (19916) uses obsolete ecb(arc4) skcipher [ 440.470455][ T25] block nbd3: Possible stuck request ffff88802520e000: control (read@0,4096B). Runtime 90 seconds [ 440.583175][T19950] syzkaller1: entered promiscuous mode [ 440.611683][T19950] syzkaller1: entered allmulticast mode [ 440.611841][T19952] nbd4: detected capacity change from 0 to 127 [ 440.745051][ T5182] block nbd4: Receive control failed (result -104) [ 440.827640][T19968] netlink: 'syz.1.3944': attribute type 11 has an invalid length. [ 441.087613][T19959] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.095590][T19959] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.223585][T19987] netlink: 'syz.4.3949': attribute type 1 has an invalid length. [ 441.255706][T19987] __nla_validate_parse: 4 callbacks suppressed [ 441.255732][T19987] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3949'. [ 441.405858][T19959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.427836][T19959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.509494][ T5182] Bluetooth: hci0: command 0x0c1a tx timeout [ 441.605948][T19994] netlink: 340 bytes leftover after parsing attributes in process `syz.3.3951'. [ 441.665769][ T1017] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.721408][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.827875][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.843003][T20006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3954'. [ 441.853225][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.101240][T20011] netlink: 'syz.1.3956': attribute type 2 has an invalid length. [ 442.116834][T20015] netlink: 'syz.4.3959': attribute type 4 has an invalid length. [ 442.126703][T20011] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3956'. [ 442.137017][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3957'. [ 442.188676][T20019] netlink: 'syz.4.3959': attribute type 4 has an invalid length. [ 442.402824][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3962'. [ 442.470837][T20031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3964'. [ 442.506862][T20031] netlink: 'syz.0.3964': attribute type 18 has an invalid length. [ 442.615698][T20039] netlink: 'syz.2.3966': attribute type 1 has an invalid length. [ 442.634647][T20031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3964'. [ 442.634661][T20039] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3966'. [ 442.715932][T20036] batadv1: entered allmulticast mode [ 442.726616][T20031] netlink: 'syz.0.3964': attribute type 18 has an invalid length. [ 442.762312][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.771875][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.829253][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.838364][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.020565][T20057] veth1_to_bond: entered allmulticast mode [ 443.027816][T20057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3972'. [ 443.156159][T20057] bond0: (slave bond_slave_1): Releasing backup interface [ 443.194043][T20057] veth1_to_bond (unregistering): left allmulticast mode [ 443.212261][T20065] netlink: 'syz.3.3975': attribute type 33 has an invalid length. [ 443.222569][T20066] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 443.239641][T20066] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 443.262840][T20057] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 443.304088][T20057] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.311958][T20057] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.363482][T20073] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 443.544493][T20080] syzkaller1: entered promiscuous mode [ 443.553253][T20080] syzkaller1: entered allmulticast mode [ 443.637622][T16536] IPVS: starting estimator thread 0... [ 443.644048][T20087] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 443.729165][T20091] IPVS: using max 28 ests per chain, 67200 per kthread [ 443.807527][T20089] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 443.861810][T20092] vxcan1 speed is unknown, defaulting to 1000 [ 444.190472][T20113] syzkaller1: entered promiscuous mode [ 444.212302][T20113] syzkaller1: entered allmulticast mode [ 444.360331][T20120] netlink: 'syz.2.3990': attribute type 1 has an invalid length. [ 444.596162][T20092] lo speed is unknown, defaulting to 1000 [ 445.457959][T20157] sctp: [Deprecated]: syz.4.4003 (pid 20157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.457959][T20157] Use struct sctp_sack_info instead [ 445.622978][T20162] bond1: (slave bridge0): making interface the new active one [ 445.670019][T20162] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 446.030841][T20176] lo: entered allmulticast mode [ 446.171483][T20183] netlink: zone id is out of range [ 446.176672][T20183] netlink: zone id is out of range [ 446.218483][T20183] netlink: zone id is out of range [ 446.231714][T20175] lo: left allmulticast mode [ 446.242829][T20183] netlink: zone id is out of range [ 446.248782][T20183] netlink: zone id is out of range [ 446.262749][T20183] netlink: zone id is out of range [ 446.315723][T20183] netlink: zone id is out of range [ 446.349505][T20183] netlink: zone id is out of range [ 446.355132][T20183] netlink: zone id is out of range [ 446.362726][T20189] validate_nla: 34 callbacks suppressed [ 446.362756][T20189] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 446.362879][T20189] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 446.363127][T20189] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 446.419385][T20183] netlink: zone id is out of range [ 446.470261][T20189] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 446.498793][T20189] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 446.527952][T20189] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 446.559518][T20189] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 446.567405][T20189] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 446.632294][T20189] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 446.659431][T20189] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 446.805444][T20210] hsr0 speed is unknown, defaulting to 1000 [ 446.813366][T20210] hsr0 speed is unknown, defaulting to 1000 [ 446.821000][T20205] block nbd5: server does not support multiple connections per device. [ 446.835882][T20205] block nbd5: shutting down sockets [ 446.844153][T20210] hsr0 speed is unknown, defaulting to 1000 [ 446.905510][T20210] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 446.960121][T20214] __nla_validate_parse: 44 callbacks suppressed [ 446.960148][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4021'. [ 447.028296][T20210] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 447.273179][T20210] hsr0 speed is unknown, defaulting to 1000 [ 447.332978][T20210] hsr0 speed is unknown, defaulting to 1000 [ 447.372160][T20210] hsr0 speed is unknown, defaulting to 1000 [ 447.421097][T20210] hsr0 speed is unknown, defaulting to 1000 [ 447.520271][T20210] hsr0 speed is unknown, defaulting to 1000 [ 447.571869][T20210] hsr0 speed is unknown, defaulting to 1000 [ 447.621178][T20210] hsr0 speed is unknown, defaulting to 1000 [ 447.638708][T20210] hsr0 speed is unknown, defaulting to 1000 [ 447.666237][T20210] hsr0 speed is unknown, defaulting to 1000 [ 447.785652][T20232] warn_alloc: 1 callbacks suppressed [ 447.785677][T20232] syz.1.4027: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 447.820979][T20232] CPU: 0 UID: 0 PID: 20232 Comm: syz.1.4027 Not tainted syzkaller #0 PREEMPT(full) [ 447.821015][T20232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.821029][T20232] Call Trace: [ 447.821038][T20232] [ 447.821047][T20232] dump_stack_lvl+0x189/0x250 [ 447.821086][T20232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.821112][T20232] ? __pfx__printk+0x10/0x10 [ 447.821143][T20232] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 447.821170][T20232] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 447.821197][T20232] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 447.821226][T20232] warn_alloc+0x214/0x310 [ 447.821269][T20232] ? __pfx_warn_alloc+0x10/0x10 [ 447.821312][T20232] ? __get_vm_area_node+0x28f/0x300 [ 447.821343][T20232] ? xskq_create+0xbf/0x170 [ 447.821379][T20232] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 447.821448][T20232] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.821481][T20232] ? xskq_create+0x56/0x170 [ 447.821513][T20232] ? __kasan_kmalloc+0x93/0xb0 [ 447.821556][T20232] vmalloc_user_noprof+0xad/0xf0 [ 447.821589][T20232] ? xskq_create+0xbf/0x170 [ 447.821618][T20232] xskq_create+0xbf/0x170 [ 447.821651][T20232] xsk_init_queue+0xb0/0x110 [ 447.821681][T20232] xsk_setsockopt+0x4dc/0x8d0 [ 447.821713][T20232] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.821740][T20232] ? __pfx_aa_sk_perm+0x10/0x10 [ 447.821777][T20232] ? aa_sock_opt_perm+0xff/0x1b0 [ 447.821802][T20232] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 447.821827][T20232] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.821855][T20232] do_sock_setsockopt+0x179/0x1b0 [ 447.821963][T20232] __x64_sys_setsockopt+0x13f/0x1b0 [ 447.821990][T20232] do_syscall_64+0xfa/0x3b0 [ 447.822020][T20232] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.822049][T20232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.822070][T20232] ? clear_bhb_loop+0x60/0xb0 [ 447.822097][T20232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.822118][T20232] RIP: 0033:0x7f0174f8ebe9 [ 447.822138][T20232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.822157][T20232] RSP: 002b:00007f01731f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 447.822180][T20232] RAX: ffffffffffffffda RBX: 00007f01751b5fa0 RCX: 00007f0174f8ebe9 [ 447.822196][T20232] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 447.822209][T20232] RBP: 00007f0175011e19 R08: 0000000000000004 R09: 0000000000000000 [ 447.822222][T20232] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 447.822235][T20232] R13: 00007f01751b6038 R14: 00007f01751b5fa0 R15: 00007fff7fd3eaa8 [ 447.822271][T20232] [ 447.822280][T20232] Mem-Info: [ 448.099824][T20232] active_anon:5071 inactive_anon:0 isolated_anon:0 [ 448.099824][T20232] active_file:3398 inactive_file:39981 isolated_file:0 [ 448.099824][T20232] unevictable:768 dirty:103 writeback:0 [ 448.099824][T20232] slab_reclaimable:12690 slab_unreclaimable:125106 [ 448.099824][T20232] mapped:29299 shmem:1365 pagetables:1192 [ 448.099824][T20232] sec_pagetables:0 bounce:0 [ 448.099824][T20232] kernel_misc_reclaimable:0 [ 448.099824][T20232] free:1297839 free_pcp:11105 free_cma:0 [ 448.146821][T20232] Node 0 active_anon:20284kB inactive_anon:0kB active_file:13592kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117196kB dirty:412kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14388kB pagetables:4632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 448.181066][T20232] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 448.212544][T20232] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 448.243167][T20232] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 448.249268][T20232] Node 0 DMA32 free:1284764kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20300kB inactive_anon:0kB active_file:13592kB inactive_file:158152kB unevictable:1536kB writepending:420kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:32812kB local_pcp:12124kB free_cma:0kB [ 448.282064][T20232] lowmem_reserve[]: 0 0 1 1 1 [ 448.286851][T20232] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 448.316720][T20232] lowmem_reserve[]: 0 0 0 0 0 [ 448.321788][T20232] Node 1 Normal free:3891828kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11312kB local_pcp:8656kB free_cma:0kB [ 448.355194][T20232] lowmem_reserve[]: 0 0 0 0 0 [ 448.360219][T20232] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 448.374646][T20232] Node 0 DMA32: 1521*4kB (UM) 973*8kB (UM) 409*16kB (UME) 288*32kB (UM) 19*64kB (UME) 31*128kB (UME) 25*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 3*2048kB (M) 300*4096kB (UM) = 1284860kB [ 448.393530][T20232] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 448.406410][T20232] Node 1 Normal: 167*4kB (UME) 47*8kB (UME) 44*16kB (UME) 207*32kB (UME) 61*64kB (UME) 5*128kB (UME) 4*256kB (UM) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3891828kB [ 448.425048][T20232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.436018][T20232] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 448.445630][T20232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.455667][T20232] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 448.465128][T20232] 44741 total pagecache pages [ 448.470054][T20232] 0 pages in swap cache [ 448.474502][T20232] Free swap = 124996kB [ 448.478693][T20232] Total swap = 124996kB [ 448.483442][T20232] 2097051 pages RAM [ 448.487289][T20232] 0 pages HighMem/MovableOnly [ 448.494193][T20232] 425656 pages reserved [ 448.498503][T20232] 0 pages cma reserved [ 448.665569][T20254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4034'. [ 449.449916][T20292] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.4045'. [ 449.647169][T20299] syzkaller0: entered promiscuous mode [ 449.681513][T20299] syzkaller0: entered allmulticast mode [ 450.016653][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 450.027160][T20312] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 450.037917][T20319] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4055'. [ 450.066431][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 450.077835][T20319] hsr_slave_0: left promiscuous mode [ 450.092959][T20319] hsr_slave_1: left promiscuous mode [ 450.243102][T20314] bridge0: left allmulticast mode [ 450.248805][T20317] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 450.263537][T20318] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4054'. [ 450.308649][T20318] nbd: must specify at least one socket [ 450.339817][T20318] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4054'. [ 450.397110][T20318] nbd: must specify at least one socket [ 450.997406][T20350] can: request_module (can-proto-0) failed. [ 451.098408][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4067'. [ 451.108452][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4067'. [ 451.119986][ T7266] wlan1: Trigger new scan to find an IBSS to join [ 451.570285][T20389] validate_nla: 40 callbacks suppressed [ 451.570316][T20389] netlink: 'syz.2.4073': attribute type 1 has an invalid length. [ 451.841547][T20406] 8021q: VLANs not supported on wg1 [ 451.956453][T20413] pimreg: entered allmulticast mode [ 452.090099][T20423] __nla_validate_parse: 8 callbacks suppressed [ 452.090125][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4086'. [ 452.110936][T20424] netlink: 'syz.3.4087': attribute type 2 has an invalid length. [ 452.133796][T20423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4086'. [ 452.150607][T20423] net_ratelimit: 16 callbacks suppressed [ 452.150639][T20423] openvswitch: netlink: Duplicate or invalid key (type 0). [ 452.163726][T20424] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4087'. [ 452.192052][T20423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.473175][T20444] netlink: 'syz.3.4091': attribute type 75 has an invalid length. [ 452.473278][T20441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4092'. [ 452.573604][T20447] netlink: 'syz.4.4093': attribute type 1 has an invalid length. [ 452.582653][T20447] netlink: 'syz.4.4093': attribute type 2 has an invalid length. [ 452.606536][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4093'. [ 452.761601][T20451] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 452.775356][T20451] CPU: 0 UID: 0 PID: 20451 Comm: syz.2.4094 Not tainted syzkaller #0 PREEMPT(full) [ 452.775391][T20451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.775406][T20451] Call Trace: [ 452.775415][T20451] [ 452.775425][T20451] dump_stack_lvl+0x189/0x250 [ 452.775541][T20451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.775569][T20451] ? __pfx__printk+0x10/0x10 [ 452.775609][T20451] ? kernfs_path_from_node+0x2f/0x290 [ 452.775644][T20451] ? kernfs_path_from_node+0x250/0x290 [ 452.775668][T20451] ? kernfs_path_from_node+0x2f/0x290 [ 452.775698][T20451] sysfs_warn_dup+0x8e/0xa0 [ 452.775754][T20451] sysfs_do_create_link_sd+0xc0/0x110 [ 452.775785][T20451] device_add_class_symlinks+0x1cf/0x240 [ 452.775817][T20451] device_add+0x475/0xb50 [ 452.775847][T20451] wiphy_register+0x1ba6/0x28d0 [ 452.775900][T20451] ? __pfx_wiphy_register+0x10/0x10 [ 452.775930][T20451] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 452.775975][T20451] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 452.776020][T20451] ieee80211_register_hw+0x3425/0x4080 [ 452.776066][T20451] ? ieee80211_register_hw+0x1471/0x4080 [ 452.776103][T20451] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 452.776133][T20451] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.776173][T20451] ? __hrtimer_setup+0x187/0x210 [ 452.776195][T20451] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 452.776235][T20451] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 452.776302][T20451] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 452.776332][T20451] ? trace_kmalloc+0x1f/0xd0 [ 452.776361][T20451] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 452.776394][T20451] ? kstrndup+0xbf/0x160 [ 452.776432][T20451] hwsim_new_radio_nl+0xea4/0x1b10 [ 452.776465][T20451] ? __pfx___nla_validate_parse+0x10/0x10 [ 452.776519][T20451] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 452.776566][T20451] ? __nla_parse+0x40/0x60 [ 452.776603][T20451] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 452.776642][T20451] genl_family_rcv_msg_doit+0x212/0x300 [ 452.776677][T20451] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 452.776720][T20451] ? bpf_lsm_capable+0x9/0x20 [ 452.776751][T20451] ? security_capable+0x7e/0x2e0 [ 452.776793][T20451] genl_rcv_msg+0x60e/0x790 [ 452.776828][T20451] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.776853][T20451] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 452.776902][T20451] netlink_rcv_skb+0x205/0x470 [ 452.776931][T20451] ? __lock_acquire+0xab9/0xd20 [ 452.776977][T20451] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.777005][T20451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.777064][T20451] ? down_read+0x1ad/0x2e0 [ 452.777101][T20451] genl_rcv+0x28/0x40 [ 452.777124][T20451] netlink_unicast+0x82f/0x9e0 [ 452.777165][T20451] ? __pfx_netlink_unicast+0x10/0x10 [ 452.777198][T20451] ? netlink_sendmsg+0x642/0xb30 [ 452.777227][T20451] ? skb_put+0x11b/0x210 [ 452.777254][T20451] netlink_sendmsg+0x805/0xb30 [ 452.777299][T20451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.777339][T20451] ? aa_sock_msg_perm+0xf1/0x1d0 [ 452.777377][T20451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.777401][T20451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.777435][T20451] __sock_sendmsg+0x219/0x270 [ 452.777510][T20451] ____sys_sendmsg+0x505/0x830 [ 452.777541][T20451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.777579][T20451] ? import_iovec+0x74/0xa0 [ 452.777613][T20451] ___sys_sendmsg+0x21f/0x2a0 [ 452.777638][T20451] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.777709][T20451] ? __fget_files+0x2a/0x420 [ 452.777743][T20451] ? __fget_files+0x3a0/0x420 [ 452.777791][T20451] __x64_sys_sendmsg+0x19b/0x260 [ 452.777818][T20451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.777855][T20451] ? rcu_is_watching+0x15/0xb0 [ 452.777885][T20451] ? do_syscall_64+0xbe/0x3b0 [ 452.777925][T20451] do_syscall_64+0xfa/0x3b0 [ 452.777968][T20451] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.778001][T20451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.778026][T20451] ? clear_bhb_loop+0x60/0xb0 [ 452.778056][T20451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.778079][T20451] RIP: 0033:0x7f7f78f8ebe9 [ 452.778101][T20451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.778121][T20451] RSP: 002b:00007f7f79dd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.778146][T20451] RAX: ffffffffffffffda RBX: 00007f7f791b5fa0 RCX: 00007f7f78f8ebe9 [ 452.778162][T20451] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 452.778176][T20451] RBP: 00007f7f79011e19 R08: 0000000000000000 R09: 0000000000000000 [ 452.778191][T20451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.778204][T20451] R13: 00007f7f791b6038 R14: 00007f7f791b5fa0 R15: 00007fff34e44168 [ 452.778243][T20451] [ 453.465973][T20456] tipc: Enabled bearer , priority 0 [ 453.523150][T20460] syzkaller0: entered promiscuous mode [ 453.528796][T20460] syzkaller0: entered allmulticast mode [ 453.608372][T20456] tipc: Resetting bearer [ 453.629810][T20465] netlink: 1324 bytes leftover after parsing attributes in process `syz.3.4099'. [ 453.716311][T20456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 453.769868][T20455] tipc: Resetting bearer [ 453.859966][T20455] tipc: Disabling bearer [ 454.151234][ T36] wlan1: Trigger new scan to find an IBSS to join [ 454.434926][T20502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4112'. [ 454.705900][T20513] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4115'. [ 454.726010][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4115'. [ 454.994843][T20523] openvswitch: netlink: Message has 5 unknown bytes. [ 455.247968][T20540] netlink: 'syz.2.4120': attribute type 9 has an invalid length. [ 455.606889][T20553] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 455.630955][T20553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.796036][T20566] netlink: 'syz.3.4133': attribute type 2 has an invalid length. [ 455.831371][ T25] block nbd2: Possible stuck request ffff8880251de000: control (read@0,4096B). Runtime 210 seconds [ 456.001391][T20576] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 456.428221][T20597] ip6gre1: entered allmulticast mode [ 456.794358][T20612] netlink: 'syz.1.4150': attribute type 1 has an invalid length. [ 456.902954][T20612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.967547][T20612] bond1: (slave gretap1): making interface the new active one [ 456.998487][T20612] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 457.004430][T20629] netlink: 'syz.2.4154': attribute type 32 has an invalid length. [ 457.048873][T20629] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 457.156292][T20636] __nla_validate_parse: 12 callbacks suppressed [ 457.156321][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4156'. [ 457.189136][ T1017] wlan1: Trigger new scan to find an IBSS to join [ 457.270308][T20641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4159'. [ 457.493906][T20636] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4156'. [ 458.219615][T20680] netlink: 'syz.2.4168': attribute type 7 has an invalid length. [ 458.238009][ T5967] wlan1: Creating new IBSS network, BSSID 02:e0:b3:27:b0:91 [ 458.253498][T20678] netlink: 'syz.4.4167': attribute type 1 has an invalid length. [ 458.268124][T20680] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4168'. [ 458.288718][T20678] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4167'. [ 458.328234][T20664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.356152][T20664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.624993][T20664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.669665][T20664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.935130][T20664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.970033][T20664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.057951][T20713] netlink: 'syz.4.4177': attribute type 1 has an invalid length. [ 459.066749][T20719] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4179'. [ 459.078233][T20719] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4179'. [ 459.081869][T20713] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4177'. [ 459.101235][T20719] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4179'. [ 459.198357][T20726] tipc: Can't bind to reserved service type 0 [ 459.211378][T20728] netlink: 'syz.1.4182': attribute type 6 has an invalid length. [ 459.226535][T20664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.244952][T20664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.264225][T20727] netlink: 'syz.1.4182': attribute type 6 has an invalid length. [ 459.266885][T20726] netlink: 'syz.1.4182': attribute type 6 has an invalid length. [ 459.363101][T20723] smc: net device erspan0 applied user defined pnetid SYZ0 [ 459.487333][ T1017] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.507770][ T1017] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.566947][ T1017] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.585501][ T1017] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.647217][T20735] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 459.704179][T20735] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 459.748852][T20735] gretap2: entered promiscuous mode [ 459.774558][T20735] gretap2: entered allmulticast mode [ 459.842814][ T1017] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.859559][ T1017] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.990880][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.009373][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.192677][T20757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4189'. [ 461.292882][T20778] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 461.746509][T20806] netlink: 'syz.4.4205': attribute type 10 has an invalid length. [ 461.755755][ T5876] Bluetooth: hci5: command 0x0405 tx timeout [ 461.772325][T20806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.786211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 461.827646][T20806] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 461.974670][T20815] netlink: 'syz.4.4205': attribute type 10 has an invalid length. [ 462.013292][T20815] batadv0: entered promiscuous mode [ 462.037053][T20815] batadv0: entered allmulticast mode [ 462.097575][T20815] bond0: (slave batadv0): Releasing backup interface [ 462.220408][T20815] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 462.637090][T20824] syzkaller0: entered promiscuous mode [ 462.644363][T20824] syzkaller0: entered allmulticast mode [ 462.880408][ T25] block nbd1: Possible stuck request ffff8880251a0000: control (read@0,4096B). Runtime 330 seconds [ 462.891484][ T94] block nbd0: Possible stuck request ffff88802517e000: control (read@0,4096B). Runtime 330 seconds [ 463.238518][T20853] __nla_validate_parse: 4 callbacks suppressed [ 463.238543][T20853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4216'. [ 463.445190][ T5934] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 463.462771][ T5934] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 463.645352][T20862] fido_id[20862]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 464.789264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.800905][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 465.551157][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4219'. [ 465.770410][T20889] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 466.000331][T20901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.680809][T20943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4240'. [ 466.709987][T20944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4241'. [ 466.724156][ T31] INFO: task udevd:5851 blocked for more than 143 seconds. [ 466.733985][ T31] Not tainted syzkaller #0 [ 466.734170][T20937] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4240'. [ 466.751140][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.771148][T20947] netlink: 'syz.0.4241': attribute type 10 has an invalid length. [ 466.793456][ T31] task:udevd state:D stack:22280 pid:5851 tgid:5851 ppid:5232 task_flags:0x400140 flags:0x00004006 [ 466.836791][T20951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.853133][ T31] Call Trace: [ 466.867797][ T31] [ 466.880685][ T31] __schedule+0x1798/0x4cc0 [ 466.892807][ T31] ? __pfx___schedule+0x10/0x10 [ 466.907601][ T31] ? schedule+0x91/0x360 [ 466.912147][T20955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4244'. [ 466.914836][T20957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4244'. [ 466.929469][ T31] schedule+0x165/0x360 [ 466.935621][ T31] io_schedule+0x80/0xd0 [ 466.947455][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 466.956915][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 466.975678][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 466.983710][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 466.995072][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 467.002888][ T31] do_read_cache_folio+0x1aa/0x590 [ 467.008193][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 467.021920][ T31] read_part_sector+0xb6/0x2b0 [ 467.026910][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 467.037723][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 467.046287][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 467.078104][ T31] bdev_disk_changed+0x75f/0x14b0 [ 467.090663][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 467.100483][ T31] ? wait_on_inode+0xc0/0x230 [ 467.105333][ T31] blkdev_get_whole+0x380/0x510 [ 467.110755][ T31] bdev_open+0x31e/0xd30 [ 467.115165][ T31] blkdev_open+0x3a8/0x510 [ 467.120251][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 467.125560][ T31] do_dentry_open+0x950/0x13f0 [ 467.130878][ T31] vfs_open+0x3b/0x340 [ 467.135196][ T31] ? path_openat+0x2ecd/0x3830 [ 467.140742][ T31] path_openat+0x2ee5/0x3830 [ 467.145566][ T31] ? arch_stack_walk+0xfc/0x150 [ 467.151079][ T31] ? stack_depot_save_flags+0x40/0x860 [ 467.156921][ T31] ? __pfx_path_openat+0x10/0x10 [ 467.162215][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.168444][ T31] do_filp_open+0x1fa/0x410 [ 467.174198][ T31] ? __lock_acquire+0xab9/0xd20 [ 467.179805][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 467.185059][ T31] ? _raw_spin_unlock+0x28/0x50 [ 467.192204][ T31] ? alloc_fd+0x64c/0x6c0 [ 467.196831][ T31] do_sys_openat2+0x121/0x1c0 [ 467.201981][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 467.207673][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.213484][ T31] ? rcu_is_watching+0x15/0xb0 [ 467.218644][ T31] __x64_sys_openat+0x138/0x170 [ 467.223883][ T31] do_syscall_64+0xfa/0x3b0 [ 467.228563][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.235010][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.241905][ T31] ? clear_bhb_loop+0x60/0xb0 [ 467.246821][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.253316][ T31] RIP: 0033:0x7f5c218a7407 [ 467.257967][ T31] RSP: 002b:00007fffe37ba530 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 467.266751][ T31] RAX: ffffffffffffffda RBX: 00007f5c21fa7880 RCX: 00007f5c218a7407 [ 467.278516][ T31] RDX: 00000000000a0800 RSI: 000055a8f36238e0 RDI: ffffffffffffff9c [ 467.286666][ T31] RBP: 000055a8f35fb910 R08: 0000000000000000 R09: 0000000000000000 [ 467.295202][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a8f3613e00 [ 467.303741][ T31] R13: 000055a8f3609190 R14: 0000000000000000 R15: 000055a8f3613e00 [ 467.312411][ T31] [ 467.315504][ T31] INFO: task udevd:5853 blocked for more than 143 seconds. [ 467.323035][ T31] Not tainted syzkaller #0 [ 467.328013][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.338109][ T31] task:udevd state:D stack:21928 pid:5853 tgid:5853 ppid:5232 task_flags:0x400140 flags:0x00004006 [ 467.356943][ T31] Call Trace: [ 467.361106][ T31] [ 467.364300][ T31] __schedule+0x1798/0x4cc0 [ 467.369267][ T31] ? __pfx___schedule+0x10/0x10 [ 467.375240][ T31] ? schedule+0x91/0x360 [ 467.379847][ T31] schedule+0x165/0x360 [ 467.384071][ T31] io_schedule+0x80/0xd0 [ 467.388617][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 467.394427][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 467.401780][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 467.407402][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 467.413015][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 467.418351][ T31] do_read_cache_folio+0x1aa/0x590 [ 467.424351][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 467.429951][ T31] read_part_sector+0xb6/0x2b0 [ 467.434771][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 467.440350][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 467.445957][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 467.452385][ T31] bdev_disk_changed+0x75f/0x14b0 [ 467.457480][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 467.463363][ T31] ? wait_on_inode+0xc0/0x230 [ 467.468115][ T31] blkdev_get_whole+0x380/0x510 [ 467.473265][ T31] bdev_open+0x31e/0xd30 [ 467.478868][ T31] blkdev_open+0x3a8/0x510 [ 467.484212][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 467.489714][ T31] do_dentry_open+0x950/0x13f0 [ 467.494645][ T31] vfs_open+0x3b/0x340 [ 467.498759][ T31] ? path_openat+0x2ecd/0x3830 [ 467.503938][ T31] path_openat+0x2ee5/0x3830 [ 467.508678][ T31] ? arch_stack_walk+0xfc/0x150 [ 467.514367][ T31] ? stack_depot_save_flags+0x40/0x860 [ 467.520755][ T31] ? __pfx_path_openat+0x10/0x10 [ 467.525879][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.533189][ T31] do_filp_open+0x1fa/0x410 [ 467.537845][ T31] ? __lock_acquire+0xab9/0xd20 [ 467.543042][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 467.548289][ T31] ? _raw_spin_unlock+0x28/0x50 [ 467.553790][ T31] ? alloc_fd+0x64c/0x6c0 [ 467.558210][ T31] do_sys_openat2+0x121/0x1c0 [ 467.563261][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 467.569099][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.574386][ T31] ? rcu_is_watching+0x15/0xb0 [ 467.582052][ T31] __x64_sys_openat+0x138/0x170 [ 467.586979][ T31] do_syscall_64+0xfa/0x3b0 [ 467.591881][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.597991][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 467.604464][ T31] ? clear_bhb_loop+0x60/0xb0 [ 467.609416][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.615356][ T31] RIP: 0033:0x7f5c218a7407 [ 467.621478][ T31] RSP: 002b:00007fffe37ba530 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 467.630242][ T31] RAX: ffffffffffffffda RBX: 00007f5c21fa7880 RCX: 00007f5c218a7407 [ 467.638320][ T31] RDX: 00000000000a0800 RSI: 000055a8f3607860 RDI: ffffffffffffff9c [ 467.647143][ T31] RBP: 000055a8f35fb910 R08: 0000000000000000 R09: 0000000000000000 [ 467.655277][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a8f360fba0 [ 467.663725][ T31] R13: 000055a8f3609190 R14: 0000000000000000 R15: 000055a8f360fba0 [ 467.671799][ T31] [ 467.675219][ T31] [ 467.675219][ T31] Showing all locks held in the system: [ 467.689970][ T31] 1 lock held by khungtaskd/31: [ 467.694899][ T31] #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 467.705103][ T31] 2 locks held by getty/5621: [ 467.714851][ T31] #0: ffff8880334610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 467.725772][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 467.737876][ T31] 1 lock held by udevd/5851: [ 467.742835][ T31] #0: ffff8881437d8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 467.752611][ T31] 1 lock held by udevd/5853: [ 467.757406][ T31] #0: ffff8881437a1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 467.766927][ T31] 1 lock held by udevd/6719: [ 467.771715][ T31] #0: ffff888025147358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 467.781621][ T31] 1 lock held by udevd/8863: [ 467.786738][ T31] #0: ffff888025143358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 467.796892][ T31] 1 lock held by udevd/10877: [ 467.801819][ T31] #0: ffff888025113358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 467.811629][ T31] 4 locks held by syz.0.4241/20944: [ 467.816846][ T31] #0: ffff888075d5e808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 467.827391][ T31] #1: ffffffff8f59b6b0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 467.840150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 467.841537][T16541] page_pool_release_retry() stalled pool shutdown: id 76, 1 inflight 60 sec [ 467.852871][ T31] #2: ffff8880558414d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 467.873106][ T31] #3: ffffffff8e13f938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 467.884244][ T31] [ 467.887505][ T31] ============================================= [ 467.887505][ T31] [ 467.896222][ T31] NMI backtrace for cpu 0 [ 467.896242][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 467.896267][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.896280][ T31] Call Trace: [ 467.896288][ T31] [ 467.896298][ T31] dump_stack_lvl+0x189/0x250 [ 467.896336][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.896363][ T31] ? __pfx__printk+0x10/0x10 [ 467.896410][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 467.896512][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 467.896541][ T31] ? __pfx__printk+0x10/0x10 [ 467.896578][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 467.896617][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 467.896646][ T31] watchdog+0xf93/0xfe0 [ 467.896684][ T31] ? watchdog+0x1de/0xfe0 [ 467.896722][ T31] kthread+0x711/0x8a0 [ 467.896754][ T31] ? __pfx_watchdog+0x10/0x10 [ 467.896784][ T31] ? __pfx_kthread+0x10/0x10 [ 467.896814][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.896847][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.896875][ T31] ? __pfx_kthread+0x10/0x10 [ 467.896904][ T31] ret_from_fork+0x3f9/0x770 [ 467.896931][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 467.896961][ T31] ? __switch_to_asm+0x39/0x70 [ 467.896988][ T31] ? __switch_to_asm+0x33/0x70 [ 467.897015][ T31] ? __pfx_kthread+0x10/0x10 [ 467.897044][ T31] ret_from_fork_asm+0x1a/0x30 [ 467.897092][ T31] [ 467.897100][ T31] Sending NMI from CPU 0 to CPUs 1: [ 468.050378][ C1] NMI backtrace for cpu 1 [ 468.050400][ C1] CPU: 1 UID: 0 PID: 1017 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 468.050421][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.050433][ C1] Workqueue: bat_events batadv_nc_worker [ 468.050466][ C1] RIP: 0010:__kasan_check_byte+0x2c/0x40 [ 468.050509][ C1] Code: 1f 00 41 56 53 48 89 f3 49 89 fe e8 5e 14 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 c6 03 00 00 89 d8 <5b> 41 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 [ 468.050525][ C1] RSP: 0018:ffffc90003c97968 EFLAGS: 00000202 [ 468.050540][ C1] RAX: 0000000000000001 RBX: ffffffff8b46f46f RCX: 4cbf8e2a64bc9900 [ 468.050554][ C1] RDX: 0000000000000000 RSI: ffffffff8b46f46f RDI: 1ffffffff1c273d4 [ 468.050566][ C1] RBP: ffffffff8b46f452 R08: 0000000000000000 R09: 0000000000000000 [ 468.050578][ C1] R10: dffffc0000000000 R11: ffffffff8b46f380 R12: 0000000000000002 [ 468.050590][ C1] R13: ffffffff8e139ea0 R14: ffffffff8e139ea0 R15: 0000000000000000 [ 468.050602][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 468.050616][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.050628][ C1] CR2: 0000555559dcc5c8 CR3: 000000007b696000 CR4: 00000000003526f0 [ 468.050644][ C1] Call Trace: [ 468.050650][ C1] [ 468.050660][ C1] lock_acquire+0x8d/0x360 [ 468.050692][ C1] ? batadv_nc_worker+0xd2/0x610 [ 468.050721][ C1] ? batadv_nc_worker+0xd2/0x610 [ 468.050741][ C1] batadv_nc_worker+0xef/0x610 [ 468.050762][ C1] ? batadv_nc_worker+0xd2/0x610 [ 468.050785][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 468.050804][ C1] process_scheduled_works+0xae1/0x17b0 [ 468.050838][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.050866][ C1] worker_thread+0x8a0/0xda0 [ 468.050886][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 468.050937][ C1] ? __kthread_parkme+0x7b/0x200 [ 468.050961][ C1] kthread+0x711/0x8a0 [ 468.050985][ C1] ? __pfx_worker_thread+0x10/0x10 [ 468.051003][ C1] ? __pfx_kthread+0x10/0x10 [ 468.051025][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.051047][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.051070][ C1] ? __pfx_kthread+0x10/0x10 [ 468.051092][ C1] ret_from_fork+0x3f9/0x770 [ 468.051113][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 468.051134][ C1] ? __switch_to_asm+0x39/0x70 [ 468.051157][ C1] ? __switch_to_asm+0x33/0x70 [ 468.051180][ C1] ? __pfx_kthread+0x10/0x10 [ 468.051202][ C1] ret_from_fork_asm+0x1a/0x30 [ 468.051236][ C1] [ 468.051991][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 468.307735][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 468.317062][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.327238][ T31] Call Trace: [ 468.330544][ T31] [ 468.333493][ T31] dump_stack_lvl+0x99/0x250 [ 468.338117][ T31] ? __asan_memcpy+0x40/0x70 [ 468.342762][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.348065][ T31] ? __pfx__printk+0x10/0x10 [ 468.352685][ T31] vpanic+0x281/0x750 [ 468.356778][ T31] ? __pfx_vpanic+0x10/0x10 [ 468.361299][ T31] ? preempt_schedule+0xae/0xc0 [ 468.366171][ T31] ? preempt_schedule_common+0x83/0xd0 [ 468.371762][ T31] panic+0xb9/0xc0 [ 468.375584][ T31] ? __pfx_panic+0x10/0x10 [ 468.380013][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 468.385413][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 468.391627][ T31] watchdog+0xfd2/0xfe0 [ 468.395804][ T31] ? watchdog+0x1de/0xfe0 [ 468.400264][ T31] kthread+0x711/0x8a0 [ 468.404462][ T31] ? __pfx_watchdog+0x10/0x10 [ 468.409172][ T31] ? __pfx_kthread+0x10/0x10 [ 468.413793][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.419016][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.424247][ T31] ? __pfx_kthread+0x10/0x10 [ 468.428867][ T31] ret_from_fork+0x3f9/0x770 [ 468.433480][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 468.438613][ T31] ? __switch_to_asm+0x39/0x70 [ 468.443424][ T31] ? __switch_to_asm+0x33/0x70 [ 468.448227][ T31] ? __pfx_kthread+0x10/0x10 [ 468.452834][ T31] ret_from_fork_asm+0x1a/0x30 [ 468.457629][ T31] [ 468.461142][ T31] Kernel Offset: disabled [ 468.465544][ T31] Rebooting in 86400 seconds..