last executing test programs: 10.315770221s ago: executing program 2 (id=3075): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 9.715572113s ago: executing program 2 (id=3080): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac86fa3e823bff705acd262e2281"], 0x3c}}, 0x8000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 9.394304414s ago: executing program 2 (id=3081): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "001400000000009200"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r8, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x41ecc6a7, 0x2}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newqdisc={0x24, 0x14, 0x20, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0xf, 0x9}, {0xbc5b9898586e0cba, 0x9}, {0xf, 0x9}}}, 0x24}}, 0x44) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) bind$netlink(r12, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r13, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a002d7b2ef450f62422d0af21aaf45682f8dcb5b3e1c8ed649657a29bd9c5961dcb5c35e959d193e059ecdca757ecf8eebf02a5173d056227ee020340e1856ad7649c6a1b3c9a02f00ebbf7e06414cf53fcfee0e73684a88e1e505957f90b964133b306ee15696dc9e14e398434e88a96cd004f2d7ded0f725a104d679e9079b2da91e817d2b6cf3720b8acee88b45acb81acb8593aa199e306e3b6875a47f2c112b9fa69f5417e9537cd5a644b21278467327720419141e5ce23a6c5c83217fcd960a43d725a", @ANYRES32=r13, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x1d, r13}, 0x10, &(0x7f0000000640)={&(0x7f00000005c0)={0x7, 0x800, 0x5, {r14, r15/1000+60000}, {0x0, 0xea60}, {0x4}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x1a, 0x0, 0x0, 0x0, "8ff0444e8e51394947226f9ef0a3f2e1297cae60990226f81f28839bba032e892ce32c9446fc5c6916d4f7d71361599af3d958c78c2f4d548f24d33251432cbb"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0xc000) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r16, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@delqdisc={0xe8, 0x25, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0x3}, {0x9, 0x1a}, {0xfff9, 0x7}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa5, 0xed, 0x1480, 0x5, 0x2, 0x2, 0xa5, 0x3}}, {0xa, 0x2, [0xf92, 0x7, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xf0, 0x2, 0x7000, 0x2, 0xa8, 0x4, 0xa}}, {0x18, 0x2, [0x2, 0x5, 0x0, 0x4, 0x5, 0x80, 0x0, 0x4, 0x3, 0xabc]}}, {{0x1c, 0x1, {0x4b, 0x8, 0x90, 0x2, 0x2, 0x8, 0x1, 0x1}}, {0x6, 0x2, [0x401]}}, {{0x1c, 0x1, {0xc, 0x7, 0x5, 0xfb, 0x1, 0xf7d8, 0x668, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48895}, 0x4) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000002500010125bd7000fbfffffe0b00000008000300470000001f0050"], 0x3c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) 6.970676281s ago: executing program 2 (id=3087): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xfff2}, {0xffe0}}}, 0x24}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x2500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) 6.549038195s ago: executing program 2 (id=3091): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000003400000008007300000000000e0001006e65746465"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.157063175s ago: executing program 2 (id=3095): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f00)=@newtfilter={0x4c24, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4bf4, 0x2, [@TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_CGROUP_ACT={0x34b8, 0x1, [@m_simple={0x164, 0xd, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffffe, 0x8, 0x1, 0x3, 0xe}}, @TCA_DEF_DATA={0xc, 0x3, '#$-#!\xe2&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x56, 0x4, 0x2, 0x2a5, 0x7fffffff}}, @TCA_DEF_DATA={0x8, 0x3, '$^+\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'SET\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x400, 0x3, 0xffffffffffffffff, 0x401, 0x800}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x0, 0x7, 0x10000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x36f7, 0xa, 0x1, 0x8}}, @TCA_DEF_DATA={0x7, 0x3, '{,\x00'}]}, {0x99, 0x6, "04bbaa4386e921c145043275fa3e937bb2730c60f408e93a47248b6cedda8cc022cc1f6f02e5e3e53dc12af9ee732061a3f9ad0c76f2a01bb1ea91898a8d5beac28adbb9869b81515fd419772e87d5b61a145a7a1725b18138a20b878bcfb036ce97ab1037b8465bc7df632bf7b9eb696fedc88bf714c395076a0872afbe8dcb7be70a1dc168e78e646c98c3e0bcd2c4ee0389a134"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x68, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0x31, 0x6, "001e36eb37ea6857cbb36958e1aa5d8a04d6a8427fa174f7ef6952d62d2e1bd8ff700e6274a493fc431cdea900"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_tunnel_key={0x150, 0x19, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0x117, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x1b8, 0x3, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a, 0x2, 0xffffffffffffffff, 0x401, 0x6}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x837, 0x7, 0x3, 0x8, 0x30}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0xb, 0x8, 0x6, 0x10}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x1000, 0x6, 0xff, 0x7}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x1, 0x8, 0x1, 0x7fff}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x0, 0x5, 0xfffffffb}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xdeb, 0x1b, 0xffffffffffffffff, 0x4d8c, 0x6}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x1, 0x20000000, 0x8, 0x9}, 0x2, r5}}]}, {0x8c, 0x6, "538f2c4d2d172a8b69dac45fd2b4cbdd4dcb04295e8792e5978b68db6b625e67c41afd48769b2641f2b8580e05ffbd1ed1cf56d548522126b0d31a49e0d705445b9dd8e5ea6acee76e637742e542011848c87e93e8ab7c63a8188b1b12e558b8da98412f95496080c7d4f2921bb7dd32d8a4fdfaf446c59ca5d7cca7918af9d07d046971f3faa127"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x124, 0x4, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x38000000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffffffff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x8, 0x0, 0xa60, 0x7f}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xf, 0x9, 0x5, 0x9340, 0x114}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0xa8, 0x6, "67c2e3ae38aabb84b727e498ab4a1ab42d6df1cf6b83b804e46968e6f43225a31c401af9b5d3b4ef18bbbafe6b409f1b36d3bc8a8b1f53b5ee13632aa7cea7ab9413c92fd1ac3dde7ab1db60d1986654e78ac2a232a7f01f40c28fb4239063c038f7cde06f75dc6fcec45f7c407fc47e3b39c9f7863bf942addc3a40409a0e180410ebf1a83ab738bf7acf01328c73a0dc11970fd798b25dcc4b746a8aed7ff94ced27e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x2ebc, 0x16, 0x0, 0x0, {{0xa}, {0x1e90, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x5, 0x2, 0x3, 0x7, 0x9}, 0xe4, 0xa, [{0x3e27, 0x49, 0x0, 0xd0c, 0x7fffffff, 0x3}, {0x200, 0x0, 0x200, 0xa78, 0x7, 0x4}, {0xcf38, 0x695, 0x5, 0x9, 0x2, 0xc}, {0x401, 0x0, 0x101, 0x7, 0x8, 0x8}, {0x4, 0x4, 0x2, 0x7, 0x9, 0x2}]}, [{0x7, 0xa, 0x340, 0x4, 0x1, 0x6}, {0x9, 0xffff, 0x7, 0x3, 0x3, 0x1}, {0x100, 0x3, 0x4, 0x2fc7, 0x7, 0x2}, {0x80000000, 0xfffffff5, 0x1, 0x8, 0x4}, {0x85, 0x6, 0xf, 0xb, 0x0, 0x10000}, {0x3, 0x7, 0x3, 0x8, 0x8df, 0xffff0001}, {0x3, 0xf, 0x0, 0x200, 0x3, 0x6fa61e5f}, {0xe8e, 0x200, 0x8, 0x7, 0x5}, {0x200, 0x81, 0x8, 0x7, 0x5, 0x14}, {0x4, 0xe3, 0x9, 0xd387, 0x9, 0x7fffffff}, {0x3, 0x6, 0x1, 0x9, 0x9, 0x45270b6d}, {0x2, 0x0, 0xa, 0x6, 0x1000, 0x5}, {0x1, 0xff, 0x80000000, 0x7, 0x9, 0x56e}, {0x7, 0x9, 0x2, 0x8, 0x1}, {0x2, 0xffffffff, 0x1, 0x7, 0xb6, 0x1}, {0x9, 0x7fff, 0x6, 0x200, 0x788, 0x80}, {0x8, 0x10000, 0x94, 0x200, 0x6d0, 0x200}, {0x2, 0x100, 0xc, 0x81, 0x0, 0x40}, {0x9, 0x4, 0x1, 0x1, 0x2, 0xffff}, {0x1, 0xd0, 0x8, 0x0, 0xfffffff7}, {0x9, 0x7fff, 0x1, 0x5, 0xf9c, 0x8}, {0xfffff80c, 0x2, 0x6, 0x6, 0x10, 0x8}, {0xf, 0xfffff800, 0x0, 0x8, 0xfe50}, {0x2, 0x9, 0x8001, 0x9, 0x80000000, 0x2}, {0xb81, 0x0, 0x81, 0x1, 0x7ff, 0x2}, {0x10001, 0x7, 0x6, 0x9c7, 0x3e72a2d5, 0x7}, {0x200, 0x101, 0x7, 0x1000, 0xffffff15, 0x7}, {0x0, 0xe, 0x1, 0xfffffff0, 0x4, 0x4}, {0x5, 0x3, 0x1837, 0x6, 0x0, 0x6}, {0xe6, 0x9, 0x552b9182, 0xd, 0xa2de, 0x2}, {0x704f, 0x7a72, 0x7, 0x800, 0x7}, {0x2, 0x7ff, 0xffff, 0x8, 0xe, 0x7}, {0x0, 0x2, 0xa0a7, 0xab, 0x1, 0x7}, {0x6, 0xf, 0x8, 0x7, 0x9, 0x40}, {0xd2c, 0x1, 0x2, 0x8, 0xb, 0x9}, {0xfffffff0, 0xa, 0x6, 0x5, 0x1, 0x8}, {0x3, 0x7, 0x5, 0xa, 0x1}, {0x9d, 0x5, 0x5d92d95e, 0x7ff, 0x8001}, {0x7, 0x7, 0xb, 0xfffffffc, 0xc5b}, {0x0, 0x8001, 0x6, 0x7, 0x2, 0xffffffff}, {0x400, 0x9, 0x10, 0x5, 0xe2, 0x81}, {0x8, 0x3, 0x3, 0x2, 0x0, 0x30f6}, {0x6, 0x10000, 0x81, 0xfffff000, 0xd041, 0x2}, {0x8, 0x7, 0x4, 0xef53, 0x9}, {0xf69, 0x2, 0x2, 0x1ff, 0x3, 0xfffffffe}, {0x81, 0x7, 0x8001, 0x9, 0x7fff, 0x7f}, {0x0, 0x1, 0x7, 0xc25, 0xffff, 0x4}, {0x4, 0xe39, 0x7, 0x6, 0x1000, 0x1}, {0x0, 0x80, 0x100, 0x9, 0xfffff076, 0x1}, {0x0, 0xf986, 0x6, 0x5, 0x30, 0x2}, {0x4, 0x8, 0xfffffff8, 0x9, 0xffff, 0x6}, {0x1, 0x9, 0x3, 0x1, 0x7}, {0x5, 0x2, 0x4, 0x0, 0x907, 0x80}, {0x3ff, 0xc, 0x1, 0x8100, 0x1, 0x2}, {0x1000, 0xffffffc0, 0x8, 0x6c, 0x9, 0xffffffff}, {0x2, 0x2, 0xad, 0x2, 0x9a88, 0x4}, {0x8, 0x1, 0x2, 0x9, 0xa, 0x80000001}, {0x7, 0x0, 0xfffffffa, 0x0, 0x9, 0xc4b1}, {0x1, 0x7, 0x5, 0xfff, 0x3}, {0x5, 0xa282, 0x80, 0xfffffffa, 0x5943, 0xe}, {0x6, 0x6, 0x4, 0xb, 0x4}, {0x9, 0x9c2c, 0x7, 0x1, 0x7, 0x3}, {0x7ff, 0x255622ca, 0x5, 0x8, 0xfffffffb, 0x57e}, {0x2, 0x200, 0x81, 0x2, 0xb, 0xff}, {0x7, 0x1db, 0xfffffffe, 0x8, 0xfffffff8, 0x10}, {0x6, 0x8, 0x9, 0x8, 0x6, 0x2}, {0x1000, 0xfff, 0x4, 0xa, 0x4e9b4944, 0x6}, {0x2, 0x401, 0xc7c, 0xfffffffb, 0xeac8, 0x4}, {0x3ff, 0xaea, 0x7fff, 0x9, 0x80000000, 0x7f}, {0x9, 0x10001, 0xffff0001, 0x8, 0x8, 0xff}, {0x3de6, 0x2, 0xfffffffa, 0x3, 0x11, 0x8}, {0x7fffffff, 0xfffffff7, 0x6, 0x4, 0x8, 0x6}, {0x7fffffff, 0xec8, 0x7, 0x6, 0x1, 0x3ff}, {0x9, 0x4, 0x1, 0xb33, 0x9, 0x9}, {0x10000000, 0x0, 0x9, 0xf0000000, 0x8, 0xbce}, {0x2, 0xe5, 0xff, 0x3, 0x8, 0x3}, {0x80, 0xeea, 0xf, 0x2, 0x40, 0x30b}, {0x7f, 0xffffffff, 0xfffffffb, 0x293, 0x7, 0x4}, {0x1, 0xbe10000, 0x8, 0x7fff, 0x80, 0x8}, {0x8, 0x7, 0x1, 0x800, 0x15, 0xffffff35}, {0x9, 0x7, 0xef7, 0x0, 0x3, 0xfff}, {0xa, 0x6, 0xfffffffb, 0x8, 0xd3b7, 0x6}, {0x9, 0xe5, 0x2, 0x2, 0x9, 0x4}, {0x79, 0x81, 0x4, 0x2, 0x7, 0x8}, {0x3, 0x4, 0x5, 0x1, 0x5, 0xffff}, {0x5, 0x1, 0x5, 0x1, 0x101, 0x7}, {0x2, 0xfffffffd, 0x1, 0xfffffffd, 0x7, 0x8}, {0x6, 0x1, 0x400, 0x440c, 0x3, 0x4}, {0x7e7c, 0x0, 0xffffe3be, 0xffff, 0x1, 0x7f}, {0x3, 0x3, 0x2, 0x60, 0x31, 0x7f}, {0x6, 0x8, 0x1, 0x8, 0x1000, 0xb92}, {0x2, 0x9, 0x7ee, 0x9, 0xfffffff1, 0x6}, {0x5, 0x100, 0x81, 0xe4, 0x6, 0xffffffff}, {0x7, 0x0, 0x0, 0x1, 0x1, 0x6}, {0x8, 0x77, 0x0, 0x2, 0x1, 0x6}, {0xf, 0xbb, 0x5, 0x5, 0x3, 0x80000000}, {0x9, 0x2, 0x1, 0x8, 0x0, 0x10001}, {0x400, 0x4, 0x7fff, 0x307f, 0x4, 0x2}, {0x6, 0x8, 0x8, 0x8001, 0x3}, {0x7, 0xffffffff, 0x9, 0x5, 0x6, 0x4}, {0x5, 0x1000, 0x7ff, 0x3ff, 0x4, 0xab8a}, {0x9, 0x1, 0xd65, 0xef44, 0x2, 0x81}, {0x3, 0x3, 0x6, 0x1, 0x4, 0xca2}, {0x0, 0x0, 0xcf7e, 0x9, 0x9, 0x7}, {0x6, 0xf, 0x401, 0x3, 0x40000, 0x4}, {0x4, 0x0, 0xb, 0x9, 0x5, 0x80000001}, {0x8, 0x401, 0x9eb, 0x0, 0x81}, {0x8, 0x7f, 0xfe4c, 0x0, 0x7, 0x1000}, {0xfffffff5, 0x4, 0x2, 0x3, 0x3, 0x3}, {0x6, 0x3, 0x3, 0x0, 0xfffeffff, 0x4}, {0x5, 0x6, 0x9, 0x6, 0xc, 0x80000000}, {0x3, 0x9, 0x8, 0x0, 0x2db2, 0x9}, {0xc4, 0x0, 0xaa0, 0x8001, 0xc, 0x4}, {0x5, 0xffffffff, 0x7fff, 0x7, 0x8001, 0x7}, {0x6, 0x6, 0x1ff, 0x1, 0x0, 0x7}, {0xfffffffe, 0x9, 0x8, 0x800, 0x1000, 0x8}, {0x7ff, 0x8, 0x80000001, 0x4e24, 0xa3, 0x8000}, {0xfffffff7, 0xb, 0x27320000, 0x2, 0x3, 0x3}, {0x2, 0x7, 0x1, 0x7, 0x8000, 0x100}, {0x5, 0xfffffff5, 0x9, 0x5, 0xb, 0x7}, {0x0, 0x8, 0x4a1df0d4, 0x0, 0x1, 0x6}, {0x4, 0x80000001, 0x4, 0xfffffcd1, 0x9, 0x2}, {0x7054, 0x81, 0x6, 0xee0, 0xc, 0xf}, {0xf, 0xf4, 0x40, 0x2d5, 0x7, 0x1974}, {0x1, 0xfff, 0x7fffffff, 0x2, 0x8001}, {0x0, 0x800, 0x9f, 0x3, 0x0, 0xb}, {0x9, 0x2, 0xfffffff8, 0x7ff, 0x5, 0x4}, {0x6, 0x2, 0xcb5, 0x3, 0x3}], [{0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x2, 0x1}, {}, {0x3}, {}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x4dd20bc43d7b04f9}, {0x3}, {0x5}, {}, {0x5, 0x1}, {0x859ed351227ee277, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x5}, {0x2}, {0x3}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x4}, {}, {0x2}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x1}, {0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {}, {0x5, 0x1}, {0x0, 0x577f24ba89ddc87f}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x4}, {0x7, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x2}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x6, 0xfea8e9168f82535e}, {0x1}, {0x5, 0x1}, {0x5}, {0x5}, {}, {0x5, 0x1}, {0x5}, {0xe1f10cf71c75ae3c}, {0x4}, {0x2}, {}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x3f7ac77be1f45d4a, 0x1}, {0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x2d, 0x10000, 0x6, 0xf8ce, 0x40}, 0xf8, 0x7, [{0x3, 0x9, 0x55, 0x1, 0x2, 0x5}, {0x5, 0xbd0d, 0x9, 0x1ff, 0x3, 0xe76}, {0x6, 0x6, 0x0, 0x7, 0x4, 0x1}, {0xffffffff, 0x1, 0x9, 0x9}]}, [{0x0, 0x705b094b, 0xfff, 0x9, 0x8, 0x8}, {0x3, 0x6, 0x3, 0x6, 0x7, 0x4768}, {0x40000000, 0x0, 0x9, 0x3, 0x80000001, 0x3}, {0x100, 0x9, 0x8, 0x6, 0x1, 0x2}, {0xf46, 0x5, 0x7, 0x4, 0x3}, {0x8, 0x4, 0x9, 0x6, 0x9, 0x6}, {0x10000, 0x9, 0x7648, 0x4, 0x5, 0x8000}, {0x4, 0x53080000, 0xd38, 0x7f, 0x2, 0x4}, {0x706, 0x80, 0x7, 0x4, 0x0, 0xf}, {0x45e, 0x0, 0x10000, 0x4, 0x9, 0x666a}, {0x1ff, 0x2, 0x2, 0x0, 0x3, 0x3}, {0x3, 0x6, 0xd, 0xffffffff, 0x7, 0xfffffff7}, {0xf77, 0x6, 0x80, 0x200, 0xae3e, 0x3ff}, {0xe52000, 0xb, 0x0, 0x82, 0x5, 0x80000000}, {0xfffeffff, 0x8, 0x101, 0x9, 0x7, 0x10000}, {0x1, 0x6, 0x7, 0xe35, 0xd, 0x800}, {0x5, 0x1, 0xa, 0xf0000000, 0x14, 0x1}, {0x1, 0x9, 0xff, 0x5, 0x9, 0x9b}, {0x2, 0x1, 0x8, 0x6, 0x0, 0xfb1}, {0x72d3, 0x1595, 0x8, 0x80000000, 0x2, 0x2}, {0x80000000, 0x6, 0x2, 0x2, 0xe, 0xee}, {0x3, 0xdab, 0xf, 0x9, 0x3, 0x7}, {0x9, 0xcd, 0x7, 0xbe5, 0x4, 0x7}, {0x5, 0xbd58, 0x1000, 0x5, 0x1ff}, {0x1, 0x4, 0x7fff, 0x9, 0x27, 0x4}, {0x629946eb, 0x10000, 0x5, 0x844, 0x0, 0x2}, {0xefaa, 0x4, 0x7fffffff, 0x1000, 0x7f, 0xfffffff7}, {0xf1, 0x9, 0x4c, 0x9, 0x6, 0x3}, {0x4, 0x0, 0xf, 0x8, 0x9, 0x317}, {0x0, 0x9, 0xb, 0x0, 0xff, 0x54d0}, {0x10000, 0x5, 0xffffffff, 0x8, 0x7fffffff, 0xfffffffc}, {0x4, 0x9, 0x9, 0x0, 0x6, 0x4}, {0x9, 0xa, 0xd, 0x787, 0x8}, {0xffffffff, 0x1, 0x1, 0x1, 0x3ff, 0x5}, {0xfffffff7, 0x7, 0x7, 0x100, 0x1, 0x6}, {0x9e17, 0x4, 0x64, 0x5, 0x7, 0x1}, {0x65, 0x2, 0xffffff01, 0x8, 0x9f91, 0x2}, {0x8, 0x10, 0xa, 0x9, 0xff, 0x2}, {0x3, 0x0, 0x8001, 0xffffffc3, 0xf17b, 0x101}, {0x6, 0x9, 0x2, 0x9, 0x8000, 0x10001}, {0x401, 0x7155, 0x4f6, 0x9, 0x1, 0x80}, {0x23d, 0x39400000, 0x3, 0x5, 0x2, 0xfffffffc}, {0x1, 0x80, 0x8, 0x54, 0x8, 0x200}, {0x4, 0x6, 0x64d, 0xc528152a, 0x10, 0x9}, {0x6, 0x0, 0x1, 0xb, 0x0, 0x8}, {0x2, 0x2, 0x8, 0x6, 0xfffff347, 0x8}, {0x5, 0x8, 0x1f86, 0x7ff, 0x0, 0x3}, {0x4, 0xb, 0x6, 0x3, 0x1, 0x10000}, {0x5, 0x18, 0xfffffff8, 0x6, 0x55, 0x6}, {0x6, 0x8ff, 0xff, 0x200, 0x1, 0x2}, {0x3e3, 0x10, 0x1, 0xdfc6, 0x1, 0x8}, {0x100, 0x6, 0xde0, 0x0, 0x401, 0x100}, {0x2, 0xc67, 0x5, 0x5, 0x3, 0x9}, {0x0, 0x2, 0x3, 0x2, 0x966e, 0x6}, {0x7, 0x1, 0x937161a, 0x1ff, 0x6, 0x7dc}, {0xfffffffa, 0x1, 0x7, 0x9, 0x0, 0x5}, {0x5, 0x80, 0x6, 0x8, 0x2, 0x1}, {0x1000, 0x6282, 0xc12, 0x8, 0x7bca04a9, 0xe}, {0x9, 0x6, 0x1, 0x355c4ebf, 0x100, 0x2}, {0xb29, 0x9, 0x1, 0xb, 0xe, 0xe}, {0x4, 0x8000, 0xffff79c0, 0x8, 0x9, 0xf9ef}, {0x10001, 0xf, 0x5, 0x9, 0x9, 0x9}, {0x5, 0x2, 0xbed, 0x2}, {0x5, 0x7, 0x6996, 0x0, 0x7ff, 0x9}, {0xffffffff, 0x7, 0x5800, 0x100, 0x5, 0x9}, {0x2, 0x4, 0x6, 0xda, 0x9, 0x9}, {0x1ffe, 0x3, 0x5, 0x8000, 0xcb8, 0x2}, {0x8, 0x1, 0x7aad, 0x2, 0x8001, 0x5}, {0x99e000, 0x6, 0xd9, 0x5, 0x674, 0x7ff}, {0x0, 0x7f, 0x9, 0x1, 0xfffffffa, 0x5}, {0xedd, 0x5, 0x8, 0x10000, 0x6, 0x3ff}, {0x0, 0x9, 0x7ea, 0xec5, 0x2, 0x2}, {0x9, 0x5, 0x1, 0x8, 0xb, 0x6}, {0x4, 0x7, 0x2, 0x5, 0xfffffff9, 0x2}, {0xfffffffa, 0x80, 0x3, 0x7, 0x3, 0x4}, {0x8, 0x7f8b, 0x1, 0xe, 0xfffffffd, 0x1}, {0x5, 0xffffffff, 0x6, 0x5, 0x580, 0x6}, {0x10, 0x0, 0x5, 0x9035, 0xfffffff4, 0x80000000}, {0x2, 0x7, 0xfd, 0x6, 0x9, 0x5}, {0x3, 0xb2a, 0x1, 0x4, 0x8, 0x8}, {0x0, 0x630, 0x4, 0x800, 0xcf0, 0xfffffffc}, {0x8, 0x4, 0x5, 0x2, 0xf, 0x9}, {0x400, 0x8, 0x80, 0x90a0, 0x1, 0x3a}, {0xafe, 0x5, 0x7, 0x0, 0x251, 0x76bb}, {0x8, 0x7, 0x22c4, 0x80000001, 0xfff, 0x10001}, {0xc8f, 0x4, 0x9, 0x10, 0x3, 0xfffffffe}, {0x400, 0x8, 0xffffffff, 0x74b6, 0xfffff20b, 0x2}, {0x4cf, 0x3, 0x2, 0x80000001, 0x8000, 0x1}, {0x101, 0xff, 0x0, 0x8, 0xffff}, {0xffff, 0x0, 0x4, 0x100, 0x2, 0x3}, {0x100, 0x2, 0x1, 0x7, 0x3, 0xb}, {0x1, 0x401, 0x1, 0x80, 0x451, 0xffff4d32}, {0x0, 0x0, 0xf, 0x45, 0x55cd, 0x1000}, {0x2, 0x3, 0xc8d6, 0x40, 0x8, 0xfffffffd}, {0x2, 0x8, 0x10000, 0x9, 0x5, 0x3989}, {0x8000, 0x2, 0x3, 0xfff, 0x4, 0x14}, {0xfffffff2, 0x2, 0x9, 0x80000001, 0xa1, 0x3}, {0x8, 0x0, 0x8, 0x8, 0x7, 0x6}, {0x1, 0x7, 0x5, 0xcd, 0x10e3, 0xfffffffc}, {0xfffffff2, 0x6, 0x3, 0x8461, 0x6e, 0x8001}, {0x4, 0x9, 0x6, 0x8a, 0x3, 0x4}, {0xb9c2, 0x2, 0x5, 0xfffffff7, 0x7, 0x7fffffff}, {0x8, 0xb, 0x5c, 0x3, 0x4, 0x8}, {0x1, 0x3, 0x3, 0x4, 0x4a}, {0x7, 0x10001, 0x7, 0xa, 0xfffffff9, 0x7}, {0x400e, 0x3, 0xf8000000, 0x7f, 0x7}, {0x4de1, 0x9, 0xc9a, 0x6, 0x3a, 0x2}, {0x8000, 0x2, 0xe, 0xf9, 0xd8, 0x7}, {0xe, 0x8001, 0x5, 0x8, 0x0, 0x4}, {0x7, 0x4, 0x80000000, 0xcd, 0x0, 0x5}, {0x2e5, 0x8, 0x40, 0x9, 0x1, 0x5}, {0x7, 0xfffffffc, 0x7fff, 0x0, 0x4, 0x8001}, {0x10, 0x7fff, 0x2, 0x4, 0x9960, 0x7}, {0x6, 0x0, 0xffffffff, 0x2, 0x80000001, 0x3ff}, {0xf, 0x80, 0x0, 0x2, 0x7, 0x1}, {0x8001, 0xffffffff, 0x4, 0xd, 0x3, 0x4}, {0xffffffc0, 0xfb0c, 0xe7, 0xc, 0x3}, {0xd583, 0x7, 0x0, 0x3, 0x2, 0x8}, {0x733, 0x3, 0x8, 0x8, 0x3ff, 0x4}, {0xf53b, 0x80000000, 0x4, 0x0, 0x3}, {0x7, 0x7, 0x1, 0x6, 0x1, 0x6}, {0x8, 0x85, 0x1, 0x6, 0xfff, 0x8}, {0x400, 0x0, 0x6, 0x4, 0x4b, 0xc}, {0x8, 0xa932, 0xb, 0x80800, 0x6, 0x21fc}, {0x3000, 0x680, 0x4, 0x52, 0x7f, 0x8}, {0x10000, 0x4, 0x10000, 0x8, 0x10, 0x9}, {0x8, 0x7, 0x4, 0x5, 0xb9, 0x6}, {0x0, 0x0, 0x10001, 0x80, 0x5, 0x140a}], [{0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x8d4a2507d0078e6c, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {}, {0x2}, {0x3}, {0x4}, {0x4, 0x1}, {0x7}, {0x6, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x2}, {0x2}, {0x3}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x7, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xd4, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0x4}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_CGROUP_EMATCHES={0x80, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xff, 0x7, 0x1ff}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x503, 0x2, 0x9}, {0x7, 0x7, 0x1, "56841e9129acb5"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfc01, 0x3, 0x10}, {0x4, 0x8001, 0x6, 0xfffffff9}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0xfffc}, {0x3, 0x0, 0x6}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7}, {0x7, 0x80c0, 0x2fb, 0x4, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_CGROUP_EMATCHES={0x1224, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x1e66}, {0x0, 0x1, 0x1}}}, @TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x101}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xd9, 0x1}, {0x8, 0x1, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x10, 0x1}, {0x7f, 0xc, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x7f, 0x3}, {0x6, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}]}}]}, @TCA_EMATCH_TREE_LIST={0x105c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x7}, "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"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0xa4}, {0x588, 0x3, 0x7, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xf9, 0x3, 0xd}, {0x9, 0x80000000, 0x2, 0x8000}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x1}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xea4}}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x40, 0x2, 0x0, 0x0, {{0x3ff, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0xe81b}, {0x2, 0x5}}}, @TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x1068}, "8311456acb08e21415fc1de2e323feb43f4fe1b97f373d7f733b26a058a26830a649c0d2500f3caf1216fd3bbebbe6a9041b899c0de4485eb0fa98b04afb8d259fcbba13c49aa50936abe5ebfdce201117b069e87ba66aca5807a27710120b53386f2c5247a204041515e8b4a8169623757706bd80cb508de11763dc623154bd878cc70306db29df8d41d22ffd0ea490202903d82f0a4c3ec8131ad6"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x9, 0x2, 0xf37a}, {0x82b, 0x7, 0x2, "d61198f36cf757"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x101, 0x8, 0x7fff}, {0x3, 0x6, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x9}, {0x8, 0x9, 0x9, 0x9}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x2, 0x1}, {0x5, 0x7, 0x1}}}]}}]}]}, @TCA_CGROUP_POLICE={0x47c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8d, 0x80, 0x7, 0xffffffff, 0x36dc, 0x40, 0x7, 0x4, 0x0, 0x400, 0x2, 0x3, 0x3, 0x1, 0x6, 0x101, 0xfffff4f8, 0x1, 0x4, 0x7, 0x0, 0x5, 0x7, 0xe1, 0x7fffffff, 0xb9c, 0x7, 0x8, 0x4, 0x4, 0x9, 0xfffff788, 0x9, 0x1, 0x4, 0x8, 0xfffffff7, 0x7, 0x8, 0x0, 0x0, 0x1ff, 0x2, 0x9, 0x7f65, 0x63, 0x5, 0x1, 0x6, 0x1ff, 0xfffffffa, 0x7ff, 0x40, 0x7, 0x0, 0x7f, 0x2, 0x7fffffff, 0x7fff, 0x7f, 0x6, 0x7fd, 0xffffffff, 0x1, 0x3, 0x7, 0x8, 0x7, 0xe, 0x3, 0x7c, 0x7, 0x7, 0x8, 0x4, 0x40, 0x5, 0x6ccf, 0xffe0000, 0x556, 0x2, 0xed0, 0x77b4, 0x81, 0x7, 0xf8b, 0xffffffc0, 0x4b, 0x4, 0x0, 0xb, 0x3, 0x0, 0x8, 0x8, 0x9, 0x8, 0x5, 0x100, 0x9, 0xfffffffb, 0x6, 0x2, 0x1, 0x2, 0x400, 0x400, 0x41a, 0x80000000, 0x6, 0x4, 0x79, 0x2, 0x5, 0xe3, 0x8, 0x4, 0xe8, 0xd, 0x4, 0xc, 0x9, 0x8, 0x10000, 0x9, 0x7, 0x10001, 0x8000, 0x8, 0xfffffff8, 0xfffffffc, 0x4, 0x4, 0x81, 0x50, 0x0, 0x9, 0x2, 0x7221, 0x5, 0x3, 0x1, 0xfffffffc, 0x7, 0x6eb, 0x122, 0x0, 0x3ff, 0x3ff, 0x8, 0x8, 0x6d2, 0x5c, 0x9, 0xb4, 0x0, 0xffffffff, 0x5, 0x78f1, 0xd, 0x3, 0x55a15235, 0x2, 0x1, 0x1, 0x3, 0x400, 0x7, 0x4a6, 0x1, 0x561431d7, 0x9, 0x5, 0x3, 0x40, 0x27, 0x80000001, 0x8, 0x159b, 0x0, 0xe5, 0x9, 0x7fff, 0x1, 0x0, 0x7, 0x0, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x1, 0xe9, 0x1, 0x9, 0x7, 0x5, 0x0, 0x4, 0x1ea, 0x6, 0x7, 0x1fbc, 0x7, 0x80, 0x8000, 0x10, 0x1, 0xd0, 0x7, 0x2, 0x74, 0x4, 0x4cc6, 0x8, 0xe, 0x8, 0xffff912f, 0x7, 0xfffffff4, 0xf1, 0x9, 0x10, 0x9, 0xfffffa53, 0x1, 0x4, 0x49, 0x1, 0x1, 0x7, 0x4, 0x7, 0x6, 0x6, 0x6, 0x0, 0x10, 0x1, 0x7, 0x10, 0x49723640, 0x7, 0x9, 0x8, 0x5, 0xd40, 0x800, 0x8, 0x7, 0x80, 0x225f, 0x7, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x17f9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x5, 0x9a65, 0x7, {0x0, 0x1, 0x4, 0x7f, 0x9, 0xcf91}, {0x4, 0x2, 0x3, 0xfff6, 0x3, 0x3004}, 0x2, 0x2, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xeda}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}]}}]}, 0x4c24}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800402e005c00660000080190780a010102ac141417441c16100000000200000005000000000000001000000000ffffffff860bd78086a940258792d54fa30001000000050290787f000001455f0501006607f2482f000f00000000ac14"], 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:* mw'], 0xa) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000280)="ce", 0x1}], 0x1) shutdown(0xffffffffffffffff, 0x1) 4.593406402s ago: executing program 4 (id=3111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f00000002c0)="1c1e80dd7b6692018e4e28cbd8669963c48fa1a1241ff3ab6f386dead1c40ef2ca674ba77d2c075ad2fe5b7261be4e2f566a33e50a6ed4af8ed1e52e12d909", &(0x7f00000005c0)=@buf="1c0737cd27e2e137f1f97052deacabe721631a94963925945dfe59a2e175b2fc731ff569c0679e5f0f8c7a71b83198769999507446d0d88b729af5be56eaee62adcfb90ccada85f148e2bcb23da613c5266c78a49712acba604c8ff5cac3c5a5e3d77a8bc9707b8c160a063635767b404eaccb44db8489269d284df639275ac5e2b94243ec3624b608645b3987de2c3adb45791ea11ba2f3d2badf133cdf98190bad401d11be22704b069c30f48d7cfdd8e6d0ed45a9ec4059f5c7b544d152fbb5284f2632ff247dba0eea45227ff47690f88bf16c5baaf249f173591bdff17c48", 0x4}, 0x20) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000007464657673696d30000094296cf6d396aef54c39950b9fbcef9f74ec39d50de39cd79f3c5104e6986ca80b557e2242ca0f5ba0e4ff9f417d06e0a3624e27919eafbd879e72df8bfeb6c83a1c3a3af7a0e0aab7ed3fc9f8203e07c0d070aee87ace7df9be7de24e96565ac11ae16480b181a1590cf3523001113a4739788b12e00b5cedf815da293c3cdac497170e40d2691e657c3a0cb5ac123cbfc1e33b00"/203], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x21, &(0x7f0000000440)=0x1f5, 0x2) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x10}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername$packet(r9, 0x0, &(0x7f0000002740)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYRES32=r0, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x2000a0c0) sendto$inet(r0, &(0x7f0000000580)="17", 0x2c, 0x10008095, 0x0, 0x0) 3.62401748s ago: executing program 4 (id=3124): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac86fa3e823bff705acd262e2281"], 0x3c}}, 0x8000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 3.04830856s ago: executing program 4 (id=3127): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="20001280080001006774700014000280080001"], 0x48}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d411fffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (fail_nth: 1) 2.347393694s ago: executing program 4 (id=3135): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x6de, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x4, 0xf4, 0x0, 0x1}]}}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x3a) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x6, 0x9}, {0xf, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x6003}, @TCA_FLOWER_KEY_MPLS_OPTS={0x30, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) socket$netlink(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.278299543s ago: executing program 1 (id=3136): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) 2.115599658s ago: executing program 1 (id=3138): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.851124245s ago: executing program 1 (id=3140): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/177, &(0x7f0000000200)=0xb1) 1.524086823s ago: executing program 1 (id=3142): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffff", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000004000004b2d0d000000050007000f00000019000a000100000006000800535500"], 0x2c}, 0x1, 0x0, 0x0, 0x18005}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7, 0xfffffff1, 0x4, 0x20002, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0xb}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0d00000009000000040000000100000000000000", @ANYRES32=r6], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r7, &(0x7f0000001a40), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) poll(&(0x7f0000000240)=[{r5, 0x2220}], 0x1, 0x1000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r9) sendmsg$NLBL_MGMT_C_REMOVE(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r10, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '$\xfa\xe2\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100ffffff050000000001000040100007800c00018008000100", @ANYRES32=r12, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000"], 0x3c}}, 0x20000000) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv6_getrule={0x1c, 0x22, 0x1, 0x70bd27, 0x25dfdc00, {0xa, 0x0, 0x10, 0x8, 0x3, 0x0, 0x0, 0x3, 0x14}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r15}, 0x50) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r13, 0x8982, &(0x7f0000000080)={0x1, 'gre0\x00', {}, 0x1f}) 1.443210071s ago: executing program 3 (id=3143): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4401df04a70ffda791ad24726a0087fd", @ANYRES16, @ANYBLOB="010000000000000000003400000008007300000000000e00"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.21541289s ago: executing program 3 (id=3144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[], 0x120}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x4b, 0x800, 0x2, 0x800, 0x2, 0x0, [{0x7, 0x1000, 0x3, '\x00', 0x3403}, {0x1, 0x92a, 0x9e, '\x00', 0x2200}]}) 1.116141716s ago: executing program 3 (id=3145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ebf6ffff000000000a00000091019300000000009500000000000000cb675f2ffb11d92ff0efafd87f3a3486ffed5f9749e19eba88a362a0e4fdbd479c72801e81461593e0fd22d41b5b2a1dae73e4e4dcd211d04aea27e83a70f1ef78c56c844b8f3a442c62fc00683d750e235ee2dfedc0a73460498cb79a2a7b61e8903cff4f605933b57bc5323a29286167d1323882c47b"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0x5, 0x1}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x6, 0xfff, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0x7, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xbd, &(0x7f000000cf3d)=""/189, 0x1f00, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x4, 0xfffffffa, 0x0, 0x40000000}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) close(0x3) 1.086344724s ago: executing program 4 (id=3146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 917.657888ms ago: executing program 0 (id=3148): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @remote}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x6c, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x94}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x4}}]}]}}}, @IFLA_LINK={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 810.844927ms ago: executing program 0 (id=3149): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 798.222272ms ago: executing program 3 (id=3150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x40, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) 682.492993ms ago: executing program 3 (id=3151): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x18002, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000280)={0x5, 0x8, 0x2, 0x8}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x845}, 0x40000) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000102060100000000000000000000000a080004400000000608000940000000ab5c000740000200000800084000000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4000) 610.008248ms ago: executing program 0 (id=3152): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 567.521586ms ago: executing program 1 (id=3153): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4401df04a70ffda7", @ANYRES16, @ANYBLOB="010000000000000000003400000008007300000000000e0001006e65746465"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 552.990465ms ago: executing program 3 (id=3154): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000bc0)={'gre0\x00', 0x0, 0x8, 0x80, 0x1, 0x7, {{0x1e, 0x4, 0x3, 0x4, 0x78, 0x68, 0x0, 0xd, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@noop, @timestamp={0x44, 0x10, 0x72, 0x0, 0x0, [0xfffffffd, 0x9, 0x6]}, @timestamp_addr={0x44, 0x1c, 0x6d, 0x1, 0x4, [{@remote, 0xb}, {@broadcast, 0x6}, {@rand_addr=0x64010102, 0x8}]}, @timestamp_addr={0x44, 0x34, 0x14, 0x1, 0x2, [{@multicast1, 0x7fff}, {@empty, 0xe}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0xb63}, {@empty, 0x8}, {@multicast1, 0x4}]}, @noop]}}}}}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) sendmmsg(r0, &(0x7f0000005140)=[{{&(0x7f0000000a00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000002e00)="4f3699fbfa2e6879d57683005d04cdd6d16b24bab53549c2dff32eeead28f2df200628babbc8a31a4cc035440660a32c9f2133e509574932089e34597417374f5613ca7fe3f69f04206fe48b6bfd832f3c88fa5d9c4a15680bba7347667560bfdaff1b648092de11d70aa64759bb1a208cecc6aa3805fbb096856ddde79390fe58ebd4881b01c055e947120cc8676f5a6e8e454606a90df3d4236f3e6d84c7f33364c296733fcb709d40c41f56009075dd95e78da063defba87f4558a0712a559419ca64aa87f1d0db6978be2abef3a720141999a06b3d6c4236cae99e8aa78c2d537b19e08d0db8744170e4d7acd86421d493f384c969ffceeed2b0b5d1f2b2075341520f646f6367913c04551102c0aa311706d462c0ecf5a60b61bc9a6b4f246e2a3c8c2119f00f32924787f7ac344f6c093cee5784e36a70496d3c3979734800522bd725476ffed3618845df9b7fe80274f2e0e6886b41efe7524f4ba3c09783c2e6db98956bb6d9f16b5fdf0113d3454a26fda6c21d267401912878ba40637d372f154948bc196066432998f119cd15ea815ce9ccea6a767760e7bb2c1ff49aa47658a4750fc549cb3c82ce26a3c5a0d58e436b10b5d73284891dd3f41f55328aaa2ade7108e15886fa80281e5f25cea7e67fec663d5c22925ccc9b6cab27aac5dc22cbc5a3686d65d5ef6d4c81a453206b6a70b61cb49292602ca5853405dae15482e6f6eabc3686c61aba1f19aaf811677472b0b5b36093fbfa557675411cee7b0688d2a16777e6d32f6da1037a41a58503686d32155bb20e7accdd1edc2f118d67c7d482c4f84eca4ac7a46647d227a0e7236b2dbd4b85a8247cadebb582fe6e21495f5ee2c4ef45571d21742cbb3d781b255a755ee5c89e9351bf2219fcff05efa0c10fde5bb808f2cca45a62976340875f7b515b4ebadb5a61e8482c9894ce77fceeec594e01e25e6bea69a8eef841c16e0d80ca399032b1e28e00a2e0055620227ce8bf7d7add4437f3800c1bdcc3b0268e088d4f356d8d1027774af957c2e840424f846f2f5bc33bf6db396cf0cb852fbe9ac7d8acd25ab6607fe566ea93ab36e1535c78b1e860bc1a62c9ec6782b860e19f69028f27384510b432745cbcef66438c1e2c1ebdbaeefd968a5ab68fe643f414d83261855dd6facf56f55a86121020e273853f89ba5230fff270239656d1c7a37196a8039c3c7aabba892437055786d2bef950dbba273d581ccc88d3d1e1355404ed26acdfc26c45e256f8ca9934166aa7f12c509540860f8e2238ed5d74842b8028c8f5426c40ec5bb5c23a66cfce7a24bdd6ffbbf6e0d14ba18a75b4ff682fdc41a1512d022c82ec6bd5d3d956d9c35abba5ef11b3f56146ec0702fce340a25cc10fa255ff7857fd434bf10df9e3a869f4925f057f2af58c357ab3abb52aadc6fbd01616f05bea76dee24970fb3f84e393142ea181592620bbf42dfebcebb885e002cebc55dc6f95549792602a69c3f7effc0f5057a43582d95bdca955a3a0afb188eb59279924414f37d85aace75c823d0850f2a9579f227661c5f7c82dd57405e66b2e408635d9d3c5a57d4dbb84d9f85dc3bebb5625a3ccf198a9b60c3a3352f54b31309d7e740b478e5ba3839dccebc1551a81c5e68688dcfc3207662bc55900a61c725e623ea0afa0b531f74823cff313bce6d388bf8256aa5dd2fd8bc6a965fb7c68e195534910abbe135d4af3cb86f86f4e77583e2ae3f0f934cb37a823593940d1d60e5e45f2f7a3bdf21efe15c9026ffa59dbee6184d250884a3ff624cfedc0eec8568d2104f1b09aa184fcc7dd2e82015904d96e20a4b77d7c0abe73c5c6102f81fc07251115507aa5aa36ffbe4706afd5e88a711848b9ef33f6132d5d8a2077ceef2eda9c441ceba4270fde0c4b264f02d390321bbd081846af352e10630753293d060c0a0dfbd81c894e26ee462749a3502241557d065fec2586691f9608ce6f889a0088e0ffed432b66520faf392ec727d92b9a2ed24fb85bcf2d701e2b15501cdce10fee0d53e9dab104e3bbf84d7250d2623606717dd468deccd38f5037928d11e3b95c02e4a4bc8516852022b9c0fd62dc1ce18cf46862381a7866badc945aaf36f47d250f9f7329d573ee79c6e064319633506b27e97347c70a0c6eafe7b490b19beba21f036efccc238ae3a0bf13f81796b8f118c97dc59d190b30af83466fae42fafa9041d6c56362d77a0691c7e90f280ef8901d016b45a214467f06d32bd56325419c979ceba68c62094a6d5b24a88d48f947986a23e0f5223c813979b1737b8bb8489d2a424a5cb1e4617949f8fb3a08cae690a16a50f5aa9c04b838a4bad4b6a76f23e415837970eeac03f262f6dc3135a28df2dcee3d69d6d35208771003f5dab9ac3b99d87e63c783b472923ea606b73a285ee0976f12fb7f834c249808b4542d01ad613c8f914aa65c3559027c62120e1ed80e7a62b650c0383509aa6a77851091344df96f93e780c31be38b3226848c3b65cc297b9061d7291f04e136e981626f0d423adbc7f24137a636e65bf9bd9fabc91862c79ff3c536135c08c355cc4f62bd494c96895aa807c170529e3b2fc6c8eafa1f9da3a95015ef0ddc06cbccebaf1c173547120ea05af534b0a8b4ae8bdb8dc0ba944d51d1a1fa7c289a3ee29bcb9532000e7724958612e7d117320934525c9e08106de1665e816f09108a836f91c6a12898fc5a71ec43a9bd038da5db663712720d99e7bc9b32ccff3bf81ddac99cd0e93a64b8d9a6e33a93ce0c0e2169e169a93b85b6f1c0ba7f9d4ba1dfd3c47685cfde975b9ecfa58e7a150e134153881781d2975fba2ff735e2e27b50563a842a1d299be518e81160a4d83dc73d6b6161be179ba8379c9ffcf27a40796e66ec69b0e474ddd428fc813be8a86655cb4ed915c92bfe85cf498af0425edd625b30e09e82ea59b4c298ef79ea504934b29ad7c2b25065ee02b7f864cfc34bce39f1bf6d0e176a8ab54686412c72f3b55ef6e32141b6c1f655eba6d09b4bd3b1fad75ae44578ed10e5991212e18c56ac1991324c0c3f27a8dbf5c129cc11c34b0b17bf00e08b73732d47909818081aa170fc0c443ddf7c614418190ce244293d7751dd9fd517e45417c0da5a47353fb645ed7cc50b76e6f2525856b51f8654ab4bab2bc65b20e7303ab8b5b9a515886f752ec77a797a9b14d674606230bd7e3625680b90f1c04462ac92ed1214181edd4817736886ff6e37205f226499b3f67479043adf22df1e5daa2fdda2f9317aa2cd4684d9c2dff360204c9489f03cd568032c8a68a614d25bba294b0753556cfc3a69ab4254d3aa91e9cc4259f16f60db69ff93465599d12909e5432b8b54508633061b3bfe70ee93a9ba28bd2aadd462c2a130bee934f7f99c8cd202ca58ea7e7b133a2184393d232341a2d667aedbb96963ddc8d666e72f694b485f65fbd88c3505365da48adb88623b239663e4f3c9bd883154564c80d75679c8c2c091d005cb380c72ec26e8864f94e975982ad00b4b78ee8b3d300c6c0539296de828baa607e9b43c333c8645b1aac2c6432984193617575f77d4ec8857803163f0d698e56e38db1829d87de0947991290a31f2e77a1800aecc3fd9151b5bf3f070a7d56056e2ae7565d9d0de1829cc2944d8053e19521563711d7ec206aec7a998037d28f01aad5d0006ce0153f00b2e82a3aba7806587d5de3aeb92a34a701b97b9adcc3ccabeaae2fed16ec806d7bd6b05c2b6739db6ffafdb44168f2bf510659103a0b19bb7faeae8b9c743277c1560a8ba46af5bb1bd0cdeed00bc12bb8c26b1e28d5340258f193c55eae662b01723b0c9117df57345740e1490cfe97c4f08579952bfa0aa730a1842d5c2fd4a630d9443cbdd251d52eada37cd2062a6ca01eed6ea9c7ec4facb64d8e761c663f57fac73c6bdc7ea95c7a7b0b48c4242dace5ecaf516435b943ff33531a0718d14a8191410374bd7b12f0e2d95a06fd3d95e4ae837d4f6de0c25b2312b6d71101277c553210b82a909964d090b97cde3723ecc487b6de0cd8fde0c3255366711f867163aa391fbab9e1d44687b9441021f46a180f3bef4cd0dd54c720cf2c5af0acf8e2d26d077aae08a005b7b9da6a8d1efe6a78ffdf87778dfa33c646323b4e54c3bf907cd3b045e0fbc4474f08f2ecf6acda4f5b05a9d0691b66fd7ccfe6cadfc878c4b8de7877b29eb655fcf2a8d3c6c7337fd18993071b563a1bd4af7a6a7fdddba5cf3f05f93a70211de61940015bcf812bede1747a28c27fe5b0fc2380e79dda73f4e7a479b61b3934233a925c8f05738a9cbf4258f1fa33013efb0d8a6bfc228877d4798b1e0bfca8cab68334ea5791fe04943bdc3d818947d298ae56b032f5534afc2821b3c311f366597def93b316b5b0bc0bedd461c92bbb55994279bc3e67f92c4404463ca958ad567ca01ce00fca8db6c14d5779a24fdf4256a0d513988fa0cbea29a4dae628d67e6b620b2a4ee84097fec10b95adf73a569cfeda9f425c0e2135be8965d6643132acc4de9ca64ea227b980464debe9765fbbdb1721674255a372f7b407d4912223d1a0466a953c9164b926a79fa592d65a7e7f9412f2aab9ace98e04df97a30e940070c38017e6bf8abeb497b60ca5505dea961bd763ec2198fd554807a27ba6ecb4f5ebf5c6bfb80740960d7b69d7aa4e4c14979ba69b69e3f39999d3433fffc6c00e1fd5815e82827bba3c922948c8af5cc40e2e944fc066696a89e0fe6b5dfd055e75ad919f1b274bd4e80141880fdc88d5ea6aef82923f6568684f6d01ffdf734628565b8fcc2ed597f3799fb35fb627c721ae31033f4b31e44e3a530c56dc8ffc8573a715df1eacbc84d7ed9cffe78f82de506c6fa06b288835dc365764189dc0ebaf26f92a1afa239f5c8b29caa24223464246ef5e6cd19b648cd5a52d8681b0452f30a331a284504c8b2893cd8d148e99294d02440c12c1c6ad476f6d40e78d7dfe9be27a3114677838a5edd539d26544732094ba7fc09fa05c0d4bae434ad142e626bee1cb795660bef51f4b9da784be54ba7f8e208ef334c3c156da532212ebdb1b7814fceb1effc3ef27ef6a313febfb7b509d887bb62a6db01f6218a0b8838f5a723144d0823cf9c6af57717decec40219686bf9101e0114564c2a23917eb6de58c41e48857629b409bfcfd69ef325aded35445a9e393f0126a79e2eb122ec3ac35977b277f65c7823594f523402f7ad6e2120740607f96cb53e66dd72335f5061d1bac58fcf9ff07f1bcfd5b077d1a0710257e2f306048a5288047425f13460cd4a62fba291516dca4e7742756d3edbed16f2bcc392b22a3ff1228ff2fa8e8018d9a32dd1e67749481c60a3fb22cc04aaa13afefaddd5e9cd710820eb0f1fab1d2bc63f006dd8c3573ab6a2e5202ba387c6264c32d5e355027432d3dfdef53915be447472692da56a7b148c2b635de75c524fe8afffe8776fdbbffeaf4cff3e22adb4c4d136c3703007d4caecc8ff77b7c1b2e9a2899df756d8c1c7769e2a30fd99dc755ae7d49f8ffb31ec6c0b381f95f60358e222aa5db4062cd0b89b4c3a96155dfffd685cd38eb09c6a6e930b3036c9c00d5a1505422d0229a4398edc119e2196ddc2861c12edb207f33b18e2577a85c8104b14c66f0f7d13043836dd899c33efb1622aa0ffbf4eea81e740d54493c1fd803f863781323817770bcda7af38de01bd8510118cfa3d6a1bbdd701557a1e8c2cb02ea9ddbf89a53db1b5143b974c50dd38efa6888678952b", 0x1000}, {&(0x7f00000002c0)="8da104f9e0f6493a321630a2d2a7371335d7a1ee6b50fb886c91db467abd7173c65d557f7191dc3ea49c3f898d640b4c1b0fff63", 0x34}, {&(0x7f0000000a80)="894655c379e552f77e0989c9a9bdbed7f6972a143b82df1b2b6b65d478484fad78efec0fb339125cead228e0a2cba8a624ea", 0x32}, {&(0x7f0000000ac0)="521a2abcf0a1e4c5b547df619cdcaaa93fce775201446e9c1861a3435ecaaf3ba8f3a789b2534a17c9302ab170", 0x2d}, {&(0x7f0000000b00)="0872fe90f5790a1aa6fcc49a735e18d59971f1f73a1b98cd4d86", 0x1a}], 0x5}}, {{&(0x7f0000000cc0)=@xdp={0x2c, 0x8, r2, 0x1b}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=[{0xd0, 0x116, 0x7f, "52cd220748f96c91a69c2e8e8f5680758ed163296e8f0442a4aa118c311ff1af7031d27dd55baf0b4c43997adf1cdf8cf64775ba7743c9ea2fae04b0625f18ce897cde2c5d0426c4d9561519366737158de2906b79d35457f53174a2e8ef452f30c1bf2ea60b93978c920cf2b92da0906e843c3946fb0cd5fbf2cd42c2d4843e22aac9e83d99057ee5e6954bdf4e87e3c210902005c8d0280f76a16ba92c2e327f00e6e60f653a943bc36ba8430d28364d1abda2cf4d8939b3"}, {0xe0, 0x1, 0x7, "b17e74b35e58b640965420f871a6a69f9456a999a0038bcef35410dee6f1737ae8ceefae256401932118a6882ca73e76ab94f180fc4f0ad73f3f58b5f14546bc3f88a12159429c5e8315ec4f8367cbbd0e17fc337fed906f576e3122281cb2bb705d9ce11f6c609ab370f6d4388ed2ceaf287e9b7e839f44dde97c34413039a53f69b2ecbc91b96158fb7a2848f83aec16d1770c98c36a4b8e24510e33d92855ef844f6cc648ec6c903bb53dcca4f991ef0df9bd8bf5705ccbd348bc8b319a4be398c397afa9758b6c4d"}, {0xf8, 0x111, 0x5, "7e8160fc67a532554d6240d75b8021a51e4437d9c8a08d4829829e29de766ebbee179148aa9772510c73c712cd2ebc08a6c2622bd6489fcaa447a96a4c3ff18cf2446bb78c60b3d1f675cc6efd49c1e10fecf5176ef5d76035ef18f93ae5b0755d5574f9506c1703fc61c3952f097855766ef2a70c904803e089e0948e2040c3c364014f8f1035976db56947202dfa8f4b87838fffc5c34657ff684122911ef597967e79dda43d6b8868e5a4464ad1d7274c3914f3d51cea836644ad0bdee4d95dafaffad55f2f347b161a4235103d09b235f1f9dbe5a4c79c043d52c47f889110705a78"}, {0x18, 0x119, 0x84, "09ce8eea3c"}, {0xc0, 0x6, 0xfffffffd, "c75dad26edcb6505d278b84d62a7908dbed5967933cedc48e32ff2ab512fd5789a50b9dac2b7e6bd78eb42cccfea09064881238301d73802bf91af0059c83a9104988fa5eeaaccdeec4e1092a8e5446f71d9dab797dae897940705ec74c619e9f1868d61c09b230ae036d5fe09a01f45b020c11c3d5d944e51161f66657c92b1099f6d36473ac148f64554911202d39e1b79a497a4af08a73d1455fe9dcac79a92d75677e410a3aa38ca79500f"}, {0x40, 0x108, 0x1, "6a12c6df903838cacd27322379544c8b0e30ca228336adff3e1cf90e330fc2aeb29b46d429593243bdf642a449"}, {0x88, 0x107, 0x5804, "0b0ee9948364f480cc269ee6e63b89a8136cd4b91cf405ec79e7bf74131e3f80bf062267f3aefd0d65ce1fdab328502820259e84dc10210b84e22fa09b9bc186bc491577f5b361727d31dac9a794fcb8ddef564993c3345adc92981c5fea3b7923fcf224f3c8b80d53b4fc70c9c3f1d1d5"}], 0x448}}, {{&(0x7f0000001200)=@nfc_llcp={0x27, r6, 0x1, 0x6, 0x7, 0xd2, "b6b923db9c77d72a90271a8a2e4ff577fe5a69d93861309421c1c77ed1252cb7d1fd8d1d5c38262a04f6841c77a4d66b0fe32dd98f41a1d32574569a48dab5", 0x39}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001300)="1cb37b754876de3cee26ff3e91b6139e9980e7158c4965c6df5a9b3ad71f4edda749a8fdded1526eb2217cdffb9b76110378f1142e6247cf2cbf752bb2f31b380b574452c9621281262e7090f7406c9cd6726d26579577d533dc5384d39d45a6297cdb9a6480ea4e2c9709255b70b61b545e5c27c424230dea0e7f96c7007bc6d45bde65ed6fb8b72010e704779b45591d3b7157666337199b74d297f5a75d53ec1bb55e93efd5ca53716151d13b3beaa24ed384487b1f423dc2d6029c79991476d61d1477188bcc2f9770728ad7d2b326353b702e2715f680e82981d16d344d59e9f331aed1", 0xe6}, {&(0x7f0000001400)="40a809688be84eaad4bc62133d6191714e012d72223a57ea626f1365c53aa84c77c2436a794d97495b38eec4788f844876e2496a27c452c293c1af093c605d0dad2e8453f3dda0ca91a1f68cd4db81a00926e70b4b0e1ec612c345654eaf11837bd6828c371597824227d5fbcc08196507e9cbf50ac766fdcbe0a8657924d18d42de6ee15575a0fbd7d8cab9d42a50ee35b1fcadfec5ee36eed9c99b1027c2eecff3864913f9d490d021746fbd33c085bde84284b0506d99f559637ca77a8b4333cd003314b83fcac657bbccedb0d0496f9fd07b9402a8e565b04b238cd75e8892aa302dbbe87d2d3494b7eb", 0xec}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000001280)="a3b8cc6c26397ccb72749603770f715ad8368f16a928eaad78fc67855357", 0x1e}, {&(0x7f0000001500)="b2f5804f448fe422d98085f89abed10ee93454b66e8a61a82a216e7602d31564dd3af6df9e0dffb60e524330b8365d20296628e25e9749e850a3aa32927ed1df3db00a90fe7eb01f29a1b5af794d64d446f56d176d37097240b2a61680a4", 0x5e}], 0x5, &(0x7f0000001600)=[{0x108, 0x102, 0x2, "89e40d7346b8af0674ceb759e386126a16382ad61793ad980793216710e917a6dd71809c9abc6ad9cbae4afdb25bc4046ce6b1bb75913914facd4d960ceea1cc24532aa433a782734aca8b24231e3d1eb4ec07cefa2b13aad5f1e75b09bde2983a323eb50be68db9e497b1f454a5101c524b1f608ef6cf099d783461c04a0e7d9b649126f2ea10f7b497761b180f907ba3a40dcca4df554511e0950dea869ce1a486872ea0e347f5c66aa22e00ecb81413464f4f91fdf154f769f57354bb0008b8f05e33cc65b6769175bf66f4fdfca7dc374e10c547e7f34f07a007e64bd2a46b6eefc24af24d3724d2a58940633acdc5b2361f"}, {0xb0, 0x10f, 0xffffcb13, "f202d73c7d5457c15b516e5080d29ed6c1bf767f8a28f7b4b9a0632679396f6e83ded165fcc8876eb76a53dc8edaebb90ad8b76455770348cb518836f66d31309d04a041de5da72cd99061eaa75af2cd9744a40b67c175cb36a0ee4e226fbe6c6bfa4712baedcf9ab330412f662d8d89fbf73b2f69c4b330a71c8fe8120dfae71814e9b8781386d3208d15b7a3f39e28e807fe05e31822f6c9d78a1afd8e7c7f"}], 0x1b8}}, {{&(0x7f00000017c0)=@caif=@dgm={0x25, 0xd4, 0xd}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001840)="75dc70cf0eff6e13b5c4b85f38cf6f70b7797a01225e8390d5e60e02ec98d2ddb00d4131db8b0173b64e922746545e911c39b418044ed126fbe0e44e743f729c7cb3b7c862c0e83267838345094986ce0f2a31110072015296220205d03dce1c1c6256776aa3b2803808fcf7eb259f61e9bf409d09430e590cb7404ec08edbf5fa46378ee00c098c0828508e51ce257bc3af0dba0c032e4c7612450d", 0x9c}, {&(0x7f0000001900)="1cc23d167bce7055748c6865134ff3ab803579ceaebcb259655a9a9584ffa8e0194d0f37ab9d48", 0x27}, {&(0x7f0000001940)="ad2924b76114fa180eb0e202e09355f8bfb55da94efdb246601cdf0e2fe2dcf61e435c908a7150ada44719e814a8ceea964b7a0642605ad7f3e97abff8ed5f2e7c9287e4ff8e3b3427d0c4751f1bc05fd525465607d90de9ebdb3a4c31db1ff5670c00ecfc90867526285a416b07a417c31a36069c9a6f72b1479f9fa02f76ad830f8431bc3439071ee2b7b41ad5fc78b7d31543fa9d7e37049d86cd017bb943f456ce6a87b46091dbc84b75664a8fb88719c13fd219ee6989c727e9dce879c7fb7a8b400ec6ffc8a0d077f11adacf3e3f4765c1696ec54c", 0xd8}], 0x3, &(0x7f0000001a80)=[{0xb0, 0x1, 0x7, "cb7c73849867ea1ff02712632a258ace7dd377ea326e12e32c92d5c91d735564a4a9a0bcc6a2ff79d6c2f891b802dc1cb78cfe60d9016a39d70187295cbafeea2d5b5a733aad41f9d63ccec3b587009bf233c579dbe7083637188c560146c118fd4e2972a719bcee5e1becb87889c2136952ee64ceed545e3129ba47ed39300e80ec93bc0c685004d4cfbe1e4f14fff2e0a9a96bf000e45b699521979e"}, {0x90, 0x1ea, 0x2, "81588859a91577eef0b6222e8bc031160be4b26b55f8b206c0e45092519f51f743673d65646ed30da4d776d901dd4aae5f169e6435281da2cb75ba03e45aab4aefcab3ab42b27f683238da4c4253c28450ae48387ef07e3e86d24e3b2ea03c1cd685b4b9e7decafb020b9d9f28300f5b154b29306793b8883cb2203c384a1517"}, {0x18, 0x10f, 0x200, "deea491f0ad0"}, {0x100, 0x1a, 0x6, "091d966d62a534d7057aab1c27ac9328979a619b91b221db00eea2314a5d601e4462a3fb36c816dc30ebd70e82609e47d1cee7b32ae870a497872dc0c64db09b1a9732e0cbed017adf9f71428d4df185d8158c29532b6c11a48c4de75a9ae65e7355e223cbeae6b06481e6c48dd1e63c6310d2e38e61e6786c12bebf5441d4ed53f1c07087b8ac52e340f8c3da8a972d4e10df1bf1c5f881b5fbb00ed6e66fbd426ca531b067692f7cabffecb26195371d4d0ed6c5f926d7c74b4bc76f838e040b874d087e23f70b875d3a144bc2a7167168562c58af49d19ae8641899f05bdf71189a990434c4a158ebc930233fc0"}], 0x258}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d00)="1d32aee1733fc6e4a6c06b69ce9d18bf651a151c5ad3a17a7331d8da280ebe80c5cf5962d4f87f9412de013a7bc6f4705bcf953165934bd20724031dbe3865f4c78119b84c", 0x45}], 0x1, &(0x7f0000004e00)=ANY=[@ANYBLOB="58000000000000000e010000070000002aa282b4891b3a885edd146d6faf8ea3897b7b91a5070728d88e0e4ca5b6a92db3d3bd8a9b10cc41001a62b4fe1084636f7378ea38b2f29fd390c241fb9ed54e1fa87b93ab000000b800000000000000170100000600000007c052d520a16d467a9711a979753d8863426e427e560bb999ccb206091484d9e8ea880404a9022a4f86ed3f7c9997f71032bc7ab6a1bf21894ee95c199ea7d01a3a72c4c29e821fcf4beee8425709a35ea9e7384c9940b79326552c1b7ef3af7eb46c0c970ce3a2a8f388160eca2c07a2825c29acbdb663e5473db709ccb9fb81f09bd014ba80456f34e377c836ee8f20e4a48b0460134c9b1ab35ab7ff3f8673ad9862c0000000f80000000000000001010000000800008beab9e51c9e19fe21a64c90f3fe088a0233c889a4218b29917b7381d014e366a8042797b9529a2fc073f0aade58d8852ea175efd5f871ea8562bd5deac62760935b4a866d99513970a278766ce40e79e6a7d63b59f804ac68d36f38917d3020e75fc417aeef5ecb53ad9ed3cca1aa9908cebb29d8f0f2180c22952ad5ff6a894d6c6ec9927ae967b396c0230afa7d6f7c447b3a0be2930edd40a9cda1565422fd7a6a889d29194c1d5bcdf2331d012514a49747227faf74d593fb5dcce65ddffb5f6bf94a6d79dac54096edd4c452df69cea8f01b414567f1ce8bbf87efb006084ed5e5607c28001800000000000000100100007d000000a49d516e2c0c334ef8000000000000000d0100000600000072fcf98e8d3aff0a3582ebc9ff2980cac35f8567ef44645058181ea65d066a0418526403ba8a320196e43cc87cfda72ccb309b6a3c39e41a3a286eb69435c1c1dc1d7408449b0000b2484019e0fdae944fd4f2eb7a4761b1bf29391b685c5f57948162897c41dfe72020b99c63f1691eb518375961f9448a76cf5d6cc559573aa531f3326ed6933a5962dafdc556a77b841abcf775d8bbc1df499d17f8d7268d1c2fd04c350739fb465e1575d39a0cf5e3a4b15ec7d54341bb8143935623ee52dc197c27dc9c0fe2a6ce4867006415fb74bcffc705bc3084cbd4859ce38449b03dcb935000000000280000000000000014016cd40700000074687f4b744ac8df91adc445e149f419a200000000000000"], 0x340}}], 0x5, 0x4040) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000140)={'ipvlan1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x20, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x7}, {0xfff1, 0x8}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xffffffffffffffa4}]}, 0x54}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, {0xb, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24004810) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=@allocspi={0x11c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@multicast1, @in=@empty, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0xa0, 0x3b}, {@in=@remote, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x373a, 0x4, 0x2, 0xab8, 0x8, 0x1, 0x4, 0x3}, {0x22, 0xd6, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x3504, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e20, @in6=@rand_addr=' \x01\x00'}}, @replay_thresh={0x8, 0xb, 0x10}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) 478.861582ms ago: executing program 0 (id=3155): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2000c008}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a40)=""/4107, 0x100b}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/87, 0x57}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000040)=""/14, 0xe}], 0x7}, 0x12062) (fail_nth: 1) 387.524163ms ago: executing program 1 (id=3156): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c0000001000010026bd700000000000030000000800018024"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x80, 0x80, 0x1, 0xa, 0x0, 0x0, 0x5, 0x10005}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(r4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x0, 0x10005, 0x204e}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x483, &(0x7f0000000000)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x20, 0x8e7b0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r8 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r8, 0x0) 141.776518ms ago: executing program 0 (id=3157): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000800)={0x2, 0x4e28, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0xf4, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x63}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xdd}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa0f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000084}, 0x44000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 139.523534ms ago: executing program 4 (id=3158): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000030000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff00000000000000000000fd00"/375], 0x23c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @broadcast}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x58}}, 0x20000090) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x0, 0xf, 0xc}, &(0x7f00000001c0)=0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20602, 0x0) 0s ago: executing program 0 (id=3159): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @remote}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x6c, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x94}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x4}}]}]}}}, @IFLA_LINK={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) kernel console output (not intermixed with test programs): lid length. [ 214.318864][T11967] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2254'. [ 214.336802][T11973] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 214.633850][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'. [ 214.743994][ T2298] block nbd8: Possible stuck request ffff888026878000: control (read@0,1024B). Runtime 90 seconds [ 214.756179][ T2298] block nbd8: Possible stuck request ffff888026878200: control (read@1024,1024B). Runtime 90 seconds [ 214.767518][ T2298] block nbd8: Possible stuck request ffff888026878400: control (read@2048,1024B). Runtime 90 seconds [ 214.779357][ T2298] block nbd8: Possible stuck request ffff888026878600: control (read@3072,1024B). Runtime 90 seconds [ 214.810097][T11987] xt_l2tp: v2 doesn't support IP mode [ 214.868394][T11995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2267'. [ 215.034816][T12002] netlink: 'syz.1.2269': attribute type 1 has an invalid length. [ 215.045166][T12002] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2269'. [ 215.442059][T12030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2280'. [ 215.818344][T12051] netlink: 'syz.4.2290': attribute type 1 has an invalid length. [ 215.998928][T12067] netlink: 'syz.4.2296': attribute type 1 has an invalid length. [ 216.035845][T12067] 8021q: adding VLAN 0 to HW filter on device bond18 [ 216.068861][T12070] netlink: 'syz.0.2298': attribute type 1 has an invalid length. [ 216.131693][T12070] 8021q: adding VLAN 0 to HW filter on device bond14 [ 216.781214][T12113] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 216.824937][T12113] 8021q: adding VLAN 0 to HW filter on device bond15 [ 217.529053][T12151] __nla_validate_parse: 12 callbacks suppressed [ 217.529072][T12151] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2325'. [ 217.602680][T12154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2327'. [ 217.718169][T12160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2328'. [ 217.847423][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2331'. [ 217.912747][T12175] netlink: 'syz.4.2332': attribute type 1 has an invalid length. [ 217.954127][T12175] 8021q: adding VLAN 0 to HW filter on device bond19 [ 217.971176][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2332'. [ 218.028684][T12175] 8021q: adding VLAN 0 to HW filter on device bond20 [ 218.052820][T12175] bond19: (slave bond20): Enslaving as an active interface with a down link [ 218.226857][T12191] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2338'. [ 218.298415][T12193] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2337'. [ 218.415178][T12199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2340'. [ 218.604016][T12213] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 219.029869][T12231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2354'. [ 219.137682][T12243] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2359'. [ 219.489463][T12258] netlink: 'syz.3.2361': attribute type 1 has an invalid length. [ 219.873638][ T2257] block nbd14: Possible stuck request ffff888026af0000: control (read@0,1024B). Runtime 60 seconds [ 219.885608][ T2257] block nbd14: Possible stuck request ffff888026af0200: control (read@1024,1024B). Runtime 60 seconds [ 219.898004][ T2257] block nbd14: Possible stuck request ffff888026af0400: control (read@2048,1024B). Runtime 60 seconds [ 219.931945][ T2257] block nbd14: Possible stuck request ffff888026af0600: control (read@3072,1024B). Runtime 60 seconds [ 219.951192][T12277] netlink: zone id is out of range [ 219.969351][T12277] netlink: zone id is out of range [ 219.974524][T12277] netlink: zone id is out of range [ 220.060967][T12277] netlink: zone id is out of range [ 220.066695][T12277] netlink: zone id is out of range [ 220.072067][T12277] netlink: zone id is out of range [ 220.077231][T12277] netlink: set zone limit has 8 unknown bytes [ 221.445351][T12345] netlink: 'syz.2.2390': attribute type 1 has an invalid length. [ 221.536475][T12334] nbd26: detected capacity change from 0 to 63 [ 221.573075][T12345] 8021q: adding VLAN 0 to HW filter on device bond18 [ 221.647545][T12356] bond18: (slave veth11): Enslaving as an active interface with a down link [ 221.688852][T12361] netlink: 'syz.0.2393': attribute type 1 has an invalid length. [ 221.775733][T12361] 8021q: adding VLAN 0 to HW filter on device bond16 [ 221.804402][T12364] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 221.852899][T12361] bond17 (unregistering): Released all slaves [ 221.873053][T12363] syzkaller0: entered promiscuous mode [ 221.879695][T12363] syzkaller0: entered allmulticast mode [ 221.892657][T12372] syzkaller0: entered promiscuous mode [ 221.902570][T12372] syzkaller0: entered allmulticast mode [ 221.933611][ T5843] block nbd26: Receive control failed (result -32) [ 222.336694][T12400] netlink: 'syz.0.2408': attribute type 1 has an invalid length. [ 222.422023][ T2257] block nbd9: Possible stuck request ffff8880268d0000: control (read@0,1024B). Runtime 90 seconds [ 222.437034][ T2257] block nbd9: Possible stuck request ffff8880268d0200: control (read@1024,1024B). Runtime 90 seconds [ 222.448097][ T2257] block nbd9: Possible stuck request ffff8880268d0400: control (read@2048,1024B). Runtime 90 seconds [ 222.460585][ T2257] block nbd9: Possible stuck request ffff8880268d0600: control (read@3072,1024B). Runtime 90 seconds [ 222.481682][T12400] 8021q: adding VLAN 0 to HW filter on device bond17 [ 222.509943][T12407] syzkaller0: entered promiscuous mode [ 222.515461][T12407] syzkaller0: entered allmulticast mode [ 222.631994][T12416] __nla_validate_parse: 10 callbacks suppressed [ 222.632013][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2413'. [ 222.635430][T12405] 8021q: adding VLAN 0 to HW filter on device bond18 [ 222.662483][T12405] bond17: (slave bond18): Enslaving as an active interface with a down link [ 222.888878][T12427] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2418'. [ 223.079271][ T2257] block nbd15: Possible stuck request ffff888026b68000: control (read@0,1024B). Runtime 60 seconds [ 223.090175][ T2257] block nbd15: Possible stuck request ffff888026b68200: control (read@1024,1024B). Runtime 60 seconds [ 223.091663][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2420'. [ 223.101948][ T2257] block nbd15: Possible stuck request ffff888026b68400: control (read@2048,1024B). Runtime 60 seconds [ 223.123426][ T2257] block nbd15: Possible stuck request ffff888026b68600: control (read@3072,1024B). Runtime 60 seconds [ 223.132222][T12441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2419'. [ 223.322975][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2419'. [ 223.823960][T12460] syzkaller0: entered promiscuous mode [ 223.842138][T12460] syzkaller0: entered allmulticast mode [ 223.989041][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 224.062447][T12485] netlink: 'syz.2.2435': attribute type 1 has an invalid length. [ 224.189397][T12492] netlink: 'syz.4.2438': attribute type 1 has an invalid length. [ 224.197942][T12492] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2438'. [ 224.356541][T12498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2439'. [ 224.512623][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2439'. [ 225.437877][T12485] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 225.441390][T12490] bond15: (slave veth0_to_bond): Releasing active interface [ 225.698065][T12523] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2446'. [ 225.958760][T12536] netlink: zone id is out of range [ 225.964292][T12536] netlink: zone id is out of range [ 225.979184][T12536] netlink: zone id is out of range [ 225.984448][T12536] netlink: zone id is out of range [ 225.995497][T12536] netlink: zone id is out of range [ 226.001072][T12536] netlink: zone id is out of range [ 226.010464][T12536] netlink: set zone limit has 8 unknown bytes [ 226.080141][T12542] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 226.146292][T12542] 8021q: adding VLAN 0 to HW filter on device bond19 [ 226.184283][T12544] bond16: (slave veth0_to_bond): Releasing active interface [ 226.221799][T12544] bond19: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 226.263930][T12546] syzkaller0: entered promiscuous mode [ 226.276406][T12546] syzkaller0: entered allmulticast mode [ 226.427587][T12550] 8021q: adding VLAN 0 to HW filter on device bond20 [ 226.562796][T12554] bond20: (slave veth7): Enslaving as an active interface with an up link [ 226.574940][T12562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2460'. [ 226.835306][T12575] netlink: 'syz.3.2465': attribute type 1 has an invalid length. [ 226.886107][T12575] 8021q: adding VLAN 0 to HW filter on device bond23 [ 226.955138][T12579] bond10: (slave veth0_to_bond): Releasing active interface [ 226.988797][T12579] bond23: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 227.214156][T12600] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 227.544021][T12613] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 227.912017][T12615] xt_l2tp: v2 doesn't support IP mode [ 228.041955][T12633] __nla_validate_parse: 4 callbacks suppressed [ 228.041974][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'. [ 228.347560][T12645] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 228.360014][T12645] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2487'. [ 228.456376][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'. [ 228.547010][T12657] netlink: 'syz.0.2494': attribute type 1 has an invalid length. [ 228.567306][T12660] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2492'. [ 228.576153][T12657] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2494'. [ 228.600108][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 228.679011][T12667] netlink: 'syz.2.2497': attribute type 1 has an invalid length. [ 228.749768][T12667] 8021q: adding VLAN 0 to HW filter on device bond19 [ 228.778021][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2498'. [ 228.791285][T12675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2497'. [ 228.808550][T12677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2501'. [ 228.929739][T12667] 8021q: adding VLAN 0 to HW filter on device bond20 [ 228.942413][T12667] bond19: (slave bond20): Enslaving as an active interface with a down link [ 228.944880][T12680] netlink: 'syz.3.2502': attribute type 1 has an invalid length. [ 228.959947][T12680] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2502'. [ 229.054328][T12684] netlink: 'syz.0.2504': attribute type 1 has an invalid length. [ 229.389450][T12696] nbd27: detected capacity change from 0 to 63 [ 229.484244][T12698] xt_l2tp: v2 doesn't support IP mode [ 229.536566][T12718] netlink: 'syz.1.2518': attribute type 1 has an invalid length. [ 229.575803][T12719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 229.766387][T12728] xt_l2tp: v2 doesn't support IP mode [ 229.968612][ T5843] block nbd27: Receive control failed (result -32) [ 229.987806][T12737] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 230.011457][T12737] 8021q: adding VLAN 0 to HW filter on device bond14 [ 230.050153][T12737] bond14: (slave veth0_to_bond): making interface the new active one [ 230.060914][T12737] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 230.100099][ T2257] block nbd10: Possible stuck request ffff888026948000: control (read@0,1024B). Runtime 90 seconds [ 230.111075][ T2257] block nbd10: Possible stuck request ffff888026948200: control (read@1024,1024B). Runtime 90 seconds [ 230.122881][ T2257] block nbd10: Possible stuck request ffff888026948400: control (read@2048,1024B). Runtime 90 seconds [ 230.135114][ T2257] block nbd10: Possible stuck request ffff888026948600: control (read@3072,1024B). Runtime 90 seconds [ 230.334145][T12753] netlink: 'syz.4.2533': attribute type 1 has an invalid length. [ 230.385173][T12753] 8021q: adding VLAN 0 to HW filter on device bond21 [ 230.611768][T12769] netlink: zone id is out of range [ 230.617092][T12769] netlink: zone id is out of range [ 230.631086][T12769] netlink: zone id is out of range [ 230.641382][T12765] xt_l2tp: v2 doesn't support IP mode [ 231.091786][T12791] netlink: 'syz.3.2547': attribute type 1 has an invalid length. [ 231.265829][T12791] 8021q: adding VLAN 0 to HW filter on device bond24 [ 231.389197][ T2257] block nbd4: Possible stuck request ffff888026710000: control (read@0,1024B). Runtime 120 seconds [ 231.400003][ T2257] block nbd4: Possible stuck request ffff888026710200: control (read@1024,1024B). Runtime 120 seconds [ 231.413077][ T2257] block nbd4: Possible stuck request ffff888026710400: control (read@2048,1024B). Runtime 120 seconds [ 231.424711][ T2257] block nbd4: Possible stuck request ffff888026710600: control (read@3072,1024B). Runtime 120 seconds [ 231.504820][T12808] net_ratelimit: 4 callbacks suppressed [ 231.504837][T12808] netlink: zone id is out of range [ 231.515178][T12809] xt_l2tp: v2 doesn't support IP mode [ 231.541584][T12808] netlink: zone id is out of range [ 231.557711][T12808] netlink: zone id is out of range [ 231.599381][T12808] netlink: zone id is out of range [ 231.617695][T12808] netlink: zone id is out of range [ 231.639098][T12808] netlink: zone id is out of range [ 231.644744][T12808] netlink: set zone limit has 8 unknown bytes [ 232.022568][ T2257] block nbd11: Possible stuck request ffff8880269b0000: control (read@0,1024B). Runtime 90 seconds [ 232.034325][ T2257] block nbd11: Possible stuck request ffff8880269b0200: control (read@1024,1024B). Runtime 90 seconds [ 232.046222][ T2257] block nbd11: Possible stuck request ffff8880269b0400: control (read@2048,1024B). Runtime 90 seconds [ 232.058537][ T2257] block nbd11: Possible stuck request ffff8880269b0600: control (read@3072,1024B). Runtime 90 seconds [ 232.191607][T12834] nbd28: detected capacity change from 0 to 63 [ 232.363917][T12849] netlink: 'syz.4.2573': attribute type 1 has an invalid length. [ 232.397916][T12849] 8021q: adding VLAN 0 to HW filter on device bond22 [ 232.549703][T12860] netlink: zone id is out of range [ 232.566042][T12860] netlink: zone id is out of range [ 232.582442][T12860] netlink: zone id is out of range [ 232.692450][ T2257] block nbd16: Possible stuck request ffff888047338000: control (read@0,1024B). Runtime 60 seconds [ 232.704519][ T2257] block nbd16: Possible stuck request ffff888047338200: control (read@1024,1024B). Runtime 60 seconds [ 232.715959][ T2257] block nbd16: Possible stuck request ffff888047338400: control (read@2048,1024B). Runtime 60 seconds [ 232.727256][ T2257] block nbd16: Possible stuck request ffff888047338600: control (read@3072,1024B). Runtime 60 seconds [ 232.778614][ T5843] block nbd28: Receive control failed (result -32) [ 233.254353][T12893] netlink: 'syz.1.2586': attribute type 1 has an invalid length. [ 233.299595][ T2257] block nbd12: Possible stuck request ffff8880269d8000: control (read@0,1024B). Runtime 90 seconds [ 233.311725][ T2257] block nbd12: Possible stuck request ffff8880269d8200: control (read@1024,1024B). Runtime 90 seconds [ 233.324514][ T2257] block nbd12: Possible stuck request ffff8880269d8400: control (read@2048,1024B). Runtime 90 seconds [ 233.335899][ T2257] block nbd12: Possible stuck request ffff8880269d8600: control (read@3072,1024B). Runtime 90 seconds [ 233.405572][T12901] __nla_validate_parse: 22 callbacks suppressed [ 233.405590][T12901] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2586'. [ 233.406735][T12893] 8021q: adding VLAN 0 to HW filter on device bond16 [ 233.604794][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 233.674978][T12912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.304079][T12931] netlink: 'syz.2.2603': attribute type 1 has an invalid length. [ 234.417042][T12931] 8021q: adding VLAN 0 to HW filter on device bond21 [ 234.438822][T12937] netlink: 'syz.4.2604': attribute type 1 has an invalid length. [ 234.468463][T12934] bond21: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 234.479985][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 234.552002][T12948] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2604'. [ 234.580986][ T2298] block nbd17: Possible stuck request ffff888044410000: control (read@0,1024B). Runtime 60 seconds [ 234.591897][ T2298] block nbd17: Possible stuck request ffff888044410200: control (read@1024,1024B). Runtime 60 seconds [ 234.603322][ T2298] block nbd17: Possible stuck request ffff888044410400: control (read@2048,1024B). Runtime 60 seconds [ 234.616787][ T2298] block nbd17: Possible stuck request ffff888044410600: control (read@3072,1024B). Runtime 60 seconds [ 234.628289][T12937] 8021q: adding VLAN 0 to HW filter on device bond23 [ 234.723006][T12956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.875206][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2612'. [ 234.909801][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2612'. [ 234.928850][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2612'. [ 235.209368][T12964] nbd29: detected capacity change from 0 to 63 [ 235.548510][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 235.709217][ T5843] block nbd29: Receive control failed (result -32) [ 235.782334][T12985] syzkaller0: entered promiscuous mode [ 235.787866][T12985] syzkaller0: entered allmulticast mode [ 235.823885][T12988] netlink: 'syz.3.2623': attribute type 1 has an invalid length. [ 235.878915][T12985] netlink: 'syz.1.2622': attribute type 7 has an invalid length. [ 235.897198][T12988] 8021q: adding VLAN 0 to HW filter on device bond25 [ 235.920342][T12985] netlink: 'syz.1.2622': attribute type 7 has an invalid length. [ 235.923737][T12988] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2623'. [ 236.279362][T13011] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 236.581395][T13024] syzkaller0: entered promiscuous mode [ 236.587160][T13024] syzkaller0: entered allmulticast mode [ 236.657855][T13026] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2637'. [ 236.853454][T13030] netlink: 'syz.3.2638': attribute type 1 has an invalid length. [ 236.986459][T13038] netlink: 'syz.4.2642': attribute type 2 has an invalid length. [ 237.221240][T13056] netlink: 'syz.2.2648': attribute type 1 has an invalid length. [ 237.300361][T13056] 8021q: adding VLAN 0 to HW filter on device bond22 [ 237.453131][T13068] netlink: 'syz.4.2654': attribute type 1 has an invalid length. [ 237.500248][T13068] 8021q: adding VLAN 0 to HW filter on device bond24 [ 237.527545][T13068] bond24: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 237.784036][T13086] vlan2: entered promiscuous mode [ 237.789665][T13086] geneve1: entered promiscuous mode [ 237.795293][T13086] vlan2: entered allmulticast mode [ 237.797210][ T2298] block nbd18: Possible stuck request ffff888038fb8000: control (read@0,1024B). Runtime 60 seconds [ 237.811260][ T2298] block nbd18: Possible stuck request ffff888038fb8200: control (read@1024,1024B). Runtime 60 seconds [ 237.823135][ T2298] block nbd18: Possible stuck request ffff888038fb8400: control (read@2048,1024B). Runtime 60 seconds [ 237.834703][ T2298] block nbd18: Possible stuck request ffff888038fb8600: control (read@3072,1024B). Runtime 60 seconds [ 237.845820][T13086] geneve1: entered allmulticast mode [ 238.001617][T13091] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 238.048016][T13091] 8021q: adding VLAN 0 to HW filter on device bond26 [ 238.204778][T13101] netlink: 'syz.1.2666': attribute type 10 has an invalid length. [ 238.218998][T13101] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 238.517579][T13114] xt_l2tp: v2 doesn't support IP mode [ 238.585876][T13117] __nla_validate_parse: 13 callbacks suppressed [ 238.585897][T13117] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2670'. [ 238.918645][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 239.035494][T13142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.043102][T13142] IPv6: NLM_F_CREATE should be set when creating new route [ 239.050658][T13142] IPv6: NLM_F_CREATE should be set when creating new route [ 239.069702][ T2257] block nbd13: Possible stuck request ffff888026a40000: control (read@0,1024B). Runtime 90 seconds [ 239.082044][ T2257] block nbd13: Possible stuck request ffff888026a40200: control (read@1024,1024B). Runtime 90 seconds [ 239.095312][ T2257] block nbd13: Possible stuck request ffff888026a40400: control (read@2048,1024B). Runtime 90 seconds [ 239.108280][ T2257] block nbd13: Possible stuck request ffff888026a40600: control (read@3072,1024B). Runtime 90 seconds [ 239.253467][T13152] lo speed is unknown, defaulting to 1000 [ 239.262023][T13152] lo speed is unknown, defaulting to 1000 [ 239.272395][T13152] lo speed is unknown, defaulting to 1000 [ 239.320063][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'. [ 239.616771][T13152] infiniband syz0: set down [ 239.629784][ T5831] lo speed is unknown, defaulting to 1000 [ 239.670556][T13152] infiniband syz0: added lo [ 239.715673][T13169] lo speed is unknown, defaulting to 1000 [ 239.733488][T13152] RDS/IB: syz0: added [ 239.738995][T13152] smc: adding ib device syz0 with port count 1 [ 239.746403][T13152] smc: ib device syz0 port 1 has no pnetid [ 239.755528][ T797] lo speed is unknown, defaulting to 1000 [ 240.029704][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2689'. [ 240.149792][T13152] lo speed is unknown, defaulting to 1000 [ 240.222786][T13188] FAULT_INJECTION: forcing a failure. [ 240.222786][T13188] name failslab, interval 1, probability 0, space 0, times 1 [ 240.239611][T13188] CPU: 0 UID: 0 PID: 13188 Comm: syz.1.2691 Not tainted syzkaller #0 PREEMPT(full) [ 240.239638][T13188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.239656][T13188] Call Trace: [ 240.239664][T13188] [ 240.239672][T13188] dump_stack_lvl+0xe8/0x150 [ 240.239708][T13188] should_fail_ex+0x412/0x560 [ 240.239737][T13188] should_failslab+0xa8/0x100 [ 240.239759][T13188] ? skb_clone+0x212/0x3a0 [ 240.239779][T13188] kmem_cache_alloc_noprof+0x87/0x650 [ 240.239804][T13188] ? __netlink_lookup+0xc6/0x8b0 [ 240.239829][T13188] skb_clone+0x212/0x3a0 [ 240.239852][T13188] __netlink_deliver_tap+0x404/0x850 [ 240.239884][T13188] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.239906][T13188] netlink_deliver_tap+0x19c/0x1b0 [ 240.239929][T13188] netlink_unicast+0x7e3/0x9b0 [ 240.239955][T13188] ? __pfx_netlink_unicast+0x10/0x10 [ 240.239976][T13188] ? netlink_sendmsg+0x650/0xb40 [ 240.239989][T13188] ? skb_put+0x11b/0x210 [ 240.240006][T13188] netlink_sendmsg+0x813/0xb40 [ 240.240027][T13188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.240044][T13188] ? aa_sock_msg_perm+0xf1/0x1b0 [ 240.240066][T13188] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.240086][T13188] ____sys_sendmsg+0x972/0x9f0 [ 240.240110][T13188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.240133][T13188] ? import_iovec+0x73/0xa0 [ 240.240152][T13188] ___sys_sendmsg+0x2a5/0x360 [ 240.240173][T13188] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.240217][T13188] ? __fget_files+0x2a/0x420 [ 240.240237][T13188] ? __fget_files+0x3a0/0x420 [ 240.240265][T13188] __x64_sys_sendmsg+0x1bd/0x2a0 [ 240.240285][T13188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.240309][T13188] ? rcu_is_watching+0x15/0xb0 [ 240.240339][T13188] do_syscall_64+0x14d/0xf80 [ 240.240355][T13188] ? trace_irq_disable+0x3b/0x150 [ 240.240378][T13188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.240392][T13188] ? clear_bhb_loop+0x40/0x90 [ 240.240413][T13188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.240427][T13188] RIP: 0033:0x7fd3cfd9c799 [ 240.240447][T13188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.240460][T13188] RSP: 002b:00007fd3cdfee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.240481][T13188] RAX: ffffffffffffffda RBX: 00007fd3d0015fa0 RCX: 00007fd3cfd9c799 [ 240.240492][T13188] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 240.240501][T13188] RBP: 00007fd3cdfee090 R08: 0000000000000000 R09: 0000000000000000 [ 240.240510][T13188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.240519][T13188] R13: 00007fd3d0016038 R14: 00007fd3d0015fa0 R15: 00007ffe38c56268 [ 240.240543][T13188] [ 240.514340][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2691'. [ 240.526516][T13188] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2691'. [ 240.693202][T13192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2694'. [ 241.036591][T13152] lo speed is unknown, defaulting to 1000 [ 241.151263][T13211] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2700'. [ 241.176177][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2700'. [ 241.197620][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'. [ 241.444238][T13152] lo speed is unknown, defaulting to 1000 [ 241.816697][T13229] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 241.930639][T13152] lo speed is unknown, defaulting to 1000 [ 242.279855][T13247] netlink: 'syz.3.2714': attribute type 1 has an invalid length. [ 242.310294][T13247] 8021q: adding VLAN 0 to HW filter on device bond27 [ 242.323593][T13152] lo speed is unknown, defaulting to 1000 [ 243.207710][T13284] nbd30: detected capacity change from 0 to 63 [ 243.245291][T13285] bond28: entered allmulticast mode [ 243.286402][T13285] netlink: 'syz.3.2727': attribute type 4 has an invalid length. [ 243.322544][T13285] bridge1: entered promiscuous mode [ 243.331340][T13285] bridge1: entered allmulticast mode [ 243.342196][T13297] rdma_rxe: rxe_newlink: failed to add lo [ 243.881705][T13325] __nla_validate_parse: 6 callbacks suppressed [ 243.881727][T13325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2745'. [ 243.901592][ T5843] block nbd30: Receive control failed (result -32) [ 244.124560][T13337] netlink: 'syz.3.2752': attribute type 1 has an invalid length. [ 244.198296][T13346] SET target dimension over the limit! [ 244.225705][T13337] 8021q: adding VLAN 0 to HW filter on device bond29 [ 244.293101][T13347] bond23: (slave veth0_to_bond): Releasing active interface [ 244.306843][T13347] bond29: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 244.347589][T13337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2752'. [ 244.438499][T13364] net_ratelimit: 33 callbacks suppressed [ 244.438517][T13364] netlink: zone id is out of range [ 244.529307][T13370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2763'. [ 244.530262][T13364] netlink: del zone limit has 4 unknown bytes [ 244.637974][T13364] lo speed is unknown, defaulting to 1000 [ 244.819544][ T2298] block nbd8: Possible stuck request ffff888026878000: control (read@0,1024B). Runtime 120 seconds [ 244.841368][ T2298] block nbd8: Possible stuck request ffff888026878200: control (read@1024,1024B). Runtime 120 seconds [ 244.853932][ T2298] block nbd8: Possible stuck request ffff888026878400: control (read@2048,1024B). Runtime 120 seconds [ 244.867170][ T2298] block nbd8: Possible stuck request ffff888026878600: control (read@3072,1024B). Runtime 120 seconds [ 245.041361][T13385] xt_l2tp: v2 doesn't support IP mode [ 245.202944][T13397] FAULT_INJECTION: forcing a failure. [ 245.202944][T13397] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 245.219513][T13397] CPU: 0 UID: 0 PID: 13397 Comm: syz.2.2776 Not tainted syzkaller #0 PREEMPT(full) [ 245.219539][T13397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.219567][T13397] Call Trace: [ 245.219575][T13397] [ 245.219582][T13397] dump_stack_lvl+0xe8/0x150 [ 245.219613][T13397] should_fail_ex+0x412/0x560 [ 245.219643][T13397] _copy_from_iter+0x1d3/0x1670 [ 245.219672][T13397] ? rcu_is_watching+0x15/0xb0 [ 245.219702][T13397] ? __pfx__copy_from_iter+0x10/0x10 [ 245.219735][T13397] ? netlink_sendmsg+0x650/0xb40 [ 245.219752][T13397] ? skb_put+0x11b/0x210 [ 245.219772][T13397] netlink_sendmsg+0x6c0/0xb40 [ 245.219798][T13397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.219818][T13397] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.219846][T13397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.219869][T13397] ____sys_sendmsg+0x972/0x9f0 [ 245.219897][T13397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.219922][T13397] ? import_iovec+0x73/0xa0 [ 245.219943][T13397] ___sys_sendmsg+0x2a5/0x360 [ 245.219968][T13397] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.220017][T13397] ? __fget_files+0x2a/0x420 [ 245.220042][T13397] ? __fget_files+0x3a0/0x420 [ 245.220077][T13397] __x64_sys_sendmsg+0x1bd/0x2a0 [ 245.220099][T13397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.220127][T13397] ? __pfx_ksys_write+0x10/0x10 [ 245.220155][T13397] do_syscall_64+0x14d/0xf80 [ 245.220172][T13397] ? trace_irq_disable+0x3b/0x150 [ 245.220195][T13397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.220213][T13397] ? clear_bhb_loop+0x40/0x90 [ 245.220235][T13397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.220253][T13397] RIP: 0033:0x7f0fdbf9c799 [ 245.220280][T13397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.220296][T13397] RSP: 002b:00007f0fdce9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.220316][T13397] RAX: ffffffffffffffda RBX: 00007f0fdc215fa0 RCX: 00007f0fdbf9c799 [ 245.220327][T13397] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 245.220338][T13397] RBP: 00007f0fdce9f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.220349][T13397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.220360][T13397] R13: 00007f0fdc216038 R14: 00007f0fdc215fa0 R15: 00007fffdd2c9278 [ 245.220387][T13397] [ 245.508390][T13400] FAULT_INJECTION: forcing a failure. [ 245.508390][T13400] name failslab, interval 1, probability 0, space 0, times 0 [ 245.547267][T13400] CPU: 1 UID: 0 PID: 13400 Comm: syz.1.2775 Not tainted syzkaller #0 PREEMPT(full) [ 245.547294][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.547305][T13400] Call Trace: [ 245.547320][T13400] [ 245.547328][T13400] dump_stack_lvl+0xe8/0x150 [ 245.547359][T13400] should_fail_ex+0x412/0x560 [ 245.547389][T13400] should_failslab+0xa8/0x100 [ 245.547413][T13400] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 245.547433][T13400] ? __alloc_skb+0x186/0x7d0 [ 245.547450][T13400] ? __alloc_skb+0x1d0/0x7d0 [ 245.547464][T13400] ? __local_bh_enable_ip+0xd0/0x130 [ 245.547491][T13400] __alloc_skb+0x1d0/0x7d0 [ 245.547513][T13400] netlink_sendmsg+0x5d4/0xb40 [ 245.547540][T13400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.547560][T13400] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.547585][T13400] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.547605][T13400] ____sys_sendmsg+0x972/0x9f0 [ 245.547633][T13400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.547658][T13400] ? import_iovec+0x73/0xa0 [ 245.547678][T13400] ___sys_sendmsg+0x2a5/0x360 [ 245.547703][T13400] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.547750][T13400] ? __fget_files+0x2a/0x420 [ 245.547772][T13400] ? __fget_files+0x3a0/0x420 [ 245.547801][T13400] __x64_sys_sendmsg+0x1bd/0x2a0 [ 245.547822][T13400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.547850][T13400] ? __pfx_ksys_write+0x10/0x10 [ 245.547876][T13400] do_syscall_64+0x14d/0xf80 [ 245.547893][T13400] ? trace_irq_disable+0x3b/0x150 [ 245.547916][T13400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.547931][T13400] ? clear_bhb_loop+0x40/0x90 [ 245.547951][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.547966][T13400] RIP: 0033:0x7fd3cfd9c799 [ 245.547983][T13400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.547996][T13400] RSP: 002b:00007fd3cdfee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.548012][T13400] RAX: ffffffffffffffda RBX: 00007fd3d0015fa0 RCX: 00007fd3cfd9c799 [ 245.548024][T13400] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 0000000000000003 [ 245.548034][T13400] RBP: 00007fd3cdfee090 R08: 0000000000000000 R09: 0000000000000000 [ 245.548045][T13400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.548054][T13400] R13: 00007fd3d0016038 R14: 00007fd3d0015fa0 R15: 00007ffe38c56268 [ 245.548080][T13400] [ 245.937098][T13401] lo speed is unknown, defaulting to 1000 [ 246.041130][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2780'. [ 246.216611][T13426] netlink: 'syz.1.2785': attribute type 1 has an invalid length. [ 246.224532][T13426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.495462][T13441] openvswitch: netlink: Message has 4096 unknown bytes. [ 246.528184][T13439] rdma_rxe: rxe_newlink: failed to add lo [ 246.759333][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2795'. [ 246.942613][T13456] lo speed is unknown, defaulting to 1000 [ 247.252894][T13453] lo speed is unknown, defaulting to 1000 [ 247.805645][T13482] netlink: 'syz.2.2807': attribute type 4 has an invalid length. [ 247.863327][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2809'. [ 248.077313][T13490] netlink: 'syz.2.2811': attribute type 1 has an invalid length. [ 248.085322][T13490] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2811'. [ 248.303984][T13498] FAULT_INJECTION: forcing a failure. [ 248.303984][T13498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.379200][T13498] CPU: 0 UID: 0 PID: 13498 Comm: syz.0.2816 Not tainted syzkaller #0 PREEMPT(full) [ 248.379225][T13498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.379235][T13498] Call Trace: [ 248.379241][T13498] [ 248.379247][T13498] dump_stack_lvl+0xe8/0x150 [ 248.379275][T13498] should_fail_ex+0x412/0x560 [ 248.379302][T13498] _copy_from_iter+0x1d3/0x1670 [ 248.379327][T13498] ? rcu_is_watching+0x15/0xb0 [ 248.379354][T13498] ? __pfx__copy_from_iter+0x10/0x10 [ 248.379385][T13498] ? netlink_sendmsg+0x650/0xb40 [ 248.379399][T13498] ? skb_put+0x11b/0x210 [ 248.379419][T13498] netlink_sendmsg+0x6c0/0xb40 [ 248.379440][T13498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.379458][T13498] ? aa_sock_msg_perm+0xf1/0x1b0 [ 248.379483][T13498] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.379505][T13498] ____sys_sendmsg+0x972/0x9f0 [ 248.379532][T13498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.379558][T13498] ? import_iovec+0x73/0xa0 [ 248.379578][T13498] ___sys_sendmsg+0x2a5/0x360 [ 248.379601][T13498] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.379648][T13498] ? __fget_files+0x2a/0x420 [ 248.379671][T13498] ? __fget_files+0x3a0/0x420 [ 248.379703][T13498] __x64_sys_sendmsg+0x1bd/0x2a0 [ 248.379724][T13498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.379756][T13498] ? __pfx_ksys_write+0x10/0x10 [ 248.379783][T13498] do_syscall_64+0x14d/0xf80 [ 248.379798][T13498] ? trace_irq_disable+0x3b/0x150 [ 248.379823][T13498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.379840][T13498] ? clear_bhb_loop+0x40/0x90 [ 248.379860][T13498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.379877][T13498] RIP: 0033:0x7febf419c799 [ 248.379894][T13498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.379909][T13498] RSP: 002b:00007febf4f71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.379926][T13498] RAX: ffffffffffffffda RBX: 00007febf4415fa0 RCX: 00007febf419c799 [ 248.379939][T13498] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 248.379949][T13498] RBP: 00007febf4f71090 R08: 0000000000000000 R09: 0000000000000000 [ 248.379959][T13498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.379970][T13498] R13: 00007febf4416038 R14: 00007febf4415fa0 R15: 00007fff42159128 [ 248.379996][T13498] [ 248.792228][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 249.082992][T13524] lo speed is unknown, defaulting to 1000 [ 249.263674][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.273333][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.294866][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.319369][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.339353][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.712825][T13533] lo speed is unknown, defaulting to 1000 [ 249.785058][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2836'. [ 249.916990][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2839'. [ 249.940822][ T2257] block nbd14: Possible stuck request ffff888026af0000: control (read@0,1024B). Runtime 90 seconds [ 249.951725][ T2257] block nbd14: Possible stuck request ffff888026af0200: control (read@1024,1024B). Runtime 90 seconds [ 249.963300][ T2257] block nbd14: Possible stuck request ffff888026af0400: control (read@2048,1024B). Runtime 90 seconds [ 249.974411][ T2257] block nbd14: Possible stuck request ffff888026af0600: control (read@3072,1024B). Runtime 90 seconds [ 250.053371][T13563] netlink: 'syz.2.2840': attribute type 1 has an invalid length. [ 250.083677][T13548] lo speed is unknown, defaulting to 1000 [ 250.090849][T13548] lo speed is unknown, defaulting to 1000 [ 250.097983][T13548] lo speed is unknown, defaulting to 1000 [ 250.139574][T13548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 250.161149][T13563] 8021q: adding VLAN 0 to HW filter on device bond23 [ 250.184856][T13566] bond21: (slave veth0_to_bond): Releasing active interface [ 250.193766][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2840'. [ 250.218715][T13566] bond23: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 250.232880][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2842'. [ 250.255028][T13570] macvtap1: entered promiscuous mode [ 250.260969][T13570] bond0: entered promiscuous mode [ 250.266257][T13570] macvtap1: entered allmulticast mode [ 250.271784][T13570] bond0: entered allmulticast mode [ 250.277321][T13570] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 250.285154][T13548] lo speed is unknown, defaulting to 1000 [ 250.326674][T13548] lo speed is unknown, defaulting to 1000 [ 250.344421][T13548] lo speed is unknown, defaulting to 1000 [ 250.356238][T13548] lo speed is unknown, defaulting to 1000 [ 250.370950][T13548] lo speed is unknown, defaulting to 1000 [ 250.413273][T13548] lo speed is unknown, defaulting to 1000 [ 250.455812][T13548] lo speed is unknown, defaulting to 1000 [ 250.482814][T13579] FAULT_INJECTION: forcing a failure. [ 250.482814][T13579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.516919][T13533] chnl_net:caif_netlink_parms(): no params data found [ 250.517880][T13579] CPU: 1 UID: 0 PID: 13579 Comm: syz.2.2844 Not tainted syzkaller #0 PREEMPT(full) [ 250.517901][T13579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.517913][T13579] Call Trace: [ 250.517920][T13579] [ 250.517927][T13579] dump_stack_lvl+0xe8/0x150 [ 250.517958][T13579] should_fail_ex+0x412/0x560 [ 250.517987][T13579] _copy_from_iter+0x1d3/0x1670 [ 250.518014][T13579] ? unwind_next_frame+0xa5/0x23c0 [ 250.518046][T13579] ? __lock_acquire+0x6b5/0x2cf0 [ 250.518068][T13579] ? __pfx__copy_from_iter+0x10/0x10 [ 250.518108][T13579] tun_get_user+0x516/0x3dd0 [ 250.518136][T13579] ? aa_file_perm+0x192/0x15e0 [ 250.518156][T13579] ? aa_file_perm+0x50e/0x15e0 [ 250.518172][T13579] ? __pfx_tun_get_user+0x10/0x10 [ 250.518187][T13579] ? aa_file_perm+0x192/0x15e0 [ 250.518208][T13579] ? __lock_acquire+0x6b5/0x2cf0 [ 250.518238][T13579] ? ref_tracker_alloc+0x35c/0x4c0 [ 250.518265][T13579] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 250.518296][T13579] ? tun_get+0x1c/0x2f0 [ 250.518317][T13579] ? tun_get+0x1c/0x2f0 [ 250.518332][T13579] ? tun_get+0x1c/0x2f0 [ 250.518353][T13579] tun_chr_write_iter+0x113/0x200 [ 250.518373][T13579] vfs_write+0x61d/0xb90 [ 250.518399][T13579] ? __pfx_vfs_write+0x10/0x10 [ 250.518425][T13579] ? __fget_files+0x2a/0x420 [ 250.518458][T13579] ksys_write+0x150/0x270 [ 250.518487][T13579] ? __pfx_ksys_write+0x10/0x10 [ 250.518515][T13579] do_syscall_64+0x14d/0xf80 [ 250.518533][T13579] ? trace_irq_disable+0x3b/0x150 [ 250.518558][T13579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.518575][T13579] ? clear_bhb_loop+0x40/0x90 [ 250.518597][T13579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.518614][T13579] RIP: 0033:0x7f0fdbf9c799 [ 250.518630][T13579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.518646][T13579] RSP: 002b:00007f0fdce9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.518664][T13579] RAX: ffffffffffffffda RBX: 00007f0fdc215fa0 RCX: 00007f0fdbf9c799 [ 250.518677][T13579] RDX: 000000000000ff04 RSI: 00002000000024c0 RDI: 0000000000000003 [ 250.518688][T13579] RBP: 00007f0fdce9f090 R08: 0000000000000000 R09: 0000000000000000 [ 250.518699][T13579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.518710][T13579] R13: 00007f0fdc216038 R14: 00007f0fdc215fa0 R15: 00007fffdd2c9278 [ 250.518736][T13579] [ 250.708153][T13584] netlink: 'syz.1.2847': attribute type 3 has an invalid length. [ 250.985189][T13598] tipc: Enabling of bearer rejected, failed to enable media [ 251.004113][T13598] syzkaller0: entered promiscuous mode [ 251.018252][T13598] syzkaller0: entered allmulticast mode [ 251.077943][T13600] netlink: 'syz.2.2852': attribute type 1 has an invalid length. [ 251.235026][T13600] 8021q: adding VLAN 0 to HW filter on device bond24 [ 251.311827][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 251.321617][T13600] bond23: (slave veth0_to_bond): Releasing active interface [ 251.359325][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 251.393815][ T5830] Bluetooth: hci5: command tx timeout [ 251.472527][T13600] bond24: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 251.491429][T13533] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.498810][T13533] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.506444][T13533] bridge_slave_0: entered allmulticast mode [ 251.544765][T13533] bridge_slave_0: entered promiscuous mode [ 251.572062][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2854'. [ 251.596323][T13617] erspan0: entered promiscuous mode [ 251.654808][T13617] macvtap2: entered promiscuous mode [ 251.660945][T13617] macvtap2: entered allmulticast mode [ 251.666489][T13617] erspan0: entered allmulticast mode [ 251.675460][T13533] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.683838][T13533] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.692212][T13533] bridge_slave_1: entered allmulticast mode [ 251.705261][T13533] bridge_slave_1: entered promiscuous mode [ 252.015874][T13533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.059919][T13533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.135015][T13635] FAULT_INJECTION: forcing a failure. [ 252.135015][T13635] name failslab, interval 1, probability 0, space 0, times 0 [ 252.176923][T13635] CPU: 1 UID: 0 PID: 13635 Comm: syz.0.2861 Not tainted syzkaller #0 PREEMPT(full) [ 252.176948][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.176959][T13635] Call Trace: [ 252.176967][T13635] [ 252.176974][T13635] dump_stack_lvl+0xe8/0x150 [ 252.177003][T13635] should_fail_ex+0x412/0x560 [ 252.177034][T13635] should_failslab+0xa8/0x100 [ 252.177059][T13635] __kmalloc_cache_noprof+0x88/0x660 [ 252.177080][T13635] ? nfnetlink_rcv+0xfe1/0x27b0 [ 252.177110][T13635] nfnetlink_rcv+0xfe1/0x27b0 [ 252.177132][T13635] ? is_bpf_text_address+0x26/0x2b0 [ 252.177184][T13635] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 252.177218][T13635] ? __lock_acquire+0x6b5/0x2cf0 [ 252.177274][T13635] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.177319][T13635] netlink_unicast+0x80f/0x9b0 [ 252.177352][T13635] ? __pfx_netlink_unicast+0x10/0x10 [ 252.177377][T13635] ? netlink_sendmsg+0x650/0xb40 [ 252.177392][T13635] ? skb_put+0x11b/0x210 [ 252.177413][T13635] netlink_sendmsg+0x813/0xb40 [ 252.177439][T13635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.177459][T13635] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.177485][T13635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.177508][T13635] ____sys_sendmsg+0x972/0x9f0 [ 252.177538][T13635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.177567][T13635] ? import_iovec+0x73/0xa0 [ 252.177590][T13635] ___sys_sendmsg+0x2a5/0x360 [ 252.177615][T13635] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.177669][T13635] ? __fget_files+0x2a/0x420 [ 252.177694][T13635] ? __fget_files+0x3a0/0x420 [ 252.177736][T13635] __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.177760][T13635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.177790][T13635] ? __pfx_ksys_write+0x10/0x10 [ 252.177820][T13635] do_syscall_64+0x14d/0xf80 [ 252.177840][T13635] ? trace_irq_disable+0x3b/0x150 [ 252.177865][T13635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.177884][T13635] ? clear_bhb_loop+0x40/0x90 [ 252.177906][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.177924][T13635] RIP: 0033:0x7febf419c799 [ 252.177941][T13635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.177957][T13635] RSP: 002b:00007febf4f71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.177977][T13635] RAX: ffffffffffffffda RBX: 00007febf4415fa0 RCX: 00007febf419c799 [ 252.177990][T13635] RDX: 0000000000040880 RSI: 0000200000000180 RDI: 0000000000000003 [ 252.178001][T13635] RBP: 00007febf4f71090 R08: 0000000000000000 R09: 0000000000000000 [ 252.178013][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.178023][T13635] R13: 00007febf4416038 R14: 00007febf4415fa0 R15: 00007fff42159128 [ 252.178052][T13635] [ 252.455437][T13631] netlink: 'syz.3.2859': attribute type 4 has an invalid length. [ 252.484891][T13629] lo speed is unknown, defaulting to 1000 [ 252.486589][T13533] team0: Port device team_slave_0 added [ 252.499855][ T2257] block nbd9: Possible stuck request ffff8880268d0000: control (read@0,1024B). Runtime 120 seconds [ 252.513063][ T2257] block nbd9: Possible stuck request ffff8880268d0200: control (read@1024,1024B). Runtime 120 seconds [ 252.525029][ T2257] block nbd9: Possible stuck request ffff8880268d0400: control (read@2048,1024B). Runtime 120 seconds [ 252.536299][ T2257] block nbd9: Possible stuck request ffff8880268d0600: control (read@3072,1024B). Runtime 120 seconds [ 252.548763][T13533] team0: Port device team_slave_1 added [ 252.575026][T13643] netlink: 'syz.0.2864': attribute type 1 has an invalid length. [ 252.635387][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2865'. [ 252.704705][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'. [ 252.714913][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'. [ 252.728042][T13645] erspan0: entered promiscuous mode [ 252.755227][T13645] macvtap1: entered promiscuous mode [ 252.761608][T13645] macvtap1: entered allmulticast mode [ 252.771593][T13645] erspan0: entered allmulticast mode [ 252.818413][T13643] 8021q: adding VLAN 0 to HW filter on device bond21 [ 252.834849][T13646] bond19: (slave veth0_to_bond): Releasing active interface [ 252.853649][T13646] bond21: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 252.864126][T13629] lo speed is unknown, defaulting to 1000 [ 252.879803][T13533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.886956][T13533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.931134][T13533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.943612][T13533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.950808][T13533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.981965][T13533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.094921][T13533] hsr_slave_0: entered promiscuous mode [ 253.113562][T13533] hsr_slave_1: entered promiscuous mode [ 253.158571][T13655] lo speed is unknown, defaulting to 1000 [ 253.169318][ T2257] block nbd15: Possible stuck request ffff888026b68000: control (read@0,1024B). Runtime 90 seconds [ 253.180418][ T2257] block nbd15: Possible stuck request ffff888026b68200: control (read@1024,1024B). Runtime 90 seconds [ 253.191475][ T2257] block nbd15: Possible stuck request ffff888026b68400: control (read@2048,1024B). Runtime 90 seconds [ 253.203742][ T2257] block nbd15: Possible stuck request ffff888026b68600: control (read@3072,1024B). Runtime 90 seconds [ 253.466304][ T5830] Bluetooth: hci5: command tx timeout [ 253.537904][T13658] lo speed is unknown, defaulting to 1000 [ 253.593725][T13674] macvtap1: entered promiscuous mode [ 253.601581][T13674] erspan0: entered promiscuous mode [ 253.607136][T13674] macvtap1: entered allmulticast mode [ 253.616441][T13674] erspan0: entered allmulticast mode [ 253.666367][T13676] netlink: 'syz.2.2877': attribute type 1 has an invalid length. [ 253.737579][T13676] 8021q: adding VLAN 0 to HW filter on device bond25 [ 253.829768][T13681] bond24: (slave veth0_to_bond): Releasing active interface [ 253.863906][T13681] bond25: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 253.898861][T13680] ip6gre1: entered promiscuous mode [ 253.918940][T13680] ip6gre1: entered allmulticast mode [ 253.931115][T13658] lo speed is unknown, defaulting to 1000 [ 254.045421][T13655] lo speed is unknown, defaulting to 1000 [ 254.598818][T13533] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.627549][T13533] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 254.676726][T13533] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 254.798704][T13533] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.864730][T13704] xt_l2tp: v2 doesn't support IP mode [ 254.967629][T13719] netlink: 'syz.0.2887': attribute type 72 has an invalid length. [ 255.030321][T13719] __nla_validate_parse: 5 callbacks suppressed [ 255.030337][T13719] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2887'. [ 255.067824][T13533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.113193][T13533] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.132831][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.140443][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.156122][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.163331][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.325701][T13730] lo speed is unknown, defaulting to 1000 [ 255.545951][ T5830] Bluetooth: hci5: command tx timeout [ 255.704465][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.857559][T13752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.879257][T13752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.885381][T13755] netlink: 'syz.0.2898': attribute type 72 has an invalid length. [ 255.897916][T13752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.905660][T13752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.919400][T13755] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2898'. [ 255.982404][T13758] bond17: entered promiscuous mode [ 255.988741][T13758] bond17: entered allmulticast mode [ 255.995114][T13758] 8021q: adding VLAN 0 to HW filter on device bond17 [ 256.016680][T13730] lo speed is unknown, defaulting to 1000 [ 256.058754][T13533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.333793][T13775] FAULT_INJECTION: forcing a failure. [ 256.333793][T13775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.353621][T13775] CPU: 0 UID: 0 PID: 13775 Comm: syz.1.2904 Not tainted syzkaller #0 PREEMPT(full) [ 256.353647][T13775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.353657][T13775] Call Trace: [ 256.353663][T13775] [ 256.353671][T13775] dump_stack_lvl+0xe8/0x150 [ 256.353699][T13775] should_fail_ex+0x412/0x560 [ 256.353725][T13775] _copy_from_user+0x2d/0xb0 [ 256.353744][T13775] ___sys_sendmsg+0x1c6/0x360 [ 256.353769][T13775] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.353815][T13775] ? __fget_files+0x2a/0x420 [ 256.353839][T13775] ? __fget_files+0x3a0/0x420 [ 256.353868][T13775] __x64_sys_sendmsg+0x1bd/0x2a0 [ 256.353889][T13775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.353915][T13775] ? __pfx_ksys_write+0x10/0x10 [ 256.353943][T13775] do_syscall_64+0x14d/0xf80 [ 256.353961][T13775] ? trace_irq_disable+0x3b/0x150 [ 256.353986][T13775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.354003][T13775] ? clear_bhb_loop+0x40/0x90 [ 256.354024][T13775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.354041][T13775] RIP: 0033:0x7fd3cfd9c799 [ 256.354059][T13775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.354075][T13775] RSP: 002b:00007fd3cdfee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.354094][T13775] RAX: ffffffffffffffda RBX: 00007fd3d0015fa0 RCX: 00007fd3cfd9c799 [ 256.354106][T13775] RDX: 0000000020004800 RSI: 0000200000000200 RDI: 0000000000000003 [ 256.354117][T13775] RBP: 00007fd3cdfee090 R08: 0000000000000000 R09: 0000000000000000 [ 256.354129][T13775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.354139][T13775] R13: 00007fd3d0016038 R14: 00007fd3d0015fa0 R15: 00007ffe38c56268 [ 256.354167][T13775] [ 256.758981][T13533] veth0_vlan: entered promiscuous mode [ 256.773883][T13533] veth1_vlan: entered promiscuous mode [ 256.818953][T13533] veth0_macvtap: entered promiscuous mode [ 256.885659][T13533] veth1_macvtap: entered promiscuous mode [ 256.917335][T13785] netlink: 'syz.0.2907': attribute type 1 has an invalid length. [ 256.925176][T13785] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2907'. [ 256.973112][T13533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.013166][T13533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.051191][T13789] netlink: 'syz.0.2910': attribute type 72 has an invalid length. [ 257.076855][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.088286][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.091772][T13789] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2910'. [ 257.134929][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.179891][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.268026][T13798] FAULT_INJECTION: forcing a failure. [ 257.268026][T13798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.317722][T13798] CPU: 1 UID: 0 PID: 13798 Comm: syz.1.2914 Not tainted syzkaller #0 PREEMPT(full) [ 257.317751][T13798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.317763][T13798] Call Trace: [ 257.317770][T13798] [ 257.317778][T13798] dump_stack_lvl+0xe8/0x150 [ 257.317808][T13798] should_fail_ex+0x412/0x560 [ 257.317838][T13798] _copy_from_user+0x2d/0xb0 [ 257.317859][T13798] ___sys_sendmsg+0x1c6/0x360 [ 257.317886][T13798] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.317913][T13798] ? kstrtouint+0x6e/0xe0 [ 257.317959][T13798] ? __fget_files+0x2a/0x420 [ 257.317986][T13798] ? __fget_files+0x3a0/0x420 [ 257.318019][T13798] __sys_sendmmsg+0x27c/0x4e0 [ 257.318044][T13798] ? __pfx___sys_sendmmsg+0x10/0x10 [ 257.318063][T13798] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 257.318106][T13798] ? ksys_write+0x242/0x270 [ 257.318128][T13798] ? __pfx_ksys_write+0x10/0x10 [ 257.318162][T13798] __x64_sys_sendmmsg+0xa0/0xc0 [ 257.318185][T13798] do_syscall_64+0x14d/0xf80 [ 257.318204][T13798] ? trace_irq_disable+0x3b/0x150 [ 257.318230][T13798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.318248][T13798] ? clear_bhb_loop+0x40/0x90 [ 257.318270][T13798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.318288][T13798] RIP: 0033:0x7fd3cfd9c799 [ 257.318306][T13798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.318322][T13798] RSP: 002b:00007fd3cdfee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 257.318339][T13798] RAX: ffffffffffffffda RBX: 00007fd3d0015fa0 RCX: 00007fd3cfd9c799 [ 257.318352][T13798] RDX: 000000000000ff80 RSI: 00002000000053c0 RDI: 0000000000000004 [ 257.318364][T13798] RBP: 00007fd3cdfee090 R08: 0000000000000000 R09: 0000000000000000 [ 257.318374][T13798] R10: 0000000000004050 R11: 0000000000000246 R12: 0000000000000001 [ 257.318385][T13798] R13: 00007fd3d0016038 R14: 00007fd3d0015fa0 R15: 00007ffe38c56268 [ 257.318414][T13798] [ 257.555982][T13803] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2913'. [ 257.566867][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.578156][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.639597][ T5830] Bluetooth: hci5: command tx timeout [ 257.648604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.692476][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.900181][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 257.987538][T13820] netlink: 'syz.1.2919': attribute type 1 has an invalid length. [ 258.003922][T13820] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2919'. [ 258.228920][T13828] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2922'. [ 258.280366][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'. [ 258.435754][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.446369][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.456504][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.475951][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.489011][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.698261][T13837] lo speed is unknown, defaulting to 1000 [ 259.149348][T13866] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2935'. [ 259.207750][T13837] lo speed is unknown, defaulting to 1000 [ 259.207785][T13841] lo speed is unknown, defaulting to 1000 [ 259.248546][T13869] IPv6: Can't replace route, no match found [ 259.409311][T13876] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 259.463987][T13876] SET target dimension over the limit! [ 259.556815][T13841] lo speed is unknown, defaulting to 1000 [ 259.666792][T13837] chnl_net:caif_netlink_parms(): no params data found [ 260.066524][T13837] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.073909][T13837] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.099525][T13837] bridge_slave_0: entered allmulticast mode [ 260.118067][T13912] __nla_validate_parse: 3 callbacks suppressed [ 260.118086][T13912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2950'. [ 260.126412][T13837] bridge_slave_0: entered promiscuous mode [ 260.165567][T13837] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.174379][T13837] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.188242][T13837] bridge_slave_1: entered allmulticast mode [ 260.196720][T13837] bridge_slave_1: entered promiscuous mode [ 260.202665][ T2257] block nbd10: Possible stuck request ffff888026948000: control (read@0,1024B). Runtime 120 seconds [ 260.215443][ T2257] block nbd10: Possible stuck request ffff888026948200: control (read@1024,1024B). Runtime 120 seconds [ 260.226588][ T2257] block nbd10: Possible stuck request ffff888026948400: control (read@2048,1024B). Runtime 120 seconds [ 260.238191][ T2257] block nbd10: Possible stuck request ffff888026948600: control (read@3072,1024B). Runtime 120 seconds [ 260.346488][T13921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.469323][T13913] lo speed is unknown, defaulting to 1000 [ 260.477415][T13837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.527723][T13837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.659290][ T5843] Bluetooth: hci1: command tx timeout [ 260.768194][T13837] team0: Port device team_slave_0 added [ 260.769732][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2956'. [ 260.780196][T13913] lo speed is unknown, defaulting to 1000 [ 260.804393][T13932] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2958'. [ 260.818171][T13837] team0: Port device team_slave_1 added [ 260.921160][T13837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.930714][T13837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.977319][T13837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.011668][T13837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.018661][T13837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.080609][T13837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.120510][T13943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2961'. [ 261.466957][ T2257] block nbd4: Possible stuck request ffff888026710000: control (read@0,1024B). Runtime 150 seconds [ 261.480062][ T2257] block nbd4: Possible stuck request ffff888026710200: control (read@1024,1024B). Runtime 150 seconds [ 261.491482][ T2257] block nbd4: Possible stuck request ffff888026710400: control (read@2048,1024B). Runtime 150 seconds [ 261.502872][ T2257] block nbd4: Possible stuck request ffff888026710600: control (read@3072,1024B). Runtime 150 seconds [ 261.687792][T13950] : renamed from veth0_to_bond (while UP) [ 261.828633][T13837] hsr_slave_0: entered promiscuous mode [ 261.870264][T13837] hsr_slave_1: entered promiscuous mode [ 261.877094][T13837] debugfs: 'hsr0' already exists in 'hsr' [ 261.887438][T13957] netlink: 'syz.2.2967': attribute type 1 has an invalid length. [ 261.889281][T13837] Cannot create hsr debugfs directory [ 261.909392][T13957] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2967'. [ 262.057399][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'. [ 262.110552][ T2257] block nbd11: Possible stuck request ffff8880269b0000: control (read@0,1024B). Runtime 120 seconds [ 262.121500][ T2257] block nbd11: Possible stuck request ffff8880269b0200: control (read@1024,1024B). Runtime 120 seconds [ 262.134871][ T2257] block nbd11: Possible stuck request ffff8880269b0400: control (read@2048,1024B). Runtime 120 seconds [ 262.146186][ T2257] block nbd11: Possible stuck request ffff8880269b0600: control (read@3072,1024B). Runtime 120 seconds [ 262.272457][T13963] xt_l2tp: v2 doesn't support IP mode [ 262.330421][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2972'. [ 262.370697][T13969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2972'. [ 262.539407][T13985] nbd31: detected capacity change from 0 to 63 [ 262.573477][T13981] netlink: 'syz.4.2977': attribute type 1 has an invalid length. [ 262.587876][T13981] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2977'. [ 262.614864][T13837] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.627203][T13990] FAULT_INJECTION: forcing a failure. [ 262.627203][T13990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.652020][T13990] CPU: 1 UID: 0 PID: 13990 Comm: syz.2.2980 Not tainted syzkaller #0 PREEMPT(full) [ 262.652044][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.652054][T13990] Call Trace: [ 262.652061][T13990] [ 262.652068][T13990] dump_stack_lvl+0xe8/0x150 [ 262.652096][T13990] should_fail_ex+0x412/0x560 [ 262.652125][T13990] _copy_to_user+0x31/0xb0 [ 262.652146][T13990] simple_read_from_buffer+0xe1/0x170 [ 262.652174][T13990] proc_fail_nth_read+0x1bb/0x230 [ 262.652202][T13990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.652228][T13990] ? rw_verify_area+0x2a6/0x4d0 [ 262.652259][T13990] ? __lock_acquire+0x6b5/0x2cf0 [ 262.652280][T13990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.652306][T13990] vfs_read+0x20c/0xa70 [ 262.652331][T13990] ? fdget_pos+0x246/0x320 [ 262.652361][T13990] ? __pfx___mutex_lock+0x10/0x10 [ 262.652381][T13990] ? __pfx_vfs_read+0x10/0x10 [ 262.652401][T13990] ? __fget_files+0x2a/0x420 [ 262.652430][T13990] ? __fget_files+0x3a0/0x420 [ 262.652454][T13990] ? __fget_files+0x2a/0x420 [ 262.652484][T13990] ksys_read+0x150/0x270 [ 262.652505][T13990] ? __pfx_ksys_read+0x10/0x10 [ 262.652535][T13990] do_syscall_64+0x14d/0xf80 [ 262.652553][T13990] ? trace_irq_disable+0x3b/0x150 [ 262.652579][T13990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.652597][T13990] ? clear_bhb_loop+0x40/0x90 [ 262.652619][T13990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.652637][T13990] RIP: 0033:0x7f0fdbf5cfce [ 262.652655][T13990] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.652670][T13990] RSP: 002b:00007f0fdce9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.652689][T13990] RAX: ffffffffffffffda RBX: 00007f0fdce9f6c0 RCX: 00007f0fdbf5cfce [ 262.652703][T13990] RDX: 000000000000000f RSI: 00007f0fdce9f0a0 RDI: 0000000000000005 [ 262.652714][T13990] RBP: 00007f0fdce9f090 R08: 0000000000000000 R09: 0000000000000000 [ 262.652725][T13990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.652736][T13990] R13: 00007f0fdc216038 R14: 00007f0fdc215fa0 R15: 00007fffdd2c9278 [ 262.652766][T13990] [ 262.679877][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 262.765937][ T5830] Bluetooth: hci1: command tx timeout [ 262.884959][T14000] netlink: 'syz.4.2983': attribute type 10 has an invalid length. [ 262.888773][ T2257] block nbd16: Possible stuck request ffff888047338000: control (read@0,1024B). Runtime 90 seconds [ 262.897805][T13992] macvtap3: entered promiscuous mode [ 262.901099][ T2257] block nbd16: Possible stuck request ffff888047338200: control (read@1024,1024B). Runtime 90 seconds [ 262.915241][T13992] macvtap3: entered allmulticast mode [ 262.919563][ T2257] block nbd16: Possible stuck request ffff888047338400: control (read@2048,1024B). Runtime 90 seconds [ 262.919596][ T2257] block nbd16: Possible stuck request ffff888047338600: control (read@3072,1024B). Runtime 90 seconds [ 262.965951][T13992] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 262.993225][T13837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.050809][T14003] bond0: (slave bond_slave_0): Releasing backup interface [ 263.074836][T14000] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.082508][T14000] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.090925][ T5843] block nbd31: Receive control failed (result -32) [ 263.095023][T14000] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.104991][T14000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.112537][T14000] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.119823][T14000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.174472][T14000] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 263.235503][T13837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.324253][T14005] xt_l2tp: v2 doesn't support IP mode [ 263.400664][ T2257] block nbd12: Possible stuck request ffff8880269d8000: control (read@0,1024B). Runtime 120 seconds [ 263.413743][ T2257] block nbd12: Possible stuck request ffff8880269d8200: control (read@1024,1024B). Runtime 120 seconds [ 263.414703][T14018] xt_l2tp: missing protocol rule (udp|l2tpip) [ 263.424994][ T2257] block nbd12: Possible stuck request ffff8880269d8400: control (read@2048,1024B). Runtime 120 seconds [ 263.442262][ T2257] block nbd12: Possible stuck request ffff8880269d8600: control (read@3072,1024B). Runtime 120 seconds [ 263.458775][T13837] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.618609][T14029] FAULT_INJECTION: forcing a failure. [ 263.618609][T14029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.634176][T14029] CPU: 0 UID: 0 PID: 14029 Comm: syz.2.2990 Not tainted syzkaller #0 PREEMPT(full) [ 263.634211][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.634223][T14029] Call Trace: [ 263.634231][T14029] [ 263.634239][T14029] dump_stack_lvl+0xe8/0x150 [ 263.634269][T14029] should_fail_ex+0x412/0x560 [ 263.634300][T14029] _copy_from_user+0x2d/0xb0 [ 263.634321][T14029] do_sock_getsockopt+0x165/0x3f0 [ 263.634346][T14029] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 263.634367][T14029] ? __fget_files+0x3a0/0x420 [ 263.634392][T14029] ? __fget_files+0x2a/0x420 [ 263.634424][T14029] __x64_sys_getsockopt+0x1a4/0x240 [ 263.634452][T14029] do_syscall_64+0x14d/0xf80 [ 263.634471][T14029] ? trace_irq_disable+0x3b/0x150 [ 263.634496][T14029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.634515][T14029] ? clear_bhb_loop+0x40/0x90 [ 263.634535][T14029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.634552][T14029] RIP: 0033:0x7f0fdbf9c799 [ 263.634569][T14029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.634585][T14029] RSP: 002b:00007f0fdce7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 263.634605][T14029] RAX: ffffffffffffffda RBX: 00007f0fdc216090 RCX: 00007f0fdbf9c799 [ 263.634619][T14029] RDX: 0000000000000004 RSI: 0000000000000112 RDI: 0000000000000004 [ 263.634629][T14029] RBP: 00007f0fdce7e090 R08: 0000200000000080 R09: 0000000000000000 [ 263.634641][T14029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.634652][T14029] R13: 00007f0fdc216128 R14: 00007f0fdc216090 R15: 00007fffdd2c9278 [ 263.634680][T14029] [ 263.893002][T13837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.904678][T13837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.909060][T14034] netlink: 'syz.4.2991': attribute type 1 has an invalid length. [ 263.926606][T13837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.939467][T13837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.027305][T13837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.052217][T13837] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.070156][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.077379][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.094510][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.101647][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.115964][T14045] macvtap4: entered promiscuous mode [ 264.123780][T14045] macvtap4: entered allmulticast mode [ 264.130691][T14045] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 264.278354][T14051] netlink: 'syz.3.2997': attribute type 1 has an invalid length. [ 264.322192][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a8f7400: rx timeout, send abort [ 264.345484][T14051] 8021q: adding VLAN 0 to HW filter on device bond30 [ 264.438562][T13837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.487801][T13837] veth0_vlan: entered promiscuous mode [ 264.502400][T13837] veth1_vlan: entered promiscuous mode [ 264.573854][T13837] veth0_macvtap: entered promiscuous mode [ 264.591987][T13837] veth1_macvtap: entered promiscuous mode [ 264.636676][T13837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.662630][ T2298] block nbd17: Possible stuck request ffff888044410000: control (read@0,1024B). Runtime 90 seconds [ 264.663840][T13837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.675348][ T2298] block nbd17: Possible stuck request ffff888044410200: control (read@1024,1024B). Runtime 90 seconds [ 264.693622][ T2298] block nbd17: Possible stuck request ffff888044410400: control (read@2048,1024B). Runtime 90 seconds [ 264.705918][ T2298] block nbd17: Possible stuck request ffff888044410600: control (read@3072,1024B). Runtime 90 seconds [ 264.720800][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.723019][T14067] netlink: 'syz.0.3003': attribute type 1 has an invalid length. [ 264.738520][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.757927][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.788107][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.822309][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a8f7000: rx timeout, send abort [ 264.831445][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a8f7400: abort rx timeout. Force session deactivation [ 264.990540][ T5830] Bluetooth: hci1: command tx timeout [ 265.009789][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.021683][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.053577][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.066797][T14077] bond_slave_1: entered promiscuous mode [ 265.072784][T14077] bridge0: entered promiscuous mode [ 265.099264][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.127916][T14077] macvtap1: entered promiscuous mode [ 265.159325][T14077] bond0: entered promiscuous mode [ 265.165221][T14077] macvtap1: entered allmulticast mode [ 265.173314][T14077] bond0: entered allmulticast mode [ 265.178614][T14077] bond_slave_1: entered allmulticast mode [ 265.186767][T14077] bridge0: entered allmulticast mode [ 265.196867][T14077] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 265.330647][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a8f7000: abort rx timeout. Force session deactivation [ 265.448080][T14092] netlink: 'syz.4.3009': attribute type 1 has an invalid length. [ 265.492244][T14092] __nla_validate_parse: 6 callbacks suppressed [ 265.492265][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3009'. [ 265.816181][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.827185][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.835883][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.844048][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.854459][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.917061][T14108] lo speed is unknown, defaulting to 1000 [ 266.175290][T14121] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3016'. [ 266.388338][T14108] lo speed is unknown, defaulting to 1000 [ 266.653391][T14134] syzkaller1: entered promiscuous mode [ 266.679245][T14134] syzkaller1: entered allmulticast mode [ 267.059560][ T5832] Bluetooth: hci1: command 0x0419 tx timeout [ 267.081910][T14161] FAULT_INJECTION: forcing a failure. [ 267.081910][T14161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.086910][T14108] chnl_net:caif_netlink_parms(): no params data found [ 267.154643][T14161] CPU: 1 UID: 0 PID: 14161 Comm: syz.4.3026 Not tainted syzkaller #0 PREEMPT(full) [ 267.154669][T14161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.154680][T14161] Call Trace: [ 267.154687][T14161] [ 267.154694][T14161] dump_stack_lvl+0xe8/0x150 [ 267.154725][T14161] should_fail_ex+0x412/0x560 [ 267.154754][T14161] _copy_from_user+0x2d/0xb0 [ 267.154774][T14161] ___sys_sendmsg+0x1c6/0x360 [ 267.154799][T14161] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.154847][T14161] ? __fget_files+0x2a/0x420 [ 267.154871][T14161] ? __fget_files+0x3a0/0x420 [ 267.154902][T14161] __x64_sys_sendmsg+0x1bd/0x2a0 [ 267.154925][T14161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.154954][T14161] ? __pfx_ksys_write+0x10/0x10 [ 267.154983][T14161] do_syscall_64+0x14d/0xf80 [ 267.155001][T14161] ? trace_irq_disable+0x3b/0x150 [ 267.155025][T14161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.155043][T14161] ? clear_bhb_loop+0x40/0x90 [ 267.155063][T14161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.155079][T14161] RIP: 0033:0x7f8ffdd9c799 [ 267.155097][T14161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.155112][T14161] RSP: 002b:00007f8ffebf8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.155130][T14161] RAX: ffffffffffffffda RBX: 00007f8ffe015fa0 RCX: 00007f8ffdd9c799 [ 267.155142][T14161] RDX: 0000000000008840 RSI: 0000200000000280 RDI: 0000000000000004 [ 267.155153][T14161] RBP: 00007f8ffebf8090 R08: 0000000000000000 R09: 0000000000000000 [ 267.155165][T14161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.155176][T14161] R13: 00007f8ffe016038 R14: 00007f8ffe015fa0 R15: 00007ffdb0472718 [ 267.155203][T14161] [ 267.566137][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.584334][T14108] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.592089][T14108] bridge_slave_0: entered allmulticast mode [ 267.600344][T14108] bridge_slave_0: entered promiscuous mode [ 267.611098][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.618474][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.626336][T14108] bridge_slave_1: entered allmulticast mode [ 267.635002][T14108] bridge_slave_1: entered promiscuous mode [ 267.678398][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.716107][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.861178][ T2298] block nbd18: Possible stuck request ffff888038fb8000: control (read@0,1024B). Runtime 90 seconds [ 267.872278][ T2298] block nbd18: Possible stuck request ffff888038fb8200: control (read@1024,1024B). Runtime 90 seconds [ 267.885857][ T2298] block nbd18: Possible stuck request ffff888038fb8400: control (read@2048,1024B). Runtime 90 seconds [ 267.900840][ T2298] block nbd18: Possible stuck request ffff888038fb8600: control (read@3072,1024B). Runtime 90 seconds [ 267.908687][T14108] team0: Port device team_slave_0 added [ 267.939467][ T5843] Bluetooth: hci4: command tx timeout [ 267.942113][T14198] FAULT_INJECTION: forcing a failure. [ 267.942113][T14198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.971813][T14108] team0: Port device team_slave_1 added [ 267.980228][T14198] CPU: 0 UID: 0 PID: 14198 Comm: syz.1.3037 Not tainted syzkaller #0 PREEMPT(full) [ 267.980254][T14198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.980266][T14198] Call Trace: [ 267.980273][T14198] [ 267.980281][T14198] dump_stack_lvl+0xe8/0x150 [ 267.980319][T14198] should_fail_ex+0x412/0x560 [ 267.980349][T14198] _copy_from_user+0x2d/0xb0 [ 267.980368][T14198] ___sys_sendmsg+0x1c6/0x360 [ 267.980396][T14198] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.980446][T14198] ? __fget_files+0x2a/0x420 [ 267.980472][T14198] ? __fget_files+0x3a0/0x420 [ 267.980503][T14198] __x64_sys_sendmsg+0x1bd/0x2a0 [ 267.980524][T14198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.980551][T14198] ? __pfx_ksys_write+0x10/0x10 [ 267.980581][T14198] do_syscall_64+0x14d/0xf80 [ 267.980599][T14198] ? trace_irq_disable+0x3b/0x150 [ 267.980623][T14198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.980639][T14198] ? clear_bhb_loop+0x40/0x90 [ 267.980661][T14198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.980679][T14198] RIP: 0033:0x7fad56b9c799 [ 267.980696][T14198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.980711][T14198] RSP: 002b:00007fad57a01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.980730][T14198] RAX: ffffffffffffffda RBX: 00007fad56e15fa0 RCX: 00007fad56b9c799 [ 267.980743][T14198] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 267.980755][T14198] RBP: 00007fad57a01090 R08: 0000000000000000 R09: 0000000000000000 [ 267.980766][T14198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.980777][T14198] R13: 00007fad56e16038 R14: 00007fad56e15fa0 R15: 00007ffee7df26d8 [ 267.980803][T14198] [ 268.193258][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.200306][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.227594][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.241050][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.248022][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.274287][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.352289][T14108] hsr_slave_0: entered promiscuous mode [ 268.360139][T14108] hsr_slave_1: entered promiscuous mode [ 268.366853][T14108] debugfs: 'hsr0' already exists in 'hsr' [ 268.392291][T14108] Cannot create hsr debugfs directory [ 268.508851][T14216] tipc: Started in network mode [ 268.517032][T14216] tipc: Node identity 4a1980f48d7a, cluster identity 4711 [ 268.524678][T14216] tipc: Enabled bearer , priority 0 [ 268.558967][T14218] tipc: Started in network mode [ 268.564014][T14218] tipc: Node identity 62a4e8c52aea, cluster identity 4711 [ 268.572032][T14218] tipc: Enabled bearer , priority 0 [ 268.578978][T14216] syzkaller0: entered promiscuous mode [ 268.588519][T14216] syzkaller0: entered allmulticast mode [ 268.638896][T14218] syzkaller0: entered promiscuous mode [ 268.645350][T14218] syzkaller0: entered allmulticast mode [ 268.688535][T14216] tipc: Resetting bearer [ 268.709037][T14218] tipc: Resetting bearer [ 268.737299][T14218] tipc: Resetting bearer [ 268.754540][T14218] tipc: Disabling bearer [ 268.763655][T14216] tipc: Resetting bearer [ 268.776719][T14216] tipc: Disabling bearer [ 268.836529][T14229] netlink: zone id is out of range [ 268.889760][T14229] netlink: zone id is out of range [ 268.894928][T14229] netlink: zone id is out of range [ 268.942190][T14229] netlink: zone id is out of range [ 268.957281][T14229] netlink: zone id is out of range [ 268.978621][T14229] netlink: zone id is out of range [ 268.983726][T14108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.002366][T14229] netlink: set zone limit has 8 unknown bytes [ 269.021994][T14238] FAULT_INJECTION: forcing a failure. [ 269.021994][T14238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.035355][T14238] CPU: 0 UID: 0 PID: 14238 Comm: syz.1.3049 Not tainted syzkaller #0 PREEMPT(full) [ 269.035379][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.035390][T14238] Call Trace: [ 269.035398][T14238] [ 269.035405][T14238] dump_stack_lvl+0xe8/0x150 [ 269.035434][T14238] should_fail_ex+0x412/0x560 [ 269.035463][T14238] _copy_from_user+0x2d/0xb0 [ 269.035485][T14238] ___sys_sendmsg+0x1c6/0x360 [ 269.035513][T14238] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.035562][T14238] ? __fget_files+0x2a/0x420 [ 269.035588][T14238] ? __fget_files+0x3a0/0x420 [ 269.035621][T14238] __x64_sys_sendmsg+0x1bd/0x2a0 [ 269.035644][T14238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.035673][T14238] ? __pfx_ksys_write+0x10/0x10 [ 269.035712][T14238] do_syscall_64+0x14d/0xf80 [ 269.035731][T14238] ? trace_irq_disable+0x3b/0x150 [ 269.035756][T14238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.035774][T14238] ? clear_bhb_loop+0x40/0x90 [ 269.035794][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.035812][T14238] RIP: 0033:0x7fad56b9c799 [ 269.035828][T14238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.035843][T14238] RSP: 002b:00007fad57a01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.035862][T14238] RAX: ffffffffffffffda RBX: 00007fad56e15fa0 RCX: 00007fad56b9c799 [ 269.035875][T14238] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 269.035887][T14238] RBP: 00007fad57a01090 R08: 0000000000000000 R09: 0000000000000000 [ 269.035897][T14238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.035907][T14238] R13: 00007fad56e16038 R14: 00007fad56e15fa0 R15: 00007ffee7df26d8 [ 269.035935][T14238] [ 269.225854][ T5843] Bluetooth: hci1: command 0x0419 tx timeout [ 269.292559][T14108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.328122][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'. [ 269.360275][ T2257] block nbd13: Possible stuck request ffff888026a40000: control (read@0,1024B). Runtime 120 seconds [ 269.368246][T14243] FAULT_INJECTION: forcing a failure. [ 269.368246][T14243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.371580][ T2257] block nbd13: Possible stuck request ffff888026a40200: control (read@1024,1024B). Runtime 120 seconds [ 269.371620][ T2257] block nbd13: Possible stuck request ffff888026a40400: control (read@2048,1024B). Runtime 120 seconds [ 269.371645][ T2257] block nbd13: Possible stuck request ffff888026a40600: control (read@3072,1024B). Runtime 120 seconds [ 269.420264][T14243] CPU: 0 UID: 0 PID: 14243 Comm: syz.1.3052 Not tainted syzkaller #0 PREEMPT(full) [ 269.420288][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.420300][T14243] Call Trace: [ 269.420307][T14243] [ 269.420314][T14243] dump_stack_lvl+0xe8/0x150 [ 269.420342][T14243] should_fail_ex+0x412/0x560 [ 269.420369][T14243] _copy_from_user+0x2d/0xb0 [ 269.420386][T14243] ___sys_sendmsg+0x1c6/0x360 [ 269.420411][T14243] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.420458][T14243] ? __fget_files+0x2a/0x420 [ 269.420481][T14243] ? __fget_files+0x3a0/0x420 [ 269.420515][T14243] __x64_sys_sendmsg+0x1bd/0x2a0 [ 269.420538][T14243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.420568][T14243] ? __pfx_ksys_write+0x10/0x10 [ 269.420596][T14243] do_syscall_64+0x14d/0xf80 [ 269.420614][T14243] ? trace_irq_disable+0x3b/0x150 [ 269.420639][T14243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.420657][T14243] ? clear_bhb_loop+0x40/0x90 [ 269.420677][T14243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.420693][T14243] RIP: 0033:0x7fad56b9c799 [ 269.420710][T14243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.420724][T14243] RSP: 002b:00007fad57a01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.420743][T14243] RAX: ffffffffffffffda RBX: 00007fad56e15fa0 RCX: 00007fad56b9c799 [ 269.420757][T14243] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 269.420767][T14243] RBP: 00007fad57a01090 R08: 0000000000000000 R09: 0000000000000000 [ 269.420777][T14243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.420787][T14243] R13: 00007fad56e16038 R14: 00007fad56e15fa0 R15: 00007ffee7df26d8 [ 269.420815][T14243] [ 269.717180][T14247] FAULT_INJECTION: forcing a failure. [ 269.717180][T14247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.730452][T14247] CPU: 0 UID: 0 PID: 14247 Comm: syz.2.3054 Not tainted syzkaller #0 PREEMPT(full) [ 269.730477][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.730488][T14247] Call Trace: [ 269.730496][T14247] [ 269.730503][T14247] dump_stack_lvl+0xe8/0x150 [ 269.730533][T14247] should_fail_ex+0x412/0x560 [ 269.730564][T14247] _copy_from_user+0x2d/0xb0 [ 269.730584][T14247] ___sys_sendmsg+0x1c6/0x360 [ 269.730612][T14247] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.730662][T14247] ? __fget_files+0x2a/0x420 [ 269.730687][T14247] ? __fget_files+0x3a0/0x420 [ 269.730722][T14247] __x64_sys_sendmsg+0x1bd/0x2a0 [ 269.730745][T14247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.730775][T14247] ? __pfx_ksys_write+0x10/0x10 [ 269.730805][T14247] do_syscall_64+0x14d/0xf80 [ 269.730824][T14247] ? trace_irq_disable+0x3b/0x150 [ 269.730849][T14247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.730868][T14247] ? clear_bhb_loop+0x40/0x90 [ 269.730890][T14247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.730908][T14247] RIP: 0033:0x7f0fdbf9c799 [ 269.730925][T14247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.730941][T14247] RSP: 002b:00007f0fdce9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.730959][T14247] RAX: ffffffffffffffda RBX: 00007f0fdc215fa0 RCX: 00007f0fdbf9c799 [ 269.730970][T14247] RDX: 000000000000c000 RSI: 0000200000000580 RDI: 0000000000000003 [ 269.730981][T14247] RBP: 00007f0fdce9f090 R08: 0000000000000000 R09: 0000000000000000 [ 269.730992][T14247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.731002][T14247] R13: 00007f0fdc216038 R14: 00007f0fdc215fa0 R15: 00007fffdd2c9278 [ 269.731029][T14247] [ 270.024380][ T5843] Bluetooth: hci4: command tx timeout [ 270.026213][T14108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.089426][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3056'. [ 270.136726][T14245] xt_l2tp: v2 doesn't support IP mode [ 270.240830][T14108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.311719][T14268] tipc: Started in network mode [ 270.316635][T14268] tipc: Node identity ca28503fc8c4, cluster identity 4711 [ 270.330479][T14268] tipc: Enabled bearer , priority 0 [ 270.365413][T14268] syzkaller0: entered promiscuous mode [ 270.371249][T14268] syzkaller0: entered allmulticast mode [ 270.443988][T14268] tipc: Resetting bearer [ 270.453080][T14268] tipc: Resetting bearer [ 270.455837][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3062'. [ 270.478742][T14268] tipc: Disabling bearer [ 270.521036][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3063'. [ 270.597827][T14108] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.658425][T14108] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.667963][T14281] FAULT_INJECTION: forcing a failure. [ 270.667963][T14281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.695112][T14281] CPU: 1 UID: 0 PID: 14281 Comm: syz.2.3064 Not tainted syzkaller #0 PREEMPT(full) [ 270.695137][T14281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.695148][T14281] Call Trace: [ 270.695155][T14281] [ 270.695162][T14281] dump_stack_lvl+0xe8/0x150 [ 270.695189][T14281] should_fail_ex+0x412/0x560 [ 270.695216][T14281] _copy_from_user+0x2d/0xb0 [ 270.695235][T14281] ___sys_recvmsg+0x175/0x590 [ 270.695254][T14281] ? get_pid_task+0x20/0x1f0 [ 270.695269][T14281] ? get_pid_task+0x20/0x1f0 [ 270.695290][T14281] ? __pfx____sys_recvmsg+0x10/0x10 [ 270.695329][T14281] ? __fget_files+0x3a0/0x420 [ 270.695362][T14281] __x64_sys_recvmsg+0x1ba/0x2a0 [ 270.695385][T14281] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 270.695412][T14281] ? __pfx_ksys_write+0x10/0x10 [ 270.695440][T14281] do_syscall_64+0x14d/0xf80 [ 270.695457][T14281] ? trace_irq_disable+0x3b/0x150 [ 270.695479][T14281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.695496][T14281] ? clear_bhb_loop+0x40/0x90 [ 270.695516][T14281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.695531][T14281] RIP: 0033:0x7f0fdbf9c799 [ 270.695546][T14281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.695560][T14281] RSP: 002b:00007f0fdce9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 270.695578][T14281] RAX: ffffffffffffffda RBX: 00007f0fdc215fa0 RCX: 00007f0fdbf9c799 [ 270.695591][T14281] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 270.695602][T14281] RBP: 00007f0fdce9f090 R08: 0000000000000000 R09: 0000000000000000 [ 270.695612][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.695623][T14281] R13: 00007f0fdc216038 R14: 00007f0fdc215fa0 R15: 00007fffdd2c9278 [ 270.695650][T14281] [ 270.712563][T14108] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.871780][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3069'. [ 270.906615][T14108] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.917611][T14296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3068'. [ 270.946266][T14299] FAULT_INJECTION: forcing a failure. [ 270.946266][T14299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.974783][T14296] vlan3: entered promiscuous mode [ 270.997422][T14299] CPU: 1 UID: 0 PID: 14299 Comm: syz.1.3070 Not tainted syzkaller #0 PREEMPT(full) [ 270.997447][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.997457][T14299] Call Trace: [ 270.997464][T14299] [ 270.997471][T14299] dump_stack_lvl+0xe8/0x150 [ 270.997502][T14299] should_fail_ex+0x412/0x560 [ 270.997533][T14299] _copy_from_user+0x2d/0xb0 [ 270.997554][T14299] ___sys_sendmsg+0x1c6/0x360 [ 270.997581][T14299] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.997632][T14299] ? __fget_files+0x2a/0x420 [ 270.997657][T14299] ? __fget_files+0x3a0/0x420 [ 270.997690][T14299] __x64_sys_sendmsg+0x1bd/0x2a0 [ 270.997715][T14299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.997745][T14299] ? __pfx_ksys_write+0x10/0x10 [ 270.997776][T14299] do_syscall_64+0x14d/0xf80 [ 270.997795][T14299] ? trace_irq_disable+0x3b/0x150 [ 270.997820][T14299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.997838][T14299] ? clear_bhb_loop+0x40/0x90 [ 270.997860][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.997878][T14299] RIP: 0033:0x7fad56b9c799 [ 270.997895][T14299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.997911][T14299] RSP: 002b:00007fad57a01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.997931][T14299] RAX: ffffffffffffffda RBX: 00007fad56e15fa0 RCX: 00007fad56b9c799 [ 270.997944][T14299] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 270.997956][T14299] RBP: 00007fad57a01090 R08: 0000000000000000 R09: 0000000000000000 [ 270.997966][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.997977][T14299] R13: 00007fad56e16038 R14: 00007fad56e15fa0 R15: 00007ffee7df26d8 [ 270.998004][T14299] [ 271.000308][T14296] veth0_to_team: entered promiscuous mode [ 271.190262][T14296] vlan3: entered allmulticast mode [ 271.195961][T14296] veth0_to_team: entered allmulticast mode [ 271.242708][T14311] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 271.334008][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'. [ 271.460109][T14313] lo speed is unknown, defaulting to 1000 [ 271.553380][T14108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.563671][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3076'. [ 271.602561][T14108] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.695992][T14335] FAULT_INJECTION: forcing a failure. [ 271.695992][T14335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.723521][T14335] CPU: 1 UID: 0 PID: 14335 Comm: syz.1.3078 Not tainted syzkaller #0 PREEMPT(full) [ 271.723546][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.723556][T14335] Call Trace: [ 271.723563][T14335] [ 271.723570][T14335] dump_stack_lvl+0xe8/0x150 [ 271.723616][T14335] should_fail_ex+0x412/0x560 [ 271.723645][T14335] _copy_from_user+0x2d/0xb0 [ 271.723663][T14335] __sys_bpf+0x229/0x950 [ 271.723691][T14335] ? __pfx___sys_bpf+0x10/0x10 [ 271.723728][T14335] ? ksys_write+0x242/0x270 [ 271.723747][T14335] ? __pfx_ksys_write+0x10/0x10 [ 271.723772][T14335] __x64_sys_bpf+0x7c/0x90 [ 271.723795][T14335] do_syscall_64+0x14d/0xf80 [ 271.723813][T14335] ? trace_irq_disable+0x3b/0x150 [ 271.723835][T14335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.723853][T14335] ? clear_bhb_loop+0x40/0x90 [ 271.723875][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.723889][T14335] RIP: 0033:0x7fad56b9c799 [ 271.723905][T14335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.723919][T14335] RSP: 002b:00007fad57a01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.723938][T14335] RAX: ffffffffffffffda RBX: 00007fad56e15fa0 RCX: 00007fad56b9c799 [ 271.723950][T14335] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 271.723968][T14335] RBP: 00007fad57a01090 R08: 0000000000000000 R09: 0000000000000000 [ 271.723978][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.723986][T14335] R13: 00007fad56e16038 R14: 00007fad56e15fa0 R15: 00007ffee7df26d8 [ 271.724008][T14335] [ 271.728802][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.900546][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.926096][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.933315][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.042974][T14342] netlink: 'syz.2.3080': attribute type 1 has an invalid length. [ 272.101807][ T5843] Bluetooth: hci4: command tx timeout [ 272.119591][T14342] 8021q: adding VLAN 0 to HW filter on device bond26 [ 272.154525][T14340] lo speed is unknown, defaulting to 1000 [ 272.167321][T14313] lo speed is unknown, defaulting to 1000 [ 272.181096][T14342] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3080'. [ 272.395747][T14108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.462111][T14108] veth0_vlan: entered promiscuous mode [ 272.476319][T14108] veth1_vlan: entered promiscuous mode [ 272.484163][T14340] lo speed is unknown, defaulting to 1000 [ 272.532717][T14108] veth0_macvtap: entered promiscuous mode [ 272.594110][T14108] veth1_macvtap: entered promiscuous mode [ 272.697913][T14108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.751545][T14108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.778732][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.807527][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.839206][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.850791][ T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.020596][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'. [ 273.030953][T14355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3082'. [ 273.172645][T14359] FAULT_INJECTION: forcing a failure. [ 273.172645][T14359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.185990][T14359] CPU: 0 UID: 0 PID: 14359 Comm: syz.1.3083 Not tainted syzkaller #0 PREEMPT(full) [ 273.186013][T14359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.186023][T14359] Call Trace: [ 273.186030][T14359] [ 273.186037][T14359] dump_stack_lvl+0xe8/0x150 [ 273.186064][T14359] should_fail_ex+0x412/0x560 [ 273.186092][T14359] _copy_from_user+0x2d/0xb0 [ 273.186113][T14359] __sys_bpf+0x229/0x950 [ 273.186141][T14359] ? __pfx___sys_bpf+0x10/0x10 [ 273.186168][T14359] ? ksys_write+0x242/0x270 [ 273.186181][T14359] ? __pfx_ksys_write+0x10/0x10 [ 273.186196][T14359] __x64_sys_bpf+0x7c/0x90 [ 273.186210][T14359] do_syscall_64+0x14d/0xf80 [ 273.186221][T14359] ? trace_irq_disable+0x3b/0x150 [ 273.186236][T14359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.186246][T14359] ? clear_bhb_loop+0x40/0x90 [ 273.186265][T14359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.186275][T14359] RIP: 0033:0x7fad56b9c799 [ 273.186286][T14359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.186294][T14359] RSP: 002b:00007fad57a01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.186307][T14359] RAX: ffffffffffffffda RBX: 00007fad56e15fa0 RCX: 00007fad56b9c799 [ 273.186314][T14359] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 273.186321][T14359] RBP: 00007fad57a01090 R08: 0000000000000000 R09: 0000000000000000 [ 273.186327][T14359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.186333][T14359] R13: 00007fad56e16038 R14: 00007fad56e15fa0 R15: 00007ffee7df26d8 [ 273.186348][T14359] [ 273.486818][T14363] xt_l2tp: v2 doesn't support IP mode [ 274.189513][ T5843] Bluetooth: hci4: command tx timeout [ 274.636868][T14330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.739626][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.747483][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.776300][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'. [ 274.800596][T14371] bond0: (slave bridge0): Releasing backup interface [ 274.816569][T14371] bridge0: left allmulticast mode [ 274.830418][T14371] bridge0: left promiscuous mode [ 274.836762][T14371] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.844165][T14371] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.875536][T14378] netlink: 'syz.1.3090': attribute type 1 has an invalid length. [ 274.875957][T14371] bridge_slave_0: left allmulticast mode [ 274.890152][T14371] bridge_slave_0: left promiscuous mode [ 274.895869][T14371] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.907857][T14371] bridge_slave_1: left allmulticast mode [ 274.915099][T14371] bridge_slave_1: left promiscuous mode [ 274.920876][ T2298] block nbd8: Possible stuck request ffff888026878000: control (read@0,1024B). Runtime 150 seconds [ 274.923054][T14371] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.931771][ T2298] block nbd8: Possible stuck request ffff888026878200: control (read@1024,1024B). Runtime 150 seconds [ 274.950153][ T2298] block nbd8: Possible stuck request ffff888026878400: control (read@2048,1024B). Runtime 150 seconds [ 274.961363][ T2298] block nbd8: Possible stuck request ffff888026878600: control (read@3072,1024B). Runtime 150 seconds [ 274.974084][T14371] bond0: (slave bond_slave_1): Releasing backup interface [ 274.988177][T14371] bond_slave_1: left allmulticast mode [ 274.993847][T14371] bond_slave_1: left promiscuous mode [ 275.003731][T14371] team0: Port device team_slave_0 removed [ 275.013061][T14371] team0: Port device team_slave_1 removed [ 275.021867][T14371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.029596][T14371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.037870][T14371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.045990][T14371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.055372][T14371] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 275.083765][T14376] bridge_slave_0: left allmulticast mode [ 275.091297][T14383] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3090'. [ 275.106666][T14376] bridge_slave_0: left promiscuous mode [ 275.113261][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.123760][T14376] bridge_slave_1: left allmulticast mode [ 275.131801][T14376] bridge_slave_1: left promiscuous mode [ 275.137640][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.153137][T14376] bond21: (slave veth0_to_bond): Releasing active interface [ 275.164138][T14376] bond0: (slave bond_slave_0): Releasing backup interface [ 275.173292][T14376] bond0: (slave bond_slave_1): Releasing backup interface [ 275.182672][T14376] team0: Port device team_slave_0 removed [ 275.191618][T14376] team0: Port device team_slave_1 removed [ 275.197726][T14376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.206076][T14376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.216828][T14376] team0: Port device geneve2 removed [ 275.223730][T14376] bond2: (slave bond3): Releasing backup interface [ 275.231932][T14376] bond5: (slave bond6): Releasing active interface [ 275.242542][T14376] bond8: (slave bond9): Releasing active interface [ 275.250828][T14376] bond11: (slave bond12): Releasing active interface [ 275.259861][T14376] bond13: (slave veth5): Releasing backup interface [ 275.275401][T14376] bond17: (slave bond18): Releasing active interface [ 275.285792][T14376] bond20: (slave veth7): Releasing backup interface [ 275.296091][T14373] team0: Mode changed to "random" [ 275.332043][T14378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.394468][T14382] bond1: (slave dummy0): making interface the new active one [ 275.406613][T14382] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 275.417154][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.427202][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.436421][T14383] bond1: (slave dummy0): Releasing active interface [ 275.674892][T14397] xt_l2tp: v2 doesn't support IP mode [ 275.805042][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3099'. [ 275.914035][T14410] bond1: option mode: invalid value (254) [ 275.964963][T14410] bond1 (unregistering): Released all slaves [ 276.276049][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.286383][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.295919][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.310608][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.327693][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.384782][T14423] lo speed is unknown, defaulting to 1000 [ 276.632546][T14431] bond22: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 276.653373][T14431] bond22 (unregistering): Released all slaves [ 276.783772][T14423] lo speed is unknown, defaulting to 1000 [ 276.846012][T14445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3108'. [ 277.071472][T14450] FAULT_INJECTION: forcing a failure. [ 277.071472][T14450] name failslab, interval 1, probability 0, space 0, times 0 [ 277.123391][T14450] CPU: 0 UID: 0 PID: 14450 Comm: syz.3.3110 Not tainted syzkaller #0 PREEMPT(full) [ 277.123419][T14450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.123430][T14450] Call Trace: [ 277.123438][T14450] [ 277.123446][T14450] dump_stack_lvl+0xe8/0x150 [ 277.123476][T14450] should_fail_ex+0x412/0x560 [ 277.123507][T14450] should_failslab+0xa8/0x100 [ 277.123531][T14450] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 277.123553][T14450] ? __alloc_skb+0x1d0/0x7d0 [ 277.123581][T14450] __alloc_skb+0x1d0/0x7d0 [ 277.123604][T14450] tcp_stream_alloc_skb+0x3f/0x580 [ 277.123632][T14450] tcp_sendmsg_locked+0x1375/0x5490 [ 277.123665][T14450] ? __lock_acquire+0x6b5/0x2cf0 [ 277.123723][T14450] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 277.123753][T14450] ? tcp_sendmsg+0x21/0x50 [ 277.123776][T14450] ? __local_bh_enable_ip+0xd0/0x130 [ 277.123800][T14450] ? __pfx_inet_sendmsg+0x10/0x10 [ 277.123819][T14450] tcp_sendmsg+0x2f/0x50 [ 277.123838][T14450] __sys_sendto+0x5de/0x710 [ 277.123857][T14450] ? __pfx___sys_sendto+0x10/0x10 [ 277.123871][T14450] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 277.123901][T14450] ? __fget_files+0x3a0/0x420 [ 277.123935][T14450] ? ksys_write+0x242/0x270 [ 277.123957][T14450] ? __pfx_ksys_write+0x10/0x10 [ 277.123987][T14450] __x64_sys_sendto+0xde/0x100 [ 277.124008][T14450] do_syscall_64+0x14d/0xf80 [ 277.124025][T14450] ? trace_irq_disable+0x3b/0x150 [ 277.124050][T14450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.124068][T14450] ? clear_bhb_loop+0x40/0x90 [ 277.124090][T14450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.124108][T14450] RIP: 0033:0x7ff18419c799 [ 277.124125][T14450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.124139][T14450] RSP: 002b:00007ff185052028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 277.124157][T14450] RAX: ffffffffffffffda RBX: 00007ff184415fa0 RCX: 00007ff18419c799 [ 277.124170][T14450] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 277.124181][T14450] RBP: 00007ff185052090 R08: 0000000000000000 R09: 0000000000000000 [ 277.124192][T14450] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 277.124202][T14450] R13: 00007ff184416038 R14: 00007ff184415fa0 R15: 00007ffefe990358 [ 277.124230][T14450] [ 277.132339][T14452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3111'. [ 277.401281][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'. [ 277.506662][T14423] chnl_net:caif_netlink_parms(): no params data found [ 277.725246][T14475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3117'. [ 277.726149][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.741748][T14423] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.749659][T14423] bridge_slave_0: entered allmulticast mode [ 277.757502][T14423] bridge_slave_0: entered promiscuous mode [ 277.767883][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.790400][T14423] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.797728][T14423] bridge_slave_1: entered allmulticast mode [ 277.805449][T14423] bridge_slave_1: entered promiscuous mode [ 277.818804][T14475] vlan2: entered promiscuous mode [ 277.834746][T14475] veth0_to_team: entered promiscuous mode [ 277.848129][T14475] vlan2: entered allmulticast mode [ 277.855263][T14475] veth0_to_team: entered allmulticast mode [ 277.904380][T14423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.936768][T14423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.984895][T14423] team0: Port device team_slave_0 added [ 277.990937][T14484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.003119][T14423] team0: Port device team_slave_1 added [ 278.119050][T14423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.128566][T14490] netlink: 'syz.4.3124': attribute type 1 has an invalid length. [ 278.137904][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.166130][T14484] netlink: zone id is out of range [ 278.173851][T14484] netlink: zone id is out of range [ 278.185535][T14423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.194580][T14484] netlink: zone id is out of range [ 278.219591][T14484] netlink: zone id is out of range [ 278.225540][T14490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.239233][T14484] netlink: zone id is out of range [ 278.244469][T14484] netlink: zone id is out of range [ 278.250246][T14484] netlink: set zone limit has 8 unknown bytes [ 278.276733][T14423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.286664][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.319406][T14498] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3124'. [ 278.341391][T14423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.412462][T14490] bond1: (slave dummy0): making interface the new active one [ 278.427084][ T5832] Bluetooth: hci0: command tx timeout [ 278.433058][T14490] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 278.433389][T14494] syzkaller0: entered promiscuous mode [ 278.433407][T14494] syzkaller0: entered allmulticast mode [ 278.471526][T14498] bond1: (slave dummy0): Releasing active interface [ 278.526980][T14423] hsr_slave_0: entered promiscuous mode [ 278.560960][T14423] hsr_slave_1: entered promiscuous mode [ 278.577043][T14423] debugfs: 'hsr0' already exists in 'hsr' [ 278.636823][T14423] Cannot create hsr debugfs directory [ 278.788886][T14513] FAULT_INJECTION: forcing a failure. [ 278.788886][T14513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.842414][T14513] CPU: 1 UID: 0 PID: 14513 Comm: syz.4.3127 Not tainted syzkaller #0 PREEMPT(full) [ 278.842438][T14513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.842448][T14513] Call Trace: [ 278.842454][T14513] [ 278.842462][T14513] dump_stack_lvl+0xe8/0x150 [ 278.842486][T14513] should_fail_ex+0x412/0x560 [ 278.842513][T14513] _copy_from_iter+0x1d3/0x1670 [ 278.842537][T14513] ? unwind_next_frame+0xa5/0x23c0 [ 278.842563][T14513] ? __lock_acquire+0x6b5/0x2cf0 [ 278.842580][T14513] ? __pfx__copy_from_iter+0x10/0x10 [ 278.842611][T14513] tun_get_user+0x275/0x3dd0 [ 278.842634][T14513] ? aa_file_perm+0x192/0x15e0 [ 278.842651][T14513] ? aa_file_perm+0x50e/0x15e0 [ 278.842664][T14513] ? __pfx_tun_get_user+0x10/0x10 [ 278.842676][T14513] ? aa_file_perm+0x192/0x15e0 [ 278.842692][T14513] ? __lock_acquire+0x6b5/0x2cf0 [ 278.842716][T14513] ? ref_tracker_alloc+0x35c/0x4c0 [ 278.842738][T14513] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 278.842762][T14513] ? tun_get+0x1c/0x2f0 [ 278.842780][T14513] ? tun_get+0x1c/0x2f0 [ 278.842792][T14513] ? tun_get+0x1c/0x2f0 [ 278.842809][T14513] tun_chr_write_iter+0x113/0x200 [ 278.842825][T14513] vfs_write+0x61d/0xb90 [ 278.842846][T14513] ? __pfx_vfs_write+0x10/0x10 [ 278.842868][T14513] ? __fget_files+0x2a/0x420 [ 278.842894][T14513] ksys_write+0x150/0x270 [ 278.842911][T14513] ? __pfx_ksys_write+0x10/0x10 [ 278.842933][T14513] do_syscall_64+0x14d/0xf80 [ 278.842964][T14513] ? trace_irq_disable+0x3b/0x150 [ 278.842984][T14513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.842999][T14513] ? clear_bhb_loop+0x40/0x90 [ 278.843016][T14513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.843029][T14513] RIP: 0033:0x7f8ffdd9c799 [ 278.843043][T14513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.843056][T14513] RSP: 002b:00007f8ffebf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.843072][T14513] RAX: ffffffffffffffda RBX: 00007f8ffe015fa0 RCX: 00007f8ffdd9c799 [ 278.843082][T14513] RDX: 000000000000340a RSI: 0000200000000000 RDI: 0000000000000003 [ 278.843091][T14513] RBP: 00007f8ffebf8090 R08: 0000000000000000 R09: 0000000000000000 [ 278.843100][T14513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.843109][T14513] R13: 00007f8ffe016038 R14: 00007f8ffe015fa0 R15: 00007ffdb0472718 [ 278.843130][T14513] [ 279.326086][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'. [ 279.362156][T14526] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3134'. [ 279.444089][T14531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.484828][T14529] lo speed is unknown, defaulting to 1000 [ 279.502365][T14540] netlink: 'syz.0.3137': attribute type 1 has an invalid length. [ 279.570111][ T9] IPVS: starting estimator thread 0... [ 279.601741][T14545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3133'. [ 279.639843][T14545] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3133'. [ 279.689256][T14544] IPVS: using max 34 ests per chain, 81600 per kthread [ 279.832545][T14556] FAULT_INJECTION: forcing a failure. [ 279.832545][T14556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.848967][T14556] CPU: 0 UID: 0 PID: 14556 Comm: syz.3.3139 Not tainted syzkaller #0 PREEMPT(full) [ 279.848994][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.849005][T14556] Call Trace: [ 279.849012][T14556] [ 279.849020][T14556] dump_stack_lvl+0xe8/0x150 [ 279.849050][T14556] should_fail_ex+0x412/0x560 [ 279.849079][T14556] _copy_from_user+0x2d/0xb0 [ 279.849101][T14556] ___sys_sendmsg+0x1c6/0x360 [ 279.849125][T14556] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.849181][T14556] ? __fget_files+0x2a/0x420 [ 279.849205][T14556] ? __fget_files+0x3a0/0x420 [ 279.849240][T14556] __x64_sys_sendmsg+0x1bd/0x2a0 [ 279.849263][T14556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.849291][T14556] ? __pfx_ksys_write+0x10/0x10 [ 279.849320][T14556] do_syscall_64+0x14d/0xf80 [ 279.849339][T14556] ? trace_irq_disable+0x3b/0x150 [ 279.849364][T14556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.849382][T14556] ? clear_bhb_loop+0x40/0x90 [ 279.849404][T14556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.849421][T14556] RIP: 0033:0x7ff18419c799 [ 279.849437][T14556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.849453][T14556] RSP: 002b:00007ff185052028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.849472][T14556] RAX: ffffffffffffffda RBX: 00007ff184415fa0 RCX: 00007ff18419c799 [ 279.849484][T14556] RDX: 0000000004040080 RSI: 0000200000000500 RDI: 0000000000000003 [ 279.849496][T14556] RBP: 00007ff185052090 R08: 0000000000000000 R09: 0000000000000000 [ 279.849507][T14556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.849518][T14556] R13: 00007ff184416038 R14: 00007ff184415fa0 R15: 00007ffefe990358 [ 279.849546][T14556] [ 279.862533][T14541] syzkaller1: entered promiscuous mode [ 280.038513][ T2257] block nbd14: Possible stuck request ffff888026af0000: control (read@0,1024B). Runtime 120 seconds [ 280.039386][T14541] syzkaller1: entered allmulticast mode [ 280.049820][ T2257] block nbd14: Possible stuck request ffff888026af0200: control (read@1024,1024B). Runtime 120 seconds [ 280.049853][ T2257] block nbd14: Possible stuck request ffff888026af0400: control (read@2048,1024B). Runtime 120 seconds [ 280.049877][ T2257] block nbd14: Possible stuck request ffff888026af0600: control (read@3072,1024B). Runtime 120 seconds [ 280.155415][T14529] lo speed is unknown, defaulting to 1000 [ 280.420920][T14564] nbd32: detected capacity change from 0 to 63 [ 280.475913][T14423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.502435][T14423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.511215][ T5843] Bluetooth: hci0: command tx timeout [ 280.529898][T14423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.578339][T14423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.687877][T14575] tipc: Started in network mode [ 280.694709][T14575] tipc: Node identity 02f7444dc4c8, cluster identity 4711 [ 280.702356][T14575] tipc: Enabled bearer , priority 0 [ 280.712328][T14575] syzkaller0: entered promiscuous mode [ 280.718577][T14575] syzkaller0: entered allmulticast mode [ 280.745874][T14575] tipc: Resetting bearer [ 280.778142][T14575] tipc: Disabling bearer [ 280.978687][T14423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.001537][ T5832] block nbd32: Receive control failed (result -32) [ 281.137363][T14423] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.175989][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.183222][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.224979][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.232234][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.278061][T14603] FAULT_INJECTION: forcing a failure. [ 281.278061][T14603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.313270][T14603] CPU: 1 UID: 0 PID: 14603 Comm: syz.0.3155 Not tainted syzkaller #0 PREEMPT(full) [ 281.313295][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.313304][T14603] Call Trace: [ 281.313311][T14603] [ 281.313319][T14603] dump_stack_lvl+0xe8/0x150 [ 281.313349][T14603] should_fail_ex+0x412/0x560 [ 281.313378][T14603] _copy_from_user+0x2d/0xb0 [ 281.313398][T14603] ___sys_recvmsg+0x175/0x590 [ 281.313417][T14603] ? get_pid_task+0x20/0x1f0 [ 281.313433][T14603] ? get_pid_task+0x20/0x1f0 [ 281.313452][T14603] ? __pfx____sys_recvmsg+0x10/0x10 [ 281.313492][T14603] ? __fget_files+0x3a0/0x420 [ 281.313535][T14603] __x64_sys_recvmsg+0x1ba/0x2a0 [ 281.313557][T14603] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 281.313588][T14603] ? __pfx_ksys_write+0x10/0x10 [ 281.313617][T14603] do_syscall_64+0x14d/0xf80 [ 281.313634][T14603] ? trace_irq_disable+0x3b/0x150 [ 281.313658][T14603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.313675][T14603] ? clear_bhb_loop+0x40/0x90 [ 281.313697][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.313713][T14603] RIP: 0033:0x7febf419c799 [ 281.313730][T14603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.313745][T14603] RSP: 002b:00007febf4f71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 281.313762][T14603] RAX: ffffffffffffffda RBX: 00007febf4415fa0 RCX: 00007febf419c799 [ 281.313773][T14603] RDX: 0000000000012062 RSI: 0000200000000080 RDI: 0000000000000003 [ 281.313782][T14603] RBP: 00007febf4f71090 R08: 0000000000000000 R09: 0000000000000000 [ 281.313791][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.313799][T14603] R13: 00007febf4416038 R14: 00007febf4415fa0 R15: 00007fff42159128 [ 281.313822][T14603] [ 281.764325][T14615] lo speed is unknown, defaulting to 1000 [ 281.777287][ T3098] IPVS: starting estimator thread 0... [ 281.823794][T14622] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 281.835730][T14622] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 281.844150][T14622] CPU: 1 UID: 0 PID: 14622 Comm: syz.4.3158 Not tainted syzkaller #0 PREEMPT(full) [ 281.853520][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.863660][T14622] RIP: 0010:klist_remove+0x156/0x340 [ 281.869121][T14622] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 ed 23 8a f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ce 23 8a f6 49 8b 44 24 58 48 89 44 24 08 [ 281.888911][T14622] RSP: 0018:ffffc9000468f960 EFLAGS: 00010202 [ 281.894983][T14622] RAX: 000000000000000b RBX: ffff88802a701e80 RCX: 0000000000000000 [ 281.902949][T14622] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 281.910916][T14622] RBP: ffffc9000468fa60 R08: ffffffff8ff7bc63 R09: 1ffffffff1fef78c [ 281.918883][T14622] R10: dffffc0000000000 R11: fffffbfff1fef78d R12: 0000000000000000 [ 281.926850][T14622] R13: 1ffff11005102f8c R14: ffff888028817c60 R15: dffffc0000000000 [ 281.934823][T14622] FS: 00007f8ffebd76c0(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 281.943777][T14622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.950384][T14622] CR2: 00007fd5d7aa6000 CR3: 000000005b2a2000 CR4: 00000000003526f0 [ 281.958362][T14622] Call Trace: [ 281.961636][T14622] [ 281.964562][T14622] ? __pfx_klist_remove+0x10/0x10 [ 281.969581][T14622] ? kobject_move+0x5de/0x720 [ 281.974252][T14622] ? __pfx_kobject_move+0x10/0x10 [ 281.979295][T14622] ? do_raw_spin_unlock+0xf5/0x210 [ 281.984401][T14622] ? get_device_parent+0x366/0x3a0 [ 281.989600][T14622] device_move+0x193/0x730 [ 281.994017][T14622] hci_conn_del_sysfs+0xb8/0x1a0 [ 281.998957][T14622] hci_conn_del+0xc36/0x1230 [ 282.003544][T14622] hci_conn_hash_flush+0x191/0x260 [ 282.008653][T14622] hci_dev_close_sync+0x821/0x10e0 [ 282.013765][T14622] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 282.019306][T14622] ? lockdep_hardirqs_on+0x7a/0x110 [ 282.024497][T14622] ? enable_work+0x1fd/0x230 [ 282.029092][T14622] hci_dev_close+0x108/0x260 [ 282.033693][T14622] sock_do_ioctl+0x101/0x320 [ 282.038283][T14622] ? __pfx_sock_do_ioctl+0x10/0x10 [ 282.043391][T14622] ? do_futex+0x333/0x420 [ 282.047718][T14622] sock_ioctl+0x5c6/0x7f0 [ 282.052139][T14622] ? __pfx_sock_ioctl+0x10/0x10 [ 282.056991][T14622] ? __fget_files+0x2a/0x420 [ 282.061616][T14622] ? __fget_files+0x3a0/0x420 [ 282.066288][T14622] ? __fget_files+0x2a/0x420 [ 282.070879][T14622] ? bpf_lsm_file_ioctl+0x9/0x20 [ 282.075813][T14622] ? __pfx_sock_ioctl+0x10/0x10 [ 282.080660][T14622] __se_sys_ioctl+0xfc/0x170 [ 282.085248][T14622] do_syscall_64+0x14d/0xf80 [ 282.090007][T14622] ? trace_irq_disable+0x3b/0x150 [ 282.095120][T14622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.101175][T14622] ? clear_bhb_loop+0x40/0x90 [ 282.105845][T14622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.111814][T14622] RIP: 0033:0x7f8ffdd9c799 [ 282.116265][T14622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.136238][T14622] RSP: 002b:00007f8ffebd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.144651][T14622] RAX: ffffffffffffffda RBX: 00007f8ffe016090 RCX: 00007f8ffdd9c799 [ 282.152621][T14622] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000e [ 282.160673][T14622] RBP: 00007f8ffde32c99 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 282.168634][T14622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.176596][T14622] R13: 00007f8ffe016128 R14: 00007f8ffe016090 R15: 00007ffdb0472718 [ 282.184563][T14622] [ 282.187570][T14622] Modules linked in: [ 282.193557][T14622] ---[ end trace 0000000000000000 ]--- [ 282.208082][T14622] RIP: 0010:klist_remove+0x156/0x340 [ 282.249182][T14629] IPVS: using max 57 ests per chain, 136800 per kthread [ 282.285171][T14600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.295649][T14609] netlink: 'syz.1.3156': attribute type 1 has an invalid length. [ 282.303678][T14622] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 ed 23 8a f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ce 23 8a f6 49 8b 44 24 58 48 89 44 24 08 [ 282.303705][T14622] RSP: 0018:ffffc9000468f960 EFLAGS: 00010202 [ 282.303725][T14622] RAX: 000000000000000b RBX: ffff88802a701e80 RCX: 0000000000000000 [ 282.303739][T14622] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 282.303751][T14622] RBP: ffffc9000468fa60 R08: ffffffff8ff7bc63 R09: 1ffffffff1fef78c [ 282.303765][T14622] R10: dffffc0000000000 R11: fffffbfff1fef78d R12: 0000000000000000 [ 282.389143][T14622] R13: 1ffff11005102f8c R14: ffff888028817c60 R15: dffffc0000000000 [ 282.397171][T14622] FS: 00007f8ffebd76c0(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 282.428608][T14622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.437836][T14622] CR2: 00007f8ffeb95d58 CR3: 000000005b2a2000 CR4: 00000000003526f0 [ 282.449523][T14622] Kernel panic - not syncing: Fatal exception [ 282.456086][T14622] Kernel Offset: disabled [ 282.460595][T14622] Rebooting in 86400 seconds..