last executing test programs: 3m28.621761399s ago: executing program 0 (id=1404): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x2}}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x1, 0x9}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x9, [{0x5, 0x5, 0x9}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x38, 0x1}, @float={0xa, 0x0, 0x0, 0x10, 0x8}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x2e, 0x0, 0x61, 0x2e, 0x61, 0x0]}}, &(0x7f0000000800)=""/184, 0x88, 0xb8, 0x0, 0x8}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) 3m27.680580208s ago: executing program 0 (id=1406): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c084}, 0x20008090) 3m26.206962097s ago: executing program 0 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gre0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xf, &(0x7f0000937fed)=""/2, &(0x7f0000000080)=0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c0004802800018007000100637400001c000280050003000100007d0800024000000009080001400000000f14000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040004) 3m26.054557704s ago: executing program 0 (id=1411): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x3ae, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r1, 0x5450b000) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r1, 0xe6905000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) close(r2) socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r0, 0x0, 0xf03a0005) 3m25.43361653s ago: executing program 0 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfa, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c891}, 0x84) 3m25.192357789s ago: executing program 0 (id=1423): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 3m10.161547943s ago: executing program 32 (id=1423): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m28.290568163s ago: executing program 2 (id=1881): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)='ip6gretap0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x180, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x401}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf32}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}]}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'vlan\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xffffffffffffff01}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xd}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6a2f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000000000000000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xffffffff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf5e}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 2m28.116223724s ago: executing program 2 (id=1884): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x24, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x24}}, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xd}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8014}, 0x20008010) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @mcast1, 0x8}, 0x1c) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x40010, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) 2m25.779559055s ago: executing program 2 (id=1889): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x7) sendmmsg(r2, &(0x7f0000007fc0), 0x0, 0x810) 2m25.367607947s ago: executing program 2 (id=1896): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="40c3602f2fb2c4e70100e37d9e", 0xd, 0x20c1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m25.147350103s ago: executing program 2 (id=1899): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c1801"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m24.936051047s ago: executing program 2 (id=1902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000180)='syzkaller\x00', 0x9}, 0x94) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x1000, @any, 0xfffa}, 0xe) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x80) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r8, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r8, @ANYBLOB="0800020001"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$alg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="6500c6c1af457aaa40bb01fc35751826a72672461104d39f3a8cdb0b14886044a6f0f47f2435de97ffecdf6e715c9c06ddd9766e291072791cc6e67d019197b1b2c30e9623c4d8a1a7e7a9df52fe2b40b0fe2f867ac8844906ecc5ed74", 0x5d}], 0x1, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x80000001}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0xf8, 0x117, 0x2, 0xdf, "dce869e314ff946c048ae9c77b39a4546940cf9d472d521a861347d9109c828573121886ec16b7e71495dd046edf97a4d2019d85b30210600111c998475fd2a34cb897b0e3905d45d55f09658ccb4540b237a7f2eb1d11a2a244b661facd34bc6e78ca5cb50594d63144ffa1e8c75136abdf09ee496b71026817f9b75ee5f080c557ab7f7938e08d92ec55808619b54e279f1cd5ba5a72cc500027104fc4d42beac167a28ef10b2c1e5a7a061601b0f492283f384b87319e6cc4ee5ed87b758a234ec811b352d50a7b7fa8f8d92e55a43387d97dd46f36dce1bf0d2fcc7429"}, @iv={0x100, 0x117, 0x2, 0xe5, "10d923ef818580b447aceac984078bbf80c5fca8fc39dab8759a0e7db223425a1dc2d9b96a6f956e4584b99f7877aa3c1f3667b668590e7080defd6231f14f14c5c6d0ed76306db6ed1987a215f01640886913b4838bf55b70ffaa47ee1b70b1259303bf0574f38365961837eed9700a0ea8a79ff7a5b0308caf36723aad8b80159534f726144467dee0c6e258c51fe78a4459733ee52f2d4289924b619036a982cf9bff4d65050b08bdb44dc29a5142ed4ad881d6c84a2d9dff4f5af5992d7224a325ace60198519c0c4086e50382da1b38235166f63240b92d8276ff56da972812c5e433"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x108, 0x117, 0x2, 0xf0, "a32d42d25d260ba2cf302307e0b8442ad92a2755955554cd303c877ceabdc51171aa7ad2d085999ce38814e5cdfdfa5323a318c17e52a070b9574f03dfa120bf7c52ed18652fa8e1d22f408c721175ae15f500e5378a9f72945ed94d08ec44c753141f9dbb51ee5dbb6f51e3d061b4f77b0a07f60d32ab76b48b4ac1589d396916cac1daed23a73b0cfc3099f808e8dac7a3ee5b1d5dc38712ac278c40ee7c4968cbd8376d775b105b537a0c31b06829ef3391d42e35d1ac604f76cea44f1c86f00f52e9f2d0da36c6ab2854932acb959ba8d0d5640fc0374e89464fb296da7543537c4c37d03eb727983a31e1a2f4d4"}], 0x390, 0x20004004}, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 2m9.637992998s ago: executing program 33 (id=1902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000180)='syzkaller\x00', 0x9}, 0x94) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x1000, @any, 0xfffa}, 0xe) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x80) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r8, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r8, @ANYBLOB="0800020001"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$alg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="6500c6c1af457aaa40bb01fc35751826a72672461104d39f3a8cdb0b14886044a6f0f47f2435de97ffecdf6e715c9c06ddd9766e291072791cc6e67d019197b1b2c30e9623c4d8a1a7e7a9df52fe2b40b0fe2f867ac8844906ecc5ed74", 0x5d}], 0x1, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x80000001}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0xf8, 0x117, 0x2, 0xdf, "dce869e314ff946c048ae9c77b39a4546940cf9d472d521a861347d9109c828573121886ec16b7e71495dd046edf97a4d2019d85b30210600111c998475fd2a34cb897b0e3905d45d55f09658ccb4540b237a7f2eb1d11a2a244b661facd34bc6e78ca5cb50594d63144ffa1e8c75136abdf09ee496b71026817f9b75ee5f080c557ab7f7938e08d92ec55808619b54e279f1cd5ba5a72cc500027104fc4d42beac167a28ef10b2c1e5a7a061601b0f492283f384b87319e6cc4ee5ed87b758a234ec811b352d50a7b7fa8f8d92e55a43387d97dd46f36dce1bf0d2fcc7429"}, @iv={0x100, 0x117, 0x2, 0xe5, "10d923ef818580b447aceac984078bbf80c5fca8fc39dab8759a0e7db223425a1dc2d9b96a6f956e4584b99f7877aa3c1f3667b668590e7080defd6231f14f14c5c6d0ed76306db6ed1987a215f01640886913b4838bf55b70ffaa47ee1b70b1259303bf0574f38365961837eed9700a0ea8a79ff7a5b0308caf36723aad8b80159534f726144467dee0c6e258c51fe78a4459733ee52f2d4289924b619036a982cf9bff4d65050b08bdb44dc29a5142ed4ad881d6c84a2d9dff4f5af5992d7224a325ace60198519c0c4086e50382da1b38235166f63240b92d8276ff56da972812c5e433"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x108, 0x117, 0x2, 0xf0, "a32d42d25d260ba2cf302307e0b8442ad92a2755955554cd303c877ceabdc51171aa7ad2d085999ce38814e5cdfdfa5323a318c17e52a070b9574f03dfa120bf7c52ed18652fa8e1d22f408c721175ae15f500e5378a9f72945ed94d08ec44c753141f9dbb51ee5dbb6f51e3d061b4f77b0a07f60d32ab76b48b4ac1589d396916cac1daed23a73b0cfc3099f808e8dac7a3ee5b1d5dc38712ac278c40ee7c4968cbd8376d775b105b537a0c31b06829ef3391d42e35d1ac604f76cea44f1c86f00f52e9f2d0da36c6ab2854932acb959ba8d0d5640fc0374e89464fb296da7543537c4c37d03eb727983a31e1a2f4d4"}], 0x390, 0x20004004}, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 4.873677443s ago: executing program 5 (id=3091): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="0a000100aa"], 0x48}}, 0x0) 4.792715698s ago: executing program 6 (id=3092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000000100)={0xfd, 0x4001, 0xfffe, @loopback, 0x4}, 0x1c) 4.65155666s ago: executing program 6 (id=3094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 4.06360989s ago: executing program 4 (id=3097): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r1], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x2a, 0x2, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[], 0x44}}, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}}, 0xae887979b77ec33a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\}d'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x84, 0xd}}]}, 0x98}}, 0x40801) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.895453094s ago: executing program 5 (id=3098): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000304fdffffff0000d598cd2a0000", @ANYRES32=0x0, @ANYBLOB="e4470600a04d06001400128009000100766574680000000004000280080020000900000008001f0004"], 0x44}, 0x1, 0xba01}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0xe0b, 0xfffffffd, 0xfffffffc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xfff3}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3ff, 0xa00, 0x3, 0x987, 0x200ff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r9, 0x5452, &(0x7f0000000180)=0x3) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0400000000000000b7030000007f0000850000000c000000b7000000000013009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xcf, &(0x7f0000000180)=""/207, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xe, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[r2, r2, r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000380)=[{0x2, 0x2, 0x2, 0x3}, {0x1, 0x5, 0x3}, {0x2, 0x5, 0x9, 0x5}, {0x3, 0x3, 0x9, 0x4}, {0x0, 0x1, 0x10, 0x4}, {0x5, 0x1, 0xa, 0x5}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000080), &(0x7f0000000580)=r11}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r12, 0x40, 0x52, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000440)=@allocspi={0x1e8, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@lastused={0xc, 0xf, 0x80000001}, @sa={0xe4, 0x6, {{@in=@empty, @in6=@mcast1, 0x4e23, 0x0, 0x4e20, 0x157, 0x2, 0xb0, 0xbfba73203e9cbc2c, 0xff, r12, r13}, {@in6=@remote, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x6, 0x0, 0x5, 0x3bf, 0x1, 0x8, 0x7f, 0x8}, {0x8, 0x9, 0x8, 0xffff}, {0x2, 0x2, 0xfffffffe}, 0x70bd25, 0x3504, 0x2, 0x2, 0xf, 0x1d}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 3.832286418s ago: executing program 4 (id=3099): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1304000, 0x1000}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) read$alg(r2, &(0x7f0000000000)=""/13, 0xd) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, 0x0, 0x14) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x10010, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r6, 0x0, 0x81) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=@deltfilter={0x69c4, 0x2d, 0x104, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0xfff1}, {0x1, 0x6}, {0x2, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x15b4, 0x2, [@TCA_BASIC_ACT={0x15b0, 0x3, [@m_bpf={0x104, 0x1d, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xcd, 0x6, "94d4368d31091ea1e622f5e5c8a25fef055a085e35546923c6bae10b45e48653761b4909a5726c47982ea0017d99290209d76e834f48fdc2e97ddb84f9d1a6b96bff944f88934f014369d37f613c678477a34642a1d47da81c8c137e41801db29f3292d7eaf16814a1a7e652b871f63a8cb93d7bf276f1a55df6158c69db1636ee944c8ef5304555fca28f1a3f5dca43ebbe88de6692865d4553de15294446c476feef4ba8a6541e998a1f67cf1e8ef092a1c550c418ab3705aef32f03f897392bee10c8e10aa48d01"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x1050, 0x1f, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6a04}, @TCA_MPLS_TTL={0x5, 0x7, 0x31}, @TCA_MPLS_TTL={0x5, 0x7, 0x6e}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_tunnel_key={0x5c, 0x1d, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}]}, {0x21, 0x6, "dc499685529f5058f3407e92dfb2baa50d6fe5194a6cbcd907fddffeed"}, {0xc}, {0xc, 0x8, {0x3, 0xd8b9d5f3e92f6bac}}}}, @m_tunnel_key={0x14c, 0x19, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x38000000}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0xbd, 0x6, "e54b52efa1bc2e29bd574efeca41abdedf40e8aaa71de04e82e341320b28a417b90d41dd2935838dfa32d56b96ab872f31bdf5628abc36a4b0f90e9b437b2d984858afb4c1107f56ef368a1aef38fb05dcec04c58b93c3bea42a0858b79821162e365d0852d1fc4042c35747ad7ffc196ab0ef15c75ef1794663dedab27859691dac6856063b13f7faa41925b5547716e71035c6d94dce7e00b5ce5083eb7e3598c61255c7c94eb3a49ec77bf8e9552a6a3471420525f38939"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xcc, 0x8, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x90, 0x6, "57d52439d69cb07e2721a716986e532a736398990904a5f18b3a4c3b50b94268a9c4db36fac4c59c2aa40d3b24c982b38e0b4f68d3fd2c67d0d5e6e2c25780d8c417e8bdcf00af3bf87fafb57449322ec11cde8f1d5dea47f40bff57fc5fd0909c698bb789502bd28505e3d8237cb7b8857e55d37244a9d0cd90faeb406f13983ddf12787d7589aaf02772c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x11c, 0x8, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}]}, {0xe6, 0x6, "3d4eba5c9c5648ddc062999a88babbde41f0a66c895031e9fb03797f56cc18ca6a2ebf543b62f65a0cad2336c2fe7b3241513be36b8be7be05821be1cb5bc17e9b32545c58d53b349f2262571c29cd1d2754e6ecec23d8c256397da2ac35e64fc23fa7f1ea3b415d31cff5024b28aeddc78dcbc27f6b29282e0dd27aaf2324473cfd33ee630a699bbf9c21cf7e4a084c75ace91135b7de373c477a37ba49da396d925edeada9fb9230bd94e1bb01e3cea419156778182a1cfd647623fa15b629778324ed6c550b0b4c36c7ca7e1f79add1fb5f0629c2a46f4c3d446c7ce92a74d52c"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xc8, 0x4, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x66, 0x6, 0xfffffffffffffff9, 0x10, 0xd}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x16, 0x7, 0xffffffffffffffff, 0xb4, 0xf78}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xea71, 0x6, 0x1, 0xffff}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x27, 0x7, 0x3, 0x3, 0x1}, 0x101}}]}, {0x28, 0x6, "5e7107987aa4f13f13f1439eff0abd03ebe8cec414e44c9f3123d5e0fa0ceaeb4d5bda82"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @filter_kind_options=@f_matchall={{0xd}, {0x1540, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x2}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x142c, 0x2, [@m_nat={0x14c, 0x9, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x8, 0x1, 0x3}, @private=0xa010101, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffff001, 0x21, 0x8, 0x5, 0x1}, @dev={0xac, 0x14, 0x14, 0x20}, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x68a, 0x1, 0xffffffffdffffff7, 0x0, 0x1a}, @multicast1, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x7fffffff, 0x0, 0xfffffff8, 0x1b}, @broadcast, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9e4, 0xde, 0x3, 0x8000, 0x2}, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x44}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x5, 0x0, 0xb}, @empty, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x9, 0xad3b4476e6b85af4, 0x8, 0x873}, @broadcast, @broadcast, 0xff, 0x1}}]}, {0x9, 0x6, "7f5ce5a36d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x7bbce9e1a1f44956}}}}, @m_ctinfo={0xd4, 0x7, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xf836}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffd}]}, {0x78, 0x6, "00e5b38e82bd4d19bca789972b7c32a03dfa27863a706debcb027248d1886c0934bea44dc81d41c7ebb9c89c41d5f7994aad77de9144af28eedc682ff126ccc46b80a84e8f311e8fcea4abf2bbb8f29dbea3338dae84cd803b636f17b79a59156997c3febb2ddd7ae64140957bf9a987a84d2638"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x10bc, 0xc, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x6, 0x7, 0xffffff7b, 0x7}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x0, 0x2, 0x6, 0x80000000}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x0, 0x2, 0x6}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x2, 0x5, 0x8, 0x40}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0xffffffffffffffff, 0x6, 0xd}, 0x40}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x57989695bdaab3a7}}}}, @m_gact={0x14c, 0x1f, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x37bcaed5, 0x8, 0x6, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff93c2, 0xffffffff, 0x8, 0x1, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x151a, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x37f, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x204b, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x507, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x6, 0x3, 0x4, 0x3f476a5c}}]}, {0xa8, 0x6, "fbed5fc8cd7527f783d51d98cc9c7d0ac8951c53079adba01cf648a4188d078641b86e92388921a2ce00cfe9d3f63314be7dbdcc101d187a71e1410d2b572aed9b87791e98c8c54d06379837abe6f965778bb1aece8576913b89bdd4f18057271cbc39793290132de1ec24bffa0a36d1c09749b40491e3bffe797e7dddd2832f91d39d73819bd4cb182f1dfbd501193956d963822f1c878b7c7873d3985e4ef2ebeb7577"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0xe0, 0x2, [@m_sample={0xdc, 0x19, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x2, 0x3, 0xd165, 0x24000}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x206, 0xfffffffc, 0x1, 0x5}}]}, {0x55, 0x6, "9a391324e561f2c60c297ef6f8a4ac9569f58c85b9fcbe0bb2e8b59a74190b045688a48cf7da785907dfb58dc4254ce5187cdc24e169b8f3489fd14ad1f1d708729b78f51cf3228d0cbc2c2f5673d46a2b"}, {0xc, 0x7, {0x0, 0xc53472aa2ff0e712}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @filter_kind_options=@f_cgroup={{0xb}, {0x3154, 0x2, [@TCA_CGROUP_EMATCHES={0x21c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x208, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x8}, {0x2, 0x2}}}, @TCF_EM_CONTAINER={0x5c, 0x3, 0x0, 0x0, {{0x5, 0x0, 0xfff}, "d7747393ccd61f29054715c69f5a37af8c1a275aa2e3a7d7047d62df0b7bea6c9f670770be8893fa97bf44ec2952a8239446a7686b0817debfc519d48dedcaaa1d85993c157b7dd2ed7cb3e6a5727eed"}}, @TCF_EM_IPT={0x114, 0x2, 0x0, 0x0, {{0x401, 0x9, 0xe}, [@TCA_EM_IPT_MATCH_DATA={0xe8, 0x5, "7cba03474b4c7aa843a54eee3b99b731efabba83c11cc521658022e1545b979991490fabeb25fa84893daa9b6f5792f1bcc087a5dde6d18149cefaf8c320917f1c0c72c47f46fa658ee60dc8eb9f54e66e426c6ab5e2ed2ad27ab9ba707f2e7e4d3e71536959a40792ed7a3a7cfd188e8f68faa82c72552559547e41d0bbffe1462aa870ed270ff521ff7310e5e7e39f3e97189e3b0ecb837dccf3a462bb55b903e90ed4fb577eb8759f1a1f2e8ee4d84445567659b7389a254b0cc9dad8158846fb572f7e9a443bcf637d54ec32c0477a001200facf27f6507c87be4f7b5da1fc9dc29e"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xf}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x5}, {0x2, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x7}, {0x5, 0x0, 0x20, 0x5}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x7f}, {0xffffffffffffffff, 0x5, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf, 0x7, 0x3}, {{0x2, 0x1, 0x0, 0x1}, {0x4}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0xd5}, {0x3, 0x0, 0x6}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x4}, {0x800, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x6}, {0x8, 0x1, 0x2, "a4"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_ACT={0x280, 0x1, [@m_ctinfo={0x148, 0xd, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x6, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xfffff13b, 0x1, 0xfffffffa, 0x5}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x34000000, 0x8, 0xfffffffffffffff9, 0x5, 0xff8}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xc}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}]}, {0xa2, 0x6, "c418804b7a1ffc1916095c418a01a80d8cb0e376a169414df73f11785c6fb0bf32a93e9992db06060402e3f56b91c95ed28463811d0e03ecf47ea476d1cc9da3938670b0095f1c50df2db48ef7b0738c6b97ca0c58a03df025f4f5caac7c6d9a1ca7dc744c9e3f9a45e9d66ac84cf2bdb3513643e3b0b53077eb19239ae0708fa256c5d28315de583a0a2e00f1ba9d5954af0b3efcd6efac48dc948ea228"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xc4, 0x18, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb960, 0x2, 0x7, 0x0, 0x3}, 0x10}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="fa759266eb00"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8001, 0x2, 0xfffffffffffffffd, 0x2, 0x4}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}]}, {0xe, 0x6, "c7f2e372738d72bcd3c0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x70, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x3c, 0x6, "9a84430adcc50a3664999b6c5b854bb73a24f00a9b29e47506196926c5296057fad6e7d0e5b693eb7bf7a7b48b9f41f49554e0535ef70a36"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x1594, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x36c9}, {0xa37, 0x8, 0x0, "70c501d63ad0687e"}}}, @TCF_EM_IPT={0x170, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x800}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_DATA={0xfc, 0x5, "2c2fea3a54d6d1ff78355345d9e49e27f6a00108a737dd9850af9dffd4b7ace6e3bf6b5431c38713d4e9803e7c8268057d9d7122c4009e68a5219f0f89318ce67154ac5fb45221d52eed4aff143cb6f43bbc0b142391a93ee364eabf321c686895fd4785583a8a6ae85a988d13b8338ab3fbe6a04b3458bf9bc264fcbf9b8865eefb6c8f854b0b2a2d9da83fc93910e4c18f9e517d5e8489b57cf01c29f2cdabe2127417680d6916263448d4ce8ee836cc6cd52f3b548112fe5c0049c64a587702045fd9c4383cfcfd38e97f7fe65768c23a426648e59346f176afd7608300657eaa87fcf9e2d9c3906d2f094af6cc368257cfc322498898"}, @TCA_EM_IPT_MATCH_DATA={0x20, 0x5, "c875a9c5bc65b3ef65d384e37f0103bd6da2043b33fd31321462ee23"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2793, 0x7, 0x2}, {{0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x1}, {0x10, 0x8, 0x1, "bba424aeea0c76c6"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0xff}, {0x5, 0xc000000, 0x7, 0x62f5}}}, @TCF_EM_CONTAINER={0xec, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x101}, "d546113fec3f5415e8c0c84d940cd8771fbc17c396694da9453ad1c08786f419d5036ec57c2544ffb7bf68efc60494a8736db9e8cf5cb9918c70aa9f4ade34b27c46a872b0e490652acbed9750da3976083157de962e57463ce26c67da0f040c8fc468bd408401c73224f62f377d8695200f698ebee50c66192f196079f778548c2fff19bc1b04fbc497335728a114c9c3a55df040f2291c8be74f75452512856d7c3de78d886d735c01e4e61accb0eaa21c8315584cc8d57ec0e4ec09e6c810f6d44bba4964e20712d4cba9e36c636d818553e6a649878164f0a8dc55e8ac"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x2}, {0x1, 0x7, 0x4, 0x0, 0x5, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2f}, {0x9756, 0xb, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x3a, 0x1}, {0x6, 0x7, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x100, 0x7, 0x7}, {{0x4, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x5}, {0x6, 0x1, 0x0, '\b'}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x3}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x90, 0x2, 0x0, 0x0, {{0x2, 0x0, 0xb}, "a68ff512cc0b8333a1105ef7d21198fa819fa7928591393acc465a23f07ddb3b1a060b03e2bae0491bb39c07fe372a19f96f4330e1a99e90e29ba7694465942f78e49b8be375c80b1d2db817a978bc5ab24011a541f1a50f4513a2ebfe814d94f88a3dddf87a64d56b35a045079b06064003a48871843e897300fc6880d9e3c9e7d722eb"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xd41}, {0xdd, 0x4, 0xffff, 0x4, 0x1, 0x0, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1b65}}, @TCA_EMATCH_TREE_LIST={0x1198, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1034, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x24}, {0xe36, 0xe, 0x2, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x3ff}, "77a69b120ae1474f2fcf14d4dbacaee4b445bf03e55d3f8a9aada697991078108d2e779a26b7600ddd8e5dd985fdc73e3108bc511b03226163e5e9dc8e725afd1d86c56b1f9f0e30f134337b9d530b342c4be334e7969dcb553ba206984d9497b983d5cac728d44ab7c9bb3f15a13447efecf4cae1b6f126a41f500c2e59fe7dd139b57345e3063ade464283a2e8778ceb5792e47d18720e96"}}, @TCF_EM_CONTAINER={0xa0, 0x3, 0x0, 0x0, {{0x2, 0x0, 0xadfa}, "27859d22bbee70a4c6a2f4e665ff2637e46de738e9ccd4e974413194d20685874c025917ab1371679c4f592c3e7b1831c5ccab15d5deee15910e8ee003f49011c70cc63abd2ea80911331780dd3a475bda0076f3d845b372df15dcc4acf61872b96407a1dd985329d9aed6f0675df874b6b90ce1666670c1cd6e35c9b76c647e43c65dcc700a32181703c58e7a280853a690a3"}}]}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_CGROUP_POLICE={0x8b4, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x2, 0x7, 0xffffff00, {0xc, 0x1, 0x1, 0x7f, 0xea3, 0x8}, {0x7, 0x2, 0x8, 0x1000, 0x0, 0x2}, 0x5, 0x5, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x90}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0x4, 0x1, 0xac4, {0x8, 0x0, 0x80, 0x7, 0x1000, 0x8}, {0x5, 0x1, 0x2, 0x0, 0x0, 0x7}, 0x7, 0x9898, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0xfff, 0x5, 0xfffffffb, 0x24f, 0x200, 0x4, 0x3, 0x800, 0x7ff, 0x1, 0x2, 0x26, 0x8, 0x0, 0x6, 0xe5de, 0x6, 0x80, 0x7f, 0x1, 0x57, 0x8, 0xfffff464, 0x9, 0x5db, 0x1857, 0x3ac5, 0x2, 0x1, 0x25, 0x7fff, 0xfffffff4, 0x1, 0x1, 0x3ee, 0x4, 0x8000, 0xffffff2d, 0x7, 0x7, 0x9, 0x4, 0x4, 0x4462, 0x2, 0x1, 0xfffffffb, 0x10, 0x92a, 0x10000, 0x0, 0x6, 0x7fffffff, 0x6, 0xce8a, 0xe0d, 0x2, 0x50, 0xfffffff5, 0x1ff, 0x5, 0x3, 0x80000000, 0x9, 0x40000000, 0x3, 0x2, 0x6, 0x7, 0x5, 0x7, 0x6, 0xfff, 0x7, 0xff, 0x5, 0xffffdff8, 0xbb4, 0x2, 0x0, 0x800, 0x9, 0xffffffff, 0x0, 0x8, 0xfffffff8, 0x80000000, 0xff, 0x2, 0x9, 0x8d, 0x0, 0x7ff, 0x101, 0x2bf3, 0x8000, 0x9, 0x1, 0x3, 0xfffff115, 0x4, 0xffffffff, 0x0, 0x0, 0xa, 0x3f85, 0x4, 0x1, 0x7, 0x2, 0x5, 0x6, 0x3, 0x2, 0x10000, 0x200, 0x0, 0x9, 0x7, 0x9, 0x2, 0x200, 0xce, 0x9, 0x9, 0xfffffffa, 0x8000, 0x0, 0x9b85, 0x5, 0x3, 0x2, 0x5, 0x5, 0x7e1, 0x2, 0x19, 0x8, 0x4, 0x10000, 0x13, 0x7, 0x7, 0x5, 0x101, 0x5d06, 0x3, 0x4, 0x7, 0x6, 0x9, 0x1, 0x4, 0xffffffff, 0xba81, 0x3, 0x4510, 0x6, 0xfffffe01, 0x8, 0x7, 0x0, 0xfffffff9, 0x698, 0x8, 0x0, 0x4, 0x6, 0x0, 0x585a, 0x0, 0x9, 0x15a, 0x2, 0x0, 0x2, 0x5, 0x8, 0x1400, 0x0, 0x731, 0x5, 0x577, 0x6, 0x80000001, 0x1, 0x9, 0xa9, 0x0, 0x8, 0x5, 0x0, 0x262, 0x7, 0xfe, 0x9, 0xfffffff7, 0x9, 0xff, 0xa, 0x9569, 0x11, 0x7, 0x8, 0x100, 0xa, 0x47ada65e, 0x9, 0x3, 0x9, 0x8, 0x4, 0x6, 0x5, 0xf, 0x80000001, 0x9, 0xa43, 0xe, 0x4, 0x2, 0x80000000, 0x3, 0xb5, 0x9, 0x10000, 0xd, 0x9, 0x9, 0x6, 0x3, 0x47, 0x10000, 0xff, 0xa4, 0xfffffff7, 0x0, 0x2, 0x858, 0x2, 0x1, 0x7fff, 0x4, 0x9, 0xfa, 0x5244, 0x0, 0x100, 0x6, 0x3ff, 0x7, 0x8, 0x1, 0xfffffffa, 0xfffffffa]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x87, 0x5, 0x80, 0x0, 0x8, 0x7, 0x3, 0x0, 0x7, 0x2, 0x4, 0x100, 0x200, 0x301, 0x3bd7, 0xca, 0x6c8, 0x5, 0xd, 0xd, 0x3b1, 0x2, 0x3ff, 0x1, 0x1, 0x3b, 0x1d3e0c, 0xfffffc00, 0x8, 0x7, 0x7f, 0x5, 0x7, 0x6, 0xfffffffa, 0x6, 0xfff, 0x6, 0x8, 0x9, 0x81, 0x1, 0x81, 0x6, 0x7, 0xb, 0x3, 0xf, 0x9, 0x5, 0xf, 0xa, 0x80, 0x7, 0x7fff, 0x5, 0x3, 0x9, 0x1, 0xa, 0xffff7461, 0xfffffff7, 0x0, 0x3, 0xfddd, 0x7, 0x9, 0xff, 0x101, 0x6, 0x80, 0x81, 0x7, 0xfffffff8, 0x8, 0x3ff, 0x5c0, 0x2, 0xfffffff6, 0x4, 0x5, 0x3, 0x5, 0x80, 0x2ab, 0x8, 0x0, 0x5, 0x3, 0x6, 0x5, 0x1ff, 0x6, 0x2, 0x8, 0x2, 0xf0, 0x1, 0x1ff, 0x4, 0x8, 0x80000001, 0x6, 0x5, 0x0, 0x0, 0x401, 0x5, 0x5, 0x6, 0x1, 0x29e0b8cc, 0x3, 0x7fff, 0x5, 0x9, 0x5, 0x3, 0x0, 0x4, 0xfffffffb, 0x7, 0x800000, 0x7, 0x6, 0x1, 0x8, 0x40, 0x9, 0x2, 0x3, 0x4, 0x2, 0xfffffffd, 0x6, 0x4, 0x1, 0x9, 0x0, 0x8, 0xa, 0x6fd, 0xa65c, 0x7, 0x3, 0x5, 0x2, 0xb6, 0x0, 0xc, 0x9, 0xe, 0x200, 0x1, 0x6, 0x6, 0x4, 0x6, 0x3ff, 0x7fff, 0x7, 0x2, 0xfff, 0xfffffff8, 0x2, 0x6, 0x1, 0x7, 0xe, 0x0, 0x7, 0x2, 0x8, 0x8, 0x1, 0x1ff, 0x9, 0xf49, 0xe, 0x6, 0x8001, 0x4c6b, 0x0, 0x8f8848ed, 0x2da, 0x0, 0x3, 0x1, 0x1, 0x1, 0x5, 0x1b5cedb6, 0x0, 0xbd2b95f0, 0x9, 0x7, 0x9, 0x6, 0x8, 0x10001, 0x2, 0x6, 0x3ff, 0x7, 0x10001, 0x8, 0xca, 0x0, 0x5, 0x40, 0x10000, 0x3, 0xfffffffd, 0xf, 0xe, 0xfffffff8, 0x2, 0x6, 0x101, 0x10000, 0xd242, 0x7, 0x0, 0xf14, 0xc, 0x9, 0x373, 0x27, 0x8, 0x6, 0x2, 0x3, 0xfffffffb, 0x3, 0x266, 0xfffffffc, 0x3, 0x100, 0x3, 0x8000, 0x5, 0x3, 0x6, 0xd1df, 0x5, 0x7, 0x5, 0x1000, 0x5, 0x0, 0x80, 0x9, 0x1000, 0x9, 0xa, 0x3]}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}]}, @TCA_CGROUP_POLICE={0x878, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1000, 0x10000, 0xfff, 0x0, 0x38, 0x6, 0x0, 0x10000, 0x5, 0xd, 0xfffffff1, 0x10000, 0x7, 0x1, 0x2, 0x3, 0x8, 0x5, 0xd, 0x10, 0x69, 0x8, 0x1, 0xfff, 0xffffff77, 0x2, 0x9b, 0xef06, 0x8517, 0x1, 0x3, 0x1c00000, 0x5, 0x3, 0x3, 0x7, 0xfff, 0x3, 0x0, 0x1, 0x29d6, 0x3ff, 0x7, 0x1000, 0xb1, 0x4, 0xd798, 0x0, 0x6, 0xffff73c7, 0x4, 0x1, 0x2, 0xa, 0x40, 0x5, 0x3, 0x3, 0xfffffffb, 0x800, 0x4, 0x0, 0x6, 0x3, 0x3, 0xfffffffa, 0x3, 0x58, 0x200, 0x0, 0x1, 0x1, 0x9, 0x4, 0xf, 0x3, 0x101, 0xd, 0x6, 0x560f, 0x1, 0x7, 0x2, 0x0, 0x2, 0x1000, 0x4, 0xffffff80, 0xfffffffb, 0x6, 0x2, 0x8, 0x2, 0x0, 0x8, 0xc197, 0xffffffff, 0x4, 0xfb, 0x5, 0x624, 0x77f2, 0x6, 0x7, 0x5, 0x8, 0x3ff, 0x9, 0x100, 0xf, 0x200, 0x24fc, 0x5, 0xfff, 0x2, 0x8, 0xafd2, 0x40, 0x1, 0x0, 0xd785, 0x6, 0x7, 0x9, 0x5, 0x0, 0x0, 0x3, 0x8000, 0x18000000, 0x0, 0x81, 0xfffffffc, 0x8, 0x4, 0x10001, 0x2, 0x3, 0x677, 0xf1a, 0x800, 0x61af, 0xfffffff9, 0x5, 0x5, 0x2a8, 0x17, 0x9, 0xac5, 0x2, 0x0, 0x943d, 0x4, 0x9, 0xae6, 0xffffffd3, 0x100, 0x3, 0x9, 0x4c, 0x5, 0x7, 0x84, 0x1ff, 0xa5, 0x7, 0x3, 0x4, 0x2, 0x6, 0x0, 0x100, 0x5, 0x1, 0x3, 0xe, 0x8, 0x2, 0x8001, 0x414, 0x18, 0x1, 0x8001, 0x6, 0x2, 0xf7, 0x7, 0x8, 0x4, 0x2, 0x9, 0xfffffff8, 0x1, 0x0, 0x2, 0x2, 0x380000, 0xff, 0x6, 0x8, 0x6, 0x81, 0x9, 0x0, 0xfff, 0xfff, 0x8, 0x7, 0x1ff, 0x2, 0x4, 0x292, 0x10, 0x7f, 0xb, 0x8, 0x53a, 0x6, 0x90000000, 0x7fff, 0x4c9, 0x7, 0x0, 0xfffffff2, 0x1, 0x5326, 0x3, 0x2, 0x0, 0x5, 0x3, 0x8, 0x1, 0x0, 0x6, 0x101, 0x4, 0x39503112, 0x9, 0x8, 0x8, 0x3ff, 0x7ff, 0x7, 0x7795, 0xf2, 0x7, 0xe9, 0xd2, 0xfffffff7, 0x3, 0x10001, 0x1, 0x9, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x5, 0x3, 0x6, {0x3, 0x2, 0x2, 0x5, 0x9f5, 0x9}, {0x8, 0x2, 0xc92f, 0x10, 0x9, 0x8}, 0x200, 0x4, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}, @TCA_POLICE_RATE={0x404, 0x2, [0x4a2c, 0x4, 0x1, 0x81, 0x4, 0x4, 0x101, 0x0, 0x8, 0x3, 0x40, 0x3, 0xa, 0x3, 0xfffffff8, 0x1, 0x5, 0x3, 0xfc800000, 0x5, 0x3, 0x5, 0x9, 0x8, 0xd000000, 0x3, 0x285, 0x965, 0x2, 0x8, 0x7, 0x9, 0xdb, 0x9, 0x1, 0x0, 0x8, 0x273, 0x343, 0xfffffffa, 0xe, 0x3, 0x8, 0x0, 0xfffffffa, 0xffffffff, 0x200, 0x5, 0x4, 0x3ff, 0xf, 0x80000000, 0x5, 0x400, 0x0, 0x6, 0x8, 0x8, 0x84, 0x3, 0xca, 0x7, 0x75, 0xfff, 0xe28, 0x6, 0xfffffbcf, 0x6, 0x5, 0x6, 0x7a, 0x4, 0x5b0, 0x9, 0xb, 0x0, 0x0, 0x566, 0xdf, 0x1, 0x6, 0x1, 0x7, 0x200, 0xbf, 0x40, 0x5, 0x8, 0x6, 0x10, 0x2, 0x8, 0x1, 0xa7, 0x3, 0x1, 0x9, 0x400, 0x0, 0x4, 0x6, 0x89, 0x5, 0xaa6, 0x7, 0x5, 0xed, 0x7, 0x8, 0x200, 0x0, 0x8, 0x0, 0x3, 0xe, 0x4, 0x400, 0x27, 0x10, 0x9, 0x400, 0x23b, 0x9, 0x5, 0x886, 0x19, 0x9, 0x2dc, 0x8, 0xb82, 0x547, 0x4, 0xcb, 0xa, 0x7, 0x3ff, 0xe, 0x7, 0xd9cd, 0x1, 0x80, 0xffffffff, 0x7ff, 0x5, 0x3f, 0x4, 0x1, 0x8000, 0x1000, 0x4000, 0x8, 0x2, 0x2, 0x3, 0x4, 0x15f4, 0x1, 0x7f, 0xfffffffe, 0x1, 0xe0d, 0x1, 0xce, 0x8, 0xf, 0x10001, 0x1, 0x5, 0x4, 0x1ff, 0x81, 0x3, 0x4, 0x1, 0x6, 0x1, 0x5, 0x9, 0x5, 0xb, 0x80000001, 0xb, 0x9, 0x2, 0xfffffffb, 0x7, 0xfffffffe, 0x8, 0x8001, 0x2, 0x80000000, 0x2, 0x7, 0x80000001, 0x2, 0x6, 0x80000000, 0x4, 0xfffffffc, 0xc977, 0xdd38, 0x3, 0x1, 0x2, 0x0, 0x7, 0x101, 0x61f7, 0x14, 0x1, 0x5, 0x74, 0x1, 0x2, 0x9, 0x6, 0x9, 0x1, 0x80000000, 0x10001, 0x9, 0x8a2, 0xfffffffb, 0x80000001, 0x1, 0x101, 0x5, 0x9, 0x8001, 0x7fffffff, 0x9, 0x400, 0x4, 0x3, 0x73, 0x7, 0x80000000, 0x8, 0x6b1, 0x4, 0x7, 0x5e, 0x6, 0xfffffffa, 0x2, 0x6a, 0x9, 0xc062, 0xe, 0x9, 0x7fff, 0x7, 0x8, 0x2, 0x10, 0x80]}]}, @TCA_CGROUP_ACT={0x5dc, 0x1, [@m_xt={0x2e8, 0x1d, 0x0, 0x0, {{0x7}, {0x1f8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x34e}, @TCA_IPT_TARG={0xca, 0x6, {0xfff9, 'raw\x00', 0x8, 0x0, "7bf04a1d081c483c0bc2a8912b6a41cc01f5371d979f0eb00a4f1918964c2abd07e2ec0335a0b22da1b8821bc5affb6b40f9a8da8daeea2b8f6f151118003765709a509f6600eebf2bf5fb005e45f71c6485f0cbdc5d7fa3a5c2860bf9ffa91a4c1b411422dce2f0805dd2131278ca2d9d2b703c5f7bc26b9347c47a91be4e897b72958178baa16234b3d2370820bf51a7182e6a2bc773f1d80fd6ee36df165a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xa3, 0x6, {0x0, 'nat\x00', 0xbc, 0x6, "250740b65938bd06b7c36c55c63a76fcac3d28d82e2a20cea5f5def661e252ab229c65dfa94f8e5997fc8cb02196c8f8970108445a1a013738b0211db9cd018509fd00f0a65d6941fa635c9506b1fed4d7bf31cfed56f7ab35682665979e2ec6b8ad35babf59cdb95cf07eee3ad25a1f06cbd4bf402ba0e7c9"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xcb, 0x6, "7e36a227d9e697a10d497b8502edb2f75153c9a4a0d3a0eebe1f44fca84dca602a3c8e60e0e845354b2f5e466a2d86b70c7ccea56a95d5076116737cc0eae5980a2e9feb9b34db5b91a5233559a19b885f601021676736a676286111a78316d9df57bbca8c3e1bedd451ed579bcfeb8de2f6d55902e1d36b7381d52fcee8330487a7c382e92d79c85df077d9b4fe5651915e3d3c3b6a662366600f95181ef8f8bf8c28a1c17377a7cb7548bf9f93b6b6b7001028d62a43b5637f21524c7a94d11dd57c7e41f6c0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xd8, 0x11, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb381, 0x2, 0x0, 0x0, 0x101}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xd826, 0xb9, 0x10000000, 0x0, 0xf58b}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x48, 0x6, "a326c960f8c960b48edd9eb6e61a727d5e94fa4badf9753d99d4949f21f4eff36ab146a3d566bb5b95baf14e391a0508a544e0c6c942696e142b714a7d7eaa64abd56506"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x124, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, 'mq\x00'}]}, {0xef, 0x6, "e07dd49a3cca6c4fa3298e7f63c56ebec40508fbead20f69ae9df3469b06194a77d9e90718e3cd3544daebd2f8e42b14e288b64a3875b3c46095701297a2b8bf04663a0b98c7dcf80f93187afa7bb6c2e9870bdf0bd867e8faccf4174604377e0c6c27034415c4cb357268a23aba7ce8eb4700d6364de0f255d2ed680afa5dfe81839b861bf37c2d00b32d506ef6a9c369ce5025ff05bfecf0f02a8a3558c0947722d4011579b8e78c1bb25729c71aa82ea99b0138676bb45496dfad0406a7f6c9954cdfdf3d3a6147df692529538bd67b6118c0a6dfbb0c2eeb3fe61ad54e548b123b1e18cc823f6dc436"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xf4, 0x15, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x3, 0xfb, 0xd, 0x5}, {0x5, 0x8, 0x0, 0x81}, {0x8000, 0x40, 0x8, 0x1}, {0x81, 0x1, 0x9, 0x4}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x6, 0x6, 0x6, 0x8}, {0x10, 0x40, 0xfd, 0x6b}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x80000000, 0x20000000, 0xffff, 0x82b3}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x775a, 0xffffb27d, 0x1, 0x7f, 0x8000}}]}, {0x39, 0x6, "e9755f3bd1d3d95f7d7a038cfe15cf6b57db14b6dd7c357bccdfb59de8c4623e2997c3445ff3ed8deb2b3c3af6a862cc38b612fe5f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xcfc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9f}, @TCA_ROUTE4_POLICE={0x50, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xcff0}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xeb5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_ROUTE4_POLICE={0xc34, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x15}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x400, 0x4, 0x9, 0x10001, 0x9, 0xee, 0x8, 0x5, 0x2, 0x7, 0xffffffff, 0x6, 0xff, 0x45, 0xde6, 0xffffffff, 0x4, 0xe, 0xb, 0x7, 0x3, 0xfffffff7, 0x5, 0x9, 0x1, 0x5bf1, 0x80000000, 0x8, 0x3, 0xffff, 0x7, 0x7, 0xc7e, 0x9, 0x5, 0x8b9, 0x97b4, 0x1, 0x3, 0x8, 0xb1, 0x0, 0x7fffffff, 0x10000, 0x1, 0x7, 0x1, 0x4, 0xeb, 0x79, 0x99, 0x8, 0x8, 0x8, 0x8, 0xfffffff9, 0x0, 0x3, 0x4, 0x7, 0x232c, 0x59ea, 0x80, 0x5, 0xffffff3d, 0xfffffffe, 0x7, 0x7a7, 0xf, 0x5, 0x8, 0x7, 0x2, 0x8a9, 0xf, 0x80000001, 0x1ff, 0x0, 0x7, 0x9, 0x73, 0x6, 0x42a1eb4f, 0x9, 0x0, 0x4, 0xb79, 0x8, 0xfffffffd, 0x5, 0x1, 0x3, 0x200, 0x9, 0x91c, 0xffffffff, 0xffff, 0x2, 0x200, 0x8, 0x1ff, 0x4, 0x6, 0x0, 0x5, 0x1723, 0x4, 0x2, 0x10000, 0x0, 0x6, 0xbcc2, 0x1000, 0x9651, 0x2, 0x8, 0x5e7, 0x101, 0x1, 0x3, 0x3, 0x3, 0x5, 0x80000000, 0x2, 0xe, 0x7, 0x0, 0x0, 0xffffffff, 0xd795d9d, 0x6, 0x8, 0x401, 0x9, 0x5, 0xa0, 0x1, 0x80000001, 0x8000, 0xfffffff7, 0x5, 0x78, 0x7f, 0x80000000, 0x1ff, 0x5, 0x1, 0x100, 0x1ff, 0x26, 0x8, 0x3, 0xd9, 0x8, 0x6, 0xfffff5fc, 0x3, 0x5, 0x3, 0x80, 0x9, 0x8, 0x0, 0x7, 0x400, 0xffffffff, 0x8000, 0x7, 0x80, 0x9, 0xfffffff2, 0x4, 0x1, 0x2, 0xfff, 0x6, 0x3, 0x8, 0x37, 0x18, 0x80000000, 0xa, 0x9, 0x8, 0xd, 0x3, 0x4a, 0x80, 0x1, 0x8, 0x7, 0x8, 0x380, 0xfffffffd, 0x4, 0x5, 0x6, 0xe1f, 0x81, 0x1, 0x2, 0x2, 0x1, 0xefb, 0xd3, 0x64e, 0x2, 0x8, 0x0, 0x5, 0x6e, 0x132, 0x6, 0x7, 0x800, 0x8, 0x0, 0x5f7, 0xe31f, 0x0, 0xfffffffb, 0x4, 0x0, 0x7f5, 0x5c6, 0x2, 0xd, 0x100, 0x2, 0x1, 0x5e3, 0x4, 0x6, 0x3, 0x8, 0x7fffffff, 0x6, 0x40, 0x7, 0x7, 0x0, 0xffff, 0x2, 0x101, 0x7de6, 0x8, 0x6f, 0x75c7, 0x400, 0x0, 0xc49, 0x0, 0x0, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6dce, 0x4, 0x8, 0x1, 0x12, 0x3, 0x8, 0xb44, 0x7, 0xd, 0x1, 0x593, 0x7, 0x6, 0x9c0b, 0x3, 0x0, 0x84cea3f, 0x7fff, 0x1d5, 0x54a0, 0xfffffffa, 0x80000000, 0x4, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc0a6, 0x3, 0x38, 0x3, 0x40c, 0x6, 0x0, 0x869, 0x4, 0x2d65, 0x1ff, 0xfffff000, 0xf, 0x4, 0x9, 0x5, 0x400, 0x3c, 0x200, 0x0, 0x7, 0xfa, 0x50, 0x4, 0x800, 0x1, 0x3, 0x0, 0x1, 0x3, 0x2, 0x5, 0x3ff, 0x10000, 0x2c7b, 0x6879, 0xffffff03, 0xa58, 0xe0, 0x0, 0xff, 0x80000001, 0x2, 0x7, 0x2, 0xfffffffb, 0x5, 0x43f, 0x3bb5, 0xfffffff5, 0xffffff00, 0x94f, 0x4, 0xaf25, 0xb, 0x5830, 0x101, 0x8, 0x5, 0x1, 0x80000000, 0x1, 0x3, 0x0, 0x10001, 0x8, 0x8000, 0x7, 0x800, 0x1, 0x10, 0x2, 0x7fff, 0x7, 0x5, 0x7f, 0x4ea9, 0x3, 0x8, 0x1ff, 0x1, 0x80, 0x400, 0x401, 0x8, 0x10001, 0x78, 0x10000, 0x3, 0x6, 0x401, 0x8001, 0xfffffffa, 0x9, 0xe, 0x4, 0x6, 0x9, 0x5, 0x80000001, 0x6, 0x3a, 0x300, 0x4, 0x6, 0x5, 0x1, 0x2253, 0xbab, 0x3, 0x9, 0x0, 0x2, 0xfffffff1, 0xfffffffd, 0xfff, 0x34, 0x6, 0x2, 0x4, 0x2, 0xc6, 0x1c4, 0x10, 0x87, 0xfff, 0x7, 0x7, 0x200, 0x3, 0x40000000, 0x40a, 0x4, 0x1, 0x7f, 0x2, 0x8, 0xd2, 0x1, 0x2, 0x2, 0x7fffffff, 0x4, 0x1, 0x5, 0x6ee, 0x8, 0x245, 0x2, 0x4, 0x2f8e, 0x2, 0x9, 0x6a6, 0x1f, 0xffff, 0xa7e, 0x7, 0x8, 0x9, 0x21d, 0x5, 0x5, 0x453, 0x6, 0x9, 0x0, 0x8, 0x6, 0x8, 0x2, 0x7, 0x235, 0x36e, 0x5, 0x487, 0x40, 0x81, 0x80000000, 0xaea, 0x9, 0x9, 0x2, 0x0, 0x0, 0x6, 0x4, 0x1, 0x2, 0xfffffffe, 0xe, 0x6, 0xf, 0x9, 0x5, 0x80000000, 0x7, 0x2, 0x0, 0xd, 0x5, 0xc00000, 0xc2f, 0xd, 0xbf5f, 0x99fa, 0x5, 0x1, 0x1, 0x4, 0x2, 0x100, 0x10001, 0x10000, 0x10001, 0x0, 0x57, 0x3, 0x4, 0x7, 0x5ced, 0x8, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbb3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xb, 0x6, 0x2, 0x2, 0x4, 0xd, 0x8000, 0x1, 0x9, 0xd, 0x4, 0x8, 0x3, 0x401, 0x8, 0xb, 0x80000000, 0x4, 0x7, 0x81, 0x8, 0xdc0e, 0x8, 0x5c8, 0x6, 0x7, 0xb, 0x0, 0xd3, 0x4b47, 0x9, 0x29a72c34, 0xce, 0x97d, 0xb, 0xffffffff, 0x9, 0x9, 0xfffffffc, 0x6, 0x70, 0x1, 0x0, 0x92, 0x80, 0x101, 0x8001, 0x3ff, 0x3, 0x2, 0x80000001, 0x5, 0x6, 0xd, 0x0, 0x9, 0x280000, 0x0, 0xfffff411, 0x3, 0xf9, 0xb7c, 0x6, 0x6, 0x3ff, 0x8, 0x5, 0x9, 0x3680, 0x7, 0x7, 0x9, 0x7bc, 0x8, 0x4, 0xfffffff9, 0x0, 0x80, 0xfffffff9, 0x10001, 0xffffffff, 0x4, 0x2ea, 0xf, 0x3, 0x4, 0x9, 0x2d831e0f, 0x3c000000, 0x3ff, 0x9, 0xffffffff, 0xfb, 0x0, 0x9, 0x0, 0x7, 0x0, 0x9c19, 0x7, 0xba17, 0x3, 0x20000000, 0xa14, 0x25e, 0x0, 0x8001, 0x4, 0x4, 0x7fffffff, 0xad6, 0x6, 0xb, 0x1ff, 0x0, 0x101, 0x178, 0xfa4, 0x3ff, 0x4, 0x8, 0x2b, 0x350e, 0x29, 0xe1b, 0x657, 0x8, 0x5, 0x5, 0xa6, 0xff, 0x0, 0xfffff3da, 0xfffffffa, 0x4, 0x4, 0xffffffff, 0x0, 0x7c, 0x9, 0x0, 0xc2b9, 0x0, 0x5, 0x5, 0xe1, 0x0, 0x10001, 0x6f, 0x1, 0x3, 0x40, 0x8, 0x5, 0x100, 0x1, 0xf0ce, 0x2, 0x1, 0x7fff, 0x4, 0x3, 0xfffffff8, 0x5, 0x5, 0x5, 0x10, 0x6, 0xfffffffe, 0x3, 0xfffffff7, 0x101, 0x4, 0xa0ef, 0x80, 0xdf6, 0x100, 0x4, 0x2, 0x81, 0xa, 0xff, 0x200, 0xe80, 0x1e, 0x1b, 0x4, 0x4, 0x5, 0xfff, 0x3, 0x7fffffff, 0xc, 0x7, 0x3ff, 0x1, 0x6, 0xe2, 0xfffffc01, 0x3, 0xffffffff, 0xffffffff, 0x4, 0x8, 0x2, 0x1, 0x909, 0x9, 0x401, 0x6, 0x0, 0x1, 0x2, 0xffffffff, 0xfffffff8, 0x0, 0x3, 0x1a1a, 0x1, 0x8, 0x100, 0x7, 0x0, 0x2, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x0, 0xfffffffd, 0xdd, 0x3dc, 0xf4c, 0x80000001, 0x44c, 0x400, 0x9, 0x401, 0x0, 0xbc55, 0x1, 0x40, 0xfffffffd, 0x4, 0x3, 0x0, 0x7, 0x0, 0x6, 0x2, 0x2, 0x7, 0x3a2, 0x10000]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0x10}}, @TCA_ROUTE4_POLICE={0x64, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x2, 0x6, 0x2, {0x5, 0x2, 0x200, 0x4, 0x72b, 0x6}, {0x4, 0x1, 0x7, 0x6, 0x6, 0x7fff}, 0x8fb, 0x8, 0x37}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x69c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4e, 0x7ff, 0x7ff, 0x1, 0xc, 0x6}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 3.63809781s ago: executing program 4 (id=3102): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 3.534074437s ago: executing program 6 (id=3104): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSDEBUG(r1, 0x40047440, 0x0) write$ppp(r1, &(0x7f0000000480), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) r4 = socket$kcm(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000) setsockopt$sock_attach_bpf(r4, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x6, 0x2, {{0x6, 0xff, 0x4, 0x5, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x2000a804) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f00000000c0)={'veth0_to_bridge\x00', {0x2, 0x0, @remote}}) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) sendmmsg$inet(r8, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="cbac817b3f6b84dc09abe0b79677888187", 0x11}], 0x1}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000011c0)="b2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001340)="ae", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="84", 0x1}], 0x1}}], 0x4, 0x2090) 3.466530969s ago: executing program 4 (id=3105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0xff8c, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x8cffffffffffffff], 0x0, 0x0, 0x1}}, 0x40) 3.251838321s ago: executing program 4 (id=3106): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) (fail_nth: 10) 3.205909788s ago: executing program 4 (id=3107): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x3, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r4, 0x5}, 0x1d, &(0x7f0000000ac0)=[{&(0x7f0000001700)="a9", 0x1}], 0x1}, 0x2004c1d0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x6a040000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"0023f800", 0x0, 0x0, {0x6, 0x1}, {0x805, 0x3}, 0x80, [0x3ff, 0x1000002004, 0xfffffffffdfffc00, 0x800000000000e, 0x9, 0x7, 0x36, 0x1, 0x10000, 0x9, 0x8, 0xfc, 0x8001, 0x9, 0x200000000c, 0x8000008]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x44}, 0x80) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.226933741s ago: executing program 1 (id=3109): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r1], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x2a, 0x2, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[], 0x44}}, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}}, 0xae887979b77ec33a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\}d'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x84, 0xd}}]}, 0x98}}, 0x40801) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.127588557s ago: executing program 5 (id=3110): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @dev, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@local}, {@empty}, {@dev}, {@broadcast}, {@dev}]}, @end]}}}}}}}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 1.071436014s ago: executing program 1 (id=3111): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000180)="2ca3050cf6fe34b30615097b55102102e523056bf38de14db1ee783c9fdd6efe99840cd90526e43c91d52c2217381599d1cd3af16661997ba14a52be04fe9103dad0dc4d0a3ec35e5369d7915a7b45a165a956db6b63ee34ba5ff07233891cad795f01ff693cc06ffe4e4f6adde7ad9a3cc24709e39e86f49c1f8f4de1b8b9e490e1246255", 0x85}, {&(0x7f0000000240)="6cb41fbebd4a29533d52038200508fe5dd9b99", 0x13}, {&(0x7f0000000280)="58e66d2470b8dd4f70986f8b2673c5aa8e01851f12bc2befd20bb8fd4de3113ee5915dca4b1f31d97b5df3dba463335f561e03c9da8fad7cc0f98427b767733f161dda43e4a977f7b95dd762ba2b5d1a3213b2a508ce2f0d224e4f113155615cba7c8b69f5e9ba8d0381b839186b6b773d9e57e5ca3bf59faf8a9d61b2dfdfb3cb94b1a956b299d69e424916c70d67a9d0e1fb9dff324551ba7e9cb90b76182570d62550bd1360bfb4ad8e3d98a19d0c84dcff13", 0xb4}, {&(0x7f0000003840)="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", 0x153}], 0x4, &(0x7f0000002680)=[{0x1010, 0x109, 0x4, "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"}], 0x1010}}], 0x2, 0x200080c0) 982.641914ms ago: executing program 1 (id=3112): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0x1, 0xfffffffd, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x100, 0xffdb, 0x7fff, 0x0, 0x8}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000008000000000782e400018010000786c6c2500000000002020207b1af8ff00000000bfa900000000000007010000f6ffffffb702000008000000b703000007000000850000001000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r6, 0x1, 0x4d, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x0, 0x100, 0xbfbc, r5}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) 924.015237ms ago: executing program 5 (id=3113): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x170], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) 889.987801ms ago: executing program 1 (id=3114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 857.107911ms ago: executing program 3 (id=3115): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 777.911775ms ago: executing program 3 (id=3116): r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000035000701feffffff00000000017c6e9b45956f010200000000800a000008000280040010"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c536e36faed7a8003e1090f000060000000a2bc5603ca00000f7f8999177858000000000000000000000000000003000000000000000000", 0x48}], 0x1) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf25760000000c00580057000000000000000c00580056000000000000000c0058003d000000000200000c005800710000e90000007b9acc9e365eaa57cd000c00580007000000000000000c0058"], 0x5c}, 0x1, 0x0, 0x0, 0x2400c010}, 0x2) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) bind$can_j1939(r5, &(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x7}, 0xfe}, 0x18) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}}, 0xc000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000018000300fc7f0000aca00000020000000000000900edff0006001500de0000000c001680050002007f000000"], 0x30}}, 0x44890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0xfffffffe}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x107, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7b, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x23, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0xfffffff7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6af, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0x1e, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x6, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0xfffffffe, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x9, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x2, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x3, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x200007, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x8, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x9, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xdc}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x0, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xb0b2, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 711.762665ms ago: executing program 5 (id=3117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) 647.629423ms ago: executing program 3 (id=3118): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32, @ANYBLOB="00000000000000001c001a801800048014000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 646.268472ms ago: executing program 5 (id=3119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x8002) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 531.452332ms ago: executing program 3 (id=3120): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x7ffffff}}}}}}}, 0x0) 420.166408ms ago: executing program 3 (id=3121): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r1], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x2a, 0x2, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[], 0x44}}, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}}, 0xae887979b77ec33a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\}d'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x84, 0xd}}]}, 0x98}}, 0x40801) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 419.940049ms ago: executing program 6 (id=3122): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) write$nci(r0, 0x0, 0x0) 399.433308ms ago: executing program 3 (id=3123): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x20004000}], 0x1, 0x40800) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005", @ANYBLOB, @ANYRES32], 0x3c}}, 0x0) 228.70622ms ago: executing program 1 (id=3124): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957791eb75fc4abb0e20b", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x365}], 0x1}}], 0x2, 0x42054) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 135.964954ms ago: executing program 1 (id=3125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000826400", @ANYRES32=r9, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf25025700000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3002ec9e8a42c728ff9200005c500003000000007000f9dbdf250000000000", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) readv(r10, &(0x7f0000000780)=[{&(0x7f0000000100)=""/39}, {&(0x7f0000000380)=""/210}, {&(0x7f0000000540)=""/139}, {&(0x7f0000000600)=""/47}, {&(0x7f0000000280)=""/90}, {&(0x7f0000000740)=""/49}], 0x1000000000000149) preadv(r5, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) close(r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 52.422317ms ago: executing program 6 (id=3126): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 0s ago: executing program 6 (id=3127): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8000}, 0x8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="c7c9b0d708", 0x5}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r2) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r7, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x2, 0x78771ab9) kernel console output (not intermixed with test programs): [ 368.479161][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.512706][T13315] __nla_validate_parse: 7 callbacks suppressed [ 368.512726][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 368.547368][T13315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2309'. [ 368.721858][T13328] syzkaller0: entered promiscuous mode [ 368.735229][T13328] syzkaller0: entered allmulticast mode [ 368.799649][T13330] netlink: 'syz.1.2314': attribute type 1 has an invalid length. [ 368.861711][T13330] bond7: entered promiscuous mode [ 368.887358][T13341] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2315'. [ 368.901837][T13330] 8021q: adding VLAN 0 to HW filter on device bond7 [ 369.525149][T13369] FAULT_INJECTION: forcing a failure. [ 369.525149][T13369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.553936][T13369] CPU: 1 UID: 0 PID: 13369 Comm: syz.6.2324 Not tainted syzkaller #0 PREEMPT(full) [ 369.553966][T13369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.553979][T13369] Call Trace: [ 369.553988][T13369] [ 369.553997][T13369] dump_stack_lvl+0xe8/0x150 [ 369.554032][T13369] should_fail_ex+0x412/0x560 [ 369.554070][T13369] _copy_from_iter+0x1d3/0x1670 [ 369.554099][T13369] ? rcu_is_watching+0x15/0xb0 [ 369.554157][T13369] ? __pfx__copy_from_iter+0x10/0x10 [ 369.554189][T13369] ? netlink_sendmsg+0x650/0xb40 [ 369.554214][T13369] ? skb_put+0x11b/0x210 [ 369.554241][T13369] netlink_sendmsg+0x6c0/0xb40 [ 369.554278][T13369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.554308][T13369] ? aa_sock_msg_perm+0xf1/0x1b0 [ 369.554343][T13369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.554378][T13369] ____sys_sendmsg+0x972/0x9f0 [ 369.554403][T13369] ? __might_fault+0xaf/0x130 [ 369.554441][T13369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.554476][T13369] ? import_iovec+0x73/0xa0 [ 369.554505][T13369] ___sys_sendmsg+0x2a5/0x360 [ 369.554529][T13369] ? __lock_acquire+0x6b5/0x2cf0 [ 369.554558][T13369] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.554622][T13369] ? __fget_files+0x2a/0x420 [ 369.554649][T13369] ? __fget_files+0x3a0/0x420 [ 369.554688][T13369] __x64_sys_sendmsg+0x1bd/0x2a0 [ 369.554717][T13369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.554753][T13369] ? __pfx_ksys_write+0x10/0x10 [ 369.554794][T13369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.554819][T13369] do_syscall_64+0x174/0x580 [ 369.554843][T13369] ? trace_irq_disable+0x3b/0x140 [ 369.554889][T13369] ? clear_bhb_loop+0x40/0x90 [ 369.554915][T13369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.554936][T13369] RIP: 0033:0x7fbb6ed9ce59 [ 369.554956][T13369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.554974][T13369] RSP: 002b:00007fbb6fbeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.554996][T13369] RAX: ffffffffffffffda RBX: 00007fbb6f015fa0 RCX: 00007fbb6ed9ce59 [ 369.555010][T13369] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 369.555024][T13369] RBP: 00007fbb6fbeb090 R08: 0000000000000000 R09: 0000000000000000 [ 369.555037][T13369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.555049][T13369] R13: 00007fbb6f016038 R14: 00007fbb6f015fa0 R15: 00007ffff9ef3888 [ 369.555089][T13369] [ 369.964319][T13376] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 370.157726][T13385] netlink: 'syz.4.2332': attribute type 1 has an invalid length. [ 370.214745][T13385] netlink: 'syz.4.2332': attribute type 2 has an invalid length. [ 370.248116][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2333'. [ 370.641784][T13414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2340'. [ 370.895877][T13407] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2335'. [ 370.978778][T13430] batadv0: entered promiscuous mode [ 371.026385][T13430] batadv0: left promiscuous mode [ 371.131196][T13430] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 371.376842][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2353'. [ 371.397062][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2353'. [ 371.680086][T13448] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2355'. [ 371.962482][T13459] FAULT_INJECTION: forcing a failure. [ 371.962482][T13459] name failslab, interval 1, probability 0, space 0, times 0 [ 371.991710][T13459] CPU: 1 UID: 0 PID: 13459 Comm: syz.3.2360 Not tainted syzkaller #0 PREEMPT(full) [ 371.991740][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.991754][T13459] Call Trace: [ 371.991762][T13459] [ 371.991771][T13459] dump_stack_lvl+0xe8/0x150 [ 371.991803][T13459] should_fail_ex+0x412/0x560 [ 371.991832][T13459] should_failslab+0xa8/0x100 [ 371.991865][T13459] __kmalloc_cache_noprof+0x88/0x660 [ 371.991899][T13459] ? sctp_add_bind_addr+0x8c/0x370 [ 371.992040][T13459] ? __pfx_sctp_get_port_local+0x10/0x10 [ 371.992072][T13459] sctp_add_bind_addr+0x8c/0x370 [ 371.992104][T13459] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 371.992134][T13459] sctp_do_bind+0x5b2/0x9d0 [ 371.992173][T13459] sctp_connect_new_asoc+0x270/0x6b0 [ 371.992203][T13459] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 371.992237][T13459] ? __local_bh_enable_ip+0xd0/0x130 [ 371.992259][T13459] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 371.992291][T13459] ? security_sctp_bind_connect+0x7e/0x2c0 [ 371.992385][T13459] sctp_sendmsg+0x1576/0x2c50 [ 371.992426][T13459] ? __pfx_sctp_sendmsg+0x10/0x10 [ 371.992454][T13459] ? aa_sk_perm+0x6d5/0x900 [ 371.992493][T13459] ? __pfx_aa_sk_perm+0x10/0x10 [ 371.992526][T13459] ? sock_rps_record_flow+0x19/0x350 [ 371.992600][T13459] ? inet_sendmsg+0x2f4/0x370 [ 371.992637][T13459] ____sys_sendmsg+0x80a/0x9f0 [ 371.992672][T13459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.992707][T13459] ? import_iovec+0x73/0xa0 [ 371.992737][T13459] ___sys_sendmsg+0x2a5/0x360 [ 371.992761][T13459] ? __lock_acquire+0x6b5/0x2cf0 [ 371.992788][T13459] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.992819][T13459] ? kstrtouint+0x6e/0xe0 [ 371.992887][T13459] ? __fget_files+0x2a/0x420 [ 371.992912][T13459] ? __fget_files+0x3a0/0x420 [ 371.992949][T13459] __sys_sendmmsg+0x27c/0x4e0 [ 371.992980][T13459] ? __pfx___sys_sendmmsg+0x10/0x10 [ 371.993003][T13459] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 371.993057][T13459] ? ksys_write+0x242/0x270 [ 371.993091][T13459] ? __pfx_ksys_write+0x10/0x10 [ 371.993149][T13459] __x64_sys_sendmmsg+0xa0/0xc0 [ 371.993175][T13459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.993198][T13459] do_syscall_64+0x174/0x580 [ 371.993221][T13459] ? trace_irq_disable+0x3b/0x140 [ 371.993265][T13459] ? clear_bhb_loop+0x40/0x90 [ 371.993292][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.993313][T13459] RIP: 0033:0x7f4fc719ce59 [ 371.993332][T13459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.993351][T13459] RSP: 002b:00007f4fc810d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 371.993374][T13459] RAX: ffffffffffffffda RBX: 00007f4fc7415fa0 RCX: 00007f4fc719ce59 [ 371.993390][T13459] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 371.993403][T13459] RBP: 00007f4fc810d090 R08: 0000000000000000 R09: 0000000000000000 [ 371.993416][T13459] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000001 [ 371.993428][T13459] R13: 00007f4fc7416038 R14: 00007f4fc7415fa0 R15: 00007ffc54a45108 [ 371.993463][T13459] [ 372.342970][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2363'. [ 372.476396][T13471] FAULT_INJECTION: forcing a failure. [ 372.476396][T13471] name failslab, interval 1, probability 0, space 0, times 0 [ 372.559643][T13471] CPU: 0 UID: 0 PID: 13471 Comm: syz.4.2366 Not tainted syzkaller #0 PREEMPT(full) [ 372.559672][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.559685][T13471] Call Trace: [ 372.559693][T13471] [ 372.559701][T13471] dump_stack_lvl+0xe8/0x150 [ 372.559731][T13471] should_fail_ex+0x412/0x560 [ 372.559759][T13471] should_failslab+0xa8/0x100 [ 372.559782][T13471] __kmalloc_noprof+0xe8/0x760 [ 372.559824][T13471] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 372.559865][T13471] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 372.559906][T13471] genl_family_rcv_msg_doit+0xd9/0x330 [ 372.559946][T13471] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 372.560005][T13471] ? apparmor_capable+0x126/0x170 [ 372.560034][T13471] ? bpf_lsm_capable+0x9/0x20 [ 372.560056][T13471] ? security_capable+0x7e/0x2c0 [ 372.560212][T13471] genl_rcv_msg+0x61c/0x7a0 [ 372.560249][T13471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.560280][T13471] ? __pfx_ieee802154_llsec_setparams+0x10/0x10 [ 372.560366][T13471] netlink_rcv_skb+0x232/0x4b0 [ 372.560398][T13471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.560437][T13471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.560480][T13471] ? down_read+0x270/0x2e0 [ 372.560539][T13471] ? genl_rcv+0xd/0x40 [ 372.560572][T13471] genl_rcv+0x28/0x40 [ 372.560602][T13471] netlink_unicast+0x75c/0x8e0 [ 372.560638][T13471] netlink_sendmsg+0x813/0xb40 [ 372.560676][T13471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.560707][T13471] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.560742][T13471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.560777][T13471] ____sys_sendmsg+0x972/0x9f0 [ 372.560811][T13471] ? __might_fault+0xaf/0x130 [ 372.560849][T13471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.560886][T13471] ? import_iovec+0x73/0xa0 [ 372.560918][T13471] ___sys_sendmsg+0x2a5/0x360 [ 372.560942][T13471] ? __lock_acquire+0x6b5/0x2cf0 [ 372.560972][T13471] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.561038][T13471] ? __fget_files+0x2a/0x420 [ 372.561065][T13471] ? __fget_files+0x3a0/0x420 [ 372.561104][T13471] __x64_sys_sendmsg+0x1bd/0x2a0 [ 372.561134][T13471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.561171][T13471] ? __pfx_ksys_write+0x10/0x10 [ 372.561215][T13471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.561240][T13471] do_syscall_64+0x174/0x580 [ 372.561263][T13471] ? trace_irq_disable+0x3b/0x140 [ 372.561297][T13471] ? clear_bhb_loop+0x40/0x90 [ 372.561324][T13471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.561347][T13471] RIP: 0033:0x7f41ec39ce59 [ 372.561367][T13471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.561386][T13471] RSP: 002b:00007f41ed184028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.561410][T13471] RAX: ffffffffffffffda RBX: 00007f41ec616090 RCX: 00007f41ec39ce59 [ 372.561426][T13471] RDX: 0000000020008090 RSI: 0000200000000540 RDI: 0000000000000005 [ 372.561440][T13471] RBP: 00007f41ed184090 R08: 0000000000000000 R09: 0000000000000000 [ 372.561454][T13471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.561467][T13471] R13: 00007f41ec616128 R14: 00007f41ec616090 R15: 00007fffe9a1a5d8 [ 372.561503][T13471] [ 373.151231][T13493] Unknown options in mask 6 [ 373.225560][T13493] sctp: [Deprecated]: syz.3.2373 (pid 13493) Use of int in max_burst socket option. [ 373.225560][T13493] Use struct sctp_assoc_value instead [ 373.581381][T13519] FAULT_INJECTION: forcing a failure. [ 373.581381][T13519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.617470][T13519] CPU: 1 UID: 0 PID: 13519 Comm: syz.1.2379 Not tainted syzkaller #0 PREEMPT(full) [ 373.617499][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.617513][T13519] Call Trace: [ 373.617521][T13519] [ 373.617530][T13519] dump_stack_lvl+0xe8/0x150 [ 373.617561][T13519] should_fail_ex+0x412/0x560 [ 373.617593][T13519] _copy_from_iter+0x1d3/0x1670 [ 373.617622][T13519] ? rcu_is_watching+0x15/0xb0 [ 373.617655][T13519] ? __pfx__copy_from_iter+0x10/0x10 [ 373.617686][T13519] ? netlink_sendmsg+0x650/0xb40 [ 373.617711][T13519] ? skb_put+0x11b/0x210 [ 373.617738][T13519] netlink_sendmsg+0x6c0/0xb40 [ 373.617773][T13519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.617803][T13519] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.617837][T13519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.617870][T13519] ____sys_sendmsg+0x972/0x9f0 [ 373.617895][T13519] ? __might_fault+0xaf/0x130 [ 373.617930][T13519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.617965][T13519] ? import_iovec+0x73/0xa0 [ 373.617994][T13519] ___sys_sendmsg+0x2a5/0x360 [ 373.618018][T13519] ? __lock_acquire+0x6b5/0x2cf0 [ 373.618045][T13519] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.618109][T13519] ? __fget_files+0x2a/0x420 [ 373.618134][T13519] ? __fget_files+0x3a0/0x420 [ 373.618172][T13519] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.618225][T13519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.618312][T13519] ? __pfx_ksys_write+0x10/0x10 [ 373.618355][T13519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.618381][T13519] do_syscall_64+0x174/0x580 [ 373.618406][T13519] ? trace_irq_disable+0x3b/0x140 [ 373.618439][T13519] ? clear_bhb_loop+0x40/0x90 [ 373.618465][T13519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.618487][T13519] RIP: 0033:0x7fb20839ce59 [ 373.618509][T13519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.618528][T13519] RSP: 002b:00007fb209268028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.618551][T13519] RAX: ffffffffffffffda RBX: 00007fb208615fa0 RCX: 00007fb20839ce59 [ 373.618567][T13519] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 373.618580][T13519] RBP: 00007fb209268090 R08: 0000000000000000 R09: 0000000000000000 [ 373.618593][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.618605][T13519] R13: 00007fb208616038 R14: 00007fb208615fa0 R15: 00007fff06ae2b48 [ 373.618637][T13519] [ 374.071045][T13531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.245083][T13537] __nla_validate_parse: 1 callbacks suppressed [ 374.245103][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2387'. [ 374.342866][T13546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2388'. [ 374.534271][T13548] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 374.612153][T13529] FAULT_INJECTION: forcing a failure. [ 374.612153][T13529] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 374.643076][T13529] CPU: 0 UID: 0 PID: 13529 Comm: syz.1.2385 Not tainted syzkaller #0 PREEMPT(full) [ 374.643104][T13529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.643125][T13529] Call Trace: [ 374.643133][T13529] [ 374.643142][T13529] dump_stack_lvl+0xe8/0x150 [ 374.643172][T13529] should_fail_ex+0x412/0x560 [ 374.643201][T13529] prepare_alloc_pages+0x22a/0x650 [ 374.643244][T13529] __alloc_frozen_pages_noprof+0x12f/0x380 [ 374.643270][T13529] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 374.643309][T13529] ? __pfx_policy_nodemask+0x10/0x10 [ 374.643344][T13529] alloc_pages_mpol+0x235/0x490 [ 374.643371][T13529] alloc_pages_noprof+0xac/0x2a0 [ 374.643395][T13529] pte_alloc_one+0x22/0x370 [ 374.643456][T13529] __pte_alloc+0x25/0x1a0 [ 374.643494][T13529] do_pte_missing+0x2cd2/0x33f0 [ 374.643525][T13529] ? count_memcg_event_mm+0x21/0x260 [ 374.643570][T13529] handle_mm_fault+0x1bf2/0x3170 [ 374.643614][T13529] ? handle_mm_fault+0xf1/0x3170 [ 374.643650][T13529] ? __pfx_handle_mm_fault+0x10/0x10 [ 374.643678][T13529] ? follow_page_pte+0xbd1/0xe60 [ 374.643735][T13529] __get_user_pages+0x167f/0x2730 [ 374.643797][T13529] __gup_longterm_locked+0xdcf/0x1630 [ 374.643837][T13529] ? sanity_check_pinned_pages+0x7af/0x870 [ 374.643871][T13529] gup_fast_fallback+0x1d84/0x20d0 [ 374.643900][T13529] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.643952][T13529] ? __pfx_gup_fast_fallback+0x10/0x10 [ 374.643985][T13529] ? pin_user_pages_fast+0x4d/0xb0 [ 374.644013][T13529] iov_iter_extract_pages+0x37b/0x5f0 [ 374.644050][T13529] extract_iter_to_sg+0xefb/0x25d0 [ 374.644088][T13529] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 374.644108][T13529] ? gup_put_folio+0xf9/0x210 [ 374.644142][T13529] ? unpin_user_page+0xb4/0xf0 [ 374.644164][T13529] ? __pfx_unpin_user_page+0x10/0x10 [ 374.644197][T13529] ? __asan_memset+0x22/0x50 [ 374.644227][T13529] hash_sendmsg+0x5c6/0x1110 [ 374.644371][T13529] ____sys_sendmsg+0x972/0x9f0 [ 374.644397][T13529] ? __might_fault+0xaf/0x130 [ 374.644432][T13529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.644467][T13529] ? import_iovec+0x73/0xa0 [ 374.644496][T13529] ___sys_sendmsg+0x2a5/0x360 [ 374.644520][T13529] ? __lock_acquire+0x6b5/0x2cf0 [ 374.644548][T13529] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.644579][T13529] ? kstrtouint+0x6e/0xe0 [ 374.644640][T13529] ? __fget_files+0x2a/0x420 [ 374.644665][T13529] ? __fget_files+0x3a0/0x420 [ 374.644703][T13529] __sys_sendmmsg+0x27c/0x4e0 [ 374.644735][T13529] ? __pfx___sys_sendmmsg+0x10/0x10 [ 374.644758][T13529] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 374.644811][T13529] ? ksys_write+0x242/0x270 [ 374.644845][T13529] ? __pfx_ksys_write+0x10/0x10 [ 374.644883][T13529] __x64_sys_sendmmsg+0xa0/0xc0 [ 374.644908][T13529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.644930][T13529] do_syscall_64+0x174/0x580 [ 374.644952][T13529] ? trace_irq_disable+0x3b/0x140 [ 374.644984][T13529] ? clear_bhb_loop+0x40/0x90 [ 374.645011][T13529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.645031][T13529] RIP: 0033:0x7fb20839ce59 [ 374.645051][T13529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.645069][T13529] RSP: 002b:00007fb209268028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 374.645092][T13529] RAX: ffffffffffffffda RBX: 00007fb208615fa0 RCX: 00007fb20839ce59 [ 374.645106][T13529] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000005 [ 374.645126][T13529] RBP: 00007fb209268090 R08: 0000000000000000 R09: 0000000000000000 [ 374.645139][T13529] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 374.645152][T13529] R13: 00007fb208616038 R14: 00007fb208615fa0 R15: 00007fff06ae2b48 [ 374.645187][T13529] [ 375.115283][T13556] netlink: 'syz.3.2392': attribute type 1 has an invalid length. [ 375.196220][T13556] netlink: 'syz.3.2392': attribute type 2 has an invalid length. [ 375.211822][T13556] netlink: 'syz.3.2392': attribute type 2 has an invalid length. [ 375.235579][T13557] netlink: 'syz.4.2390': attribute type 39 has an invalid length. [ 375.253254][T13560] FAULT_INJECTION: forcing a failure. [ 375.253254][T13560] name failslab, interval 1, probability 0, space 0, times 0 [ 375.340811][T13560] CPU: 0 UID: 0 PID: 13560 Comm: syz.6.2391 Not tainted syzkaller #0 PREEMPT(full) [ 375.340842][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.340856][T13560] Call Trace: [ 375.340865][T13560] [ 375.340874][T13560] dump_stack_lvl+0xe8/0x150 [ 375.340906][T13560] should_fail_ex+0x412/0x560 [ 375.340938][T13560] should_failslab+0xa8/0x100 [ 375.340962][T13560] __kmalloc_noprof+0xe8/0x760 [ 375.340992][T13560] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 375.341045][T13560] ? iter_file_splice_write+0x1da/0x10f0 [ 375.341103][T13560] iter_file_splice_write+0x1da/0x10f0 [ 375.341132][T13560] ? __lock_acquire+0x6b5/0x2cf0 [ 375.341170][T13560] ? atime_needs_update+0x3ac/0x6d0 [ 375.341213][T13560] ? __pfx_iter_file_splice_write+0x10/0x10 [ 375.341241][T13560] ? direct_splice_actor+0x49/0x160 [ 375.341273][T13560] ? direct_splice_actor+0x49/0x160 [ 375.341323][T13560] ? __pfx_iter_file_splice_write+0x10/0x10 [ 375.341355][T13560] direct_splice_actor+0x101/0x160 [ 375.341389][T13560] splice_direct_to_actor+0x53a/0xc70 [ 375.341432][T13560] ? __pfx_direct_splice_actor+0x10/0x10 [ 375.341471][T13560] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 375.341513][T13560] do_splice_direct+0x195/0x290 [ 375.341547][T13560] ? __pfx_do_splice_direct+0x10/0x10 [ 375.341578][T13560] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 375.341617][T13560] ? rw_verify_area+0x255/0x4d0 [ 375.341654][T13560] do_sendfile+0x535/0x7d0 [ 375.341680][T13560] ? __pfx_vfs_write+0x10/0x10 [ 375.341719][T13560] ? __pfx_do_sendfile+0x10/0x10 [ 375.341745][T13560] ? __fget_files+0x3a0/0x420 [ 375.341785][T13560] __se_sys_sendfile64+0x144/0x1a0 [ 375.341813][T13560] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 375.341848][T13560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.341873][T13560] do_syscall_64+0x174/0x580 [ 375.341898][T13560] ? trace_irq_disable+0x3b/0x140 [ 375.341931][T13560] ? clear_bhb_loop+0x40/0x90 [ 375.341959][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.341981][T13560] RIP: 0033:0x7fbb6ed9ce59 [ 375.342002][T13560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.342021][T13560] RSP: 002b:00007fbb6fbeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 375.342045][T13560] RAX: ffffffffffffffda RBX: 00007fbb6f015fa0 RCX: 00007fbb6ed9ce59 [ 375.342061][T13560] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 375.342083][T13560] RBP: 00007fbb6fbeb090 R08: 0000000000000000 R09: 0000000000000000 [ 375.342097][T13560] R10: 00000000f03a0005 R11: 0000000000000246 R12: 0000000000000002 [ 375.342111][T13560] R13: 00007fbb6f016038 R14: 00007fbb6f015fa0 R15: 00007ffff9ef3888 [ 375.342148][T13560] [ 375.673285][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2397'. [ 375.707947][T13571] FAULT_INJECTION: forcing a failure. [ 375.707947][T13571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.733213][T13571] CPU: 0 UID: 0 PID: 13571 Comm: syz.1.2398 Not tainted syzkaller #0 PREEMPT(full) [ 375.733243][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.733256][T13571] Call Trace: [ 375.733264][T13571] [ 375.733273][T13571] dump_stack_lvl+0xe8/0x150 [ 375.733304][T13571] should_fail_ex+0x412/0x560 [ 375.733334][T13571] _copy_to_user+0x31/0xb0 [ 375.733364][T13571] simple_read_from_buffer+0xe1/0x170 [ 375.733399][T13571] proc_fail_nth_read+0x1bb/0x230 [ 375.733473][T13571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.733507][T13571] ? rw_verify_area+0x2a6/0x4d0 [ 375.733536][T13571] ? tun_chr_write_iter+0x18a/0x200 [ 375.733636][T13571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.733667][T13571] vfs_read+0x20c/0xa70 [ 375.733706][T13571] ? __pfx___mutex_lock+0x10/0x10 [ 375.733733][T13571] ? __pfx_vfs_read+0x10/0x10 [ 375.733767][T13571] ? __fget_files+0x2a/0x420 [ 375.733800][T13571] ? __fget_files+0x3a0/0x420 [ 375.733827][T13571] ? __fget_files+0x2a/0x420 [ 375.733865][T13571] ksys_read+0x150/0x270 [ 375.733899][T13571] ? __pfx_ksys_read+0x10/0x10 [ 375.733941][T13571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.733965][T13571] do_syscall_64+0x174/0x580 [ 375.733989][T13571] ? trace_irq_disable+0x3b/0x140 [ 375.734021][T13571] ? clear_bhb_loop+0x40/0x90 [ 375.734049][T13571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.734076][T13571] RIP: 0033:0x7fb20835d68e [ 375.734095][T13571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 375.734112][T13571] RSP: 002b:00007fb209267fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.734133][T13571] RAX: ffffffffffffffda RBX: 00007fb2092686c0 RCX: 00007fb20835d68e [ 375.734148][T13571] RDX: 000000000000000f RSI: 00007fb2092680a0 RDI: 0000000000000004 [ 375.734160][T13571] RBP: 00007fb209268090 R08: 0000000000000000 R09: 0000000000000000 [ 375.734173][T13571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.734184][T13571] R13: 00007fb208616038 R14: 00007fb208615fa0 R15: 00007fff06ae2b48 [ 375.734217][T13571] [ 375.967626][T13568] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 376.076972][T13576] ipt_ECN: cannot use operation on non-tcp rule [ 376.093113][T13575] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2399'. [ 376.121890][T13577] tun0: tun_chr_ioctl cmd 1074025680 [ 376.213699][T13584] ipt_ECN: cannot use operation on non-tcp rule [ 376.324853][T13588] xt_l2tp: unknown flags: 51 [ 376.413556][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2404'. [ 376.470964][T13590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.479161][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.505665][T13590] bond1: (slave batadv1): Opening slave failed [ 376.553927][T13594] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2406'. [ 376.697271][T13607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2410'. [ 376.830957][T13604] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 377.490068][T13643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2421'. [ 378.008863][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2426'. [ 378.062023][T13659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2427'. [ 378.192346][T13661] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 378.410937][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.455775][T13680] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 378.561568][T13686] netlink: 'syz.5.2436': attribute type 1 has an invalid length. [ 379.461859][T13723] can: request_module (can-proto-3) failed. [ 379.539818][T13728] netlink: 'syz.3.2451': attribute type 1 has an invalid length. [ 379.559957][T13728] __nla_validate_parse: 5 callbacks suppressed [ 379.559975][T13728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2451'. [ 379.644343][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 380.271094][T13756] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2463'. [ 380.321839][ T1660] block nbd0: Possible stuck request ffff888027235080: control (read@0,1024B). Runtime 30 seconds [ 380.407490][T13756] tipc: Failed to remove unknown binding: 66,0,0/0:2002187800/2002187802 [ 380.457302][T13756] tipc: Failed to remove unknown binding: 66,0,0/0:2002187800/2002187802 [ 381.063765][T13785] netlink: 'syz.1.2472': attribute type 3 has an invalid length. [ 381.083236][T13785] netlink: 'syz.1.2472': attribute type 1 has an invalid length. [ 381.104373][T13785] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2472'. [ 381.129403][T13785] NCSI netlink: No device for ifindex 4294967295 [ 381.217068][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2474'. [ 381.239778][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2474'. [ 381.388808][T13797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2476'. [ 381.410098][T13797] FAULT_INJECTION: forcing a failure. [ 381.410098][T13797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.445916][T13797] CPU: 0 UID: 0 PID: 13797 Comm: syz.1.2476 Not tainted syzkaller #0 PREEMPT(full) [ 381.445947][T13797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.445960][T13797] Call Trace: [ 381.445969][T13797] [ 381.445978][T13797] dump_stack_lvl+0xe8/0x150 [ 381.446013][T13797] should_fail_ex+0x412/0x560 [ 381.446044][T13797] _copy_to_user+0x31/0xb0 [ 381.446082][T13797] simple_read_from_buffer+0xe1/0x170 [ 381.446116][T13797] proc_fail_nth_read+0x1bb/0x230 [ 381.446149][T13797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.446182][T13797] ? rw_verify_area+0x2a6/0x4d0 [ 381.446212][T13797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.446243][T13797] vfs_read+0x20c/0xa70 [ 381.446280][T13797] ? __pfx___mutex_lock+0x10/0x10 [ 381.446307][T13797] ? __pfx_vfs_read+0x10/0x10 [ 381.446339][T13797] ? __fget_files+0x2a/0x420 [ 381.446371][T13797] ? __fget_files+0x3a0/0x420 [ 381.446396][T13797] ? __fget_files+0x2a/0x420 [ 381.446432][T13797] ksys_read+0x150/0x270 [ 381.446466][T13797] ? __pfx_ksys_read+0x10/0x10 [ 381.446506][T13797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.446530][T13797] do_syscall_64+0x174/0x580 [ 381.446560][T13797] ? clear_bhb_loop+0x40/0x90 [ 381.446587][T13797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.446609][T13797] RIP: 0033:0x7fb20835d68e [ 381.446629][T13797] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 381.446648][T13797] RSP: 002b:00007fb209267fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.446671][T13797] RAX: ffffffffffffffda RBX: 00007fb2092686c0 RCX: 00007fb20835d68e [ 381.446687][T13797] RDX: 000000000000000f RSI: 00007fb2092680a0 RDI: 0000000000000004 [ 381.446700][T13797] RBP: 00007fb209268090 R08: 0000000000000000 R09: 0000000000000000 [ 381.446713][T13797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.446726][T13797] R13: 00007fb208616038 R14: 00007fb208615fa0 R15: 00007fff06ae2b48 [ 381.446760][T13797] [ 381.872787][T13806] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2477'. [ 382.018921][T13814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2483'. [ 382.228888][T13833] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 383.135785][T13875] ip6gre2: entered promiscuous mode [ 383.141510][T13875] ip6gre2: entered allmulticast mode [ 383.148747][T11767] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.156504][T11767] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.206848][T11602] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.394212][T13887] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2502'. [ 383.426755][T11602] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.617579][T13894] netlink: zone id is out of range [ 383.622728][T13894] netlink: set zone limit has 4 unknown bytes [ 384.077367][T13901] FAULT_INJECTION: forcing a failure. [ 384.077367][T13901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.090461][T13901] CPU: 0 UID: 0 PID: 13901 Comm: syz.5.2512 Not tainted syzkaller #0 PREEMPT(full) [ 384.090498][T13901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.090511][T13901] Call Trace: [ 384.090520][T13901] [ 384.090529][T13901] dump_stack_lvl+0xe8/0x150 [ 384.090560][T13901] should_fail_ex+0x412/0x560 [ 384.090590][T13901] _copy_from_iter+0x1d3/0x1670 [ 384.090619][T13901] ? rcu_is_watching+0x15/0xb0 [ 384.090652][T13901] ? __pfx__copy_from_iter+0x10/0x10 [ 384.090683][T13901] ? netlink_sendmsg+0x650/0xb40 [ 384.090704][T13901] ? skb_put+0x11b/0x210 [ 384.090726][T13901] netlink_sendmsg+0x6c0/0xb40 [ 384.090755][T13901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.090779][T13901] ? aa_sock_msg_perm+0xf1/0x1b0 [ 384.090808][T13901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.090836][T13901] ____sys_sendmsg+0x972/0x9f0 [ 384.090857][T13901] ? __might_fault+0xaf/0x130 [ 384.090886][T13901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.090921][T13901] ? import_iovec+0x73/0xa0 [ 384.090945][T13901] ___sys_sendmsg+0x2a5/0x360 [ 384.090965][T13901] ? __lock_acquire+0x6b5/0x2cf0 [ 384.090988][T13901] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.091038][T13901] ? __fget_files+0x2a/0x420 [ 384.091059][T13901] ? __fget_files+0x3a0/0x420 [ 384.091090][T13901] __x64_sys_sendmsg+0x1bd/0x2a0 [ 384.091113][T13901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.091142][T13901] ? __pfx_ksys_write+0x10/0x10 [ 384.091176][T13901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.091195][T13901] do_syscall_64+0x174/0x580 [ 384.091215][T13901] ? trace_irq_disable+0x3b/0x140 [ 384.091242][T13901] ? clear_bhb_loop+0x40/0x90 [ 384.091264][T13901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.091281][T13901] RIP: 0033:0x7fe5a3d9ce59 [ 384.091298][T13901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.091314][T13901] RSP: 002b:00007fe5a4b84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.091333][T13901] RAX: ffffffffffffffda RBX: 00007fe5a4016090 RCX: 00007fe5a3d9ce59 [ 384.091346][T13901] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 384.091358][T13901] RBP: 00007fe5a4b84090 R08: 0000000000000000 R09: 0000000000000000 [ 384.091369][T13901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.091379][T13901] R13: 00007fe5a4016128 R14: 00007fe5a4016090 R15: 00007ffee76a14d8 [ 384.091418][T13901] [ 384.364294][ T5749] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 385.538925][T13847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.781658][T13911] syzkaller0: entered promiscuous mode [ 385.787198][T13911] syzkaller0: entered allmulticast mode [ 386.480387][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2527'. [ 386.489889][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2527'. [ 386.600517][T13933] netlink: 'syz.1.2526': attribute type 1 has an invalid length. [ 387.222787][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 387.265456][T13979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2536'. [ 387.382953][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2543'. [ 388.134426][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2556'. [ 388.170327][T14016] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 388.317953][T14023] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 388.346653][ T5750] IPVS: starting estimator thread 0... [ 388.509370][T14024] IPVS: using max 24 ests per chain, 57600 per kthread [ 388.727901][T14041] FAULT_INJECTION: forcing a failure. [ 388.727901][T14041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.772770][T14041] CPU: 1 UID: 0 PID: 14041 Comm: syz.6.2563 Not tainted syzkaller #0 PREEMPT(full) [ 388.772800][T14041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.772813][T14041] Call Trace: [ 388.772821][T14041] [ 388.772830][T14041] dump_stack_lvl+0xe8/0x150 [ 388.772861][T14041] should_fail_ex+0x412/0x560 [ 388.772889][T14041] _copy_from_user+0x2d/0xb0 [ 388.772917][T14041] bpf_prog_test_run_xdp+0xde3/0x1160 [ 388.773040][T14041] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 388.773071][T14041] ? __fget_files+0x2a/0x420 [ 388.773103][T14041] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 388.773131][T14041] bpf_prog_test_run+0x2c7/0x340 [ 388.773167][T14041] __sys_bpf+0x643/0x950 [ 388.773201][T14041] ? __pfx___sys_bpf+0x10/0x10 [ 388.773250][T14041] ? ksys_write+0x242/0x270 [ 388.773283][T14041] ? __pfx_ksys_write+0x10/0x10 [ 388.773320][T14041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.773343][T14041] __x64_sys_bpf+0x7c/0x90 [ 388.773373][T14041] do_syscall_64+0x174/0x580 [ 388.773396][T14041] ? trace_irq_disable+0x3b/0x140 [ 388.773428][T14041] ? clear_bhb_loop+0x40/0x90 [ 388.773455][T14041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.773475][T14041] RIP: 0033:0x7fbb6ed9ce59 [ 388.773495][T14041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.773512][T14041] RSP: 002b:00007fbb6fbeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.773534][T14041] RAX: ffffffffffffffda RBX: 00007fbb6f015fa0 RCX: 00007fbb6ed9ce59 [ 388.773549][T14041] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 388.773562][T14041] RBP: 00007fbb6fbeb090 R08: 0000000000000000 R09: 0000000000000000 [ 388.773575][T14041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.773587][T14041] R13: 00007fbb6f016038 R14: 00007fbb6f015fa0 R15: 00007ffff9ef3888 [ 388.773621][T14041] [ 389.143503][T14044] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 389.230881][T14044] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 389.270122][T14044] macvtap1: left promiscuous mode [ 389.276870][T14044] macvtap1: left allmulticast mode [ 389.306181][T14044] veth1_vlan: left allmulticast mode [ 389.356353][T14044] macvtap2: left promiscuous mode [ 389.372603][T14044] macvtap2: left allmulticast mode [ 389.462580][T14054] syzkaller0: entered promiscuous mode [ 389.470337][T14054] syzkaller0: entered allmulticast mode [ 389.587034][T14062] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 389.598754][T14062] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 389.822810][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'. [ 389.850360][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2571'. [ 389.890184][T14071] netlink: 'syz.1.2571': attribute type 13 has an invalid length. [ 390.088846][T14083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2575'. [ 390.107598][T14083] netlink: 'syz.3.2575': attribute type 2 has an invalid length. [ 390.117378][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2575'. [ 390.138498][ T5635] Bluetooth: hci6: link tx timeout [ 390.144096][ T5635] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 390.361249][ T5637] Bluetooth: hci6: link tx timeout [ 390.367828][ T5637] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 390.523885][T14094] tipc: Enabled bearer , priority 0 [ 390.643737][T14106] netlink: 'syz.1.2584': attribute type 3 has an invalid length. [ 390.708491][T14104] syzkaller0: entered promiscuous mode [ 390.734288][T14104] syzkaller0: entered allmulticast mode [ 390.747637][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 391.131715][ T5644] Bluetooth: hci6: link tx timeout [ 391.140863][ T5644] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 391.193174][T14129] vlan2: entered allmulticast mode [ 391.198346][T14129] bond0: entered allmulticast mode [ 391.204482][T14129] FAULT_INJECTION: forcing a failure. [ 391.204482][T14129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.217554][T14129] CPU: 0 UID: 0 PID: 14129 Comm: syz.4.2592 Not tainted syzkaller #0 PREEMPT(full) [ 391.217579][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.217592][T14129] Call Trace: [ 391.217600][T14129] [ 391.217609][T14129] dump_stack_lvl+0xe8/0x150 [ 391.217639][T14129] should_fail_ex+0x412/0x560 [ 391.217666][T14129] _copy_from_iter+0x1d3/0x1670 [ 391.217692][T14129] ? rcu_is_watching+0x15/0xb0 [ 391.217722][T14129] ? __pfx__copy_from_iter+0x10/0x10 [ 391.217751][T14129] ? netlink_sendmsg+0x650/0xb40 [ 391.217774][T14129] ? skb_put+0x11b/0x210 [ 391.217817][T14129] netlink_sendmsg+0x6c0/0xb40 [ 391.217852][T14129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.217883][T14129] ? aa_sock_msg_perm+0xf1/0x1b0 [ 391.217931][T14129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.217982][T14129] ____sys_sendmsg+0x972/0x9f0 [ 391.218006][T14129] ? __might_fault+0xaf/0x130 [ 391.218041][T14129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.218070][T14129] ? import_iovec+0x73/0xa0 [ 391.218094][T14129] ___sys_sendmsg+0x2a5/0x360 [ 391.218114][T14129] ? __lock_acquire+0x6b5/0x2cf0 [ 391.218141][T14129] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.218191][T14129] ? __fget_files+0x2a/0x420 [ 391.218213][T14129] ? __fget_files+0x3a0/0x420 [ 391.218243][T14129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 391.218266][T14129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.218295][T14129] ? __pfx_ksys_write+0x10/0x10 [ 391.218329][T14129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.218348][T14129] do_syscall_64+0x174/0x580 [ 391.218368][T14129] ? trace_irq_disable+0x3b/0x140 [ 391.218466][T14129] ? clear_bhb_loop+0x40/0x90 [ 391.218505][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.218525][T14129] RIP: 0033:0x7f41ec39ce59 [ 391.218543][T14129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.218559][T14129] RSP: 002b:00007f41ed1a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.218578][T14129] RAX: ffffffffffffffda RBX: 00007f41ec615fa0 RCX: 00007f41ec39ce59 [ 391.218597][T14129] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 391.218609][T14129] RBP: 00007f41ed1a5090 R08: 0000000000000000 R09: 0000000000000000 [ 391.218620][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.218630][T14129] R13: 00007f41ec616038 R14: 00007f41ec615fa0 R15: 00007fffe9a1a5d8 [ 391.218658][T14129] [ 391.791758][T14138] __nla_validate_parse: 3 callbacks suppressed [ 391.791778][T14138] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2594'. [ 391.890745][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.169350][ T5644] Bluetooth: hci6: command 0x0406 tx timeout [ 393.960815][T14115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.351136][T14177] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2606'. [ 394.370198][T14178] syzkaller0: entered promiscuous mode [ 394.389161][T14178] syzkaller0: entered allmulticast mode [ 394.618630][T14183] xt_hashlimit: size too large, truncated to 1048576 [ 394.680579][T14183] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 395.084719][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 395.179885][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2618'. [ 395.261487][T14217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2620'. [ 395.484368][T14225] syzkaller0: entered promiscuous mode [ 395.499072][T14225] syzkaller0: entered allmulticast mode [ 395.685839][T14230] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 395.987912][T14246] netlink: 'syz.5.2630': attribute type 46 has an invalid length. [ 396.007921][T14239] block nbd0: NBD_DISCONNECT [ 396.015552][T14239] block nbd0: Send disconnect failed -32 [ 396.056919][T14239] block nbd0: shutting down sockets [ 396.178078][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2633'. [ 396.202549][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.211843][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 396.221460][T14251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2632'. [ 396.236036][ T9926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.245506][ T9926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 396.253605][ T9926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.262682][ T9926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 396.270732][ T9926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.279807][ T9926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 396.287811][ T9926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.296876][ T9926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 396.341712][ T9926] ldm_validate_partition_table(): Disk read failed. [ 396.368687][ T9926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.377807][ T9926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 396.386787][ T9926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.395875][ T9926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 396.403829][ T9926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.412896][ T9926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 396.446630][T14254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2634'. [ 396.490007][ T9926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.499115][ T9926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 396.508722][ T9926] Dev nbd0: unable to read RDB block 0 [ 396.514318][ T9926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.523385][ T9926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 396.621354][ T9926] nbd0: unable to read partition table [ 396.627224][ T9926] nbd0: partition table beyond EOD, truncated [ 396.689194][ T9926] ldm_validate_partition_table(): Disk read failed. [ 396.696401][ T9926] Dev nbd0: unable to read RDB block 0 [ 396.702298][ T9926] nbd0: unable to read partition table [ 396.708101][ T9926] nbd0: partition table beyond EOD, truncated [ 396.721217][T14265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2639'. [ 396.943565][T14269] syzkaller0: entered promiscuous mode [ 396.959036][T14269] syzkaller0: entered allmulticast mode [ 397.297089][T14288] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.333240][T14294] bond2: option tlb_dynamic_lb: invalid value (115) [ 397.359050][T14294] bond2 (unregistering): Released all slaves [ 397.427844][T14299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2648'. [ 397.616090][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2651'. [ 397.638078][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2650'. [ 397.866029][T14314] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 398.410308][T14341] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2663'. [ 398.526460][T14340] bond2: option tlb_dynamic_lb: invalid value (115) [ 398.579951][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2666'. [ 398.618382][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 398.628151][T14340] bond2 (unregistering): Released all slaves [ 398.686437][T14330] tipc: Failed to remove unknown binding: 66,0,0/1528264797:1535117108/1535117110 [ 398.706151][T14330] tipc: Failed to remove unknown binding: 66,0,0/1528264797:1535117108/1535117110 [ 399.704747][T14393] tipc: Failed to remove unknown binding: 66,1,1/0:4060152190/4060152191 [ 399.725920][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2678'. [ 400.514427][T14429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2689'. [ 400.600880][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'. [ 400.618500][T14437] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 400.627947][T14437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.741126][T14440] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 400.749011][T14440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.265548][T14460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2697'. [ 401.620943][T14484] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 401.630992][T14484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.933435][T14497] FAULT_INJECTION: forcing a failure. [ 401.933435][T14497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.962447][T14497] CPU: 0 UID: 0 PID: 14497 Comm: syz.3.2709 Not tainted syzkaller #0 PREEMPT(full) [ 401.962477][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.962491][T14497] Call Trace: [ 401.962500][T14497] [ 401.962509][T14497] dump_stack_lvl+0xe8/0x150 [ 401.962541][T14497] should_fail_ex+0x412/0x560 [ 401.962570][T14497] _copy_to_user+0x31/0xb0 [ 401.962600][T14497] bpf_test_finish+0x1db/0x6b0 [ 401.962638][T14497] ? __pfx_bpf_test_finish+0x10/0x10 [ 401.962674][T14497] ? rep_movs_alternative+0x4a/0x90 [ 401.962783][T14497] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 401.962829][T14497] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 401.962863][T14497] ? __fget_files+0x2a/0x420 [ 401.962896][T14497] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 401.962931][T14497] bpf_prog_test_run+0x2c7/0x340 [ 401.962959][T14497] __sys_bpf+0x643/0x950 [ 401.962995][T14497] ? __pfx___sys_bpf+0x10/0x10 [ 401.963046][T14497] ? ksys_write+0x242/0x270 [ 401.963082][T14497] ? __pfx_ksys_write+0x10/0x10 [ 401.963120][T14497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.963157][T14497] __x64_sys_bpf+0x7c/0x90 [ 401.963188][T14497] do_syscall_64+0x174/0x580 [ 401.963210][T14497] ? trace_irq_disable+0x3b/0x140 [ 401.963242][T14497] ? clear_bhb_loop+0x40/0x90 [ 401.963268][T14497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.963289][T14497] RIP: 0033:0x7f4fc719ce59 [ 401.963309][T14497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.963326][T14497] RSP: 002b:00007f4fc810d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.963348][T14497] RAX: ffffffffffffffda RBX: 00007f4fc7415fa0 RCX: 00007f4fc719ce59 [ 401.963363][T14497] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 401.963376][T14497] RBP: 00007f4fc810d090 R08: 0000000000000000 R09: 0000000000000000 [ 401.963389][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.963401][T14497] R13: 00007f4fc7416038 R14: 00007f4fc7415fa0 R15: 00007ffc54a45108 [ 401.963435][T14497] [ 402.302174][T14505] FAULT_INJECTION: forcing a failure. [ 402.302174][T14505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.315474][T14505] CPU: 0 UID: 0 PID: 14505 Comm: syz.6.2712 Not tainted syzkaller #0 PREEMPT(full) [ 402.315503][T14505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 402.315516][T14505] Call Trace: [ 402.315525][T14505] [ 402.315534][T14505] dump_stack_lvl+0xe8/0x150 [ 402.315564][T14505] should_fail_ex+0x412/0x560 [ 402.315594][T14505] _copy_from_user+0x2d/0xb0 [ 402.315622][T14505] ___sys_sendmsg+0x1c6/0x360 [ 402.315648][T14505] ? __lock_acquire+0x6b5/0x2cf0 [ 402.315677][T14505] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.315741][T14505] ? __fget_files+0x2a/0x420 [ 402.315768][T14505] ? __fget_files+0x3a0/0x420 [ 402.315806][T14505] __x64_sys_sendmsg+0x1bd/0x2a0 [ 402.315861][T14505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.315898][T14505] ? __pfx_ksys_write+0x10/0x10 [ 402.315940][T14505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.315964][T14505] do_syscall_64+0x174/0x580 [ 402.315989][T14505] ? trace_irq_disable+0x3b/0x140 [ 402.316021][T14505] ? clear_bhb_loop+0x40/0x90 [ 402.316049][T14505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.316070][T14505] RIP: 0033:0x7fbb6ed9ce59 [ 402.316090][T14505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.316110][T14505] RSP: 002b:00007fbb6fbeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.316134][T14505] RAX: ffffffffffffffda RBX: 00007fbb6f015fa0 RCX: 00007fbb6ed9ce59 [ 402.316150][T14505] RDX: 0000000000004044 RSI: 00002000000006c0 RDI: 0000000000000003 [ 402.316164][T14505] RBP: 00007fbb6fbeb090 R08: 0000000000000000 R09: 0000000000000000 [ 402.316177][T14505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.316190][T14505] R13: 00007fbb6f016038 R14: 00007fbb6f015fa0 R15: 00007ffff9ef3888 [ 402.316226][T14505] [ 402.772483][T14516] __nla_validate_parse: 4 callbacks suppressed [ 402.772504][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2715'. [ 402.934436][T14519] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2717'. [ 403.172324][T14530] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 403.246192][T14530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.573752][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 403.663562][T14543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2726'. [ 403.673165][T14543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2726'. [ 403.682226][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2726'. [ 403.691224][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2726'. [ 403.722544][T14537] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 403.863365][T14550] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2730'. [ 403.962510][T14557] FAULT_INJECTION: forcing a failure. [ 403.962510][T14557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.988462][T14557] CPU: 1 UID: 0 PID: 14557 Comm: syz.4.2731 Not tainted syzkaller #0 PREEMPT(full) [ 403.988493][T14557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.988506][T14557] Call Trace: [ 403.988515][T14557] [ 403.988524][T14557] dump_stack_lvl+0xe8/0x150 [ 403.988555][T14557] should_fail_ex+0x412/0x560 [ 403.988584][T14557] _copy_from_user+0x2d/0xb0 [ 403.988619][T14557] ___sys_sendmsg+0x1c6/0x360 [ 403.988646][T14557] ? __lock_acquire+0x6b5/0x2cf0 [ 403.988674][T14557] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.988706][T14557] ? kstrtouint+0x6e/0xe0 [ 403.988768][T14557] ? __fget_files+0x2a/0x420 [ 403.988794][T14557] ? __fget_files+0x3a0/0x420 [ 403.988835][T14557] __sys_sendmmsg+0x27c/0x4e0 [ 403.988874][T14557] ? __pfx___sys_sendmmsg+0x10/0x10 [ 403.988898][T14557] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 403.988954][T14557] ? ksys_write+0x242/0x270 [ 403.988988][T14557] ? __pfx_ksys_write+0x10/0x10 [ 403.989028][T14557] __x64_sys_sendmmsg+0xa0/0xc0 [ 403.989054][T14557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.989077][T14557] do_syscall_64+0x174/0x580 [ 403.989099][T14557] ? trace_irq_disable+0x3b/0x140 [ 403.989132][T14557] ? clear_bhb_loop+0x40/0x90 [ 403.989159][T14557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.989181][T14557] RIP: 0033:0x7f41ec39ce59 [ 403.989201][T14557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.989219][T14557] RSP: 002b:00007f41ed1a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 403.989241][T14557] RAX: ffffffffffffffda RBX: 00007f41ec615fa0 RCX: 00007f41ec39ce59 [ 403.989257][T14557] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003 [ 403.989271][T14557] RBP: 00007f41ed1a5090 R08: 0000000000000000 R09: 0000000000000000 [ 403.989285][T14557] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 403.989297][T14557] R13: 00007f41ec616038 R14: 00007f41ec615fa0 R15: 00007fffe9a1a5d8 [ 403.989333][T14557] [ 404.242199][T14559] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2733'. [ 404.567374][T14576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.616837][T14579] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2737'. [ 404.699782][T14579] bond0 (unregistering): Released all slaves [ 404.707710][T14582] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20002 [ 404.882165][T14587] FAULT_INJECTION: forcing a failure. [ 404.882165][T14587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.906655][T14587] CPU: 1 UID: 0 PID: 14587 Comm: syz.6.2740 Not tainted syzkaller #0 PREEMPT(full) [ 404.906686][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 404.906700][T14587] Call Trace: [ 404.906708][T14587] [ 404.906717][T14587] dump_stack_lvl+0xe8/0x150 [ 404.906747][T14587] should_fail_ex+0x412/0x560 [ 404.906776][T14587] _copy_from_iter+0x1d3/0x1670 [ 404.906799][T14587] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 404.906839][T14587] ? __pfx_policy_nodemask+0x10/0x10 [ 404.906864][T14587] ? __pfx__copy_from_iter+0x10/0x10 [ 404.906891][T14587] ? alloc_pages_mpol+0x3c0/0x490 [ 404.906922][T14587] copy_page_from_iter+0x220/0x2d0 [ 404.906950][T14587] tun_get_user+0x1bf7/0x43e0 [ 404.906975][T14587] ? tun_get_user+0x8aa/0x43e0 [ 404.907015][T14587] ? aa_file_perm+0x50e/0x15e0 [ 404.907036][T14587] ? __pfx_tun_get_user+0x10/0x10 [ 404.907061][T14587] ? __lock_acquire+0x6b5/0x2cf0 [ 404.907099][T14587] ? ref_tracker_alloc+0x35c/0x4c0 [ 404.907198][T14587] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 404.907224][T14587] ? tun_get+0x1c/0x2f0 [ 404.907246][T14587] ? tun_get+0x1c/0x2f0 [ 404.907273][T14587] ? tun_get+0x1c/0x2f0 [ 404.907294][T14587] ? tun_get+0x1c/0x2f0 [ 404.907320][T14587] tun_chr_write_iter+0x113/0x200 [ 404.907345][T14587] vfs_write+0x61d/0xb90 [ 404.907385][T14587] ? __pfx_vfs_write+0x10/0x10 [ 404.907427][T14587] ? __fget_files+0x2a/0x420 [ 404.907462][T14587] ksys_write+0x150/0x270 [ 404.907497][T14587] ? __pfx_ksys_write+0x10/0x10 [ 404.907536][T14587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.907560][T14587] do_syscall_64+0x174/0x580 [ 404.907583][T14587] ? trace_irq_disable+0x3b/0x140 [ 404.907615][T14587] ? clear_bhb_loop+0x40/0x90 [ 404.907642][T14587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.907663][T14587] RIP: 0033:0x7fbb6ed5d68e [ 404.907685][T14587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 404.907703][T14587] RSP: 002b:00007fbb6fbc9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.907726][T14587] RAX: ffffffffffffffda RBX: 00007fbb6fbca6c0 RCX: 00007fbb6ed5d68e [ 404.907742][T14587] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 00000000000000c8 [ 404.907755][T14587] RBP: 00007fbb6fbca090 R08: 0000000000000000 R09: 0000000000000000 [ 404.907768][T14587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.907780][T14587] R13: 00007fbb6f016128 R14: 00007fbb6f016090 R15: 00007ffff9ef3888 [ 404.907814][T14587] [ 405.966465][T14628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.404122][T14598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.663917][T14648] hmac(sha224: entered promiscuous mode [ 408.751176][T14655] __nla_validate_parse: 3 callbacks suppressed [ 408.751196][T14655] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2758'. [ 408.822312][T14655] netlink: 'syz.1.2758': attribute type 1 has an invalid length. [ 409.193046][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.229648][T14673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.462993][T14681] FAULT_INJECTION: forcing a failure. [ 409.462993][T14681] name failslab, interval 1, probability 0, space 0, times 0 [ 409.475652][T14681] CPU: 0 UID: 0 PID: 14681 Comm: syz.1.2766 Not tainted syzkaller #0 PREEMPT(full) [ 409.475681][T14681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.475695][T14681] Call Trace: [ 409.475704][T14681] [ 409.475713][T14681] dump_stack_lvl+0xe8/0x150 [ 409.475743][T14681] should_fail_ex+0x412/0x560 [ 409.475773][T14681] should_failslab+0xa8/0x100 [ 409.475799][T14681] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 409.475832][T14681] ? __alloc_skb+0x1d0/0x7d0 [ 409.475852][T14681] ? __local_bh_enable_ip+0xd0/0x130 [ 409.475881][T14681] __alloc_skb+0x1d0/0x7d0 [ 409.475903][T14681] ? netlink_ack_tlv_len+0x6c/0x210 [ 409.475933][T14681] netlink_ack+0x146/0xa50 [ 409.475955][T14681] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.475985][T14681] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 409.476117][T14681] ? __pfx_nl80211_post_doit+0x10/0x10 [ 409.476163][T14681] netlink_rcv_skb+0x2b6/0x4b0 [ 409.476190][T14681] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.476225][T14681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.476276][T14681] ? down_read+0x270/0x2e0 [ 409.476301][T14681] ? genl_rcv+0xd/0x40 [ 409.476334][T14681] genl_rcv+0x28/0x40 [ 409.476364][T14681] netlink_unicast+0x75c/0x8e0 [ 409.476411][T14681] netlink_sendmsg+0x813/0xb40 [ 409.476446][T14681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.476476][T14681] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.476510][T14681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.476544][T14681] ____sys_sendmsg+0x972/0x9f0 [ 409.476569][T14681] ? __might_fault+0xaf/0x130 [ 409.476604][T14681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.476640][T14681] ? import_iovec+0x73/0xa0 [ 409.476670][T14681] ___sys_sendmsg+0x2a5/0x360 [ 409.476694][T14681] ? __lock_acquire+0x6b5/0x2cf0 [ 409.476722][T14681] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.476785][T14681] ? __fget_files+0x2a/0x420 [ 409.476814][T14681] ? __fget_files+0x3a0/0x420 [ 409.476851][T14681] __x64_sys_sendmsg+0x1bd/0x2a0 [ 409.476880][T14681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.476916][T14681] ? __pfx_ksys_write+0x10/0x10 [ 409.476958][T14681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.476981][T14681] do_syscall_64+0x174/0x580 [ 409.477004][T14681] ? trace_irq_disable+0x3b/0x140 [ 409.477036][T14681] ? clear_bhb_loop+0x40/0x90 [ 409.477062][T14681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.477083][T14681] RIP: 0033:0x7fb20839ce59 [ 409.477103][T14681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.477122][T14681] RSP: 002b:00007fb209268028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.477144][T14681] RAX: ffffffffffffffda RBX: 00007fb208615fa0 RCX: 00007fb20839ce59 [ 409.477159][T14681] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 409.477173][T14681] RBP: 00007fb209268090 R08: 0000000000000000 R09: 0000000000000000 [ 409.477186][T14681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.477199][T14681] R13: 00007fb208616038 R14: 00007fb208615fa0 R15: 00007fff06ae2b48 [ 409.477234][T14681] [ 410.012036][T14700] openvswitch: netlink: Message has 8 unknown bytes. [ 410.403587][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 410.585495][T14732] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2780'. [ 410.685205][ T5644] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 410.701219][ T5644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 410.710584][ T5644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 410.741978][ T5644] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 410.755239][ T5644] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 410.755338][T14735] block nbd0: not configured, cannot reconfigure [ 410.968641][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2784'. [ 411.030776][T14742] macvtap1: entered allmulticast mode [ 412.063432][T14789] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 412.339061][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2801'. [ 412.613245][T14819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2807'. [ 412.776158][T14823] FAULT_INJECTION: forcing a failure. [ 412.776158][T14823] name failslab, interval 1, probability 0, space 0, times 0 [ 412.790463][T14823] CPU: 1 UID: 0 PID: 14823 Comm: syz.5.2809 Not tainted syzkaller #0 PREEMPT(full) [ 412.790493][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.790506][T14823] Call Trace: [ 412.790515][T14823] [ 412.790525][T14823] dump_stack_lvl+0xe8/0x150 [ 412.790557][T14823] should_fail_ex+0x412/0x560 [ 412.790588][T14823] should_failslab+0xa8/0x100 [ 412.790613][T14823] __kmalloc_cache_noprof+0x88/0x660 [ 412.790646][T14823] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 412.790785][T14823] ? __genradix_ptr+0x1e1/0x220 [ 412.790819][T14823] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 412.790864][T14823] sctp_association_new+0x15d3/0x25e0 [ 412.790932][T14823] sctp_connect_new_asoc+0x2e4/0x6b0 [ 412.790963][T14823] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 412.790997][T14823] ? __local_bh_enable_ip+0xd0/0x130 [ 412.791019][T14823] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 412.791051][T14823] ? security_sctp_bind_connect+0x7e/0x2c0 [ 412.791084][T14823] sctp_sendmsg+0x1576/0x2c50 [ 412.791126][T14823] ? __pfx_sctp_sendmsg+0x10/0x10 [ 412.791156][T14823] ? aa_sk_perm+0x6d5/0x900 [ 412.791208][T14823] ? __pfx_aa_sk_perm+0x10/0x10 [ 412.791242][T14823] ? sock_rps_record_flow+0x19/0x350 [ 412.791279][T14823] ? inet_sendmsg+0x2f4/0x370 [ 412.791316][T14823] ____sys_sendmsg+0x80a/0x9f0 [ 412.791352][T14823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.791387][T14823] ? import_iovec+0x73/0xa0 [ 412.791417][T14823] ___sys_sendmsg+0x2a5/0x360 [ 412.791440][T14823] ? __lock_acquire+0x6b5/0x2cf0 [ 412.791477][T14823] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.791508][T14823] ? kstrtouint+0x6e/0xe0 [ 412.791569][T14823] ? __fget_files+0x2a/0x420 [ 412.791594][T14823] ? __fget_files+0x3a0/0x420 [ 412.791632][T14823] __sys_sendmmsg+0x27c/0x4e0 [ 412.791664][T14823] ? __pfx___sys_sendmmsg+0x10/0x10 [ 412.791686][T14823] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 412.791742][T14823] ? ksys_write+0x242/0x270 [ 412.791775][T14823] ? __pfx_ksys_write+0x10/0x10 [ 412.791814][T14823] __x64_sys_sendmmsg+0xa0/0xc0 [ 412.791840][T14823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.791862][T14823] do_syscall_64+0x174/0x580 [ 412.791884][T14823] ? trace_irq_disable+0x3b/0x140 [ 412.791921][T14823] ? clear_bhb_loop+0x40/0x90 [ 412.791948][T14823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.791969][T14823] RIP: 0033:0x7fe5a3d9ce59 [ 412.791989][T14823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.792007][T14823] RSP: 002b:00007fe5a4ba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 412.792029][T14823] RAX: ffffffffffffffda RBX: 00007fe5a4015fa0 RCX: 00007fe5a3d9ce59 [ 412.792045][T14823] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 412.792058][T14823] RBP: 00007fe5a4ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 412.792071][T14823] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000001 [ 412.792084][T14823] R13: 00007fe5a4016038 R14: 00007fe5a4015fa0 R15: 00007ffee76a14d8 [ 412.792119][T14823] [ 413.155511][ T5644] Bluetooth: hci7: command tx timeout [ 413.330326][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2814'. [ 413.346105][T14836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2813'. [ 413.412818][T14734] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.421863][T14734] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.431048][T14734] bridge_slave_0: entered allmulticast mode [ 413.439120][T14734] bridge_slave_0: entered promiscuous mode [ 413.490134][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2814'. [ 413.625968][T14838] veth5: entered promiscuous mode [ 413.631550][T14734] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.644302][T14734] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.659228][T14734] bridge_slave_1: entered allmulticast mode [ 413.667218][T14734] bridge_slave_1: entered promiscuous mode [ 413.709026][T14840] IPv6: sit1: Disabled Multicast RS [ 413.715320][T14840] sit1: entered allmulticast mode [ 413.951144][T14847] erspan0: entered promiscuous mode [ 413.959820][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2815'. [ 413.982622][T11753] bridge_slave_0: left allmulticast mode [ 413.989315][T11753] bridge_slave_0: left promiscuous mode [ 413.998390][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.430089][T11753] bond3 (unregistering): (slave geneve3): Releasing active interface [ 414.618348][T11753] bond1 (unregistering): Released all slaves [ 414.651331][T11753] bond2 (unregistering): Released all slaves [ 414.677649][T11753] bond3 (unregistering): Released all slaves [ 414.775566][T11753] bond0 (unregistering): Released all slaves [ 414.841040][T11753] bond4 (unregistering): Released all slaves [ 414.873210][T14734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.894200][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 414.903770][T14734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.013749][T14884] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 415.049264][T14734] team0: Port device team_slave_0 added [ 415.058032][T14734] team0: Port device team_slave_1 added [ 415.092195][T14734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.099184][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.133047][T14734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.200815][T14734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.207813][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.211237][ T5635] Bluetooth: hci7: command tx timeout [ 415.249324][T14734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.345931][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'. [ 415.410676][T14734] hsr_slave_0: entered promiscuous mode [ 415.425559][T14734] hsr_slave_1: entered promiscuous mode [ 415.461221][T14734] debugfs: 'hsr0' already exists in 'hsr' [ 415.482942][T14734] Cannot create hsr debugfs directory [ 415.839100][T14913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2829'. [ 416.263733][T14925] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 416.303148][T14923] pimreg: entered allmulticast mode [ 416.322710][T14923] pimreg: left allmulticast mode [ 416.591551][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 417.182062][T14958] netlink: 'syz.3.2842': attribute type 23 has an invalid length. [ 417.189943][T14958] netlink: 'syz.3.2842': attribute type 21 has an invalid length. [ 417.197792][T14958] IPv6: NLM_F_CREATE should be specified when creating new route [ 417.261386][T14958] netlink: 'syz.3.2842': attribute type 21 has an invalid length. [ 417.265959][T14967] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 417.278690][T14967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 417.299203][ T5635] Bluetooth: hci7: command tx timeout [ 417.434466][T14958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2842'. [ 417.454820][T14961] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 417.844630][T14995] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2851'. [ 418.007372][T15002] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2852'. [ 418.018145][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2852'. [ 418.211602][T15010] openvswitch: netlink: Flow key attr not present in new flow. [ 418.223832][ T29] audit: type=1804 audit(1780932393.277:5): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2853" name="/newroot/583/cgroup.controllers" dev="tmpfs" ino=2982 res=1 errno=0 [ 418.290657][ T29] audit: type=1800 audit(1780932393.277:6): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2853" name="cgroup.controllers" dev="tmpfs" ino=2982 res=0 errno=0 [ 418.503666][T15013] bond2: option tlb_dynamic_lb: invalid value (115) [ 418.512358][T15013] bond2 (unregistering): Released all slaves [ 418.582499][T15016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2856'. [ 418.598937][T11753] hsr_slave_0: left promiscuous mode [ 418.605152][T11753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.614427][T11753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.090346][T11753] team0 (unregistering): Port device team_slave_1 removed [ 419.137486][T11753] team0 (unregistering): Port device team_slave_0 removed [ 419.383313][ T5635] Bluetooth: hci7: command tx timeout [ 419.701073][T14734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.714012][T14734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.725692][T14734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.741859][T14734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.786271][T14734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.842415][T15059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2863'. [ 419.843994][T14734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.862104][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 419.872052][T14734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.915425][T14734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.233139][T15080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.241052][T15077] bond8: option tlb_dynamic_lb: invalid value (115) [ 420.265403][T15077] bond8 (unregistering): Released all slaves [ 420.369078][T14734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.465962][T14734] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.497510][T11767] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.504791][T11767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.547576][T11767] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.554918][T11767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.464374][T15123] netlink: 'syz.5.2878': attribute type 1 has an invalid length. [ 421.500676][T15123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2878'. [ 421.835373][T11753] IPVS: stop unused estimator thread 0... [ 421.931054][T15146] FAULT_INJECTION: forcing a failure. [ 421.931054][T15146] name failslab, interval 1, probability 0, space 0, times 0 [ 421.943741][T15146] CPU: 0 UID: 0 PID: 15146 Comm: syz.5.2884 Not tainted syzkaller #0 PREEMPT(full) [ 421.943772][T15146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.943792][T15146] Call Trace: [ 421.943805][T15146] [ 421.943814][T15146] dump_stack_lvl+0xe8/0x150 [ 421.943847][T15146] should_fail_ex+0x412/0x560 [ 421.943877][T15146] should_failslab+0xa8/0x100 [ 421.943902][T15146] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 421.943934][T15146] ? __alloc_skb+0x186/0x7d0 [ 421.943956][T15146] ? __alloc_skb+0x1d0/0x7d0 [ 421.943975][T15146] ? __local_bh_enable_ip+0xd0/0x130 [ 421.944004][T15146] __alloc_skb+0x1d0/0x7d0 [ 421.944025][T15146] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 421.944062][T15146] netlink_sendmsg+0x5d4/0xb40 [ 421.944101][T15146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.944131][T15146] ? aa_sock_msg_perm+0xf1/0x1b0 [ 421.944166][T15146] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.944200][T15146] ____sys_sendmsg+0x972/0x9f0 [ 421.944226][T15146] ? __might_fault+0xaf/0x130 [ 421.944262][T15146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.944298][T15146] ? import_iovec+0x73/0xa0 [ 421.944330][T15146] ___sys_sendmsg+0x2a5/0x360 [ 421.944355][T15146] ? __lock_acquire+0x6b5/0x2cf0 [ 421.944384][T15146] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.944407][T15146] ? __lock_acquire+0x6b5/0x2cf0 [ 421.944435][T15146] ? kstrtouint+0x6e/0xe0 [ 421.944511][T15146] __sys_sendmmsg+0x27c/0x4e0 [ 421.944545][T15146] ? __pfx___sys_sendmmsg+0x10/0x10 [ 421.944569][T15146] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 421.944624][T15146] ? ksys_write+0x242/0x270 [ 421.944659][T15146] ? __pfx_ksys_write+0x10/0x10 [ 421.944700][T15146] __x64_sys_sendmmsg+0xa0/0xc0 [ 421.944733][T15146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.944758][T15146] do_syscall_64+0x174/0x580 [ 421.944781][T15146] ? trace_irq_disable+0x3b/0x140 [ 421.944816][T15146] ? clear_bhb_loop+0x40/0x90 [ 421.944843][T15146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.944865][T15146] RIP: 0033:0x7fe5a3d9ce59 [ 421.944887][T15146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.944906][T15146] RSP: 002b:00007fe5a4ba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.944930][T15146] RAX: ffffffffffffffda RBX: 00007fe5a4015fa0 RCX: 00007fe5a3d9ce59 [ 421.944946][T15146] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 421.944961][T15146] RBP: 00007fe5a4ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 421.944974][T15146] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 421.944988][T15146] R13: 00007fe5a4016038 R14: 00007fe5a4015fa0 R15: 00007ffee76a14d8 [ 421.945023][T15146] [ 422.707224][T15166] FAULT_INJECTION: forcing a failure. [ 422.707224][T15166] name failslab, interval 1, probability 0, space 0, times 0 [ 422.819460][T14734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.830677][T15166] CPU: 1 UID: 0 PID: 15166 Comm: syz.3.2887 Not tainted syzkaller #0 PREEMPT(full) [ 422.830708][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 422.830720][T15166] Call Trace: [ 422.830728][T15166] [ 422.830737][T15166] dump_stack_lvl+0xe8/0x150 [ 422.830776][T15166] should_fail_ex+0x412/0x560 [ 422.830804][T15166] should_failslab+0xa8/0x100 [ 422.830824][T15166] ? dst_alloc+0x105/0x170 [ 422.830951][T15166] kmem_cache_alloc_noprof+0x87/0x650 [ 422.830992][T15166] dst_alloc+0x105/0x170 [ 422.831025][T15166] ? ip_check_mc_rcu+0x400/0x680 [ 422.831084][T15166] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 422.831184][T15166] ? ip_route_output_key_hash+0xd8/0x2a0 [ 422.831222][T15166] ip_route_output_key_hash+0x18d/0x2a0 [ 422.831255][T15166] ? ip_options_get+0x408/0x580 [ 422.831306][T15166] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 422.831341][T15166] ? __pfx__copy_from_iter+0x10/0x10 [ 422.831361][T15166] ? ip_cmsg_send+0x9c3/0xa70 [ 422.831389][T15166] ip_route_output_flow+0x2a/0x150 [ 422.831419][T15166] ? security_sk_classify_flow+0x6d/0x150 [ 422.831446][T15166] raw_sendmsg+0x1199/0x1a50 [ 422.831546][T15166] ? __pfx_raw_sendmsg+0x10/0x10 [ 422.831590][T15166] ? aa_sk_perm+0x6d5/0x900 [ 422.831626][T15166] ? __pfx_aa_sk_perm+0x10/0x10 [ 422.831651][T15166] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 422.831726][T15166] ? sock_rps_record_flow+0x19/0x350 [ 422.831759][T15166] ? inet_sendmsg+0x2f4/0x370 [ 422.831796][T15166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.831827][T15166] ____sys_sendmsg+0x80a/0x9f0 [ 422.831861][T15166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.831892][T15166] ? import_iovec+0x73/0xa0 [ 422.831920][T15166] ___sys_sendmsg+0x2a5/0x360 [ 422.831941][T15166] ? __lock_acquire+0x6b5/0x2cf0 [ 422.831967][T15166] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.832024][T15166] ? __fget_files+0x2a/0x420 [ 422.832048][T15166] ? __fget_files+0x3a0/0x420 [ 422.832081][T15166] __x64_sys_sendmsg+0x1bd/0x2a0 [ 422.832107][T15166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.832139][T15166] ? __pfx_ksys_write+0x10/0x10 [ 422.832177][T15166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.832198][T15166] do_syscall_64+0x174/0x580 [ 422.832219][T15166] ? trace_irq_disable+0x3b/0x140 [ 422.832249][T15166] ? clear_bhb_loop+0x40/0x90 [ 422.832274][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.832295][T15166] RIP: 0033:0x7f4fc719ce59 [ 422.832316][T15166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.832334][T15166] RSP: 002b:00007f4fc810d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.832355][T15166] RAX: ffffffffffffffda RBX: 00007f4fc7415fa0 RCX: 00007f4fc719ce59 [ 422.832370][T15166] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 422.832383][T15166] RBP: 00007f4fc810d090 R08: 0000000000000000 R09: 0000000000000000 [ 422.832403][T15166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.832414][T15166] R13: 00007f4fc7416038 R14: 00007f4fc7415fa0 R15: 00007ffc54a45108 [ 422.832447][T15166] [ 423.262158][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.510533][T15176] syzkaller0: entered promiscuous mode [ 423.516199][T15176] syzkaller0: entered allmulticast mode [ 423.572636][T15187] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2891'. [ 423.660383][T15189] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2892'. [ 426.118769][T14734] veth0_vlan: entered promiscuous mode [ 426.155456][T15226] bond2: option lp_interval: invalid value (0) [ 426.161700][T15226] bond2: option lp_interval: allowed values 1 - 2147483647 [ 426.172143][T15226] bond2 (unregistering): Released all slaves [ 426.262489][T14734] veth1_vlan: entered promiscuous mode [ 426.314323][T14734] veth0_macvtap: entered promiscuous mode [ 426.325130][T14734] veth1_macvtap: entered promiscuous mode [ 426.356082][T14734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.433518][T14734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.609060][T11767] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.619570][T11767] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.628360][T11767] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.637111][T11767] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.665067][T15244] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2904'. [ 426.821198][T11757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.829074][T11757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.870292][T11764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.883598][T11764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.345785][T15277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2782'. [ 427.540828][T15285] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2916'. [ 427.783072][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 427.797182][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 427.828629][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 427.849138][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.860150][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.084456][T15303] bond1: option tlb_dynamic_lb: invalid value (115) [ 428.102736][T15303] bond1 (unregistering): Released all slaves [ 428.455841][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 428.955830][T15330] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2928'. [ 429.014893][T15335] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2930'. [ 429.346473][T15351] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 429.354119][T15351] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 429.367366][T15296] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.450421][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.457848][T15296] bridge_slave_0: entered allmulticast mode [ 429.465839][T15296] bridge_slave_0: entered promiscuous mode [ 429.475724][T15296] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.482892][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.510431][T15296] bridge_slave_1: entered allmulticast mode [ 429.518776][T15296] bridge_slave_1: entered promiscuous mode [ 429.530681][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 429.672816][T15296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.685741][T15296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.744298][T15296] team0: Port device team_slave_0 added [ 429.753642][T15296] team0: Port device team_slave_1 added [ 429.789690][T15296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.796696][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.822616][T15296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.891339][T15296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.898353][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.924263][T15296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.949522][ T5644] Bluetooth: hci4: command tx timeout [ 430.021659][T15372] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2940'. [ 430.040502][T15296] hsr_slave_0: entered promiscuous mode [ 430.047443][T15296] hsr_slave_1: entered promiscuous mode [ 430.054113][T15296] debugfs: 'hsr0' already exists in 'hsr' [ 430.060238][T15296] Cannot create hsr debugfs directory [ 430.172826][T15377] FAULT_INJECTION: forcing a failure. [ 430.172826][T15377] name failslab, interval 1, probability 0, space 0, times 0 [ 430.235022][T15377] CPU: 0 UID: 0 PID: 15377 Comm: syz.6.2942 Not tainted syzkaller #0 PREEMPT(full) [ 430.235062][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 430.235076][T15377] Call Trace: [ 430.235085][T15377] [ 430.235094][T15377] dump_stack_lvl+0xe8/0x150 [ 430.235125][T15377] should_fail_ex+0x412/0x560 [ 430.235155][T15377] should_failslab+0xa8/0x100 [ 430.235181][T15377] __kmalloc_cache_noprof+0x88/0x660 [ 430.235212][T15377] ? __pfx_ip_vs_schedule+0x10/0x10 [ 430.235346][T15377] ? __ip_vs_get_out_rt+0x357/0x1430 [ 430.235377][T15377] __ip_vs_get_out_rt+0x357/0x1430 [ 430.235413][T15377] ? __pfx___ip_vs_get_out_rt+0x10/0x10 [ 430.235445][T15377] ? ip_vs_service_find+0xbc/0x3c0 [ 430.235477][T15377] ip_vs_nat_xmit+0x20b/0xb60 [ 430.235514][T15377] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 430.235537][T15377] ? ip_vs_in_stats+0xbd/0x450 [ 430.235565][T15377] ? __local_bh_enable_ip+0xd0/0x130 [ 430.235592][T15377] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 430.235616][T15377] ip_vs_in_hook+0xd88/0x1bf0 [ 430.235652][T15377] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 430.235704][T15377] ? nf_nat_ipv4_local_fn+0x1de/0x540 [ 430.235787][T15377] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 430.235815][T15377] nf_hook_slow+0xc5/0x220 [ 430.235891][T15377] ? __pfx_dst_output+0x10/0x10 [ 430.235924][T15377] nf_hook+0x22a/0x3a0 [ 430.235960][T15377] ? nf_hook+0xa1/0x3a0 [ 430.235991][T15377] ? __pfx_nf_hook+0x10/0x10 [ 430.236025][T15377] ? __pfx_dst_output+0x10/0x10 [ 430.236077][T15377] ? __ip_local_out+0x152/0x6a0 [ 430.236117][T15377] __ip_local_out+0x558/0x6a0 [ 430.236147][T15377] ? __pfx_dst_output+0x10/0x10 [ 430.236184][T15377] ip_local_out+0x2a/0x190 [ 430.236219][T15377] ip_send_skb+0x45/0xc0 [ 430.236242][T15377] udp_send_skb+0x7e4/0xf70 [ 430.236280][T15377] udp_sendmsg+0x1937/0x21a0 [ 430.236310][T15377] ? string+0x279/0x2b0 [ 430.236386][T15377] ? __pfx_udp_sendmsg+0x10/0x10 [ 430.236423][T15377] ? format_decode+0x5a3/0xe10 [ 430.236451][T15377] ? look_up_lock_class+0x57/0x110 [ 430.236485][T15377] ? __lock_acquire+0x6b5/0x2cf0 [ 430.236526][T15377] ? get_random_u32+0x4ce/0x8b0 [ 430.236641][T15377] udpv6_sendmsg+0x996/0x25c0 [ 430.236740][T15377] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 430.236767][T15377] ? udp_lib_get_port+0x177a/0x1c60 [ 430.236812][T15377] ? ip6_datagram_release_cb+0x7c/0x550 [ 430.236887][T15377] ? inet_send_prepare+0x1b9/0x270 [ 430.236921][T15377] ? inet_send_prepare+0x1b9/0x270 [ 430.236959][T15377] ? inet_send_prepare+0x1b9/0x270 [ 430.236992][T15377] ? __local_bh_enable_ip+0xd0/0x130 [ 430.237015][T15377] ? inet_send_prepare+0x1b9/0x270 [ 430.237060][T15377] ? inet6_sendmsg+0xe4/0x120 [ 430.237087][T15377] ____sys_sendmsg+0x5c7/0x9f0 [ 430.237124][T15377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.237160][T15377] ? import_iovec+0x73/0xa0 [ 430.237191][T15377] ___sys_sendmsg+0x2a5/0x360 [ 430.237215][T15377] ? __lock_acquire+0x6b5/0x2cf0 [ 430.237242][T15377] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.237306][T15377] ? __fget_files+0x2a/0x420 [ 430.237334][T15377] ? __fget_files+0x3a0/0x420 [ 430.237372][T15377] __x64_sys_sendmsg+0x1bd/0x2a0 [ 430.237401][T15377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.237438][T15377] ? __pfx_ksys_write+0x10/0x10 [ 430.237480][T15377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.237503][T15377] do_syscall_64+0x174/0x580 [ 430.237527][T15377] ? trace_irq_disable+0x3b/0x140 [ 430.237560][T15377] ? clear_bhb_loop+0x40/0x90 [ 430.237588][T15377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.237610][T15377] RIP: 0033:0x7fbb6ed9ce59 [ 430.237631][T15377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.237649][T15377] RSP: 002b:00007fbb6fbeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.237672][T15377] RAX: ffffffffffffffda RBX: 00007fbb6f015fa0 RCX: 00007fbb6ed9ce59 [ 430.237688][T15377] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 430.237702][T15377] RBP: 00007fbb6fbeb090 R08: 0000000000000000 R09: 0000000000000000 [ 430.237715][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.237728][T15377] R13: 00007fbb6f016038 R14: 00007fbb6f015fa0 R15: 00007ffff9ef3888 [ 430.237764][T15377] [ 430.855526][T15296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 431.421162][T15296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 432.041458][ T5644] Bluetooth: hci4: command tx timeout [ 432.306754][T15296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 432.350876][T15413] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2953'. [ 432.410096][T15414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2950'. [ 432.669145][T15420] bond0: option tlb_dynamic_lb: invalid value (115) [ 432.688097][T15420] bond0 (unregistering): Released all slaves [ 432.850567][T15296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 433.023985][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2958'. [ 433.033296][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2958'. [ 434.080529][ T5644] Bluetooth: hci4: command tx timeout [ 435.017850][T15403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.059131][T15296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 435.130251][T15296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.161491][T15296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 435.194458][T15296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.206023][T15296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 435.267795][T15296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.281090][T15296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.298251][T15296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.425700][T15457] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2964'. [ 435.636134][T15296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.718529][T15296] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.749033][T15468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2968'. [ 435.766388][T11762] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.773637][T11762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.792511][T15468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2968'. [ 435.856755][T11753] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.864094][T11753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.003078][T15471] FAULT_INJECTION: forcing a failure. [ 436.003078][T15471] name failslab, interval 1, probability 0, space 0, times 0 [ 436.036196][T15471] CPU: 1 UID: 0 PID: 15471 Comm: syz.4.2969 Not tainted syzkaller #0 PREEMPT(full) [ 436.036226][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.036240][T15471] Call Trace: [ 436.036248][T15471] [ 436.036257][T15471] dump_stack_lvl+0xe8/0x150 [ 436.036289][T15471] should_fail_ex+0x412/0x560 [ 436.036318][T15471] should_failslab+0xa8/0x100 [ 436.036343][T15471] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 436.036375][T15471] ? __alloc_skb+0x186/0x7d0 [ 436.036397][T15471] ? __alloc_skb+0x1d0/0x7d0 [ 436.036416][T15471] ? __local_bh_enable_ip+0xd0/0x130 [ 436.036445][T15471] __alloc_skb+0x1d0/0x7d0 [ 436.036466][T15471] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 436.036503][T15471] netlink_sendmsg+0x5d4/0xb40 [ 436.036540][T15471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.036570][T15471] ? aa_sock_msg_perm+0xf1/0x1b0 [ 436.036613][T15471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.036646][T15471] ____sys_sendmsg+0x972/0x9f0 [ 436.036672][T15471] ? __might_fault+0xaf/0x130 [ 436.036708][T15471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.036744][T15471] ? import_iovec+0x73/0xa0 [ 436.036774][T15471] ___sys_sendmsg+0x2a5/0x360 [ 436.036799][T15471] ? __lock_acquire+0x6b5/0x2cf0 [ 436.036828][T15471] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.036851][T15471] ? __lock_acquire+0x6b5/0x2cf0 [ 436.036880][T15471] ? kstrtouint+0x6e/0xe0 [ 436.036957][T15471] __sys_sendmmsg+0x27c/0x4e0 [ 436.037000][T15471] ? __pfx___sys_sendmmsg+0x10/0x10 [ 436.037024][T15471] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 436.037079][T15471] ? ksys_write+0x242/0x270 [ 436.037114][T15471] ? __pfx_ksys_write+0x10/0x10 [ 436.037154][T15471] __x64_sys_sendmmsg+0xa0/0xc0 [ 436.037181][T15471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.037204][T15471] do_syscall_64+0x174/0x580 [ 436.037227][T15471] ? trace_irq_disable+0x3b/0x140 [ 436.037260][T15471] ? clear_bhb_loop+0x40/0x90 [ 436.037287][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.037309][T15471] RIP: 0033:0x7f410b19ce59 [ 436.037329][T15471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.037347][T15471] RSP: 002b:00007f410c0b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 436.037370][T15471] RAX: ffffffffffffffda RBX: 00007f410b415fa0 RCX: 00007f410b19ce59 [ 436.037386][T15471] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 436.037401][T15471] RBP: 00007f410c0b1090 R08: 0000000000000000 R09: 0000000000000000 [ 436.037415][T15471] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 436.037428][T15471] R13: 00007f410b416038 R14: 00007f410b415fa0 R15: 00007fff92ee8ea8 [ 436.037462][T15471] [ 436.305799][ T5635] Bluetooth: hci4: command tx timeout [ 436.455002][T15475] FAULT_INJECTION: forcing a failure. [ 436.455002][T15475] name failslab, interval 1, probability 0, space 0, times 0 [ 436.467664][T15475] CPU: 0 UID: 0 PID: 15475 Comm: syz.4.2971 Not tainted syzkaller #0 PREEMPT(full) [ 436.467699][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.467713][T15475] Call Trace: [ 436.467723][T15475] [ 436.467731][T15475] dump_stack_lvl+0xe8/0x150 [ 436.467762][T15475] should_fail_ex+0x412/0x560 [ 436.467792][T15475] should_failslab+0xa8/0x100 [ 436.467814][T15475] ? skb_clone+0x212/0x3a0 [ 436.467841][T15475] kmem_cache_alloc_noprof+0x87/0x650 [ 436.467873][T15475] ? __netlink_lookup+0xc6/0x8b0 [ 436.467907][T15475] skb_clone+0x212/0x3a0 [ 436.467938][T15475] __netlink_deliver_tap+0x404/0x850 [ 436.467977][T15475] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.468005][T15475] netlink_deliver_tap+0x19c/0x1b0 [ 436.468033][T15475] netlink_unicast+0x730/0x8e0 [ 436.468069][T15475] netlink_sendmsg+0x813/0xb40 [ 436.468105][T15475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.468136][T15475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 436.468172][T15475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.468207][T15475] ____sys_sendmsg+0x972/0x9f0 [ 436.468233][T15475] ? __might_fault+0xaf/0x130 [ 436.468270][T15475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.468306][T15475] ? import_iovec+0x73/0xa0 [ 436.468337][T15475] ___sys_sendmsg+0x2a5/0x360 [ 436.468361][T15475] ? __lock_acquire+0x6b5/0x2cf0 [ 436.468391][T15475] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.468457][T15475] ? __fget_files+0x2a/0x420 [ 436.468484][T15475] ? __fget_files+0x3a0/0x420 [ 436.468522][T15475] __x64_sys_sendmsg+0x1bd/0x2a0 [ 436.468552][T15475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.468589][T15475] ? __pfx_ksys_write+0x10/0x10 [ 436.468631][T15475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.468656][T15475] do_syscall_64+0x174/0x580 [ 436.468679][T15475] ? trace_irq_disable+0x3b/0x140 [ 436.468720][T15475] ? clear_bhb_loop+0x40/0x90 [ 436.468748][T15475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.468769][T15475] RIP: 0033:0x7f410b19ce59 [ 436.468790][T15475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.468809][T15475] RSP: 002b:00007f410c0b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.468833][T15475] RAX: ffffffffffffffda RBX: 00007f410b415fa0 RCX: 00007f410b19ce59 [ 436.468849][T15475] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000004 [ 436.468863][T15475] RBP: 00007f410c0b1090 R08: 0000000000000000 R09: 0000000000000000 [ 436.468877][T15475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.468890][T15475] R13: 00007f410b416038 R14: 00007f410b415fa0 R15: 00007fff92ee8ea8 [ 436.468926][T15475] [ 436.850123][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 437.354531][T15503] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 437.503736][T15509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2978'. [ 437.529444][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 437.896181][T15296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.001067][T15296] veth0_vlan: entered promiscuous mode [ 438.015159][T15296] veth1_vlan: entered promiscuous mode [ 438.096069][T15296] veth0_macvtap: entered promiscuous mode [ 438.116942][T15296] veth1_macvtap: entered promiscuous mode [ 438.145745][T15296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.159640][T15296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.188100][ T137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.196893][ T137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.223550][ T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.232339][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.636015][T15535] syzkaller0: entered promiscuous mode [ 438.660635][T15535] syzkaller0: entered allmulticast mode [ 438.719843][T15547] FAULT_INJECTION: forcing a failure. [ 438.719843][T15547] name failslab, interval 1, probability 0, space 0, times 0 [ 438.737344][T11767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.745216][T11767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.806535][T15547] CPU: 1 UID: 0 PID: 15547 Comm: syz.6.2987 Not tainted syzkaller #0 PREEMPT(full) [ 438.806567][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 438.806580][T15547] Call Trace: [ 438.806589][T15547] [ 438.806599][T15547] dump_stack_lvl+0xe8/0x150 [ 438.806631][T15547] should_fail_ex+0x412/0x560 [ 438.806661][T15547] should_failslab+0xa8/0x100 [ 438.806686][T15547] __kmalloc_cache_noprof+0x88/0x660 [ 438.806719][T15547] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 438.806753][T15547] ? __genradix_ptr+0x1e1/0x220 [ 438.806786][T15547] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 438.806843][T15547] sctp_association_new+0x15d3/0x25e0 [ 438.806888][T15547] sctp_connect_new_asoc+0x2e4/0x6b0 [ 438.806919][T15547] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 438.806953][T15547] ? __local_bh_enable_ip+0xd0/0x130 [ 438.806975][T15547] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 438.807008][T15547] ? security_sctp_bind_connect+0x7e/0x2c0 [ 438.807040][T15547] sctp_sendmsg+0x1576/0x2c50 [ 438.807064][T15547] ? unwind_next_frame+0xa6/0x2550 [ 438.807108][T15547] ? __pfx_sctp_sendmsg+0x10/0x10 [ 438.807138][T15547] ? aa_sk_perm+0x6d5/0x900 [ 438.807177][T15547] ? __pfx_aa_sk_perm+0x10/0x10 [ 438.807213][T15547] ? sock_rps_record_flow+0x19/0x350 [ 438.807251][T15547] ? inet_sendmsg+0x2f4/0x370 [ 438.807289][T15547] ____sys_sendmsg+0x80a/0x9f0 [ 438.807327][T15547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.807364][T15547] ? import_iovec+0x73/0xa0 [ 438.807396][T15547] ___sys_sendmsg+0x2a5/0x360 [ 438.807420][T15547] ? __lock_acquire+0x6b5/0x2cf0 [ 438.807449][T15547] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.807516][T15547] ? __fget_files+0x2a/0x420 [ 438.807543][T15547] ? __fget_files+0x3a0/0x420 [ 438.807587][T15547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 438.807614][T15547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.807651][T15547] ? __pfx_ksys_write+0x10/0x10 [ 438.807694][T15547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.807718][T15547] do_syscall_64+0x174/0x580 [ 438.807742][T15547] ? trace_irq_disable+0x3b/0x140 [ 438.807776][T15547] ? clear_bhb_loop+0x40/0x90 [ 438.807803][T15547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.807832][T15547] RIP: 0033:0x7fbb6ed9ce59 [ 438.807852][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.807871][T15547] RSP: 002b:00007fbb6fbca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.807895][T15547] RAX: ffffffffffffffda RBX: 00007fbb6f016090 RCX: 00007fbb6ed9ce59 [ 438.807912][T15547] RDX: 0000000000000881 RSI: 0000200000000700 RDI: 0000000000000005 [ 438.807926][T15547] RBP: 00007fbb6fbca090 R08: 0000000000000000 R09: 0000000000000000 [ 438.807940][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.807953][T15547] R13: 00007fbb6f016128 R14: 00007fbb6f016090 R15: 00007ffff9ef3888 [ 438.807990][T15547] [ 439.180386][T11753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.188260][T11753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.210210][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 439.395045][T15559] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 439.874847][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.256785][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.267852][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.276813][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.297757][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.309116][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.493494][T15591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.603831][T15558] tipc: Enabling of bearer rejected, failed to enable media [ 440.762563][T15598] netlink: 'syz.5.3001': attribute type 1 has an invalid length. [ 440.793871][T15598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.863818][T15601] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3002'. [ 440.949356][T15601] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3002'. [ 441.052509][T15603] macvtap2: entered promiscuous mode [ 441.088398][T15603] macvtap2: entered allmulticast mode [ 441.124606][T15603] veth1_vlan: entered allmulticast mode [ 441.183355][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3004'. [ 441.351282][T15617] Bluetooth: MGMT ver 1.23 [ 441.357362][T15617] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 441.374822][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3007'. [ 441.735292][T15630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.792486][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3011'. [ 441.801450][T15633] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3011'. [ 441.986632][T15638] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3013'. [ 442.050019][T15638] FAULT_INJECTION: forcing a failure. [ 442.050019][T15638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.070517][T15638] CPU: 0 UID: 0 PID: 15638 Comm: syz.6.3013 Not tainted syzkaller #0 PREEMPT(full) [ 442.070549][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 442.070563][T15638] Call Trace: [ 442.070572][T15638] [ 442.070581][T15638] dump_stack_lvl+0xe8/0x150 [ 442.070612][T15638] should_fail_ex+0x412/0x560 [ 442.070642][T15638] _copy_from_user+0x2d/0xb0 [ 442.070671][T15638] kstrtouint_from_user+0xd6/0x180 [ 442.070697][T15638] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 442.070738][T15638] proc_fail_nth_write+0x8e/0x210 [ 442.070769][T15638] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 442.070804][T15638] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 442.070835][T15638] vfs_write+0x29a/0xb90 [ 442.070870][T15638] ? __pfx_vfs_write+0x10/0x10 [ 442.070898][T15638] ? __fget_files+0x2a/0x420 [ 442.070925][T15638] ? __fget_files+0x3a0/0x420 [ 442.070946][T15638] ? __fget_files+0x2a/0x420 [ 442.070975][T15638] ksys_write+0x150/0x270 [ 442.071003][T15638] ? __pfx_ksys_write+0x10/0x10 [ 442.071036][T15638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.071056][T15638] do_syscall_64+0x174/0x580 [ 442.071076][T15638] ? trace_irq_disable+0x3b/0x140 [ 442.071111][T15638] ? clear_bhb_loop+0x40/0x90 [ 442.071139][T15638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.071157][T15638] RIP: 0033:0x7fbb6ed5d68e [ 442.071174][T15638] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 442.071189][T15638] RSP: 002b:00007fbb6fbeafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.071208][T15638] RAX: ffffffffffffffda RBX: 00007fbb6fbeb6c0 RCX: 00007fbb6ed5d68e [ 442.071222][T15638] RDX: 0000000000000001 RSI: 00007fbb6fbeb0a0 RDI: 0000000000000004 [ 442.071233][T15638] RBP: 00007fbb6fbeb090 R08: 0000000000000000 R09: 0000000000000000 [ 442.071244][T15638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.071254][T15638] R13: 00007fbb6f016038 R14: 00007fbb6f015fa0 R15: 00007ffff9ef3888 [ 442.071282][T15638] [ 442.442584][ T5644] Bluetooth: hci1: command tx timeout [ 442.601925][T15652] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3015'. [ 442.629828][T15652] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3015'. [ 442.690981][T15652] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 442.700002][T15652] team0: Port device batadv1 added [ 442.728293][T15586] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.735505][T15586] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.742735][T15586] bridge_slave_0: entered allmulticast mode [ 442.750259][T15586] bridge_slave_0: entered promiscuous mode [ 442.758749][T15586] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.771202][T15668] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 442.786162][T15586] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.793484][T15586] bridge_slave_1: entered allmulticast mode [ 442.801515][T15586] bridge_slave_1: entered promiscuous mode [ 442.816337][T15669] batman_adv: batadv0: Adding interface: macvtap1 [ 442.822815][T15669] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.848483][T15669] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 442.868147][T15670] batman_adv: batadv0: Adding interface: macvtap2 [ 442.874597][T15670] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.914433][T15670] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 442.950292][T15586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.962273][T15586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.994991][T15586] team0: Port device team_slave_0 added [ 443.003190][T15586] team0: Port device team_slave_1 added [ 443.045344][T15586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.052334][T15586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.078421][T15586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.090697][T15586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.097691][T15586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.137861][T15586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.226966][T15586] hsr_slave_0: entered promiscuous mode [ 443.254485][T15586] hsr_slave_1: entered promiscuous mode [ 443.261419][T15586] debugfs: 'hsr0' already exists in 'hsr' [ 443.271018][T15586] Cannot create hsr debugfs directory [ 444.481269][ T5644] Bluetooth: hci1: command tx timeout [ 445.390748][T15642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.432506][T15586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.466309][T15586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.491632][T15586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.525385][T15586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.533231][T15586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.564214][T15586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.572804][T15586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 445.585441][T15586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.656337][T15676] hmac(sha2: entered promiscuous mode [ 445.824401][T15586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.880315][T15691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.894447][T15586] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.914739][T11760] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.921934][T11760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.019861][T11760] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.027083][T11760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.046108][T15689] IPv6: addrconf: prefix option has invalid lifetime [ 446.081309][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3024'. [ 446.090275][T15699] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3024'. [ 446.633488][ T5644] Bluetooth: hci1: command tx timeout [ 446.725400][T15717] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 446.798172][T15722] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.806040][T15722] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.921437][T15722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.936481][T15722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.950335][T15734] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3031'. [ 446.960776][T15734] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3031'. [ 447.121631][T15734] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 447.136377][T15734] team0: Port device batadv1 added [ 447.152836][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.163178][T15738] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3033'. [ 447.183706][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.200537][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.232704][T15586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.240260][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.258567][T15745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.297513][T15586] veth0_vlan: entered promiscuous mode [ 447.348975][T15586] veth1_vlan: entered promiscuous mode [ 447.382229][T15586] veth0_macvtap: entered promiscuous mode [ 447.392403][T15586] veth1_macvtap: entered promiscuous mode [ 447.413167][T15586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.443177][T15586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.457299][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.468023][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.479577][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.512829][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.659321][ T5644] Bluetooth: hci1: command tx timeout [ 449.688622][T15720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.847203][T11757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.866958][T11757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.924342][T11764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.937950][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 449.947037][T11764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.165644][T15757] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3039'. [ 450.388462][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3043'. [ 450.553195][T15772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3044'. [ 451.027436][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3050'. [ 451.486097][T15822] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3058'. [ 451.571442][T15812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3057'. [ 453.496404][T15818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3058'. [ 453.619876][T15832] FAULT_INJECTION: forcing a failure. [ 453.619876][T15832] name failslab, interval 1, probability 0, space 0, times 0 [ 453.636747][T15832] CPU: 1 UID: 0 PID: 15832 Comm: syz.3.3061 Not tainted syzkaller #0 PREEMPT(full) [ 453.636778][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.636792][T15832] Call Trace: [ 453.636800][T15832] [ 453.636810][T15832] dump_stack_lvl+0xe8/0x150 [ 453.636841][T15832] should_fail_ex+0x412/0x560 [ 453.636872][T15832] should_failslab+0xa8/0x100 [ 453.636897][T15832] __kmalloc_noprof+0xe8/0x760 [ 453.636930][T15832] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 453.636973][T15832] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 453.637016][T15832] genl_family_rcv_msg_doit+0xd9/0x330 [ 453.637058][T15832] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 453.637109][T15832] ? apparmor_capable+0x126/0x170 [ 453.637138][T15832] ? bpf_lsm_capable+0x9/0x20 [ 453.637159][T15832] ? security_capable+0x7e/0x2c0 [ 453.637199][T15832] genl_rcv_msg+0x61c/0x7a0 [ 453.637239][T15832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.637270][T15832] ? __pfx_team_nl_options_get_doit+0x10/0x10 [ 453.637451][T15832] ? __pfx_ref_tracker_free+0x10/0x10 [ 453.637490][T15832] netlink_rcv_skb+0x232/0x4b0 [ 453.637518][T15832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.637552][T15832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.637597][T15832] ? down_read+0x270/0x2e0 [ 453.637623][T15832] ? genl_rcv+0xd/0x40 [ 453.637656][T15832] genl_rcv+0x28/0x40 [ 453.637685][T15832] netlink_unicast+0x75c/0x8e0 [ 453.637722][T15832] netlink_sendmsg+0x813/0xb40 [ 453.637760][T15832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.637791][T15832] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.637826][T15832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.637860][T15832] ____sys_sendmsg+0x972/0x9f0 [ 453.637887][T15832] ? __might_fault+0xaf/0x130 [ 453.637923][T15832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.637960][T15832] ? import_iovec+0x73/0xa0 [ 453.637991][T15832] ___sys_sendmsg+0x2a5/0x360 [ 453.638015][T15832] ? __lock_acquire+0x6b5/0x2cf0 [ 453.638044][T15832] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.638120][T15832] ? __fget_files+0x2a/0x420 [ 453.638146][T15832] ? __fget_files+0x3a0/0x420 [ 453.638187][T15832] __x64_sys_sendmsg+0x1bd/0x2a0 [ 453.638220][T15832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.638259][T15832] ? __pfx_ksys_write+0x10/0x10 [ 453.638302][T15832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.638326][T15832] do_syscall_64+0x174/0x580 [ 453.638349][T15832] ? trace_irq_disable+0x3b/0x140 [ 453.638383][T15832] ? clear_bhb_loop+0x40/0x90 [ 453.638412][T15832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.638432][T15832] RIP: 0033:0x7f68b439ce59 [ 453.638453][T15832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.638472][T15832] RSP: 002b:00007f68b529b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.638496][T15832] RAX: ffffffffffffffda RBX: 00007f68b4615fa0 RCX: 00007f68b439ce59 [ 453.638512][T15832] RDX: 0000000000048850 RSI: 00002000000015c0 RDI: 0000000000000003 [ 453.638527][T15832] RBP: 00007f68b529b090 R08: 0000000000000000 R09: 0000000000000000 [ 453.638540][T15832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.638553][T15832] R13: 00007f68b4616038 R14: 00007f68b4615fa0 R15: 00007ffd40f13508 [ 453.638591][T15832] [ 454.168239][T15844] syzkaller0: entered promiscuous mode [ 454.173844][T15844] syzkaller0: entered allmulticast mode [ 454.215001][T15847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.222642][T15847] IPv6: NLM_F_CREATE should be set when creating new route [ 454.252796][T15850] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3068'. [ 454.757354][T15862] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3070'. [ 456.453646][T15867] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3071'. [ 456.604724][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3074'. [ 456.706986][T15882] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 456.724024][T15882] syzkaller0: entered promiscuous mode [ 456.729563][T15882] syzkaller0: entered allmulticast mode [ 456.898284][T15888] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3080'. [ 456.909810][T15888] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3080'. [ 457.205747][T15895] xt_hashlimit: size too large, truncated to 1048576 [ 457.312837][T15903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3082'. [ 457.482516][T15909] FAULT_INJECTION: forcing a failure. [ 457.482516][T15909] name failslab, interval 1, probability 0, space 0, times 0 [ 457.495185][T15909] CPU: 0 UID: 0 PID: 15909 Comm: syz.4.3087 Not tainted syzkaller #0 PREEMPT(full) [ 457.495215][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.495229][T15909] Call Trace: [ 457.495238][T15909] [ 457.495247][T15909] dump_stack_lvl+0xe8/0x150 [ 457.495279][T15909] should_fail_ex+0x412/0x560 [ 457.495308][T15909] should_failslab+0xa8/0x100 [ 457.495338][T15909] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 457.495370][T15909] ? __alloc_skb+0x186/0x7d0 [ 457.495393][T15909] ? __alloc_skb+0x1d0/0x7d0 [ 457.495411][T15909] ? __local_bh_enable_ip+0xd0/0x130 [ 457.495440][T15909] __alloc_skb+0x1d0/0x7d0 [ 457.495462][T15909] ? netlink_ack_tlv_len+0x6c/0x210 [ 457.495490][T15909] netlink_ack+0x146/0xa50 [ 457.495512][T15909] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.495616][T15909] ? __lock_acquire+0x6b5/0x2cf0 [ 457.495654][T15909] netlink_rcv_skb+0x2b6/0x4b0 [ 457.495680][T15909] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.495703][T15909] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.495741][T15909] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.495765][T15909] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.495795][T15909] netlink_unicast+0x75c/0x8e0 [ 457.495829][T15909] netlink_sendmsg+0x813/0xb40 [ 457.495874][T15909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.495904][T15909] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.495940][T15909] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.495974][T15909] ____sys_sendmsg+0x972/0x9f0 [ 457.496001][T15909] ? __might_fault+0xaf/0x130 [ 457.496038][T15909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.496075][T15909] ? import_iovec+0x73/0xa0 [ 457.496106][T15909] ___sys_sendmsg+0x2a5/0x360 [ 457.496131][T15909] ? __lock_acquire+0x6b5/0x2cf0 [ 457.496160][T15909] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.496231][T15909] ? __fget_files+0x2a/0x420 [ 457.496258][T15909] ? __fget_files+0x3a0/0x420 [ 457.496297][T15909] __x64_sys_sendmsg+0x1bd/0x2a0 [ 457.496327][T15909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.496365][T15909] ? __pfx_ksys_write+0x10/0x10 [ 457.496413][T15909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.496438][T15909] do_syscall_64+0x174/0x580 [ 457.496463][T15909] ? trace_irq_disable+0x3b/0x140 [ 457.496496][T15909] ? clear_bhb_loop+0x40/0x90 [ 457.496524][T15909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.496547][T15909] RIP: 0033:0x7f410b19ce59 [ 457.496568][T15909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.496588][T15909] RSP: 002b:00007f410c0b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.496612][T15909] RAX: ffffffffffffffda RBX: 00007f410b415fa0 RCX: 00007f410b19ce59 [ 457.496629][T15909] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 457.496648][T15909] RBP: 00007f410c0b1090 R08: 0000000000000000 R09: 0000000000000000 [ 457.496662][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.496675][T15909] R13: 00007f410b416038 R14: 00007f410b415fa0 R15: 00007fff92ee8ea8 [ 457.496710][T15909] [ 457.879298][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 458.074782][T15921] macvtap3: entered promiscuous mode [ 458.080204][T15921] macvtap3: entered allmulticast mode [ 458.195640][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3093'. [ 458.559305][T15938] syzkaller0: entered promiscuous mode [ 458.565069][T15938] syzkaller0: entered allmulticast mode [ 459.086765][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3098'. [ 459.104810][T15948] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 461.442883][T15946] veth7: entered promiscuous mode [ 462.053529][T16014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3116'. [ 462.229129][T16018] syzkaller0: entered promiscuous mode [ 462.234641][T16018] syzkaller0: entered allmulticast mode [ 462.567152][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3123'. [ 463.106135][T16049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.530435][ T30] INFO: task syz.2.1902:12022 blocked for more than 143 seconds. [ 463.542230][ T30] Not tainted syzkaller #0 [ 463.547253][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.556087][ T30] task:syz.2.1902 state:D stack:26880 pid:12022 tgid:12021 ppid:5633 task_flags:0x400140 flags:0x00080002 [ 463.569154][ T30] Call Trace: [ 463.572524][ T30] [ 463.575510][ T30] __schedule+0x1821/0x5740 [ 463.580408][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 463.585984][ T30] ? __pfx___schedule+0x10/0x10 [ 463.590955][ T30] ? schedule+0x90/0x360 [ 463.595247][ T30] schedule+0x164/0x360 [ 463.599527][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.605758][ T30] __mutex_lock+0x7f7/0x1550 [ 463.610436][ T30] ? __mutex_lock+0x608/0x1550 [ 463.615272][ T30] ? nfsd_nl_version_get_doit+0x181/0xcd0 [ 463.621112][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.626175][ T30] ? __nlmsg_put+0xef/0x1b0 [ 463.631238][ T30] ? genlmsg_put+0x137/0x2e0 [ 463.635943][ T30] nfsd_nl_version_get_doit+0x181/0xcd0 [ 463.641522][ T30] ? __nla_parse+0x40/0x60 [ 463.645953][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 463.652037][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 463.658496][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 463.677126][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 463.682760][ T30] ? __asan_memcpy+0x40/0x70 [ 463.687381][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 463.693484][ T30] genl_rcv_msg+0x61c/0x7a0 [ 463.698039][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.703088][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 463.709191][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 463.714594][ T30] netlink_rcv_skb+0x232/0x4b0 [ 463.719379][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.724424][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.729743][ T30] ? down_read+0x270/0x2e0 [ 463.734203][ T30] ? genl_rcv+0xd/0x40 [ 463.738395][ T30] genl_rcv+0x28/0x40 [ 463.742396][ T30] netlink_unicast+0x75c/0x8e0 [ 463.747216][ T30] netlink_sendmsg+0x813/0xb40 [ 463.752024][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.757341][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 463.762330][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.767652][ T30] ____sys_sendmsg+0x972/0x9f0 [ 463.772456][ T30] ? __might_fault+0xaf/0x130 [ 463.792338][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.797731][ T30] ? import_iovec+0x73/0xa0 [ 463.802303][ T30] ___sys_sendmsg+0x2a5/0x360 [ 463.807074][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 463.812078][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.817339][ T30] ? futex_wait+0x2a2/0x390 [ 463.821965][ T30] ? __fget_files+0x2a/0x420 [ 463.826602][ T30] ? __fget_files+0x3a0/0x420 [ 463.831339][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 463.836321][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.841827][ T30] ? rcu_is_watching+0x15/0xb0 [ 463.846712][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.852804][ T30] do_syscall_64+0x174/0x580 [ 463.857429][ T30] ? trace_irq_disable+0x3b/0x140 [ 463.862497][ T30] ? clear_bhb_loop+0x40/0x90 [ 463.867202][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.873142][ T30] RIP: 0033:0x7f855bd9ce59 [ 463.877592][ T30] RSP: 002b:00007f855cb74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.886039][ T30] RAX: ffffffffffffffda RBX: 00007f855c015fa0 RCX: 00007f855bd9ce59 [ 463.905357][ T30] RDX: 0000000000008840 RSI: 0000200000000100 RDI: 0000000000000004 [ 463.913523][ T30] RBP: 00007f855be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 463.921676][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.929696][ T30] R13: 00007f855c016038 R14: 00007f855c015fa0 R15: 00007ffcb0ee66b8 [ 463.937707][ T30] [ 463.950007][ T30] [ 463.950007][ T30] Showing all locks held in the system: [ 463.957812][ T30] 1 lock held by khungtaskd/30: [ 463.971081][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 463.981022][ T30] 3 locks held by kworker/u8:2/35: [ 463.986152][ T30] #0: ffff888031dc7940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 463.997765][ T30] #1: ffffc90000ab7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 464.021539][ T30] #2: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 464.031416][ T30] 2 locks held by getty/5388: [ 464.036143][ T30] #0: ffff8880368090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.046104][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 464.056302][ T30] 3 locks held by kworker/0:11/7077: [ 464.061649][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 464.072699][ T30] #1: ffffc90003337c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 464.085847][ T30] #2: ffff88807d3e6250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 464.096033][ T30] 2 locks held by syz.0.1423/10491: [ 464.101235][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.109439][ T30] #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 464.119662][ T30] 3 locks held by kworker/u8:10/11757: [ 464.135814][ T30] #0: ffff88801af03140 ((wq_completion)tc_filter_workqueue){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 464.147969][ T30] #1: ffffc90004effc40 ((work_completion)(&(rwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 464.160050][ T30] #2: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: flow_destroy_filter_work+0x19/0x30 [ 464.169978][ T30] 3 locks held by kworker/u8:11/11760: [ 464.175439][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 464.187124][ T30] #1: ffffc90004edfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 464.198290][ T30] #2: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 464.207416][ T30] 2 locks held by syz.2.1902/12022: [ 464.212646][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.220888][ T30] #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x181/0xcd0 [ 464.230998][ T30] 2 locks held by syz.4.3107/15983: [ 464.248244][ T30] #0: ffffffff8fdbafe8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 464.258057][ T30] #1: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120 [ 464.267970][ T30] 2 locks held by syz.5.3119/16017: [ 464.273189][ T30] #0: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 464.282183][ T30] #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 464.293115][ T30] 1 lock held by syz.3.3123/16025: [ 464.298423][ T30] #0: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 464.307424][ T30] 1 lock held by syz.3.3123/16026: [ 464.312572][ T30] #0: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 464.321702][ T30] 1 lock held by syz.1.3125/16038: [ 464.326856][ T30] #0: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 464.335927][ T30] 1 lock held by syz.1.3125/16039: [ 464.341045][ T30] #0: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 464.361412][ T30] 2 locks held by syz.1.3125/16043: [ 464.366850][ T30] #0: ffffffff8fdaaa40 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0 [ 464.376377][ T30] #1: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 464.386035][ T30] 1 lock held by syz.6.3127/16048: [ 464.391154][ T30] #0: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 464.400232][ T30] 2 locks held by syz.6.3127/16049: [ 464.405473][ T30] #0: ffffffff9030d7a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 464.415001][ T30] #1: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 464.424573][ T30] [ 464.436221][ T30] ============================================= [ 464.436221][ T30] [ 464.453130][ T30] NMI backtrace for cpu 0 [ 464.453154][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 464.453179][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.453196][ T30] Call Trace: [ 464.453204][ T30] [ 464.453212][ T30] dump_stack_lvl+0xe8/0x150 [ 464.453236][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 464.453317][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.453343][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 464.453368][ T30] sys_info+0x135/0x170 [ 464.453388][ T30] watchdog+0xfd3/0x1030 [ 464.453423][ T30] ? watchdog+0x1c9/0x1030 [ 464.453450][ T30] kthread+0x389/0x470 [ 464.453471][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.453492][ T30] ? __pfx_kthread+0x10/0x10 [ 464.453514][ T30] ret_from_fork+0x514/0xb70 [ 464.453540][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 464.453557][ T30] ? __switch_to+0xc79/0x1410 [ 464.453582][ T30] ? __pfx_kthread+0x10/0x10 [ 464.453603][ T30] ret_from_fork_asm+0x1a/0x30 [ 464.453634][ T30] [ 464.453640][ T30] Sending NMI from CPU 0 to CPUs 1: [ 464.574395][ C1] NMI backtrace for cpu 1 [ 464.574416][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 464.574436][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.574448][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 464.574476][ C1] Code: fb 7c 02 e9 c3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 b1 1f 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 464.574492][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 464.574509][ C1] RAX: 0000000000130255 RBX: ffffffff819a845a RCX: 0000000080000001 [ 464.574523][ C1] RDX: 0000000000000001 RSI: ffffffff8dfafc25 RDI: ffffffff8c28b9e0 [ 464.574536][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 464.574550][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 464.574563][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 464.574577][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 464.574593][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.574606][ C1] CR2: 00007f34f1e1fcde CR3: 0000000020f90000 CR4: 00000000003526f0 [ 464.574623][ C1] Call Trace: [ 464.574633][ C1] [ 464.574641][ C1] default_idle+0x9/0x20 [ 464.574664][ C1] default_idle_call+0x72/0xb0 [ 464.574689][ C1] do_idle+0x36a/0x5f0 [ 464.574717][ C1] ? __pfx_do_idle+0x10/0x10 [ 464.574744][ C1] cpu_startup_entry+0x43/0x60 [ 464.574766][ C1] start_secondary+0x101/0x110 [ 464.574784][ C1] common_startup_64+0x13e/0x147 [ 464.574819][ C1] [ 464.754728][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 464.761644][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 464.770782][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.780858][ T30] Call Trace: [ 464.784157][ T30] [ 464.787107][ T30] vpanic+0x56c/0xa60 [ 464.791123][ T30] ? __pfx___schedule+0x10/0x10 [ 464.795998][ T30] ? __pfx_vpanic+0x10/0x10 [ 464.800543][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 464.806763][ T30] panic+0xc5/0xd0 [ 464.810533][ T30] ? __pfx_panic+0x10/0x10 [ 464.814996][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 464.820424][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 464.826626][ T30] watchdog+0x102c/0x1030 [ 464.831011][ T30] ? watchdog+0x1c9/0x1030 [ 464.835468][ T30] kthread+0x389/0x470 [ 464.839577][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.844305][ T30] ? __pfx_kthread+0x10/0x10 [ 464.848946][ T30] ret_from_fork+0x514/0xb70 [ 464.853576][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 464.858743][ T30] ? __switch_to+0xc79/0x1410 [ 464.863462][ T30] ? __pfx_kthread+0x10/0x10 [ 464.868086][ T30] ret_from_fork_asm+0x1a/0x30 [ 464.872907][ T30] [ 464.876127][ T30] Kernel Offset: disabled [ 464.880475][ T30] Rebooting in 86400 seconds..