last executing test programs: 22.624883548s ago: executing program 3 (id=2683): r0 = socket$inet6(0xa, 0x80002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x341, 0x0, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x6b, 0x0, 0xa, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, {[@generic={0x94, 0xc, "74141141c1e93e03fc23"}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x11, "727c983251ed15de07ec8a9ae94d31"}, {0x6, 0x3, "ee"}, {0x2, 0x2}]}]}}}}}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x1) (async) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 64) sendto$inet6(r0, 0x0, 0xffffffffffffff20, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r7) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) (async) setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) (async, rerun: 32) close(0x3) (rerun: 32) 22.468629323s ago: executing program 1 (id=2686): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x2, 0x5) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="140018005e03478e7900000000000000000000000000000009bfc8f1f184543bdfc4eb9b5f851f07f3", @ANYRES32=0x0, @ANYBLOB='('], 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001340)=@deltfilter={0x24, 0x2d, 0x800, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x10, 0xffff}, {0x4, 0xc}, {0x6, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x20044000) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x300, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0f646589d2312e24f36e5959000e22", @ANYRES16=r3, @ANYBLOB="010027bd7000fbd3df25020000000900010073797a30000000000900030073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x80003, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x1, @loopback, 0x4}, 0x1c) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r10, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, 0x0, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r12, 0x8b2c, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56459, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) (async) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r7) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r13, @ANYBLOB="000128bd7000fcdbdf25000000009400088090000080080003000000000024000200a7f006646430b9593104188434f50092c2521249556ed1141b199caf904f777c060005000d00000024000100000000000000000000000001000000000000000000000000000000000002000008000a000100000008000a00010000001400040002004e22ac1e00010000000000000000080003000500000008000a00010000001400020077673100"/182], 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x24004840) ioctl$FITHAW(r6, 0xc0045878) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000008711013000040000084050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}, 0x10}, 0x94) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 22.467547646s ago: executing program 3 (id=2687): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x178, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x164, 0x1, [@m_simple={0x160, 0x2, 0x0, 0x0, {{0xb}, {0x110, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xcf, 0x3, 'flow\x00\x00YU\xba\xc19\xd9\xcf\xa2\xa3P\xb1@\\\xb4\x84\xc8\x11\x83\xb4\xf2\x00\xa1\xf0\x15H{\x96&,\xd2\x13Z\xeb\xb8\xcf\xf9=\xcbT\xda\x8d$\xd5\x03\x16\xc1\xd0\x01\x91f\xf4\xa34\xfeG\x18<\x9a0\xa6\x86\xc1\x0f}\x84%\xd7B\x93\xff|KY\x0e\x8b\x8fq-\x90S\x91\xee^6\xc7\xed\xaaqfP,\x1a\x8a\x97\x9b\x06\xb0\xb1m\xb6\xc9\xa5u]\x8ez\xcd\x97\xcci$f_\xc0*\x88)\xea\x8e\x10\x91\x81\x13\xc1\xdd\xa3\x9fJ\xf0\xd9<\xed\a\xa3zD\xe30`\xf8\xc8k\x11\xd1W\xa2\xea\r\xfa5 %\xb1\v@\xb6\xea\xdc\x18b\xc9@6\xdaL{h\x16w$\x8b\xd0czg [\x81=\x03\xd4|\xc1\x9f\xe9Jv\xbc\x99pn)>\xfdl\t\x8e'}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x0, 0x2, 0x1, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x7, 0x9, 0x5}}]}, {0x25, 0x6, "57a644f81505c2b74fc3f1aaed55f097aeff90b48cb00a37037f943c4c9da6f576"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3, 0x63000000000000, 0x1}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x135, 0x135, 0x9, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x6, 0x2}, {0x7, 0x2}, {0xb, 0x1}]}, @datasec={0x3, 0x7, 0x0, 0xf, 0x3, [{0x3, 0x40, 0xadb9}, {0x4, 0xe, 0xadcd}, {0x4, 0x4, 0x40}, {0x2, 0x1, 0x9}, {0x2, 0xfffffff8, 0x6}, {0x5, 0x9, 0x1200}, {0x4, 0x1, 0x2}], "29cde8"}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x2}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x2, 0x2}, {0x0, 0x3}, {0x10, 0x1}, {0xb}, {0xa, 0x4}, {0x9, 0x1}, {0xf, 0x2}, {0x0, 0x3}, {0xc, 0x3}]}, @datasec={0x4, 0x2, 0x0, 0xf, 0x2, [{0x3, 0xc61, 0x4e}, {0x5, 0x4, 0x6}], "f6ee"}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x61, 0x61, 0x61, 0x61, 0x2e, 0x2e]}}, &(0x7f00000006c0)=""/82, 0x159, 0x52, 0x0, 0x2, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0xd670, 0x0}, 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x10, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b80)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x1, 0x6}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xa, 0x80000, 0x4}, 0x10, 0x1e75a, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x4, 0x3, 0xf, 0xb}, {0x3, 0x5, 0x6, 0x3}, {0x3, 0x4, 0x8, 0xb}, {0x2, 0x3, 0x1, 0xc}, {0x3, 0x5, 0x8, 0x8}, {0x3, 0x1, 0xf, 0x7}, {0x0, 0x1, 0xf, 0x6}, {0x5, 0x5, 0x4, 0x9}]}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x4a, 0x0, 0xffffffffffffffff, 0xf6c5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x5ccb, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x0, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x44014a08, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000300)=""/39, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, r3, 0x8, &(0x7f0000000780)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x3, 0x7ff, 0x3}, 0x10, r4, r5, 0x0, &(0x7f0000002140)=[r6, r7, 0x1, r8, r9, r10, r11], 0x0, 0x10, 0x1}, 0x94) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 22.260295793s ago: executing program 3 (id=2691): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r0, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x23, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffc00}, @map_fd={0x18, 0xf16fb627371fc105, 0x1, 0x0, r4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xcfc61fa3, 0x0, 0x0, 0x0, 0xffff58d3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @alu={0x4, 0x0, 0xc, 0x8, 0x7, 0xdecf7f39526178fc, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x8e, &(0x7f0000000580)=""/142, 0x40f00, 0x74, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0xffffffffffffffff, 0x1, r6, r3, 0xffffffffffffffff, r5, r5], &(0x7f0000000a00)=[{0x4, 0x4, 0xb, 0x7}, {0x5, 0x5, 0xe, 0x4}, {0x1, 0x1, 0xa, 0x1a}, {0x5, 0x2, 0xd, 0x2}, {0x3, 0x5, 0x9, 0xb}, {0x5, 0x4, 0x8, 0x9}], 0x10, 0x8}, 0x94) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) 22.240285376s ago: executing program 1 (id=2692): mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, 0xffffffffffffffff, 0x5efc5000) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt(r0, 0xdfd, 0x7, &(0x7f0000000080)=""/224, &(0x7f0000000180)=0xe0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000001c0)={0x3f, 0x81, 0xc, 0x4, 0x10000}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0xd, 0x1ff, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x9, 0x1}}) bind$can_j1939(r2, &(0x7f00000002c0)={0x1d, r3, 0x3, {0x1, 0x1, 0x4}, 0x1}, 0x18) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @private, @multicast2}, &(0x7f0000000540)=0xc) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000340)="01db469040fe33ec0bfb795fdf20df8dd4328dd61049d0821fa800c5121a0966e6ea0bb3ee2663a9da29c45d242bed", 0x2f}, {&(0x7f0000000380)="ebe9db70258ef941e4786a7a634f6278c99dd9f8", 0x14}, {&(0x7f00000003c0)="e33f1b1d24c7ca5e479e972bbd0af953b830ad937bc74f33cf167010a87d110ebb10c60cf2ba812e0e7ea0c02998f38303faf4301545f1800ecac2fcbb9a6999e9516e90d381eac4809a26ec001dcb0a9c4fe0c6a1112212a7e151ee99543589dbe12fab2cddfbcc814763f113215ccd0d6946068b99f8e0052be9c27078827b09f907a80594ebbe05322a441fcc7187ec72a19046eba5b99b3cb0f6e8b89a3673b4984799a08f7efe7ffd78619a5884e64ce8114ef2339046754ba21ace7718553c67c54e160791266ef8c248cb8c779c87e0675a0be15ef4f90b9b1d535057a3a816de", 0xe4}], 0x3, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc89}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x98}, 0x40080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000700)={'ip_vti0\x00', r4, 0x10, 0x7800, 0x8, 0x9, {{0x29, 0x4, 0x2, 0x5, 0xa4, 0x66, 0x0, 0xbc, 0x2f, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x1c, 0x32, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x6}, {@local, 0x4}, {@remote, 0x7}]}, @ssrr={0x89, 0x23, 0xb2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @loopback, @broadcast, @private=0xa010101]}, @noop, @cipso={0x86, 0x2d, 0x3, [{0x1, 0x6, "756c8bfb"}, {0x1, 0xe, "298f459dd439785af8b66296"}, {0x7, 0x7, "51a7c7006c"}, {0x6, 0xc, "64a8b340e28c273a1d1d"}]}, @timestamp={0x44, 0x14, 0xc2, 0x0, 0x0, [0x7, 0x0, 0x1, 0x9]}, @timestamp={0x44, 0xc, 0xaa, 0x0, 0x8, [0x2, 0x800]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl2\x00', r3, 0x4, 0x1, 0x88, 0xfffffe01, 0x50, @dev={0xfe, 0x80, '\x00', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x700, 0xff, 0x8}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0}, &(0x7f0000000940)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000004080)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004040)={&(0x7f0000000980)={0x3688, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1080, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "96bf1f4d4e210978ccd6f0729ce1f4fb1b48a75c2f074c7f14a327ddf00ab7107194dbaa79515ac500730d36fcff283e217a5d238793b36ae7e1e4dc6cf5e72ccba22e8e5d271760ad3f729b8d18fd61d41e70fdd1b42bb313a4c6c2d48d1929c30b28bfb028d4cd9711c3"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1088, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "843560da02c2021bdd34edc638a1d020f92b05c57ead5d59c4b20878ab3e07314d43d3102d6fc480d9d95fb774206bbf2bbecd906f0b0f4298cac5d0a28fcb3deaa5471cc0f4bedc107af937799c2432284a795b60ccf4c55ac4f85a58f4edc71aeea341b3fc533df2853d8c0665ac6b28"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!&$([$%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%--\'/%\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "6166093772cad7dd2e77654e6129262996cea82c7c0954d1ccb12aeb00e012347932687caddc4ce477fc0fbc6eb2449c9ff14348d77621b75f000dc354c86f3e627b517b45951ecfb975075d0ab65a5dae627e901bfdc64e1de89b10fef2eb232fdefe9240dd1ef5a9b120d61ae42f87e7715e35584047dcba07c680bb6c8d53a5231cf870fd540d3f96230c1fea34177baaa14a9d53a49946e16a6d64b9f85e5367f0438e5fc2e6fa8d94e472c983738bbc7e274fe774ccd66dbe19e2267f251bd9acedbf0706471c53a16e1213c6e324b549efc8c44d9afcb9ae30426d5599915ca1cba66b307b0ad91b1ccbb46f9aaf2c6a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "80f48bd075957ade6f710504dc5f40b10eee0a0579f1c1ae2e1deb845bc6028571f61bebba556b9ffc335027fe70f4831289b70d7e72170a97f27dbfd7cce2f1d9ab8b02c9f4e103d2875470c5da0a9d0ce9f92776373f79c5e92c93776ff9159ef51fa620488b174db992fd5904976d99f7cff864eb9b9c1ce3bb219f93c02911d05d441447be0063ddb36aa8a668b57d6fca1fba953d2c9869c35e20130754a65043220c5aa98113f489a1e12fbb034fd3b6"}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe1b7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x11cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x486}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67f7ac2f}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '--\\,]%)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&\\).\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@.,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/{\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "370748c43bb1226bd55c692d6037c23a31b54a4e220c84fe4342860dc7625b783ead44a361a1f50a174ed5b25376b699beef8227551396f67656196d97fa94f6309c77da6c3f335fce120662c24b104a31b46af88b87e852d4c154651726d5fbd35e0a203cdc1b4a40356bccf1376fac44365219045db12ae1c2c80834f67e8a01559c36e2ff3dff6310ce32555dadc53481d92f3cbb0b6d9bbdb55f2887c599531dab9b89ffbd4502aebe9bb958ec5ed93b4a0c93239944165eec2ae36fd58723a4ee4257079dcce638eb0d05dc4f38b481ab04c76c4009653a0bb94eccb24eea317e16323f89c123eacf817a49ffa7feb18a935c6a743e2c36237275135735626bc95cb7757e22db36376e7b46da26ba63b519ee7638e936d8102b3af6c9ed2ccfa4b587e04a52a892d07c6cccfae297187dc95999d7df23205a2bf53c34a023767c93f8897a05ca0f511ff773a3401165e382a17a7595004e3014eb4f6e36ed2d13c643c4ee6765f710dbb999d99a2f8e5fe4eb46ce834ad5bcfc46effcd923e17453e3964d2004a7a2cf3bfdba9844b0b05fb6d1909e4dd7d854bec9396e045dded3b5973832aa470255d9d1b9fbf3ade1a90d15eefc642da0fffa32b365a5b3802ce35e1deb78f1cdf9eef574de4ee49cd50ecba61432789fc9c08e6ce40e7a4da53f63fbb4529ae060b983491e86cb3b0f087020dd32deeaa5c0743ad0bbbf7c7dcf4fa937a4e678531841130f25d177a7ba5e4416196246fb99d64a2ccca335b42e3abe1a5983f0b975e86d8ad321bc66d674e6502fa533c73ebf33f34a4dc6bdc2f10a2fafa2351870a4e611fbeca7de0f600b38e3d28db4ba7f99db475a291e33c4e64af2697c904bae89a0eb377b36d2c7c231aaec05d83e151217477332c085e151e6d220871072fd89bbc8a608c9677a8cc4771d143ac9d0f4eb35bb8b1d9fe9305eb153399ba0ce146a236f566a5a9ee90cf4fead197caecd8d59fece1d8629602e32d0fa92376adef79cf8cc858a9489feae40fa01f06c807634eb1b7ed44ccb0a2501abf5276e53a165e8a98a614bd0967107f908e87e1d9d3b3166c50ec6b5228cf079a3feacd3140c06cc10a16894bf9691115bc3edc936b41413ceaf572b2a4f056f4bd7e80efead77a7fd216e442355653c3f85283657bb5238eea66035093afe26ad113e6632a5d5e12227372f3765d214ab2bc7da487dc4485f548e82e76f1b4109fa94a5533efd7318956cae1c230294b686149bb56f8fed02171c1a6ac47a6971a438f7a930c53d8c5a5dc174062d4c7d4ca79dac3144390053e18057d3c83c0bad6d100550183e2c97157e30ace16724ea0e0401983736992e48064f0404d966b25649fc1bb8e2ba6454adab03eecd4081344302d8114bb01bd7b58da5510f36ffab05c426e54ad24f65eb18e1fd5569be60dd57fe43bb5e21997e7ade735dd2daa179104a1cdb74dafdc31a502cf074d6b11278c78c33af6fbe540cb1648aff5137cc171a50e9229a556c5ea3efcf30d944cd1d78fb1de7611c2396be35c6f5c2cf46bd22f761405fc63e67e724a3e6214c0e22f22152b072d16fd41ede262dec3fd6ff1af46c03be98a59c49b517dadf44c072f774b1a1535386079f14bc0a9ef39f6fd62bf6c477fd6d4910f742a731d82c42f6f782007d648c70173b45bc2133b99899d92349615f1a632a617df68a464858607a3771f07d60709a2871b3d373aff039146e0961f07ab03b09dc177bc46e91704e79689bb53a7fcb8bff403e0aef0ba8e1dbb32aa89b2cabb98bd906f3963b80b102eabb80c39c6c1b99f537d2cb01c755ae15fc0aa572798c8dda81a72fd20f183a619d3a2bf5eb4abf28deb4a8af709411bd44f8bc034dac657b6cd1ad000236cfbe6e655f925f4ee4f69f2ce5320622867e3231b3949eb73daf73e06c82ee89bc700715e8ca5861c8a193f4611a29be32f319069105652f3ae91ab5758b142dc31b5ae9c2f5a2b801eec3ee436eea9e71d2109777db6ddc534132d54b5bc10e1a9c24ad07a84737a454e6980ad117d719a937ad9cf2432ce67183fb7c365de13977d8e346897f6b6a778b309a8755d492cddd9e9a84732fdef8c86e281e80261785257b5b3e2ba47b8050736e9f56addbd3c55c2a41ac17084ce8dbb72150e2e12e94aaff6ff5e8c4394617f9e654bede9a003ab16f7dd33f83043cd46338fdefdc5e025aa97652f33f30caa44b8bf2d29eb54ae62fe4b88b405d21b781c0bc442c95fa8661555de264267196d3e54d081e23597e4090b5b7a2577c84e476c180a717b0ac9208fc8a1850edf1b69fcafd976dca3038f749d59f53a56d28a65c6ea1b26e13426af02e8b20e7cd90dbfe4f5d71c74766e471e9db32900bbb6a0786d2ef332e351134d1161079926d52234f7a636314eecdeb1ec6a1f4bafdf36a888c7ba782bad06959d2b05afb962bcae4f70f7e808f3f964549bc4ba291fb0675e62164a63a982f397dec67deff4a76eb8e8393c56b366e4cac597cb56496d8ad583852cd417cf1d4297fa27450fb732c438daf0e2ad073df4f7f8e7059618b30ce1760ab4b98ef8713f6b32c0e77a70650cdd8b395b3526a6f049e5b1499055a6e53f0cab1bae4f9c94b4c2d5f629b6f6fd43127311be136e958bcac1785e838c49fe7f6ea5b29abef75227e4b3924d77db2bd22251e96d60cc080c000ced92b9bd299c01b83b671b453fc55ddbdb819b3996e7161eecf6b9b5dcde7d0c6aabdbec3d159a6b5c868880718c311ddf086b804a2c8cded4fe345f67cfb81f60f94568f4b2d6d50968cb1bb020fe4bb255da1920cade7e90a52748825e50fc3eee53fe0d273224840850838ffba8d306dd9867d983f1416eb716c5337c29f0e65130f3b8a3b0ca3dac23244644dcd3cb082e505d445106d63625725fbd9d13234eb0527d4388d953aea6a801916c52df4590d6db2e41e7a77e74f811fd2ac348e2c2ccc2917df3a2ed3bbe2723eb1c174d820ca7d3276c9c230e2a5026e7e4244ca0419d4a01c1adf1a7c0051a300d6638238fe505773be9bacaf2b4a85b749280135800c67997812d506d664cb4cf2a177e1e5b8c8a4d40ef6ced50a7d159a01e5afad20d0c7bed134920cf3a1cd1dcfc9e0184112e95b6c6bbf058cfc39d35e979e69b134d0c978673433e7339a4cf4a70120c08424b72635e057282ab6402ac60f0fa64e17d81896735b55b5c00e134c570727385894311bb89943bb2495b63fc8b9acce5148e80282e5e6a515c35ddf7672507909f8c1a16327fe614137c43cfd8c878f1679c73612b12091049b162cfa83a7637824db84a7b623ab11cca3da7a7214ec7c4eb4f4d3b75f1f1d231f1cafbf91954e4d86da2d3798d7d48a6fcd117397beae689decb084195369f26f8757b328fe718ff92f9a0b70ab048c06329a99aa9bef6345aea3635858fc5e4f79cf0e34a21aebe381daa5327864514d0fcad2b06a8289ced7421b036ae0b10a70bae0d451eba8f4ba8c4eb90b27b5569468c80e2b6e12075ce0e183d8355eaadc4a5b8cd65366a08427b4f3e80273778f799be1db07da28da89dcac06e86e5add607e81073de644b3f34143257c6bcbd10f2860ceed20fcba23d05c5598141b6e446a8179bca02b2df9ffe1689c2557b46fc2a0bdc99f85735c6537e31d669566cf09396f7921cc3cbe37973055f381560cccf7caabb9a9e3bca770b0db7ea5295813b2280268c020480b7aff2d82372f5739fb9e382810b91e91856514840c54d3e6b8a82c11caf512ab5dea859edd74ae2cecb594ab7a63afb32136d8f8e614a04c7ec916664a9530c336058d8b8a7b45f82613dc49bf9e644de3e33ad92a6eda4804263345b9b07d448a81ad247b0e8a8e81f16ccbc270bbdef2bae18a388f93b91f82e90abfb6882b673a215e60e05c57c3254f653ca75b8c7f3fdba3eb5875326385b016d1f7b09459c2a0e953098b814e48c50f1bd6c0e7e310434c34abea513a4a2a5a8bbbc0b0cc9529f7acb9d7f59f524334075f60e1327bb490cd59d53046c474f0d465ca8490ed23482da5767558514791b73f9713ed583e6840d85d34054f5eddd5627d0062944591be6de204e20371eb6b43062eb190c38b62aea2a7b20497f9ca74e11df3c69cd9c10ae15b75cf22f448dda6323d61869ccad7f8568f65da6f302219d25f33027cd36186b438fb18ca5b1e4c90e25329aca73a3bd78d74616324ecd5fc24b86da9a63be27207b28fd13269349698f3731dacd3c2b28df28165fa5c7b2c89f747e8bdd2283d540fe52eb9631ae183649871d72fee90f9de1132e6174c8d05e49129b3b62b259ce60e7eee1313b3fe3973ab5a0dea5fd339f1b9caa7247af20ac699e09d74f87ca85d31b76c9d438902f4d4d3f61563ccf2b9e3b92f1354c934ef2b1f46f4b60b4e9f9dca5d41778b795c7e258e23f87d96378b45ab80db3969c3093a4f01be02f36f5b98f932d956fba861ff03d8647e9ea39c186442e7964db61a40d27043657ca31c6d26da1800102d313f90141bcaeef0ee3006153d63935507f3d7a4ef203b1e8453edc98a833ab2a8a52b7438dd3b64d8eba429c79010d660dcff743676c69d711d427d5b62383d7afe79219b1a34c459c6441591811e9150915bffaf68229efcc9aa109d6262f02dfc5d1ea6066b7530c3e92650e610ef23ec1c2814a4d627d0d04a6430703fbdbb988dfe2f4cd02cc82e6b589d35ac5eeebae49c6b513f04b32a85851735d495ff297356937b66b21ce83f97047eaa6054b4304dd9891b58f68b14bb9294a4d8db849478583cbc6471957af19b3a2c62b088b10f724043a65361069263ec7cb5f8b524a13c082c4efb1758a9ff6e7ff2541bd7f878b7c2d3aafc794574634ade83731502b708da6c788137ab6b0624585ad6b6066c6c1280a82ec81a0295a2fb95e0510ca93f7f18f4e6d0ed2b1ec9cb71168830563c4e26cf1bf1d2da57539c390e7fa7263b0dc067e5fe607122fe11fe84e0d4976a3d280c376d7753f307ba5c288ab28e154291ce1ee37d6fd065dec38f831257a11e35d14e107a09a40fbd975d28f4b689053a4bbda64789e8dee963f67a0005e2dba15e326201f091a8c90bc17d972a5dd2a4ff10a6b10f0e7dbc52d151b0aba260956b8002201b68171c3884a2c047b79a4e3e0dd8a1c07625ce8b91afba153f4b3a5284a92ef0d5add7bdbe7210e2ab31fd70fa8681856eb2169696291d1de4665e0568b49b32026354c54b313bc46b70a68cda0fce0fa95376fdca68cc0e05a77837d5c3af36e462a37ee9faae8403a49ec653afa3536c59ab36e5e20f0e9dafdab1ed19a94426c72acb74efedaef5dfeb3f345ed869280d6edc0b7fc20da3df292d8dc01761814f30518e99fb9f855b2b59134cabdae6480fad34cc7ad3c934c6e5bbe76d00a9820d83ee03bcef9205f7207578d70a1a7a709a97d15e6a7c2676588e3b02a9c22659e7dd18151b39a73467a347f4820f23f95b66c12cff4dfbce6eaa21431471feabb9aff0f8b61618905955a653072b583a0855adb7651ede6a1e897208120034e066198fde06e56b1468bddd46639d339c91a25bdd6221b0e527f5809eb75903b24009ecbd98839783464500b81add62b808f5990ac5e0c36731a196a262b4822efa9242c008ca69180eb2c65ee96347132b2ff86cefc7a9f700cde5138fd02251615a861e183bebaaf109961818c4181c45a36d67a471c88ae7b879d33bb30690e2f10e36cae81057ab65392b1d86daaa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x45, 0x5, "7de1ddf0ff4076b952e228adb5a9128bc975f3230c1f5af83eb8d5121248532f5eb6b37e193ef89a783d8e5c57efac24a8d324dec8b2af805862b36cd51a9ae789"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1800000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.--%+\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3688}, 0x1, 0x0, 0x0, 0x4004}, 0x0) recvmsg$can_j1939(r2, &(0x7f0000004640)={&(0x7f00000040c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004140)=""/66, 0x42}, {&(0x7f00000041c0)=""/232, 0xe8}, {&(0x7f00000042c0)=""/163, 0xa3}, {&(0x7f0000004380)=""/154, 0x9a}, {&(0x7f0000004440)=""/166, 0xa6}, {&(0x7f0000004500)=""/26, 0x1a}], 0x6, &(0x7f00000045c0)=""/103, 0x67}, 0x4020) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000004780)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000004740)={&(0x7f00000046c0)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x28}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x80080) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004800)={'veth0_to_bridge\x00', &(0x7f00000047c0)=@ethtool_modinfo={0x42, 0x7, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000004840)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000004880)={0x1d, r10, 0x0, {0x1, 0xf0, 0x7}, 0x2}, 0x18) bind$netlink(r5, &(0x7f00000048c0)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r11, &(0x7f0000004900)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x5, 0xff, 0x2, @none, 0x0, 0x80, 0x101, 0x7ff, 0x3800, 0x6, 0x6e7}}}, 0x1d) ioctl$int_in(r5, 0x5421, &(0x7f0000004940)=0x9) write$bt_hci(r11, &(0x7f0000004980)={0x1, @le_write_def_data_len={{0x2024, 0x4}, {0x7, 0x5}}}, 0x8) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000049c0)={0x3, 0xe649, 0x4, 0x10, 0x3, 0x0, [{0x8, 0x9, 0x5, '\x00', 0x3}, {0xff, 0x200, 0x5, '\x00', 0x1504}, {0x7, 0x7, 0x1, '\x00', 0x8}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000004ac0)={0xa, 0x4e20, 0x2, @loopback, 0x5}, 0x1c) 22.010672468s ago: executing program 3 (id=2695): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @multicast1}, {0x6, @multicast}, 0xa, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'pimreg\x00'}) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0xb8, 0x700001b, 0x148, 0x0, 0x148, 0x188, 0x206, 0x240, 0x188, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x1, 0x0, 0x74}, 0x1ea, 0x70, 0xb8, 0x0, {0x390, 0x8f00}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x4, 0xa, 0x0, 0x2], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (rerun: 64) 21.765270878s ago: executing program 0 (id=2696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc00100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x3f7, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x24}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) 21.640638612s ago: executing program 1 (id=2697): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r3, 0x1) listen(r3, 0x20) shutdown(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x8, r2, 0x2d}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a09ceb944041b166562afed7cd985689662e0e127b6a0c4185acfdc0fe", 0x1d}], 0x1}, 0x800) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000040)=ANY=[], 0x4) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x25, 0x1, 0x0, 0x0, "8335126e052893e2a35cb143a5f60bb0d202d9c0a04ee43553245a001fc35d54464a52fc17e835f1c12689f58fa9e79b52ea04eab7cac7f06ca2373c3bad5d9b"}}}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000012000103"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 21.548914681s ago: executing program 0 (id=2699): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1}, 0x14) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x200, 0x70bd2a, 0x9, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x111) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 21.312623574s ago: executing program 1 (id=2700): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000240)={'wlan1\x00', @multicast}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES64=r11, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r13, 0x0, 0x0) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b06fcffffff00000000300000000500350000000000050033000000000008000200", @ANYRES32=r7, @ANYBLOB="176757ca8a6373efc6bc24839de520f80269c8999227f84fa2ef458ddbb32ee90afe680dacc116b66835eaecc73f92d994f47a4760e395b8be4d34"], 0x2c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2c, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) 21.310171276s ago: executing program 3 (id=2702): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r2, 0xd7735000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) 21.255179919s ago: executing program 0 (id=2703): r0 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r0, 0x3a, 0x1, 0x0, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000070000000800000000000000ed191b171efba7cda2d85f7c9f0a4b33d412ec8aa8e2647cd8455cec25cbb02d26dc5a3567f57906aaad749ab56b6c57edbb3e922b364bedc4f7d03f78a155527f85c08a592703c15ba73920300db5ea014ab9d1648a11fe05a4123f648baccdb8600dd10370e82360502250fc316b47e26377a77d0c96eec4f6794ba5ee277be822799e345d25b8f64da21ad770ca3038f4dd61200f80cefb3d1f63684c9e3d955710b0b826ab005c13c7ff685dec4059", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0xd1, 0xdf, &(0x7f00000003c0)="5847c4be5ac9540992e175ed5bd6fbb620b6afa0754d58a203377c5655e1d68440f45534ff27615ced4f268d0d008a62ffe375349813bdece3a5067b22e85839c74feddde419416af9eccbc7c2b2a8f9cab50bc79769a9ca33e4127c8a3b4fdbb45ac3c953cf1150d2da4739a2f999e30d215b5e1304453efeb20561c07574ea07d5eb6b2c89b855eb0cf6e378046e43ff95635866ce6cfaeb2ce9594196a7c3743745ee9083f1a1be886952daeb32082aea0744ccd5bd07d7bc9c9cdca5b6ee6270f021d3111dea38a649ab364946cf3b", &(0x7f0000000680)=""/223, 0x4, 0x0, 0xa8, 0xac, &(0x7f0000000000)="c6ec1beb388276f6d83d3eb9b278632759ba5b578ab92451af1f8bc05a6fbd65dcbc0a0625599254d76ba6d46f57ab4ce5e06d80c426d6d0e791c4fe9b4d9a49a198027e4981321cfded0ef7a93ab8eb5a84202cd20ba9050f105eb20d7308043c04ea0638b7a39724f5eeb3928b6f3036300c55d4b47fd131062af90e47fa4d80c4e1d310b55eb4d571ea045da7931d7b189b0a8a8fa5386272a255f1bfb5e07559664517378fbe", &(0x7f0000000180)="5dca2a25cda42a5d08eeac6353a0050dc333061dc9e26615f2885e16b35fff3371445968ccf4a5756bbab0ffdf28520d5b36fdaaae340308110e635f51fdbed37f6a7b727107093492722cf49b266dc1d515bb771eeb0088c9cc8fc66db9e27e499761c606b67cd61d36f153da81e93c445ec4b8c7b2068814b8978b28c19843ec117dbfba974804ec699d0110616e5a6bcbe8a3513a0c5b55a23dc40a2d0c4aba4b3e6771b96cc83a7227e2", 0x3, 0x0, 0x8}, 0x50) 21.116588079s ago: executing program 3 (id=2705): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001b00), r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="de0f16a410c9f1ed6ed4dd41876b02d87a8f28d13b5fa1d19a9debe5000cf71588375af6b9a7901dc82cd3b8c9eb8abcf4e1b760f24d80f372080d698221969704068b30df954a915d6bf198e1a9fc49b9b1ae35165a7cd9b36de70cd6af8dee5c0846e80673d875a7cb80c00d40fa173284d2d87ecd863b9b1bdc19d70974226b70b9054f", @ANYRES16=r4, @ANYBLOB="260d25bd7000fedbdf250200000008000200010000003400048005000300020000000500030007000000050003000500000005000300020000000500030007000000050003000500000008000100010000003c000c8024000b800800090045d7445908000a008b26000008000a00fb540000080009003228382e14000b8008000a0073d8000008000a00386b0000"], 0x94}, 0x1, 0x0, 0x0, 0x20048000}, 0x8080) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYRES16=0x0], 0x1c}}, 0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c9c5c4d", @ANYRES16=r3, @ANYBLOB="100026bd7000ffdbdf251d00000008001d0000004000"], 0x1c}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002000010300000000000000000200000005000000090000000500167413000000f5918533a392917107c07abb2e81de3df945608c67d7cba382d7eec322796247eddf8c4e"], 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r8, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) 21.115171817s ago: executing program 1 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) (async) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x40, 0x0, 0x4}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000) epoll_create1(0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) (async) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010008000000430100008000000088a800001400"], 0x68}}, 0x24040800) 21.079999326s ago: executing program 0 (id=2707): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x148, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff2, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe8, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x85, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="08000010", @ANYRES16=r1, @ANYBLOB="010028bd7004040000008900000008000300", @ANYRES32=r2, @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000080), 0x10, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000870000000000002898000000", @ANYRES64=0x0, @ANYRES8=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0006000004"], 0x20000600}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r5, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="cb0600bfeec61eec7ec373960ea0a882c192e2a35dafc0f991a326c34f27472fd12fb73abb816a389be615ee00065e501898653d9b6d14122c85c03d155519cc8710", @ANYRES16=0x0, @ANYBLOB="0400fcfffffffddbdf2512000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r6) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="b1f1785d01000000", @ANYRES16=r7, @ANYBLOB="030f000000000000000008000000a00001000500000000000000000000000000000000c19f7a1454d56fddf96d337648f7cfc3c0413fc7ce5e12bcbad680b7a9bcc90e8e6b8361db14f7e8fba00c12f352f8ebfba7c06a5f5bc01d7d4d81c202bc84d426525450a7fbef652bfc7579833269876d094286f234535b897fe233c6626aa7e49c8e4886d9d423a6da88bff3e40cf16a54806acd1a1bd85eef99148a2ae64b8763936d7918e8481033f0"], 0xb4}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r8 = socket(0xa, 0x5, 0x3a) r9 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x880, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r10, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa}}, @filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0xbea9, 0x8, 0x87, 0x9, 0xb, 0x0, 0x9, 0x0, 0x8001, 0x0, 0x80, 0x6, 0x0, 0xde, 0x7, 0xf6aa, 0x7, 0x9, 0x3ff, 0x7233, 0x8, 0xa26a, 0x6, 0xffff, 0x0, 0x4, 0x9, 0x8, 0x7fffffff, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68f7, 0x400, 0x7fffffff, 0x9, 0x1ff, 0x624a, 0x5, 0xf9, 0x9, 0x5, 0x81, 0x400, 0x8, 0x800, 0x7ff, 0xffff, 0x5, 0xfffffff7, 0x8000, 0xb19, 0x6, 0xc7, 0x9, 0x0, 0x8, 0x0, 0x6, 0x0, 0x200, 0x5, 0x1, 0x3, 0x3, 0x101, 0x5, 0x8001, 0x4719, 0x2, 0x1, 0x1d79, 0x6, 0x5, 0x8000, 0x3, 0x2, 0x9, 0x45dd, 0x0, 0x4, 0x1, 0xc, 0x6, 0x3, 0x1, 0x9, 0x81, 0xfffffffe, 0x6, 0x4647, 0xe0e5, 0x800, 0x5, 0x8, 0x2, 0x5, 0x2, 0x3, 0x1, 0xffff8001, 0x8, 0x1, 0x7fffffff, 0x83d8, 0x8000, 0x3, 0x101, 0x8000, 0x0, 0x3ff, 0x6e3, 0x52, 0x7fff, 0x4, 0x9, 0x7, 0xfffffff5, 0x40, 0x101, 0x5, 0x5, 0x80000000, 0x1, 0xffffffff, 0x1, 0x0, 0xfffffffc, 0xfffffffb, 0x2, 0x8, 0x8000000, 0x1, 0x4, 0x9, 0x7, 0x4, 0xd, 0x9, 0xfffffffa, 0x8, 0xfffffff2, 0x0, 0x2651, 0x800, 0xc319, 0x1, 0x0, 0x80000001, 0x6, 0x8, 0x6, 0x400, 0x4, 0x3ff, 0x501b5b55, 0x7fffffff, 0x2, 0x1, 0x3, 0x7ae, 0x2, 0x9, 0xb, 0xfff, 0x8, 0x101, 0x8000, 0x8, 0x2, 0x9, 0xe2c9, 0x1, 0x0, 0x1005, 0x0, 0x7, 0x2, 0x1f, 0x0, 0xf, 0xc, 0x1, 0x84f, 0x8, 0x94f7, 0x7, 0x5, 0xec38f52e, 0x7, 0x4, 0xc, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7fff, 0xff, 0x9, 0xfffffffc, 0x1ff, 0x3, 0x4, 0x6, 0x8, 0x100, 0x26e2, 0x800, 0x39, 0x3, 0x4, 0x3, 0x7, 0x8000, 0x800, 0x6, 0x0, 0x0, 0xc4, 0x8, 0x6, 0x3, 0x302, 0x1, 0x195, 0x543f, 0x7, 0x4, 0x1, 0x7, 0x81, 0x7, 0x9, 0x40, 0x101, 0x7f, 0x2, 0x2, 0x81, 0xfffffff9, 0x4, 0x1f6, 0xe9a, 0x0, 0x0, 0xdf85, 0xf, 0x4, 0x23, 0x6c, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x6, 0xfffffff7, 0x0, 0xc7f5, {0xe, 0x0, 0xdfb, 0x7, 0xc, 0x7aefe6b8}, {0x1, 0x0, 0x3, 0xd, 0x1, 0x9}, 0x9, 0x4, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0xffffffff, 0x9, 0x4, 0x9, 0x2, 0x40, 0x308, 0x1, 0x1000000, 0xffffff74, 0x1, 0x80, 0xe, 0x3, 0x3, 0x1, 0x6, 0x7ff, 0x5, 0x380, 0x7, 0x9, 0xc, 0xb, 0x3, 0x5c05, 0x1, 0x3, 0x0, 0x4, 0x1, 0x57, 0x39800000, 0x8, 0x0, 0x9, 0xff, 0x1ff, 0x7, 0x3, 0x9, 0x6, 0xa94, 0x8, 0x5, 0x80, 0x0, 0x100, 0xebf, 0x69, 0x1ff, 0xcda2, 0x401, 0xfffffffc, 0x5ed755fb, 0x318d, 0x101, 0x8, 0x6, 0x3d75, 0xe48e, 0x1, 0x80000001, 0x9b, 0xffffff07, 0xfffffffe, 0x5, 0x0, 0x7, 0x7, 0x8, 0x3, 0x8, 0x6, 0x1, 0x1000, 0x1, 0x1f, 0x9, 0x8000, 0x6, 0x1, 0xaef, 0x9, 0x7f, 0x3, 0x6, 0x5, 0x0, 0x0, 0xccdd, 0xe0b, 0x6, 0x3, 0x8, 0x2, 0x4, 0x3f7, 0x4, 0x101, 0x3, 0x3, 0x3, 0x1, 0x8, 0x0, 0x2dbb9dea, 0x6, 0x80000001, 0x0, 0x3ff, 0x0, 0x0, 0x9, 0x4, 0x9, 0x1, 0x4, 0xad71, 0x39, 0x8, 0x4, 0xb, 0xd, 0x9, 0x1, 0x10000, 0xf0, 0xfffffffb, 0x5, 0x2fc3, 0x5, 0xb, 0xc4, 0x1ff, 0x80000001, 0x0, 0x5, 0x70000, 0xd85, 0x1603, 0xfffffffc, 0x40, 0x3ff, 0x8000, 0xbae, 0x1, 0x2, 0x1ff, 0x7ac7, 0x8, 0xc8, 0x53, 0xfffffe00, 0x7fffffff, 0x1000, 0x0, 0x3, 0x3, 0x9, 0x0, 0x8, 0x1ff, 0x9, 0x23, 0x7, 0x7ff, 0x0, 0x0, 0x2, 0x5, 0x101, 0x2, 0x3, 0x5, 0x9e, 0x9, 0x0, 0x7, 0xc1, 0x5, 0x9, 0x4, 0x7, 0xfffffff2, 0x81, 0x3, 0x1, 0x2, 0x0, 0x1, 0x9, 0x2, 0x13e3, 0x180000, 0x9, 0x0, 0xfff, 0x1fb0, 0x4ae, 0x80, 0xc, 0xb1, 0x2, 0x3, 0x8, 0x2, 0x6, 0x1, 0x200, 0x98e0, 0x3, 0x2, 0x0, 0xfffffffe, 0x8de0, 0x5, 0xfffffffe, 0x1, 0x4, 0x4, 0xec, 0x9, 0x6, 0x6, 0x0, 0x19, 0x9, 0x7e, 0x7, 0x5, 0x1, 0x9, 0xc, 0x1, 0x5, 0xffff, 0x2, 0x8, 0x9, 0x1, 0x5, 0x4, 0x58, 0x7f, 0x223, 0x7, 0x8000, 0x5, 0x2, 0x1ff, 0x2, 0x7, 0x8]}]}]}}]}, 0x880}}, 0x24000000) r11 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r11, 0x80184947, &(0x7f0000000dc0)={0x5, 'syz1\x00'}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, 0x0, 0x0) 20.868568517s ago: executing program 1 (id=2709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce", 0xd9}, {&(0x7f0000000880)="90045127107781b2802972e8d927a800a56c62861f6a44957e17a30de6f8e1a6c1fe3056d3cf94594169a8284764158bdbec8292978798", 0x37}], 0x2}, 0x40000000) (async) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce", 0xd9}, {&(0x7f0000000880)="90045127107781b2802972e8d927a800a56c62861f6a44957e17a30de6f8e1a6c1fe3056d3cf94594169a8284764158bdbec8292978798", 0x37}], 0x2}, 0x40000000) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x56}, {&(0x7f0000001080)=""/215, 0xd7}], 0x2}}], 0x1, 0x200, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.67365632s ago: executing program 0 (id=2718): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_crypto(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0xc306a4c457a097df) close(0x3) 19.602609007s ago: executing program 0 (id=2720): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff"], 0x110) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 17.228913941s ago: executing program 4 (id=2747): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x20}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x20}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) close(0x3) 17.164879371s ago: executing program 4 (id=2748): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r2 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'net'}, {0x2d, 'net'}]}, 0xa) 17.094522624s ago: executing program 4 (id=2750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0x0, 0xff, 0x0, 0xff], [], 'pimreg0\x00', 'geneve1\x00', {}, {}, 0x0, 0x4, 0x0, 0x55}, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@mcast2, [0xffffff00, 0x0, 0xffffff00, 0xffffff], 0x4e21, 0xff, 0x2, 0x4e24, 0x20, 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x18, "d05511d4053fa80d56e441286224250ca2535f0c8aa13a6276593694a239"}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@icmp6={{0x28}, {0x10, "5bbf", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='2']}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x14c8c194b4de4ba9}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x278, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7e2}, [@NFTA_TABLE_USERDATA={0x80, 0x6, "14d83313d4f41bf0e8eb0eff1db017f6bed11570b98d410ad9b6111f8379dc06b65585580ec2e258ecd43f7631617da86d2a0345042fd53540e2f13fc378bb8c46d0147319e6ad2189699ae720bea1913f34b89bcdc3573a442b34994663419135fa38d2e7ce5c6e2d4bea8af5d19147322abe18e9002a3642f2adad"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x88, 0x6, "ca5466671fa7ae9e97b968a2ffc7638f0151e697922cab0c9bcc4bf5ad6f3289b4ab8695c4dd8eea0893fdea1b4f0b80328e798be1589f63af4e238981d7b612d82414e44590272d187e8e2720a25de014096e5fd740ff432c77a0f6afb712b02637012c01d202278dd067fdde2932b491cee14abc2c9aa12a32b88f0c332fbf5be2cd6a"}, @NFTA_TABLE_USERDATA={0xd0, 0x6, "c801d238ab25db95d548a4e0aa0fb37c8f1284ebfbd38e2f9a3828c524db8384b0e2ebc281ce1bf6781163238e23b624c234ddb44c8e656b2bc40fd9f9082f7cbef000ef82e6fdbbc1a06671e632b606d94a44f738a52c2c2a12c4aa1a6921332745babd2e7c42fa97358dd99e29f674ab1f7cd412be092df1189e290985fa16505830a9caae652a9e0ee46ec82ca50c2d72c1543b83ab73fa75d71269a89314b7e5268a697b713f931f482c3e5ef1e14f480e6bf4dd9bc94d12317774e58611ec08beff511d93f91370da1c"}, @NFTA_TABLE_USERDATA={0x6b, 0x6, "e0937a420d1b9af866f70ac051e25e875d49b416f07e58ca7b4af86c5e01355c308fe07e7ab4d20411eb8c11c2bc74c3054f53cb47df528ac3f102910393e514a22500351c1e8ae7e1c1f14c893b9d3b27469d9b7644736b3c9a18f7746d9bf1ebdf32e511b54a"}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xd}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x200, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x1cc, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5b8}, 0x1, 0x0, 0x0, 0x11}, 0x4008890) 16.997450021s ago: executing program 4 (id=2751): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x5}}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="607be25f2ef1280ed2c663ad71511dde7f74dd31fb0e5a9dbe2ee7745c3636ae33443fa73a387c92566fc67599610cabb9a3fcc284c5d0e7824e32b0d8fd3acef8af71e5f4784bd40778d418042d76c4e25c840db0b8022dddb286e48c9d34d0bcfe943d2cb2b3e77998406bdc487c63740e9d450f16ca09323f1ffa6c83e41bd8da053dfd564f5ebf6bf529217bec9611005a3955f9082f30027a5a7fb021a5eaf79760c0ab0f42ca4b091855c9c192f234f9e3f5ada9", 0xb7}], 0x1}], 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x24, r11, 0xf81, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1000000}, @val={0x8}, @void}}}, 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, r12, 0x607, 0x270bd09, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}}, 0x8480) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x6) 16.927908521s ago: executing program 4 (id=2753): r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1f8}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB="8093232716ff735e7e0236b32b43abd314be61461d0a864ae49d66be84dfdfa6c9bd22aec721bd603412c14ba98e909db194f53c210d1d4c2d704952", @ANYBLOB="0005000082180000140012800bae9f055e726964676500000400028008000a00", @ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x85) 16.867816852s ago: executing program 4 (id=2754): r0 = socket(0x6, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x9}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (rerun: 32) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(0x0, r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000066c0)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) (async, rerun: 32) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) (async, rerun: 32) close(0x3) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x6, 0x38d}, &(0x7f0000000040)=0xc) 15.299431887s ago: executing program 2 (id=2771): r0 = socket(0x14, 0x2, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x61e3, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r2, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket(0x1f, 0x2, 0x7) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) accept$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000002000)=[{{&(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x44) (async) r9 = socket(0x10, 0x3, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x20500, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r11, 0x1, 0x4d, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) (async) ppoll(&(0x7f0000000040)=[{r10, 0x290}], 0x1, 0x0, 0x0, 0x0) r13 = socket(0x7, 0x4, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, r13, 0x5, 0x84, &(0x7f0000000000)="28a8ec0027152c5c03d8662298c20213036ed6bfe45e0c4baec310ff4470b46a4f0032acfac316cbc87d05b18437629ff1664d5aa2bc5bbf63f8cd7e3397d581b341f2f773b1e31cb317f590bb0960aa26f2d3bbf40a0cd553cfa05bf554a21b83e39e973b7e88d8bd68623264be2351dcd6b7bd5c27f918f05631e111557008e15906b4", 0x3, 0x0, 0x1, 0x7, 0x5, 0x2, 0x9, 'syz0\x00'}) 15.232895808s ago: executing program 2 (id=2772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 15.232373661s ago: executing program 2 (id=2773): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote, 'ip6tnl0\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) 15.209544434s ago: executing program 2 (id=2774): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x8001, 0xfffffffffffffc00, 0x5}) write$nci(r1, &(0x7f00000001c0)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x3, {0x0, 0x3, 0x6, 0xe, 0x7, 0x9, 0x9, 0x9, 0x23, "521662f0c49064aa728848babd17b6f6c66b3a8381c3c41245c257759957508b8c177e"}}, 0x34) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 15.180265647s ago: executing program 2 (id=2775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r3}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000013c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000004}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) (async) socket$kcm(0x29, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r2}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r3}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) (async) sendmmsg$unix(r4, &(0x7f00000013c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000004}}], 0x2, 0x0) (async) 15.092602461s ago: executing program 2 (id=2776): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005c00)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="4bf02b7a7621598c6d2fcdeff42762d1c52427d4fdf8058c01e48b54dc8dc18b4bab651ee9a024c4a12b7a790bc57837c93de1f85a2017ed21f04af5b013d5171d346873d06f02a55d6e2e94f0e4b3698f6fe8c882a46d3b", 0x58}, {&(0x7f0000000480)="89c0e5e7bd1dbaa010853528", 0xc}], 0x2, &(0x7f0000002500)=ANY=[], 0x210, 0x40}], 0x1, 0x4000) (async) sendmmsg$alg(r1, &(0x7f0000005c00)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="4bf02b7a7621598c6d2fcdeff42762d1c52427d4fdf8058c01e48b54dc8dc18b4bab651ee9a024c4a12b7a790bc57837c93de1f85a2017ed21f04af5b013d5171d346873d06f02a55d6e2e94f0e4b3698f6fe8c882a46d3b", 0x58}, {&(0x7f0000000480)="89c0e5e7bd1dbaa010853528", 0xc}], 0x2, &(0x7f0000002500)=ANY=[], 0x210, 0x40}], 0x1, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000ac0)={0x88, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x68d, 0x44}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x1000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000009c0)="f5743f362c26eca482e9b4a024369ed683c8b4039d0baaec0be5c17e75779b1f7c6f17c44fee962bb1cc88130a88d282067ab6514095554cd0e31016b0de1f64eaec11d1d89b4933747d9566785814a19bb48f08e9449edc6cee0b78204c31d90295849c228d64b5b57b676b3ed0ffe4dbf11bf64918bf51c401dfda9afd07e4ab96b6e2c2850f7162472f7846da673aef6ffe2143a6f4f69665741af9aacbf5281faac1a5843a7a062f4231fdd896b5fad014883621f9c25f3316f6ddd838f90d9d53e8c5b2", 0xc6}], 0x1}}], 0x1, 0x9200000000000000) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) (async) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8}, 0x94) socket(0x28, 0x5, 0x0) (async) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) r6 = socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000013000500000000000300000007000000", @ANYRES32=r9, @ANYRES32=r3], 0x34}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000013000500000000000300000007000000", @ANYRES32=r9, @ANYRES32=r3], 0x34}}, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r10 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r10, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r11}, 0x10) 6.061243922s ago: executing program 32 (id=2705): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001b00), r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="de0f16a410c9f1ed6ed4dd41876b02d87a8f28d13b5fa1d19a9debe5000cf71588375af6b9a7901dc82cd3b8c9eb8abcf4e1b760f24d80f372080d698221969704068b30df954a915d6bf198e1a9fc49b9b1ae35165a7cd9b36de70cd6af8dee5c0846e80673d875a7cb80c00d40fa173284d2d87ecd863b9b1bdc19d70974226b70b9054f", @ANYRES16=r4, @ANYBLOB="260d25bd7000fedbdf250200000008000200010000003400048005000300020000000500030007000000050003000500000005000300020000000500030007000000050003000500000008000100010000003c000c8024000b800800090045d7445908000a008b26000008000a00fb540000080009003228382e14000b8008000a0073d8000008000a00386b0000"], 0x94}, 0x1, 0x0, 0x0, 0x20048000}, 0x8080) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYRES16=0x0], 0x1c}}, 0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c9c5c4d", @ANYRES16=r3, @ANYBLOB="100026bd7000ffdbdf251d00000008001d0000004000"], 0x1c}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002000010300000000000000000200000005000000090000000500167413000000f5918533a392917107c07abb2e81de3df945608c67d7cba382d7eec322796247eddf8c4e"], 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r8, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) 5.046561977s ago: executing program 33 (id=2709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce", 0xd9}, {&(0x7f0000000880)="90045127107781b2802972e8d927a800a56c62861f6a44957e17a30de6f8e1a6c1fe3056d3cf94594169a8284764158bdbec8292978798", 0x37}], 0x2}, 0x40000000) (async) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce", 0xd9}, {&(0x7f0000000880)="90045127107781b2802972e8d927a800a56c62861f6a44957e17a30de6f8e1a6c1fe3056d3cf94594169a8284764158bdbec8292978798", 0x37}], 0x2}, 0x40000000) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x56}, {&(0x7f0000001080)=""/215, 0xd7}], 0x2}}], 0x1, 0x200, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.019802017s ago: executing program 34 (id=2754): r0 = socket(0x6, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x9}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (rerun: 32) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(0x0, r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000066c0)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) (async, rerun: 32) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) (async, rerun: 32) close(0x3) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x6, 0x38d}, &(0x7f0000000040)=0xc) 0s ago: executing program 35 (id=2776): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005c00)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="4bf02b7a7621598c6d2fcdeff42762d1c52427d4fdf8058c01e48b54dc8dc18b4bab651ee9a024c4a12b7a790bc57837c93de1f85a2017ed21f04af5b013d5171d346873d06f02a55d6e2e94f0e4b3698f6fe8c882a46d3b", 0x58}, {&(0x7f0000000480)="89c0e5e7bd1dbaa010853528", 0xc}], 0x2, &(0x7f0000002500)=ANY=[], 0x210, 0x40}], 0x1, 0x4000) (async) sendmmsg$alg(r1, &(0x7f0000005c00)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="4bf02b7a7621598c6d2fcdeff42762d1c52427d4fdf8058c01e48b54dc8dc18b4bab651ee9a024c4a12b7a790bc57837c93de1f85a2017ed21f04af5b013d5171d346873d06f02a55d6e2e94f0e4b3698f6fe8c882a46d3b", 0x58}, {&(0x7f0000000480)="89c0e5e7bd1dbaa010853528", 0xc}], 0x2, &(0x7f0000002500)=ANY=[], 0x210, 0x40}], 0x1, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000ac0)={0x88, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x68d, 0x44}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x1000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000009c0)="f5743f362c26eca482e9b4a024369ed683c8b4039d0baaec0be5c17e75779b1f7c6f17c44fee962bb1cc88130a88d282067ab6514095554cd0e31016b0de1f64eaec11d1d89b4933747d9566785814a19bb48f08e9449edc6cee0b78204c31d90295849c228d64b5b57b676b3ed0ffe4dbf11bf64918bf51c401dfda9afd07e4ab96b6e2c2850f7162472f7846da673aef6ffe2143a6f4f69665741af9aacbf5281faac1a5843a7a062f4231fdd896b5fad014883621f9c25f3316f6ddd838f90d9d53e8c5b2", 0xc6}], 0x1}}], 0x1, 0x9200000000000000) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) (async) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8}, 0x94) socket(0x28, 0x5, 0x0) (async) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) r6 = socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000013000500000000000300000007000000", @ANYRES32=r9, @ANYRES32=r3], 0x34}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000013000500000000000300000007000000", @ANYRES32=r9, @ANYRES32=r3], 0x34}}, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r10 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r10, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r11}, 0x10) kernel console output (not intermixed with test programs): 94.593127][T10106] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.593158][T10106] ? policy_nodemask+0x27c/0x720 [ 194.593179][T10106] ? __pfx__copy_from_iter+0x10/0x10 [ 194.593207][T10106] ? set_page_refcounted+0xa0/0x1e0 [ 194.593230][T10106] ? page_copy_sane+0x4e/0x280 [ 194.593252][T10106] copy_page_from_iter+0xdd/0x170 [ 194.593277][T10106] tun_get_user+0x1d40/0x3dc0 [ 194.593305][T10106] ? tun_get_user+0x6fc/0x3dc0 [ 194.593343][T10106] ? aa_file_perm+0x44c/0x1530 [ 194.593369][T10106] ? __pfx_tun_get_user+0x10/0x10 [ 194.593394][T10106] ? __lock_acquire+0x6b6/0x2cf0 [ 194.593418][T10106] ? kstrtoull+0x12f/0x1d0 [ 194.593454][T10106] ? ref_tracker_alloc+0x318/0x460 [ 194.593476][T10106] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 194.593510][T10106] ? tun_get+0x1c/0x2f0 [ 194.593539][T10106] ? tun_get+0x1c/0x2f0 [ 194.593561][T10106] ? tun_get+0x1c/0x2f0 [ 194.593589][T10106] tun_chr_write_iter+0x113/0x200 [ 194.593615][T10106] vfs_write+0x5c9/0xb30 [ 194.593640][T10106] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 194.593663][T10106] ? __pfx_vfs_write+0x10/0x10 [ 194.593694][T10106] ? __fget_files+0x2a/0x420 [ 194.593728][T10106] ksys_write+0x145/0x250 [ 194.593750][T10106] ? __pfx_ksys_write+0x10/0x10 [ 194.593773][T10106] ? do_syscall_64+0xbe/0xf80 [ 194.593798][T10106] do_syscall_64+0xfa/0xf80 [ 194.593819][T10106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.593837][T10106] ? clear_bhb_loop+0x60/0xb0 [ 194.593862][T10106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.593879][T10106] RIP: 0033:0x7f4b6338e1ff [ 194.593897][T10106] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 194.593912][T10106] RSP: 002b:00007f4b6429a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 194.593935][T10106] RAX: ffffffffffffffda RBX: 00007f4b635e6090 RCX: 00007f4b6338e1ff [ 194.593950][T10106] RDX: 0000000000000036 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 194.593962][T10106] RBP: 00007f4b6429a090 R08: 0000000000000000 R09: 0000000000000000 [ 194.593973][T10106] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 194.593984][T10106] R13: 00007f4b635e6128 R14: 00007f4b635e6090 R15: 00007ffd71ee2b98 [ 194.594018][T10106] [ 195.065943][T10133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.086315][T10135] __nla_validate_parse: 9 callbacks suppressed [ 195.086397][T10135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1372'. [ 195.414064][T10149] lo: entered promiscuous mode [ 195.419079][T10149] lo: left allmulticast mode [ 195.434029][T10149] tunl0: entered promiscuous mode [ 195.444960][T10149] tunl0: left allmulticast mode [ 195.451366][T10149] gre0: entered promiscuous mode [ 195.465402][T10149] gre0: left allmulticast mode [ 195.481150][T10149] gretap0: entered promiscuous mode [ 195.494924][T10149] erspan0: entered promiscuous mode [ 195.509076][T10149] erspan0: left allmulticast mode [ 195.529875][T10149] ip_vti0: entered promiscuous mode [ 195.545319][T10149] ip_vti0: left allmulticast mode [ 195.777489][T10159] bridge3: entered promiscuous mode [ 195.783437][T10159] bridge3: entered allmulticast mode [ 195.794208][T10174] lo: entered allmulticast mode [ 195.803469][T10174] tunl0: entered allmulticast mode [ 195.808903][T10174] gre0: left promiscuous mode [ 195.827316][T10174] gre0: entered allmulticast mode [ 195.851127][T10174] gretap0: entered allmulticast mode [ 195.869504][T10178] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1384'. [ 195.906643][T10174] erspan0: entered allmulticast mode [ 195.947829][T10174] ip_vti0: entered allmulticast mode [ 195.981793][T10174] ip6_vti0: entered allmulticast mode [ 196.023682][T10174] sit0: entered allmulticast mode [ 196.060287][T10174] ip6tnl0: entered allmulticast mode [ 196.102643][T10174] ip6gre0: entered allmulticast mode [ 196.124959][T10174] syz_tun: entered allmulticast mode [ 196.151467][T10174] ip6gretap0: entered allmulticast mode [ 196.186391][T10174] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.194629][T10174] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.231478][T10174] bridge0: entered allmulticast mode [ 196.264133][T10174] vcan0: entered allmulticast mode [ 196.311636][T10174] team_slave_0: left promiscuous mode [ 196.334523][T10174] team_slave_1: left promiscuous mode [ 196.357613][T10174] team0: entered allmulticast mode [ 196.407976][T10174] team_slave_0: entered allmulticast mode [ 196.419139][T10174] team_slave_1: entered allmulticast mode [ 196.478165][T10174] dummy0: entered allmulticast mode [ 196.528254][T10174] nlmon0: entered allmulticast mode [ 196.567878][T10174] caif0: entered allmulticast mode [ 196.631051][T10174] vxcan0: entered allmulticast mode [ 196.658999][T10174] vxcan1: entered allmulticast mode [ 196.703138][T10174] veth0: entered allmulticast mode [ 196.735536][T10174] veth1: entered allmulticast mode [ 196.758581][T10174] wg0: entered allmulticast mode [ 196.776406][T10174] wg1: entered allmulticast mode [ 196.799859][T10174] wg2: entered allmulticast mode [ 196.814932][T10174] veth0_to_bridge: entered allmulticast mode [ 196.827521][T10174] veth1_to_bridge: entered allmulticast mode [ 196.828667][T10216] netlink: 'syz.0.1390': attribute type 2 has an invalid length. [ 196.861635][T10174] veth0_to_bond: entered allmulticast mode [ 196.879771][T10174] veth1_to_bond: entered allmulticast mode [ 196.897681][T10174] veth0_to_team: entered allmulticast mode [ 196.914244][T10174] veth1_to_team: entered allmulticast mode [ 196.941661][T10174] veth0_to_batadv: entered allmulticast mode [ 196.954201][T10174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.963035][T10174] batadv_slave_0: entered allmulticast mode [ 196.977243][T10174] veth1_to_batadv: entered allmulticast mode [ 196.989201][T10174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.006333][T10174] batadv_slave_1: entered allmulticast mode [ 197.017791][T10174] xfrm0: left promiscuous mode [ 197.028585][T10174] veth0_to_hsr: entered allmulticast mode [ 197.039243][T10174] hsr_slave_0: entered allmulticast mode [ 197.050495][T10174] veth1_to_hsr: entered allmulticast mode [ 197.061586][T10174] hsr_slave_1: entered allmulticast mode [ 197.080086][T10174] hsr0: entered allmulticast mode [ 197.091411][T10174] veth1_virt_wifi: entered allmulticast mode [ 197.107955][T10174] veth0_virt_wifi: entered allmulticast mode [ 197.117928][T10174] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 197.126906][T10174] veth1_vlan: entered allmulticast mode [ 197.137911][T10174] veth0_vlan: entered allmulticast mode [ 197.152625][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 197.160851][ C0] lec:lec_tx_timeout: lec0 [ 197.166043][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 197.193957][T10174] vlan0: entered allmulticast mode [ 197.199308][T10174] vlan1: entered allmulticast mode [ 197.208086][T10174] macvlan0: entered allmulticast mode [ 197.221853][T10174] macvlan1: entered allmulticast mode [ 197.233792][T10174] ipvlan0: entered allmulticast mode [ 197.239542][T10174] ipvlan1: entered allmulticast mode [ 197.246603][T10174] veth1_macvtap: entered allmulticast mode [ 197.260134][T10174] veth0_macvtap: entered allmulticast mode [ 197.275328][T10174] macvtap0: entered allmulticast mode [ 197.291564][T10174] macsec0: entered allmulticast mode [ 197.307584][T10174] geneve0: entered allmulticast mode [ 197.318917][T10174] geneve1: entered allmulticast mode [ 197.330936][T10174] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 197.344615][T10174] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 197.358919][T10174] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 197.371942][T10174] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 197.388610][T10174] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 197.396481][T10174] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 197.414306][T10174] batadv0.5: entered allmulticast mode [ 197.420443][T10174] ip6gre1: entered allmulticast mode [ 197.431242][T10174] veth2: entered allmulticast mode [ 197.437167][T10174] veth3: entered allmulticast mode [ 197.448776][T10174] macvlan2: entered allmulticast mode [ 197.466897][T10174] macvlan3: entered allmulticast mode [ 197.477365][T10174] vlan2: entered allmulticast mode [ 197.483669][T10174] ip6gre2: entered allmulticast mode [ 197.490043][T10174] vlan3: entered allmulticast mode [ 197.498805][T10174] ipip0: entered allmulticast mode [ 197.508114][T10174] bridge1: entered allmulticast mode [ 197.526768][T10174] erspan1: entered allmulticast mode [ 197.533543][T10174] bond1: entered allmulticast mode [ 197.539629][T10174] gre1: entered allmulticast mode [ 197.574217][T10174] bond2: entered allmulticast mode [ 197.580058][T10174] gretap1: entered allmulticast mode [ 197.594629][T10174] veth4: entered allmulticast mode [ 197.600313][T10174] veth5: entered allmulticast mode [ 197.608138][T10174] bridge2: entered allmulticast mode [ 197.632989][T10174] bond3: entered allmulticast mode [ 197.643866][T10174] veth6: entered allmulticast mode [ 197.649534][T10174] veth7: entered allmulticast mode [ 197.655630][T10174] bond4: entered allmulticast mode [ 197.794181][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.827562][ T4345] syzkaller0: tun_net_xmit 76 [ 197.856271][T10226] syzkaller0: tun_net_xmit 76 [ 197.861500][ T4345] syzkaller0: tun_net_xmit 48 [ 197.876247][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.910878][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.103752][T10253] netlink: 'syz.0.1393': attribute type 28 has an invalid length. [ 198.142880][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.406896][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 198.436308][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 198.457981][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 198.589922][T10277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.635043][T10278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1398'. [ 199.985917][T10280] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1400'. [ 199.997080][T10282] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1398'. [ 200.320018][T10319] xt_hashlimit: size too large, truncated to 1048576 [ 200.694937][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 201.203723][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 201.335221][T10358] netlink: 'syz.0.1416': attribute type 3 has an invalid length. [ 201.358793][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 201.370267][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1415'. [ 201.474513][T10358] netlink: 'syz.0.1416': attribute type 7 has an invalid length. [ 201.836763][T10392] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.884616][T10392] netlink: 'syz.3.1426': attribute type 3 has an invalid length. [ 201.893050][T10392] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 201.900817][T10392] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1426'. [ 201.910868][T10392] NCSI netlink: No device for ifindex 813332851 [ 202.011851][T10400] xt_hashlimit: size too large, truncated to 1048576 [ 202.037279][T10405] netlink: 'syz.4.1429': attribute type 3 has an invalid length. [ 202.065288][T10391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.191653][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 202.199922][ C0] lec:lec_tx_timeout: lec0 [ 202.206993][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 202.257407][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1431'. [ 203.045606][T10446] netlink: 'syz.1.1439': attribute type 21 has an invalid length. [ 203.103223][T10448] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 203.386199][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 203.644088][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1447'. [ 203.971652][T10494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1451'. [ 204.086684][T10503] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1453'. [ 204.169499][T10503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.858256][T10543] netem: invalid attributes len -24 [ 204.869647][T10543] netem: change failed [ 204.898100][T10542] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 205.226763][T10561] Cannot find map_set index 0 as target [ 205.313642][T10566] Cannot find map_set index 0 as target [ 205.782473][ C0] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 205.879868][T10593] syzkaller1: entered allmulticast mode [ 206.718784][T10628] __nla_validate_parse: 3 callbacks suppressed [ 206.718805][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 206.768937][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 206.771121][T10634] bridge0: port 1(macsec0) entered blocking state [ 206.816388][T10634] bridge0: port 1(macsec0) entered disabled state [ 206.832880][T10634] macsec0: entered allmulticast mode [ 206.848584][T10634] veth1_macvtap: entered allmulticast mode [ 206.860766][T10634] macsec0: entered promiscuous mode [ 206.943877][ T4345] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.964905][ T4345] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.003224][ T4345] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.016745][T10641] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 207.035705][ T4345] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.149754][T10644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1483'. [ 207.216190][T10652] netlink: 'syz.4.1486': attribute type 1 has an invalid length. [ 207.222158][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 207.232350][ C0] lec:lec_tx_timeout: lec0 [ 207.237976][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 207.248654][T10656] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 207.310758][T10661] netlink: 'syz.0.1487': attribute type 1 has an invalid length. [ 207.391731][T10663] netlink: 'syz.3.1488': attribute type 2 has an invalid length. [ 207.402890][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 207.737659][T10677] gre1: entered promiscuous mode [ 207.756346][T10677] gre1: entered allmulticast mode [ 207.874099][T10683] sock: sock_set_timeout: `syz.4.1494' (pid 10683) tries to set negative timeout [ 207.886598][T10683] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1494'. [ 208.147346][T10699] ipt_REJECT: TCP_RESET invalid for non-tcp [ 208.279539][T10705] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1502'. [ 208.393651][T10713] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1506'. [ 208.429491][T10709] bond3: entered allmulticast mode [ 208.435972][T10709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.657015][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1510'. [ 208.670303][T10720] sctp: [Deprecated]: syz.2.1508 (pid 10720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.670303][T10720] Use struct sctp_sack_info instead [ 208.893355][T10741] --map-set only usable from mangle table [ 209.120962][T10757] x_tables: duplicate underflow at hook 2 [ 209.130906][T10757] x_tables: duplicate underflow at hook 2 [ 209.140358][T10757] x_tables: duplicate underflow at hook 2 [ 209.147533][T10757] x_tables: duplicate underflow at hook 2 [ 209.153712][T10757] x_tables: duplicate underflow at hook 2 [ 209.160224][T10757] x_tables: duplicate underflow at hook 2 [ 209.168037][T10757] x_tables: duplicate underflow at hook 2 [ 209.175761][T10757] x_tables: duplicate underflow at hook 2 [ 209.181816][T10757] x_tables: duplicate underflow at hook 2 [ 209.188308][T10757] x_tables: duplicate underflow at hook 2 [ 209.488766][T10780] openvswitch: netlink: Message has 592 unknown bytes. [ 209.516409][T10775] netlink: 'syz.2.1525': attribute type 10 has an invalid length. [ 209.520651][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.547895][T10775] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 209.579769][T10775] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 209.613465][T10775] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 209.661534][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 209.692926][T10789] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1530'. [ 209.694680][T10794] netlink: 'syz.4.1532': attribute type 3 has an invalid length. [ 209.711693][T10794] netlink: 'syz.4.1532': attribute type 3 has an invalid length. [ 209.721097][T10794] netlink: 'syz.4.1532': attribute type 3 has an invalid length. [ 209.734010][T10789] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 210.561945][T10836] vlan2: entered promiscuous mode [ 210.585905][T10836] veth1_to_batadv: entered promiscuous mode [ 210.593437][T10836] vlan2: entered allmulticast mode [ 210.995130][T10858] netlink: 'syz.0.1553': attribute type 11 has an invalid length. [ 211.051986][T10862] netlink: 'syz.4.1556': attribute type 33 has an invalid length. [ 211.103668][T10862] IPv6: sit1: Disabled Multicast RS [ 211.113898][T10862] sit1: entered allmulticast mode [ 211.353671][T10881] netlink: 'syz.2.1562': attribute type 29 has an invalid length. [ 211.411300][T10881] unsupported nla_type 58 [ 211.733781][T10912] __nla_validate_parse: 10 callbacks suppressed [ 211.733804][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 211.846007][T10918] ip6erspan0: entered promiscuous mode [ 211.855071][T10918] ip6erspan0: entered allmulticast mode [ 211.865654][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 211.870967][T10923] Bluetooth: hci2: command 0x0401 tx timeout [ 211.872324][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 211.879030][T10923] Bluetooth: hci1: command 0x0406 tx timeout [ 211.956399][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1576'. [ 212.273510][T10938] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1578'. [ 212.338578][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 212.677210][T10957] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 212.831416][T10968] validate_nla: 1 callbacks suppressed [ 212.831438][T10968] netlink: 'syz.3.1587': attribute type 13 has an invalid length. [ 212.847074][T10968] veth0_macvtap: left promiscuous mode [ 212.865523][T10968] macvtap0: entered allmulticast mode [ 212.889793][T10968] macvtap0: refused to change device tx_queue_len [ 213.062240][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 213.070434][ C0] lec:lec_tx_timeout: lec0 [ 213.076030][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 213.389546][T10996] FAULT_INJECTION: forcing a failure. [ 213.389546][T10996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.404783][T10998] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 213.428540][T10996] CPU: 0 UID: 0 PID: 10996 Comm: syz.2.1599 Not tainted syzkaller #0 PREEMPT(full) [ 213.428576][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.428587][T10996] Call Trace: [ 213.428596][T10996] [ 213.428604][T10996] dump_stack_lvl+0x189/0x250 [ 213.428634][T10996] ? __pfx____ratelimit+0x10/0x10 [ 213.428653][T10996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.428676][T10996] ? __pfx__printk+0x10/0x10 [ 213.428705][T10996] ? __might_fault+0xb0/0x130 [ 213.428747][T10996] should_fail_ex+0x414/0x560 [ 213.428782][T10996] _copy_from_user+0x2d/0xb0 [ 213.428807][T10996] __sys_bpf+0x1e3/0x860 [ 213.428837][T10996] ? __pfx___sys_bpf+0x10/0x10 [ 213.428860][T10996] ? bpf_trace_run2+0x322/0x4c0 [ 213.428922][T10996] __x64_sys_bpf+0x7c/0x90 [ 213.428948][T10996] do_syscall_64+0xfa/0xf80 [ 213.428970][T10996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.428989][T10996] ? clear_bhb_loop+0x60/0xb0 [ 213.429014][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.429033][T10996] RIP: 0033:0x7ff82298f749 [ 213.429052][T10996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.429068][T10996] RSP: 002b:00007ff8237bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.429090][T10996] RAX: ffffffffffffffda RBX: 00007ff822be5fa0 RCX: 00007ff82298f749 [ 213.429105][T10996] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 000000000000001d [ 213.429118][T10996] RBP: 00007ff8237bb090 R08: 0000000000000000 R09: 0000000000000000 [ 213.429130][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.429142][T10996] R13: 00007ff822be6038 R14: 00007ff822be5fa0 R15: 00007ffcab4ee518 [ 213.429177][T10996] [ 213.655160][T10998] 8021q: adding VLAN 0 to HW filter on device bond7 [ 213.685831][T10998] bond6: (slave bond7): making interface the new active one [ 213.696779][T10998] bond6: (slave bond7): Enslaving as an active interface with an up link [ 213.745064][T11007] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 213.773707][T11001] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 213.794900][T11001] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 213.846986][T11011] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1605'. [ 213.856970][T11011] openvswitch: netlink: Flow actions attr not present in new flow. [ 214.064945][T11023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1610'. [ 214.089557][T11025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1609'. [ 214.220002][T11035] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 214.275678][T11037] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1615'. [ 214.738930][T11058] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1619'. [ 214.814851][T11062] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1620'. [ 214.889602][T11064] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 214.950909][T11069] netlink: 'syz.3.1622': attribute type 23 has an invalid length. [ 214.963773][T11069] netlink: 'syz.3.1622': attribute type 10 has an invalid length. [ 214.980260][T11069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.024429][T11069] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 215.079672][T11079] netlink: 'syz.1.1626': attribute type 13 has an invalid length. [ 215.089808][T11079] macvtap0: refused to change device tx_queue_len [ 216.123736][T11126] netlink: 'syz.4.1644': attribute type 7 has an invalid length. [ 216.396082][T11133] bond5: entered allmulticast mode [ 216.401493][T11133] bridge3: entered allmulticast mode [ 216.408498][T11133] bond6: entered allmulticast mode [ 216.413798][T11133] bond7: entered allmulticast mode [ 216.434148][T11133] bridge4: entered allmulticast mode [ 216.581732][T11135] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 216.619089][T11135] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 216.902040][ T30] audit: type=1800 audit(1766508656.254:2): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1647" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1392 res=0 errno=0 [ 217.556818][T11187] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 217.703888][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 217.967535][T11212] __nla_validate_parse: 5 callbacks suppressed [ 217.967557][T11212] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1664'. [ 218.092671][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 218.100868][ C0] lec:lec_tx_timeout: lec0 [ 218.106124][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 218.464179][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1674'. [ 218.647201][T11252] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 218.658834][T11252] bond7 (unregistering): Released all slaves [ 218.680836][T11261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1678'. [ 218.704537][T11261] openvswitch: netlink: Flow key attr not present in new flow. [ 218.811969][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1683'. [ 218.813268][T11272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1683'. [ 219.301263][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1682'. [ 219.327338][T11267] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1682'. [ 219.349440][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1682'. [ 219.445216][T11276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1684'. [ 219.540710][T11276] syzkaller1: entered promiscuous mode [ 219.552850][T11276] syzkaller1: entered allmulticast mode [ 219.655455][T11289] IPv6: sit2: Disabled Multicast RS [ 220.182658][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1699'. [ 220.195542][T11319] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 221.103310][T11369] tipc: Started in network mode [ 221.109187][T11369] tipc: Node identity b2489c8cc517, cluster identity 4711 [ 221.133393][T11369] tipc: Enabled bearer , priority 11 [ 221.174360][ T5851] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 221.184757][ T5851] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 221.195650][ T5851] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 221.203695][ T5851] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 221.211533][ T5851] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 221.220998][ T5851] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 221.231465][ T5851] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 221.408437][T11391] FAULT_INJECTION: forcing a failure. [ 221.408437][T11391] name failslab, interval 1, probability 0, space 0, times 0 [ 221.422030][T11388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.435101][T11388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.443138][T11391] CPU: 0 UID: 0 PID: 11391 Comm: syz.2.1723 Not tainted syzkaller #0 PREEMPT(full) [ 221.443168][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.443180][T11391] Call Trace: [ 221.443188][T11391] [ 221.443196][T11391] dump_stack_lvl+0x189/0x250 [ 221.443226][T11391] ? __pfx____ratelimit+0x10/0x10 [ 221.443247][T11391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.443372][T11391] ? __pfx__printk+0x10/0x10 [ 221.443408][T11391] ? __pfx___might_resched+0x10/0x10 [ 221.443427][T11391] ? fs_reclaim_acquire+0x7d/0x100 [ 221.443455][T11391] should_fail_ex+0x414/0x560 [ 221.443490][T11391] should_failslab+0xa8/0x100 [ 221.443515][T11391] __kmalloc_noprof+0xdf/0x800 [ 221.443533][T11391] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 221.443552][T11391] ? rcu_is_watching+0x15/0xb0 [ 221.443582][T11391] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 221.443613][T11391] genl_family_rcv_msg_doit+0xb8/0x300 [ 221.443641][T11391] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 221.443672][T11391] ? apparmor_capable+0x137/0x1a0 [ 221.443704][T11391] ? bpf_lsm_capable+0x9/0x20 [ 221.443726][T11391] ? security_capable+0x7e/0x2e0 [ 221.443758][T11391] genl_rcv_msg+0x60e/0x790 [ 221.443786][T11391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.443804][T11391] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 221.443849][T11391] netlink_rcv_skb+0x208/0x470 [ 221.443876][T11391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.443897][T11391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.443945][T11391] ? down_read+0x274/0x2e0 [ 221.443966][T11391] ? genl_rcv+0xd/0x40 [ 221.443987][T11391] genl_rcv+0x28/0x40 [ 221.444003][T11391] netlink_unicast+0x82f/0x9e0 [ 221.444037][T11391] ? __pfx_netlink_unicast+0x10/0x10 [ 221.444062][T11391] ? netlink_sendmsg+0x642/0xb30 [ 221.444085][T11391] ? skb_put+0x11b/0x210 [ 221.444113][T11391] netlink_sendmsg+0x805/0xb30 [ 221.444151][T11391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.444181][T11391] ? aa_sock_msg_perm+0xf1/0x1b0 [ 221.444209][T11391] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.444227][T11391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.444254][T11391] __sock_sendmsg+0x21c/0x270 [ 221.444296][T11391] ____sys_sendmsg+0x505/0x820 [ 221.444328][T11391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.444363][T11391] ? import_iovec+0x74/0xa0 [ 221.444392][T11391] ___sys_sendmsg+0x21f/0x2a0 [ 221.444419][T11391] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.444452][T11391] ? rcu_read_lock_any_held+0xb3/0x120 [ 221.444511][T11391] ? __fget_files+0x2a/0x420 [ 221.444532][T11391] ? __fget_files+0x3a0/0x420 [ 221.444567][T11391] __x64_sys_sendmsg+0x19b/0x260 [ 221.444593][T11391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.444630][T11391] ? __pfx_ksys_write+0x10/0x10 [ 221.444654][T11391] ? do_syscall_64+0xbe/0xf80 [ 221.444681][T11391] do_syscall_64+0xfa/0xf80 [ 221.444702][T11391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.444722][T11391] ? clear_bhb_loop+0x60/0xb0 [ 221.444747][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.444765][T11391] RIP: 0033:0x7ff82298f749 [ 221.444784][T11391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.444800][T11391] RSP: 002b:00007ff8237bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.444822][T11391] RAX: ffffffffffffffda RBX: 00007ff822be5fa0 RCX: 00007ff82298f749 [ 221.444837][T11391] RDX: 0000000024040014 RSI: 0000200000000240 RDI: 0000000000000004 [ 221.444850][T11391] RBP: 00007ff8237bb090 R08: 0000000000000000 R09: 0000000000000000 [ 221.444863][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.444875][T11391] R13: 00007ff822be6038 R14: 00007ff822be5fa0 R15: 00007ffcab4ee518 [ 221.444913][T11391] [ 221.823860][T11388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.831721][T11388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.125761][T11411] netlink: 'syz.1.1728': attribute type 39 has an invalid length. [ 222.144886][ T43] tipc: Node number set to 2002754700 [ 222.305632][T11420] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 222.544577][T11434] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 222.627347][T11434] tipc: Enabling of bearer rejected, failed to enable media [ 222.698015][T11441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.724056][T11442] syzkaller1: entered promiscuous mode [ 222.731209][T11442] syzkaller1: entered allmulticast mode [ 223.003256][T11456] netlink: 'syz.4.1744': attribute type 10 has an invalid length. [ 223.022968][T11456] bridge_slave_1: left allmulticast mode [ 223.028680][T11456] bridge_slave_1: left promiscuous mode [ 223.054095][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.122647][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 223.130496][T11456] bridge_slave_1: entered allmulticast mode [ 223.130994][ C0] lec:lec_tx_timeout: lec0 [ 223.137480][T11456] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 223.142572][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 223.203105][T11474] __nla_validate_parse: 6 callbacks suppressed [ 223.203126][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'. [ 223.233914][T11474] openvswitch: netlink: Flow actions attr not present in new flow. [ 223.267676][T11470] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1750'. [ 223.285783][T11479] netlink: 'syz.0.1752': attribute type 21 has an invalid length. [ 223.308686][T11479] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1752'. [ 223.400471][T11485] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1755'. [ 223.400575][T11481] netlink: 'syz.4.1753': attribute type 12 has an invalid length. [ 223.501827][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1754'. [ 223.747255][T11503] vlan2: entered promiscuous mode [ 223.753440][T11503] geneve1: entered promiscuous mode [ 223.761368][T11503] vlan2: entered allmulticast mode [ 223.969053][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 223.978856][T11521] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1765'. [ 224.564183][T11531] syzkaller1: entered promiscuous mode [ 224.570356][T11531] syzkaller1: entered allmulticast mode [ 224.684830][T11538] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1772'. [ 224.704251][T11536] batadv0: left allmulticast mode [ 224.739629][T11536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.003257][T11557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1775'. [ 225.249395][T11570] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1780'. [ 225.449161][T11580] ipt_rpfilter: unknown options [ 225.883446][T11614] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 225.895442][T11614] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 226.090617][T11627] syzkaller0: entered promiscuous mode [ 226.097903][T11627] syzkaller0: entered allmulticast mode [ 226.333572][T11642] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 226.348704][T11636] netlink: 'syz.0.1801': attribute type 13 has an invalid length. [ 226.366825][T11636] lo: left promiscuous mode [ 226.405961][T11636] tunl0: left promiscuous mode [ 226.413468][T11636] gre0: left promiscuous mode [ 226.457255][T11636] gretap0: left promiscuous mode [ 226.524832][T11636] erspan0: left promiscuous mode [ 226.588992][T11636] ip_vti0: left promiscuous mode [ 226.598214][T11636] ip6_vti0: left allmulticast mode [ 226.607090][T11636] sit0: left allmulticast mode [ 226.619995][T11636] ip6tnl0: left allmulticast mode [ 226.643019][T11636] ip6gre0: left allmulticast mode [ 226.657151][T11636] syz_tun: left allmulticast mode [ 226.681873][T11636] ip6gretap0: left allmulticast mode [ 226.697680][T11636] bond0: left allmulticast mode [ 226.704602][T11636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.716352][T11636] team0: left allmulticast mode [ 226.722940][T11636] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.732033][T11636] dummy0: left allmulticast mode [ 226.744752][T11636] nlmon0: left allmulticast mode [ 226.753225][T11636] caif0: left allmulticast mode [ 226.758224][T11636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.017507][T11665] syzkaller0: entered promiscuous mode [ 227.031905][T11665] syzkaller0: entered allmulticast mode [ 227.093691][T11674] nbd: must specify an index to disconnect [ 227.586686][T11698] bond5: entered promiscuous mode [ 227.594412][T11698] bond5: entered allmulticast mode [ 227.600277][T11698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.010483][T11734] xt_check_table_hooks: 57 callbacks suppressed [ 228.010505][T11734] x_tables: duplicate underflow at hook 2 [ 228.148455][T11748] netlink: 'syz.0.1837': attribute type 29 has an invalid length. [ 228.162648][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 228.171095][ C0] lec:lec_tx_timeout: lec0 [ 228.176168][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 228.390401][T11755] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 228.478679][T11765] syzkaller0: entered promiscuous mode [ 228.485275][T11765] syzkaller0: entered allmulticast mode [ 228.613716][T11769] __nla_validate_parse: 9 callbacks suppressed [ 228.613738][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 228.699588][T11771] openvswitch: netlink: Invalid VLAN frame [ 228.730949][T11774] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1848'. [ 228.960299][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 229.224394][T11800] Bluetooth: MGMT ver 1.23 [ 229.228890][T11800] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 229.261795][T11804] tipc: Enabling of bearer rejected, already enabled [ 229.282046][T11806] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 229.354847][T11804] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 229.366609][T11806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1857'. [ 229.444041][T11811] syzkaller0: entered promiscuous mode [ 229.462773][T11811] syzkaller0: entered allmulticast mode [ 229.484648][T11804] tipc: Resetting bearer [ 229.535525][T11813] sctp: [Deprecated]: syz.4.1859 (pid 11813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.535525][T11813] Use struct sctp_sack_info instead [ 229.766277][T11820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1861'. [ 229.846713][T11825] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1863'. [ 229.871331][T11820] : entered promiscuous mode [ 229.873454][T11825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1863'. [ 229.963474][T11829] ipt_REJECT: TCP_RESET invalid for non-tcp [ 229.984186][T11830] ipt_REJECT: TCP_RESET invalid for non-tcp [ 230.094243][T11834] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1866'. [ 230.198242][T11836] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1867'. [ 230.221465][T11836] tipc: Invalid UDP bearer configuration [ 230.221525][T11836] tipc: Enabling of bearer rejected, failed to enable media [ 230.289709][T11842] netlink: 'syz.0.1869': attribute type 32 has an invalid length. [ 230.447850][T11842] bond4: Setting coupled_control to off (0) [ 230.483658][T11851] syzkaller0: entered promiscuous mode [ 230.503462][T11851] syzkaller0: entered allmulticast mode [ 230.607655][T11860] netlink: 'syz.0.1875': attribute type 3 has an invalid length. [ 230.734404][T11866] x_tables: unsorted entry at hook 3 [ 230.773662][T11866] !: renamed from dummy0 [ 231.045264][T11888] IPv6: addrconf: prefix option has invalid lifetime [ 231.153696][T11897] syzkaller0: entered promiscuous mode [ 231.159498][T11897] syzkaller0: entered allmulticast mode [ 231.340330][T11912] ipt_ECN: cannot use operation on non-tcp rule [ 231.784715][T11909] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 231.814237][T11914] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 231.831098][T11914] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 231.849055][T11914] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 231.929884][T11928] netlink: 'syz.1.1898': attribute type 63 has an invalid length. [ 232.774357][T11969] netlink: 'syz.4.1910': attribute type 13 has an invalid length. [ 232.798220][T11969] macvtap0: refused to change device tx_queue_len [ 232.821819][T11969] xt_TCPMSS: Only works on TCP SYN packets [ 232.867814][T11975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.973078][T11978] bond0: (slave rose0): Error: Device can not be enslaved while up [ 233.193464][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 233.201731][ C0] lec:lec_tx_timeout: lec0 [ 233.207056][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 233.228989][T11991] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 233.240590][T11991] NCSI netlink: No device for ifindex 0 [ 233.364176][T11996] tipc: Enabling of bearer rejected, already enabled [ 233.393698][T11996] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 233.533239][T12009] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 233.595489][T12014] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 233.616262][T12009] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.753468][T12023] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 233.786552][T12026] __nla_validate_parse: 18 callbacks suppressed [ 233.786573][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'. [ 233.975531][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1929'. [ 233.985879][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 234.035986][ T1159] nci: nci_rx_work: unknown MT 0x1 [ 234.241869][T12058] xt_HMARK: spi-set and port-set can't be combined [ 234.286736][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 234.663474][T12078] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1943'. [ 234.733302][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1944'. [ 234.814323][ T5933] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1 [ 234.847066][ T5933] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max [ 234.888843][ T5933] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4 [ 234.928883][ T5933] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5 [ 234.958749][ T5933] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd [ 234.984147][ T5933] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/106 [ 235.014713][ T5933] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22 [ 235.229508][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1952'. [ 235.572848][T12084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.638936][T12123] syzkaller0: entered promiscuous mode [ 235.645410][T12123] syzkaller0: entered allmulticast mode [ 235.685433][T12133] macvtap1: entered allmulticast mode [ 235.816199][T12143] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1964'. [ 236.000180][T12149] Cannot find add_set index 65532 as target [ 236.265076][T12161] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1969'. [ 236.274856][T12161] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1969'. [ 236.284620][T12161] netlink: 'syz.3.1969': attribute type 5 has an invalid length. [ 237.438643][T12166] ip6gre2: entered allmulticast mode [ 237.545847][T12170] netlink: 'syz.0.1970': attribute type 1 has an invalid length. [ 237.564142][T12172] netlink: 'syz.3.1973': attribute type 11 has an invalid length. [ 237.576540][T12170] netlink: 'syz.0.1970': attribute type 4 has an invalid length. [ 237.747467][T12174] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 237.761561][T12174] bond7 (unregistering): Released all slaves [ 238.100222][T12204] macvtap0: Device is already in use. [ 238.144534][T12208] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 238.222215][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 238.230402][ C0] lec:lec_tx_timeout: lec0 [ 238.235124][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 238.278810][T12215] netlink: 'syz.2.1985': attribute type 2 has an invalid length. [ 238.343040][T12223] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 238.749282][T12248] netlink: 'syz.0.1991': attribute type 21 has an invalid length. [ 238.784371][T12248] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 238.794613][T12255] __nla_validate_parse: 6 callbacks suppressed [ 238.794635][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 238.939114][T12266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.010399][T12269] gtp0: entered promiscuous mode [ 239.017907][T12269] gtp0: entered allmulticast mode [ 239.745013][T12311] FAULT_INJECTION: forcing a failure. [ 239.745013][T12311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.758952][T12311] CPU: 0 UID: 0 PID: 12311 Comm: syz.4.2014 Not tainted syzkaller #0 PREEMPT(full) [ 239.758983][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.758996][T12311] Call Trace: [ 239.759004][T12311] [ 239.759014][T12311] dump_stack_lvl+0x189/0x250 [ 239.759044][T12311] ? __pfx____ratelimit+0x10/0x10 [ 239.759066][T12311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.759090][T12311] ? __pfx__printk+0x10/0x10 [ 239.759120][T12311] ? __might_fault+0xb0/0x130 [ 239.759172][T12311] should_fail_ex+0x414/0x560 [ 239.759209][T12311] _copy_from_user+0x2d/0xb0 [ 239.759235][T12311] __sys_sendto+0x25c/0x520 [ 239.759262][T12311] ? __pfx___sys_sendto+0x10/0x10 [ 239.759281][T12311] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 239.759319][T12311] ? __fget_files+0x3a0/0x420 [ 239.759359][T12311] ? ksys_write+0x22a/0x250 [ 239.759382][T12311] ? __pfx_ksys_write+0x10/0x10 [ 239.759405][T12311] __x64_sys_sendto+0xde/0x100 [ 239.759432][T12311] do_syscall_64+0xfa/0xf80 [ 239.759455][T12311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.759475][T12311] ? clear_bhb_loop+0x60/0xb0 [ 239.759501][T12311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.759520][T12311] RIP: 0033:0x7f227cd8f749 [ 239.759540][T12311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.759557][T12311] RSP: 002b:00007f227dbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 239.759580][T12311] RAX: ffffffffffffffda RBX: 00007f227cfe5fa0 RCX: 00007f227cd8f749 [ 239.759595][T12311] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 239.759608][T12311] RBP: 00007f227dbd5090 R08: 0000200000000140 R09: 0000000000000014 [ 239.759622][T12311] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 239.759634][T12311] R13: 00007f227cfe6038 R14: 00007f227cfe5fa0 R15: 00007ffd43127498 [ 239.759670][T12311] [ 240.011978][T12313] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2015'. [ 240.114858][T12319] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2016'. [ 240.123573][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 240.144510][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 240.165297][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2019'. [ 240.339095][T12330] nbd: must specify an index to disconnect [ 240.433793][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2024'. [ 240.508661][T12340] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2025'. [ 240.541788][T12344] FAULT_INJECTION: forcing a failure. [ 240.541788][T12344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.615218][T12344] CPU: 0 UID: 0 PID: 12344 Comm: syz.2.2026 Not tainted syzkaller #0 PREEMPT(full) [ 240.615245][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.615255][T12344] Call Trace: [ 240.615262][T12344] [ 240.615270][T12344] dump_stack_lvl+0x189/0x250 [ 240.615296][T12344] ? __pfx____ratelimit+0x10/0x10 [ 240.615313][T12344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.615331][T12344] ? __pfx__printk+0x10/0x10 [ 240.615367][T12344] should_fail_ex+0x414/0x560 [ 240.615405][T12344] _copy_to_user+0x31/0xb0 [ 240.615432][T12344] simple_read_from_buffer+0xe1/0x170 [ 240.615473][T12344] proc_fail_nth_read+0x1b3/0x220 [ 240.615499][T12344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.615525][T12344] ? rw_verify_area+0x2a6/0x4d0 [ 240.615544][T12344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.615567][T12344] vfs_read+0x200/0xa30 [ 240.615586][T12344] ? fdget_pos+0x247/0x320 [ 240.615616][T12344] ? __pfx___mutex_lock+0x10/0x10 [ 240.615639][T12344] ? __pfx_vfs_read+0x10/0x10 [ 240.615659][T12344] ? __fget_files+0x2a/0x420 [ 240.615689][T12344] ? __fget_files+0x3a0/0x420 [ 240.615712][T12344] ? __fget_files+0x2a/0x420 [ 240.615748][T12344] ksys_read+0x145/0x250 [ 240.615771][T12344] ? __pfx_ksys_read+0x10/0x10 [ 240.615794][T12344] ? do_syscall_64+0xbe/0xf80 [ 240.615817][T12344] do_syscall_64+0xfa/0xf80 [ 240.615838][T12344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.615856][T12344] ? clear_bhb_loop+0x60/0xb0 [ 240.615878][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.615894][T12344] RIP: 0033:0x7ff82298e15c [ 240.615912][T12344] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.615927][T12344] RSP: 002b:00007ff8237bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.615949][T12344] RAX: ffffffffffffffda RBX: 00007ff822be5fa0 RCX: 00007ff82298e15c [ 240.615963][T12344] RDX: 000000000000000f RSI: 00007ff8237bb0a0 RDI: 0000000000000004 [ 240.615974][T12344] RBP: 00007ff8237bb090 R08: 0000000000000000 R09: 0000000000000014 [ 240.615986][T12344] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 240.615996][T12344] R13: 00007ff822be6038 R14: 00007ff822be5fa0 R15: 00007ffcab4ee518 [ 240.616033][T12344] [ 240.988442][T12349] sctp: [Deprecated]: syz.0.2027 (pid 12349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.988442][T12349] Use struct sctp_sack_info instead [ 241.059301][T12348] sctp: [Deprecated]: syz.0.2027 (pid 12348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.059301][T12348] Use struct sctp_sack_info instead [ 241.227947][T12367] syzkaller0: entered promiscuous mode [ 241.240469][T12367] syzkaller0: entered allmulticast mode [ 241.327017][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2034'. [ 241.375155][T12372] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 241.457253][T12372] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.565196][T12389] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2040'. [ 241.640300][T12400] netlink: 'syz.3.2043': attribute type 1 has an invalid length. [ 241.896043][T12417] netlink: 'syz.4.2050': attribute type 10 has an invalid length. [ 241.896823][T12418] syzkaller0: entered promiscuous mode [ 241.911048][T12418] syzkaller0: entered allmulticast mode [ 242.502690][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 242.678648][T12455] : entered promiscuous mode [ 242.991590][T12474] FAULT_INJECTION: forcing a failure. [ 242.991590][T12474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.018030][T12474] CPU: 1 UID: 0 PID: 12474 Comm: syz.0.2064 Not tainted syzkaller #0 PREEMPT(full) [ 243.018061][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.018073][T12474] Call Trace: [ 243.018081][T12474] [ 243.018090][T12474] dump_stack_lvl+0x189/0x250 [ 243.018118][T12474] ? __pfx____ratelimit+0x10/0x10 [ 243.018138][T12474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.018159][T12474] ? __pfx__printk+0x10/0x10 [ 243.018185][T12474] ? __might_fault+0xb0/0x130 [ 243.018226][T12474] should_fail_ex+0x414/0x560 [ 243.018261][T12474] _copy_from_iter+0x1cd/0x1630 [ 243.018282][T12474] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.018315][T12474] ? policy_nodemask+0x27c/0x720 [ 243.018338][T12474] ? __pfx__copy_from_iter+0x10/0x10 [ 243.018368][T12474] ? set_page_refcounted+0xa0/0x1e0 [ 243.018391][T12474] ? page_copy_sane+0x4e/0x280 [ 243.018423][T12474] copy_page_from_iter+0xdd/0x170 [ 243.018449][T12474] tun_get_user+0x1d40/0x3dc0 [ 243.018477][T12474] ? tun_get_user+0x6fc/0x3dc0 [ 243.018514][T12474] ? aa_file_perm+0x44c/0x1530 [ 243.018539][T12474] ? __pfx_tun_get_user+0x10/0x10 [ 243.018566][T12474] ? __lock_acquire+0x6b6/0x2cf0 [ 243.018587][T12474] ? kstrtoull+0x12f/0x1d0 [ 243.018622][T12474] ? ref_tracker_alloc+0x318/0x460 [ 243.018644][T12474] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 243.018670][T12474] ? tun_get+0x1c/0x2f0 [ 243.018699][T12474] ? tun_get+0x1c/0x2f0 [ 243.018720][T12474] ? tun_get+0x1c/0x2f0 [ 243.018748][T12474] tun_chr_write_iter+0x113/0x200 [ 243.018776][T12474] vfs_write+0x5c9/0xb30 [ 243.018803][T12474] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 243.018828][T12474] ? __pfx_vfs_write+0x10/0x10 [ 243.018859][T12474] ? __fget_files+0x2a/0x420 [ 243.018891][T12474] ksys_write+0x145/0x250 [ 243.018914][T12474] ? __pfx_ksys_write+0x10/0x10 [ 243.018937][T12474] ? do_syscall_64+0xbe/0xf80 [ 243.018961][T12474] do_syscall_64+0xfa/0xf80 [ 243.018981][T12474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.019000][T12474] ? clear_bhb_loop+0x60/0xb0 [ 243.019023][T12474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.019041][T12474] RIP: 0033:0x7f619218e1ff [ 243.019059][T12474] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 243.019075][T12474] RSP: 002b:00007f6192fc8000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 243.019097][T12474] RAX: ffffffffffffffda RBX: 00007f61923e6090 RCX: 00007f619218e1ff [ 243.019110][T12474] RDX: 000000000000004e RSI: 0000200000000b00 RDI: 00000000000000c8 [ 243.019122][T12474] RBP: 00007f6192fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 243.019134][T12474] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 243.019147][T12474] R13: 00007f61923e6128 R14: 00007f61923e6090 R15: 00007ffd2fbd62d8 [ 243.019180][T12474] [ 243.631882][T12497] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 243.643144][T12497] IPv6: NLM_F_REPLACE set, but no existing node found! [ 243.778414][T12499] syzkaller0: entered promiscuous mode [ 243.799302][T12499] syzkaller0: entered allmulticast mode [ 243.890244][T12509] __nla_validate_parse: 7 callbacks suppressed [ 243.890268][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 243.955259][T12513] netlink: 'syz.3.2078': attribute type 1 has an invalid length. [ 244.022130][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 244.030311][ C0] lec:lec_tx_timeout: lec0 [ 244.036181][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 244.168509][T12513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2078'. [ 244.221806][T12519] bond6: (slave gretap3): making interface the new active one [ 244.245388][T12519] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 244.490883][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'. [ 244.844725][T12555] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2092'. [ 245.068845][T12567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2096'. [ 245.071177][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 245.103671][T12566] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2095'. [ 245.309181][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 245.550512][T12589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2104'. [ 245.561758][T12589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2104'. [ 245.597184][T12589] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 245.638543][T12591] netlink: 'syz.3.2103': attribute type 1 has an invalid length. [ 245.658479][T12595] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 245.857978][T12604] wireguard0: entered promiscuous mode [ 245.864443][T12604] wireguard0: entered allmulticast mode [ 245.886003][T12604] team0: Port device wireguard0 added [ 246.207946][T12629] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 246.254577][T12629] Cannot find set identified by id 1 to match [ 246.763728][T12656] vlan3: entered promiscuous mode [ 246.784782][T12656] vlan3: entered allmulticast mode [ 246.887829][T12663] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 246.966416][T12675] tipc: Enabling of bearer rejected, already enabled [ 247.273393][T12696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.280889][T12696] IPv6: NLM_F_CREATE should be set when creating new route [ 247.317905][T12696] lo: entered allmulticast mode [ 247.330457][T12696] tunl0: entered allmulticast mode [ 247.362657][T12696] gre0: entered allmulticast mode [ 247.418871][T12696] erspan0: entered allmulticast mode [ 247.443200][T12696] ip_vti0: entered allmulticast mode [ 247.469897][T12696] ip6_vti0: entered allmulticast mode [ 247.505026][T12696] sit0: entered allmulticast mode [ 247.531549][T12696] ip6tnl0: entered allmulticast mode [ 247.568589][T12696] ip6gre0: entered allmulticast mode [ 247.589303][T12696] syz_tun: entered allmulticast mode [ 247.607738][T12696] ip6gretap0: entered allmulticast mode [ 247.631445][T12696] bridge0: entered allmulticast mode [ 247.654339][T12696] bond0: entered allmulticast mode [ 247.661963][T12696] team0: entered allmulticast mode [ 247.679717][T12696] dummy0: entered allmulticast mode [ 247.695010][T12696] nlmon0: entered allmulticast mode [ 247.703730][T12696] caif0: entered allmulticast mode [ 247.709320][T12696] batadv0: entered allmulticast mode [ 247.728689][T12696] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 247.736139][T12696] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 247.744016][T12696] tipc: Resetting bearer [ 247.750623][T12696] syzkaller0: left promiscuous mode [ 247.761155][T12696] bond2: left promiscuous mode [ 247.766851][T12696] bridge3: left promiscuous mode [ 247.772043][T12696] bond2: entered allmulticast mode [ 247.777650][T12696] bridge3: entered allmulticast mode [ 247.790608][T12696] gtp0: entered allmulticast mode [ 247.802311][T12696] macsec1: entered allmulticast mode [ 247.810072][T12696] bond3: left promiscuous mode [ 247.815680][T12696] bond3: entered allmulticast mode [ 247.825305][T12696] bridge4: entered allmulticast mode [ 247.839131][T12696] bridge5: entered allmulticast mode [ 247.851696][T12696] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 247.860257][T12696] bridge6: entered allmulticast mode [ 247.873624][T12696] batadv1: entered allmulticast mode [ 247.879327][T12696] vlan2: left promiscuous mode [ 247.884525][T12696] geneve1: left promiscuous mode [ 247.889972][T12696] bond4: entered allmulticast mode [ 247.896155][T12696] mac80211_hwsim hwsim17 wlan3: entered allmulticast mode [ 247.904397][T12696] gre1: entered allmulticast mode [ 247.913505][T12696] wireguard0: left promiscuous mode [ 247.922893][T12696] vlan3: left promiscuous mode [ 248.307248][T12741] netlink: 'syz.4.2145': attribute type 2 has an invalid length. [ 248.336837][T12741] netlink: 'syz.4.2145': attribute type 2 has an invalid length. [ 248.367014][T12744] netlink: 'syz.4.2145': attribute type 2 has an invalid length. [ 248.398411][T12746] netlink: 'syz.4.2145': attribute type 2 has an invalid length. [ 248.429760][T12748] netlink: 'syz.3.2143': attribute type 7 has an invalid length. [ 248.452967][T12748] netlink: 'syz.3.2143': attribute type 8 has an invalid length. [ 248.647840][T12766] tunl0: left allmulticast mode [ 248.789320][T12779] xt_hashlimit: size too large, truncated to 1048576 [ 248.829640][T12777] tap0: tun_chr_ioctl cmd 1074025678 [ 248.842684][T12777] tap0: group set to 0 [ 248.847203][T12782] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2 [ 248.935131][T12788] __nla_validate_parse: 17 callbacks suppressed [ 248.935151][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 249.062163][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 249.070458][ C0] lec:lec_tx_timeout: lec0 [ 249.077453][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 249.123147][T12797] netlink: 'syz.0.2160': attribute type 3 has an invalid length. [ 249.144353][T12797] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2160'. [ 249.200222][T12797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2160'. [ 249.210865][T12797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2160'. [ 249.227040][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'. [ 249.584859][T12825] tipc: Failed to remove unknown binding: 66,1,1/3541841066:427562119/427562121 [ 249.604973][T12825] tipc: Failed to remove unknown binding: 66,1,1/3541841066:427562119/427562121 [ 249.699989][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'. [ 249.714693][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'. [ 249.737413][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 249.829550][T12843] veth0: entered promiscuous mode [ 249.957364][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 249.958259][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 250.058231][T12858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.160764][T12861] netlink: 'syz.4.2182': attribute type 11 has an invalid length. [ 250.573217][T12835] veth0: left promiscuous mode [ 250.742895][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 251.243968][T12896] bridge0: entered promiscuous mode [ 251.249609][T12896] bridge0: entered allmulticast mode [ 251.770043][T12929] IPv6: sit1: Disabled Multicast RS [ 251.794013][T12929] sit1: entered allmulticast mode [ 251.834517][T12932] tipc: Enabling of bearer rejected, already enabled [ 251.985669][T12942] geneve2: entered promiscuous mode [ 251.991318][T12942] geneve2: entered allmulticast mode [ 251.999517][ T4370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.010103][ T4370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.079262][ T4370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.096191][ T4370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.328316][ T4488] nci: nci_rx_work: unknown MT 0x1 [ 252.904574][T12999] netlink: 'syz.2.2222': attribute type 1 has an invalid length. [ 253.481170][T13020] can: request_module (can-proto-0) failed. [ 253.851085][T13053] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 254.092545][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 254.100819][ C0] lec:lec_tx_timeout: lec0 [ 254.106379][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 254.421967][T13101] __nla_validate_parse: 15 callbacks suppressed [ 254.421992][T13101] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2254'. [ 254.516731][T13106] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2256'. [ 254.600607][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 254.624055][ T6757] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.624161][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 254.642541][ T6757] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.654737][ T6757] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.681837][ T6757] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.761720][T13114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.777891][T13123] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 255.031318][T13133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2265'. [ 255.042266][T13133] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2265'. [ 255.121667][T13139] FAULT_INJECTION: forcing a failure. [ 255.121667][T13139] name failslab, interval 1, probability 0, space 0, times 0 [ 255.137633][T13139] CPU: 1 UID: 0 PID: 13139 Comm: syz.4.2267 Not tainted syzkaller #0 PREEMPT(full) [ 255.137663][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.137674][T13139] Call Trace: [ 255.137682][T13139] [ 255.137690][T13139] dump_stack_lvl+0x189/0x250 [ 255.137719][T13139] ? __pfx____ratelimit+0x10/0x10 [ 255.137739][T13139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.137762][T13139] ? __pfx__printk+0x10/0x10 [ 255.137797][T13139] ? __pfx___might_resched+0x10/0x10 [ 255.137816][T13139] ? fs_reclaim_acquire+0x7d/0x100 [ 255.137843][T13139] should_fail_ex+0x414/0x560 [ 255.137878][T13139] should_failslab+0xa8/0x100 [ 255.137905][T13139] __kmalloc_noprof+0xdf/0x800 [ 255.137923][T13139] ? is_bpf_text_address+0x292/0x2b0 [ 255.137950][T13139] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 255.137969][T13139] ? is_bpf_text_address+0x26/0x2b0 [ 255.138001][T13139] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 255.138029][T13139] genl_family_rcv_msg_doit+0xb8/0x300 [ 255.138056][T13139] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 255.138087][T13139] ? apparmor_capable+0x137/0x1a0 [ 255.138112][T13139] ? bpf_lsm_capable+0x9/0x20 [ 255.138129][T13139] ? security_capable+0x7e/0x2e0 [ 255.138155][T13139] genl_rcv_msg+0x60e/0x790 [ 255.138177][T13139] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.138191][T13139] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 255.138208][T13139] ? __pfx_nl80211_start_ap+0x10/0x10 [ 255.138227][T13139] ? __pfx_nl80211_post_doit+0x10/0x10 [ 255.138264][T13139] netlink_rcv_skb+0x208/0x470 [ 255.138289][T13139] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.138320][T13139] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.138367][T13139] ? down_read+0x274/0x2e0 [ 255.138388][T13139] ? genl_rcv+0xd/0x40 [ 255.138408][T13139] genl_rcv+0x28/0x40 [ 255.138424][T13139] netlink_unicast+0x82f/0x9e0 [ 255.138457][T13139] ? __pfx_netlink_unicast+0x10/0x10 [ 255.138481][T13139] ? netlink_sendmsg+0x642/0xb30 [ 255.138503][T13139] ? skb_put+0x11b/0x210 [ 255.138530][T13139] netlink_sendmsg+0x805/0xb30 [ 255.138566][T13139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.138594][T13139] ? aa_sock_msg_perm+0xf1/0x1b0 [ 255.138621][T13139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.138638][T13139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.138663][T13139] __sock_sendmsg+0x21c/0x270 [ 255.138695][T13139] ____sys_sendmsg+0x505/0x820 [ 255.138727][T13139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.138761][T13139] ? import_iovec+0x74/0xa0 [ 255.138788][T13139] ___sys_sendmsg+0x21f/0x2a0 [ 255.138814][T13139] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.138846][T13139] ? rcu_read_lock_any_held+0xb3/0x120 [ 255.138901][T13139] ? __fget_files+0x2a/0x420 [ 255.138925][T13139] ? __fget_files+0x3a0/0x420 [ 255.138963][T13139] __x64_sys_sendmsg+0x19b/0x260 [ 255.138990][T13139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.139026][T13139] ? __pfx_ksys_write+0x10/0x10 [ 255.139049][T13139] ? do_syscall_64+0xbe/0xf80 [ 255.139072][T13139] do_syscall_64+0xfa/0xf80 [ 255.139094][T13139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.139113][T13139] ? clear_bhb_loop+0x60/0xb0 [ 255.139137][T13139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.139155][T13139] RIP: 0033:0x7f227cd8f749 [ 255.139174][T13139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.139191][T13139] RSP: 002b:00007f227dbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.139212][T13139] RAX: ffffffffffffffda RBX: 00007f227cfe5fa0 RCX: 00007f227cd8f749 [ 255.139226][T13139] RDX: 0000000020000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 255.139239][T13139] RBP: 00007f227dbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 255.139251][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.139263][T13139] R13: 00007f227cfe6038 R14: 00007f227cfe5fa0 R15: 00007ffd43127498 [ 255.139308][T13139] [ 255.679654][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2271'. [ 255.689434][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 255.870177][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.941120][T13168] dvmrp1: entered allmulticast mode [ 256.083697][T13184] netlink: 'syz.2.2280': attribute type 24 has an invalid length. [ 256.129389][T13171] netlink: 'syz.0.2275': attribute type 10 has an invalid length. [ 256.320621][T13194] FAULT_INJECTION: forcing a failure. [ 256.320621][T13194] name failslab, interval 1, probability 0, space 0, times 0 [ 256.391833][T13194] CPU: 1 UID: 0 PID: 13194 Comm: syz.0.2281 Not tainted syzkaller #0 PREEMPT(full) [ 256.391864][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.391876][T13194] Call Trace: [ 256.391884][T13194] [ 256.391893][T13194] dump_stack_lvl+0x189/0x250 [ 256.391921][T13194] ? __pfx____ratelimit+0x10/0x10 [ 256.391941][T13194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.391964][T13194] ? __pfx__printk+0x10/0x10 [ 256.391994][T13194] ? __pfx___might_resched+0x10/0x10 [ 256.392016][T13194] ? fs_reclaim_acquire+0x7d/0x100 [ 256.392053][T13194] should_fail_ex+0x414/0x560 [ 256.392092][T13194] should_failslab+0xa8/0x100 [ 256.392117][T13194] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 256.392148][T13194] ? __alloc_skb+0x255/0x430 [ 256.392166][T13194] ? napi_skb_cache_get+0x4a5/0x780 [ 256.392184][T13194] ? napi_skb_cache_get+0x151/0x780 [ 256.392208][T13194] __alloc_skb+0x255/0x430 [ 256.392232][T13194] ? __pfx___alloc_skb+0x10/0x10 [ 256.392260][T13194] ? netlink_ack_tlv_len+0x6c/0x210 [ 256.392287][T13194] netlink_ack+0x146/0xa50 [ 256.392307][T13194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.392323][T13194] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 256.392343][T13194] ? __pfx_nl80211_post_doit+0x10/0x10 [ 256.392382][T13194] netlink_rcv_skb+0x28c/0x470 [ 256.392408][T13194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.392427][T13194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.392473][T13194] ? down_read+0x274/0x2e0 [ 256.392492][T13194] ? genl_rcv+0xd/0x40 [ 256.392511][T13194] genl_rcv+0x28/0x40 [ 256.392527][T13194] netlink_unicast+0x82f/0x9e0 [ 256.392559][T13194] ? __pfx_netlink_unicast+0x10/0x10 [ 256.392583][T13194] ? netlink_sendmsg+0x642/0xb30 [ 256.392604][T13194] ? skb_put+0x11b/0x210 [ 256.392629][T13194] netlink_sendmsg+0x805/0xb30 [ 256.392666][T13194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.392694][T13194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 256.392722][T13194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.392740][T13194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.392766][T13194] __sock_sendmsg+0x21c/0x270 [ 256.392797][T13194] ____sys_sendmsg+0x505/0x820 [ 256.392825][T13194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.392858][T13194] ? import_iovec+0x74/0xa0 [ 256.392885][T13194] ___sys_sendmsg+0x21f/0x2a0 [ 256.392909][T13194] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.392936][T13194] ? rcu_read_lock_any_held+0xb3/0x120 [ 256.392991][T13194] ? __fget_files+0x2a/0x420 [ 256.393012][T13194] ? __fget_files+0x3a0/0x420 [ 256.393058][T13194] __x64_sys_sendmsg+0x19b/0x260 [ 256.393083][T13194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.393117][T13194] ? __pfx_ksys_write+0x10/0x10 [ 256.393140][T13194] ? do_syscall_64+0xbe/0xf80 [ 256.393164][T13194] do_syscall_64+0xfa/0xf80 [ 256.393185][T13194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.393203][T13194] ? clear_bhb_loop+0x60/0xb0 [ 256.393227][T13194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.393246][T13194] RIP: 0033:0x7f619218f749 [ 256.393263][T13194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.393279][T13194] RSP: 002b:00007f6192fe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.393300][T13194] RAX: ffffffffffffffda RBX: 00007f61923e5fa0 RCX: 00007f619218f749 [ 256.393314][T13194] RDX: 0000000020000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 256.393325][T13194] RBP: 00007f6192fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 256.393335][T13194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.393347][T13194] R13: 00007f61923e6038 R14: 00007f61923e5fa0 R15: 00007ffd2fbd62d8 [ 256.393380][T13194] [ 256.948634][T13205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2287'. [ 257.048741][T13210] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2287'. [ 257.088998][T13208] netlink: 'syz.2.2289': attribute type 4 has an invalid length. [ 257.198648][T13219] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 257.300154][T13215] openvswitch: netlink: Message has 536 unknown bytes. [ 257.307733][T13215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.433804][T13214] nbd3: detected capacity change from 0 to 127 [ 257.444619][T13212] block nbd0: reconnected socket [ 257.465832][ T52] block nbd0: Receive control failed (result -32) [ 257.473837][ T5154] block nbd3: Receive control failed (result -32) [ 257.510477][T13237] netlink: 'syz.3.2296': attribute type 21 has an invalid length. [ 257.546483][T13237] netlink: 'syz.3.2296': attribute type 5 has an invalid length. [ 257.828616][T13264] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20004 [ 258.155751][T13280] FAULT_INJECTION: forcing a failure. [ 258.155751][T13280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.173891][T13280] CPU: 0 UID: 0 PID: 13280 Comm: syz.3.2311 Not tainted syzkaller #0 PREEMPT(full) [ 258.173921][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.173933][T13280] Call Trace: [ 258.173940][T13280] [ 258.173949][T13280] dump_stack_lvl+0x189/0x250 [ 258.173979][T13280] ? __pfx____ratelimit+0x10/0x10 [ 258.174000][T13280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.174048][T13280] ? __pfx__printk+0x10/0x10 [ 258.174091][T13280] should_fail_ex+0x414/0x560 [ 258.174126][T13280] _copy_to_user+0x31/0xb0 [ 258.174154][T13280] simple_read_from_buffer+0xe1/0x170 [ 258.174184][T13280] proc_fail_nth_read+0x1b3/0x220 [ 258.174211][T13280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.174236][T13280] ? rw_verify_area+0x2a6/0x4d0 [ 258.174254][T13280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.174278][T13280] vfs_read+0x200/0xa30 [ 258.174296][T13280] ? fdget_pos+0x247/0x320 [ 258.174334][T13280] ? __pfx___mutex_lock+0x10/0x10 [ 258.174355][T13280] ? __pfx_vfs_read+0x10/0x10 [ 258.174376][T13280] ? __fget_files+0x2a/0x420 [ 258.174402][T13280] ? __fget_files+0x3a0/0x420 [ 258.174423][T13280] ? __fget_files+0x2a/0x420 [ 258.174456][T13280] ksys_read+0x145/0x250 [ 258.174477][T13280] ? __pfx_ksys_read+0x10/0x10 [ 258.174509][T13280] do_syscall_64+0xfa/0xf80 [ 258.174531][T13280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.174550][T13280] ? clear_bhb_loop+0x60/0xb0 [ 258.174574][T13280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.174591][T13280] RIP: 0033:0x7f4b6338e15c [ 258.174610][T13280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 258.174625][T13280] RSP: 002b:00007f4b642bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.174647][T13280] RAX: ffffffffffffffda RBX: 00007f4b635e5fa0 RCX: 00007f4b6338e15c [ 258.174661][T13280] RDX: 000000000000000f RSI: 00007f4b642bb0a0 RDI: 0000000000000004 [ 258.174672][T13280] RBP: 00007f4b642bb090 R08: 0000000000000000 R09: 0000000000000000 [ 258.174683][T13280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.174695][T13280] R13: 00007f4b635e6038 R14: 00007f4b635e5fa0 R15: 00007ffd71ee2b98 [ 258.174729][T13280] [ 258.425074][T13285] netlink: 'syz.2.2312': attribute type 21 has an invalid length. [ 258.449626][T13285] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.469464][T13285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.477064][T13285] IPv6: NLM_F_CREATE should be set when creating new route [ 258.484477][T13285] IPv6: NLM_F_CREATE should be set when creating new route [ 258.491737][T13285] IPv6: NLM_F_CREATE should be set when creating new route [ 258.893045][T13312] gre0: entered promiscuous mode [ 258.898172][T13312] gre0: left allmulticast mode [ 259.122621][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 259.130729][ C0] lec:lec_tx_timeout: lec0 [ 259.136017][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 259.524300][T13353] __nla_validate_parse: 13 callbacks suppressed [ 259.524321][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2331'. [ 259.588448][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 259.590515][T13360] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 259.678871][T13357] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2333'. [ 259.730184][T13366] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2333'. [ 259.739801][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'. [ 259.759760][T13366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 260.527401][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 260.559581][T13403] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2342'. [ 260.686065][T13410] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 260.761702][T13415] netlink: 'syz.1.2348': attribute type 12 has an invalid length. [ 260.814383][T13415] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.2348'. [ 261.010310][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 261.406561][T13463] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 261.435052][T13459] xt_hashlimit: size too large, truncated to 1048576 [ 261.452045][T13466] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 261.870135][T13474] netlink: 'syz.3.2363': attribute type 1 has an invalid length. [ 261.915502][T13465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.247004][T13496] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 262.499346][T13515] vlan4: entered allmulticast mode [ 262.864403][T13543] syzkaller0: entered promiscuous mode [ 262.961001][T13548] openvswitch: netlink: Missing valid actions attribute. [ 262.970198][T13548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.078983][T13551] bond5: option lp_interval: invalid value (0) [ 263.086551][T13551] bond5: option lp_interval: allowed values 1 - 2147483647 [ 263.097744][T13551] bond5 (unregistering): Released all slaves [ 263.194115][T13556] syzkaller1: entered promiscuous mode [ 263.200503][T13556] syzkaller1: entered allmulticast mode [ 263.479696][T13565] netlink: 'syz.3.2392': attribute type 1 has an invalid length. [ 263.712992][T13580] netlink: 'syz.2.2397': attribute type 1 has an invalid length. [ 263.818348][T13579] vlan5: entered promiscuous mode [ 263.824009][T13579] bridge0: entered promiscuous mode [ 263.873306][T13580] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 263.886390][T13582] gretap1: entered promiscuous mode [ 264.152597][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 264.161204][ C0] lec:lec_tx_timeout: lec0 [ 264.166884][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 264.311187][ T3501] nci: nci_rx_work: unknown MT 0x1 [ 264.581091][T13642] __nla_validate_parse: 10 callbacks suppressed [ 264.581112][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2412'. [ 264.856475][T13657] netlink: 'syz.0.2416': attribute type 5 has an invalid length. [ 264.888022][T13657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2416'. [ 265.135454][T13672] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 265.400430][T13676] bond5: ARP target 1.0.0.0 is already present [ 265.408505][T13676] bond5: option arp_ip_target: invalid value (1) [ 265.431562][T13676] bond5 (unregistering): Released all slaves [ 265.686658][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 265.765862][T13704] netlink: 'syz.2.2428': attribute type 1 has an invalid length. [ 265.785437][T13704] netlink: 'syz.2.2428': attribute type 4 has an invalid length. [ 265.854881][T13704] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2428'. [ 265.863680][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 266.124859][T13718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2433'. [ 266.217089][T13722] team_slave_0: entered promiscuous mode [ 266.527091][T13744] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2441'. [ 266.674586][T13750] xt_CONNSECMARK: invalid mode: 0 [ 266.943871][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'. [ 267.203936][T13776] bond7: ARP target 1.0.0.0 is already present [ 267.210368][T13776] bond7: option arp_ip_target: invalid value (1) [ 267.219237][T13779] netlink: 'syz.4.2456': attribute type 6 has an invalid length. [ 267.241552][T13776] bond7 (unregistering): Released all slaves [ 267.256567][T13780] netlink: 'syz.4.2456': attribute type 6 has an invalid length. [ 267.286937][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'. [ 267.441449][T13794] lo: entered allmulticast mode [ 267.454918][T13794] º: entered allmulticast mode [ 267.461203][T13794] gre0: entered allmulticast mode [ 267.474538][T13794] gretap0: entered allmulticast mode [ 267.503998][T13794] erspan0: entered allmulticast mode [ 267.511062][T13794] ip_vti0: entered allmulticast mode [ 267.511968][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'. [ 267.517717][T13794] ip6_vti0: entered allmulticast mode [ 267.533762][T13794] sit0: entered allmulticast mode [ 267.539020][T13794] ip6tnl0: entered allmulticast mode [ 267.546659][T13794] ip6gre0: entered allmulticast mode [ 267.553164][T13794] ip6gretap0: entered allmulticast mode [ 267.559318][T13794] vcan0: entered allmulticast mode [ 267.567356][T13794] bond0: entered allmulticast mode [ 267.573319][T13794] bond_slave_0: entered allmulticast mode [ 267.579329][T13794] bond_slave_1: entered allmulticast mode [ 267.586405][T13794] team0: entered allmulticast mode [ 267.591755][T13794] team_slave_0: entered allmulticast mode [ 267.598662][T13794] dummy0: entered allmulticast mode [ 267.606861][T13794] nlmon0: entered allmulticast mode [ 267.613151][T13794] caif0: entered allmulticast mode [ 267.619635][T13794] vxcan0: entered allmulticast mode [ 267.626324][T13794] vxcan1: entered allmulticast mode [ 267.633041][T13794] veth0: entered allmulticast mode [ 267.638929][T13794] veth1: entered allmulticast mode [ 267.644433][T13794] wg0: entered allmulticast mode [ 267.649983][T13794] wg1: entered allmulticast mode [ 267.655973][T13794] wg2: entered allmulticast mode [ 267.661335][T13794] veth0_to_bridge: entered allmulticast mode [ 267.668416][T13794] bridge_slave_0: entered allmulticast mode [ 267.675517][T13794] veth1_to_bridge: entered allmulticast mode [ 267.683021][T13794] bridge_slave_1: entered allmulticast mode [ 267.696819][T13794] veth0_to_bond: entered allmulticast mode [ 267.704750][T13794] veth1_to_bond: entered allmulticast mode [ 267.735883][T13794] veth0_to_team: entered allmulticast mode [ 267.776687][T13794] veth0_to_batadv: entered allmulticast mode [ 267.807043][T13794] batadv_slave_0: entered allmulticast mode [ 267.836857][T13794] veth1_to_batadv: entered allmulticast mode [ 267.856661][T13823] netlink: 'syz.3.2468': attribute type 12 has an invalid length. [ 267.864028][T13794] batadv_slave_1: entered allmulticast mode [ 267.886139][T13794] tipc: Resetting bearer [ 267.895436][T13794] xfrm0: entered allmulticast mode [ 267.909915][T13794] veth0_to_hsr: entered allmulticast mode [ 267.929578][T13794] hsr_slave_0: entered allmulticast mode [ 267.942884][T13794] hsr0: entered allmulticast mode [ 267.954161][T13794] veth1_virt_wifi: entered allmulticast mode [ 267.966105][T13794] veth0_virt_wifi: entered allmulticast mode [ 267.993294][T13794] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 268.010227][T13825] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 268.022943][T13794] veth1_vlan: entered allmulticast mode [ 268.067545][T13794] vlan0: entered allmulticast mode [ 268.074958][T13794] macvlan0: entered allmulticast mode [ 268.087220][T13794] macvlan1: entered allmulticast mode [ 268.099975][T13794] ipvlan0: entered allmulticast mode [ 268.108102][T13794] ipvlan1: entered allmulticast mode [ 268.127038][T13794] veth0_macvtap: entered allmulticast mode [ 268.157766][T13794] geneve0: entered allmulticast mode [ 268.189725][T13794] geneve1: entered allmulticast mode [ 268.210720][T13794] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 268.235650][T13794] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 268.255387][T13794] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 268.294014][T13794] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 268.354783][T13794] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 268.370819][T13794] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 268.385673][T13794] bond1: entered allmulticast mode [ 268.396575][T13794] bridge1: entered allmulticast mode [ 268.409461][T13794] gre1: entered allmulticast mode [ 268.437731][T13794] bond2: entered allmulticast mode [ 268.453730][T13794] ipvlan2: entered allmulticast mode [ 268.459425][T13794] ip6tnl1: entered allmulticast mode [ 268.470518][T13794] bridge0: left promiscuous mode [ 268.476549][T13794] bond3: entered allmulticast mode [ 268.488689][T13794] bond4: entered allmulticast mode [ 268.505491][T13794] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 268.524214][T13794] bridge2: entered allmulticast mode [ 268.545417][T13794] gre2: entered allmulticast mode [ 268.571454][T13794] bridge3: left promiscuous mode [ 268.591450][T13794] bond5: entered allmulticast mode [ 268.598429][T13794] bond6: entered allmulticast mode [ 268.609002][T13794] veth2: entered allmulticast mode [ 268.614864][T13794] veth3: entered allmulticast mode [ 268.620692][T13794] : entered allmulticast mode [ 268.630826][T13794] syztnl2: entered allmulticast mode [ 268.636817][T13794] veth4: entered allmulticast mode [ 268.643283][T13794] veth5: entered allmulticast mode [ 268.649014][T13794] bond7: entered allmulticast mode [ 268.658800][T13794] ip6erspan0: entered allmulticast mode [ 268.669167][T13794] mac80211_hwsim hwsim8 t: entered allmulticast mode [ 268.679183][T13797] netlink: 'syz.2.2461': attribute type 5 has an invalid length. [ 268.767100][T13809] macvtap1: entered promiscuous mode [ 268.773120][T13809] vlan0: entered promiscuous mode [ 268.778643][T13809] macvtap1: entered allmulticast mode [ 268.823511][T13814] bond0: (slave bond_slave_1): Releasing backup interface [ 268.859327][T13842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.917516][ T6748] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.938709][ T6748] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.948133][ T6748] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.972754][T13840] lo: left allmulticast mode [ 268.977724][T13840] º: left allmulticast mode [ 268.994143][T13840] gre0: left allmulticast mode [ 268.999502][T13840] gretap0: left allmulticast mode [ 269.012939][T13840] erspan0: left allmulticast mode [ 269.018196][T13840] ip_vti0: left allmulticast mode [ 269.032486][T13840] ip6_vti0: left allmulticast mode [ 269.037957][T13840] sit0: left allmulticast mode [ 269.043835][T13840] ip6tnl0: left allmulticast mode [ 269.049275][T13840] ip6gre0: left allmulticast mode [ 269.055259][T13840] ip6gretap0: left allmulticast mode [ 269.060758][T13840] vcan0: left allmulticast mode [ 269.070005][T13840] bond0: left allmulticast mode [ 269.076775][T13840] team0: left allmulticast mode [ 269.081871][T13840] dummy0: left allmulticast mode [ 269.087550][T13840] nlmon0: left allmulticast mode [ 269.093731][T13840] caif0: left allmulticast mode [ 269.100885][T13840] vxcan0: left allmulticast mode [ 269.106575][T13840] vxcan1: left allmulticast mode [ 269.112711][T13840] veth0: left allmulticast mode [ 269.117984][T13840] veth1: left allmulticast mode [ 269.123383][T13840] wg0: left allmulticast mode [ 269.128758][T13840] wg1: left allmulticast mode [ 269.134056][T13840] wg2: left allmulticast mode [ 269.139014][T13840] veth0_to_bridge: left allmulticast mode [ 269.145233][T13840] bridge_slave_0: left allmulticast mode [ 269.151112][T13840] veth1_to_bridge: left allmulticast mode [ 269.157792][T13840] bridge_slave_1: left allmulticast mode [ 269.164185][T13840] veth0_to_bond: left allmulticast mode [ 269.169997][T13840] bond_slave_0: left allmulticast mode [ 269.176332][T13840] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 269.182536][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 269.200447][ C0] lec:lec_tx_timeout: lec0 [ 269.200968][T13846] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 269.205842][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 269.213404][T13846] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.349765][ T6748] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.548156][T13871] tipc: Enabling of bearer rejected, failed to enable media [ 269.661916][T13878] syzkaller1: entered promiscuous mode [ 269.687387][T13878] syzkaller1: entered allmulticast mode [ 269.803184][T13880] syzkaller0: entered promiscuous mode [ 269.809015][T13880] syzkaller0: entered allmulticast mode [ 269.961385][T13894] __nla_validate_parse: 7 callbacks suppressed [ 269.961407][T13894] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2484'. [ 269.982729][T13894] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2484'. [ 270.024059][T13894] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2484'. [ 270.050714][T13900] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2484'. [ 270.065059][T13901] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2486'. [ 270.087767][T13900] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2484'. [ 270.113511][T13900] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2484'. [ 270.149024][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2489'. [ 270.193290][T13907] block nbd4: Unsupported socket: should be TCP or UNIX. [ 270.290028][T13912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.675206][T13937] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2498'. [ 270.918418][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 271.074860][T13967] net veth1_virt_wifi .: renamed from virt_wifi0 [ 271.344289][T13985] syzkaller0: entered promiscuous mode [ 271.350194][T13985] syzkaller0: entered allmulticast mode [ 271.818241][T13999] netlink: 'syz.3.2518': attribute type 13 has an invalid length. [ 272.003242][T13999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.039204][T13999] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.071333][T13999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.231764][ T6748] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 272.377634][T14027] team0: No ports can be present during mode change [ 272.465219][T14031] netlink: 'syz.4.2528': attribute type 1 has an invalid length. [ 272.501036][T14032] syzkaller0: left promiscuous mode [ 272.515300][T14036] netlink: 'syz.3.2532': attribute type 2 has an invalid length. [ 272.517363][T14032] syzkaller0: left allmulticast mode [ 272.535863][T14036] netlink: 'syz.3.2532': attribute type 7 has an invalid length. [ 272.662774][T14039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.731388][T14046] ip6t_srh: unknown srh invflags 4000 [ 272.890379][T14052] syzkaller0: entered promiscuous mode [ 272.898247][T14052] syzkaller0: entered allmulticast mode [ 273.025079][T14057] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 273.084738][T14057] IPv6: sit2: Disabled Multicast RS [ 273.110412][T14057] sit2: entered allmulticast mode [ 273.146420][T14071] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 273.211724][T14071] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 273.315686][T14079] tunl0: entered allmulticast mode [ 273.333017][T14079] gre0: left promiscuous mode [ 273.346408][T14079] gre0: entered allmulticast mode [ 273.357107][T14079] tipc: Resetting bearer [ 273.373436][T14079] syzkaller0: entered allmulticast mode [ 273.390419][T14079] geneve2: left promiscuous mode [ 273.429029][T14079] bridge7: entered allmulticast mode [ 273.438941][T14079] gre2: entered allmulticast mode [ 273.454672][ T3501] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.487209][ T3501] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.555891][T14088] bridge10: entered promiscuous mode [ 273.573271][T14088] bridge10: entered allmulticast mode [ 273.590324][ T3501] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.632928][T14088] ksmbd: Unknown IPC event: 3, ignore. [ 273.776605][T14092] bridge_slave_1 (unregistering): left promiscuous mode [ 273.784502][T14092] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.819539][ T3501] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.916759][T14116] netlink: 'syz.4.2557': attribute type 23 has an invalid length. [ 274.067604][T14126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.222766][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 274.230900][ C0] lec:lec_tx_timeout: lec0 [ 274.236460][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 274.269009][T14140] lo: entered allmulticast mode [ 274.275638][T14140] º: entered allmulticast mode [ 274.280998][T14141] netlink: 'syz.3.2563': attribute type 21 has an invalid length. [ 274.291417][T14140] gre0: entered allmulticast mode [ 274.316105][T14140] gretap0: entered allmulticast mode [ 274.331916][T14140] erspan0: entered allmulticast mode [ 274.354298][T14140] ip_vti0: entered allmulticast mode [ 274.360017][T14140] ip6_vti0: entered allmulticast mode [ 274.370071][T14140] sit0: entered allmulticast mode [ 274.376256][T14140] ip6tnl0: entered allmulticast mode [ 274.381858][T14140] ip6gre0: entered allmulticast mode [ 274.387966][T14140] ip6gretap0: entered allmulticast mode [ 274.395170][T14140] vcan0: entered allmulticast mode [ 274.400523][T14140] bond0: entered allmulticast mode [ 274.406266][T14140] bond_slave_0: entered allmulticast mode [ 274.414689][T14140] team0: entered allmulticast mode [ 274.420121][T14140] dummy0: entered allmulticast mode [ 274.437227][T14140] nlmon0: entered allmulticast mode [ 274.443662][T14140] caif0: entered allmulticast mode [ 274.449205][T14140] vxcan0: entered allmulticast mode [ 274.455436][T14140] vxcan1: entered allmulticast mode [ 274.461061][T14140] veth0: entered allmulticast mode [ 274.467273][T14140] veth1: entered allmulticast mode [ 274.473229][T14140] wg0: entered allmulticast mode [ 274.478490][T14140] wg1: entered allmulticast mode [ 274.484376][T14140] wg2: entered allmulticast mode [ 274.489720][T14140] veth0_to_bridge: entered allmulticast mode [ 274.496460][T14140] bridge_slave_0: entered allmulticast mode [ 274.512812][T14140] veth1_to_bridge: entered allmulticast mode [ 274.519615][T14140] bridge_slave_1: entered allmulticast mode [ 274.527880][T14140] veth0_to_bond: entered allmulticast mode [ 274.816415][T14168] tipc: Disabling bearer [ 274.861840][T14174] xt_addrtype: ipv6 does not support BROADCAST matching [ 275.011978][T14189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.083757][T14194] __nla_validate_parse: 18 callbacks suppressed [ 275.083778][T14194] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2578'. [ 275.125156][T14194] netlink: ct family unspecified [ 275.319152][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 275.695481][T14232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2590'. [ 275.806348][T14238] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 275.826653][T14240] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2591'. [ 277.427683][T14246] lo: left allmulticast mode [ 277.434447][T14246] tunl0: left allmulticast mode [ 277.440798][T14246] gre0: left allmulticast mode [ 277.457250][T14246] erspan0: left allmulticast mode [ 277.530025][T14246] ip_vti0: left allmulticast mode [ 277.540251][T14246] ip6_vti0: left allmulticast mode [ 277.559481][T14251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2596'. [ 277.577449][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2595'. [ 277.637076][T14257] C: entered allmulticast mode [ 277.649994][T14257] tunl0: entered allmulticast mode [ 277.661579][T14257] gre0: entered allmulticast mode [ 277.677032][T14260] netlink: 'syz.0.2599': attribute type 33 has an invalid length. [ 277.700405][T14257] gretap0: entered allmulticast mode [ 277.703705][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2600'. [ 277.715163][T14257] erspan0: entered allmulticast mode [ 277.726345][T14257] ip_vti0: entered allmulticast mode [ 277.736209][T14257] ip6_vti0: entered allmulticast mode [ 277.747964][T14257] sit0: entered allmulticast mode [ 277.762570][T14257] ip6tnl0: entered allmulticast mode [ 277.772012][T14257] ip6gre0: entered allmulticast mode [ 277.785397][T14257] syz_tun: entered allmulticast mode [ 277.799580][T14257] ip6gretap0: entered allmulticast mode [ 277.810946][T14257] bridge0: entered allmulticast mode [ 277.821331][T14257] vcan0: entered allmulticast mode [ 277.829598][T14257] bond0: entered allmulticast mode [ 277.836637][T14257] bond_slave_0: entered allmulticast mode [ 277.843424][T14257] bond_slave_1: entered allmulticast mode [ 277.849804][T14257] batadv0: entered allmulticast mode [ 277.859514][T14257] team0: entered allmulticast mode [ 277.867940][T14257] team_slave_0: entered allmulticast mode [ 277.874836][T14257] team_slave_1: entered allmulticast mode [ 277.885771][T14257] dummy0: entered allmulticast mode [ 277.894735][T14257] nlmon0: entered allmulticast mode [ 277.903372][T14257] caif0: entered allmulticast mode [ 277.921721][T14257] vxcan0: entered allmulticast mode [ 277.928605][T14257] vxcan1: entered allmulticast mode [ 277.935489][T14257] veth0: entered allmulticast mode [ 277.944104][T14257] veth1: entered allmulticast mode [ 277.954602][T14257] wg0: entered allmulticast mode [ 277.961619][T14257] wg1: entered allmulticast mode [ 277.970492][T14257] wg2: entered allmulticast mode [ 277.978633][T14257] veth0_to_bridge: entered allmulticast mode [ 277.989850][T14257] veth1_to_bridge: entered allmulticast mode [ 278.005004][T14257] veth1_to_bond: entered allmulticast mode [ 278.017663][T14257] veth0_to_team: entered allmulticast mode [ 278.035900][T14257] veth1_to_team: entered allmulticast mode [ 278.049988][T14257] veth0_to_batadv: entered allmulticast mode [ 278.060225][T14257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.069771][T14257] batadv_slave_0: entered allmulticast mode [ 278.080678][T14257] veth1_to_batadv: entered allmulticast mode [ 278.090644][T14257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.099074][T14257] batadv_slave_1: entered allmulticast mode [ 278.108619][T14257] xfrm0: entered allmulticast mode [ 278.117114][T14257] veth0_to_hsr: entered allmulticast mode [ 278.126245][T14257] hsr_slave_0: entered allmulticast mode [ 278.136125][T14257] veth1_to_hsr: entered allmulticast mode [ 278.146285][T14257] hsr_slave_1: entered allmulticast mode [ 278.155658][T14257] hsr0: entered allmulticast mode [ 278.164527][T14257] veth1_virt_wifi: entered allmulticast mode [ 278.174555][T14257] veth0_virt_wifi: entered allmulticast mode [ 278.183428][T14257] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 278.191680][T14257] veth1_vlan: entered allmulticast mode [ 278.200881][T14257] veth0_vlan: entered allmulticast mode [ 278.214171][T14257] vlan0: left promiscuous mode [ 278.219196][T14257] vlan0: entered allmulticast mode [ 278.225493][T14257] vlan1: entered allmulticast mode [ 278.230772][T14257] macvlan0: entered allmulticast mode [ 278.237734][T14257] macvlan1: entered allmulticast mode [ 278.246401][T14257] ipvlan0: entered allmulticast mode [ 278.251982][T14257] ipvlan1: entered allmulticast mode [ 278.259888][T14257] veth1_macvtap: entered allmulticast mode [ 278.268833][T14257] veth0_macvtap: entered allmulticast mode [ 278.278186][T14257] macsec0: entered allmulticast mode [ 278.286428][T14257] geneve0: entered allmulticast mode [ 278.296513][T14257] geneve1: entered allmulticast mode [ 278.305331][T14257] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 278.319809][T14257] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 278.331077][T14257] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 278.341780][T14257] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 278.354003][T14257] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 278.361529][T14257] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 278.370136][T14257] bridge1: entered allmulticast mode [ 278.377590][T14257] syztnl2: entered allmulticast mode [ 278.383356][T14257] veth2: entered allmulticast mode [ 278.388571][T14257] veth3: entered allmulticast mode [ 278.395326][T14257] bridge2: entered allmulticast mode [ 278.403109][T14257] gretap1: entered allmulticast mode [ 278.408606][T14257] bridge3: entered allmulticast mode [ 278.415719][T14257] bridge4: entered allmulticast mode [ 278.425550][T14257] gre1: entered allmulticast mode [ 278.459372][T14257] bond2: entered allmulticast mode [ 278.466425][T14257] ip6_vti1: entered allmulticast mode [ 278.471918][T14257] vlan2: left promiscuous mode [ 278.477129][T14257] bridge0: left promiscuous mode [ 278.483200][T14257] vlan2: entered allmulticast mode [ 278.488476][T14257] bridge5: entered allmulticast mode [ 278.495008][T14257] bond3: entered allmulticast mode [ 278.500765][T14257] bond4: entered allmulticast mode [ 278.506592][T14257] veth4: entered allmulticast mode [ 278.513406][T14257] veth5: entered allmulticast mode [ 278.520020][T14257] gretap2: entered allmulticast mode [ 278.526151][T14257] sit1: entered allmulticast mode [ 278.531338][T14257] syztnl1: entered allmulticast mode [ 278.537931][T14257] ip6erspan0: left promiscuous mode [ 278.546019][T14257] batadv0.5: entered allmulticast mode [ 278.551665][T14257] veth6: entered allmulticast mode [ 278.557787][T14257] veth7: entered allmulticast mode [ 278.564148][T14257] bridge6: entered allmulticast mode [ 278.571321][T14257] bond5: left promiscuous mode [ 278.578849][T14257] gtp0: left promiscuous mode [ 278.585108][T14257] bond6: entered allmulticast mode [ 278.590719][T14257] gretap3: entered allmulticast mode [ 278.600105][T14257] : entered allmulticast mode [ 278.607115][T14257] bridge7: entered allmulticast mode [ 278.614195][T14257] geneve2: entered allmulticast mode [ 278.620154][T14257] bridge8: entered allmulticast mode [ 278.627018][T14257] bond7: entered allmulticast mode [ 278.633272][T14257] bridge9: entered allmulticast mode [ 278.639225][T14257] macsec1: entered allmulticast mode [ 278.646867][T14257] bridge10: left promiscuous mode [ 278.698387][T14260] team0: left allmulticast mode [ 278.710086][ T6748] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.741715][ T6748] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.760087][ T6748] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.800651][ T6748] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.841290][ T6748] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.873940][T14283] netlink: 'syz.2.2603': attribute type 1 has an invalid length. [ 278.881887][ T6748] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.902984][ T6748] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.917647][T14288] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 278.925770][ T6748] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.978242][T14283] 8021q: adding VLAN 0 to HW filter on device bond7 [ 279.013701][T14292] bond7: (slave geneve2): making interface the new active one [ 279.023865][T14292] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 279.076807][T14298] netlink: 'syz.1.2608': attribute type 1 has an invalid length. [ 279.087856][T14298] netlink: 'syz.1.2608': attribute type 2 has an invalid length. [ 279.111905][ T6748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.152895][T14299] netlink: 'syz.1.2608': attribute type 1 has an invalid length. [ 279.160776][T14299] netlink: 'syz.1.2608': attribute type 2 has an invalid length. [ 279.172735][ T6748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.202928][ T6748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.226312][ T6748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.327967][T14314] vlan3: entered promiscuous mode [ 279.354445][T14314] vlan3: entered allmulticast mode [ 279.407670][T14322] netlink: 'syz.3.2615': attribute type 1 has an invalid length. [ 279.420744][T14323] netlink: 'syz.1.2613': attribute type 1 has an invalid length. [ 279.430605][T14323] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2613'. [ 279.465110][T14325] netlink: 'syz.3.2615': attribute type 30 has an invalid length. [ 279.494784][T14327] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2613'. [ 279.503931][T14325] bond9: option arp_missed_max: invalid value (0) [ 279.503958][T14325] bond9: option arp_missed_max: allowed values 1 - 255 [ 279.518355][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 279.523071][T14325] bond9 (unregistering): Released all slaves [ 279.528099][T14327] netlink: 'syz.1.2613': attribute type 3 has an invalid length. [ 279.937723][T14347] bond5: (slave gretap1): making interface the new active one [ 279.946456][T14347] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 280.022734][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 280.030815][ C0] lec:lec_tx_timeout: lec0 [ 280.036364][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 280.215123][T14357] __nla_validate_parse: 3 callbacks suppressed [ 280.215146][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 280.218043][T14356] veth0: entered promiscuous mode [ 280.231259][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 280.254042][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2624'. [ 280.265103][T14362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2624'. [ 280.275684][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 280.311445][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2623'. [ 280.333275][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 280.347152][T14371] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2627'. [ 280.375263][T14371] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2627'. [ 280.409339][T14369] veth0 (unregistering): left promiscuous mode [ 280.639155][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'. [ 280.692810][T14384] IPVS: stopping master sync thread 6563 ... [ 280.981563][ T30] audit: type=1804 audit(1766508720.334:3): pid=14408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2639" name="/newroot/466/cgroup.controllers" dev="tmpfs" ino=2384 res=1 errno=0 [ 281.019447][T14407] syzkaller0: entered promiscuous mode [ 281.025853][T14407] syzkaller0: entered allmulticast mode [ 281.028728][ T30] audit: type=1800 audit(1766508720.364:4): pid=14408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2639" name="cgroup.controllers" dev="tmpfs" ino=2384 res=0 errno=0 [ 281.117659][T14414] bridge0: left allmulticast mode [ 281.194096][T14421] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 281.577834][T14452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.844747][T14471] syzkaller1: entered promiscuous mode [ 281.880848][T14471] syzkaller1: entered allmulticast mode [ 281.954956][T14482] openvswitch: netlink: IPv4 tunnel dst address is zero [ 282.285388][T14501] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 282.401301][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 282.412972][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 282.439007][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 282.503434][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 283.093314][T14556] validate_nla: 72 callbacks suppressed [ 283.093334][T14556] netlink: 'syz.2.2688': attribute type 4 has an invalid length. [ 283.500880][T14584] netlink: 'syz.0.2694': attribute type 1 has an invalid length. [ 283.598542][T14597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.680038][T14597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.726989][T14597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.755254][T14597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.794639][T14597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.813849][T14597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.831887][T14597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.849932][T14597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.905025][T14597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.946237][T14597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.947366][T14605] netlink: 'syz.1.2697': attribute type 16 has an invalid length. [ 283.984572][T14605] netlink: 'syz.1.2697': attribute type 3 has an invalid length. [ 284.977594][T14681] netlink: 'syz.2.2712': attribute type 6 has an invalid length. [ 284.989764][T14681] netlink: 'syz.2.2712': attribute type 6 has an invalid length. [ 284.999721][T14681] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 285.007916][T14681] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 285.062137][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 285.070227][ C0] lec:lec_tx_timeout: lec0 [ 285.075622][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 285.166889][T14689] syzkaller0: entered promiscuous mode [ 285.173651][T14689] syzkaller0: entered allmulticast mode [ 285.195176][T14689] FAULT_INJECTION: forcing a failure. [ 285.195176][T14689] name failslab, interval 1, probability 0, space 0, times 0 [ 285.208182][T14689] CPU: 1 UID: 0 PID: 14689 Comm: syz.4.2714 Not tainted syzkaller #0 PREEMPT(full) [ 285.208217][T14689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.208229][T14689] Call Trace: [ 285.208238][T14689] [ 285.208248][T14689] dump_stack_lvl+0x189/0x250 [ 285.208277][T14689] ? __pfx____ratelimit+0x10/0x10 [ 285.208296][T14689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.208309][T14689] ? __pfx__printk+0x10/0x10 [ 285.208326][T14689] ? fq_codel_dequeue+0x3811/0x3d80 [ 285.208346][T14689] should_fail_ex+0x414/0x560 [ 285.208366][T14689] should_failslab+0xa8/0x100 [ 285.208381][T14689] kmem_cache_alloc_noprof+0x88/0x710 [ 285.208399][T14689] ? skb_clone+0x212/0x3a0 [ 285.208416][T14689] skb_clone+0x212/0x3a0 [ 285.208428][T14689] ? dev_queue_xmit_nit+0x268/0xad0 [ 285.208443][T14689] dev_queue_xmit_nit+0x29a/0xad0 [ 285.208455][T14689] ? rcu_read_lock_bh_held+0x79/0xe0 [ 285.208470][T14689] ? dev_queue_xmit_nit+0x2d/0xad0 [ 285.208488][T14689] dev_hard_start_xmit+0x1c1/0x800 [ 285.208511][T14689] sch_direct_xmit+0x241/0x4b0 [ 285.208527][T14689] ? __pfx_sch_direct_xmit+0x10/0x10 [ 285.208539][T14689] ? netem_enqueue+0x17e4/0x38a0 [ 285.208556][T14689] __qdisc_run+0xa88/0x1510 [ 285.208579][T14689] qdisc_run+0xc7/0x300 [ 285.208597][T14689] __dev_queue_xmit+0x186d/0x3140 [ 285.208617][T14689] ? __dev_queue_xmit+0x289/0x3140 [ 285.208636][T14689] ? _copy_from_iter+0x215/0x1630 [ 285.208650][T14689] ? __pfx___dev_queue_xmit+0x10/0x10 [ 285.208663][T14689] ? sock_alloc_send_pskb+0x86b/0x980 [ 285.208682][T14689] ? packet_parse_headers+0x7ff/0xb60 [ 285.208694][T14689] ? packet_parse_headers+0x8b8/0xb60 [ 285.208712][T14689] ? skb_copy_datagram_from_iter+0x60c/0x720 [ 285.208729][T14689] ? packet_xmit+0x68/0x330 [ 285.208742][T14689] packet_sendmsg+0x3e33/0x5080 [ 285.208763][T14689] ? aa_label_match+0xdb0/0x1be0 [ 285.208785][T14689] ? __pfx___might_resched+0x10/0x10 [ 285.208804][T14689] ? aa_sk_perm+0x15f/0x920 [ 285.208818][T14689] ? __pfx_packet_sendmsg+0x10/0x10 [ 285.208832][T14689] ? aa_sk_perm+0x7ee/0x920 [ 285.208848][T14689] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 285.208867][T14689] ? aa_sock_msg_perm+0xf1/0x1b0 [ 285.208882][T14689] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.208894][T14689] ? __pfx_packet_sendmsg+0x10/0x10 [ 285.208909][T14689] __sock_sendmsg+0x21c/0x270 [ 285.208927][T14689] __sys_sendto+0x3bd/0x520 [ 285.208941][T14689] ? __pfx___sys_sendto+0x10/0x10 [ 285.208954][T14689] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 285.208974][T14689] ? __fget_files+0x3a0/0x420 [ 285.208994][T14689] ? ksys_write+0x22a/0x250 [ 285.209007][T14689] ? __pfx_ksys_write+0x10/0x10 [ 285.209020][T14689] __x64_sys_sendto+0xde/0x100 [ 285.209035][T14689] do_syscall_64+0xfa/0xf80 [ 285.209048][T14689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.209059][T14689] ? clear_bhb_loop+0x60/0xb0 [ 285.209073][T14689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.209084][T14689] RIP: 0033:0x7f227cd8f749 [ 285.209096][T14689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.209106][T14689] RSP: 002b:00007f227dbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 285.209120][T14689] RAX: ffffffffffffffda RBX: 00007f227cfe5fa0 RCX: 00007f227cd8f749 [ 285.209131][T14689] RDX: 000000000000000e RSI: 0000200000000440 RDI: 0000000000000006 [ 285.209143][T14689] RBP: 00007f227dbd5090 R08: 00002000000001c0 R09: 0000000000000014 [ 285.209155][T14689] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 285.209166][T14689] R13: 00007f227cfe6038 R14: 00007f227cfe5fa0 R15: 00007ffd43127498 [ 285.209210][T14689] [ 285.608924][T14660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 285.617950][T14660] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 285.650426][T14660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.657166][T14660] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 285.690301][T14660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.696823][T14660] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 285.708197][T14660] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.715134][T14660] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 285.726413][T14660] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 285.733216][T14660] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 285.791208][T14696] __nla_validate_parse: 32 callbacks suppressed [ 285.791234][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'. [ 285.819509][T14698] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.2718'. [ 285.820512][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'. [ 285.853681][T14700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2719'. [ 285.864156][T14700] tipc: Invalid UDP bearer configuration [ 285.864217][T14700] tipc: Enabling of bearer rejected, failed to enable media [ 285.886067][T14702] nbd: couldn't find a device at index 2 [ 286.193103][T14711] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2724'. [ 286.222864][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'. [ 286.234748][T14711] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2724'. [ 286.254562][T14711] netlink: 'syz.4.2724': attribute type 2 has an invalid length. [ 286.257064][T14714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.271992][T14711] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2724'. [ 286.621604][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'. [ 286.637878][T14731] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 286.647789][T14731] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 287.357533][T14735] tipc: New replicast peer: 255.255.255.255 [ 287.365663][T14735] tipc: Enabled bearer , priority 10 [ 287.408626][T14737] netlink: 'syz.4.2732': attribute type 1 has an invalid length. [ 287.477035][T14737] 8021q: adding VLAN 0 to HW filter on device bond10 [ 287.490397][T14737] bond9: (slave bond10): making interface the new active one [ 287.499474][T14737] bond9: (slave bond10): Enslaving as an active interface with an up link [ 287.687748][T14751] syzkaller1: entered promiscuous mode [ 287.694188][T14751] syzkaller1: entered allmulticast mode [ 287.838540][T14758] xt_hashlimit: size too large, truncated to 1048576 [ 288.045835][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2743'. [ 288.145518][T14773] netlink: 'syz.4.2745': attribute type 13 has an invalid length. [ 288.370387][T14792] netlink: 'syz.2.2749': attribute type 1 has an invalid length. [ 288.410425][T14792] 8021q: adding VLAN 0 to HW filter on device bond8 [ 288.430722][T14792] vlan4: entered allmulticast mode [ 288.437497][T14792] bond8: entered allmulticast mode [ 288.459959][T14792] bond8: (slave gretap1): making interface the new active one [ 288.468753][T14792] gretap1: entered allmulticast mode [ 288.476718][T14792] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 288.843800][T14821] netlink: 'syz.2.2759': attribute type 7 has an invalid length. [ 289.002788][T14829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.015672][T14840] xt_hashlimit: invalid rate [ 290.082951][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 290.091187][ C0] lec:lec_tx_timeout: lec0 [ 290.097397][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 290.144944][T14846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.417989][T14866] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 290.426174][T14866] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 295.112629][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 295.120657][ C0] lec:lec_tx_timeout: lec0 [ 295.125551][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 300.132437][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 300.140541][ C0] lec:lec_tx_timeout: lec0 [ 300.145496][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 305.152178][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 305.160294][ C0] lec:lec_tx_timeout: lec0 [ 305.165230][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 310.172598][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 310.180937][ C0] lec:lec_tx_timeout: lec0 [ 310.185735][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 315.192535][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 315.200564][ C0] lec:lec_tx_timeout: lec0 [ 315.205832][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 317.306662][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.212540][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 320.221002][ C0] lec:lec_tx_timeout: lec0 [ 320.226088][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 326.032128][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 326.040421][ C0] lec:lec_tx_timeout: lec0 [ 326.045521][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 331.062168][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 331.070213][ C0] lec:lec_tx_timeout: lec0 [ 331.075325][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 336.082659][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 336.090675][ C0] lec:lec_tx_timeout: lec0 [ 336.095862][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 341.112749][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 341.120967][ C0] lec:lec_tx_timeout: lec0 [ 341.126487][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 346.142526][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 346.150554][ C0] lec:lec_tx_timeout: lec0 [ 346.155580][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 351.162690][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 351.170745][ C0] lec:lec_tx_timeout: lec0 [ 351.175820][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 356.192489][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 356.200526][ C0] lec:lec_tx_timeout: lec0 [ 356.205565][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 361.212780][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 361.221019][ C0] lec:lec_tx_timeout: lec0 [ 361.226216][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 367.062284][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 367.070424][ C0] lec:lec_tx_timeout: lec0 [ 367.075172][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 372.082554][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 372.090615][ C0] lec:lec_tx_timeout: lec0 [ 372.095619][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 377.102634][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 377.111014][ C0] lec:lec_tx_timeout: lec0 [ 377.115979][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 378.744949][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.122616][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 382.130824][ C0] lec:lec_tx_timeout: lec0 [ 382.136071][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 387.142649][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 387.150782][ C0] lec:lec_tx_timeout: lec0 [ 387.155924][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.162576][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 392.170697][ C0] lec:lec_tx_timeout: lec0 [ 392.175608][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 397.182492][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 397.190504][ C0] lec:lec_tx_timeout: lec0 [ 412.773352][ T8702] lec:lec_start_xmit: lec0:No lecd attached [ 418.022517][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 418.030748][ C0] lec:lec_tx_timeout: lec0 [ 430.582622][ T31] INFO: task syz-executor:5833 blocked for more than 143 seconds. [ 430.590989][ T31] Not tainted syzkaller #0 [ 430.596825][ T31] Blocked by coredump. [ 430.601514][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.611019][ T31] task:syz-executor state:D stack:20224 pid:5833 tgid:5833 ppid:1 task_flags:0x40054c flags:0x00080003 [ 430.623480][ T31] Call Trace: [ 430.626774][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 430.629728][ T31] __schedule+0x14bc/0x5000 [ 430.634750][ T31] ? __pfx___schedule+0x10/0x10 [ 430.639637][ T31] ? schedule+0x91/0x360 [ 430.644957][ T31] schedule+0x165/0x360 [ 430.649466][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.655638][ T31] __mutex_lock+0x7e6/0x1350 [ 430.662666][ T31] ? __mutex_lock+0x5bb/0x1350 [ 430.667670][ T31] ? rfkill_unregister+0xc8/0x220 [ 430.712722][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.717928][ T31] ? __pfx_device_del+0x10/0x10 [ 430.727489][ T31] ? hci_sock_dev_event+0x42d/0x630 [ 430.733312][ T31] ? __cancel_work_sync+0x5c/0x110 [ 430.739177][ T31] rfkill_unregister+0xc8/0x220 [ 430.745250][ T31] hci_unregister_dev+0x374/0x5b0 [ 430.750596][ T31] vhci_release+0x152/0x1a0 [ 430.755973][ T31] ? __pfx_vhci_release+0x10/0x10 [ 430.761492][ T31] __fput+0x44c/0xa70 [ 430.766090][ T31] task_work_run+0x1d4/0x260 [ 430.770837][ T31] ? __pfx_task_work_run+0x10/0x10 [ 430.777480][ T31] ? kmem_cache_free+0x197/0x620 [ 430.783010][ T31] ? do_exit+0x6c0/0x2310 [ 430.787477][ T31] do_exit+0x6c5/0x2310 [ 430.791774][ T31] ? do_raw_spin_lock+0x121/0x290 [ 430.797466][ T31] ? __pfx_do_exit+0x10/0x10 [ 430.802705][ T31] do_group_exit+0x21c/0x2d0 [ 430.807481][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 430.813258][ T31] get_signal+0x1285/0x1340 [ 430.817817][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 430.824194][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 430.830369][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 430.836604][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 430.842559][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.847406][ T31] do_syscall_64+0x2d0/0xf80 [ 430.852416][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.858613][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.863344][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.869320][ T31] RIP: 0033:0x7f619218e15c [ 430.873867][ T31] RSP: 002b:00007ffd2fbd6630 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.882862][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f619218e15c [ 430.891184][ T31] RDX: 0000000000000030 RSI: 00007ffd2fbd66f0 RDI: 00000000000000f9 [ 430.899662][ T31] RBP: 00007ffd2fbd669c R08: 0000000000000000 R09: 0079746972756365 [ 430.908082][ T31] R10: 00007ffd2fbd5ff0 R11: 0000000000000246 R12: 0000000000000258 [ 430.916462][ T31] R13: 00000000000927c0 R14: 0000000000045cb6 R15: 00007ffd2fbd66f0 [ 430.924959][ T31] [ 430.928037][ T31] INFO: task kworker/0:10:10223 blocked for more than 143 seconds. [ 430.936278][ T31] Not tainted syzkaller #0 [ 430.943189][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.952611][ T31] task:kworker/0:10 state:D stack:24344 pid:10223 tgid:10223 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 430.965358][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 430.972660][ T31] Call Trace: [ 430.976140][ T31] [ 430.979173][ T31] __schedule+0x14bc/0x5000 [ 430.984366][ T31] ? __pfx___schedule+0x10/0x10 [ 430.989508][ T31] ? schedule+0x91/0x360 [ 430.994106][ T31] schedule+0x165/0x360 [ 430.998279][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.004520][ T31] __mutex_lock+0x7e6/0x1350 [ 431.009392][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.014586][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 431.021732][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.027203][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 431.033400][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 431.039549][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 431.046050][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 431.051781][ T31] process_scheduled_works+0xad1/0x1770 [ 431.057723][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 431.064152][ T31] worker_thread+0x8a0/0xda0 [ 431.068890][ T31] ? __kthread_parkme+0x7b/0x200 [ 431.074466][ T31] kthread+0x711/0x8a0 [ 431.078897][ T31] ? __pfx_worker_thread+0x10/0x10 [ 431.084427][ T31] ? __pfx_kthread+0x10/0x10 [ 431.089366][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.095094][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 431.100322][ T31] ? __pfx_kthread+0x10/0x10 [ 431.105499][ T31] ret_from_fork+0x599/0xb30 [ 431.110475][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 431.116238][ T31] ? __switch_to_asm+0x39/0x70 [ 431.121143][ T31] ? __switch_to_asm+0x33/0x70 [ 431.126622][ T31] ? __pfx_kthread+0x10/0x10 [ 431.131226][ T31] ret_from_fork_asm+0x1a/0x30 [ 431.136946][ T31] [ 431.140104][ T31] INFO: task syz.3.2705:14632 blocked for more than 143 seconds. [ 431.148680][ T31] Not tainted syzkaller #0 [ 431.153747][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.162570][ T31] task:syz.3.2705 state:D stack:24312 pid:14632 tgid:14632 ppid:5832 task_flags:0x400040 flags:0x00080002 [ 431.175120][ T31] Call Trace: [ 431.179010][ T31] [ 431.182551][ T31] __schedule+0x14bc/0x5000 [ 431.187275][ T31] ? __pfx___schedule+0x10/0x10 [ 431.192492][ T31] ? schedule+0x91/0x360 [ 431.196831][ T31] schedule+0x165/0x360 [ 431.201071][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.207199][ T31] __mutex_lock+0x7e6/0x1350 [ 431.211977][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.217326][ T31] ? rfkill_unregister+0xc8/0x220 [ 431.223243][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.228767][ T31] ? __pfx_device_del+0x10/0x10 [ 431.234192][ T31] ? __cancel_work_sync+0x5c/0x110 [ 431.239596][ T31] rfkill_unregister+0xc8/0x220 [ 431.245160][ T31] nfc_unregister_device+0x96/0x300 [ 431.250478][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 431.257391][ T31] virtual_ncidev_close+0x56/0x90 [ 431.263012][ T31] __fput+0x44c/0xa70 [ 431.267303][ T31] task_work_run+0x1d4/0x260 [ 431.272766][ T31] ? __pfx_task_work_run+0x10/0x10 [ 431.278005][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 431.284005][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 431.289588][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 431.295223][ T31] ? rcu_is_watching+0x15/0xb0 [ 431.300310][ T31] do_syscall_64+0x2d0/0xf80 [ 431.305428][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.311851][ T31] ? clear_bhb_loop+0x60/0xb0 [ 431.316849][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.323258][ T31] RIP: 0033:0x7f4b6338f749 [ 431.327759][ T31] RSP: 002b:00007ffd71ee2cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 431.336603][ T31] RAX: 0000000000000000 RBX: 00007f4b635e7da0 RCX: 00007f4b6338f749 [ 431.346322][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 431.354796][ T31] RBP: 00007f4b635e7da0 R08: 000000000000022c R09: 0000001e71ee2fef [ 431.363370][ T31] R10: 00007f4b635e7cb0 R11: 0000000000000246 R12: 0000000000045a05 [ 431.371435][ T31] R13: 00007f4b635e6270 R14: ffffffffffffffff R15: 00007ffd71ee2e10 [ 431.379866][ T31] [ 431.383391][ T31] INFO: task syz.1.2709:14660 blocked for more than 144 seconds. [ 431.391222][ T31] Not tainted syzkaller #0 [ 431.398408][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.407624][ T31] task:syz.1.2709 state:D stack:25920 pid:14660 tgid:14658 ppid:5848 task_flags:0x400140 flags:0x00080002 [ 431.420367][ T31] Call Trace: [ 431.423907][ T31] [ 431.426831][ T31] __schedule+0x14bc/0x5000 [ 431.431599][ T31] ? __pfx___schedule+0x10/0x10 [ 431.436655][ T31] ? schedule+0x91/0x360 [ 431.440936][ T31] schedule+0x165/0x360 [ 431.445187][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.450848][ T31] __mutex_lock+0x7e6/0x1350 [ 431.455636][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.460529][ T31] ? nfc_dev_down+0x3b/0x290 [ 431.466225][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.471369][ T31] ? do_raw_spin_lock+0x121/0x290 [ 431.476730][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 431.482918][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 431.488133][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 431.494465][ T31] nfc_dev_down+0x3b/0x290 [ 431.498889][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 431.505050][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 431.510192][ T31] rfkill_set_block+0x1d2/0x440 [ 431.515410][ T31] rfkill_fop_write+0x44b/0x570 [ 431.520280][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 431.525987][ T31] ? security_kernfs_init_security+0x220/0x290 [ 431.532963][ T31] ? rw_verify_area+0x255/0x4d0 [ 431.537955][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 431.547254][ T31] vfs_write+0x27e/0xb30 [ 431.551528][ T31] ? __pfx_vfs_write+0x10/0x10 [ 431.556605][ T31] ? __fget_files+0x2a/0x420 [ 431.561565][ T31] ? __fget_files+0x2a/0x420 [ 431.566634][ T31] ? __fget_files+0x3a0/0x420 [ 431.571397][ T31] ? __fget_files+0x2a/0x420 [ 431.576539][ T31] ksys_write+0x145/0x250 [ 431.580965][ T31] ? __pfx_ksys_write+0x10/0x10 [ 431.586140][ T31] ? do_syscall_64+0xbe/0xf80 [ 431.590908][ T31] do_syscall_64+0xfa/0xf80 [ 431.595888][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.603016][ T31] ? clear_bhb_loop+0x60/0xb0 [ 431.607887][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.614220][ T31] RIP: 0033:0x7f306d78f749 [ 431.618638][ T31] RSP: 002b:00007f306e6e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.627766][ T31] RAX: ffffffffffffffda RBX: 00007f306d9e5fa0 RCX: 00007f306d78f749 [ 431.636583][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 431.645300][ T31] RBP: 00007f306d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.653640][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.661887][ T31] R13: 00007f306d9e6038 R14: 00007f306d9e5fa0 R15: 00007ffc2deea038 [ 431.670372][ T31] [ 431.673710][ T31] INFO: task syz-executor:14713 blocked for more than 144 seconds. [ 431.682882][ T31] Not tainted syzkaller #0 [ 431.687957][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.697566][ T31] task:syz-executor state:D stack:26328 pid:14713 tgid:14713 ppid:1 task_flags:0x400040 flags:0x00080000 [ 431.710583][ T31] Call Trace: [ 431.714313][ T31] [ 431.717252][ T31] __schedule+0x14bc/0x5000 [ 431.721885][ T31] ? __pfx___schedule+0x10/0x10 [ 431.726865][ T31] ? schedule+0x91/0x360 [ 431.731645][ T31] schedule+0x165/0x360 [ 431.736060][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.742315][ T31] __mutex_lock+0x7e6/0x1350 [ 431.747138][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.752341][ T31] ? rfkill_register+0x37/0x8e0 [ 431.757276][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.762855][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 431.768171][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 431.774281][ T31] ? device_initialize+0x24b/0x440 [ 431.779874][ T31] rfkill_register+0x37/0x8e0 [ 431.785136][ T31] hci_register_dev+0x3f2/0x8b0 [ 431.790920][ T31] vhci_create_device+0x39c/0x650 [ 431.796455][ T31] vhci_write+0x3ce/0x4a0 [ 431.800903][ T31] vfs_write+0x5c9/0xb30 [ 431.805446][ T31] ? __pfx_vhci_write+0x10/0x10 [ 431.810321][ T31] ? __pfx_vfs_write+0x10/0x10 [ 431.815584][ T31] ksys_write+0x145/0x250 [ 431.819997][ T31] ? __pfx_ksys_write+0x10/0x10 [ 431.825788][ T31] ? do_syscall_64+0xbe/0xf80 [ 431.830652][ T31] do_syscall_64+0xfa/0xf80 [ 431.835735][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.842648][ T31] ? clear_bhb_loop+0x60/0xb0 [ 431.847491][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.853792][ T31] RIP: 0033:0x7f38ff98e1c0 [ 431.858223][ T31] RSP: 002b:00007fffbff03a98 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 431.867854][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f38ff98e1c0 [ 431.876339][ T31] RDX: 0000000000000002 RSI: 00007fffbff03aaa RDI: 00000000000000ca [ 431.884664][ T31] RBP: 00007f38ffbe67b8 R08: 0000000000000000 R09: 00007f390071d6c0 [ 431.893116][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 431.901200][ T31] R13: 0000000000000003 R14: 00007fffbff03df8 R15: 0000000000000000 [ 431.909837][ T31] [ 431.913308][ T31] [ 431.913308][ T31] Showing all locks held in the system: [ 431.921252][ T31] 1 lock held by khungtaskd/31: [ 431.926511][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 431.937505][ T31] 2 locks held by kworker/u8:9/3501: [ 431.944770][ T31] #0: ffff88813ff29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 431.957261][ T31] #1: ffffc9000c587b80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 431.970600][ T31] 2 locks held by getty/5598: [ 431.975588][ T31] #0: ffff88814dc2f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 431.986173][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 431.996891][ T31] 1 lock held by syz-executor/5833: [ 432.002711][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 432.012966][ T31] 3 locks held by kworker/0:10/10223: [ 432.018422][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 432.029753][ T31] #1: ffffc900025ffb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 432.044179][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 432.055932][ T31] 2 locks held by syz.3.2705/14632: [ 432.061138][ T31] #0: ffff8880542fa100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 432.071502][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 432.082484][ T31] 2 locks held by syz.1.2709/14660: [ 432.087710][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 432.098398][ T31] #1: ffff8880542fa100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 432.109309][ T31] 2 locks held by syz-executor/14713: [ 432.115468][ T31] #0: ffff88807b9f4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 432.125999][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 432.136600][ T31] 2 locks held by syz.4.2754/14807: [ 432.143047][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.151518][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 432.162511][ T31] 1 lock held by syz.2.2776/14865: [ 432.167818][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.176819][ T31] 1 lock held by syz-executor/14869: [ 432.182820][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.191511][ T31] 1 lock held by syz-executor/14871: [ 432.197488][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.206486][ T31] 1 lock held by syz-executor/14873: [ 432.212669][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.221470][ T31] 1 lock held by syz-executor/14875: [ 432.227471][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.236304][ T31] 1 lock held by syz-executor/14880: [ 432.241955][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.251432][ T31] 1 lock held by syz-executor/14883: [ 432.257671][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.266615][ T31] 1 lock held by syz-executor/14885: [ 432.272481][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.281145][ T31] 1 lock held by syz-executor/14887: [ 432.287034][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.296299][ T31] 1 lock held by syz-executor/14889: [ 432.301677][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.310939][ T31] 1 lock held by syz-executor/14894: [ 432.316458][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.325252][ T31] 1 lock held by syz-executor/14897: [ 432.331172][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.340056][ T31] 1 lock held by syz-executor/14899: [ 432.345763][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.355179][ T31] 1 lock held by syz-executor/14901: [ 432.360825][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.369822][ T31] 1 lock held by syz-executor/14903: [ 432.375943][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 432.396156][ T31] [ 432.398575][ T31] ============================================= [ 432.398575][ T31] [ 432.407586][ T31] NMI backtrace for cpu 1 [ 432.407604][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.407618][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.407625][ T31] Call Trace: [ 432.407629][ T31] [ 432.407635][ T31] dump_stack_lvl+0x189/0x250 [ 432.407656][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.407670][ T31] ? __pfx__printk+0x10/0x10 [ 432.407692][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 432.407709][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 432.407728][ T31] ? __pfx__printk+0x10/0x10 [ 432.407757][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 432.407779][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 432.407796][ T31] sys_info+0x135/0x170 [ 432.407809][ T31] watchdog+0xf95/0xfe0 [ 432.407827][ T31] ? watchdog+0x20a/0xfe0 [ 432.407846][ T31] kthread+0x711/0x8a0 [ 432.407862][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.407876][ T31] ? __pfx_kthread+0x10/0x10 [ 432.407891][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.407908][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 432.407918][ T31] ? __pfx_kthread+0x10/0x10 [ 432.407933][ T31] ret_from_fork+0x599/0xb30 [ 432.407945][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 432.407962][ T31] ? __switch_to_asm+0x39/0x70 [ 432.407975][ T31] ? __switch_to_asm+0x33/0x70 [ 432.408059][ T31] ? __pfx_kthread+0x10/0x10 [ 432.408074][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.408097][ T31] [ 432.408102][ T31] Sending NMI from CPU 1 to CPUs 0: [ 432.571410][ C0] NMI backtrace for cpu 0 [ 432.571429][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 432.571447][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.571456][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 432.571480][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 432.571493][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 432.571508][ C0] RAX: a4e17d22b8075100 RBX: ffffffff81978fda RCX: a4e17d22b8075100 [ 432.571520][ C0] RDX: 0000000000000001 RSI: ffffffff8d7925ee RDI: ffffffff8bc08360 [ 432.571531][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 432.571542][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070 [ 432.571553][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 432.571563][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 432.571576][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.571587][ C0] CR2: 0000558d8bbc1000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 432.571603][ C0] Call Trace: [ 432.571612][ C0] [ 432.571618][ C0] default_idle+0x13/0x20 [ 432.571635][ C0] default_idle_call+0x73/0xb0 [ 432.571654][ C0] do_idle+0x1ea/0x520 [ 432.571671][ C0] ? irqentry_exit+0x5ba/0x660 [ 432.571688][ C0] ? __pfx_do_idle+0x10/0x10 [ 432.571712][ C0] cpu_startup_entry+0x44/0x60 [ 432.571728][ C0] rest_init+0x2de/0x300 [ 432.571747][ C0] start_kernel+0x3a7/0x400 [ 432.571766][ C0] x86_64_start_reservations+0x24/0x30 [ 432.571784][ C0] x86_64_start_kernel+0x143/0x1c0 [ 432.571803][ C0] common_startup_64+0x13e/0x147 [ 432.571829][ C0] [ 432.572638][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 432.572655][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.572675][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.572686][ T31] Call Trace: [ 432.572695][ T31] [ 432.572703][ T31] dump_stack_lvl+0x99/0x250 [ 432.572728][ T31] ? __asan_memcpy+0x40/0x70 [ 432.572747][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.572768][ T31] ? __pfx__printk+0x10/0x10 [ 432.572805][ T31] vpanic+0x237/0x6d0 [ 432.572826][ T31] ? __pfx_vpanic+0x10/0x10 [ 432.572848][ T31] ? preempt_schedule_common+0x83/0xd0 [ 432.572903][ T31] panic+0xb9/0xc0 [ 432.572924][ T31] ? __pfx_panic+0x10/0x10 [ 432.572946][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 432.572970][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 432.573003][ T31] watchdog+0xfdf/0xfe0 [ 432.573032][ T31] ? watchdog+0x20a/0xfe0 [ 432.573063][ T31] kthread+0x711/0x8a0 [ 432.573088][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.573111][ T31] ? __pfx_kthread+0x10/0x10 [ 432.573135][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.573161][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 432.573178][ T31] ? __pfx_kthread+0x10/0x10 [ 432.573201][ T31] ret_from_fork+0x599/0xb30 [ 432.573222][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 432.573249][ T31] ? __switch_to_asm+0x39/0x70 [ 432.573270][ T31] ? __switch_to_asm+0x33/0x70 [ 432.573290][ T31] ? __pfx_kthread+0x10/0x10 [ 432.573313][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.573351][ T31] [ 432.926279][ T31] Kernel Offset: disabled [ 432.930683][ T31] Rebooting in 86400 seconds..