last executing test programs: 22.268225087s ago: executing program 2 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11, 0x40014}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}}, 0x44) (async, rerun: 64) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3ff, 0x8, 0x8}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000080) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x20004091) 19.950011034s ago: executing program 2 (id=1064): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x8090) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x58, r0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x4ee4, 0x8, 0x40]}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x4, 0x8, 0xb}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000800000000080010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000380)="f6ace1fe1a6635", 0x7, 0xe045, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) connect$unix(r5, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006a0001050000000000000000ffffffff0000000008000800f0ffffff532c394f295c99202fc4cc8e1f3336619c3284bcd017b5d90155221bd6bd26729aca18e5edb0e2242dee98acf9783f46692b15735925a41aa7a33c14a1168bdc5b5365a5776510b0c5ffe823807105c05bfa6e1ba0a445dc1a65f1fbdf26fc1435d4a36b71b5c130389e"], 0x20}}, 0x0) 19.870902644s ago: executing program 2 (id=1066): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2}) 19.658613277s ago: executing program 2 (id=1068): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x800, 0x70bda8, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) (async) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) (async) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x800, 0x70bda8, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) 19.577009983s ago: executing program 0 (id=1069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40081) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x41) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x100, 0x7, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0xc}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040044) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x200, 0x200, 0x7}) connect$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) sendto(r0, &(0x7f0000000440)="afe1bbff995c2d7b3e406806f61ed1cf52a3bb3d26d2bb97d37c27873730eb49c7eadeccf72c43a7239c161c39fe63e62e4a17db9aa31fd5fd1f32b719c4e77436791675ca64b2e0cc259bdd00d10f229c49d1b605d781b93d828faee1a805552ba73d58de27fefb15cbe25dbcffc3893863e038ec9180bed8ce9b9f862e4e0add5c1e5c7b0ea19f9ba6d263e3542fcb90ce01e7", 0x94, 0x4048884, &(0x7f0000000500)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x80) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}, [0xd, 0x2, 0x9, 0x80000000, 0x8, 0x9, 0xfe00000000000000, 0x7, 0x741, 0x8, 0x9, 0x1, 0x0, 0x3, 0x800]}, &(0x7f0000000680)=0x100) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000006c0)={0x1, 0xff}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002940)={r3, 0x20, &(0x7f0000002900)={&(0x7f0000001800)=""/4096, 0x1000, 0x0, &(0x7f0000002800)=""/204, 0xcc}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x1e, 0x7, &(0x7f0000000700)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xff87}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, @alu={0x4, 0x1, 0x5, 0x1, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdaf}], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x25, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x5, 0x75c}, 0x10, r6, r3, 0x0, &(0x7f0000002980)=[r3, r3, r3, r3, r3], 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)=@getlink={0x28, 0x12, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20298}, [@IFLA_OPERSTATE={0x5, 0x10, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048841}, 0x4040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e80)={r3, 0xe0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000002bc0)=[0x0, 0x0, 0x0], &(0x7f0000002c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f0000002c40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000002cc0), &(0x7f0000002d00), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000002d40)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000002f00)={'syztnl2\x00', &(0x7f0000002ec0)={'sit0\x00', r7, 0x10, 0x7800, 0xfffffffa, 0x2, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x65, 0x0, 0xd9, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@noop]}}}}}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x10, 0x3f2, 0x30, 0x70bd29, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000001) recvmsg$unix(r3, &(0x7f0000003480)={&(0x7f0000003040), 0x6e, &(0x7f0000003400)=[{&(0x7f00000030c0)=""/130, 0x82}, {&(0x7f0000003180)=""/252, 0xfc}, {&(0x7f0000003280)=""/236, 0xec}, {&(0x7f0000003380)=""/118, 0x76}], 0x4, &(0x7f0000003440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x12000) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000035c0)={&(0x7f0000003500)={0xb4, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffef11}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4810) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000003680), r9) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000003800)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000037c0)={&(0x7f00000036c0)={0xf4, r12, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x69b91c0d3507a0c5}, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003900)={&(0x7f0000003880)={0x60, r12, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffc}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0xc0004) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000003ac0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a80)={&(0x7f00000039c0)={0x8c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x324cc52}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x32}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c040}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000003b00)={r4, 0x6}, &(0x7f0000003b40)=0x8) connect$l2tp(r10, &(0x7f0000003b80)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0x10) 19.477472716s ago: executing program 2 (id=1070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000f8cd4605ce1ba54529926aadc0a3a11a65fa2bc0dbfcd8ac612b536dc612c5dae0b17b693b798be884eaa633ece90b40d06246e0f481efee94fc86f72e2115a8547541f521867b71d277d70955485c3eb1564836b9efa23daa5c12ceb593f8cc2d79e68a6d746e762c4b6e3ecd31c4a094e8d776de357f9f13f53b067d14203698e176", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x3, 0xb5, 0xa6}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x7c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) sendmsg$inet6(r3, &(0x7f00000008c0)={&(0x7f0000000200)={0xa, 0x4e24, 0x337, @mcast1, 0x81}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@flowinfo={{0x14, 0x29, 0xb, 0xe2}}], 0x18}, 0x20008009) 19.452021975s ago: executing program 0 (id=1071): syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500001803000000006c907800000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000400000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) 19.415550534s ago: executing program 2 (id=1072): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x14) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r3 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80800) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000200)=0x4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3c, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x200}]}, 0x18}}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000280)={0x2, 0x4, 0x3b, &(0x7f0000000240)=""/59}) r8 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$sock(r8, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r11 = openat$cgroup_pressure(r9, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) ppoll(&(0x7f0000000180)=[{r10}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r11, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r10) close(r11) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="42210101"], 0x4) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19.353579535s ago: executing program 0 (id=1073): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000), 0x4) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x30d000, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newnexthop={0x34, 0x68, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3b}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}]}, @NHA_OIF={0x8, 0x5, r4}]}, 0x34}}, 0x1) 19.324575519s ago: executing program 0 (id=1075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) r6 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000240)="872cbf60a2be76dfb49e059776dddee61d4c0c46796b891a26b62881832b06d109f5af22b0031dddf757b8005b472258d0a043cd7765c29d6910cd3bc9b7c97143", 0x41) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) (async) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2a, r10, 0x803, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) 19.145501405s ago: executing program 0 (id=1077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1412, 0x100, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x79cc99bf, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffff0bf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x2, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x4b, &(0x7f0000000200)=""/75, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, r1, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 18.98900851s ago: executing program 0 (id=1081): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r2 = socket(0x10, 0x2, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, 0x0, &(0x7f0000000100)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r6, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 16.431835663s ago: executing program 3 (id=1105): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}], &(0x7f0000000000)='GPL\x00', 0x1000}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x25, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x88}}, 0x20000000) (async) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000000000000000010000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x40, r10, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x40084) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x4c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x4c}}, 0x4081) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000080000004200000040e07a4656000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r12}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r12}, 0x38) (async) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0x5, [@datasec={0x4, 0x1, 0x0, 0xf, 0x2, [{0x1, 0xb, 0x3}], "78bd"}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x2, 0x3, 0x0, 0x4, 0x1, 0x1000, [{0xf, 0x4, 0x7}, {0x4, 0x4, 0x5}, {0x1, 0x5, 0xff}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}, @struct={0x5, 0x9, 0x0, 0x4, 0x0, 0x8, [{0xe, 0x7, 0x7}, {0xd, 0x0, 0x2}, {0x2, 0x2, 0xc}, {0x1, 0x0, 0xffff}, {0x8, 0x3, 0xe}, {0x2, 0x0, 0x767761e3}, {0x4, 0x2, 0xba}, {0xb, 0x1, 0x4}, {0xf, 0x1, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x4}}]}, {0x0, [0x5f, 0x2e, 0x61]}}, &(0x7f0000000500)=""/169, 0x119, 0xa9, 0x0, 0x5, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1d, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x5, 0x2, 0x0, r3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x5}, @exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000280)='syzkaller\x00', 0xa, 0x19, &(0x7f00000002c0)=""/25, 0x41100, 0x8, '\x00', 0x0, 0x25, r13, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640), &(0x7f0000000680)=[{0x0, 0x2, 0x7, 0xc}, {0x3, 0x2, 0xa, 0x8}, {0x0, 0x3, 0x8, 0x8}, {0x4, 0x2, 0x3, 0x1}, {0x1, 0x3, 0x7, 0xa}], 0x10, 0x10000000}, 0x94) (async) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) accept4(r14, 0x0, 0x0, 0x0) (async) r15 = accept4(r14, &(0x7f0000000080)=@ethernet={0x0, @random}, 0x0, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) pwrite64(r15, &(0x7f00000001c0)="81496127eed1c95dd485a10fba09163ae048e76ea67d11433400ffb036e035228407a429a3bdb830d472eca56b5160f817b189373235564875f0da461f8b4837556f3645601123e69d21d7f9d44117b1c533d2", 0x53, 0x72) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) (async) socket$kcm(0x10, 0x2, 0x0) 16.309597476s ago: executing program 1 (id=1106): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000180)=""/115, 0x73}], 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 16.263513147s ago: executing program 1 (id=1107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r1, &(0x7f0000001200)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000001200)=ANY=[], 0xfe33) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 16.12507051s ago: executing program 3 (id=1109): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 16.124864758s ago: executing program 4 (id=1110): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x56d}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x406}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) 16.110687112s ago: executing program 4 (id=1111): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000380)='G', 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x5, 0x2, 0x4, 0x0, r1, 0x6, '\x00', r2, r3, 0x1, 0x3, 0x4}, 0x50) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7d, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r7, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES8=r0, @ANYRES64=r7, @ANYRES64=r5], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) 16.084789869s ago: executing program 3 (id=1112): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r1 = socket(0x22, 0x4, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r3, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5ec, 0x47}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x44) 15.978431964s ago: executing program 4 (id=1113): r0 = socket$inet6(0xa, 0x80002, 0x88) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x1d}, {0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r6, @ANYBLOB="00bb56004b8fbe5cec32c4b35fdfaca3000200001208000000000000d32fdf6d71b0dcb9454c95b4ce9cda00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r7}, 0x38) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001500010300000000000000000200000076bb7fcb7097a64afe91858f4b27fc35b262821b9fed7d19b7e2539611111b223373f8de962c82db5b12a0bf1e0ff2bcab1f90fe2abb0cf434f78e7ff084964ab5f5ee36200ad4cb7548cb5b708851d155b0cec038fb398dc090dbabe06bfec80e85573264e44bea69426f03b36adb9f5094ae5e3b713fd639da07f6165010f94e4f6981f56542bf5f1f536deda8eea6ad62"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r11 = socket(0x1d, 0x2, 0x6) setsockopt$PNPIPE_INITSTATE(r11, 0x6a, 0x3, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) 15.925465239s ago: executing program 3 (id=1114): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x8016, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x8, {{0x2, 0x4e22, @local}}, 0x0, 0x3, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x210) read(r5, &(0x7f0000000140)=""/127, 0x7f) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000400021f0d000000f2f83dbe538000"/26, @ANYRES32=r8, @ANYRESHEX=r7], 0x38}}, 0x0) 15.853368176s ago: executing program 4 (id=1115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0xffffffffffffff15) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x240041, 0x0) write$tun(r5, &(0x7f0000000500)={@val={0x0, 0x9100}, @val={0x2, 0x80, 0x1, 0x7, 0x7, 0xc}, @ipv6=@tipc_packet={0x3, 0x6, "6ea830", 0x280, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x2b, 0xe, 0x4, 0x7, 0x4, 0x0, 0x42d, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}, @routing={0x2b, 0x2, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}]}, @hopopts={0x32, 0x2d, '\x00', [@generic={0x4, 0x36, "865b1a5803206f818461bcf791d2a61ba75d02e356c5cf6386f253d39879e6fedbf1afa9b7835369ab5da4c937ad7f1bdf8d37d7437a"}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x9, 0xf6, "46eefeeb2e84e300b060f37486ce770661cc7317adebcfd1786731ae1cefa50994b38bf9f4e7fbe2f5acb3cd53b6655f4793c49eff0123ecc95083f62f1af7a139ab29b7601e8e6d2371b00a12c2675ba2d611a469fe2232a6280b572717a13136c6211d5bb3283bc4a7e77dd8862f8c7d4b49aaf2a9d9406d2cd442753f3a0ea6597e9ac46b4ec70cfc8bfe6b350d2d741e2820c022a212075807f4176c9833e2dbb5e6831a823c9e57da6bc231a31d335d76efb3a95cfa5119a1e2e0b178fdcbb4e8ce3f52feef0c88e43d86df9b969ccd7a5eb4c2c0bfa3b17e62eb9cc1c44b418bd75074e02455ac19ceca9b7eb2f3ce47f0b9b7"}, @pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0xfa, 0x7, [0x7, 0x400, 0x0, 0x6, 0x1]}}]}, @srh={0x89, 0x8, 0x4, 0x4, 0xfe, 0x48, 0x3, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2a}, @dev={0xfe, 0x80, '\x00', 0x38}]}], @payload_mcast={{{{{{0x30, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x3, 0x0, 0x1, 0xb, 0x3, 0x1, 0xff, 0x8, 0x3, 0x4e21, 0x4e20}, 0x0, 0x4}, 0x1, 0x4}, 0x3}}, [0x0, 0x0, 0x0, 0x0]}}}}, 0x2b6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000140)={0x58, r1, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x12}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) 15.798501043s ago: executing program 3 (id=1116): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req={0x30000000, 0x80, 0x1, 0x7eb}, 0x10) (async) recvmmsg$unix(r3, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r7, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x2, 0x60, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x7800, 0x40, 0x3, 0x8, {{0x14, 0x4, 0x3, 0x0, 0x50, 0x67, 0x0, 0x6f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0xe, "2aadafaa942c9109723d5478"}, @end, @lsrr={0x83, 0xf, 0x38, [@dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2]}, @generic={0x9, 0x3, "05"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xd8, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x2}]}]}}}}}) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="0b98f04af930916058250ddf5a3c3902c720efabfacb77117bdd9d540c6cc4b5d226a7cf46be90db16f17bac1d4c8024c8b898341ab23a489bf57e73aee9b6a0defc6083c8adbcadab514d7092eccfae6279314c735029578dcd26", 0x5b}, {&(0x7f0000000180)="1c8a7617aca4bf7979575bdff06c2e2a41072933ea85cef866d935", 0x1b}], 0x2, &(0x7f00000003c0)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcf}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0xbf, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @remote, @empty, @local, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast, @private=0xa010102]}, @ssrr={0x89, 0x2b, 0x5b, [@loopback, @empty, @remote, @multicast2, @broadcast, @multicast2, @rand_addr=0x64010102, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x2}, @cipso={0x86, 0x30, 0x0, [{0x2, 0x7, "333ae116e4"}, {0x5, 0xd, "ac86ccdf2e95e861612f14"}, {0x1, 0x2}, {0x5, 0xe, "aee81f58cccd30fe2a96324b"}, {0x2, 0x6, "3d4abf49"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff0001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x29}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2a}}], 0x150}}], 0x1, 0x4000094) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) 15.741382657s ago: executing program 4 (id=1117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x608, 0x3, 0x220, 0xf8, 0x7, 0x18000000, 0xf8, 0x1c0, 0x188, 0x290, 0x290, 0x188, 0x290, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {0x36020000}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x5, 0x0, 0x32e1dc7dc907ef0d, 0x5], 0x2, 0x2}, {0x2, [0x4, 0x5, 0x1, 0x2, 0x2, 0x4], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r2 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3da}], 0x1, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000700)=@req3={0x6, 0x0, 0xa, 0x8, 0x2, 0x1, 0x1}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e0000140002800500160000000000080007007f000001"], 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x50) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYRESHEX=r5, @ANYRES8=r6, @ANYRES8=0x0, @ANYRES16=r6, @ANYRESDEC=r6, @ANYBLOB="ea86865247597b888f4a892d23693b4586401ba507b7b81a083e61669f0b1da90a9797f6cd7d504ad7378d2ac6e5917a8a6733a17e22962a0e08534f04d798041405bdebc6fdba338b9d82c188e447dc", @ANYRESOCT=r7, @ANYRESHEX=r1, @ANYBLOB="c6fcbb788d399cab4bec2ebe5dccb4e6487413f51b173936158dbbd71e83c3d7125b25a6195b63efdc3228fd455925eac511479682b822dc586eacba548f9a38df8b36f08215b77eca8b24290e94585072b67a0790d014e6c4bdb28bf7d2295bf5df2e92c924b97850ad9afc2913195327e6d51a3e4947c28802a2d280b5a8145857980de14d65731b82934e3178c8704f6883a2323d252a9f2d38e8d5a96966f090bfb16fc20eaa23f58511e182a92337ebd0a54306e419942b22df279b775e762552029a9dc40786c22f78a5975102d44317b05601be21d935ecbd923d1b8bacbf9c", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0xc010) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)="f78d9ca38fff48f3be52163448412ba8b807a8207c1e3baa8c21748a481cd9a57fee134ceb274859a79e", 0x2a}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0811269fbb6c557e", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0040d5}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) 15.714236807s ago: executing program 4 (id=1118): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="610302039b60060102b78c02"], 0xc) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120100000000009500000062dd0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000200)=""/87, 0x57}], 0x2) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 15.64549068s ago: executing program 3 (id=1119): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018", @ANYRES32=0x0], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15.32564193s ago: executing program 1 (id=1120): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8}, &(0x7f0000000a40)=0x211944cf, &(0x7f0000000a80)=0x3, 0x98ad, 0x8, 0xfffffffffffffffd, 0xa, 0x21, 0xfd}}], 0x58, 0x80}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) r2 = socket(0x1e, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000d00)={0x2e4, 0x12, 0x100, 0x70bd2b, 0x25dfdbfc, {0x1d, 0xb, 0x7, 0xaa, {0x4e21, 0x4e20, [0x8, 0x3, 0x3], [0x0, 0x7, 0x200, 0x2], 0x0, [0x1]}, 0x9, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "f9e261c1756fec048fd7410efdb633c24e"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "95da56ffcebfcae1372c2f46d52bef67f69510d275b33845fa1081094eb1a05967106fc51f12b16e22c78189d3e92a662b7042568dfbcda56d4e12e1346e3bba32273fe55a0eb6c473e66e3206db8dd7354067c9e93a2f64efeb00eac7ef0af7375521d4144c6afc0089e0ddda2bb751afec596a36f40d84427ba90561b4b23c20fb9ded33987118bc11d58f6448758f4b35556c8c2fc13374297e48e6f9f10de14c5266f7a9780bd5842ba487a0094336ad3eccc6f271e1"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "84f019f99f9c13f98d25a37a9c458634ca7e6983a2ef9a07128009b624e234d37ede553b06eb8432dc451f5d925da1a776930d2964989be1740b4c74501faa8b96467de3302db2f4f27692b64beeb3cd558e1f9018a613ab393aaeb01bf0da0790a942bbb951550332a7d881d5c453e4a2e0bb111d9bdec0005f3dcc2483632a3755e50f064012b84edac48f6dbb6a6d66f4b566"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "fab587cc"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "b440803532fc56b1fb030a700ad4b0f78227"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "b6049f96139441a5b4c32d4e55deb5b721852db1a96c416aa90b8464abfc970bdc9f60240784cf2fc9d932ff1d508efca46aaafc0e8416f60e77a450232ef2c69d6062ce1424"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "91af41f3ae9095cacc47c8254ffc4611cd44ebe00295d67577b5c342e7cdf66a1add077373f429e4aeca2ac1681f91e4958896b839c5147da771b204116082ec6fc4d80b497ed0afbbcfcb0e2a41b9865a48c3da28dc305e0a86c13bf17f0636ae86c780485fff1d31a58d16c0c8e7c27d73c91e62a27b340227d7fc4714e852d11159202de5f8d3173be4bd50143ec9ec1129a54437c19d25fccf0b669b1c3d32103029fc5df74409cf5207e529f4b87b2d0cd8ba49b5aac9"}]}, 0x2e4}, 0x1, 0x0, 0x0, 0xc0b4}, 0x4000) recvmmsg(r2, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}}], 0x1, 0x40000161, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000b40)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x1}, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0xf1b, 0x3, 0x7fffffff, 0xe98e, 0x1, 0x0, 0x100000}}, @rdma_args={0x48, 0x114, 0x1, {{0x10001, 0x4}, {&(0x7f0000000280)=""/97, 0x61}, &(0x7f0000000540)=[{&(0x7f0000000300)=""/145, 0x91}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000440)=""/209, 0xd1}], 0x3, 0xa, 0x10}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000580)=""/186, 0xba}, &(0x7f0000000640), 0x74}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0xa12}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0xd0b3}, &(0x7f0000000680)=0x6, &(0x7f0000000700)=0x63a, 0x2, 0x4, 0x3, 0x5, 0x20, 0x52}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @cswp={0x58, 0x114, 0x7, {{0xfffffe01, 0x8}, &(0x7f0000000840)=0x3b35, &(0x7f0000000800)=0x80000001, 0x8, 0x7f, 0xde7, 0x3ff, 0x12, 0x9}}], 0x1b0}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) 15.315945443s ago: executing program 1 (id=1121): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x40) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) read$nci(r5, &(0x7f0000000200)=""/147, 0x93) 15.272375912s ago: executing program 1 (id=1122): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xd7a18000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000200)={0x800, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1, 0x5, [{{0x2, 0x4e21, @private=0xa010101}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}, {{0x2, 0x4e21, @local}}]}, 0x310) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x80001000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 15.185726338s ago: executing program 1 (id=1123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) 4.154153796s ago: executing program 32 (id=1072): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x14) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r3 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80800) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000200)=0x4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3c, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x200}]}, 0x18}}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000280)={0x2, 0x4, 0x3b, &(0x7f0000000240)=""/59}) r8 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$sock(r8, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r11 = openat$cgroup_pressure(r9, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) ppoll(&(0x7f0000000180)=[{r10}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r11, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r10) close(r11) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="42210101"], 0x4) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.111247993s ago: executing program 33 (id=1081): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r2 = socket(0x10, 0x2, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, 0x0, &(0x7f0000000100)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r6, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 82.406695ms ago: executing program 34 (id=1123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) 38.999571ms ago: executing program 35 (id=1119): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018", @ANYRES32=0x0], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 36 (id=1118): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="610302039b60060102b78c02"], 0xc) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120100000000009500000062dd0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000200)=""/87, 0x57}], 0x2) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 83.420252][ T5856] cgroup: Unknown subsys name 'net' [ 83.556759][ T5856] cgroup: Unknown subsys name 'cpuset' [ 83.565819][ T5856] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.212237][ T5856] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.241185][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.249855][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.258134][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.273193][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.281051][ T5885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.281067][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.282373][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.302495][ T5888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.310601][ T5888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.318934][ T5888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.326952][ T5888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.334423][ T5888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.345695][ T5888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.353201][ T5885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.353519][ T5888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.362742][ T5885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.368376][ T5888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.375254][ T5885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.381789][ T5888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.390047][ T5885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.397913][ T5888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.415392][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.416519][ T5888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.436228][ T5888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.447960][ T5888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.040661][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 89.132903][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 89.274541][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 89.368771][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 89.504151][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 89.523694][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.530918][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.539063][ T5874] bridge_slave_0: entered allmulticast mode [ 89.546589][ T5874] bridge_slave_0: entered promiscuous mode [ 89.568461][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.576099][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.583384][ T5869] bridge_slave_0: entered allmulticast mode [ 89.590620][ T5869] bridge_slave_0: entered promiscuous mode [ 89.629751][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.639480][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.646782][ T5874] bridge_slave_1: entered allmulticast mode [ 89.654647][ T5874] bridge_slave_1: entered promiscuous mode [ 89.668379][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.676100][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.683749][ T5869] bridge_slave_1: entered allmulticast mode [ 89.690874][ T5869] bridge_slave_1: entered promiscuous mode [ 89.720244][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.727635][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.735115][ T5873] bridge_slave_0: entered allmulticast mode [ 89.742376][ T5873] bridge_slave_0: entered promiscuous mode [ 89.794186][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.801338][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.809171][ T5873] bridge_slave_1: entered allmulticast mode [ 89.817086][ T5873] bridge_slave_1: entered promiscuous mode [ 89.853234][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.891761][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.938498][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.967453][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.983945][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.997487][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.006929][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.016703][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.023932][ T5868] bridge_slave_0: entered allmulticast mode [ 90.031045][ T5868] bridge_slave_0: entered promiscuous mode [ 90.040255][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.047491][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.054863][ T5868] bridge_slave_1: entered allmulticast mode [ 90.062731][ T5868] bridge_slave_1: entered promiscuous mode [ 90.154813][ T5869] team0: Port device team_slave_0 added [ 90.177185][ T5873] team0: Port device team_slave_0 added [ 90.185181][ T5874] team0: Port device team_slave_0 added [ 90.225861][ T5869] team0: Port device team_slave_1 added [ 90.235047][ T5873] team0: Port device team_slave_1 added [ 90.244752][ T5874] team0: Port device team_slave_1 added [ 90.254086][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.266790][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.276317][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.283673][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.290882][ T5871] bridge_slave_0: entered allmulticast mode [ 90.299988][ T5871] bridge_slave_0: entered promiscuous mode [ 90.359544][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.367193][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.374691][ T5871] bridge_slave_1: entered allmulticast mode [ 90.382032][ T5871] bridge_slave_1: entered promiscuous mode [ 90.457028][ T5880] Bluetooth: hci3: command tx timeout [ 90.457572][ T5888] Bluetooth: hci0: command tx timeout [ 90.463160][ T5880] Bluetooth: hci1: command tx timeout [ 90.479720][ T5868] team0: Port device team_slave_0 added [ 90.505375][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.512428][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.533262][ T5880] Bluetooth: hci4: command tx timeout [ 90.538974][ T5888] Bluetooth: hci2: command tx timeout [ 90.548818][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.565335][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.572468][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.598921][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.610770][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.618126][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.644742][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.657605][ T5868] team0: Port device team_slave_1 added [ 90.680002][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.689939][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.697235][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.723605][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.741761][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.749065][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.775008][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.786932][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.794177][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.820112][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.845916][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.885215][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.892193][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.918329][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.945929][ T5871] team0: Port device team_slave_0 added [ 90.969223][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.976496][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.002842][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.034496][ T5871] team0: Port device team_slave_1 added [ 91.103310][ T5869] hsr_slave_0: entered promiscuous mode [ 91.109636][ T5869] hsr_slave_1: entered promiscuous mode [ 91.120877][ T5873] hsr_slave_0: entered promiscuous mode [ 91.127290][ T5873] hsr_slave_1: entered promiscuous mode [ 91.134600][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 91.140443][ T5873] Cannot create hsr debugfs directory [ 91.166391][ T5874] hsr_slave_0: entered promiscuous mode [ 91.173075][ T5874] hsr_slave_1: entered promiscuous mode [ 91.180032][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 91.185790][ T5874] Cannot create hsr debugfs directory [ 91.205600][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.212807][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.238792][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.307289][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.314991][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.345730][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.388083][ T5868] hsr_slave_0: entered promiscuous mode [ 91.395017][ T5868] hsr_slave_1: entered promiscuous mode [ 91.401062][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 91.407101][ T5868] Cannot create hsr debugfs directory [ 91.620757][ T5871] hsr_slave_0: entered promiscuous mode [ 91.627181][ T5871] hsr_slave_1: entered promiscuous mode [ 91.633464][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 91.639201][ T5871] Cannot create hsr debugfs directory [ 91.898456][ T1213] cfg80211: failed to load regulatory.db [ 92.046446][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.076489][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.096426][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.115729][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.165826][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.179249][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.191220][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.216796][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.296842][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.307379][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.319457][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.338156][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.439752][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.459516][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.470981][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.484533][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.533104][ T5888] Bluetooth: hci1: command tx timeout [ 92.533656][ T5880] Bluetooth: hci0: command tx timeout [ 92.538549][ T51] Bluetooth: hci3: command tx timeout [ 92.587912][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.611126][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.617939][ T51] Bluetooth: hci4: command tx timeout [ 92.622568][ T51] Bluetooth: hci2: command tx timeout [ 92.654487][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.671702][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.688666][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.755935][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.778737][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.806137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.813477][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.829914][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.874325][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.881489][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.891305][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.898461][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.908386][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.915563][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.018586][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.055523][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.099062][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.136215][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.168562][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.175854][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.191196][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.198553][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.237032][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.267698][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.307499][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.314715][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.370145][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.377400][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.406772][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.447669][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.454842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.545236][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.552500][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.634949][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.645769][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.731705][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.950424][ T5869] veth0_vlan: entered promiscuous mode [ 93.967313][ T5873] veth0_vlan: entered promiscuous mode [ 94.013514][ T5873] veth1_vlan: entered promiscuous mode [ 94.040276][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.051113][ T5869] veth1_vlan: entered promiscuous mode [ 94.189568][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.198783][ T5869] veth0_macvtap: entered promiscuous mode [ 94.235683][ T5869] veth1_macvtap: entered promiscuous mode [ 94.255913][ T5873] veth0_macvtap: entered promiscuous mode [ 94.291718][ T5874] veth0_vlan: entered promiscuous mode [ 94.311909][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.331294][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.345607][ T5873] veth1_macvtap: entered promiscuous mode [ 94.364748][ T5874] veth1_vlan: entered promiscuous mode [ 94.387970][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.436160][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.505886][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.521105][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.538756][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.569127][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.578048][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.591096][ T5871] veth0_vlan: entered promiscuous mode [ 94.607041][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.617845][ T51] Bluetooth: hci0: command tx timeout [ 94.623445][ T5888] Bluetooth: hci3: command tx timeout [ 94.623463][ T5880] Bluetooth: hci1: command tx timeout [ 94.665523][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.693274][ T5880] Bluetooth: hci2: command tx timeout [ 94.697550][ T51] Bluetooth: hci4: command tx timeout [ 94.708573][ T5874] veth0_macvtap: entered promiscuous mode [ 94.718932][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.739705][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.749970][ T5871] veth1_vlan: entered promiscuous mode [ 94.794590][ T5874] veth1_macvtap: entered promiscuous mode [ 94.889418][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.903726][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.914503][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.969517][ T5871] veth0_macvtap: entered promiscuous mode [ 94.970079][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.996299][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.036040][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.044706][ T5871] veth1_macvtap: entered promiscuous mode [ 95.061845][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.071802][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.083587][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.091446][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.136020][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.159418][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.195508][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.204637][ T5868] veth0_vlan: entered promiscuous mode [ 95.210442][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.233751][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.260052][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.307973][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.328272][ T5868] veth1_vlan: entered promiscuous mode [ 95.435517][ T3579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.472483][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.480381][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.548344][ T3579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.559469][ T3566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.619255][ T5995] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 95.619935][ T3566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.668992][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.698532][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.860616][ T5868] veth0_macvtap: entered promiscuous mode [ 95.897492][ T6002] nbd: must specify at least one socket [ 95.901781][ T5868] veth1_macvtap: entered promiscuous mode [ 95.936341][ T6002] Zero length message leads to an empty skb [ 95.983771][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.010000][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.022396][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.129437][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.243455][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.254398][ T4542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.287330][ T6016] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10'. [ 96.300012][ T4542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.312137][ T3579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.349297][ T4542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.388132][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.439278][ T6022] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 96.443319][ T6021] IPVS: stopping master sync thread 6022 ... [ 96.584535][ T6025] geneve2: entered promiscuous mode [ 96.596969][ T6025] geneve2: entered allmulticast mode [ 96.694634][ T51] Bluetooth: hci0: command tx timeout [ 96.694727][ T5880] Bluetooth: hci3: command tx timeout [ 96.700177][ T51] Bluetooth: hci1: command tx timeout [ 96.773542][ T51] Bluetooth: hci4: command tx timeout [ 96.779006][ T51] Bluetooth: hci2: command tx timeout [ 97.015074][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.058699][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.208267][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.244087][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.374329][ T6065] vlan2: entered allmulticast mode [ 97.379523][ T6065] hsr0: entered allmulticast mode [ 97.390742][ T6065] hsr_slave_0: entered allmulticast mode [ 97.424088][ T6065] hsr_slave_1: entered allmulticast mode [ 98.161369][ T6105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29'. [ 98.171478][ T6104] netlink: 'syz.3.31': attribute type 11 has an invalid length. [ 98.230727][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29'. [ 98.629396][ T6123] netlink: 576 bytes leftover after parsing attributes in process `syz.2.37'. [ 98.688694][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 98.727270][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 98.940452][ T6140] warning: `syz.3.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.189846][ T6151] Bluetooth: MGMT ver 1.23 [ 99.348337][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 99.717195][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.52'. [ 99.785899][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 99.806696][ T6172] netlink: 'syz.2.51': attribute type 30 has an invalid length. [ 99.823594][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 99.891095][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.016027][ T3566] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.051974][ T3566] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.083717][ T3566] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.097494][ T6202] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 101.590201][ T6204] bridge_slave_1: left allmulticast mode [ 101.615654][ T6204] bridge_slave_1: left promiscuous mode [ 101.642073][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.679427][ T6219] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 101.716481][ T6204] bridge_slave_0: left allmulticast mode [ 101.726532][ T6204] bridge_slave_0: left promiscuous mode [ 101.736138][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.274806][ T6223] syz.1.65 uses old SIOCAX25GETINFO [ 102.527568][ T6232] __nla_validate_parse: 2 callbacks suppressed [ 102.527588][ T6232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.68'. [ 102.735645][ T6239] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 102.789490][ T6251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.73'. [ 102.802157][ T6241] syzkaller1: entered promiscuous mode [ 102.809704][ T6241] syzkaller1: entered allmulticast mode [ 103.217306][ T6271] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 103.220206][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e7ed000: rx timeout, send abort [ 103.234140][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e7ec400: rx timeout, send abort [ 103.242736][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e7ed000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.246095][ T6271] netlink: 'syz.2.80': attribute type 4 has an invalid length. [ 103.257842][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e7ec400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.292403][ T6271] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.80'. [ 103.383798][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 103.404086][ T6274] netlink: 32 bytes leftover after parsing attributes in process `syz.4.82'. [ 103.411500][ T6278] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 103.426653][ T6271] veth1_to_bond: entered allmulticast mode [ 103.448471][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 103.452792][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 103.493357][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 103.538987][ T6270] veth1_to_bond: left allmulticast mode [ 103.629238][ T6282] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 103.669128][ T6282] netlink: 176 bytes leftover after parsing attributes in process `syz.1.85'. [ 103.690400][ T6285] netlink: 'syz.4.88': attribute type 1 has an invalid length. [ 103.704532][ T6293] netlink: 60 bytes leftover after parsing attributes in process `syz.1.85'. [ 103.806215][ T6297] netlink: 'syz.2.89': attribute type 5 has an invalid length. [ 104.413816][ T6323] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20001 [ 104.547565][ T6329] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 104.822807][ T6336] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 105.069297][ T6354] tipc: Enabling of bearer rejected, failed to enable media [ 105.346248][ T6373] netlink: 'syz.0.113': attribute type 21 has an invalid length. [ 105.366912][ T6374] netlink: 'syz.2.114': attribute type 2 has an invalid length. [ 105.374960][ T6374] netlink: 'syz.2.114': attribute type 8 has an invalid length. [ 106.019465][ T6408] netlink: 'syz.1.123': attribute type 10 has an invalid length. [ 106.080964][ T6413] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 106.084901][ T6408] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 106.120611][ T6402] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.312066][ T6418] vxcan1: tx address claim with dest, not broadcast [ 106.647439][ T6431] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 106.876164][ T6434] bond1 (unregistering): Released all slaves [ 107.662341][ T5932] IPVS: starting estimator thread 0... [ 107.671119][ T6477] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 107.679186][ T6483] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.793387][ T6482] IPVS: using max 28 ests per chain, 67200 per kthread [ 108.070645][ T6498] __nla_validate_parse: 15 callbacks suppressed [ 108.070667][ T6498] netlink: 68 bytes leftover after parsing attributes in process `syz.3.148'. [ 108.162503][ T6500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.238505][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 108.463531][ T6519] netlink: 'syz.2.155': attribute type 1 has an invalid length. [ 108.489425][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 108.777927][ T6540] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 108.944812][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 108.945413][ T6546] netlink: 104 bytes leftover after parsing attributes in process `syz.3.163'. [ 108.967229][ T6549] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 109.032115][ T6549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.075991][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 109.130987][ T6554] bond2: (slave veth3): Enslaving as an active interface with a down link [ 109.147854][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 109.189313][ T6549] veth5: entered promiscuous mode [ 109.198603][ T6549] bond2: (slave veth5): Enslaving as an active interface with a down link [ 109.211942][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 109.240384][ T6554] vlan2: entered allmulticast mode [ 109.256549][ T6554] bond2: entered allmulticast mode [ 109.263739][ T6554] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 109.301641][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 109.318913][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 109.543328][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.584093][ T6575] bridge_slave_1: left allmulticast mode [ 109.589817][ T6575] bridge_slave_1: left promiscuous mode [ 109.617149][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.675447][ T6575] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 110.017133][ T6598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.276937][ T6618] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 111.044500][ T6665] validate_nla: 1 callbacks suppressed [ 111.044517][ T6665] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 111.158194][ T6665] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 111.183189][ T6681] tipc: Started in network mode [ 111.207990][ T6681] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 111.218469][ T6681] tipc: Enabled bearer , priority 12 [ 111.466225][ T6695] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 111.493450][ T6695] netlink: 'syz.1.192': attribute type 2 has an invalid length. [ 111.795400][ T6713] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.923993][ T6717] sctp: [Deprecated]: syz.0.199 (pid 6717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.923993][ T6717] Use struct sctp_sack_info instead [ 111.953283][ T6719] Illegal XDP return value 4294967274 on prog (id 57) dev N/A, expect packet loss! [ 111.973824][ T51] Bluetooth: hci4: command tx timeout [ 112.334050][ T5953] tipc: Node number set to 10070698 [ 112.827683][ T4542] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.845278][ T4542] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.859903][ T4542] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.889526][ T4542] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.057278][ T6758] netlink: 'syz.0.213': attribute type 9 has an invalid length. [ 113.239668][ T6765] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.691454][ T6784] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 113.739832][ T6784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.839109][ T6785] bond1: (slave veth3): Enslaving as an active interface with a down link [ 113.879391][ T6784] vlan2: entered allmulticast mode [ 113.886924][ T6784] bond1: entered allmulticast mode [ 113.895383][ T4542] wlan1: Trigger new scan to find an IBSS to join [ 113.898788][ T6784] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 113.985864][ T6799] batadv_slave_1: entered promiscuous mode [ 114.017763][ T6798] batadv_slave_1: left promiscuous mode [ 114.615113][ T6835] __nla_validate_parse: 11 callbacks suppressed [ 114.615130][ T6835] netlink: 68 bytes leftover after parsing attributes in process `syz.0.238'. [ 114.649226][ T6837] openvswitch: netlink: Multiple metadata blocks provided [ 114.768252][ T6839] netlink: 108 bytes leftover after parsing attributes in process `syz.3.240'. [ 114.796085][ T6839] netlink: 'syz.3.240': attribute type 10 has an invalid length. [ 114.907268][ T6839] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 115.687523][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 115.730055][ T6879] netlink: 'syz.2.250': attribute type 6 has an invalid length. [ 115.780986][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.252'. [ 115.790318][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 115.907085][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 115.938575][ T6882] netlink: 'syz.3.252': attribute type 5 has an invalid length. [ 115.967479][ T6879] tipc: Started in network mode [ 115.989560][ T6879] tipc: Node identity 1e8a7c0a2538, cluster identity 4711 [ 116.012722][ T6879] tipc: Enabled bearer , priority 0 [ 116.044323][ T6878] tipc: Disabling bearer [ 116.049277][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 116.331302][ T6905] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 116.623287][ T6920] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 116.937469][ T71] wlan1: Trigger new scan to find an IBSS to join [ 117.080831][ T6940] syzkaller0: create flow: hash 4218540599 index 1 [ 117.284245][ T6934] syzkaller0: delete flow: hash 4218540599 index 1 [ 117.775464][ T6962] netlink: 'syz.2.268': attribute type 2 has an invalid length. [ 117.968355][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 118.991304][ T6987] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 118.999522][ T6987] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 119.007296][ T6987] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.277'. [ 119.018220][ T6987] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 119.026119][ T6987] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 119.033870][ T6987] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.277'. [ 119.047566][ T6987] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 119.341219][ T7002] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 119.562707][ T7013] netlink: 'syz.2.283': attribute type 7 has an invalid length. [ 119.636121][ T7015] gre1: entered promiscuous mode [ 119.641135][ T7015] gre1: entered allmulticast mode [ 119.903595][ T12] wlan1: Trigger new scan to find an IBSS to join [ 119.923922][ T7028] bridge0: entered allmulticast mode [ 119.931630][ T7028] __nla_validate_parse: 2 callbacks suppressed [ 119.931648][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 119.981659][ T7028] bridge_slave_0: left allmulticast mode [ 120.039547][ T7028] bridge_slave_0: left promiscuous mode [ 120.064953][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.227193][ T7028] bridge0 (unregistering): left allmulticast mode [ 120.595795][ T7054] netlink: 'syz.1.294': attribute type 39 has an invalid length. [ 120.679772][ T7051] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.792030][ T7064] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.297'. [ 120.851752][ T7063] syzkaller1: entered promiscuous mode [ 120.862506][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.296'. [ 120.873827][ T12] wlan1: Creating new IBSS network, BSSID c6:05:4f:c6:e7:92 [ 120.887176][ T7063] syzkaller1: entered allmulticast mode [ 120.911885][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.295'. [ 121.114270][ T7074] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 121.242173][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 121.243784][ T7074] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 121.284985][ T24] IPVS: starting estimator thread 0... [ 121.517454][ T7090] IPVS: using max 25 ests per chain, 60000 per kthread [ 121.543850][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 121.739685][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 121.887087][ T7108] tipc: Started in network mode [ 121.892006][ T7108] tipc: Node identity , cluster identity 4711 [ 121.898292][ T7108] tipc: Failed to obtain node identity [ 121.905077][ T7108] tipc: Enabling of bearer rejected, failed to enable media [ 121.991656][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 122.008532][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 122.199564][ T7123] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 122.245998][ T7123] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 122.333594][ T7119] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 122.757487][ T7138] netlink: 48 bytes leftover after parsing attributes in process `syz.1.314'. [ 122.772567][ T7143] netlink: 'syz.3.315': attribute type 29 has an invalid length. [ 122.907261][ T7154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.112081][ T7156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.298833][ T7160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.473725][ T7160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.733724][ T7191] validate_nla: 1 callbacks suppressed [ 123.733743][ T7191] netlink: 'syz.1.328': attribute type 32 has an invalid length. [ 123.756637][ T7188] tipc: Started in network mode [ 123.767471][ T7188] tipc: Node identity 82bc2e581f7e, cluster identity 4711 [ 123.796334][ T7188] tipc: Enabled bearer , priority 0 [ 123.849893][ T7189] syzkaller0: entered promiscuous mode [ 123.874661][ T7189] syzkaller0: entered allmulticast mode [ 123.900568][ T7191] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 123.969138][ T7203] bond2 (unregistering): Released all slaves [ 124.102631][ T7189] tipc: Resetting bearer [ 124.114055][ T7217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 124.122080][ T7217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 124.130023][ T7217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 124.137950][ T7217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 124.145873][ T7217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 124.153906][ T7217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 124.161788][ T7217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 124.247122][ T7189] tipc: Disabling bearer [ 124.820179][ T7241] netlink: 'syz.1.342': attribute type 6 has an invalid length. [ 124.820550][ T7242] netlink: 'syz.1.342': attribute type 6 has an invalid length. [ 125.126073][ T7260] __nla_validate_parse: 7 callbacks suppressed [ 125.126092][ T7260] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.347'. [ 125.438017][ T7269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'. [ 125.459380][ T7270] tipc: Started in network mode [ 125.482407][ T7270] tipc: Node identity 6269924568c4, cluster identity 4711 [ 125.497850][ T7274] netlink: 'syz.1.353': attribute type 39 has an invalid length. [ 125.501997][ T7270] tipc: Enabled bearer , priority 0 [ 125.540177][ T7270] tipc: Resetting bearer [ 125.557077][ T7268] tipc: Disabling bearer [ 125.588584][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 125.939201][ T7295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.146132][ T7308] netlink: 232 bytes leftover after parsing attributes in process `syz.1.361'. [ 126.395279][ T7326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.364'. [ 126.446807][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 126.661508][ T7336] net_ratelimit: 47 callbacks suppressed [ 126.661529][ T7336] openvswitch: netlink: Message has 4 unknown bytes. [ 126.970743][ T7356] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 126.983984][ T7354] netlink: 533 bytes leftover after parsing attributes in process `syz.4.372'. [ 127.004806][ T7356] netlink: 'syz.1.373': attribute type 2 has an invalid length. [ 127.018689][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.372'. [ 127.073393][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.373'. [ 127.102867][ T7357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.373'. [ 127.853725][ T7399] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 127.861317][ T7399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.943813][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.966756][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.181752][ T7410] bridge0: entered promiscuous mode [ 128.200213][ T7410] macvtap1: entered allmulticast mode [ 128.211079][ T7410] bridge0: entered allmulticast mode [ 128.226935][ T7410] bridge0: port 3(macvtap1) entered blocking state [ 128.256375][ T7410] bridge0: port 3(macvtap1) entered disabled state [ 128.286625][ T7410] bridge0: left allmulticast mode [ 128.296804][ T7410] bridge0: left promiscuous mode [ 129.505029][ T7488] netlink: 'syz.0.417': attribute type 23 has an invalid length. [ 129.934541][ T7502] IPVS: length: 24 != 3221225496 [ 130.087797][ T7509] syz_tun: entered allmulticast mode [ 130.110916][ T7508] syz_tun: left allmulticast mode [ 130.145140][ T7511] __nla_validate_parse: 18 callbacks suppressed [ 130.145158][ T7511] netlink: 92 bytes leftover after parsing attributes in process `syz.0.426'. [ 130.285400][ T7515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 130.432021][ T7515] netlink: 32 bytes leftover after parsing attributes in process `syz.4.427'. [ 130.442672][ T7520] netlink: 'syz.2.429': attribute type 2 has an invalid length. [ 130.670412][ T7532] tipc: Can't bind to reserved service type 0 [ 130.741425][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 130.774711][ T7539] 8021q: VLANs not supported on ip_vti0 [ 130.935826][ T7543] tipc: Enabled bearer , priority 0 [ 130.970942][ T7543] syzkaller0: entered promiscuous mode [ 130.989629][ T7543] syzkaller0: entered allmulticast mode [ 131.051431][ T7543] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.108003][ T7543] tipc: Resetting bearer [ 131.117403][ T7550] tipc: Started in network mode [ 131.128473][ T7550] tipc: Node identity , cluster identity 4711 [ 131.137176][ T7550] tipc: Failed to obtain node identity [ 131.143176][ T7550] tipc: Enabling of bearer rejected, failed to enable media [ 131.159072][ T7542] tipc: Resetting bearer [ 131.184657][ T7542] tipc: Disabling bearer [ 131.201155][ T7554] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 131.298388][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'. [ 131.356876][ T7568] netlink: 27 bytes leftover after parsing attributes in process `syz.4.444'. [ 131.666002][ T7550] syzkaller0: entered promiscuous mode [ 131.696488][ T7550] syzkaller0: entered allmulticast mode [ 132.867340][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.619165][ T7588] IPv6: sit1: Disabled Multicast RS [ 133.625839][ T7588] sit1: entered allmulticast mode [ 133.733462][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 133.929212][ T7617] netlink: 'syz.0.455': attribute type 3 has an invalid length. [ 134.026540][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 134.179566][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'. [ 134.209007][ T7635] netlink: 'syz.1.458': attribute type 7 has an invalid length. [ 134.245330][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 134.262000][ T7635] netlink: 'syz.1.458': attribute type 8 has an invalid length. [ 134.399655][ T7643] macvtap1: entered promiscuous mode [ 134.405496][ T7643] vlan0: entered promiscuous mode [ 134.411456][ T7643] macvtap1: entered allmulticast mode [ 134.422382][ T7643] vlan0: entered allmulticast mode [ 134.427661][ T7643] veth0_vlan: entered allmulticast mode [ 134.452956][ T7642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.791242][ T7665] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 134.806864][ T7665] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 134.819055][ T7665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.293171][ T7696] __nla_validate_parse: 3 callbacks suppressed [ 135.293191][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 135.319154][ T7696] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 135.331751][ T7696] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 135.631457][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.480'. [ 135.797869][ T7718] xt_l2tp: wrong L2TP version: 0 [ 135.967249][ T7728] netlink: 'syz.4.485': attribute type 4 has an invalid length. [ 136.231435][ T7739] netlink: 144 bytes leftover after parsing attributes in process `syz.3.486'. [ 136.257617][ T7741] smc: net device erspan0 applied user defined pnetid SYZ0 [ 136.266947][ T7740] netlink: 'syz.2.489': attribute type 21 has an invalid length. [ 136.276289][ T7740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.489'. [ 136.453605][ T7748] openvswitch: netlink: IPv4 tun info is not correct [ 136.474320][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.492'. [ 136.570687][ T7752] sctp: [Deprecated]: syz.1.493 (pid 7752) Use of int in maxseg socket option. [ 136.570687][ T7752] Use struct sctp_assoc_value instead [ 136.693560][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.496'. [ 137.027478][ T7772] netlink: 'syz.4.501': attribute type 1 has an invalid length. [ 137.125384][ T7772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.698668][ T7803] macsec1: entered promiscuous mode [ 137.706757][ T7803] macsec1: entered allmulticast mode [ 138.038383][ T7822] netlink: 104 bytes leftover after parsing attributes in process `syz.1.516'. [ 138.049939][ T7818] netlink: 36 bytes leftover after parsing attributes in process `syz.2.515'. [ 138.149597][ T7825] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 138.237426][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 138.558155][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 138.740011][ T7844] netlink: 'syz.3.523': attribute type 8 has an invalid length. [ 138.754460][ T7843] gre0: entered promiscuous mode [ 139.055147][ T7858] netlink: 'syz.0.526': attribute type 2 has an invalid length. [ 139.152573][ T7858] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 139.174960][ T7857] netlink: 'syz.0.526': attribute type 2 has an invalid length. [ 139.199292][ T7857] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 139.616908][ T7884] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 139.680848][ T7884] team0: Device ip6gre1 is of different type [ 139.954062][ T7901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.955680][ T7899] gtp1: entered promiscuous mode [ 139.993508][ T7899] gtp1: entered allmulticast mode [ 140.231923][ T7915] netlink: 'syz.4.542': attribute type 21 has an invalid length. [ 140.496642][ T7928] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 140.554476][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.720876][ T7941] __nla_validate_parse: 6 callbacks suppressed [ 140.720895][ T7941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.551'. [ 140.782520][ T7948] netlink: 'syz.2.554': attribute type 21 has an invalid length. [ 140.796696][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 140.846858][ T7946] netlink: 5 bytes leftover after parsing attributes in process `syz.0.553'. [ 140.942656][ T7948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.554'. [ 141.129828][ T7960] tipc: Started in network mode [ 141.139909][ T7960] tipc: Node identity 6671fd9587a3, cluster identity 4711 [ 141.204338][ T7960] tipc: Enabled bearer , priority 0 [ 141.213250][ T7967] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.557'. [ 141.299531][ T7972] netlink: 60 bytes leftover after parsing attributes in process `syz.0.560'. [ 141.328973][ T7960] tipc: Disabling bearer [ 141.501239][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.563'. [ 141.540555][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.563'. [ 141.564850][ T7987] sctp: [Deprecated]: syz.0.565 (pid 7987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.564850][ T7987] Use struct sctp_sack_info instead [ 141.589055][ T7990] openvswitch: netlink: Key type 29 is not supported [ 141.601652][ T7987] sctp: [Deprecated]: syz.0.565 (pid 7987) Use of int in max_burst socket option deprecated. [ 141.601652][ T7987] Use struct sctp_assoc_value instead [ 142.111206][ T8014] syzkaller1: entered promiscuous mode [ 142.158953][ T8014] syzkaller1: entered allmulticast mode [ 142.311760][ T8027] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 142.423218][ T8030] netlink: 'syz.4.576': attribute type 12 has an invalid length. [ 143.265056][ T8042] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 143.279230][ T8040] vxcan1: entered allmulticast mode [ 143.312788][ T8042] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 143.354945][ T8042] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 143.417000][ T8042] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 143.470192][ T8042] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 143.513549][ T8042] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 143.528378][ T8042] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 143.656796][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 143.692892][ T8058] veth1_to_bond: entered allmulticast mode [ 143.714344][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 143.825796][ T8058] bond0: (slave bond_slave_1): Releasing backup interface [ 143.870190][ T8058] veth1_to_bond (unregistering): left allmulticast mode [ 143.888671][ T8061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.927567][ T8061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.001890][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.045330][ T6651] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.089440][ T6651] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.117829][ T6651] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.174145][ T8078] sctp: [Deprecated]: syz.2.591 (pid 8078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.174145][ T8078] Use struct sctp_sack_info instead [ 144.824376][ T30] audit: type=1800 audit(1757371491.169:2): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.598" name="memory.events" dev="tmpfs" ino=625 res=0 errno=0 [ 145.131822][ T8123] bridge_slave_1 (unregistering): left allmulticast mode [ 145.169989][ T8123] bridge_slave_1 (unregistering): left promiscuous mode [ 145.181286][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.207941][ T8132] openvswitch: netlink: IPv4 tun info is not correct [ 145.243793][ T8134] netlink: 'syz.4.604': attribute type 11 has an invalid length. [ 145.272154][ T8126] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 146.130870][ T8176] tipc: Enabled bearer , priority 0 [ 146.138214][ T8175] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 146.155001][ T8179] syzkaller0: entered promiscuous mode [ 146.160807][ T8179] syzkaller0: entered allmulticast mode [ 146.172634][ T8176] syzkaller0: entered promiscuous mode [ 146.178151][ T8176] syzkaller0: entered allmulticast mode [ 146.198791][ T8176] tipc: Resetting bearer [ 146.233192][ T8173] tipc: Resetting bearer [ 146.268641][ T8173] tipc: Disabling bearer [ 146.395258][ T8187] __nla_validate_parse: 8 callbacks suppressed [ 146.395277][ T8187] netlink: 108 bytes leftover after parsing attributes in process `syz.1.617'. [ 146.766252][ T6645] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 146.909035][ T8206] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 146.971676][ T8220] validate_nla: 64 callbacks suppressed [ 146.971695][ T8220] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 147.168410][ T8217] syzkaller0: entered promiscuous mode [ 147.174573][ T8217] syzkaller0: entered allmulticast mode [ 147.752483][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 147.785586][ T8252] nbd: must specify at least one socket [ 147.805100][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 147.822468][ T8252] nbd: must specify at least one socket [ 147.828245][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 147.858340][ T8252] nbd: must specify at least one socket [ 147.871115][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 147.885575][ T8252] nbd: must specify at least one socket [ 147.891544][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 147.901796][ T8252] nbd: must specify at least one socket [ 147.912045][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 147.928009][ T8252] nbd: must specify at least one socket [ 147.934749][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 147.943996][ T8252] nbd: must specify at least one socket [ 147.950537][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 147.959931][ T8252] nbd: must specify at least one socket [ 147.967707][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 147.979825][ T8252] nbd: must specify at least one socket [ 148.003767][ T8252] nbd: must specify at least one socket [ 148.025342][ T8252] nbd: must specify at least one socket [ 148.031334][ T8252] nbd: must specify at least one socket [ 148.055374][ T8252] nbd: must specify at least one socket [ 148.061231][ T8252] nbd: must specify at least one socket [ 148.075513][ T8252] nbd: must specify at least one socket [ 148.085913][ T8252] nbd: must specify at least one socket [ 148.091799][ T8252] nbd: must specify at least one socket [ 148.097770][ T8252] nbd: must specify at least one socket [ 148.103977][ T8252] nbd: must specify at least one socket [ 148.109895][ T8252] nbd: must specify at least one socket [ 148.116051][ T8252] nbd: must specify at least one socket [ 148.121986][ T8252] nbd: must specify at least one socket [ 148.151243][ T8252] nbd: must specify at least one socket [ 148.187790][ T8252] nbd: must specify at least one socket [ 148.211526][ T8252] nbd: must specify at least one socket [ 148.236647][ T8252] nbd: must specify at least one socket [ 148.243891][ T8252] nbd: must specify at least one socket [ 148.249761][ T8252] nbd: must specify at least one socket [ 148.258142][ T8252] nbd: must specify at least one socket [ 148.264236][ T8252] nbd: must specify at least one socket [ 148.270079][ T8252] nbd: must specify at least one socket [ 148.279126][ T8252] nbd: must specify at least one socket [ 148.285270][ T8252] nbd: must specify at least one socket [ 148.291147][ T8252] nbd: must specify at least one socket [ 148.298057][ T8252] nbd: must specify at least one socket [ 148.315941][ T8252] nbd: must specify at least one socket [ 148.321897][ T8252] nbd: must specify at least one socket [ 148.329915][ T8252] nbd: must specify at least one socket [ 148.338590][ T8252] nbd: must specify at least one socket [ 148.346402][ T8252] nbd: must specify at least one socket [ 148.352550][ T8252] nbd: must specify at least one socket [ 148.360021][ T8252] nbd: must specify at least one socket [ 148.379730][ T8252] nbd: must specify at least one socket [ 148.386763][ T8252] nbd: must specify at least one socket [ 148.395837][ T8252] nbd: must specify at least one socket [ 148.401686][ T8252] nbd: must specify at least one socket [ 148.410868][ T8252] nbd: must specify at least one socket [ 148.421353][ T8252] nbd: must specify at least one socket [ 148.428306][ T8252] nbd: must specify at least one socket [ 148.437452][ T8252] nbd: must specify at least one socket [ 148.444566][ T8252] nbd: must specify at least one socket [ 148.450416][ T8252] nbd: must specify at least one socket [ 148.459275][ T8252] nbd: must specify at least one socket [ 148.469039][ T8252] nbd: must specify at least one socket [ 148.479363][ T8252] nbd: must specify at least one socket [ 148.488572][ T8252] nbd: must specify at least one socket [ 148.499190][ T8252] nbd: must specify at least one socket [ 148.506175][ T8252] nbd: must specify at least one socket [ 148.512138][ T8252] nbd: must specify at least one socket [ 149.434055][ T8273] 8021q: VLANs not supported on ipvlan1 [ 149.643227][ T8283] dvmrp1: entered allmulticast mode [ 149.674019][ T8283] dvmrp1: left allmulticast mode [ 149.793846][ T8290] tipc: Enabled bearer , priority 0 [ 149.801662][ T8292] unsupported nlmsg_type 40 [ 149.818717][ T8290] syzkaller0: MTU too low for tipc bearer [ 149.847229][ T8290] tipc: Disabling bearer [ 149.869156][ T8299] syzkaller0: MTU too low for tipc bearer [ 149.876835][ T8299] tipc: Enabling of bearer rejected, failed to enable media [ 150.462891][ T8324] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 150.763621][ T8346] Bluetooth: MGMT ver 1.23 [ 151.528610][ T8397] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 151.531340][ T8412] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 151.714145][ T8424] __nla_validate_parse: 58 callbacks suppressed [ 151.714166][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.676'. [ 151.743388][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 152.007496][ T8449] openvswitch: netlink: Actions may not be safe on all matching packets [ 152.060381][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 152.110725][ T8451] netlink: 'syz.3.684': attribute type 3 has an invalid length. [ 152.122177][ T8451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.144870][ T8457] netlink: 'syz.4.685': attribute type 9 has an invalid length. [ 152.178335][ T8457] netlink: 212260 bytes leftover after parsing attributes in process `syz.4.685'. [ 152.300962][ T8463] vlan1: entered promiscuous mode [ 152.416336][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 152.511709][ T8473] tipc: Enabled bearer , priority 0 [ 152.516665][ T8474] netlink: 104 bytes leftover after parsing attributes in process `syz.1.688'. [ 152.587881][ T8474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.688'. [ 152.698833][ T8473] syzkaller0: entered promiscuous mode [ 152.719881][ T8473] syzkaller0: entered allmulticast mode [ 152.738956][ T8473] tipc: Resetting bearer [ 152.768819][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.694'. [ 153.157891][ T8481] tipc: Resetting bearer [ 153.346831][ T6649] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 153.676461][ T8511] netlink: 76 bytes leftover after parsing attributes in process `syz.2.698'. [ 154.618126][ T8481] tipc: Disabling bearer [ 155.024247][ T8536] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 155.055524][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 155.133575][ T8546] delete_channel: no stack [ 155.154610][ T8543] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 155.178792][ T8543] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 155.439719][ T8556] syzkaller0: entered promiscuous mode [ 155.455501][ T8556] syzkaller0: entered allmulticast mode [ 155.928684][ T8578] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 156.839485][ T8584] __nla_validate_parse: 3 callbacks suppressed [ 156.839503][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 156.848564][ T8588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.719'. [ 156.886306][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.150316][ T8600] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 157.236562][ T8601] pim6reg1: entered promiscuous mode [ 157.250589][ T8601] pim6reg1: entered allmulticast mode [ 158.307193][ T8663] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.740'. [ 158.351530][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 158.371455][ T8663] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.740'. [ 158.387108][ T8672] bond0: entered promiscuous mode [ 158.436953][ T8672] bond_slave_0: entered promiscuous mode [ 158.444160][ T8672] bond_slave_1: entered promiscuous mode [ 158.450143][ T8672] bridge_slave_1: entered promiscuous mode [ 158.483204][ T8677] netlink: 56 bytes leftover after parsing attributes in process `syz.2.744'. [ 158.496998][ T8672] bond0: left promiscuous mode [ 158.501984][ T8672] bond_slave_0: left promiscuous mode [ 158.509728][ T8672] bond_slave_1: left promiscuous mode [ 158.541927][ T8672] bridge_slave_1: left promiscuous mode [ 158.580731][ T8691] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 158.595724][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 158.795155][ T8704] syzkaller0: entered promiscuous mode [ 158.800735][ T8704] syzkaller0: entered allmulticast mode [ 158.873851][ T8706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'. [ 158.929998][ T8709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.958268][ T8709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.997435][ T8709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.033457][ T8709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.118605][ T8720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.605442][ T8750] netlink: 'syz.2.762': attribute type 49 has an invalid length. [ 159.768223][ T8757] netlink: 40 bytes leftover after parsing attributes in process `syz.1.765'. [ 159.967503][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.768'. [ 160.120213][ T8764] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 160.122521][ T8765] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 160.404931][ T8787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.435278][ T8787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.655924][ T8794] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 160.875610][ T8818] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 161.005963][ T8824] netlink: 'syz.4.785': attribute type 1 has an invalid length. [ 161.168642][ T8824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.289956][ T8828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.319732][ T8828] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.338367][ T8828] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 161.429032][ T8847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.900653][ T8871] __nla_validate_parse: 15 callbacks suppressed [ 161.900672][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 161.919670][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 161.944833][ T8865] hsr_slave_1 (unregistering): left promiscuous mode [ 162.048395][ T8878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.802134][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.812'. [ 162.822042][ T8923] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 162.871541][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.812'. [ 162.948281][ T8936] netlink: 'syz.3.812': attribute type 1 has an invalid length. [ 162.959512][ T8925] netlink: 'syz.3.812': attribute type 1 has an invalid length. [ 163.027528][ T8929] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.036566][ T8929] bond4: (slave bond5): making interface the new active one [ 163.045858][ T8929] bond4: (slave bond5): Enslaving as an active interface with an up link [ 163.048568][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 163.170315][ T8948] netlink: 68 bytes leftover after parsing attributes in process `syz.0.820'. [ 163.209661][ T8936] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.218814][ T8949] netlink: 'syz.4.819': attribute type 10 has an invalid length. [ 163.240434][ T8925] bond3: (slave gretap1): making interface the new active one [ 163.250172][ T8925] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 163.272538][ T8925] syz.3.812 (8925) used greatest stack depth: 18360 bytes left [ 163.327613][ T8949] batman_adv: batadv0: Adding interface: team0 [ 163.363961][ T8949] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.415560][ T8949] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 163.525887][ T8960] team0: Cannot enslave team device to itself [ 163.616290][ T8965] tipc: Enabled bearer , priority 0 [ 163.626282][ T8965] tipc: Resetting bearer [ 163.665469][ T8964] tipc: Disabling bearer [ 163.859380][ T8975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.827'. [ 163.871184][ T8982] veth1_to_bond: entered allmulticast mode [ 163.880323][ T8982] veth1_to_bond: left allmulticast mode [ 164.072254][ T8991] IPv6: addrconf: prefix option has invalid lifetime [ 164.100546][ T8996] netlink: 'syz.3.834': attribute type 10 has an invalid length. [ 164.112070][ T8996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.834'. [ 164.147186][ T8996] team0: Port device geneve0 added [ 164.798972][ T9026] team0: Device wireguard0 is of different type [ 165.008992][ T9032] bridge_slave_0: invalid flags given to default FDB implementation [ 165.116503][ T9038] wg1: entered promiscuous mode [ 165.121565][ T9038] wg1: entered allmulticast mode [ 165.241761][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 165.292067][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.845'. [ 166.220397][ T9075] gtp0: entered promiscuous mode [ 166.236278][ T9075] gtp0: entered allmulticast mode [ 166.493463][ T9087] openvswitch: netlink: IP tunnel TTL not specified. [ 166.719176][ T9103] tipc: Enabled bearer , priority 0 [ 166.749390][ T9103] syzkaller0: entered promiscuous mode [ 166.770648][ T9103] syzkaller0: entered allmulticast mode [ 166.836690][ T9104] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 166.878634][ T9103] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 167.008425][ T9121] __nla_validate_parse: 5 callbacks suppressed [ 167.008445][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 167.048404][ T9100] tipc: Resetting bearer [ 167.139356][ T9100] tipc: Disabling bearer [ 167.206234][ T9131] net veth1_virt_wifi .: renamed from virt_wifi0 [ 167.385569][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 167.419253][ T9140] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 167.430196][ T9140] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.446829][ T9136] netlink: 132 bytes leftover after parsing attributes in process `syz.4.880'. [ 167.486964][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 167.590894][ T9145] netlink: 44 bytes leftover after parsing attributes in process `syz.4.883'. [ 167.812796][ T9152] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 167.873263][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 167.901389][ T9155] netlink: 576 bytes leftover after parsing attributes in process `syz.3.888'. [ 168.276249][ T9138] infiniband syz2: set down [ 168.317402][ T9138] infiniband syz2: added ipvlan0 [ 168.348154][ T9138] syz2: rxe_create_cq: returned err = -12 [ 168.387586][ T9138] infiniband syz2: Couldn't create ib_mad CQ [ 168.422073][ T9138] infiniband syz2: Couldn't open port 1 [ 168.431186][ T9182] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 168.443241][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.897'. [ 168.459879][ T9184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.897'. [ 168.576348][ T9138] RDS/IB: syz2: added [ 168.586355][ T9138] smc: adding ib device syz2 with port count 1 [ 168.618336][ T9138] smc: ib device syz2 port 1 has pnetid [ 168.668868][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.900'. [ 168.820766][ T9191] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.963269][ T9197] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.000951][ T9197] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 169.050388][ T9197] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 169.931252][ T9247] netlink: 'syz.3.916': attribute type 16 has an invalid length. [ 170.001496][ T9247] netlink: 'syz.3.916': attribute type 17 has an invalid length. [ 170.044486][ T9246] tipc: Resetting bearer [ 170.050203][ T9246] tipc: Resetting bearer [ 170.106238][ T71] tipc: Resetting bearer [ 170.204036][ T9247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.464773][ T9268] 8021q: VLANs not supported on sit0 [ 172.042793][ T9330] bridge0: entered allmulticast mode [ 172.080318][ T9330] __nla_validate_parse: 11 callbacks suppressed [ 172.080337][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 172.109287][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.937'. [ 172.132719][ T9330] bridge_slave_1: left allmulticast mode [ 172.138453][ T9330] bridge_slave_1: left promiscuous mode [ 172.197969][ T9339] delete_channel: no stack [ 172.207618][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.301996][ T9347] IPVS: length: 8 != 1152 [ 172.333638][ T9330] bridge_slave_0: left allmulticast mode [ 172.339346][ T9330] bridge_slave_0: left promiscuous mode [ 172.373316][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.509431][ T9352] netlink: 40 bytes leftover after parsing attributes in process `syz.4.945'. [ 172.560705][ T9330] bridge0 (unregistering): left allmulticast mode [ 172.848810][ T9369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.948'. [ 172.873273][ T9369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.948'. [ 173.018317][ T9349] team0 (unregistering): Port device team_slave_0 removed [ 173.026417][ T9374] netlink: 160 bytes leftover after parsing attributes in process `syz.4.949'. [ 173.048408][ T9349] team0 (unregistering): Port device team_slave_1 removed [ 173.074753][ T9349] team0 (unregistering): Port device geneve0 removed [ 173.457537][ T9389] ip6gretap0: mtu less than device minimum [ 173.485184][ T9389] ip6gretap0: mtu less than device minimum [ 173.515555][ T9389] ip6gretap0: mtu less than device minimum [ 173.523872][ T9389] ip6gretap0: mtu less than device minimum [ 173.528812][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 173.529913][ T9389] ip6gretap0: mtu less than device minimum [ 173.579648][ T9389] ip6gretap0: mtu less than device minimum [ 173.595298][ T9389] ip6gretap0: mtu less than device minimum [ 173.613029][ T9389] ip6gretap0: mtu less than device minimum [ 173.632607][ T9389] ip6gretap0: mtu less than device minimum [ 173.643847][ T9389] ip6gretap0: mtu less than device minimum [ 173.703237][ T9412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.961'. [ 173.736662][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 173.769659][ T9413] vxlan1: entered promiscuous mode [ 173.777116][ T9413] vxlan1: entered allmulticast mode [ 173.981031][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.964'. [ 174.607655][ T9454] tipc: Cannot configure node identity twice [ 175.373814][ T9483] Unsupported ieee802154 address type: 0 [ 176.640751][ T9549] macvlan0: entered promiscuous mode [ 176.660337][ T9549] macvlan0: entered allmulticast mode [ 177.100881][ T9582] __nla_validate_parse: 6 callbacks suppressed [ 177.100900][ T9582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1005'. [ 177.121707][ T9582] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1005'. [ 177.628656][ T9602] netlink: 696 bytes leftover after parsing attributes in process `syz.0.1014'. [ 177.699861][ T9612] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 177.752605][ T9611] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 177.769135][ T9612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1018'. [ 177.823393][ T9611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1018'. [ 178.048778][ T9612] team0: Port device geneve0 added [ 178.103249][ T9630] netlink: 'syz.0.1020': attribute type 1 has an invalid length. [ 178.232771][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1020'. [ 179.015867][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 179.048143][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 179.066213][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1036'. [ 179.269223][ T9697] netlink: 'syz.0.1038': attribute type 8 has an invalid length. [ 179.589534][ T9716] syz_tun: entered promiscuous mode [ 179.621190][ T9716] batadv_slave_0: entered promiscuous mode [ 179.787643][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 179.855334][ T9730] vlan2: entered allmulticast mode [ 179.872457][ T9730] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 179.965164][ T9741] geneve2: entered promiscuous mode [ 179.980407][ T9741] geneve2: entered allmulticast mode [ 180.086278][ T9743] tipc: Enabled bearer , priority 0 [ 180.206884][ T9743] syzkaller0: entered promiscuous mode [ 180.228430][ T9743] syzkaller0: entered allmulticast mode [ 180.278298][ T9742] tipc: Resetting bearer [ 181.577605][ T9742] tipc: Disabling bearer [ 181.759187][ T9784] netlink: 'syz.0.1060': attribute type 6 has an invalid length. [ 181.796220][ T9789] trusted_key: syz.2.1064 sent an empty control message without MSG_MORE. [ 181.975861][ T9798] : renamed from hsr0 (while UP) [ 182.101722][ T24] IPVS: starting estimator thread 0... [ 182.193630][ T9813] IPVS: using max 27 ests per chain, 64800 per kthread [ 182.476326][ T9835] __nla_validate_parse: 4 callbacks suppressed [ 182.476344][ T9835] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1075'. [ 182.520521][ T9843] netlink: 'syz.4.1076': attribute type 4 has an invalid length. [ 182.550317][ T49] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 182.560579][ T9843] netlink: 'syz.4.1076': attribute type 4 has an invalid length. [ 182.771005][ T9849] syzkaller1: entered promiscuous mode [ 182.785470][ T9849] syzkaller1: entered allmulticast mode [ 182.904518][ T9855] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.910684][ T9855] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 182.955015][ T9855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.964425][ T9855] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 183.003105][ T9855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.009168][ T9855] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 183.037985][ T9855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.052540][ T9855] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 183.101804][ T9855] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.107934][ T9855] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 183.408527][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'. [ 183.491059][ T9876] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 183.499289][ T9876] netlink: 'syz.1.1088': attribute type 3 has an invalid length. [ 183.510746][ T9876] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1088'. [ 183.552436][ T9876] NCSI netlink: No device for ifindex 0 [ 183.566258][ T9878] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 183.577970][ T9878] netlink: 'syz.1.1088': attribute type 3 has an invalid length. [ 183.596378][ T9878] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1088'. [ 183.608440][ T9878] NCSI netlink: No device for ifindex 0 [ 183.737128][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'. [ 183.969095][ T30] audit: type=1804 audit(1757371530.309:3): pid=9895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1092" name="/newroot/205/memory.events" dev="tmpfs" ino=1063 res=1 errno=0 [ 184.020584][ T30] audit: type=1800 audit(1757371530.349:4): pid=9895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1092" name="memory.events" dev="tmpfs" ino=1063 res=0 errno=0 [ 184.049444][ T9854] syz.3.1082: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 184.069359][ T9854] CPU: 1 UID: 0 PID: 9854 Comm: syz.3.1082 Not tainted syzkaller #0 PREEMPT(full) [ 184.069380][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.069396][ T9854] Call Trace: [ 184.069402][ T9854] [ 184.069409][ T9854] dump_stack_lvl+0x189/0x250 [ 184.069441][ T9854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.069460][ T9854] ? __pfx__printk+0x10/0x10 [ 184.069481][ T9854] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 184.069501][ T9854] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 184.069519][ T9854] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 184.069540][ T9854] warn_alloc+0x214/0x310 [ 184.069573][ T9854] ? __pfx_warn_alloc+0x10/0x10 [ 184.069628][ T9854] ? __get_vm_area_node+0x28f/0x300 [ 184.069656][ T9854] ? hash_netport4_resize+0x235/0x1b60 [ 184.069695][ T9854] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 184.069745][ T9854] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 184.069795][ T9854] ? rcu_is_watching+0x15/0xb0 [ 184.069815][ T9854] ? hash_netport4_resize+0x235/0x1b60 [ 184.069835][ T9854] ? hash_netport4_resize+0x235/0x1b60 [ 184.069854][ T9854] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 184.069883][ T9854] ? hash_netport4_resize+0x235/0x1b60 [ 184.069913][ T9854] hash_netport4_resize+0x235/0x1b60 [ 184.069935][ T9854] ? hash_netport4_uadt+0xc97/0xf30 [ 184.069962][ T9854] ? __pfx_hash_netport4_add+0x10/0x10 [ 184.069991][ T9854] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 184.070024][ T9854] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 184.070058][ T9854] call_ad+0x44e/0xb00 [ 184.070095][ T9854] ? __pfx_call_ad+0x10/0x10 [ 184.070135][ T9854] ? __nla_parse+0x40/0x60 [ 184.070169][ T9854] ip_set_ad+0x791/0x930 [ 184.070205][ T9854] ? __pfx_ip_set_ad+0x10/0x10 [ 184.070271][ T9854] nfnetlink_rcv_msg+0xb4a/0x1130 [ 184.070302][ T9854] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 184.070349][ T9854] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 184.070373][ T9854] ? kasan_save_free_info+0x46/0x50 [ 184.070447][ T9854] netlink_rcv_skb+0x205/0x470 [ 184.070479][ T9854] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 184.070508][ T9854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.070550][ T9854] ? bpf_lsm_capable+0x9/0x20 [ 184.070574][ T9854] ? security_capable+0x7e/0x2e0 [ 184.070605][ T9854] nfnetlink_rcv+0x26a/0x2520 [ 184.070636][ T9854] ? __dev_queue_xmit+0x1d79/0x3b50 [ 184.070671][ T9854] ? __dev_queue_xmit+0x27b/0x3b50 [ 184.070709][ T9854] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 184.070737][ T9854] ? __pfx___dev_queue_xmit+0x10/0x10 [ 184.070777][ T9854] ? ref_tracker_free+0x63a/0x7d0 [ 184.070806][ T9854] ? __asan_memcpy+0x40/0x70 [ 184.070828][ T9854] ? __pfx_ref_tracker_free+0x10/0x10 [ 184.070855][ T9854] ? __skb_clone+0x63/0x7a0 [ 184.070882][ T9854] ? __skb_clone+0x483/0x7a0 [ 184.070912][ T9854] ? skb_clone+0x246/0x3a0 [ 184.070939][ T9854] ? __netlink_deliver_tap+0x807/0x850 [ 184.070986][ T9854] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.071040][ T9854] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.071080][ T9854] netlink_unicast+0x82c/0x9e0 [ 184.071118][ T9854] ? __pfx_netlink_unicast+0x10/0x10 [ 184.071148][ T9854] ? netlink_sendmsg+0x642/0xb30 [ 184.071165][ T9854] ? skb_put+0x11b/0x210 [ 184.071189][ T9854] netlink_sendmsg+0x805/0xb30 [ 184.071218][ T9854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.071241][ T9854] ? aa_sock_msg_perm+0xf1/0x1d0 [ 184.071263][ T9854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.071284][ T9854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.071304][ T9854] __sock_sendmsg+0x21c/0x270 [ 184.071335][ T9854] ____sys_sendmsg+0x505/0x830 [ 184.071364][ T9854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.071397][ T9854] ? import_iovec+0x74/0xa0 [ 184.071425][ T9854] ___sys_sendmsg+0x21f/0x2a0 [ 184.071450][ T9854] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.071513][ T9854] ? __fget_files+0x2a/0x420 [ 184.071530][ T9854] ? __fget_files+0x3a0/0x420 [ 184.071559][ T9854] __x64_sys_sendmsg+0x19b/0x260 [ 184.071585][ T9854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.071619][ T9854] ? rcu_is_watching+0x15/0xb0 [ 184.071646][ T9854] ? do_syscall_64+0xbe/0x3b0 [ 184.071670][ T9854] do_syscall_64+0xfa/0x3b0 [ 184.071688][ T9854] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.071728][ T9854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.071747][ T9854] ? clear_bhb_loop+0x60/0xb0 [ 184.071790][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.071809][ T9854] RIP: 0033:0x7f798df8ebe9 [ 184.071840][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.071856][ T9854] RSP: 002b:00007f798edb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.071877][ T9854] RAX: ffffffffffffffda RBX: 00007f798e1c5fa0 RCX: 00007f798df8ebe9 [ 184.071892][ T9854] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000c [ 184.071904][ T9854] RBP: 00007f798e011e19 R08: 0000000000000000 R09: 0000000000000000 [ 184.071917][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.071947][ T9854] R13: 00007f798e1c6038 R14: 00007f798e1c5fa0 R15: 00007ffc7df2f0c8 [ 184.071986][ T9854] [ 184.072105][ T9854] Mem-Info: [ 184.146384][ T9902] net_ratelimit: 56 callbacks suppressed [ 184.146408][ T9902] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 184.173983][ T9854] active_anon:6625 inactive_anon:0 isolated_anon:0 [ 184.173983][ T9854] active_file:2563 inactive_file:39877 isolated_file:0 [ 184.173983][ T9854] unevictable:768 dirty:59 writeback:0 [ 184.173983][ T9854] slab_reclaimable:11274 slab_unreclaimable:102145 [ 184.173983][ T9854] mapped:31739 shmem:4227 pagetables:954 [ 184.173983][ T9854] sec_pagetables:0 bounce:0 [ 184.173983][ T9854] kernel_misc_reclaimable:0 [ 184.173983][ T9854] free:1320941 free_pcp:18429 free_cma:0 [ 184.369881][ T9907] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1096'. [ 184.372170][ T9854] Node 0 active_anon:26500kB inactive_anon:0kB active_file:10252kB inactive_file:159308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126956kB dirty:236kB writeback:0kB shmem:15372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12136kB pagetables:4000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.384652][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 184.386445][ T9854] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.509147][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 184.521495][ T9854] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.756818][ T9854] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 184.762697][ T9854] Node 0 DMA32 free:1382904kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26648kB inactive_anon:0kB active_file:10252kB inactive_file:157748kB unevictable:1536kB writepending:236kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:53792kB local_pcp:19792kB free_cma:0kB [ 184.795848][ T9854] lowmem_reserve[]: 0 0 1 1 1 [ 184.800655][ T9854] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 184.842906][ T9854] lowmem_reserve[]: 0 0 0 0 0 [ 184.847707][ T9854] Node 1 Normal free:3885476kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19736kB local_pcp:6880kB free_cma:0kB [ 184.892059][ T9854] lowmem_reserve[]: 0 0 0 0 0 [ 184.897004][ T9854] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.910916][ T9854] Node 0 DMA32: 1026*4kB (UM) 760*8kB (UME) 443*16kB (UME) 647*32kB (UME) 106*64kB (UME) 20*128kB (UM) 19*256kB (UME) 21*512kB (UM) 19*1024kB (UME) 11*2048kB (UME) 312*4096kB (UM) = 1382872kB [ 184.941245][ T9854] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 184.996425][ T9854] Node 1 Normal: 185*4kB (UE) 37*8kB (UME) 41*16kB (UME) 91*32kB (UME) 27*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885756kB [ 185.029874][ T9854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.041139][ T9854] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.054985][ T9854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.064931][ T9854] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.077366][ T9854] 47339 total pagecache pages [ 185.082082][ T9854] 0 pages in swap cache [ 185.086636][ T9854] Free swap = 124996kB [ 185.090925][ T9854] Total swap = 124996kB [ 185.098069][ T9854] 2097051 pages RAM [ 185.102102][ T9854] 0 pages HighMem/MovableOnly [ 185.108652][ T9854] 425667 pages reserved [ 185.117831][ T9854] 0 pages cma reserved [ 185.117925][ T9921] geneve0: entered allmulticast mode [ 185.159855][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 185.173027][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1101'. [ 185.331446][ T9933] netlink: 'syz.1.1103': attribute type 5 has an invalid length. [ 185.348152][ T9928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.590043][ T9943] netlink: 'syz.1.1107': attribute type 7 has an invalid length. [ 185.633062][ T9943] : entered promiscuous mode [ 185.694931][ T9957] gretap0: entered promiscuous mode [ 185.809836][ T9961] syzkaller1: entered promiscuous mode [ 185.815773][ T9961] syzkaller1: entered allmulticast mode [ 185.894422][ T9963] netlink: 'syz.4.1115': attribute type 4 has an invalid length. [ 186.378268][ T9984] atomic_op ffff8880308ce998 conn xmit_atomic 0000000000000000 [ 194.297103][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.737331][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.176305][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.692328][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 328.699949][ T31] Not tainted syzkaller #0 [ 328.705054][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.714070][ T31] task:kworker/1:0 state:D stack:22920 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 328.726418][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 328.736572][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 328.739893][ T31] [ 328.742911][ T31] __schedule+0x1798/0x4cc0 [ 328.748835][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.754788][ T31] ? __pfx___schedule+0x10/0x10 [ 328.759703][ T31] ? schedule+0x91/0x360 [ 328.764400][ T31] schedule+0x165/0x360 [ 328.768597][ T31] schedule_preempt_disabled+0x13/0x30 [ 328.783456][ T31] __mutex_lock+0x7e6/0x1350 [ 328.820297][ T31] ? __mutex_lock+0x5bb/0x1350 [ 328.830662][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 328.847308][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 328.852888][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 328.858658][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 328.864907][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 328.871002][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 328.876851][ T31] process_scheduled_works+0xae1/0x17b0 [ 328.882800][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.888832][ T31] worker_thread+0x8a0/0xda0 [ 328.893614][ T31] kthread+0x70e/0x8a0 [ 328.897734][ T31] ? __pfx_worker_thread+0x10/0x10 [ 328.902958][ T31] ? __pfx_kthread+0x10/0x10 [ 328.907597][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.913204][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.918450][ T31] ? __pfx_kthread+0x10/0x10 [ 328.923124][ T31] ret_from_fork+0x3fc/0x770 [ 328.927771][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 328.933119][ T31] ? __switch_to_asm+0x39/0x70 [ 328.937924][ T31] ? __switch_to_asm+0x33/0x70 [ 328.943292][ T31] ? __pfx_kthread+0x10/0x10 [ 328.947928][ T31] ret_from_fork_asm+0x1a/0x30 [ 328.952856][ T31] [ 328.956092][ T31] INFO: task syz.2.1072:9828 blocked for more than 143 seconds. [ 328.963871][ T31] Not tainted syzkaller #0 [ 328.968828][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.980594][ T31] task:syz.2.1072 state:D stack:25096 pid:9828 tgid:9828 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 328.992643][ T31] Call Trace: [ 328.995970][ T31] [ 328.998904][ T31] __schedule+0x1798/0x4cc0 [ 329.003824][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.008719][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.013697][ T31] ? __pfx___schedule+0x10/0x10 [ 329.018595][ T31] ? schedule+0x91/0x360 [ 329.022935][ T31] schedule+0x165/0x360 [ 329.027136][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.033014][ T31] __mutex_lock+0x7e6/0x1350 [ 329.037659][ T31] ? __mutex_lock+0x5bb/0x1350 [ 329.042485][ T31] ? rfkill_unregister+0xc8/0x220 [ 329.047550][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.052931][ T31] ? __pfx_device_del+0x10/0x10 [ 329.057831][ T31] rfkill_unregister+0xc8/0x220 [ 329.063104][ T31] nfc_unregister_device+0x96/0x2a0 [ 329.068345][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 329.074171][ T31] virtual_ncidev_close+0x56/0x90 [ 329.079239][ T31] __fput+0x449/0xa70 [ 329.083342][ T31] task_work_run+0x1d1/0x260 [ 329.087965][ T31] ? __pfx_task_work_run+0x10/0x10 [ 329.093591][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 329.099093][ T31] exit_to_user_mode_loop+0xec/0x110 [ 329.104467][ T31] do_syscall_64+0x2bd/0x3b0 [ 329.109084][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.115228][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 329.120884][ T31] ? clear_bhb_loop+0x60/0xb0 [ 329.125966][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.131895][ T31] RIP: 0033:0x7f955ff8ebe9 [ 329.136427][ T31] RSP: 002b:00007ffe1e7a9a18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 329.145296][ T31] RAX: 0000000000000000 RBX: 00007f95601c7da0 RCX: 00007f955ff8ebe9 [ 329.153660][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 329.161658][ T31] RBP: 00007f95601c7da0 R08: 00000000000001fc R09: 0000001b1e7a9d0f [ 329.169949][ T31] R10: 00007f95601c7cb0 R11: 0000000000000246 R12: 000000000002cb9c [ 329.178122][ T31] R13: 00007f95601c5fa0 R14: ffffffffffffffff R15: 00007ffe1e7a9b30 [ 329.186504][ T31] [ 329.189555][ T31] INFO: task syz.0.1081:9855 blocked for more than 143 seconds. [ 329.197272][ T31] Not tainted syzkaller #0 [ 329.202265][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.210952][ T31] task:syz.0.1081 state:D stack:23576 pid:9855 tgid:9853 ppid:5874 task_flags:0x400040 flags:0x00004006 [ 329.223307][ T31] Call Trace: [ 329.226612][ T31] [ 329.229573][ T31] __schedule+0x1798/0x4cc0 [ 329.234220][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.239114][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.244046][ T31] ? __pfx___schedule+0x10/0x10 [ 329.248940][ T31] ? schedule+0x91/0x360 [ 329.253664][ T31] schedule+0x165/0x360 [ 329.257903][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.263483][ T31] __mutex_lock+0x7e6/0x1350 [ 329.268107][ T31] ? __mutex_lock+0x5bb/0x1350 [ 329.273162][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 329.278495][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.283897][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.289130][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 329.295102][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 329.301469][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 329.307274][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 329.312770][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 329.318518][ T31] rfkill_set_block+0x1cf/0x440 [ 329.323456][ T31] rfkill_fop_write+0x44b/0x570 [ 329.328333][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 329.333932][ T31] ? security_kernfs_init_security+0x290/0x290 [ 329.340120][ T31] ? rw_verify_area+0x255/0x4d0 [ 329.345384][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.350278][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 329.355747][ T31] vfs_write+0x27b/0xb30 [ 329.360042][ T31] ? __pfx_vfs_write+0x10/0x10 [ 329.364920][ T31] ? __fget_files+0x2a/0x420 [ 329.369541][ T31] ? __fget_files+0x2a/0x420 [ 329.374533][ T31] ? __fget_files+0x3a0/0x420 [ 329.379246][ T31] ? __fget_files+0x2a/0x420 [ 329.384149][ T31] ksys_write+0x145/0x250 [ 329.388509][ T31] ? __pfx_ksys_write+0x10/0x10 [ 329.393852][ T31] ? rcu_is_watching+0x15/0xb0 [ 329.398686][ T31] ? do_syscall_64+0xbe/0x3b0 [ 329.403747][ T31] do_syscall_64+0xfa/0x3b0 [ 329.408277][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.413710][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.419806][ T31] ? clear_bhb_loop+0x60/0xb0 [ 329.424613][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.430528][ T31] RIP: 0033:0x7f789ab8ebe9 [ 329.435279][ T31] RSP: 002b:00007f789b989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.443784][ T31] RAX: ffffffffffffffda RBX: 00007f789adc5fa0 RCX: 00007f789ab8ebe9 [ 329.451775][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 329.459799][ T31] RBP: 00007f789ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 329.468111][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.476180][ T31] R13: 00007f789adc6038 R14: 00007f789adc5fa0 R15: 00007ffe96121958 [ 329.484295][ T31] [ 329.487389][ T31] [ 329.487389][ T31] Showing all locks held in the system: [ 329.495774][ T31] 2 locks held by kworker/u8:0/12: [ 329.500916][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 329.511238][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 329.520279][ T31] 3 locks held by kworker/1:0/24: [ 329.525570][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 329.536650][ T31] #1: ffffc900001e7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 329.550308][ T31] #2: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 329.562753][ T31] 1 lock held by khungtaskd/31: [ 329.567608][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 329.577928][ T31] 2 locks held by getty/5633: [ 329.583755][ T31] #0: ffff88814d8470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 329.593821][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 329.604013][ T31] 2 locks held by syz.2.1072/9828: [ 329.609145][ T31] #0: ffff8880784c1100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 329.619108][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 329.629723][ T31] 2 locks held by syz.0.1081/9855: [ 329.634926][ T31] #0: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 329.645108][ T31] #1: ffff8880784c1100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 329.655126][ T31] 3 locks held by syz.4.1118/9973: [ 329.660242][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.668759][ T31] #1: ffff888054d2e100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 329.678427][ T31] #2: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 329.688714][ T31] 3 locks held by syz.3.1119/9981: [ 329.693901][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 329.702125][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 329.711223][ T31] #2: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 329.721544][ T31] 2 locks held by syz.1.1123/9990: [ 329.726732][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 329.735276][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 329.744670][ T31] 2 locks held by syz.1.1123/9991: [ 329.749809][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 329.758127][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 329.767185][ T31] 1 lock held by syz-executor/9994: [ 329.772753][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.781257][ T31] 1 lock held by syz-executor/9996: [ 329.786530][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.795081][ T31] 1 lock held by syz-executor/10000: [ 329.800361][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.809176][ T31] 1 lock held by syz-executor/10001: [ 329.814618][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.823203][ T31] 1 lock held by syz-executor/10002: [ 329.828511][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.837261][ T31] 1 lock held by syz-executor/10004: [ 329.842787][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.851313][ T31] 1 lock held by syz-executor/10006: [ 329.856685][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.865536][ T31] 1 lock held by syz-executor/10010: [ 329.870849][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.879498][ T31] 1 lock held by syz-executor/10011: [ 329.884842][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.893757][ T31] 1 lock held by syz-executor/10012: [ 329.899055][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.907594][ T31] 1 lock held by syz-executor/10014: [ 329.912949][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.921469][ T31] 1 lock held by syz-executor/10016: [ 329.927132][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.935682][ T31] 1 lock held by syz-executor/10020: [ 329.940978][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.949518][ T31] 1 lock held by syz-executor/10021: [ 329.955221][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.963775][ T31] 1 lock held by syz-executor/10022: [ 329.969085][ T31] #0: ffffffff8e9c1b88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 329.977654][ T31] [ 329.979994][ T31] ============================================= [ 329.979994][ T31] [ 329.988849][ T31] NMI backtrace for cpu 1 [ 329.988867][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 329.988888][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.988900][ T31] Call Trace: [ 329.988908][ T31] [ 329.988917][ T31] dump_stack_lvl+0x189/0x250 [ 329.988950][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.988974][ T31] ? __pfx__printk+0x10/0x10 [ 329.989016][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 329.989047][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 329.989075][ T31] ? __pfx__printk+0x10/0x10 [ 329.989108][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 329.989143][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 329.989178][ T31] watchdog+0xf93/0xfe0 [ 329.989213][ T31] ? watchdog+0x1de/0xfe0 [ 329.989247][ T31] kthread+0x70e/0x8a0 [ 329.989276][ T31] ? __pfx_watchdog+0x10/0x10 [ 329.989303][ T31] ? __pfx_kthread+0x10/0x10 [ 329.989330][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.989357][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.989384][ T31] ? __pfx_kthread+0x10/0x10 [ 329.989409][ T31] ret_from_fork+0x3fc/0x770 [ 329.989434][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 329.989459][ T31] ? __switch_to_asm+0x39/0x70 [ 329.989484][ T31] ? __switch_to_asm+0x33/0x70 [ 329.989509][ T31] ? __pfx_kthread+0x10/0x10 [ 329.989536][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.989580][ T31] [ 329.989588][ T31] Sending NMI from CPU 1 to CPUs 0: [ 330.136147][ C0] NMI backtrace for cpu 0 [ 330.136165][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 330.136183][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.136193][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 330.136242][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 37 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 330.136256][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 330.136272][ C0] RAX: db87da4c3dc10900 RBX: ffffffff819683f8 RCX: db87da4c3dc10900 [ 330.136285][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b8bbd RDI: ffffffff8be33880 [ 330.136296][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 330.136309][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa39730 [ 330.136321][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 330.136332][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 330.136345][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.136356][ C0] CR2: 000055b6e2dce000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 330.136372][ C0] Call Trace: [ 330.136378][ C0] [ 330.136384][ C0] default_idle+0x13/0x20 [ 330.136401][ C0] default_idle_call+0x74/0xb0 [ 330.136419][ C0] do_idle+0x1e8/0x510 [ 330.136439][ C0] ? __pfx_do_idle+0x10/0x10 [ 330.136463][ C0] cpu_startup_entry+0x44/0x60 [ 330.136479][ C0] rest_init+0x2de/0x300 [ 330.136499][ C0] start_kernel+0x3a9/0x410 [ 330.136524][ C0] x86_64_start_reservations+0x24/0x30 [ 330.136543][ C0] x86_64_start_kernel+0x143/0x1c0 [ 330.136560][ C0] common_startup_64+0x13e/0x147 [ 330.136592][ C0] [ 330.137180][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 330.318074][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 330.327194][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.337256][ T31] Call Trace: [ 330.340553][ T31] [ 330.343518][ T31] dump_stack_lvl+0x99/0x250 [ 330.348124][ T31] ? __asan_memcpy+0x40/0x70 [ 330.352723][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.357942][ T31] ? __pfx__printk+0x10/0x10 [ 330.362557][ T31] vpanic+0x281/0x750 [ 330.366575][ T31] ? __pfx_vpanic+0x10/0x10 [ 330.371084][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 330.376637][ T31] ? preempt_schedule+0xae/0xc0 [ 330.381496][ T31] ? preempt_schedule_common+0x83/0xd0 [ 330.386972][ T31] panic+0xb9/0xc0 [ 330.390701][ T31] ? __pfx_panic+0x10/0x10 [ 330.395134][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 330.400536][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 330.406709][ T31] watchdog+0xfd2/0xfe0 [ 330.410977][ T31] ? watchdog+0x1de/0xfe0 [ 330.415329][ T31] kthread+0x70e/0x8a0 [ 330.419438][ T31] ? __pfx_watchdog+0x10/0x10 [ 330.424128][ T31] ? __pfx_kthread+0x10/0x10 [ 330.428730][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.433942][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.439150][ T31] ? __pfx_kthread+0x10/0x10 [ 330.443756][ T31] ret_from_fork+0x3fc/0x770 [ 330.448351][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 330.453493][ T31] ? __switch_to_asm+0x39/0x70 [ 330.458351][ T31] ? __switch_to_asm+0x33/0x70 [ 330.463127][ T31] ? __pfx_kthread+0x10/0x10 [ 330.467747][ T31] ret_from_fork_asm+0x1a/0x30 [ 330.472537][ T31] [ 330.475927][ T31] Kernel Offset: disabled [ 330.480257][ T31] Rebooting in 86400 seconds..