last executing test programs: 8m33.5671261s ago: executing program 2 (id=510): r0 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) listen(r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000403a00fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000006009000000001100fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000050000000000"], 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14480, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xcd3e}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x6, 0x0, 0x2000000) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r6, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80000002}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x2}]}, 0x44}}, 0x0) 8m33.369653363s ago: executing program 2 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x14) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000640)=""/237, 0xed}], 0x6, &(0x7f00000008c0)=""/198, 0xc6}, 0x40000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) 8m28.075604081s ago: executing program 3 (id=562): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd1383000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r2, 0x0, 0x63, 0x90, &(0x7f0000000100)="98f4ffa47fdc3f620000f6403480759e8315b9c1b34baff04981f135bc35f8b07e3574cebd9491d8a5fdb7908425e4c6b34b4eb5b8dc55cd6b301661aff2d278add25550af26e8cc19b408136bb52b52eb6a3b632c3706ce94f83265020c4be0a18d11", &(0x7f0000000180)=""/144, 0x2, 0x0, 0xaf, 0x1000, &(0x7f00000002c0)="5926fa6fbee360ce9e71452b81da619ff9fcb93369707920cc0e2f114e5d15f23a7d50b317678567f676326fbf90c6e3cc9f22c3c04b9500051b22b7d52fbde5279f15c0568705eaebbce6ed4cf2251a21ca716e5097f1650c1b4fdccb8ce8529e8a75159caf65ff0416a0a72b29e49ec0f984ae903037a97bfb858c7f85c4cc4b8eae84ad843b735e1abf077bc4f32e83ec7dc67147b122f03b0128f1dd41f662b908fbc217bcf8c1d1282c127ff5", &(0x7f0000000380)="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", 0x1}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) 8m27.732451793s ago: executing program 4 (id=566): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x1, 0xa, 0x40, 0x20, 0x0, 0x0, 0xee01}, {}, {0x4, 0x200, 0x0, 0x1}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x1, 0xa, 0x40, 0x20, 0x0, 0x0, 0xee01}, {}, {0x4, 0x200, 0x0, 0x1}}}, 0xb8}}, 0x0) (async) 8m27.652398201s ago: executing program 3 (id=567): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000000000000100c"], 0x0, 0x56}, 0x20) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xfffffffb}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)={0x7c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x6, 0x0, 0x3fffd, 0x0, 0x1, 0x2}}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7801000017000100e25151892937c9a94e60b324b4ffffff00000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000004f0327fb4c6be74ae26e5d9a97d1398e9d7065b3f614067db43957b7974443cf7604711110451eac314a0a0e844aab50f5a8532b1ef6061a32f2fb35e2556cf0784d389790fa3abb3115adab2a33b2aa13759661670dcadc62db1a980566389314fef453801aabd3f0b181d348dda8576db84408d1bfb70f658791", @ANYRES32=0x0, @ANYBLOB="be424d6d83213c578cdcfeb88dcfe5869006eb377c54721aeefef9ddfb3809a89030d2ef8054e244f6"], 0x178}}, 0x0) 8m27.458745871s ago: executing program 4 (id=569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="6110bd000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) 8m27.092587271s ago: executing program 3 (id=571): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c845}, 0x805) 8m27.087357826s ago: executing program 4 (id=572): socket$kcm(0x2, 0x0, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffffc}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1}, 0x8) socket(0x11, 0x800000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xffffff1f}}]}}, &(0x7f0000000f40)=""/4096, 0x32, 0x1000, 0x1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x3000039) write(r2, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) 8m26.874156609s ago: executing program 2 (id=573): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x400000, 0x200, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) 8m26.744475495s ago: executing program 4 (id=574): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0x39, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x40}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000180)=@ethernet={0x0, @multicast}, &(0x7f0000000000)=0x80) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newae={0x48, 0x1e, 0x100, 0x70bd2c, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x2, 0x33}, @in6=@mcast1, 0x4, 0x3505}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000014000500fc010c0000000000000000000000000008000200050000001c0006"], 0x4c}}, 0x0) 8m26.722521776s ago: executing program 2 (id=575): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x4838) 8m26.560238084s ago: executing program 3 (id=577): syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0180c20000008100090086dd61fbddf000083aff00000000000000000000ffffac1e0001ff020000000000000000000000000001810090780002000449335c69f2945f42b4bdc51d778e907bdbc1fbfdc633101a49d07899d305ab6a5db839f3a741de9bd147bd2d2fc937dd1dd2"], 0x0) socket$kcm(0x21, 0x2, 0xa) (async) epoll_create1(0x0) (async) socket(0x1, 0x80802, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7, 0x8, 0xe48, 0x100, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x64, 0x0, 0x8, 0x0, 0x0, @empty, @multicast1}}}}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x27, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100"], 0x38}}, 0x0) (async) epoll_create1(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x2, r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet(r8, &(0x7f00000187c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="afbf7a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)='A', 0x1}, {&(0x7f0000010a40)="97", 0x1}, {&(0x7f0000011a40)="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", 0x5c1}, {&(0x7f0000000580)='p', 0x1}, {&(0x7f0000000800)="d3", 0x1}], 0x5}}, {{0x0, 0x19, &(0x7f0000012ac0)=[{&(0x7f00000008c0)='R', 0x1}], 0x1}}], 0x3, 0x4008440) (async) poll(&(0x7f00000000c0)=[{r8, 0x20}], 0x1, 0x3) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', r7, 0x9b5e36ab6133bf70, 0x2e, 0x2, 0xd3f, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x66, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0xbf, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x3bad}, {@remote, 0x81}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x6}, {@rand_addr=0x64010102, 0x1}]}, @timestamp_prespec={0x44, 0x14, 0xb8, 0x3, 0x7, [{@empty, 0x401}, {@multicast1, 0x81}]}, @ssrr={0x89, 0xf, 0x8c, [@private=0xa010101, @remote, @remote]}, @generic={0x82, 0x6, "97386429"}]}}}}}) (async, rerun: 64) epoll_create1(0x0) (rerun: 64) 8m26.375985967s ago: executing program 4 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000054006501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESOCT], 0x38}}, 0x0) unshare(0x8000600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r2, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xc0, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 8m26.324301618s ago: executing program 2 (id=580): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x40, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x40}}, 0x4c094) socket$kcm(0x10, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001230010a00000000000000000a000000"], 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_stats={0x1d, 0x6, [0xffffffffffffffff, 0x8, 0x80, 0x8000000000000001, 0x7, 0x7]}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000a80)={'veth1_vlan\x00', &(0x7f0000000440)=@ethtool_flash={0x26, 0x8000000, './file0\x00'}}) readv(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e0000000400000004000000030000004c4c0000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r7, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 8m26.322902872s ago: executing program 3 (id=581): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') write$rfkill(r0, &(0x7f0000000080)={0x4, 0x7, 0x0, 0x1}, 0x8) (async) write$rfkill(r0, &(0x7f0000000080)={0x4, 0x7, 0x0, 0x1}, 0x8) 8m26.03004738s ago: executing program 3 (id=582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8=0xffffffffffffffff], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe7d, 0x0, 0x0, 0x300}, 0x2001) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x34}, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) (async) close(r0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="49e6543496e5a65d1c1d9d1b149cab550f29f83cda52d33df9afdf30dc52a18690800802a13c5db06ae0a5a922fa2ef25e24de9397862256b2de7d25deb5590993f553e89f1fa0c4320b32", @ANYRES16=r2, @ANYRESHEX=r8], 0xd8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) unshare(0x20020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') (async) syz_emit_ethernet(0x4f, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x10, 0x39, 0x68, 0x0, 0x8, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x6, 0x1, "233e1c", 0x40, "8d63cc"}, "741c9adc626444b5f0aa6c8cf0467d22c929c5bcee"}}}}}, 0x0) (async) r9 = socket(0x1d, 0x2, 0x6) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000480)={0x0, 0x5e, "d3afafe16ad2fe779a78b0e52d4c6a9dc3cfe642da8dad0825f2f9b00557ac20555fa3d6027f9963f5fbbd2e88426b98de1dac726f0e3c1f125c4f83e6b9c72711b2a11ca0183bd355f44a008f76fdf51587f923b43306cabd842b7db156"}, &(0x7f0000000640)=0x66) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffff48f, 0x57}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) setsockopt(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100), 0x4) socket(0x2c, 0x1, 0x6) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x40}}, 0x0) 8m25.627293749s ago: executing program 32 (id=582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8=0xffffffffffffffff], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffe7d, 0x0, 0x0, 0x300}, 0x2001) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x34}, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) (async) close(r0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="49e6543496e5a65d1c1d9d1b149cab550f29f83cda52d33df9afdf30dc52a18690800802a13c5db06ae0a5a922fa2ef25e24de9397862256b2de7d25deb5590993f553e89f1fa0c4320b32", @ANYRES16=r2, @ANYRESHEX=r8], 0xd8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) unshare(0x20020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') (async) syz_emit_ethernet(0x4f, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x10, 0x39, 0x68, 0x0, 0x8, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x6, 0x1, "233e1c", 0x40, "8d63cc"}, "741c9adc626444b5f0aa6c8cf0467d22c929c5bcee"}}}}}, 0x0) (async) r9 = socket(0x1d, 0x2, 0x6) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000480)={0x0, 0x5e, "d3afafe16ad2fe779a78b0e52d4c6a9dc3cfe642da8dad0825f2f9b00557ac20555fa3d6027f9963f5fbbd2e88426b98de1dac726f0e3c1f125c4f83e6b9c72711b2a11ca0183bd355f44a008f76fdf51587f923b43306cabd842b7db156"}, &(0x7f0000000640)=0x66) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffff48f, 0x57}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) (async) setsockopt(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100), 0x4) socket(0x2c, 0x1, 0x6) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x40}}, 0x0) 8m25.611868863s ago: executing program 2 (id=584): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180), 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c5}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)) 8m25.482651309s ago: executing program 33 (id=584): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180), 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c5}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)) 8m25.436346102s ago: executing program 4 (id=585): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206030000000000000400000000000005000100070000000900020073797a32000000000c0007800500150000000000050005000200000005000400000000000c000300686173683a69700036c3a7b35696a575b52d8c5cca6c87529cf35cee8a9373f6d72449b7cc2d9a4decbe93bf574ff8291461f993137523b1ff516987ce2531757af94f5a9dbde858ca874ba1de080fd369d1dc0c20dd6d8523cbbf95606ed3c1bc514833159e0324495b2f26a8a5cbf2d9"], 0x50}}, 0x804) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="19220000040902001c0012800b007c0000000000000000000c0002800500240001000000"], 0x3c}}, 0x0) pread64(r3, &(0x7f0000000b40)=""/4087, 0xff7, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000007000000000000070093a631ffbae104ce821cff55fd000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d61746368000000600002800800024000007fff007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37d2cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a32000000030000000011002000000000003f5c2d3943c61262d800"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8884}, 0xc090) socket$rds(0x15, 0x5, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f0000000140)={0x1, [0x0]}) 8m25.38419242s ago: executing program 34 (id=585): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206030000000000000400000000000005000100070000000900020073797a32000000000c0007800500150000000000050005000200000005000400000000000c000300686173683a69700036c3a7b35696a575b52d8c5cca6c87529cf35cee8a9373f6d72449b7cc2d9a4decbe93bf574ff8291461f993137523b1ff516987ce2531757af94f5a9dbde858ca874ba1de080fd369d1dc0c20dd6d8523cbbf95606ed3c1bc514833159e0324495b2f26a8a5cbf2d9"], 0x50}}, 0x804) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="19220000040902001c0012800b007c0000000000000000000c0002800500240001000000"], 0x3c}}, 0x0) pread64(r3, &(0x7f0000000b40)=""/4087, 0xff7, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000007000000000000070093a631ffbae104ce821cff55fd000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d61746368000000600002800800024000007fff007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37d2cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a32000000030000000011002000000000003f5c2d3943c61262d800"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8884}, 0xc090) socket$rds(0x15, 0x5, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f0000000140)={0x1, [0x0]}) 19.745982839s ago: executing program 0 (id=4183): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f00000006c0)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000002b000701feffffff00000000037c00000c00018008000600ffffffff100002800c00010081b4a32f9d5c778d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000030c0)=ANY=[@ANYBLOB="fe0f920ae6bf6a83d900000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10e8}, 0x1, 0x0, 0x0, 0x4}, 0x1) close(0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x2, 0x922000000001, 0x106) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000002c0)=0x4) sendmsg$inet(r10, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x2404c0c5) setsockopt$sock_attach_bpf(r10, 0x1, 0x24, &(0x7f0000000700), 0x4) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r9, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x6}, 0x80000000}], 0x4, 0x4022, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000102400128009000100626f6e640000000614000280050001000600000008000200", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) 19.37081227s ago: executing program 0 (id=4187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000e3ff0000000000004000000000000200"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104f2ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c0002800500170000000000080004000002"], 0x44}}, 0x0) 19.130443658s ago: executing program 0 (id=4190): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000041}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r3, @ANYRESDEC=r5, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000041}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r3, @ANYRESDEC=r5, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async) 18.844566515s ago: executing program 0 (id=4194): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1a00000000000000000000000000000000000000c24363398dda86b8ac713a2592fcddb82c572de265cacc5036b5ff36aad18659dd4376ab8ad2b1a2fead24460112a9879f36f095e2a035455798afa68da1faa50a8d6c70b019699bfd4345bc912c33b85efbf6403879b3381305f1c78a77e0030d74fd2b087c3570e1399b621056db958067448734ce54c89e496104cc8b6bfc1287018afca2e68e83b3cadf7c847637412acf0f0e0e5cc774c5621405282f3b5be38da35541b0c329cc050d5413ce0036f4a8d7d449cd35fe5bf1d25442b6fb0164fdf055e7d4c8998f665bb1244e52e488182a78", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000050000001500"/28], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/101, 0x3c, 0x65, 0x1, 0x2}, 0x28) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5, @remote, 0x441, 0x2}, 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500180600fe8000e6ff00000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) getsockopt(r4, 0x28, 0x6, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) 17.874915941s ago: executing program 0 (id=4208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20004040}, 0x4880) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x24000000) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="00012cbd7000fedbdf25120000000c009900100000000e0000000600b500d702000005001301020000000a00060008021100000000000500130100000000040013000a00060008021100000100000500e400010000001200bd000900010003000600080006001000000006001200050000000c00810005000200080000006b192d1f8cd5fe9776eb403ffea00698d02adce9c071a85132d62beb115dbe54"], 0x84}, 0x1, 0x0, 0x0, 0x400ac}, 0x4040894) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000340), &(0x7f0000000440)=0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', r10, 0x29, 0x10, 0x6e, 0x6, 0x10, @private1, @mcast2, 0x760, 0x710, 0x5, 0x2}}) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r8], 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x30004854) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYRES8=r5], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 17.695309233s ago: executing program 5 (id=4211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0xcb, 0x0, &(0x7f0000000a80)=""/203, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r0}, 0x38) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 17.480654544s ago: executing program 1 (id=4216): r0 = socket$unix(0x1, 0x2, 0x0) listen(r0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 17.385118944s ago: executing program 1 (id=4217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x80) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 17.246734607s ago: executing program 5 (id=4220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffdba, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x24000050) 17.193219391s ago: executing program 1 (id=4221): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x5) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1a}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x8000080, {0x0, 0x0, 0x0, 0x0, 0x20, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x300, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x80, 0x0, 0xfe, 0x5, 0xfd, 0x0, 0x300}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x44055) 17.124506254s ago: executing program 6 (id=4222): r0 = socket(0x2c, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x33, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000340)={'ipvs\x00'}, &(0x7f0000000380)=0x1e) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x9c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6e, 0x4, "2064ea33a7f92ecd9d494047bcd424329790ba113eb6b81f45261c1ba93d5cab10bd199c8b385e0071a6c4dfa78b3fd176c7630e09a99277fa1c8645ab4f6b5d5bfa7eb8245c1ff967a9ac00f3b6ebe2040c548aff326fed22068e408a2df5a1f127bf3fdae89c17eb4c"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008014}, 0x2404c081) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) close(0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="7d5b284ca6a5124fc66c31ae4ae3bae5df9728b8347aae9a13d140229902dac7169de7ac317ee645"], 0x48}}, 0x0) 17.073856161s ago: executing program 5 (id=4223): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) socket$netlink(0x10, 0x3, 0xf58ce4affd4e88c7) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 16.900739696s ago: executing program 6 (id=4225): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1e) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) 16.843010246s ago: executing program 1 (id=4226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r3}, 0x20) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000380), 0x0}, 0x20) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, &(0x7f0000000340)) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000680)=""/154, 0x9a}], 0x2, &(0x7f0000000980)=""/183, 0xb7}, 0x20) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)={0x188, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3f8}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0x9}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3ff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40a0002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d4}, 0x20000800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r11, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) 16.772505186s ago: executing program 5 (id=4228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x8035}, @val={0x1, 0x3, 0x5, 0x7a, 0x6, 0x7f}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0xbc, 0x0, 'V7', "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"}}}}}}, 0x126) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x80, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x5, 0x1e, 0x0, 0x0, 0x35d}, {0x8, 0xb, 0x0, 0x0, 0x74}, {0x8, 0x20, 0x0, 0x0, 0xf41c}, {0xfffffffffffffd43, 0x1d}, {0x8, 0x5, 0x0, 0x0, 0x11afd9d5}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0x15, 0x0, 0x0, 0x50}, {0x8, 0x819, 0x0, 0x0, 0x2}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x80}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'statistic\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0xa, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x50) (async) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0xa, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000400"/16, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRES8=r2], 0x48}, 0x300, 0x0, 0x0, 0x40000000}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000400"/16, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRES8=r2], 0x48}, 0x300, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x300}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x300}, 0x0) 16.681706741s ago: executing program 6 (id=4229): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f00000000c0)) (async) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8931, &(0x7f0000000000)={'dummy0\x00'}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000180)={0xfffffffd}) (async) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000180)={0xfffffffd}) 16.540312332s ago: executing program 5 (id=4231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000192c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb0}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) 16.519210411s ago: executing program 6 (id=4233): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x1, [@default, @bcast, @bcast, @default, @bcast, @bcast, @bcast, @bcast]}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 16.353220468s ago: executing program 5 (id=4235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}], {0x14}}, 0x90}}, 0x4000000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, 0x0) 16.15850036s ago: executing program 0 (id=4236): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf250400000004000d"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c800}, 0x4) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.044624308s ago: executing program 7 (id=4237): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0x5, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008"], 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x2, 0xf48}]}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r4, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) writev(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r6, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) 16.044257491s ago: executing program 6 (id=4238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000004e00)=""/4109, 0x100d}], 0x3}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000700)=""/239, 0xef}, {&(0x7f0000001a00)=""/4106, 0x100a}, {&(0x7f0000000940)=""/4106, 0x100a}, {&(0x7f0000000000)=""/89, 0x59}], 0x5}, 0xb1}, {{0x0, 0x0, 0x0}, 0x4a}], 0x8, 0x0, 0x0) 15.981528743s ago: executing program 7 (id=4239): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@fwd={0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x5f]}}, 0x0, 0x3f, 0x0, 0x1}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x40000}, 0x10}, 0x94) 15.928154703s ago: executing program 6 (id=4240): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl(r1, 0x8b27, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) r5 = accept$alg(r2, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a00)={0x6c, r0, 0x400, 0x70bd2a, 0xcc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtfilter={0x24, 0x28, 0xe27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) sendmsg$alg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="4e367b21a7ba7cd2cceec436415ef57f616b2d16809ff1be79716468241e57812f1e3e3cf3af09e41e1c50ce7ff60c1e1cc410747052", 0x36}, {&(0x7f0000000340)="019c086ac9ba326301f240bcba7c4eb39761482f9bff5117441ad126f8f0a84c192729c92d5a8ca26120094561810cd4c1e1b4c6004976f8b40bbb09d1b165d8f00baa9965ec8631abec9e167d779ade73bbbbb298158beba52e36d73b78099536e1a1b4134429179aeff0d8e8858cdd7185fa489a7c2459dd34ef6c62d6620f2af0cb088ee4f2bfb96b9ee8d17c245c94451763a01d870d1a64e32e0e9f239cb097b0ea6568cabd20cd339bcef8d1a1144b651e66d4c8246f2f9da00f6792704b", 0xc1}, {&(0x7f0000000580)="81cfc83f192a5bdf3c96db2781d9954710fdd756800ec1449abbc8fdebcfb5f75011522ac6541c996ab60f20ddb5068eaa036b1b5dcd0f487358a8951e4776c24ddb4e842dc04211f386590bf38e8512a4a0fb09943ba462c7935e3f63db596ada189fc9005f3138289520b7ab78a499eeb6be083f51b308be9d467cdefa3b04cabbe405f142e8b4e9636d52d8cd5c2763aacf68dc4bf7ea2c8e4fce3e9e6f7391dc866abf1d0e2f01eadb2151df2e914e05a21a0c005b688a69847caf8c24ac93079a61fa90ae1a81feeda90cfbb610709ef1609887ae1da0a8cf9c004ee2b04485926956b2e86321ec", 0xea}, {&(0x7f00000000c0)="41afa2", 0x3}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000680)="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", 0xfd}], 0x6, &(0x7f0000000780)=[@iv={0x70, 0x117, 0x2, 0x57, "8a1dede0498098eb8a1f286be2c1eed62fba59e8204b0d4f5b0b8a2a821fa773fccb20fac5436bd009ee9391d8ec4b657c906301a031fb97de1b9f84bb5727d3f93844cbb7d697189e09e6327333e1970bfd193904e002"}, @iv={0x28, 0x117, 0x2, 0x13, "bf6e15948cdec1f8e9b5f6b99985a6b800562e"}, @iv={0x110, 0x117, 0x2, 0xf7, "1d93dea6d69eb228dc2605580cc3fe2183a9c73d7d8010cd95a674afbfaaa042b765a56ae5bddb3a1bc10b0919591d527eb101b0d2046d520fa9d4dbf7377e8c5e743b8e2fc9e9d365112f8025ff4258e46e63d26045e8379d013542f82bc9b99ddf85db711345954db5799edf50ee1e8547852b61b69f9c622265901b0f3b4816e173f05def25d185e2a08661d083544bc413544ffefad59652ab4225e7410a5b3747d7704095f9605699aa0d7eb17f6adab7b92c55bd21de18a8be4ea972843da9c7b95b869bb336fba29c77f1f00873116da2400080bc733c87259319d4c4462cfc32d5687d94706f16e4cea563ff8c32b9f57e847f"}], 0x1a8, 0x80}, 0x4) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="0218000003000000006198be3caec211a6204dad60493ecc36d98bd4fbb0b8431b2e26aec1be73d006e3849c23b9c63a929ccbc729ae89fc53573424e0b1138a74a9b18d5f1b462563cd5cebf3c174965e7ce228d9bc2de35091d3aa3125cdeaf1b4d4036ee103e3644c3a7e360ad2ab3e55fa468833052b73ee2b76f036ab0af87f9386ee84086049b1a800daa8763754e4c66e4cec753c47547814e27b2a75babc5f"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) 15.872554164s ago: executing program 7 (id=4241): syz_emit_ethernet(0x6e, &(0x7f0000000240)={@broadcast, @empty, @val={@val={0x88a8, 0x2, 0x0, 0x5}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0x30, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x3, 0x7, 0x0, @void}, "ba66523bc5dea26a1ca732c6535999ae3164ec5ef5b99e18d31261edd793d61d8464a0e8"}}}}}}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x9, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r0, 0x4) r2 = socket$caif_stream(0x25, 0x1, 0x0) connect$caif(r2, &(0x7f0000001780)=@dbg={0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) 15.84175008s ago: executing program 1 (id=4242): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) socket$alg(0x26, 0x5, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xffffffffffffffb6, &(0x7f0000000380)={0x0}}, 0xc040) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x401c5820, &(0x7f0000000080)) 15.83181768s ago: executing program 7 (id=4243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x10, 0x10001, {r2, r3/1000+60000}, {0x0, 0xea60}, {0x1, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x1c, 0x3, 0x0, 0x0, "49b8d1c42ad932bc1f8a38236670a08c15c05fda0ba6f1381620b5e684331f848264f4a2a6b52f839cd6afb5868589c062852a3987767336cdd9d8bdc9f39c80"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 15.616576598s ago: executing program 1 (id=4244): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r3, @ANYBLOB="63c556b50a464b94318e3957d0e71afba8f45853661e5c369c8ae592dc1eb3519e54e4b0416b76ef256be51bd963157dc829d71052c0bfd622dcf44245969c326fc87fc2f6475c614543426ed292"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r3, @ANYBLOB="63c556b50a464b94318e3957d0e71afba8f45853661e5c369c8ae592dc1eb3519e54e4b0416b76ef256be51bd963157dc829d71052c0bfd622dcf44245969c326fc87fc2f6475c614543426ed292"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) (async) 15.601345876s ago: executing program 7 (id=4245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 15.54636089s ago: executing program 7 (id=4246): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="08002600b40900000800270000000000050018013c0000000800a100000000e5a5af15"], 0x3c}}, 0x0) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 392.363786ms ago: executing program 35 (id=4236): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf250400000004000d"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c800}, 0x4) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 262.047275ms ago: executing program 36 (id=4244): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r3, @ANYBLOB="63c556b50a464b94318e3957d0e71afba8f45853661e5c369c8ae592dc1eb3519e54e4b0416b76ef256be51bd963157dc829d71052c0bfd622dcf44245969c326fc87fc2f6475c614543426ed292"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r3, @ANYBLOB="63c556b50a464b94318e3957d0e71afba8f45853661e5c369c8ae592dc1eb3519e54e4b0416b76ef256be51bd963157dc829d71052c0bfd622dcf44245969c326fc87fc2f6475c614543426ed292"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) (async) 192.020217ms ago: executing program 37 (id=4240): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl(r1, 0x8b27, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) r5 = accept$alg(r2, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a00)={0x6c, r0, 0x400, 0x70bd2a, 0xcc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtfilter={0x24, 0x28, 0xe27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) sendmsg$alg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="4e367b21a7ba7cd2cceec436415ef57f616b2d16809ff1be79716468241e57812f1e3e3cf3af09e41e1c50ce7ff60c1e1cc410747052", 0x36}, {&(0x7f0000000340)="019c086ac9ba326301f240bcba7c4eb39761482f9bff5117441ad126f8f0a84c192729c92d5a8ca26120094561810cd4c1e1b4c6004976f8b40bbb09d1b165d8f00baa9965ec8631abec9e167d779ade73bbbbb298158beba52e36d73b78099536e1a1b4134429179aeff0d8e8858cdd7185fa489a7c2459dd34ef6c62d6620f2af0cb088ee4f2bfb96b9ee8d17c245c94451763a01d870d1a64e32e0e9f239cb097b0ea6568cabd20cd339bcef8d1a1144b651e66d4c8246f2f9da00f6792704b", 0xc1}, {&(0x7f0000000580)="81cfc83f192a5bdf3c96db2781d9954710fdd756800ec1449abbc8fdebcfb5f75011522ac6541c996ab60f20ddb5068eaa036b1b5dcd0f487358a8951e4776c24ddb4e842dc04211f386590bf38e8512a4a0fb09943ba462c7935e3f63db596ada189fc9005f3138289520b7ab78a499eeb6be083f51b308be9d467cdefa3b04cabbe405f142e8b4e9636d52d8cd5c2763aacf68dc4bf7ea2c8e4fce3e9e6f7391dc866abf1d0e2f01eadb2151df2e914e05a21a0c005b688a69847caf8c24ac93079a61fa90ae1a81feeda90cfbb610709ef1609887ae1da0a8cf9c004ee2b04485926956b2e86321ec", 0xea}, {&(0x7f00000000c0)="41afa2", 0x3}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000680)="9c32301df527bbdb44809ebac00a74ad61658c348e0248f455ad13b19b1882ff264c41fa25ed922b0006d6d4d7ee0fdfacd14d99bcc31587739de188f0a7074e62e776ad6aa9e39862501baf99dfeeae3a02d5095b420c722034df174a1310f15f9a644d3acb3a4d6d238e4a507b9fe4094faa6f357aade352028874b4d6c03e536550186e3cdda708de7d8e14e370534c1263e5e5e89a7eb803959ae2d3e76d1a224595891d7665b60f0b20b7ad238bed8d5bf29cebe6f6a430958b18edb6b4068bc1becf4d3fef7c7385d9538b1ea29d47f96362114fbe00900a5221049f65c887b18515f0960821100e41747b18aa5489742e2198ea4c02c9895dd5", 0xfd}], 0x6, &(0x7f0000000780)=[@iv={0x70, 0x117, 0x2, 0x57, "8a1dede0498098eb8a1f286be2c1eed62fba59e8204b0d4f5b0b8a2a821fa773fccb20fac5436bd009ee9391d8ec4b657c906301a031fb97de1b9f84bb5727d3f93844cbb7d697189e09e6327333e1970bfd193904e002"}, @iv={0x28, 0x117, 0x2, 0x13, "bf6e15948cdec1f8e9b5f6b99985a6b800562e"}, @iv={0x110, 0x117, 0x2, 0xf7, "1d93dea6d69eb228dc2605580cc3fe2183a9c73d7d8010cd95a674afbfaaa042b765a56ae5bddb3a1bc10b0919591d527eb101b0d2046d520fa9d4dbf7377e8c5e743b8e2fc9e9d365112f8025ff4258e46e63d26045e8379d013542f82bc9b99ddf85db711345954db5799edf50ee1e8547852b61b69f9c622265901b0f3b4816e173f05def25d185e2a08661d083544bc413544ffefad59652ab4225e7410a5b3747d7704095f9605699aa0d7eb17f6adab7b92c55bd21de18a8be4ea972843da9c7b95b869bb336fba29c77f1f00873116da2400080bc733c87259319d4c4462cfc32d5687d94706f16e4cea563ff8c32b9f57e847f"}], 0x1a8, 0x80}, 0x4) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="0218000003000000006198be3caec211a6204dad60493ecc36d98bd4fbb0b8431b2e26aec1be73d006e3849c23b9c63a929ccbc729ae89fc53573424e0b1138a74a9b18d5f1b462563cd5cebf3c174965e7ce228d9bc2de35091d3aa3125cdeaf1b4d4036ee103e3644c3a7e360ad2ab3e55fa468833052b73ee2b76f036ab0af87f9386ee84086049b1a800daa8763754e4c66e4cec753c47547814e27b2a75babc5f"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) 101.989561ms ago: executing program 38 (id=4235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}], {0x14}}, 0x90}}, 0x4000000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, 0x0) 0s ago: executing program 39 (id=4246): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="08002600b40900000800270000000000050018013c0000000800a100000000e5a5af15"], 0x3c}}, 0x0) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.0.2647'. [ 464.042715][T16278] tipc: Disabling bearer [ 464.054662][T16323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2649'. [ 464.254274][T16332] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2651'. [ 464.310029][T16332] ip6gretap0: entered promiscuous mode [ 464.580291][T16332] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2651'. [ 465.799813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.440900][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2660'. [ 467.698620][T16402] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2667'. [ 467.806158][T16403] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2667'. [ 468.102076][T16417] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 468.347682][ T5236] udevd[5236]: worker [15544] terminated by signal 33 (Unknown signal 33) [ 469.091748][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.105730][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.132828][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 469.150029][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 469.158796][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 469.160874][T16454] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2681'. [ 469.183097][ T5186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.191596][ T5186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.202192][ T5186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 469.213117][ T5186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 469.240005][ T5186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 469.271382][T16459] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2683'. [ 469.325269][T16465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2683'. [ 469.417292][T16469] netlink: 4552 bytes leftover after parsing attributes in process `syz.6.2685'. [ 469.460565][T16469] netlink: 4552 bytes leftover after parsing attributes in process `syz.6.2685'. [ 469.698573][T16452] lo speed is unknown, defaulting to 1000 [ 469.731158][T16452] hsr0 speed is unknown, defaulting to 1000 [ 469.885446][T16486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2690'. [ 469.916911][T16486] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2690'. [ 470.106091][T16494] netlink: 5252 bytes leftover after parsing attributes in process `syz.7.2691'. [ 470.301611][T16452] chnl_net:caif_netlink_parms(): no params data found [ 470.353681][T16508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.414094][T16508] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 470.685529][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.709960][T16452] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.730089][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.737451][T16452] bridge_slave_0: entered allmulticast mode [ 470.782779][T16452] bridge_slave_0: entered promiscuous mode [ 470.811874][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.864631][T16452] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.890399][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.897684][T16452] bridge_slave_1: entered allmulticast mode [ 470.908224][T16452] bridge_slave_1: entered promiscuous mode [ 471.015373][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.045875][T16538] vlan2: entered allmulticast mode [ 471.057523][T16538] hsr0: entered allmulticast mode [ 471.075603][T16538] hsr_slave_1: entered allmulticast mode [ 471.138660][T16543] netlink: 'syz.1.2702': attribute type 9 has an invalid length. [ 471.182507][T16452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.206364][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.227369][T16452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.319413][ T51] Bluetooth: hci2: command tx timeout [ 471.385157][T16452] team0: Port device team_slave_0 added [ 471.404629][T16452] team0: Port device team_slave_1 added [ 471.662813][T16452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.693144][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.755379][T16452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.771648][T16452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.778633][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.845598][T16452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.086619][T16452] hsr_slave_0: entered promiscuous mode [ 472.108695][T16452] hsr_slave_1: entered promiscuous mode [ 472.133292][T16452] debugfs: 'hsr0' already exists in 'hsr' [ 472.182623][T16452] Cannot create hsr debugfs directory [ 472.492969][T16607] 8021q: VLANs not supported on gre0 [ 472.709358][T16619] netlink: 'syz.1.2720': attribute type 3 has an invalid length. [ 472.750993][T16619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.856699][T16452] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.885448][T16452] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 473.014136][T16636] __nla_validate_parse: 6 callbacks suppressed [ 473.014156][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2727'. [ 473.078212][T16452] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.110211][T16452] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 473.234289][T16452] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.260438][T16452] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 473.332764][T16643] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2729'. [ 473.350075][T16645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2731'. [ 473.387866][T16652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2731'. [ 473.399919][ T51] Bluetooth: hci2: command tx timeout [ 473.424452][T16452] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.465014][T16452] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 473.806408][T16452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 473.868811][T16452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 473.900297][T16452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 473.925897][T16669] tipc: New replicast peer: 255.255.255.255 [ 473.940732][T16669] tipc: Enabled bearer , priority 10 [ 473.948129][T16452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.246486][T16452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.326133][T16452] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.372285][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.379545][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.486495][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.493868][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.754290][T16710] netlink: 'syz.6.2747': attribute type 30 has an invalid length. [ 474.835591][T16708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2745'. [ 475.227394][T16452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.288214][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'. [ 475.423464][T16744] netlink: 'syz.6.2755': attribute type 4 has an invalid length. [ 475.447797][T16452] veth0_vlan: entered promiscuous mode [ 475.479642][ T51] Bluetooth: hci2: command tx timeout [ 475.495245][T16452] veth1_vlan: entered promiscuous mode [ 475.555898][T16452] veth0_macvtap: entered promiscuous mode [ 475.583373][T16452] veth1_macvtap: entered promiscuous mode [ 475.614950][T16452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.654068][T16452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.716643][T15663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.733609][T15663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.762943][T15663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.797863][T15663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.824666][T16753] pim6reg1: entered promiscuous mode [ 475.836907][T16753] pim6reg1: entered allmulticast mode [ 476.122682][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2762'. [ 476.212564][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.237591][T16770] netlink: 'syz.1.2763': attribute type 1 has an invalid length. [ 476.260132][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.306777][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2764'. [ 476.400550][T16770] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 476.461804][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2763'. [ 476.473723][T16780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.482786][ T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 476.588677][T16775] veth9: entered promiscuous mode [ 476.601675][T16775] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 476.629979][T15862] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 476.661993][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.679500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.692116][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.820102][T16769] lo speed is unknown, defaulting to 1000 [ 476.838541][T16769] hsr0 speed is unknown, defaulting to 1000 [ 477.140517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.353358][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2772'. [ 477.477808][T16808] tipc: Enabled bearer , priority 0 [ 477.493475][T16808] syzkaller0: entered promiscuous mode [ 477.500477][T16808] syzkaller0: entered allmulticast mode [ 477.560164][ T51] Bluetooth: hci2: command tx timeout [ 478.012350][T16822] lo speed is unknown, defaulting to 1000 [ 478.029333][T16807] tipc: Resetting bearer [ 478.101761][T16807] tipc: Disabling bearer [ 478.177977][T16822] hsr0 speed is unknown, defaulting to 1000 [ 478.206445][ T5186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 478.220072][T16826] tipc: Started in network mode [ 478.220596][ T5186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 478.225415][T16826] tipc: Node identity f27851d23d06, cluster identity 4711 [ 478.250296][ T5186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 478.259092][ T5186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 478.270008][ T5186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 478.280596][T16826] tipc: Enabled bearer , priority 0 [ 478.312673][T16826] syzkaller0: entered promiscuous mode [ 478.318283][T16826] syzkaller0: entered allmulticast mode [ 478.436763][T15664] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.493360][T15664] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.554169][T16825] tipc: Resetting bearer [ 478.591006][T16837] netlink: 'syz.6.2779': attribute type 21 has an invalid length. [ 478.611569][T16825] tipc: Disabling bearer [ 478.741819][T16828] lo speed is unknown, defaulting to 1000 [ 478.750274][T16828] hsr0 speed is unknown, defaulting to 1000 [ 478.784338][T15664] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.800496][T15664] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.847087][T16837] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2779'. [ 478.933079][T15664] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.983718][T15664] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.068879][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2783'. [ 479.080547][T15664] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.092843][T15664] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.318246][T16866] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2785'. [ 479.635244][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2787'. [ 479.666363][T16874] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.690427][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2788'. [ 479.763726][T16881] netlink: 'syz.5.2789': attribute type 10 has an invalid length. [ 479.785297][T16881] bridge0: port 1() entered disabled state [ 479.870535][T16881] bridge0: port 1() entered blocking state [ 479.876623][T16881] bridge0: port 1() entered forwarding state [ 479.918777][T16881] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 479.991912][T16888] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 480.034295][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2792'. [ 480.286267][T16901] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 480.360131][ T5186] Bluetooth: hci5: command tx timeout [ 480.475081][T16919] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2798'. [ 480.563816][T15664] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 480.578679][T16929] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.591023][T15664] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 480.600934][T15664] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 06:56:cc:04:3b:de - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 480.811260][T15664] dvmrp0 (unregistering): left allmulticast mode [ 480.867234][T15664] team0: Port device geneve0 removed [ 481.118042][T15664] bond1 (unregistering): Released all slaves [ 481.234225][T15664] bond2 (unregistering): Released all slaves [ 481.253708][T15664] bond3 (unregistering): Released all slaves [ 481.274072][T15664] bond0 (unregistering): left promiscuous mode [ 481.288495][T15664] bond0 (unregistering): Released all slaves [ 481.308815][T15664] bond4 (unregistering): Released all slaves [ 481.424669][T15664] bond5 (unregistering): Released all slaves [ 481.536961][T15664] bond6 (unregistering): (slave veth9): Releasing backup interface [ 481.546803][T15664] bond6 (unregistering): Released all slaves [ 481.563262][T15664] bond7 (unregistering): Released all slaves [ 481.585207][T16909] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 481.716768][T16828] chnl_net:caif_netlink_parms(): no params data found [ 481.888882][T16957] netlink: 'syz.6.2803': attribute type 1 has an invalid length. [ 481.974301][T16961] sctp: [Deprecated]: syz.5.2804 (pid 16961) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.974301][T16961] Use struct sctp_sack_info instead [ 482.002785][T16957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 482.101906][T16962] bond5: (slave gretap1): making interface the new active one [ 482.119677][T16962] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 482.278762][T16828] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.287487][T16828] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.296290][T16828] bridge_slave_0: entered allmulticast mode [ 482.306091][T16828] bridge_slave_0: entered promiscuous mode [ 482.439887][ T5186] Bluetooth: hci5: command tx timeout [ 482.609562][T16972] vlan0 (unregistering): left allmulticast mode [ 482.616130][T16972] veth0_vlan (unregistering): left allmulticast mode [ 482.623063][T16972] vlan0 (unregistering): left promiscuous mode [ 483.017332][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2807'. [ 483.026550][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2807'. [ 483.039299][T16828] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.046632][T16828] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.065920][T16828] bridge_slave_1: entered allmulticast mode [ 483.075591][T16828] bridge_slave_1: entered promiscuous mode [ 483.227558][T16828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.273075][T16828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.374344][T16997] can: request_module (can-proto-5) failed. [ 483.450177][T17003] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2813'. [ 483.485858][T16828] team0: Port device team_slave_0 added [ 483.515296][T16828] team0: Port device team_slave_1 added [ 483.654281][T15664] : left promiscuous mode [ 483.697581][T16828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.720480][T16828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.768009][T16828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.792349][T17011] 8021q: VLANs not supported on vcan0 [ 483.797905][T15664] tipc: Disabling bearer [ 483.820949][T15664] tipc: Left network mode [ 483.821302][T16828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.858684][T16828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.906439][T16828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.173719][T17033] geneve3: entered promiscuous mode [ 484.190221][T17033] geneve3: entered allmulticast mode [ 484.306619][ T49] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 484.316430][ T49] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 484.358149][T16828] hsr_slave_0: entered promiscuous mode [ 484.376927][T16828] hsr_slave_1: entered promiscuous mode [ 484.390353][T16828] debugfs: 'hsr0' already exists in 'hsr' [ 484.406344][T16828] Cannot create hsr debugfs directory [ 484.413481][ T49] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 484.425470][T17033] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.435525][T17033] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.519834][ T5186] Bluetooth: hci5: command tx timeout [ 484.669116][T17050] __nla_validate_parse: 1 callbacks suppressed [ 484.669135][T17050] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2828'. [ 484.704227][T17051] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2828'. [ 484.792354][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2829'. [ 485.181069][T15664] bond_slave_1: left promiscuous mode [ 485.206668][T15664] hsr_slave_1: left promiscuous mode [ 485.268363][T15664] veth1_macvtap: left promiscuous mode [ 485.279555][T15664] veth0_macvtap: left promiscuous mode [ 485.660411][T15664] pimreg3 (unregistering): left allmulticast mode [ 485.806697][T15664] team0 (unregistering): Port device hsr0 removed [ 486.425035][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2840'. [ 486.461703][T17105] lo speed is unknown, defaulting to 1000 [ 486.604309][ T5186] Bluetooth: hci5: command tx timeout [ 486.657347][T17033] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.667634][T17033] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.677651][T17033] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 486.726888][T16828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.756462][T16828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.778957][T17033] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.803796][T17033] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.815159][T17033] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 486.853470][T16828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.873400][T17112] unknown channel width for channel at 909000KHz? [ 486.873979][T16828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 486.927310][T17033] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.958004][T17033] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.979036][T17033] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 487.214592][ T3553] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.231578][ T3553] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 487.249461][ T3553] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 487.299814][ T3553] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.318927][ T3553] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 487.339308][ T3553] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 487.360522][T16828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.399055][ T3553] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.410933][ T3553] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 487.421213][ T3553] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 487.447042][ T3571] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.455905][ T3571] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 487.464351][ T3571] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 487.483993][T16828] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.509875][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.517066][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.557380][T15663] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.564733][T15663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.658506][T17151] netlink: 'syz.7.2854': attribute type 4 has an invalid length. [ 487.711401][T16828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.805773][T17160] netlink: 'syz.6.2857': attribute type 7 has an invalid length. [ 487.836595][T17155] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2855'. [ 487.866625][T17155] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2855'. [ 487.891990][T17162] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 488.056446][T17166] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2858'. [ 488.427510][T17159] bridge0: port 1() entered disabled state [ 488.516471][T17188] netlink: 'syz.7.2864': attribute type 1 has an invalid length. [ 488.844040][T17159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.869978][T17159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.390678][T17188] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 489.470098][T15663] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.490172][T16927] hsr0 speed is unknown, defaulting to 1000 [ 489.496115][T16927] syz1: Port: 1 Link DOWN [ 489.511374][ T5976] IPVS: starting estimator thread 0... [ 489.514121][T15663] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.548959][T17200] netlink: 'syz.5.2865': attribute type 25 has an invalid length. [ 489.580994][T15862] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.599597][T17203] IPVS: using max 24 ests per chain, 57600 per kthread [ 489.607063][T15862] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.649560][T15862] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.672151][T15862] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.710863][T15862] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.739584][T15862] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.783326][T16828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.827708][T15664] IPVS: stop unused estimator thread 0... [ 489.963898][T16828] veth0_vlan: entered promiscuous mode [ 489.988698][T17221] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2872'. [ 490.021742][T16828] veth1_vlan: entered promiscuous mode [ 490.248857][T16828] veth0_macvtap: entered promiscuous mode [ 490.284037][T16828] veth1_macvtap: entered promiscuous mode [ 490.372415][T16828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.442844][T17239] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2876'. [ 490.474988][T16828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.542609][ T3571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.573220][ T3571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.607376][ T3571] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.629415][ T3571] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.661445][T17244] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2879'. [ 490.834908][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.859226][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2882'. [ 490.868188][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.986161][T17256] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2883'. [ 491.034896][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2884'. [ 491.100076][T17258] tipc: Enabled bearer , priority 0 [ 491.110556][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.118851][T17258] syzkaller0: entered promiscuous mode [ 491.128656][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.146724][T17258] syzkaller0: entered allmulticast mode [ 491.171842][T17258] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 491.262262][T17269] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2770'. [ 491.290046][T17258] tipc: Resetting bearer [ 491.371795][T17257] tipc: Resetting bearer [ 491.424291][T17257] tipc: Disabling bearer [ 491.443865][T17269] lo speed is unknown, defaulting to 1000 [ 491.444207][T17274] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 491.526024][T17269] hsr0 speed is unknown, defaulting to 1000 [ 491.530172][T17274] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2889'. [ 491.562796][T17274] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2889'. [ 491.673378][T17294] netlink: 'syz.5.2894': attribute type 8 has an invalid length. [ 492.761267][T17353] lo speed is unknown, defaulting to 1000 [ 492.782054][T17353] hsr0 speed is unknown, defaulting to 1000 [ 493.218597][T17386] tunl0: left promiscuous mode [ 493.460342][T17393] netlink: 788 bytes leftover after parsing attributes in process `syz.6.2918'. [ 493.882311][T17417] veth1_macvtap: left promiscuous mode [ 493.985528][T17424] netlink: 'syz.6.2931': attribute type 29 has an invalid length. [ 494.015380][T17424] netlink: 'syz.6.2931': attribute type 29 has an invalid length. [ 494.092811][T17430] netlink: 'syz.1.2933': attribute type 6 has an invalid length. [ 494.389054][ T30] audit: type=1107 audit(1757042580.143:10): pid=17448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•w’èznAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ ŽLa6òŠ¨Šç' [ 494.431475][ T30] audit: type=1107 audit(1757042580.143:11): pid=17448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•w’èznAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ ŽLa6òŠ¨Šç' [ 494.990215][T17483] openvswitch: netlink: IPv6 tunnel dst address is zero [ 495.104313][T17487] netlink: 'syz.1.2950': attribute type 11 has an invalid length. [ 495.129322][T17487] __nla_validate_parse: 9 callbacks suppressed [ 495.129342][T17487] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2950'. [ 495.173865][T17494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2952'. [ 495.185359][T17493] netlink: 'syz.0.2953': attribute type 10 has an invalid length. [ 495.223897][T17493] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.262834][T17499] netlink: 'syz.0.2953': attribute type 10 has an invalid length. [ 495.263514][T17493] bond0: (slave team0): Enslaving as an active interface with an up link [ 495.385472][T17499] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 495.431634][T17513] netlink: 'syz.5.2958': attribute type 7 has an invalid length. [ 495.450730][T17513] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2958'. [ 495.554361][T17493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.605738][T17505] bond_slave_0: entered promiscuous mode [ 495.611747][T17505] bond_slave_1: entered promiscuous mode [ 495.617663][T17505] team_slave_0: entered promiscuous mode [ 495.623593][T17505] team_slave_1: entered promiscuous mode [ 495.629348][T17505] syz_tun: entered promiscuous mode [ 495.680057][T17505] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 495.707188][T17505] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 495.716655][T17520] tipc: Started in network mode [ 495.732315][T17520] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 495.745873][T17520] tipc: Enabled bearer , priority 10 [ 495.941029][T17536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2964'. [ 496.009580][T17536] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.234943][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2969'. [ 496.249544][T17536] bridge_slave_1 (unregistering): left allmulticast mode [ 496.292793][T17536] bridge_slave_1 (unregistering): left promiscuous mode [ 496.303200][T17536] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.366067][T17571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.408083][T17575] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2972'. [ 496.436879][T17559] bond0: entered promiscuous mode [ 496.448662][T17559] team0: entered promiscuous mode [ 496.473323][T17559] bond0: left promiscuous mode [ 496.483597][T17559] team0: left promiscuous mode [ 496.591070][T17579] netlink: 'syz.5.2974': attribute type 83 has an invalid length. [ 496.747193][ T30] audit: type=1804 audit(1757042582.503:12): pid=17586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2978" name="/newroot/461/cgroup.controllers" dev="tmpfs" ino=2365 res=1 errno=0 [ 496.812205][ T30] audit: type=1800 audit(1757042582.503:13): pid=17586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2978" name="cgroup.controllers" dev="tmpfs" ino=2365 res=0 errno=0 [ 496.854608][ T30] audit: type=1800 audit(1757042582.503:14): pid=17593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2978" name="cgroup.controllers" dev="tmpfs" ino=2365 res=0 errno=0 [ 496.865323][T16944] tipc: Node number set to 4269801514 [ 497.141942][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2981'. [ 497.576500][T17633] sctp: [Deprecated]: syz.0.2988 (pid 17633) Use of int in maxseg socket option. [ 497.576500][T17633] Use struct sctp_assoc_value instead [ 497.608755][T17635] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 497.643826][T17635] CPU: 0 UID: 0 PID: 17635 Comm: syz.6.2990 Not tainted syzkaller #0 PREEMPT(full) [ 497.643861][T17635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.643874][T17635] Call Trace: [ 497.643883][T17635] [ 497.643892][T17635] dump_stack_lvl+0x189/0x250 [ 497.643925][T17635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.643949][T17635] ? __pfx__printk+0x10/0x10 [ 497.643981][T17635] ? kernfs_path_from_node+0x2f/0x290 [ 497.644003][T17635] ? kernfs_path_from_node+0x250/0x290 [ 497.644023][T17635] ? kernfs_path_from_node+0x2f/0x290 [ 497.644049][T17635] sysfs_warn_dup+0x8e/0xa0 [ 497.644070][T17635] sysfs_do_create_link_sd+0xc0/0x110 [ 497.644094][T17635] device_add_class_symlinks+0x1cf/0x240 [ 497.644122][T17635] device_add+0x475/0xb50 [ 497.644158][T17635] wiphy_register+0x1ba6/0x28d0 [ 497.644204][T17635] ? __pfx_wiphy_register+0x10/0x10 [ 497.644229][T17635] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 497.644258][T17635] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 497.644283][T17635] ieee80211_register_hw+0x3484/0x4100 [ 497.644322][T17635] ? ieee80211_register_hw+0x1411/0x4100 [ 497.644353][T17635] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 497.644379][T17635] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 497.644414][T17635] ? __hrtimer_setup+0x187/0x210 [ 497.644431][T17635] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 497.644461][T17635] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 497.644518][T17635] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 497.644541][T17635] ? trace_kmalloc+0x1f/0xd0 [ 497.644563][T17635] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 497.644588][T17635] ? kstrndup+0xbf/0x160 [ 497.644617][T17635] hwsim_new_radio_nl+0xea4/0x1b10 [ 497.644645][T17635] ? __pfx___nla_validate_parse+0x10/0x10 [ 497.644689][T17635] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 497.644728][T17635] ? __nla_parse+0x40/0x60 [ 497.644760][T17635] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 497.644793][T17635] genl_family_rcv_msg_doit+0x212/0x300 [ 497.644825][T17635] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 497.644870][T17635] ? bpf_lsm_capable+0x9/0x20 [ 497.644894][T17635] ? security_capable+0x7e/0x2e0 [ 497.644930][T17635] genl_rcv_msg+0x60e/0x790 [ 497.644959][T17635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.644980][T17635] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 497.645020][T17635] netlink_rcv_skb+0x205/0x470 [ 497.645064][T17635] ? __lock_acquire+0xab9/0xd20 [ 497.645093][T17635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.645119][T17635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.645171][T17635] ? down_read+0x1ad/0x2e0 [ 497.645194][T17635] genl_rcv+0x28/0x40 [ 497.645214][T17635] netlink_unicast+0x82c/0x9e0 [ 497.645253][T17635] ? __pfx_netlink_unicast+0x10/0x10 [ 497.645282][T17635] ? netlink_sendmsg+0x642/0xb30 [ 497.645298][T17635] ? skb_put+0x11b/0x210 [ 497.645321][T17635] netlink_sendmsg+0x805/0xb30 [ 497.645351][T17635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.645374][T17635] ? aa_sock_msg_perm+0xf1/0x1d0 [ 497.645395][T17635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.645416][T17635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.645436][T17635] __sock_sendmsg+0x21c/0x270 [ 497.645466][T17635] ____sys_sendmsg+0x505/0x830 [ 497.645495][T17635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.645528][T17635] ? import_iovec+0x74/0xa0 [ 497.645556][T17635] ___sys_sendmsg+0x21f/0x2a0 [ 497.645581][T17635] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.645647][T17635] ? __fget_files+0x2a/0x420 [ 497.645675][T17635] ? __fget_files+0x3a0/0x420 [ 497.645717][T17635] __x64_sys_sendmsg+0x19b/0x260 [ 497.645742][T17635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.645776][T17635] ? rcu_is_watching+0x15/0xb0 [ 497.645803][T17635] ? do_syscall_64+0xbe/0x3b0 [ 497.645826][T17635] do_syscall_64+0xfa/0x3b0 [ 497.645848][T17635] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.645876][T17635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.645896][T17635] ? clear_bhb_loop+0x60/0xb0 [ 497.645921][T17635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.645939][T17635] RIP: 0033:0x7f4b22f8ebe9 [ 497.645958][T17635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.645975][T17635] RSP: 002b:00007f4b23e54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.645996][T17635] RAX: ffffffffffffffda RBX: 00007f4b231c5fa0 RCX: 00007f4b22f8ebe9 [ 497.646010][T17635] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 497.646022][T17635] RBP: 00007f4b23011e19 R08: 0000000000000000 R09: 0000000000000000 [ 497.646034][T17635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.646045][T17635] R13: 00007f4b231c6038 R14: 00007f4b231c5fa0 R15: 00007ffc890673d8 [ 497.646080][T17635] [ 498.181167][T17650] delete_channel: no stack [ 498.211309][T17650] netlink: 'syz.7.2993': attribute type 1 has an invalid length. [ 498.248894][T17650] netlink: 'syz.7.2993': attribute type 1 has an invalid length. [ 498.259464][T17650] netlink: 'syz.7.2993': attribute type 1 has an invalid length. [ 498.448797][T17648] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.568229][T17665] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2998'. [ 498.669294][T17648] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.719148][T17665] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2998'. [ 498.774041][T17648] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.793221][T17684] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.2997'. [ 498.830698][T17679] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 498.859372][T17679] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 498.997716][T17648] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.324553][T15862] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.374778][T15663] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.429438][T15663] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.469627][T15663] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.504786][T17708] netlink: 'syz.6.3008': attribute type 1 has an invalid length. [ 499.539900][T17708] netlink: 'syz.6.3008': attribute type 1 has an invalid length. [ 499.547722][T17708] netlink: 'syz.6.3008': attribute type 2 has an invalid length. [ 499.563707][T17711] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 499.893905][T17736] netlink: 'syz.7.3016': attribute type 10 has an invalid length. [ 499.942646][T17736] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 499.973041][T17736] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 500.075641][T17748] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 500.108723][T17747] dvmrp0: entered allmulticast mode [ 500.306627][T17764] netlink: 'syz.5.3027': attribute type 2 has an invalid length. [ 500.621619][T17786] __nla_validate_parse: 10 callbacks suppressed [ 500.621639][T17786] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3033'. [ 500.640015][T17786] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3033'. [ 500.660032][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3033'. [ 500.737315][ T30] audit: type=1800 audit(1757042586.493:15): pid=17800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3036" name="memory.events" dev="tmpfs" ino=2416 res=0 errno=0 [ 500.813317][ T30] audit: type=1804 audit(1757042586.523:16): pid=17800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3036" name="/newroot/471/memory.events" dev="tmpfs" ino=2416 res=1 errno=0 [ 500.893510][T17804] nbd: must specify a device to reconfigure [ 500.933137][T17804] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3038'. [ 500.955376][T17804] 8021q: VLANs not supported on ip6_vti0 [ 501.001435][T17810] netlink: 'syz.5.3040': attribute type 3 has an invalid length. [ 501.009601][T17810] netlink: 'syz.5.3040': attribute type 3 has an invalid length. [ 501.087139][T17817] netlink: 'syz.0.3044': attribute type 11 has an invalid length. [ 501.095930][T17817] netlink: 'syz.0.3044': attribute type 11 has an invalid length. [ 501.104181][T17817] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3044'. [ 501.114127][T17813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3043'. [ 501.329097][T17826] bridge_slave_0: left allmulticast mode [ 501.356855][T17831] netlink: 'syz.7.3049': attribute type 10 has an invalid length. [ 501.361831][T17826] bridge_slave_0: left promiscuous mode [ 501.407812][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'. [ 501.428645][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.450427][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3049'. [ 501.477138][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3049'. [ 501.508484][T17826] bond0: (slave bond_slave_0): Releasing backup interface [ 501.536242][T17826] bond0: (slave bond_slave_1): Releasing backup interface [ 501.573343][T17826] team0: Port device team_slave_0 removed [ 501.587892][T17826] team0: Port device team_slave_1 removed [ 501.598569][T17826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.606274][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.616502][T17826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.625084][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.669087][T17831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.889991][T17852] netlink: 'syz.0.3055': attribute type 10 has an invalid length. [ 501.918255][T17852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3055'. [ 501.931051][T17852] dummy0: entered promiscuous mode [ 501.990384][T17852] bridge0: port 3(dummy0) entered blocking state [ 501.996886][T17852] bridge0: port 3(dummy0) entered disabled state [ 502.023168][T17852] dummy0: entered allmulticast mode [ 502.060329][T17852] bridge0: port 3(dummy0) entered blocking state [ 502.066944][T17852] bridge0: port 3(dummy0) entered forwarding state [ 502.255623][T17877] tc_dump_action: action bad kind [ 502.420695][T16944] IPVS: starting estimator thread 0... [ 502.511197][T17887] IPVS: using max 24 ests per chain, 57600 per kthread [ 502.793000][T17908] netlink: 'syz.6.3073': attribute type 1 has an invalid length. [ 503.063118][T17917] lo speed is unknown, defaulting to 1000 [ 503.140245][T17917] hsr0 speed is unknown, defaulting to 1000 [ 503.448721][T17925] bond6: entered allmulticast mode [ 503.454741][T17925] 8021q: adding VLAN 0 to HW filter on device bond6 [ 503.462693][T17925] bridge0: port 1(bond6) entered blocking state [ 503.469421][T17925] bridge0: port 1(bond6) entered disabled state [ 503.480080][T17925] bond6: entered promiscuous mode [ 503.487537][T17925] bridge0: port 1(bond6) entered blocking state [ 503.493987][T17925] bridge0: port 1(bond6) entered forwarding state [ 503.527438][T15862] bridge0: port 1(bond6) entered disabled state [ 504.546345][T17990] validate_nla: 4 callbacks suppressed [ 504.546367][T17990] netlink: 'syz.6.3093': attribute type 1 has an invalid length. [ 504.912298][T17997] 8021q: adding VLAN 0 to HW filter on device bond8 [ 504.937631][T17997] bond7: (slave bond8): making interface the new active one [ 504.945850][T17997] bond7: (slave bond8): Enslaving as an active interface with an up link [ 504.978970][T17998] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 504.991807][T17998] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 505.226734][T18026] netlink: 'syz.5.3103': attribute type 15 has an invalid length. [ 505.237207][T18026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.246280][T17997] hsr_slave_1 (unregistering): left promiscuous mode [ 505.259118][T18020] netlink: 'syz.7.3100': attribute type 1 has an invalid length. [ 506.177949][T18065] __nla_validate_parse: 11 callbacks suppressed [ 506.177970][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3113'. [ 506.227980][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3113'. [ 506.249247][T18071] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3115'. [ 506.453654][T18077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3117'. [ 506.544172][T18089] netlink: 'syz.6.3120': attribute type 1 has an invalid length. [ 506.572791][T18089] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3120'. [ 506.628407][T18089] gre1: entered promiscuous mode [ 506.679667][T18089] gre1: entered allmulticast mode [ 506.764581][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.816832][T18099] lo speed is unknown, defaulting to 1000 [ 506.826425][T18099] hsr0 speed is unknown, defaulting to 1000 [ 506.966621][T18109] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3126'. [ 507.004662][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3127'. [ 507.019669][T18112] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3127'. [ 507.028669][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3127'. [ 507.040721][T18112] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3127'. [ 507.157459][T18124] netlink: 'syz.7.3128': attribute type 4 has an invalid length. [ 507.241906][T18127] netlink: 'syz.7.3128': attribute type 4 has an invalid length. [ 508.270825][T18186] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 508.679427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.837486][T18217] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 509.207657][T18233] bridge0: port 3(dummy0) entered disabled state [ 509.214328][T18233] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.221902][T18233] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.251409][T18233] bond_slave_0: left promiscuous mode [ 509.257184][T18233] bond_slave_1: left promiscuous mode [ 509.263419][T18233] team_slave_0: left promiscuous mode [ 509.269082][T18233] team_slave_1: left promiscuous mode [ 509.382806][T18233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.398065][T18233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.504177][T18243] geneve2: entered promiscuous mode [ 509.530083][T18243] geneve2: entered allmulticast mode [ 509.652131][T18258] netlink: 'syz.1.3173': attribute type 21 has an invalid length. [ 510.035647][T18272] openvswitch: netlink: Tunnel attr 13569 out of range max 16 [ 510.179255][T15664] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.207982][T15664] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 510.219813][T15664] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.258622][T15664] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 510.284094][T18267] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 510.296507][T18267] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 510.406882][T15664] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.439611][T15664] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 510.478382][T15664] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.494019][T15664] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 510.513002][T18287] tipc: Enabled bearer , priority 0 [ 510.533122][T18280] syzkaller0: entered promiscuous mode [ 510.548031][T18280] syzkaller0: entered allmulticast mode [ 510.585101][T18279] tipc: Resetting bearer [ 510.675097][T18279] tipc: Disabling bearer [ 510.755803][T18292] tipc: Enabled bearer , priority 0 [ 510.800973][T18300] syzkaller0: entered promiscuous mode [ 510.809070][T18300] syzkaller0: entered allmulticast mode [ 510.876358][T18313] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 510.954233][T18292] tipc: Resetting bearer [ 511.031290][T18291] tipc: Resetting bearer [ 511.111935][T18291] tipc: Disabling bearer [ 511.340487][T18346] __nla_validate_parse: 10 callbacks suppressed [ 511.340507][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3195'. [ 511.363162][T18348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3196'. [ 511.479893][T18353] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3198'. [ 511.640797][T18364] macsec0: entered promiscuous mode [ 511.662417][T18364] macsec0: entered allmulticast mode [ 511.681986][T18364] veth1_macvtap: entered allmulticast mode [ 511.688236][T18364] macsec0: left promiscuous mode [ 511.696203][T18364] macsec0: left allmulticast mode [ 511.701896][T18364] veth1_macvtap: left allmulticast mode [ 511.710623][T18372] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3201'. [ 512.031376][T18391] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3211'. [ 512.235734][T18404] sctp: [Deprecated]: syz.6.3217 (pid 18404) Use of int in max_burst socket option deprecated. [ 512.235734][T18404] Use struct sctp_assoc_value instead [ 512.342261][T18411] netlink: 'syz.0.3219': attribute type 10 has an invalid length. [ 512.364240][T18411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3219'. [ 512.416829][T18411] team0: Port device geneve0 added [ 512.423595][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.456302][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.499254][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.507589][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.590745][T18413] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3220'. [ 512.602802][T18419] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3222'. [ 512.757048][T18426] netlink: 'syz.0.3221': attribute type 1 has an invalid length. [ 512.784689][T18426] Bluetooth: MGMT ver 1.23 [ 512.955261][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3224'. [ 513.042903][T18433] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3224'. [ 513.313315][T18442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.983330][T18483] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 514.022121][T18483] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 514.101482][T18482] veth0_macvtap: left promiscuous mode [ 514.254174][T18497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.528152][T18509] syzkaller0: entered promiscuous mode [ 514.541606][T18509] syzkaller0: entered allmulticast mode [ 514.571625][T18509] tipc: Enabled bearer , priority 0 [ 514.582354][T18508] tipc: Resetting bearer [ 514.849561][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 514.855681][ T5186] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 515.701416][T16944] tipc: Node number set to 3481162194 [ 516.432331][T18508] tipc: Disabling bearer [ 516.608874][T18548] xt_HMARK: proto mask must be zero with L3 mode [ 516.627398][T18549] __nla_validate_parse: 7 callbacks suppressed [ 516.627416][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3263'. [ 516.676319][T18549] netlink: 'syz.5.3263': attribute type 10 has an invalid length. [ 516.698676][T18549] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 516.715358][T18549] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 516.797016][T18558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3267'. [ 517.017382][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 517.072428][T18569] team1: entered promiscuous mode [ 517.077633][T18569] team1: entered allmulticast mode [ 517.190248][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3271'. [ 517.870847][T18573] veth1_to_bond: entered allmulticast mode [ 517.876799][T18573] veth1_to_bond: left allmulticast mode [ 518.112643][T18594] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 518.393930][T18611] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 518.604212][T18634] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 518.621924][T18634] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 518.764065][T18639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3290'. [ 518.770842][T18641] tipc: Enabled bearer , priority 0 [ 518.908754][T18647] tipc: Resetting bearer [ 519.291999][T18661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.302372][T18661] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.314029][T18661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.379860][ T3571] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 519.405951][ T3571] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 519.460817][ T3571] bond0: (slave bridge0): link status definitely down, disabling slave [ 519.555327][T18640] tipc: Disabling bearer [ 519.687861][T18679] sctp: [Deprecated]: syz.5.3305 (pid 18679) Use of int in max_burst socket option. [ 519.687861][T18679] Use struct sctp_assoc_value instead [ 520.245350][T18698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3311'. [ 520.263481][T18698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3311'. [ 520.289947][T18698] netlink: 'syz.1.3311': attribute type 4 has an invalid length. [ 520.397908][T18708] netlink: 'syz.1.3311': attribute type 6 has an invalid length. [ 520.677280][T18722] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3318'. [ 520.688881][T18722] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3318'. [ 520.701582][T18722] netlink: 'syz.6.3318': attribute type 1 has an invalid length. [ 520.738763][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3318'. [ 520.807004][T18725] xt_HMARK: spi-set and port-set can't be combined [ 521.779977][T18786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3338'. [ 521.808122][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3338'. [ 521.851463][T18786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3338'. [ 522.012671][T18801] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3343'. [ 522.054342][T18801] openvswitch: netlink: Flow key attr not present in new flow. [ 522.188812][T18804] tipc: Enabled bearer , priority 0 [ 522.228575][T18807] syzkaller0: entered promiscuous mode [ 522.250459][T18807] syzkaller0: entered allmulticast mode [ 522.417697][T18808] tipc: Resetting bearer [ 522.562504][T18808] tipc: Disabling bearer [ 522.614988][T18835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3350'. [ 522.748616][T18837] syzkaller0: entered allmulticast mode [ 523.033126][T18855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3354'. [ 523.454522][T18882] tipc: Enabling of bearer rejected, failed to enable media [ 523.661123][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3364'. [ 523.709940][T18898] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 524.120283][T18930] pimreg3: entered allmulticast mode [ 524.365937][T18939] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3375'. [ 524.606981][T18953] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3379'. [ 524.661804][T18957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3381'. [ 525.152514][T18990] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20003 [ 525.492125][T18997] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 525.598282][T18997] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 525.941063][T19027] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 526.251034][T19041] veth5: entered allmulticast mode [ 527.147463][T19094] __nla_validate_parse: 3 callbacks suppressed [ 527.147483][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3417'. [ 527.205103][T19093] netlink: 'syz.5.3416': attribute type 10 has an invalid length. [ 527.424613][T19102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 527.431949][T19102] IPv6: NLM_F_CREATE should be set when creating new route [ 527.677122][T19112] gre1: entered promiscuous mode [ 527.699258][T19112] gre1: entered allmulticast mode [ 527.821401][T19119] tipc: Enabled bearer , priority 0 [ 527.829074][T19119] syzkaller0: entered promiscuous mode [ 527.834800][T19119] syzkaller0: entered allmulticast mode [ 527.888983][T19119] tipc: Resetting bearer [ 527.897231][T19124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3428'. [ 527.941465][T19118] tipc: Resetting bearer [ 527.996716][T19118] tipc: Disabling bearer [ 528.106711][T19129] netlink: 'syz.5.3428': attribute type 1 has an invalid length. [ 528.151347][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3430'. [ 528.169798][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3430'. [ 528.261167][T19137] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3431'. [ 528.398628][T19145] netlink: 'syz.0.3434': attribute type 10 has an invalid length. [ 528.437372][T19145] netlink: 'syz.0.3434': attribute type 10 has an invalid length. [ 528.458417][T19145] netlink: 'syz.0.3434': attribute type 10 has an invalid length. [ 528.712735][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 528.931092][T19130] lec:lec_atm_close: lec0: Shut down! [ 528.976863][T19170] lo speed is unknown, defaulting to 1000 [ 529.001739][T19170] lo speed is unknown, defaulting to 1000 [ 529.040145][T19170] lo speed is unknown, defaulting to 1000 [ 529.065893][T19175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.304783][T19170] infiniband syz0: set active [ 529.309633][T19170] infiniband syz0: added lo [ 529.319770][T17173] lo speed is unknown, defaulting to 1000 [ 529.358743][T19170] RDS/IB: syz0: added [ 529.363041][T19170] smc: adding ib device syz0 with port count 1 [ 529.369318][T19170] smc: ib device syz0 port 1 has pnetid [ 529.375359][T17175] lo speed is unknown, defaulting to 1000 [ 529.384387][T19170] lo speed is unknown, defaulting to 1000 [ 529.488405][T19184] netlink: 'syz.5.3443': attribute type 21 has an invalid length. [ 529.531001][T19184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.538291][T19184] IPv6: NLM_F_CREATE should be set when creating new route [ 529.545655][T19184] IPv6: NLM_F_CREATE should be set when creating new route [ 529.552918][T19184] IPv6: NLM_F_CREATE should be set when creating new route [ 529.588255][T19185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3443'. [ 529.636910][T19170] lo speed is unknown, defaulting to 1000 [ 529.937142][T19170] lo speed is unknown, defaulting to 1000 [ 529.942490][T19193] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3448'. [ 530.119447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.166231][T19204] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3452'. [ 530.189354][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3452'. [ 530.245491][ T3571] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 530.281107][ T3571] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.345499][ T3571] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.356296][ T3571] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.432379][T19170] lo speed is unknown, defaulting to 1000 [ 530.925156][T19170] lo speed is unknown, defaulting to 1000 [ 531.159384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.508892][T19249] lo speed is unknown, defaulting to 1000 [ 531.555436][T19249] hsr0 speed is unknown, defaulting to 1000 [ 531.674223][T19170] lo speed is unknown, defaulting to 1000 [ 531.814173][T19270] netlink: 'syz.6.3473': attribute type 1 has an invalid length. [ 532.487728][T19249] lo speed is unknown, defaulting to 1000 [ 532.609391][T19307] netlink: 'syz.6.3487': attribute type 11 has an invalid length. [ 532.720410][ T3571] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 533.684253][T19347] __nla_validate_parse: 76 callbacks suppressed [ 533.684274][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3493'. [ 533.938500][T19351] xt_time: unknown flags 0xf4 [ 534.091898][T19359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.457624][T19372] netlink: 'syz.6.3501': attribute type 2 has an invalid length. [ 534.694749][ T30] audit: type=1804 audit(1757042620.453:17): pid=19384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3506" name="/newroot/126/cgroup.controllers" dev="tmpfs" ino=656 res=1 errno=0 [ 534.784362][ T30] audit: type=1800 audit(1757042620.473:18): pid=19384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3506" name="cgroup.controllers" dev="tmpfs" ino=656 res=0 errno=0 [ 534.936882][T19396] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3509'. [ 535.384579][T19419] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 535.557695][T19427] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 535.623466][T19429] 8021q: VLANs not supported on caif0 [ 535.636323][T19434] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3521'. [ 535.667720][T19436] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 535.825188][T19441] netlink: 'syz.6.3523': attribute type 1 has an invalid length. [ 535.843772][T19441] netlink: 'syz.6.3523': attribute type 1 has an invalid length. [ 535.957805][T19444] ip6gre1: entered allmulticast mode [ 535.984695][T19452] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 536.072611][T19457] netlink: 'syz.7.3528': attribute type 1 has an invalid length. [ 536.083954][T19457] netlink: 'syz.7.3528': attribute type 1 has an invalid length. [ 536.148014][T19461] netlink: 'syz.6.3530': attribute type 16 has an invalid length. [ 536.164057][T19461] netlink: 'syz.6.3530': attribute type 17 has an invalid length. [ 536.247290][T19461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.299767][T17175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.376937][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 536.392017][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.564103][T19485] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3537'. [ 536.588976][T19486] netlink: 'syz.0.3538': attribute type 11 has an invalid length. [ 536.608652][T19485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3537'. [ 536.766517][T19495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3540'. [ 536.891276][T19502] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3542'. [ 537.041746][T19518] netlink: 'syz.0.3546': attribute type 1 has an invalid length. [ 537.240629][T17175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.399801][ T3553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.438218][ T3553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.838281][T19565] veth0_to_bridge: entered promiscuous mode [ 537.861923][T19561] veth0_to_bridge: left promiscuous mode [ 537.885151][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3563'. [ 537.914870][T19570] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3563'. [ 538.050190][T19576] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 538.179069][T19584] veth5: entered promiscuous mode [ 538.360273][T16944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.192060][T19637] __nla_validate_parse: 2 callbacks suppressed [ 539.192125][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3582'. [ 539.217323][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3583'. [ 539.237904][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3582'. [ 539.302076][T19637] netlink: 'syz.5.3582': attribute type 11 has an invalid length. [ 539.420413][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3584'. [ 539.443929][T19644] netlink: 'syz.1.3584': attribute type 1 has an invalid length. [ 539.480945][T19649] siw: device registration error -23 [ 539.486901][T19644] netlink: 'syz.1.3584': attribute type 2 has an invalid length. [ 539.519560][T19651] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3587'. [ 539.530316][T19649] team0: Device gtp1 is up. Set it down before adding it as a team port [ 539.614240][T19654] batadv_slave_0: entered promiscuous mode [ 539.657120][T19658] netlink: 'syz.6.3589': attribute type 1 has an invalid length. [ 539.810833][T19658] bond10: entered promiscuous mode [ 539.816507][T19658] 8021q: adding VLAN 0 to HW filter on device bond10 [ 539.887437][T19658] bond11 (unregistering): Released all slaves [ 539.948970][T19669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3592'. [ 540.133836][T19681] tipc: Enabling of bearer rejected, failed to enable media [ 540.181171][ C1] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96 [ 540.310269][T19690] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3598'. [ 540.374325][T19692] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3598'. [ 540.480429][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3601'. [ 540.562218][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3603'. [ 540.628823][ T30] audit: type=1800 audit(1757042626.383:19): pid=19705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3602" name="memory.events" dev="tmpfs" ino=896 res=0 errno=0 [ 540.665942][ T30] audit: type=1804 audit(1757042626.393:20): pid=19705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3602" name="/newroot/172/memory.events" dev="tmpfs" ino=896 res=1 errno=0 [ 540.745101][T19707] bridge_slave_1 (unregistering): left allmulticast mode [ 540.788625][T19707] bridge_slave_1 (unregistering): left promiscuous mode [ 540.805148][T19707] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.312991][T19739] netlink: 'syz.1.3614': attribute type 1 has an invalid length. [ 541.321764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.352528][T19740] netlink: 'syz.7.3615': attribute type 1 has an invalid length. [ 541.482837][T19739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 541.721209][T19754] netlink: 'syz.5.3619': attribute type 1 has an invalid length. [ 541.930666][T19759] can: request_module (can-proto-0) failed. [ 542.018745][T19769] IPv6: NLM_F_CREATE should be specified when creating new route [ 542.337281][T19792] netlink: 'syz.1.3631': attribute type 1 has an invalid length. [ 542.440155][T19792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 542.534429][T19794] bond3: (slave gretap1): making interface the new active one [ 542.551117][T19794] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 542.797811][T19811] netlink: 'syz.5.3636': attribute type 1 has an invalid length. [ 542.808258][T19807] tipc: Enabled bearer , priority 0 [ 542.823073][T19807] syzkaller0: entered promiscuous mode [ 542.828580][T19807] syzkaller0: entered allmulticast mode [ 542.995331][T19812] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 543.007441][T19812] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 543.096502][T19818] tipc: Resetting bearer [ 543.134091][T19816] gretap2: entered promiscuous mode [ 543.155107][T19816] bond7: (slave gretap2): making interface the new active one [ 543.189977][T19816] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 543.407816][T19806] tipc: Resetting bearer [ 543.500100][T19806] tipc: Disabling bearer [ 543.550585][T17173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.812259][T17173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.077888][T19851] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 544.702577][T19843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.639344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.279365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.203035][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 589.049594][T19872] pim6reg1: entered promiscuous mode [ 589.055094][T19872] pim6reg1: entered allmulticast mode [ 589.757343][T19903] __nla_validate_parse: 15 callbacks suppressed [ 589.757364][T19903] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3663'. [ 589.940856][T19911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3663'. [ 590.273337][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3664'. [ 590.294883][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3664'. [ 590.410498][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.420408][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.433029][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.467443][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.482725][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 590.491340][T19933] netlink: 'syz.0.3666': attribute type 10 has an invalid length. [ 590.554342][T19933] mac80211_hwsim hwsim37 wlan1: left allmulticast mode [ 590.576041][T19933] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 590.690856][T19925] lo speed is unknown, defaulting to 1000 [ 590.698408][T19925] hsr0 speed is unknown, defaulting to 1000 [ 590.754631][T19925] lo speed is unknown, defaulting to 1000 [ 590.763226][T19950] sctp: [Deprecated]: syz.7.3670 (pid 19950) Use of int in maxseg socket option. [ 590.763226][T19950] Use struct sctp_assoc_value instead [ 591.324412][T19971] netlink: 'syz.0.3677': attribute type 29 has an invalid length. [ 591.343981][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3677'. [ 591.453029][T19982] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3679'. [ 591.673161][T19990] netlink: 'syz.1.3683': attribute type 10 has an invalid length. [ 591.794352][T19990] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 591.839154][T20001] IPv6: addrconf: prefix option has invalid lifetime [ 591.885016][T19990] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3683'. [ 592.131827][T19925] chnl_net:caif_netlink_parms(): no params data found [ 592.347897][T19925] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.377677][T19925] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.403273][T19925] bridge_slave_0: entered allmulticast mode [ 592.459494][T19925] bridge_slave_0: entered promiscuous mode [ 592.484430][T19925] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.520000][T19925] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.520597][ T5186] Bluetooth: hci0: command tx timeout [ 592.554429][T19925] bridge_slave_1: entered allmulticast mode [ 592.566545][T19925] bridge_slave_1: entered promiscuous mode [ 592.644475][T20028] tipc: Enabled bearer , priority 0 [ 592.674776][T20032] syzkaller0: entered promiscuous mode [ 592.690318][T20032] syzkaller0: entered allmulticast mode [ 592.782479][T20016] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 592.802239][T20040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3694'. [ 592.823071][T20036] netlink: 'syz.0.3692': attribute type 11 has an invalid length. [ 592.834230][T19925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.846973][T19925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.868368][T20036] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 592.879001][T20036] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 592.937157][T20045] netlink: 'syz.5.3695': attribute type 32 has an invalid length. [ 592.961829][T20016] tipc: Resetting bearer [ 593.032919][T19925] team0: Port device team_slave_0 added [ 593.048336][T20009] tipc: Resetting bearer [ 593.123782][T20009] tipc: Disabling bearer [ 593.165728][T19925] team0: Port device team_slave_1 added [ 593.277342][T19925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.289621][T19925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.338519][T19925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.376328][T19925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.407656][T19925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.448598][T19925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.720906][T19925] hsr_slave_0: entered promiscuous mode [ 593.730341][T20082] Bluetooth: MGMT ver 1.23 [ 593.731081][T19925] hsr_slave_1: entered promiscuous mode [ 593.769969][T19925] debugfs: 'hsr0' already exists in 'hsr' [ 593.789036][T19925] Cannot create hsr debugfs directory [ 594.171040][T20109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3707'. [ 594.363370][T19925] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.419267][T19925] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.456836][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3712'. [ 594.541054][T19925] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.578112][T19925] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.615821][ T5186] Bluetooth: hci0: command tx timeout [ 594.723834][T20135] netlink: 'syz.0.3717': attribute type 30 has an invalid length. [ 594.732603][T19925] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.742773][T19925] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.768425][T20137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.843472][T20151] tipc: Enabling of bearer rejected, media not registered [ 594.866197][T20137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.916122][T19925] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.940533][T19925] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.977845][T17175] lo speed is unknown, defaulting to 1000 [ 595.026241][T20158] netlink: 'syz.0.3722': attribute type 1 has an invalid length. [ 595.147217][T20166] bond3: (slave bridge4): making interface the new active one [ 595.156446][T20166] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 595.390663][T19925] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 595.403539][T19925] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 595.425797][T19925] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 595.446761][T19925] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 595.647741][T19925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.684335][T20187] __nla_validate_parse: 1 callbacks suppressed [ 595.684355][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3731'. [ 595.705185][T19925] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.741866][T15664] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.749155][T15664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.803623][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.809641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.810884][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.881398][ T5186] Bluetooth: hci2: command 0x0401 tx timeout [ 595.916422][T19925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 595.926971][T19925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 596.000072][T20196] netlink: 'syz.5.3734': attribute type 10 has an invalid length. [ 596.061718][T20201] netlink: 'syz.5.3734': attribute type 10 has an invalid length. [ 596.438611][T20211] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3738'. [ 596.545069][T19925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.585284][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'. [ 596.591418][T20211] netlink: 'syz.5.3738': attribute type 1 has an invalid length. [ 596.606361][T20211] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3738'. [ 596.699552][ T51] Bluetooth: hci0: command tx timeout [ 596.742454][T20227] delete_channel: no stack [ 596.849442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.862413][T20230] : entered promiscuous mode [ 596.912983][T20232] netlink: 165 bytes leftover after parsing attributes in process `syz.5.3742'. [ 597.063957][T20239] netlink: 'syz.1.3743': attribute type 1 has an invalid length. [ 597.089789][T20235] netlink: 'syz.1.3743': attribute type 1 has an invalid length. [ 597.152309][T20248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.159654][T20248] IPv6: NLM_F_CREATE should be set when creating new route [ 597.176310][T20248] netlink: 252 bytes leftover after parsing attributes in process `syz.7.3744'. [ 597.366200][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3748'. [ 597.384524][T20257] netlink: 'syz.0.3749': attribute type 1 has an invalid length. [ 597.487801][T20257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 597.532117][T20266] bond4: (slave gretap1): making interface the new active one [ 597.541945][T20267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3752'. [ 597.553660][T20266] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 597.588991][T20269] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3753'. [ 597.598363][T20269] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3753'. [ 597.714023][T19925] veth0_vlan: entered promiscuous mode [ 597.778962][T19925] veth1_vlan: entered promiscuous mode [ 597.895515][T19925] veth0_macvtap: entered promiscuous mode [ 597.926509][T19925] veth1_macvtap: entered promiscuous mode [ 597.932636][T20279] netlink: 'syz.0.3758': attribute type 8 has an invalid length. [ 597.951066][T20279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.977202][T19925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.074331][T19925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.156548][T15664] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.162355][T20288] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 598.194164][T15664] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.238418][T15664] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.270076][T15664] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.395458][T20301] sctp: [Deprecated]: syz.5.3766 (pid 20301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.395458][T20301] Use struct sctp_sack_info instead [ 598.483505][T15664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.502912][T15664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.627775][T15664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.650292][T15664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.763106][ T51] Bluetooth: hci0: command tx timeout [ 598.906409][T20329] gre1: entered promiscuous mode [ 598.916761][T20329] gre1: entered allmulticast mode [ 599.495492][T20343] 8021q: adding VLAN 0 to HW filter on device bond8 [ 599.559320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.965014][ T8166] bond0: (slave syz_tun): Releasing backup interface [ 600.019015][ T5186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.042462][ T5186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.052118][ T5186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.062362][ T5186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.071456][ T5186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.353384][T20375] lo speed is unknown, defaulting to 1000 [ 600.376552][T20375] hsr0 speed is unknown, defaulting to 1000 [ 600.444438][T20375] lo speed is unknown, defaulting to 1000 [ 600.601683][T15663] bond0: (slave netdevsim0): Releasing backup interface [ 600.930564][T20408] __nla_validate_parse: 6 callbacks suppressed [ 600.930586][T20408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3799'. [ 600.949535][T20410] netlink: 'syz.1.3800': attribute type 1 has an invalid length. [ 600.984010][T20410] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3800'. [ 601.009474][T15663] : left allmulticast mode [ 601.014066][T15663] : left promiscuous mode [ 601.018719][T15663] bridge0: port 1() entered disabled state [ 601.035859][T20412] netlink: 336 bytes leftover after parsing attributes in process `syz.7.3801'. [ 601.055470][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3801'. [ 601.064683][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3802'. [ 601.112179][T20412] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3801'. [ 601.498169][T15663] bond7 (unregistering): (slave gretap2): Releasing active interface [ 601.647678][T15663] team0: Port device geneve0 removed [ 601.689606][T15663] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 602.120295][ T51] Bluetooth: hci1: command tx timeout [ 602.244761][T15663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.256209][T15663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.267165][T15663] bond0 (unregistering): (slave team0): Releasing backup interface [ 602.276304][T15663] bond0 (unregistering): Released all slaves [ 602.397537][T15663] bond1 (unregistering): (slave bond2): Releasing backup interface [ 602.405894][T15663] bond2 (unregistering): left promiscuous mode [ 602.412974][T15663] bond1 (unregistering): Released all slaves [ 602.528744][T15663] bond2 (unregistering): Released all slaves [ 602.647095][T15663] bond3 (unregistering): (slave bond4): Releasing backup interface [ 602.655130][T15663] bond4 (unregistering): left promiscuous mode [ 602.661419][T15663] bond4 (unregistering): left allmulticast mode [ 602.668392][T15663] bond3 (unregistering): Released all slaves [ 602.792356][T15663] bond4 (unregistering): Released all slaves [ 602.810365][T15663] bond5 (unregistering): Released all slaves [ 602.827205][T15663] bond6 (unregistering): Released all slaves [ 602.847993][T15663] bond7 (unregistering): Released all slaves [ 603.010108][T20430] bridge_slave_0: left allmulticast mode [ 603.027881][T20430] bridge_slave_0: left promiscuous mode [ 603.065783][T20430] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.094084][T20430] bridge_slave_1: left allmulticast mode [ 603.107415][T20430] bridge_slave_1: left promiscuous mode [ 603.119532][T20430] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.151735][T20430] bond0: (slave bond_slave_0): Releasing backup interface [ 603.176104][T20430] bond0: (slave bond_slave_1): Releasing backup interface [ 603.225110][T20430] team0: Port device team_slave_0 removed [ 603.237996][T20430] team0: Port device team_slave_1 removed [ 603.247777][T20430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.255452][T20430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.266029][T20430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.276818][T20430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.805659][T20471] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3814'. [ 603.855274][T20471] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3814'. [ 604.071713][T20375] chnl_net:caif_netlink_parms(): no params data found [ 604.199670][ T51] Bluetooth: hci1: command tx timeout [ 604.223992][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3819'. [ 604.355380][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dd3dc00: rx timeout, send abort [ 604.402872][T20375] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.412390][T20375] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.419949][T20375] bridge_slave_0: entered allmulticast mode [ 604.428366][T20375] bridge_slave_0: entered promiscuous mode [ 604.437612][T20375] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.446206][T20375] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.461931][T20375] bridge_slave_1: entered allmulticast mode [ 604.471202][T20375] bridge_slave_1: entered promiscuous mode [ 604.538056][T20375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.582624][T20375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.615708][T15663] tipc: Left network mode [ 604.817704][T20375] team0: Port device team_slave_0 added [ 604.855516][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dd3e000: rx timeout, send abort [ 604.912883][T20375] team0: Port device team_slave_1 added [ 605.018076][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3827'. [ 605.176352][T20530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.272627][T20375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.289504][T20375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.347767][T20375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.363820][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dd3e000: abort rx timeout. Force session deactivation [ 605.496728][T20375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.514277][T20375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.541081][T20375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.766844][T20375] hsr_slave_0: entered promiscuous mode [ 605.784586][T20375] hsr_slave_1: entered promiscuous mode [ 605.791377][T20375] debugfs: 'hsr0' already exists in 'hsr' [ 605.798617][T20375] Cannot create hsr debugfs directory [ 606.182070][T20556] bond0: (slave wlan1): Releasing backup interface [ 606.211384][T20556] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 606.286639][ T51] Bluetooth: hci1: command tx timeout [ 606.445399][T20575] __nla_validate_parse: 4 callbacks suppressed [ 606.445420][T20575] netlink: 51 bytes leftover after parsing attributes in process `syz.7.3841'. [ 606.601001][T15663] hsr_slave_0: left promiscuous mode [ 606.635813][T15663] hsr_slave_1: left promiscuous mode [ 606.653432][T15663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.684651][T15663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.066331][T20601] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.3851'. [ 607.632951][T15663] team0 (unregistering): Port device team_slave_1 removed [ 607.681313][T15663] team0 (unregistering): Port device team_slave_0 removed [ 607.977633][T20602] syzkaller1: entered promiscuous mode [ 607.994645][T20602] syzkaller1: entered allmulticast mode [ 608.212676][T20627] netlink: 'syz.1.3858': attribute type 2 has an invalid length. [ 608.249257][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3858'. [ 608.276601][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3857'. [ 608.335926][T20633] netlink: 'syz.0.3860': attribute type 10 has an invalid length. [ 608.359392][ T51] Bluetooth: hci1: command tx timeout [ 608.582923][T20642] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 608.737660][T20648] tipc: Enabled bearer , priority 0 [ 608.764847][T20650] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 608.823098][T15663] IPVS: stop unused estimator thread 0... [ 608.881583][T20655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3867'. [ 609.080653][T20668] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3870'. [ 609.099632][T20668] unsupported nlmsg_type 40 [ 609.267210][T20680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.299216][T20375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 609.343499][T20375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 609.373756][T20680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.376495][T20375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 609.416000][T20375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 609.711220][T20699] netlink: 'syz.0.3877': attribute type 29 has an invalid length. [ 609.831997][T20375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.849351][T20699] netlink: 'syz.0.3877': attribute type 1 has an invalid length. [ 609.888108][T20699] netlink: 'syz.0.3877': attribute type 1 has an invalid length. [ 609.903725][T20375] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.915889][T20699] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3877'. [ 609.937685][T20699] netlink: 'syz.0.3877': attribute type 1 has an invalid length. [ 609.947410][T20708] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3880'. [ 609.971576][T15862] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.978864][T15862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.991108][T20710] IPVS: length: 8 != 1152 [ 610.022844][T15862] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.030145][T15862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.058447][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3880'. [ 610.142860][T20714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3882'. [ 610.391092][T20729] ieee802154 phy0 wpan0: encryption failed: -22 [ 610.867095][T20375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.904026][T20760] netlink: 'syz.0.3895': attribute type 23 has an invalid length. [ 611.452335][T20787] __nla_validate_parse: 2 callbacks suppressed [ 611.452356][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3900'. [ 611.525895][T20375] veth0_vlan: entered promiscuous mode [ 611.557718][T20375] veth1_vlan: entered promiscuous mode [ 611.674081][T20375] veth0_macvtap: entered promiscuous mode [ 611.756665][T20375] veth1_macvtap: entered promiscuous mode [ 611.863678][T20375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.914957][T20375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.954128][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.994022][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.034257][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.057726][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3904'. [ 612.080851][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.272860][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.299138][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.352624][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 612.378906][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.396977][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.670802][T20835] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3912'. [ 612.693320][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3912'. [ 612.908177][T20842] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 613.360497][T20856] ksmbd: Unknown IPC event: 4, ignore. [ 613.688722][ T5186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 613.700442][ T5186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 613.710223][ T5186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 613.730658][ T5186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 613.741872][ T5186] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 613.937531][T20847] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 613.951913][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3927'. [ 613.991051][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3928'. [ 614.025917][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3928'. [ 614.077710][T20875] netlink: 'syz.5.3928': attribute type 14 has an invalid length. [ 614.127663][T20875] netlink: 'syz.5.3928': attribute type 13 has an invalid length. [ 614.232431][T20867] lo speed is unknown, defaulting to 1000 [ 614.246333][T20867] lo speed is unknown, defaulting to 1000 [ 614.836218][T20911] netlink: 'syz.6.3939': attribute type 39 has an invalid length. [ 615.002606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.037152][T20912] bond0: (slave team0): Releasing backup interface [ 615.051770][T20912] team0 (unregistering): Port device team_slave_0 removed [ 615.062829][T20912] team0 (unregistering): Port device team_slave_1 removed [ 615.077686][T20912] team0 (unregistering): Port device geneve0 removed [ 615.135497][T20915] geneve2: entered promiscuous mode [ 615.144307][T20915] geneve2: entered allmulticast mode [ 615.157788][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.188843][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.254700][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.265720][ T3571] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.372992][ T3571] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 615.392658][ T3571] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 615.422480][ T3571] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 615.446506][ T3571] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 615.584614][T20935] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 615.623210][T20935] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 615.796633][T20867] chnl_net:caif_netlink_parms(): no params data found [ 615.800633][ T51] Bluetooth: hci3: command tx timeout [ 615.897412][T20949] team0: Mode changed to "broadcast" [ 616.054210][T20867] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.061599][T20867] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.068867][T20867] bridge_slave_0: entered allmulticast mode [ 616.098962][T20867] bridge_slave_0: entered promiscuous mode [ 616.126927][T20867] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.146448][T20867] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.164205][T20867] bridge_slave_1: entered allmulticast mode [ 616.180214][T20867] bridge_slave_1: entered promiscuous mode [ 616.337512][T20867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.377766][T20867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.406054][T20974] IPVS: Error connecting to the multicast addr [ 616.536355][T20979] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3960'. [ 616.547170][T20979] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 616.616266][T20867] team0: Port device team_slave_0 added [ 616.619485][T20977] nbd1: detected capacity change from 0 to 63 [ 616.628368][T20980] block nbd1: NBD_DISCONNECT [ 616.639363][T20867] team0: Port device team_slave_1 added [ 616.652492][T20980] block nbd1: Disconnected due to user request. [ 616.670757][T20980] block nbd1: shutting down sockets [ 616.754595][T20867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.769599][T20867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.831531][T20867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.850414][T20867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.857549][T20867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.892693][T20867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.158659][T21010] IPVS: length: 8 != 1152 [ 617.263513][T20993] team0 (unregistering): Port device team_slave_0 removed [ 617.290939][T20993] team0 (unregistering): Port device team_slave_1 removed [ 617.374931][T21007] tipc: Enabling of bearer rejected, already enabled [ 617.389374][T21008] netlink: 'syz.1.3967': attribute type 4 has an invalid length. [ 617.462724][T21018] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 617.532384][T20997] tipc: Resetting bearer [ 617.672183][T20867] hsr_slave_0: entered promiscuous mode [ 617.684390][T20867] hsr_slave_1: entered promiscuous mode [ 617.803074][T21036] netlink: 'syz.0.3974': attribute type 1 has an invalid length. [ 617.848365][T21037] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 617.880425][ T51] Bluetooth: hci3: command tx timeout [ 617.961346][T21036] ip6tnl1: entered promiscuous mode [ 617.966627][T21036] ip6tnl1: entered allmulticast mode [ 618.050775][T21044] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3979'. [ 618.244937][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3981'. [ 618.264625][T21053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3981'. [ 618.388031][T20867] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.413462][T20867] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 618.436741][T20867] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 618.489346][T21057] lo speed is unknown, defaulting to 1000 [ 618.506020][T21057] lo speed is unknown, defaulting to 1000 [ 618.531246][T20867] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.560498][T20867] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 618.588896][T20867] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 618.681812][T20867] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.702204][T20867] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 618.735021][T20867] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 618.847860][T20867] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.880751][T20867] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 618.903656][T20867] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 618.996208][T21076] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 619.153103][T21082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3990'. [ 619.360022][T20867] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 619.436893][T20867] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 619.563178][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3993'. [ 619.575979][T20867] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 619.636718][T20867] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 619.784835][T21099] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3997'. [ 619.834002][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 619.870430][T21099] netlink: 'syz.1.3997': attribute type 30 has an invalid length. [ 619.921235][T21099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3997'. [ 619.959749][ T51] Bluetooth: hci3: command tx timeout [ 620.065423][T20867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.081931][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3999'. [ 620.151334][T20867] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.166575][T21111] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 620.195343][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.210876][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.263686][T15663] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.270938][T15663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.318709][T21127] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 620.357136][T21127] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 620.406757][T21132] netlink: 'syz.0.4002': attribute type 1 has an invalid length. [ 620.444997][T21132] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 620.702362][T21146] netlink: 'syz.0.4007': attribute type 1 has an invalid length. [ 620.868916][T21162] netlink: 'syz.1.4013': attribute type 4 has an invalid length. [ 620.885014][T21157] bond6: (slave geneve4): making interface the new active one [ 620.893352][T21157] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 620.903289][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 620.939224][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 620.956657][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 620.959695][T21164] netlink: 'syz.1.4013': attribute type 1 has an invalid length. [ 620.970882][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 621.013155][T21168] tipc: Resetting bearer [ 621.025363][T21168] tipc: Resetting bearer [ 621.073714][T21168] netlink: 'syz.0.4014': attribute type 16 has an invalid length. [ 621.096637][T21168] netlink: 'syz.0.4014': attribute type 17 has an invalid length. [ 621.116427][T21165] IPVS: Error connecting to the multicast addr [ 621.252442][T21168] syz_tun: left promiscuous mode [ 621.287614][T21168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.306947][T21168] bridge0: port 3(dummy0) entered blocking state [ 621.313679][T21168] bridge0: port 3(dummy0) entered forwarding state [ 621.326779][T21168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.416768][T21183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.440386][T21168] batadv_slave_0: left promiscuous mode [ 621.446918][T21168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.458433][T21168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.474524][T21168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 621.487259][T21168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.514337][T21168] veth0_macvtap: left promiscuous mode [ 621.521544][T21168] veth0_macvtap: entered promiscuous mode [ 621.528548][T21168] veth1_macvtap: entered promiscuous mode [ 621.548565][T21168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 621.556760][T21168] bond_slave_0: entered promiscuous mode [ 621.562880][T21168] bond_slave_1: entered promiscuous mode [ 621.568611][T21168] syz_tun: entered promiscuous mode [ 621.574177][T21168] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 621.589722][T17175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.600880][T21168] bond1: (slave macvlan0): unknown ethtool speed (30000) for port 1 (set it to 0) [ 621.610407][T21168] bond1: (slave macvlan0): speed changed to 0 on port 1 [ 621.620461][T21168] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 621.638419][T21168] geneve2: left promiscuous mode [ 621.644093][T21168] geneve2: left allmulticast mode [ 621.686979][T21168] veth5: left allmulticast mode [ 621.703885][T21168] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 621.713016][T21168] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 621.725916][T21168] tipc: Resetting bearer [ 621.734145][T21168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 621.745215][T21168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 621.769576][T21168] 8021q: adding VLAN 0 to HW filter on device bond5 [ 621.782175][T21168] 8021q: adding VLAN 0 to HW filter on device bond6 [ 621.802664][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.809888][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.836054][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.843553][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.908094][ T3553] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 621.932935][ T3553] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 621.961592][ T3553] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 621.980029][ T3553] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 622.002982][T20867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.042078][ T51] Bluetooth: hci3: command tx timeout [ 622.176497][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.210707][T21201] vxcan0: tx address claim with dlc 0 [ 622.333069][T21204] __nla_validate_parse: 5 callbacks suppressed [ 622.333090][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4025'. [ 622.388853][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.409078][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4025'. [ 622.425993][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.450461][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.458919][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.500154][T21213] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4028'. [ 622.519345][T17172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.532765][T21207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4026'. [ 622.801872][T21229] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4030'. [ 622.881806][T21229] openvswitch: netlink: Actions may not be safe on all matching packets [ 622.934769][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 623.001688][T21229] netlink: 'syz.0.4030': attribute type 5 has an invalid length. [ 623.012498][T21235] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 623.040515][T21229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4030'. [ 623.087929][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4033'. [ 623.105869][T21229] geneve5: entered promiscuous mode [ 623.115931][T21229] geneve5: entered allmulticast mode [ 623.150749][T21240] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4035'. [ 623.168615][T15663] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 256 - 0 [ 623.178320][T15663] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 256 - 0 [ 623.192393][T15663] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 256 - 0 [ 623.239908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.255952][T15663] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 256 - 0 [ 623.291230][T20867] veth0_vlan: entered promiscuous mode [ 623.327558][ T3553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.360889][ T3553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.415952][T20867] veth1_vlan: entered promiscuous mode [ 623.441993][T21246] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4040'. [ 623.522415][T20867] veth0_macvtap: entered promiscuous mode [ 623.553193][T20867] veth1_macvtap: entered promiscuous mode [ 623.773469][T20867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.874104][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.903999][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.938648][T20867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.948352][T21271] netlink: 'syz.5.4048': attribute type 1 has an invalid length. [ 623.955389][T21273] "syz.1.4049" (21273) uses obsolete ecb(arc4) skcipher [ 623.957837][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.115274][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.125309][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.158580][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.182718][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.231650][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.277042][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.480107][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.511195][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.552329][T21294] macvtap1: entered promiscuous mode [ 624.557880][T21294] erspan0: entered promiscuous mode [ 624.564158][T21294] macvtap1: entered allmulticast mode [ 624.571126][T21294] erspan0: entered allmulticast mode [ 624.597699][T21294] erspan0: left allmulticast mode [ 624.604441][T21294] erspan0: left promiscuous mode [ 624.682998][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.699324][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.886562][T21307] netlink: 'syz.7.3914': attribute type 5 has an invalid length. [ 624.922776][T21312] tipc: Enabled bearer , priority 0 [ 624.931514][T21312] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 624.949616][T21312] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 624.965467][T21314] sctp: [Deprecated]: syz.0.4058 (pid 21314) Use of int in max_burst socket option. [ 624.965467][T21314] Use struct sctp_assoc_value instead [ 624.985029][T21312] tipc: Resetting bearer [ 625.738599][T21343] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 625.762303][T21341] gretap1: entered promiscuous mode [ 626.899026][T21408] net_ratelimit: 3 callbacks suppressed [ 626.899047][T21408] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 626.941034][T21413] openvswitch: netlink: IP tunnel dst address not specified [ 626.948710][T21413] openvswitch: netlink: IP tunnel dst address not specified [ 627.000199][ T51] Bluetooth: hci3: command tx timeout [ 627.016458][T21413] openvswitch: netlink: IP tunnel dst address not specified [ 627.031188][T21413] openvswitch: netlink: IP tunnel dst address not specified [ 627.047559][T21413] openvswitch: netlink: IP tunnel dst address not specified [ 627.056486][T21417] netlink: 'syz.1.4095': attribute type 4 has an invalid length. [ 627.060425][T21413] openvswitch: netlink: IP tunnel dst address not specified [ 627.072346][T21413] openvswitch: netlink: IP tunnel dst address not specified [ 627.081889][T21413] openvswitch: netlink: IP tunnel dst address not specified [ 627.129592][T21413] openvswitch: netlink: IP tunnel dst address not specified [ 627.190359][T21420] veth1_to_bond: entered allmulticast mode [ 627.295882][T21420] bond0: (slave bond_slave_1): Releasing backup interface [ 627.392501][T21420] veth1_to_bond (unregistering): left allmulticast mode [ 627.689962][T21437] __nla_validate_parse: 15 callbacks suppressed [ 627.689984][T21437] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4102'. [ 627.723417][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 627.754023][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4102'. [ 627.787456][T21437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4102'. [ 627.794196][T21442] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.4103'. [ 628.132039][T21450] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4106'. [ 628.166793][T21450] vlan2: entered promiscuous mode [ 628.167560][T21454] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4108'. [ 628.186172][T21450] dummy0: entered promiscuous mode [ 628.222913][T21454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4108'. [ 628.450800][T21471] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.4115'. [ 628.471979][T21471] sctp: [Deprecated]: syz.0.4115 (pid 21471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 628.471979][T21471] Use struct sctp_sack_info instead [ 628.600229][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 628.763126][T21482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.794746][T21482] batadv_slave_0: entered promiscuous mode [ 628.887980][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4118'. [ 629.006845][T21482] dummy0: left allmulticast mode [ 629.023753][T21482] dummy0: left promiscuous mode [ 629.028987][T21482] bridge0: port 3(dummy0) entered disabled state [ 629.050526][T21482] bridge_slave_1: left allmulticast mode [ 629.060841][T21482] bridge_slave_1: left promiscuous mode [ 629.066734][T21482] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.096884][T21482] bridge_slave_0: left allmulticast mode [ 629.103922][T21482] bridge_slave_0: left promiscuous mode [ 629.120158][T21482] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.214836][T21501] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4123'. [ 629.231267][T21486] lo speed is unknown, defaulting to 1000 [ 629.239419][T21486] lo speed is unknown, defaulting to 1000 [ 629.239914][T21509] batadv_slave_1: entered promiscuous mode [ 629.340123][T21508] batadv_slave_1: left promiscuous mode [ 629.495773][T21523] netlink: 'syz.1.4129': attribute type 1 has an invalid length. [ 629.662835][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.116766][T21646] lo speed is unknown, defaulting to 1000 [ 632.162459][T21646] lo speed is unknown, defaulting to 1000 [ 632.469498][T21667] syzkaller1: entered promiscuous mode [ 632.475114][T21667] syzkaller1: entered allmulticast mode [ 632.519459][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 632.678210][T21674] netlink: 'syz.0.4172': attribute type 1 has an invalid length. [ 632.737629][T21674] 8021q: adding VLAN 0 to HW filter on device bond8 [ 632.765638][T21675] bond8: (slave gretap2): making interface the new active one [ 632.780705][T21675] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 633.634583][T21713] netlink: 'syz.0.4183': attribute type 1 has an invalid length. [ 633.670810][T21713] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 633.689384][T21713] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 633.728421][T21719] __nla_validate_parse: 5 callbacks suppressed [ 633.728443][T21719] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4184'. [ 634.572937][T21758] tipc: Started in network mode [ 634.585137][T21758] tipc: Node identity 46b42e4daf3a, cluster identity 4711 [ 634.607568][T21758] tipc: Enabled bearer , priority 0 [ 634.620372][T21758] syzkaller0: entered promiscuous mode [ 634.627099][T21758] syzkaller0: entered allmulticast mode [ 634.642244][T21760] netlink: 788 bytes leftover after parsing attributes in process `syz.1.4198'. [ 634.733512][T21766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4198'. [ 634.867423][T21771] netlink: 'syz.6.4200': attribute type 11 has an invalid length. [ 634.888156][T21773] net_ratelimit: 59 callbacks suppressed [ 634.888176][T21773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.909861][T21771] netlink: 'syz.6.4200': attribute type 11 has an invalid length. [ 634.909884][T21771] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4200'. [ 635.013044][T21755] tipc: Resetting bearer [ 635.064590][T21755] tipc: Disabling bearer [ 635.085743][T21779] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4202'. [ 635.102149][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'. [ 635.268641][T21788] ip6erspan0: entered promiscuous mode [ 635.274800][T21788] ip6erspan0: entered allmulticast mode [ 635.394996][T21796] tipc: Enabling of bearer rejected, already enabled [ 635.421737][T21797] IPVS: Unknown mcast interface: vcan0 [ 635.432871][T21799] sctp: [Deprecated]: syz.5.4207 (pid 21799) Use of int in maxseg socket option. [ 635.432871][T21799] Use struct sctp_assoc_value instead [ 635.444589][T21797] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4208'. [ 635.502516][T21797] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4208'. [ 635.916510][T21823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4218'. [ 635.979346][T21825] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4219'. [ 636.042094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.152697][T21835] netlink: 'syz.1.4221': attribute type 1 has an invalid length. [ 636.231013][T21797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 636.237053][T21797] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 636.255936][T21835] bond5: (slave bridge3): making interface the new active one [ 636.268278][T21835] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 636.316466][T21797] tipc: Resetting bearer [ 636.436064][T21797] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 636.461004][T21797] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 636.753672][T21868] netlink: 'syz.6.4233': attribute type 11 has an invalid length. [ 636.782588][T21797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 636.793761][T21797] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 636.880172][ T5867] IPVS: starting estimator thread 0... [ 636.924915][T21797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 636.931315][T21797] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 636.980547][T21874] IPVS: using max 25 ests per chain, 60000 per kthread [ 637.482582][T21901] netlink: 'syz.7.4243': attribute type 8 has an invalid length. [ 638.600142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.519306][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 653.320328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.879428][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 665.479640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.679402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.721116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.319508][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 688.519919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.082738][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 732.040776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.399356][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 752.528939][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 762.759894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.479424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.319697][ T31] INFO: task kworker/1:19:16938 blocked for more than 143 seconds. [ 797.327676][ T31] Not tainted syzkaller #0 [ 797.332791][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 797.341539][ T31] task:kworker/1:19 state:D stack:22856 pid:16938 tgid:16938 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 797.354213][ T31] Workqueue: events rfkill_sync_work [ 797.359627][ T31] Call Trace: [ 797.362925][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 797.365867][ T31] __schedule+0x1798/0x4cc0 [ 797.370811][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 797.376242][ T31] ? __pfx___schedule+0x10/0x10 [ 797.385558][ T31] ? schedule+0x91/0x360 [ 797.395160][ T31] schedule+0x165/0x360 [ 797.407367][ T31] schedule_preempt_disabled+0x13/0x30 [ 797.442190][ T31] __mutex_lock+0x7e6/0x1350 [ 797.446848][ T31] ? __mutex_lock+0x5bb/0x1350 [ 797.479185][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 797.484537][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 797.503470][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 797.508735][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 797.529225][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 797.535622][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 797.559174][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 797.564349][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 797.579085][ T31] rfkill_set_block+0x1cf/0x440 [ 797.584018][ T31] rfkill_sync_work+0x114/0x200 [ 797.588902][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 797.609060][ T31] process_scheduled_works+0xae1/0x17b0 [ 797.614729][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 797.621988][ T31] worker_thread+0x8a0/0xda0 [ 797.626642][ T31] kthread+0x70e/0x8a0 [ 797.630801][ T31] ? __pfx_worker_thread+0x10/0x10 [ 797.635956][ T31] ? __pfx_kthread+0x10/0x10 [ 797.640846][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 797.646091][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 797.652467][ T31] ? __pfx_kthread+0x10/0x10 [ 797.657104][ T31] ret_from_fork+0x3f9/0x770 [ 797.663344][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 797.668506][ T31] ? __switch_to_asm+0x39/0x70 [ 797.679273][ T31] ? __switch_to_asm+0x33/0x70 [ 797.684095][ T31] ? __pfx_kthread+0x10/0x10 [ 797.688715][ T31] ret_from_fork_asm+0x1a/0x30 [ 797.699551][ T31] [ 797.702661][ T31] INFO: task syz.5.4235:21873 blocked for more than 143 seconds. [ 797.711162][ T31] Not tainted syzkaller #0 [ 797.716118][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 797.725104][ T31] task:syz.5.4235 state:D stack:25096 pid:21873 tgid:21873 ppid:20375 task_flags:0x400040 flags:0x00004006 [ 797.737208][ T31] Call Trace: [ 797.740665][ T31] [ 797.743630][ T31] __schedule+0x1798/0x4cc0 [ 797.748171][ T31] ? validate_chain+0x897/0x2140 [ 797.753373][ T31] ? __lock_acquire+0xab9/0xd20 [ 797.758257][ T31] ? __pfx___schedule+0x10/0x10 [ 797.763239][ T31] ? schedule+0x91/0x360 [ 797.767544][ T31] schedule+0x165/0x360 [ 797.771850][ T31] schedule_timeout+0x9a/0x270 [ 797.776642][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 797.782184][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 797.787403][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 797.792898][ T31] ? wait_for_completion+0x267/0x5d0 [ 797.798214][ T31] wait_for_completion+0x2bf/0x5d0 [ 797.803856][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 797.809691][ T31] ? __flush_work+0xd2/0xbc0 [ 797.814359][ T31] ? __flush_work+0xd2/0xbc0 [ 797.818996][ T31] __flush_work+0x9b9/0xbc0 [ 797.823821][ T31] ? __flush_work+0xd2/0xbc0 [ 797.828452][ T31] ? __pfx___flush_work+0x10/0x10 [ 797.833648][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 797.838970][ T31] ? __pfx___cancel_work+0x10/0x10 [ 797.845695][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 797.852632][ T31] __cancel_work_sync+0xbe/0x110 [ 797.857616][ T31] rfkill_unregister+0x92/0x220 [ 797.862563][ T31] nfc_unregister_device+0x96/0x2a0 [ 797.867781][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 797.874727][ T31] virtual_ncidev_close+0x56/0x90 [ 797.880009][ T31] __fput+0x44c/0xa70 [ 797.884210][ T31] task_work_run+0x1d4/0x260 [ 797.888860][ T31] ? __pfx_task_work_run+0x10/0x10 [ 797.894098][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 797.899758][ T31] exit_to_user_mode_loop+0xec/0x110 [ 797.905090][ T31] do_syscall_64+0x2bd/0x3b0 [ 797.909874][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 797.915109][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.921403][ T31] ? clear_bhb_loop+0x60/0xb0 [ 797.926122][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.933724][ T31] RIP: 0033:0x7fb1d4b8ebe9 [ 797.938172][ T31] RSP: 002b:00007ffcc0182be8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 797.946825][ T31] RAX: 0000000000000000 RBX: 00007fb1d4dc7da0 RCX: 00007fb1d4b8ebe9 [ 797.954989][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 797.963380][ T31] RBP: 00007fb1d4dc7da0 R08: 0000000000000098 R09: 00000008c0182edf [ 797.971518][ T31] R10: 00000000003ffd44 R11: 0000000000000246 R12: 000000000009badb [ 797.980675][ T31] R13: 00007fb1d4dc6090 R14: ffffffffffffffff R15: 00007ffcc0182d00 [ 797.988689][ T31] [ 797.991890][ T31] INFO: task syz.0.4236:21882 blocked for more than 144 seconds. [ 798.001505][ T31] Not tainted syzkaller #0 [ 798.006473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 798.018097][ T31] task:syz.0.4236 state:D stack:23912 pid:21882 tgid:21881 ppid:16452 task_flags:0x400140 flags:0x00004004 [ 798.032394][ T31] Call Trace: [ 798.035707][ T31] [ 798.038677][ T31] __schedule+0x1798/0x4cc0 [ 798.044281][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.049293][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.054236][ T31] ? __pfx___schedule+0x10/0x10 [ 798.059237][ T31] ? schedule+0x91/0x360 [ 798.063521][ T31] schedule+0x165/0x360 [ 798.067714][ T31] schedule_preempt_disabled+0x13/0x30 [ 798.073396][ T31] __mutex_lock+0x7e6/0x1350 [ 798.078009][ T31] ? rcu_is_watching+0x15/0xb0 [ 798.082869][ T31] ? __mutex_lock+0x5bb/0x1350 [ 798.087648][ T31] ? rfkill_register+0x37/0x8e0 [ 798.092586][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 798.097636][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 798.102658][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.107886][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 798.113329][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 798.119043][ T31] rfkill_register+0x37/0x8e0 [ 798.123790][ T31] wiphy_register+0x214c/0x28d0 [ 798.128701][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 798.134195][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 798.139433][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 798.145539][ T31] ieee80211_register_hw+0x3484/0x4100 [ 798.151186][ T31] ? ieee80211_register_hw+0x1411/0x4100 [ 798.156847][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 798.162743][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 798.169164][ T31] ? __hrtimer_setup+0x187/0x210 [ 798.174134][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 798.180036][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 798.185804][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 798.191275][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 798.197384][ T31] ? __nla_validate_parse+0x251c/0x2d40 [ 798.203045][ T31] ? __sock_sendmsg+0x21c/0x270 [ 798.207944][ T31] ? ____sys_sendmsg+0x505/0x830 [ 798.212941][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 798.218104][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 798.223898][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 798.229604][ T31] ? __nla_parse+0x40/0x60 [ 798.234072][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 798.240626][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 798.246238][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 798.252409][ T31] ? bpf_lsm_capable+0x9/0x20 [ 798.257124][ T31] ? security_capable+0x7e/0x2e0 [ 798.262182][ T31] genl_rcv_msg+0x60e/0x790 [ 798.266752][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.271965][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 798.277560][ T31] ? __asan_memcpy+0x40/0x70 [ 798.282628][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 798.288057][ T31] netlink_rcv_skb+0x205/0x470 [ 798.292888][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.297779][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.303109][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 798.308450][ T31] ? down_read+0x1ad/0x2e0 [ 798.313093][ T31] genl_rcv+0x28/0x40 [ 798.317118][ T31] netlink_unicast+0x82c/0x9e0 [ 798.322047][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 798.327467][ T31] ? netlink_sendmsg+0x642/0xb30 [ 798.332503][ T31] ? skb_put+0x11b/0x210 [ 798.336799][ T31] netlink_sendmsg+0x805/0xb30 [ 798.341679][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.347003][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 798.352106][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 798.357433][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.362848][ T31] __sock_sendmsg+0x21c/0x270 [ 798.367569][ T31] ____sys_sendmsg+0x505/0x830 [ 798.372415][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.377741][ T31] ? import_iovec+0x74/0xa0 [ 798.382311][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 798.387028][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.392510][ T31] ? __fget_files+0x2a/0x420 [ 798.397146][ T31] ? __fget_files+0x3a0/0x420 [ 798.402006][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 798.406986][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.412573][ T31] ? rcu_is_watching+0x15/0xb0 [ 798.417458][ T31] ? do_syscall_64+0xbe/0x3b0 [ 798.422202][ T31] do_syscall_64+0xfa/0x3b0 [ 798.426739][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.432117][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.438202][ T31] ? clear_bhb_loop+0x60/0xb0 [ 798.443101][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.449059][ T31] RIP: 0033:0x7f596c58ebe9 [ 798.453519][ T31] RSP: 002b:00007f596d377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.463037][ T31] RAX: ffffffffffffffda RBX: 00007f596c7c5fa0 RCX: 00007f596c58ebe9 [ 798.471202][ T31] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 798.479287][ T31] RBP: 00007f596c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 798.487435][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.495492][ T31] R13: 00007f596c7c6038 R14: 00007f596c7c5fa0 R15: 00007ffdcd1fa588 [ 798.503590][ T31] [ 798.506726][ T31] INFO: task syz.6.4240:21892 blocked for more than 144 seconds. [ 798.514846][ T31] Not tainted syzkaller #0 [ 798.519962][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 798.528661][ T31] task:syz.6.4240 state:D stack:28616 pid:21892 tgid:21891 ppid:19925 task_flags:0x400040 flags:0x00004004 [ 798.540659][ T31] Call Trace: [ 798.543956][ T31] [ 798.546894][ T31] __schedule+0x1798/0x4cc0 [ 798.551580][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.556489][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.561496][ T31] ? __pfx___schedule+0x10/0x10 [ 798.566390][ T31] ? schedule+0x91/0x360 [ 798.572895][ T31] schedule+0x165/0x360 [ 798.577100][ T31] schedule_preempt_disabled+0x13/0x30 [ 798.583237][ T31] __mutex_lock+0x7e6/0x1350 [ 798.587856][ T31] ? __mutex_lock+0x5bb/0x1350 [ 798.593648][ T31] ? genl_rcv_msg+0x10d/0x790 [ 798.598367][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 798.603901][ T31] ? stack_trace_save+0x9c/0xe0 [ 798.608791][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 798.614289][ T31] ? radix_tree_lookup+0x240/0x290 [ 798.620640][ T31] genl_rcv_msg+0x10d/0x790 [ 798.625173][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.630173][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.636391][ T31] netlink_rcv_skb+0x205/0x470 [ 798.642351][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.647366][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.652560][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 798.657904][ T31] ? down_read+0x1ad/0x2e0 [ 798.662447][ T31] genl_rcv+0x28/0x40 [ 798.666464][ T31] netlink_unicast+0x82c/0x9e0 [ 798.671429][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 798.676753][ T31] ? netlink_sendmsg+0x642/0xb30 [ 798.682962][ T31] ? skb_put+0x11b/0x210 [ 798.687283][ T31] netlink_sendmsg+0x805/0xb30 [ 798.692165][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.697492][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 798.703507][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 798.708838][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.714334][ T31] __sock_sendmsg+0x21c/0x270 [ 798.719140][ T31] __sys_sendto+0x3bd/0x520 [ 798.723802][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 798.728896][ T31] ? count_memcg_event_mm+0x21/0x260 [ 798.734584][ T31] ? exc_page_fault+0x76/0xf0 [ 798.739428][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 798.744766][ T31] __x64_sys_sendto+0xde/0x100 [ 798.749765][ T31] do_syscall_64+0xfa/0x3b0 [ 798.754291][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.759628][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.765716][ T31] ? clear_bhb_loop+0x60/0xb0 [ 798.770666][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.776584][ T31] RIP: 0033:0x7f2421590a7c [ 798.781350][ T31] RSP: 002b:00007f24223c3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 798.790836][ T31] RAX: ffffffffffffffda RBX: 00007f24223c3fc0 RCX: 00007f2421590a7c [ 798.799487][ T31] RDX: 0000000000000020 RSI: 00007f24223c4010 RDI: 0000000000000003 [ 798.807493][ T31] RBP: 0000000000000000 R08: 00007f24223c3f14 R09: 000000000000000c [ 798.815884][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 798.824090][ T31] R13: 00007f24223c3f68 R14: 00007f24223c4010 R15: 0000000000000000 [ 798.832382][ T31] [ 798.835451][ T31] INFO: task syz.1.4244:21906 blocked for more than 144 seconds. [ 798.843697][ T31] Not tainted syzkaller #0 [ 798.848661][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 798.857626][ T31] task:syz.1.4244 state:D stack:26920 pid:21906 tgid:21905 ppid:16828 task_flags:0x400140 flags:0x00004004 [ 798.871125][ T31] Call Trace: [ 798.874437][ T31] [ 798.877397][ T31] __schedule+0x1798/0x4cc0 [ 798.882070][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.886973][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.891978][ T31] ? __pfx___schedule+0x10/0x10 [ 798.896861][ T31] ? schedule+0x91/0x360 [ 798.901195][ T31] schedule+0x165/0x360 [ 798.905386][ T31] schedule_preempt_disabled+0x13/0x30 [ 798.911240][ T31] __mutex_lock+0x7e6/0x1350 [ 798.915870][ T31] ? __mutex_lock+0x5bb/0x1350 [ 798.922162][ T31] ? genl_rcv_msg+0x10d/0x790 [ 798.926887][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 798.932961][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 798.938141][ T31] ? radix_tree_lookup+0x240/0x290 [ 798.943372][ T31] genl_rcv_msg+0x10d/0x790 [ 798.947916][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.953157][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 798.958207][ T31] ? __asan_memcpy+0x40/0x70 [ 798.962832][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 798.968340][ T31] netlink_rcv_skb+0x205/0x470 [ 798.973212][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.978098][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.985326][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 798.992069][ T31] ? down_read+0x1ad/0x2e0 [ 798.996524][ T31] genl_rcv+0x28/0x40 [ 799.000951][ T31] netlink_unicast+0x82c/0x9e0 [ 799.005778][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 799.011279][ T31] ? netlink_sendmsg+0x642/0xb30 [ 799.016231][ T31] ? skb_put+0x11b/0x210 [ 799.020744][ T31] netlink_sendmsg+0x805/0xb30 [ 799.025530][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.030986][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 799.035967][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 799.042053][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.047362][ T31] __sock_sendmsg+0x21c/0x270 [ 799.052228][ T31] __sys_sendto+0x3bd/0x520 [ 799.056744][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 799.061870][ T31] ? count_memcg_event_mm+0x21/0x260 [ 799.067190][ T31] ? exc_page_fault+0x76/0xf0 [ 799.072057][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 799.077379][ T31] __x64_sys_sendto+0xde/0x100 [ 799.082311][ T31] do_syscall_64+0xfa/0x3b0 [ 799.086835][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.092283][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.098470][ T31] ? clear_bhb_loop+0x60/0xb0 [ 799.103266][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.109344][ T31] RIP: 0033:0x7f7407390a7c [ 799.113987][ T31] RSP: 002b:00007f7408126ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 799.122547][ T31] RAX: ffffffffffffffda RBX: 00007f7408126fc0 RCX: 00007f7407390a7c [ 799.130871][ T31] RDX: 0000000000000020 RSI: 00007f7408127010 RDI: 0000000000000006 [ 799.138885][ T31] RBP: 0000000000000000 R08: 00007f7408126f14 R09: 000000000000000c [ 799.147063][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 799.158122][ T31] R13: 00007f7408126f68 R14: 00007f7408127010 R15: 0000000000000000 [ 799.172534][ T31] [ 799.175630][ T31] INFO: task syz.1.4244:21909 blocked for more than 145 seconds. [ 799.183389][ T31] Not tainted syzkaller #0 [ 799.188410][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.197237][ T31] task:syz.1.4244 state:D stack:26984 pid:21909 tgid:21905 ppid:16828 task_flags:0x400040 flags:0x00004004 [ 799.209343][ T31] Call Trace: [ 799.212631][ T31] [ 799.215564][ T31] __schedule+0x1798/0x4cc0 [ 799.222170][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.227075][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.232098][ T31] ? __pfx___schedule+0x10/0x10 [ 799.237013][ T31] ? schedule+0x91/0x360 [ 799.241554][ T31] schedule+0x165/0x360 [ 799.245732][ T31] schedule_preempt_disabled+0x13/0x30 [ 799.251356][ T31] __mutex_lock+0x7e6/0x1350 [ 799.255986][ T31] ? __mutex_lock+0x5bb/0x1350 [ 799.262531][ T31] ? genl_rcv_msg+0x10d/0x790 [ 799.267254][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 799.274391][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 799.279751][ T31] ? radix_tree_lookup+0x240/0x290 [ 799.284999][ T31] genl_rcv_msg+0x10d/0x790 [ 799.289667][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 799.294718][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 799.299817][ T31] ? __asan_memcpy+0x40/0x70 [ 799.304433][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 799.310031][ T31] netlink_rcv_skb+0x205/0x470 [ 799.314830][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.320067][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 799.325139][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 799.330667][ T31] ? down_read+0x1ad/0x2e0 [ 799.335116][ T31] genl_rcv+0x28/0x40 [ 799.339178][ T31] netlink_unicast+0x82c/0x9e0 [ 799.343999][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 799.349520][ T31] ? netlink_sendmsg+0x642/0xb30 [ 799.354478][ T31] ? skb_put+0x11b/0x210 [ 799.358737][ T31] netlink_sendmsg+0x805/0xb30 [ 799.363621][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.368935][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 799.373978][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 799.379523][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.385027][ T31] __sock_sendmsg+0x21c/0x270 [ 799.391778][ T31] __sys_sendto+0x3bd/0x520 [ 799.396343][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 799.401557][ T31] ? fd_install+0x97/0x540 [ 799.406018][ T31] ? fd_install+0x30d/0x540 [ 799.410686][ T31] __x64_sys_sendto+0xde/0x100 [ 799.415485][ T31] do_syscall_64+0xfa/0x3b0 [ 799.420062][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.425299][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.431705][ T31] ? clear_bhb_loop+0x60/0xb0 [ 799.436427][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.442511][ T31] RIP: 0033:0x7f7407390a7c [ 799.446958][ T31] RSP: 002b:00007f74055f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 799.455484][ T31] RAX: ffffffffffffffda RBX: 00007f74055f4fc0 RCX: 00007f7407390a7c [ 799.463524][ T31] RDX: 0000000000000020 RSI: 00007f74055f5010 RDI: 0000000000000008 [ 799.471695][ T31] RBP: 0000000000000000 R08: 00007f74055f4f14 R09: 000000000000000c [ 799.479887][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 799.487897][ T31] R13: 00007f74055f4f68 R14: 00007f74055f5010 R15: 0000000000000000 [ 799.496007][ T31] [ 799.499175][ T31] INFO: task syz.1.4244:21916 blocked for more than 145 seconds. [ 799.506907][ T31] Not tainted syzkaller #0 [ 799.512046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.520837][ T31] task:syz.1.4244 state:D stack:27688 pid:21916 tgid:21905 ppid:16828 task_flags:0x400040 flags:0x00004004 [ 799.532892][ T31] Call Trace: [ 799.536200][ T31] [ 799.539204][ T31] __schedule+0x1798/0x4cc0 [ 799.543744][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.548605][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.554773][ T31] ? __pfx___schedule+0x10/0x10 [ 799.559986][ T31] ? schedule+0x91/0x360 [ 799.564272][ T31] schedule+0x165/0x360 [ 799.568497][ T31] schedule_preempt_disabled+0x13/0x30 [ 799.574293][ T31] __mutex_lock+0x7e6/0x1350 [ 799.578944][ T31] ? __mutex_lock+0x5bb/0x1350 [ 799.583801][ T31] ? genl_rcv_msg+0x10d/0x790 [ 799.588506][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 799.593749][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 799.598913][ T31] ? radix_tree_lookup+0x240/0x290 [ 799.604328][ T31] genl_rcv_msg+0x10d/0x790 [ 799.608977][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 799.615849][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 799.621015][ T31] ? __asan_memcpy+0x40/0x70 [ 799.625623][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 799.631140][ T31] netlink_rcv_skb+0x205/0x470 [ 799.635956][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.641339][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 799.646396][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 799.651860][ T31] ? down_read+0x1ad/0x2e0 [ 799.656301][ T31] genl_rcv+0x28/0x40 [ 799.660475][ T31] netlink_unicast+0x82c/0x9e0 [ 799.665285][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 799.670723][ T31] ? netlink_sendmsg+0x642/0xb30 [ 799.675774][ T31] ? skb_put+0x11b/0x210 [ 799.680337][ T31] netlink_sendmsg+0x805/0xb30 [ 799.685148][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.690555][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 799.695658][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 799.701078][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.706413][ T31] __sock_sendmsg+0x21c/0x270 [ 799.711287][ T31] __sys_sendto+0x3bd/0x520 [ 799.715823][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 799.721612][ T31] ? count_memcg_event_mm+0x21/0x260 [ 799.726938][ T31] ? exc_page_fault+0x76/0xf0 [ 799.731763][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 799.737081][ T31] __x64_sys_sendto+0xde/0x100 [ 799.742166][ T31] do_syscall_64+0xfa/0x3b0 [ 799.746684][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.752040][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.758107][ T31] ? clear_bhb_loop+0x60/0xb0 [ 799.762844][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.768765][ T31] RIP: 0033:0x7f7407390a7c [ 799.773333][ T31] RSP: 002b:00007f74055d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 799.784410][ T31] RAX: ffffffffffffffda RBX: 00007f74055d3fc0 RCX: 00007f7407390a7c [ 799.792666][ T31] RDX: 0000000000000020 RSI: 00007f74055d4010 RDI: 0000000000000005 [ 799.801021][ T31] RBP: 0000000000000000 R08: 00007f74055d3f14 R09: 000000000000000c [ 799.809088][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 799.817141][ T31] R13: 00007f74055d3f68 R14: 00007f74055d4010 R15: 0000000000000000 [ 799.825321][ T31] [ 799.828362][ T31] INFO: task syz.7.4246:21912 blocked for more than 145 seconds. [ 799.836349][ T31] Not tainted syzkaller #0 [ 799.841419][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.850171][ T31] task:syz.7.4246 state:D stack:28360 pid:21912 tgid:21910 ppid:20867 task_flags:0x400040 flags:0x00004004 [ 799.862217][ T31] Call Trace: [ 799.865494][ T31] [ 799.868423][ T31] __schedule+0x1798/0x4cc0 [ 799.873171][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.878078][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.883273][ T31] ? __pfx___schedule+0x10/0x10 [ 799.888274][ T31] ? schedule+0x91/0x360 [ 799.892775][ T31] schedule+0x165/0x360 [ 799.897016][ T31] schedule_preempt_disabled+0x13/0x30 [ 799.902674][ T31] __mutex_lock+0x7e6/0x1350 [ 799.907299][ T31] ? __mutex_lock+0x5bb/0x1350 [ 799.912414][ T31] ? genl_rcv_msg+0x10d/0x790 [ 799.917127][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 799.922319][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 799.927467][ T31] ? radix_tree_lookup+0x240/0x290 [ 799.932787][ T31] genl_rcv_msg+0x10d/0x790 [ 799.937325][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 799.942492][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 799.947931][ T31] ? __asan_memcpy+0x40/0x70 [ 799.953851][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 799.959727][ T31] netlink_rcv_skb+0x205/0x470 [ 799.964538][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.969579][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 799.974633][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 799.980181][ T31] ? down_read+0x1ad/0x2e0 [ 799.984632][ T31] genl_rcv+0x28/0x40 [ 799.988617][ T31] netlink_unicast+0x82c/0x9e0 [ 799.993487][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 799.998805][ T31] ? netlink_sendmsg+0x642/0xb30 [ 800.003850][ T31] ? skb_put+0x11b/0x210 [ 800.008119][ T31] netlink_sendmsg+0x805/0xb30 [ 800.012996][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.018311][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 800.023636][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 800.028949][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.034286][ T31] __sock_sendmsg+0x21c/0x270 [ 800.038977][ T31] __sys_sendto+0x3bd/0x520 [ 800.043727][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 800.048781][ T31] ? count_memcg_event_mm+0x21/0x260 [ 800.054185][ T31] ? exc_page_fault+0x76/0xf0 [ 800.058899][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 800.064294][ T31] __x64_sys_sendto+0xde/0x100 [ 800.069123][ T31] do_syscall_64+0xfa/0x3b0 [ 800.073659][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.078891][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.085113][ T31] ? clear_bhb_loop+0x60/0xb0 [ 800.089914][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.095852][ T31] RIP: 0033:0x7f81c2190a7c [ 800.100391][ T31] RSP: 002b:00007f81c2f26ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 800.108848][ T31] RAX: ffffffffffffffda RBX: 00007f81c2f26fc0 RCX: 00007f81c2190a7c [ 800.116888][ T31] RDX: 0000000000000020 RSI: 00007f81c2f27010 RDI: 0000000000000003 [ 800.125066][ T31] RBP: 0000000000000000 R08: 00007f81c2f26f14 R09: 000000000000000c [ 800.133366][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 800.141449][ T31] R13: 00007f81c2f26f68 R14: 00007f81c2f27010 R15: 0000000000000000 [ 800.149701][ T31] [ 800.152767][ T31] INFO: task syz-executor:21923 blocked for more than 146 seconds. [ 800.161004][ T31] Not tainted syzkaller #0 [ 800.165972][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.174734][ T31] task:syz-executor state:D stack:28040 pid:21923 tgid:21923 ppid:1 task_flags:0x400040 flags:0x00004000 [ 800.186749][ T31] Call Trace: [ 800.190094][ T31] [ 800.193052][ T31] __schedule+0x1798/0x4cc0 [ 800.197594][ T31] ? __lock_acquire+0xab9/0xd20 [ 800.205587][ T31] ? __lock_acquire+0xab9/0xd20 [ 800.211122][ T31] ? __pfx___schedule+0x10/0x10 [ 800.216045][ T31] ? schedule+0x91/0x360 [ 800.222444][ T31] schedule+0x165/0x360 [ 800.226645][ T31] schedule_preempt_disabled+0x13/0x30 [ 800.232326][ T31] __mutex_lock+0x7e6/0x1350 [ 800.236947][ T31] ? __mutex_lock+0x5bb/0x1350 [ 800.241883][ T31] ? rfkill_register+0x37/0x8e0 [ 800.246790][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 800.251881][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 800.257212][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 800.262696][ T31] ? device_initialize+0x24b/0x440 [ 800.267845][ T31] rfkill_register+0x37/0x8e0 [ 800.273689][ T31] hci_register_dev+0x3f5/0x890 [ 800.278729][ T31] vhci_create_device+0x39c/0x650 [ 800.284368][ T31] vhci_write+0x3ce/0x4a0 [ 800.288767][ T31] vfs_write+0x5c9/0xb30 [ 800.293329][ T31] ? __pfx_vhci_write+0x10/0x10 [ 800.298225][ T31] ? __pfx_vfs_write+0x10/0x10 [ 800.303066][ T31] ? count_memcg_event_mm+0x21/0x260 [ 800.308648][ T31] ksys_write+0x145/0x250 [ 800.313267][ T31] ? __pfx_ksys_write+0x10/0x10 [ 800.318182][ T31] ? do_syscall_64+0xbe/0x3b0 [ 800.322967][ T31] do_syscall_64+0xfa/0x3b0 [ 800.327498][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.332903][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.339004][ T31] ? clear_bhb_loop+0x60/0xb0 [ 800.343893][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.350275][ T31] RIP: 0033:0x7feea758d660 [ 800.354724][ T31] RSP: 002b:00007fffabc44368 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 800.363655][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007feea758d660 [ 800.371820][ T31] RDX: 0000000000000002 RSI: 00007fffabc4437a RDI: 00000000000000ca [ 800.379989][ T31] RBP: 00007feea77c67b8 R08: 0000000000000000 R09: 00007feea82fd6c0 [ 800.388004][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 800.396215][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 800.405036][ T31] [ 800.408129][ T31] INFO: task syz-executor:21924 blocked for more than 146 seconds. [ 800.416454][ T31] Not tainted syzkaller #0 [ 800.421564][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.430384][ T31] task:syz-executor state:D stack:28040 pid:21924 tgid:21924 ppid:1 task_flags:0x400040 flags:0x00004000 [ 800.442481][ T31] Call Trace: [ 800.445783][ T31] [ 800.448721][ T31] __schedule+0x1798/0x4cc0 [ 800.453266][ T31] ? __lock_acquire+0xab9/0xd20 [ 800.458133][ T31] ? __lock_acquire+0xab9/0xd20 [ 800.463197][ T31] ? __pfx___schedule+0x10/0x10 [ 800.468104][ T31] ? schedule+0x91/0x360 [ 800.472540][ T31] schedule+0x165/0x360 [ 800.476761][ T31] schedule_preempt_disabled+0x13/0x30 [ 800.482356][ T31] __mutex_lock+0x7e6/0x1350 [ 800.486975][ T31] ? __mutex_lock+0x5bb/0x1350 [ 800.492053][ T31] ? rfkill_register+0x37/0x8e0 [ 800.496952][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 800.502139][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 800.507463][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 800.513111][ T31] ? device_initialize+0x24b/0x440 [ 800.518251][ T31] rfkill_register+0x37/0x8e0 [ 800.523174][ T31] hci_register_dev+0x3f5/0x890 [ 800.528068][ T31] vhci_create_device+0x39c/0x650 [ 800.533153][ T31] vhci_write+0x3ce/0x4a0 [ 800.537523][ T31] vfs_write+0x5c9/0xb30 [ 800.541897][ T31] ? __pfx_vhci_write+0x10/0x10 [ 800.546784][ T31] ? __pfx_vfs_write+0x10/0x10 [ 800.551645][ T31] ? count_memcg_event_mm+0x21/0x260 [ 800.556977][ T31] ksys_write+0x145/0x250 [ 800.561407][ T31] ? __pfx_ksys_write+0x10/0x10 [ 800.566284][ T31] ? do_syscall_64+0xbe/0x3b0 [ 800.571017][ T31] do_syscall_64+0xfa/0x3b0 [ 800.575685][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.581001][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.587098][ T31] ? clear_bhb_loop+0x60/0xb0 [ 800.591875][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.597805][ T31] RIP: 0033:0x7fe7e638d660 [ 800.602433][ T31] RSP: 002b:00007ffd83848138 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 800.610951][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe7e638d660 [ 800.618948][ T31] RDX: 0000000000000002 RSI: 00007ffd8384814a RDI: 00000000000000ca [ 800.627077][ T31] RBP: 00007fe7e65c67b8 R08: 0000000000000000 R09: 00007fe7e70fd6c0 [ 800.635175][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 800.643272][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 800.651326][ T31] [ 800.654366][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 800.663514][ T31] INFO: task syz-executor:21925 blocked for more than 146 seconds. [ 800.674289][ T31] Not tainted syzkaller #0 [ 800.680593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.691062][ T31] task:syz-executor state:D stack:28040 pid:21925 tgid:21925 ppid:1 task_flags:0x400040 flags:0x00004000 [ 800.703481][ T31] Call Trace: [ 800.706789][ T31] [ 800.709847][ T31] __schedule+0x1798/0x4cc0 [ 800.714420][ T31] ? __lock_acquire+0xab9/0xd20 [ 800.719371][ T31] ? __lock_acquire+0xab9/0xd20 [ 800.724265][ T31] ? __pfx___schedule+0x10/0x10 [ 800.729224][ T31] ? schedule+0x91/0x360 [ 800.733539][ T31] schedule+0x165/0x360 [ 800.737742][ T31] schedule_preempt_disabled+0x13/0x30 [ 800.743280][ T31] __mutex_lock+0x7e6/0x1350 [ 800.747903][ T31] ? __mutex_lock+0x5bb/0x1350 [ 800.752909][ T31] ? rfkill_register+0x37/0x8e0 [ 800.757841][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 800.764939][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 800.770474][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 800.775885][ T31] ? device_initialize+0x24b/0x440 [ 800.782243][ T31] rfkill_register+0x37/0x8e0 [ 800.786964][ T31] hci_register_dev+0x3f5/0x890 [ 800.792969][ T31] vhci_create_device+0x39c/0x650 [ 800.798045][ T31] vhci_write+0x3ce/0x4a0 [ 800.803720][ T31] vfs_write+0x5c9/0xb30 [ 800.808050][ T31] ? __pfx_vhci_write+0x10/0x10 [ 800.813269][ T31] ? __pfx_vfs_write+0x10/0x10 [ 800.818080][ T31] ? count_memcg_event_mm+0x21/0x260 [ 800.823556][ T31] ksys_write+0x145/0x250 [ 800.828075][ T31] ? __pfx_ksys_write+0x10/0x10 [ 800.833012][ T31] ? do_syscall_64+0xbe/0x3b0 [ 800.837721][ T31] do_syscall_64+0xfa/0x3b0 [ 800.842767][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.848019][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.854217][ T31] ? clear_bhb_loop+0x60/0xb0 [ 800.858993][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.864973][ T31] RIP: 0033:0x7f64f998d660 [ 800.869617][ T31] RSP: 002b:00007fffc7aab0e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 800.878068][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f64f998d660 [ 800.886479][ T31] RDX: 0000000000000002 RSI: 00007fffc7aab0fa RDI: 00000000000000ca [ 800.894682][ T31] RBP: 00007f64f9bc67b8 R08: 0000000000000000 R09: 00007f64fa6fd6c0 [ 800.902737][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 800.910860][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 800.918948][ T31] [ 800.922189][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 800.931396][ T31] INFO: task syz-executor:21926 blocked for more than 146 seconds. [ 800.939368][ T31] Not tainted syzkaller #0 [ 800.944324][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.953229][ T31] task:syz-executor state:D stack:28040 pid:21926 tgid:21926 ppid:1 task_flags:0x400040 flags:0x00004000 [ 800.965509][ T31] Call Trace: [ 800.968829][ T31] [ 800.972636][ T31] __schedule+0x1798/0x4cc0 [ 800.977207][ T31] ? __lock_acquire+0xab9/0xd20 [ 800.982418][ T31] ? __lock_acquire+0xab9/0xd20 [ 800.987308][ T31] ? __pfx___schedule+0x10/0x10 [ 800.992444][ T31] ? schedule+0x91/0x360 [ 800.996755][ T31] schedule+0x165/0x360 [ 801.001095][ T31] schedule_preempt_disabled+0x13/0x30 [ 801.006604][ T31] __mutex_lock+0x7e6/0x1350 [ 801.011289][ T31] ? __mutex_lock+0x5bb/0x1350 [ 801.016078][ T31] ? rfkill_register+0x37/0x8e0 [ 801.021001][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 801.026055][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 801.031404][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 801.036816][ T31] ? device_initialize+0x24b/0x440 [ 801.042069][ T31] rfkill_register+0x37/0x8e0 [ 801.046791][ T31] hci_register_dev+0x3f5/0x890 [ 801.051854][ T31] vhci_create_device+0x39c/0x650 [ 801.057015][ T31] vhci_write+0x3ce/0x4a0 [ 801.061499][ T31] vfs_write+0x5c9/0xb30 [ 801.065818][ T31] ? __pfx_vhci_write+0x10/0x10 [ 801.070758][ T31] ? __pfx_vfs_write+0x10/0x10 [ 801.075574][ T31] ? count_memcg_event_mm+0x21/0x260 [ 801.081210][ T31] ksys_write+0x145/0x250 [ 801.085588][ T31] ? __pfx_ksys_write+0x10/0x10 [ 801.090523][ T31] ? do_syscall_64+0xbe/0x3b0 [ 801.095227][ T31] do_syscall_64+0xfa/0x3b0 [ 801.100028][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.105271][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.111418][ T31] ? clear_bhb_loop+0x60/0xb0 [ 801.116151][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.122147][ T31] RIP: 0033:0x7f3b26b8d660 [ 801.126585][ T31] RSP: 002b:00007ffff977d518 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 801.135054][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3b26b8d660 [ 801.143089][ T31] RDX: 0000000000000002 RSI: 00007ffff977d52a RDI: 00000000000000ca [ 801.151132][ T31] RBP: 00007f3b26dc67b8 R08: 0000000000000000 R09: 00007f3b278fd6c0 [ 801.159382][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 801.167382][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 801.175428][ T31] [ 801.178467][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 801.187615][ T31] [ 801.187615][ T31] Showing all locks held in the system: [ 801.196625][ T31] 5 locks held by kworker/u8:1/13: [ 801.201862][ T31] 1 lock held by khungtaskd/31: [ 801.206733][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 801.216882][ T31] 2 locks held by getty/5627: [ 801.221617][ T31] #0: ffff88814e6100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 801.231592][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 801.241854][ T31] 3 locks held by kworker/1:16/16935: [ 801.247357][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 801.257459][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 801.266407][ T31] #2: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_tx_worker+0x24a/0x7c0 [ 801.276694][ T31] 4 locks held by kworker/1:19/16938: [ 801.282139][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 801.293184][ T31] #1: ffffc9000dc6fbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 801.305677][ T31] #2: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 801.315941][ T31] #3: ffff888055b12100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 801.326215][ T31] 1 lock held by syz.5.4235/21873: [ 801.331419][ T31] #0: ffff888055b12100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 801.341305][ T31] 3 locks held by syz.0.4236/21882: [ 801.346518][ T31] #0: ffffffff8f59e130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 801.354983][ T31] #1: ffffffff8f59df48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 801.364971][ T31] #2: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.375387][ T31] 2 locks held by syz.6.4240/21892: [ 801.381000][ T31] #0: ffffffff8f59e130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 801.389290][ T31] #1: ffffffff8f59df48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 801.398749][ T31] 2 locks held by syz.1.4244/21906: [ 801.405115][ T31] #0: ffffffff8f59e130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 801.414780][ T31] #1: ffffffff8f59df48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 801.423908][ T31] 2 locks held by syz.1.4244/21909: [ 801.429476][ T31] #0: ffffffff8f59e130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 801.437776][ T31] #1: ffffffff8f59df48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 801.448072][ T31] 2 locks held by syz.1.4244/21916: [ 801.453520][ T31] #0: ffffffff8f59e130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 801.462177][ T31] #1: ffffffff8f59df48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 801.471348][ T31] 2 locks held by syz.7.4246/21912: [ 801.476563][ T31] #0: ffffffff8f59e130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 801.485738][ T31] #1: ffffffff8f59df48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 801.494863][ T31] 2 locks held by syz-executor/21923: [ 801.500373][ T31] #0: ffff888022bfd918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.510535][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.520726][ T31] 2 locks held by syz-executor/21924: [ 801.526132][ T31] #0: ffff888078578918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.536232][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.546269][ T31] 2 locks held by syz-executor/21925: [ 801.551872][ T31] #0: ffff888027748918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.562181][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.572443][ T31] 2 locks held by syz-executor/21926: [ 801.577836][ T31] #0: ffff88802774d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.588212][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.598235][ T31] 2 locks held by syz-executor/21927: [ 801.603786][ T31] #0: ffff888022bfe118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.613924][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.623998][ T31] 2 locks held by syz-executor/21933: [ 801.629512][ T31] #0: ffff88807f5a2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.639764][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.649860][ T31] 2 locks held by syz-executor/21934: [ 801.655269][ T31] #0: ffff888028198118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.665453][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.675491][ T31] 2 locks held by syz-executor/21935: [ 801.681208][ T31] #0: ffff888057c3b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.691517][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.701626][ T31] 2 locks held by syz-executor/21936: [ 801.707012][ T31] #0: ffff888057c3d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.717135][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.728324][ T31] 2 locks held by syz-executor/21937: [ 801.733857][ T31] #0: ffff88807f7a1118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.744043][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.754077][ T31] 2 locks held by syz-executor/21941: [ 801.759547][ T31] #0: ffff88807c2fc118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.769688][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.779852][ T31] 2 locks held by syz-executor/21942: [ 801.785247][ T31] #0: ffff88807c2f9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.795477][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.805705][ T31] 2 locks held by syz-executor/21943: [ 801.811229][ T31] #0: ffff88806d9eb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.821421][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.831509][ T31] 2 locks held by syz-executor/21946: [ 801.836905][ T31] #0: ffff88805839a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.847180][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.857171][ T31] 2 locks held by syz-executor/21947: [ 801.862693][ T31] #0: ffff88806db27118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 801.873049][ T31] #1: ffffffff8f8127e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 801.883537][ T31] [ 801.885930][ T31] ============================================= [ 801.885930][ T31] [ 801.894615][ T31] NMI backtrace for cpu 1 [ 801.894634][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 801.894655][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 801.894668][ T31] Call Trace: [ 801.894677][ T31] [ 801.894687][ T31] dump_stack_lvl+0x189/0x250 [ 801.894720][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.894746][ T31] ? __pfx__printk+0x10/0x10 [ 801.894789][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 801.894819][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 801.894847][ T31] ? __pfx__printk+0x10/0x10 [ 801.894881][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 801.894917][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 801.894953][ T31] watchdog+0xf93/0xfe0 [ 801.894987][ T31] ? watchdog+0x1de/0xfe0 [ 801.895022][ T31] kthread+0x70e/0x8a0 [ 801.895051][ T31] ? __pfx_watchdog+0x10/0x10 [ 801.895077][ T31] ? __pfx_kthread+0x10/0x10 [ 801.895105][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.895132][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.895159][ T31] ? __pfx_kthread+0x10/0x10 [ 801.895184][ T31] ret_from_fork+0x3f9/0x770 [ 801.895209][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 801.895236][ T31] ? __switch_to_asm+0x39/0x70 [ 801.895261][ T31] ? __switch_to_asm+0x33/0x70 [ 801.895285][ T31] ? __pfx_kthread+0x10/0x10 [ 801.895311][ T31] ret_from_fork_asm+0x1a/0x30 [ 801.895355][ T31] [ 801.895363][ T31] Sending NMI from CPU 1 to CPUs 0: [ 802.042338][ C0] NMI backtrace for cpu 0 [ 802.042353][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 802.042371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 802.042382][ C0] Workqueue: bat_events batadv_nc_worker [ 802.042410][ C0] RIP: 0010:lock_acquire+0x11b/0x360 [ 802.042436][ C0] Code: 4c 89 7c 24 08 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b 54 24 04 44 89 e1 45 89 f0 6a 00 6a 00 6a 00 55 ff 74 24 30 e0 02 00 00 48 83 c4 28 48 c7 c7 da 74 ba 8d e8 e0 96 dc 09 b8 [ 802.042450][ C0] RSP: 0018:ffffc900001278a8 EFLAGS: 00000006 [ 802.042462][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 802.042472][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880393dd3d8 [ 802.042481][ C0] RBP: ffffffff8b47d597 R08: 0000000000000001 R09: 0000000000000000 [ 802.042491][ C0] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: 0000000000000000 [ 802.042502][ C0] R13: ffff8880393dd3d8 R14: 0000000000000001 R15: 0000000000000246 [ 802.042513][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 802.042525][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 802.042535][ C0] CR2: 0000561b43e9c000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 802.042549][ C0] Call Trace: [ 802.042555][ C0] [ 802.042562][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 802.042586][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 802.042605][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 802.042625][ C0] _raw_spin_lock_bh+0x36/0x50 [ 802.042645][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 802.042665][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 802.042687][ C0] batadv_nc_purge_paths+0xe7/0x3b0 [ 802.042714][ C0] batadv_nc_worker+0x369/0x610 [ 802.042734][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 802.042757][ C0] process_scheduled_works+0xae1/0x17b0 [ 802.042784][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 802.042807][ C0] worker_thread+0x8a0/0xda0 [ 802.042833][ C0] kthread+0x70e/0x8a0 [ 802.042853][ C0] ? __pfx_worker_thread+0x10/0x10 [ 802.042868][ C0] ? __pfx_kthread+0x10/0x10 [ 802.042887][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 802.042906][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.042928][ C0] ? __pfx_kthread+0x10/0x10 [ 802.042946][ C0] ret_from_fork+0x3f9/0x770 [ 802.042963][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 802.042980][ C0] ? __switch_to_asm+0x39/0x70 [ 802.043001][ C0] ? __switch_to_asm+0x33/0x70 [ 802.043020][ C0] ? __pfx_kthread+0x10/0x10 [ 802.043039][ C0] ret_from_fork_asm+0x1a/0x30 [ 802.043066][ C0] [ 802.043589][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 802.306803][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 802.315916][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 802.325979][ T31] Call Trace: [ 802.329277][ T31] [ 802.332218][ T31] dump_stack_lvl+0x99/0x250 [ 802.336830][ T31] ? __asan_memcpy+0x40/0x70 [ 802.341426][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 802.346669][ T31] ? __pfx__printk+0x10/0x10 [ 802.351309][ T31] vpanic+0x281/0x750 [ 802.355305][ T31] ? __pfx_vpanic+0x10/0x10 [ 802.359815][ T31] ? preempt_schedule+0xae/0xc0 [ 802.364675][ T31] ? preempt_schedule_common+0x83/0xd0 [ 802.370153][ T31] panic+0xb9/0xc0 [ 802.373881][ T31] ? __pfx_panic+0x10/0x10 [ 802.378310][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 802.383890][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 802.390069][ T31] watchdog+0xfd2/0xfe0 [ 802.394260][ T31] ? watchdog+0x1de/0xfe0 [ 802.398613][ T31] kthread+0x70e/0x8a0 [ 802.402723][ T31] ? __pfx_watchdog+0x10/0x10 [ 802.407419][ T31] ? __pfx_kthread+0x10/0x10 [ 802.412028][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 802.417245][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.422462][ T31] ? __pfx_kthread+0x10/0x10 [ 802.427152][ T31] ret_from_fork+0x3f9/0x770 [ 802.431754][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 802.436965][ T31] ? __switch_to_asm+0x39/0x70 [ 802.441754][ T31] ? __switch_to_asm+0x33/0x70 [ 802.446528][ T31] ? __pfx_kthread+0x10/0x10 [ 802.451132][ T31] ret_from_fork_asm+0x1a/0x30 [ 802.455919][ T31] [ 802.459314][ T31] Kernel Offset: disabled [ 802.463656][ T31] Rebooting in 86400 seconds..