last executing test programs: 18.841261557s ago: executing program 2 (id=4381): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0xf0}, 0x88890) 18.594138762s ago: executing program 2 (id=4382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0xc0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r3) 18.475815085s ago: executing program 2 (id=4388): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x43c, 0x2c, 0x20, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x1}, {0xfff2}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x9, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xfb32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0xfffffffd, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x1, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x6, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0xffff, 0x1000, 0x6, 0x9, 0x80000001, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffff9, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r6, 0x1, {0x0, 0xff}, 0xfd}, 0x18) r7 = accept4(r3, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x2000c010) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24000091}, 0x48000) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x400}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="ae10355a3319", 0x6}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) 17.490840299s ago: executing program 2 (id=4406): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a3200000000090001"], 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dvmrp0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x3, 0xa, "b71d6e61e20e"}}) 17.382969922s ago: executing program 0 (id=4409): close(0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d25f3ca5275eaddf77380000001214010027db14dc00dbdf250800010000000000000008004b001300000008000300010000000000000000d18235a6f73dcf83df749dfb347dc4fa1efdd4ea13ac7fc9b79d3abb7a40471ef0a02acc077a17837a2fa710fb3829fdfbb06116ba96489e8f655d44a85e4a26d6adcb6ddf61a5a1bb4f104136feb9a3579708936d140abe96ad2f513ac3e2fa0958a0e3d6f58a5d11440bdf4884481c186b3af9f3941ed2b4b70d469587d76beffcf79f93308a68e58a6a24fda246987b05ca219bbb1e626de73146dc66e5b183506cc4c346a003bc4fa2f4b19c0b1a0b"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 17.113006503s ago: executing program 2 (id=4411): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) (async) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000080)=""/88, &(0x7f0000000000)=0x58) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0xe171, @mcast2, 0xd}, 0x1c) 17.065670736s ago: executing program 2 (id=4412): socket(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 17.012838053s ago: executing program 0 (id=4413): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 6) 16.432481319s ago: executing program 4 (id=4416): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) shutdown(0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x2508, 0x2c, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0x4, 0x6}, {0xf, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x6cc}, @TCA_CHAIN={0x8, 0xb, 0xc0a}, @filter_kind_options=@f_u32={{0x8}, {0x1e0c, 0x2, [@TCA_U32_ACT={0x1e00, 0x7, [@m_vlan={0x120, 0x3, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xe4, 0x6, "248b6b1e3d9cbc27116c5d769ce40ddbc3f4e7061a439054a754526e63f568da73f8ff1abe15ea919334a063fa313ec9822df1a7d84d9ec7ca67597446a222b056167f9c5e5f068eae3a114f2ebef28c8fce274c2f02c9cfb0482521d8fa7f2da275d8e6b160b6f1a2b69e6a019450d43f03873b39747f83f18df2e14247e99d4d353332df5a5091a3b2b627cacc3e924b106c2f5a495e8e67575a018f275aa1a94abcdc8dc7e98064c72c30bfecc288820a4549b513acf7fbc8f9b6839162d0a93183b33a0a6258acabe82e6635f4d743404251175063fa030400c36465729d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_mirred={0x114, 0x17, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x4, 0x8, 0x7, 0x80000001}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x7fff, 0x10000000, 0x5, 0xb}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x354c2b87, 0x8, 0x9, 0x8c98}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9bf, 0x3, 0x7, 0x7, 0xfffffff8}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x400, 0x3, 0x1, 0x8001}}}]}, {0x47, 0x6, "45504fdff0e41c51a68e5c6b1102e5f714245e3a70fda5569aeff2bb6c3cefd753ee48839aa789a4112f2fe032f163b8a8a7652b09858e7b0378856825fbcfb4463fa7"}, {0xc}, {0xc}}}, @m_nat={0x1194, 0x1e, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7fffffff, 0xffffffffffffffff, 0xe7, 0x4}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8000, 0xffffffffffffffff, 0x8, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x8, 0x3, 0x80000001}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9, 0x1, 0x8, 0x3}, @local, @local, 0xbe66ad11028bf224, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xffffffff, 0x1, 0x3, 0xffffffff}, @remote, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x6, 0x4, 0x401, 0x5}, @rand_addr=0x64010100, @private=0xa010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x500, 0x6, 0x5, 0x0, 0x9}, @private=0xa010100, @rand_addr=0x64010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x5, 0x4, 0xd45, 0x3}, @local, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xdd0, 0x6, 0x50e, 0x7}, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffffff}}]}, {0x1004, 0x6, "868eefdd9365d9ea7a7872721b665b2618ed2b45f2efa8df3fa3f905a536a722d6915e3723814de10441615d48232fe68e3f440d990ebebc6a4740ec8f3d590a96d38d1242c37cee6301bb73d4e56a64cac946c1430ef3b732fab6abd74b319ccf1955464fcb5b90380546d846f871a577eff0f33d0a9cdc340fcdd54116cf2d5620ae2327acf95bda09e6c89c357479afe39735ef63911f60bb011c9b7f915ba1c0cdecb8df757c4714845ae8c9cdc62c05239a0e0d19986c697e61d93e22925a4ec5bfa6fd0ab53162bb3a3b1d5503066860b2e5fd8e3eb4c0346ba926dbb501fd66f3131379de061b7a83cf29c2d318a5753907c8333afd0ab785a9e64cd62c3af8e0426b33982821cef365fbace9915fc7b8bf737c913035ec53b3fc5f37379455fe88e55cbe6be71d8f25a35e12702c4659f080493f0c78416b7cc131c18f233dd006ebd16f6dbf925774e9763dfe16464755803d361fc279719a8af17b233f28db515fec7a11fcc179a0a430a7393be94002ed8a4da1b65d85eadce0218d1977fccc025fc0bee72d0c89f512b3c9acf635b13ebc0cceca4424a85cee0e9090f4b4c5efede470e088c7bebb4b312b80ea9d7894d13c1a8b4f6f41aa96ff0c08c49721e72c1bc42cbe85024caaaa37ecaa27c5ae1d4304d8139afaa8ac827590e341214123d59f05c5481e1ce7951ae0b95ade116f260f84a42f4d09ae43d3583e2b27e25754679d9bd005ea1840b799974270d5e77584f870177bc2227fc49c0c2f2b80c44054ddd4cfb340fcdca808a0752944ff998579146e8a22205a988646b382caedd1f952db73736ca4eeed651ea1a33f5c7b78427442c20853fdccedf4daac2f6bb7af923495d8f5b00a684e851bcafa3e2b1e0a0266b048c7073897730dc14fce8f8e0314a5a919c36f60d226100a8bbfca07ffd3bd49e300a98757bf39f92e2c1f0e8a3e180913c1b8d8d75137c2b9a71fdf268b6013f0571a4a81c73969d424094160639667b24f0eeefdfc01a1bec4612a9102ff9bd17900cbe510d1d4bf0af74deaa0afcf6e215c660cc5d3a5b3608390a12160c8b0788856e8cc7239548db73a93de8df91bd0da49f7f34c38407ac3bde5fe750e277d728e7d583d407a8b18d74032ab35d1c628e7254ff22cbabf780088497df68ff6fdd90efbb489a32205b500fce4984cf539ff0dc04d7bb605ebdcb1d8855ac042d028e545610cd6d7849d4635d93e6ff1e45d93a6b34e29c09bed9be5e891382de89fbe4d0d0026b8a9133c9a270a0e5a37337ff1638d0b8edb08d06e9067dadb52929ea32dfbdcfa2c899a5748a6c021ffbfce9e15ba37644ce188fbd8a3fb8ee4f701b2a396af34b81ca1a02c044397905634c1c926f421c6bf9fe64e7248d4dd2765f9c804017f8348589e8bf5ae8543adc21bc11090cbd9c2910e490cbe7db1ec5ac18bc29298d1631968e01b13e1a409408645060b90a84289031f37901adce30d8e1534655c3ff07c6a00c1b9d2b55e38a41eec5dbe8ff1ebda2d54e2543bb9ca677033508f5f7ec5d1689add2511de9369dac6f9c9328a592f4aed4690c9913e38e730d20b6d887782dd707200fa69c028b636f44b5c7d0d5eb19c60eeb58069c2d134126a1579c16a99298e14d5f04034775100c03d2227ab244a2b68f2be7932742e7bdc882ee343e2fc0bc9c8b8b13f466c5858726efddd1a50f9beededb4a84b4425ee13df161dd4ce5405f7337c1c7c9dd5db52c31e085074cc4bd028c9418319f583b0c9d4458f6835b735af4d760453c3cb87821c16e76ff6570d9a6cfc14f03dafda6300aa175dcd7756893d92844569b277f8ee797bd0732e2c25d07aef192a14d209a61f6bd2879e08d9df0e30d4f8c786d1f27b06d23bb99d9a6f0a79ddf7550b79929baa9b753eba487e9d0c2494d32000a026991813667bf9aa05a32e53b004c568e72965bd20d9c0848b7128aa95c85387ed9005ede48e77c1fe6831c10c239cafb993836389d6dacf5bef8cf48b6a9ec33f60281f8bede4ecf4bd1a7405763d1f0b4371406468007ec7ad2a3367b93907689ea23fdbf2adfe124c1c44dcf6b9a4d71b8941de1b809368f67504c1dcafc4feaf0cfb3ca4b6808a1da3557eee8f5d46125fce037e4f1a2ccf8ea7d18b803864ac6943884ad3537b72e04eef5521d965bca890f517db3981b64b548991625fd94d12ebb26e583be129337921ce18981b7ebf68038460e799a0e33bf0d471eff492b3a665c66ed3a81232537b10df6f7d71b5587e675fb5301a09a9d0189c88dca76819272a15090a609fbc653639698041acfab76fbc7fef0baebefcf38dc8881eb97f9903e74f99bfd784ea8544be88ae49d7a343c71cdfebc6ef50fe0e77dd0d76d79f42a141408f3f1b530a306f2bda3e4e316a804dc6bab6e4a68fcf6d69f9890209f5a73966f77f35a1ef30bbe5d910a23945b3d5b4494068a059041755747c78f75e8542659d09df193b9d195e273d20d12ce4eaf7db1d6492a1163a81903dc8c1c2f8828e5b4a6b30006ec41a61b7330c40fb1399e7ca39c15e53fff4b5b6667de2cc8485c6dc3a6868a88033a7a118e3e5eb75b87efe0fcce4ec20e98f4a0a382c4ea26bb29667ecbaa8b67e5cc76bdb1514e4d7fcd6fddafe2cf557ed670d6519d45bca2157b983341846a03975df70b068a88e50c951335d25b3e551b4db26dd3f366f0936c290059aad335aa6578873e2f57f6eb89f0bbc77c0c45be903753db2d195bde21bfbca90a9217983b492e7c13f4e6423123c54aa560844eda5c92a1486f0f40e66e86bf8b796cfb6aadbca7a32aa8ea215fef4771d4ceac7f531b006b23ee50a4d8c3c09beabd9d7054fd22ee132f1919549b8fedc7a8747c90eb518d9a7124f23dad0c0227df3d0a130c140bf2fb88fb1246a07d763bda09325ba3e0e5fb62ba62f7a022a1a7df79581fd76347bfaca9e16172da73040a3debd996676925bd37dfe5b423233485e4e8988467b71fa5a68f26df20c62e8a050b6af688f56b84ac553fcd891b2007d5d25415256121675e14ae693f194b325274ec8eb49d1c1c9eb1f4cf64031a4bab86087c5d9d75345279602f48e3fe7010b1ef6468b08b1c134afea2cf5327ab3686bd4f3e3ec9e67b23497526d518992aadfa8f1cc9fed21894976bd2b98b53fa51485aa04919fb20a5a763481d54f4f50aec31914f282128d9b43b2ffcc96c26a39f9cce69d04d55b4b9ab3e6cc21b07648f0146f70720de59f7a272ab7b9d579338e03df945df6f6b3aa3d2a1b07f5da97d7faa6b7afee30a15525ecb0745fd9d8d890f357a01ecc003491579e96f6eff40640dbd284d9e4d9b4318ccf6e60740aa2835d51b0c0661e1495c3c370101f10810ad4d6bc658b6861320c6d1a1bad90b1c2017620f20c23a6fbcc476966fb3ff1c5d71cee50de4af366c79936cb090d3a3da3c8cfd195d00c6ddfcf7caff2e5af2a318c6dba31e13eb873eb0652dc2032da1e87deaf9b33dce083e39a8819813f30be044358ebe64cdef2a7c669035b48507f1c693e55e66e29a27c4d91658354bb1a0ec761430ff42368dc7ca7d8c491b89982ab221d491303775ab69a37a8ebca61a48020d026dc44d5604fd5435d0a2f62d49485493949d1306fa45e9ea34814f3d3a2c4df61ac61d4fad2b1d1a5110aa5355ac5ec24197372d67869918ade8aced962edaa080af23c30759c45c122e773cd6319239cd891ac1317376e2a237b2b70a1d39a37df3613b7941241e151413a8d656e89f56f3895c90ead4167cfbf22b7a2c7218626d0154a3ffee7f9b52640d2e78c67f5789a96073c1489a273b0d0ff9c4ccff1123ea0282ecb397b2b2a9b2be7d5ad9ed34b1b5b8c56088c88c131d7d1a402970b6e938361f7ad5ad49542d47a25a3d17a3e73a5cceeb7cb47922141e6555ea1dcaf5b473705f1ed492e926e53eff84504836250dd87c5ce0b1cc14b43e0d108750935f10e1e050b9bcfb7000b3354687849965ef3fab5ec4fd6cf50f51dcebff77469e5ae4a73244e4da69386ad1f55962d37244a235f94be25fc2847e7612fd7183f0998e2a28a56c528d2aebd3945bcf1bf5ee1ece436d69258e5da49b99ec4034865e8906bfd2d02108866978644740a511aad6ea919dcf8f8ea7b960fdf1a5ce90929e78519f7c217c2d66ec756187e6fac412ff2ee3991f8c5abcb661b2704690468b01f2b26d10280bf036be386d60211384ddbba8500015890723e0ed1e0b9367739e7ba4e8a3851c9ddc8a992d8b6fcea5c379f20acb13125586f963842d8a971d6fbf109eb5af1127b256a0fbc7fd8f729eaa0177aba002985d037fe786f69a2baa8f7a92aa3a0fadf13aee8f9ecd07a27a0443c59d4fa59f61aa1476bf15dc7f656fd3ccff3388f4b033de999f1b67614cdc8e0685b6ef4cabd1379ff09b3cb22e7f14d58a7a74a653174334e73f5a3cf8a8e55b869a8f27fe4158a91510e332549ee663866ec6a2483026ff472ecc48734b41221d5b34d46f932a5480424cc7e14bb23822d53b067ba28528d326173bb7264a4c59b79b08177d14955afe54886f015d5ad5e5cdfcf683facd317803cd7da42a75141a353593a4a199a8e96237a2f2dfcbf8e67c61a67ad4766aac7e3b8a0b77a7142da19eb64ee7aa822f6fbd155edc6617e99be8c4ee730cf4a14befa786fa1d9eaf63ee16d38a8afe4ada330a416cbb3a5a2d6d624a3821ad4fbc0ab4631b9da017545fd771f1c7c7d4dc7278275da7f2e4e20fcc794e0ba11bd4b7fc19d8f5e10d98dedede0ec44e128bc680216f672d7af5ded0fc297dc4fe63b91f0f20d0fa3eb871c6ea67d69408114a8db255d0cb975db47e75c5f20f04409e81199c535895c0938e47a77d9d9213738ab8201b9b45c606c9b9060dd6c4e472c13d2e020aa753a119791419196cb441646c82acd984a37e9c734c308b390d12dbdc6a72e9239a6986d2c42f4390010a8d50844b7daa73bda9eae556bb53b05cd930b25f5aa09fdd5f982093070d4af69d2987a91341849e1417d6ce9546425edc08f7ebe272a6424a775ec9ad4b3c5dd259f40a359aafaa9c5f40fabc11cfb7eeb2a17cc0b351414e4f5843c504b35a86695bcf12cca520da60af7d27867aafec7a3218cb053a78f9200d7b86482944771ca88ea4f2355b357fc9c6b1cd852a7081990b17300342e240e3a0646f2a0e4899a1db0b09eca9bca57a06a39baa9b4ed187f3207126bf5e82fc8507db83a5fe64e68b86d18a70c76cd14688f503504008beb5c27a8261e7f158f699038702e1d602b88c8f5db6b85cae0b487399bcea49b8193768bc91bff51c61417e7b61b1c23ff0d1afd5e299bdd21b5e1fe87445ce8291a6a27ee340d44f7599081b91988b78d53485a71b8fe4c0f3c92e38f21ce765e160ae59ac0b38ad21ccf9dea1503963cdd1b06facd635449031b118aa01fccf18147ad0434f4df8e9d41e4972aace7eaa534d1507bc22c5b2e033403d65fe007fecb46b5b7fc20b21ac87439ffeb8d04a0256edff577c3cf21cc227d0db612a473e08e05c2ec00ac8019bf09f6bed4cd365349d658d2a6280e02069de71542751e25f59c42bae7d31db800e22b29c897ae80270e338ac8ead90ec937fcfd75ac7991fb0694ec6212f5904cb8381bf7fec20b859536e017f1de50ccca61212a70ce7450124912033321369ce277f402a83b0851d2b1785e71b65820d0c8b5e158896a233642a412b6fad7183633c75da1dd77cb948ac46d2164a8d7aecdec69d7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xe0, 0xb, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x3b99, 0x7, 0x7, 0xd}, {0x9, 0x4, 0x10, 0x3}, {0x3, 0x7f, 0x5, 0x3}, {0x6, 0x1, 0x7, 0x74f}, {0x237a, 0xf, 0x9, 0xffffffd3}, {0x0, 0x0, 0xfb, 0xf}]}]}, {0x76, 0x6, "c23fb3ba441b1d37d0f1b054fc3edb206d3febdca0b36e6cdbdf51d08f7434af4d7447bae040aeef6f9280b6161e9ac6a21130ac0fb87a464b0d1d37bfb3bac9869dea149f54d7b29d1906cb2d17f19f2ea4eff1d22bf465e0a4a49e716c8cba812a5dceb2ba8aaa6d63bce7cadcb8decc75"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x954, 0x7, 0x0, 0x0, {{0xb}, {0x88c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xf9c, 0x3, 0x9, 0x7f, 0x3ff, 0x101, 0x4, 0xc1, 0x5, 0x3, 0x85, 0x9, 0x9, 0xf, 0xb2a, 0x0, 0x2, 0x1, 0x10000, 0x1, 0x9, 0xd, 0x4, 0xfffff000, 0x9, 0x7ff, 0x56, 0x4, 0x73e, 0x2, 0xff, 0x9, 0x9, 0x0, 0x9, 0x7, 0xc34e, 0x9, 0x25, 0x19f, 0x13b, 0xc, 0x9, 0x0, 0x5, 0x6, 0x8, 0x3, 0x9, 0xff, 0x2, 0x4, 0x100, 0x6, 0x15, 0x3, 0x4, 0x6, 0x2, 0x5, 0x5, 0x8d0, 0x400000, 0xd, 0xf0, 0x10001, 0x7f, 0x3, 0x100, 0xb, 0x7, 0x1, 0xffffffff, 0x1, 0x6, 0x4, 0x1, 0xfffffffa, 0x1000, 0xe02d, 0xc3, 0x1, 0x5, 0x4, 0x6, 0x8, 0x5a, 0xa, 0xfffffeff, 0x5, 0x5, 0x4, 0x8, 0xfffff45e, 0x0, 0x2e00, 0x7fffffff, 0xe1df, 0x3, 0x2fd, 0x0, 0x98, 0x9c5, 0x4, 0x1, 0x0, 0x100, 0xa, 0x4, 0x6, 0xff, 0x1, 0x80000000, 0x5, 0x3, 0x9, 0x4, 0x3, 0x4, 0x8, 0x1, 0x9a48, 0x9, 0x4, 0x8, 0x6, 0x5, 0x1ff, 0x6, 0x8, 0x7, 0x7, 0x6, 0x4, 0x9, 0x0, 0x6, 0x4, 0x9, 0x8000, 0x4, 0x10, 0x7, 0x265, 0xa, 0x0, 0x8, 0x5, 0xfffff001, 0x1, 0x0, 0x7, 0x4, 0x6, 0x3, 0xab, 0xc, 0x2, 0x40, 0x6, 0x3ff, 0x5, 0x5, 0x0, 0x9, 0x7, 0x2, 0x0, 0x3, 0x200, 0x4, 0x3, 0x100, 0x3, 0x13, 0x5, 0x0, 0x2, 0x8, 0xf4, 0x8, 0x3, 0xb, 0x9, 0x992, 0xf61, 0xfff, 0x401, 0x4ab, 0x8, 0x7, 0x5, 0x4, 0x77, 0x1, 0x7, 0x9, 0x5, 0x4, 0x1, 0xfffff907, 0x1, 0xb, 0xb33d, 0xffffd0f3, 0xec90, 0x1, 0x2, 0x6, 0xffff, 0x2, 0x8, 0x10000, 0x8, 0x1, 0x7, 0x7, 0x81, 0xa, 0xd, 0x0, 0x3ff, 0x4, 0x2, 0x100, 0x3000000, 0x2, 0x1000, 0x100, 0x3, 0x3, 0xffff, 0x6, 0x3, 0x6, 0x1, 0x4, 0x7, 0x7fffffff, 0x7, 0xa, 0x2, 0x400, 0x6, 0x8000, 0x400, 0x7fff, 0x6, 0x4, 0x1000, 0x2, 0x2, 0x2, 0x7, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x44bd, 0xffffffffffffffff, 0x4, 0x800, 0x7, {0xad, 0x1, 0x1, 0x8001, 0x400}, {0x5, 0x1, 0x10, 0x6, 0x3, 0xc3f}, 0x5, 0x81, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x5b0, 0xffff0baf, 0x9, 0x6, 0x7, 0x4, 0x0, 0x23, 0x8, 0x10000, 0x2, 0x10001, 0x0, 0x9e, 0x5, 0x8, 0x81, 0x10, 0x10, 0x3, 0x2, 0x4a8, 0xe328, 0x6, 0x6, 0x4, 0x7, 0x1fa, 0x10b, 0x6, 0x4, 0x9, 0x9, 0x5, 0xec, 0x10000, 0x3b, 0x4, 0x3ff, 0x14, 0x0, 0x4, 0x30, 0x1, 0x2, 0x9, 0x560c, 0x3, 0x5, 0x8, 0x3, 0x8000, 0xe, 0x5, 0xc, 0x80000000, 0x1000, 0xa4, 0x8, 0xfffffff8, 0x5, 0x7, 0x81, 0x8, 0x1, 0xf, 0x6e75, 0xc, 0x81, 0x3, 0x7d, 0xcd, 0x9, 0xf03, 0x40, 0x100, 0x3, 0x3, 0x38d, 0x8000, 0x100, 0x81, 0x3, 0x7, 0x6, 0xfffffffc, 0x4219, 0x24d8, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x6, 0x6, 0x5, 0x319, 0xffff, 0x0, 0x3, 0x6, 0x7, 0x3ff, 0x80000005, 0x9, 0x6, 0x3, 0x3, 0x6e1c8486, 0x7853d505, 0x40, 0xfffffff7, 0x65be683b, 0xc, 0x1, 0x9, 0x3, 0x6, 0x101, 0x100, 0x2, 0xa, 0xf0, 0xffff, 0x120, 0x2, 0x0, 0x5, 0x8, 0xbd8558e3, 0x10000, 0x7, 0x58000, 0xb35c, 0x5, 0x100, 0x2, 0x3, 0x0, 0x80, 0xfffff72f, 0x0, 0xfffffffa, 0xdf2, 0xe34, 0x55, 0x6, 0x80000000, 0xfffffffa, 0x9804, 0x7, 0x0, 0xc6, 0x400, 0x9, 0xd0, 0xa, 0xa7, 0x3, 0x800, 0x0, 0x8, 0x3, 0x1, 0x1000, 0x6, 0xfff, 0x8, 0x78c80, 0x0, 0x8, 0x9, 0x86, 0xfffffffa, 0x8, 0x574, 0x3ff, 0xfffffe01, 0x8, 0xaa1, 0xa, 0xffffffff, 0x4, 0x9, 0x1, 0xffffffff, 0x3, 0x5, 0x567, 0x47ed, 0xfffffffe, 0x9, 0x8c4, 0x1000, 0xfffffff7, 0x4, 0x8001, 0x8, 0xfffffffe, 0x5, 0x8, 0x7, 0xfe8, 0x4, 0x9, 0x38cb0000, 0x400, 0x3, 0x401, 0x400, 0x5, 0x2, 0x9a33, 0x0, 0x5, 0x3, 0x2, 0x8, 0x80000001, 0x3, 0x15, 0xe, 0x3ff, 0x855, 0x3, 0x798c7ffb, 0x8, 0x9, 0x101, 0x9, 0xfffffffc, 0x7, 0x7ff0, 0xfffffbff, 0x8001, 0x0, 0xe90d, 0x4a6, 0x4, 0x2, 0x3, 0x6, 0xdfa, 0x6c6, 0x3, 0x8, 0x7fff, 0xe1, 0x5, 0xff, 0xa111, 0xb6, 0x8, 0x54]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x9, 0x6, 0x2, {0xf6, 0x2, 0x7fff, 0x4, 0xffff}, {0xa, 0x1, 0x7, 0x6, 0xfd71, 0x1}, 0x7cb7, 0x6, 0xf}}]]}, {0x9d, 0x6, "1a695f664da2a1b17b13b9de7c3a31aebfe7fd2819e70b4297d1811a09182e805cefc01294fd4dd0a0f096dc9574a92fe5e2db2524b451261a1e32c77c3f056613a9af6dd64422f0b3dbeaa8c1b1038e4308176e3d4d9b7724fe72de503c72066a14aa55a84e367b19858b52e94814db79e7c8d01951331e7345b2ba59551d60ce2703f5ad2e4b9c68b8030cd6839ad9d9be1adc0c8db0520e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x7}]}}, @filter_kind_options=@f_basic={{0xa}, {0x6ac, 0x2, [@TCA_BASIC_CLASSID={0x8}, @TCA_BASIC_EMATCHES={0x250, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x10, 0x3, 0x2}, {0xff, 0x6}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="5c157faf47722f", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x26f1, 0x1, 0x400}, {0x80, 0x3, 0x6, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5703}}, @TCA_EMATCH_TREE_LIST={0x1d0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0xec5}, {0x7fff, 0x8, 0xd, 0x0, 0x9, 0x1, 0x1}}}, @TCF_EM_META={0x80, 0x2, 0x0, 0x0, {{0x9, 0x4, 0xfff9}, [@TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="509c71c6375b8ddf", @TCF_META_TYPE_VAR="59521b9f7c10803269", @TCF_META_TYPE_VAR="aea35ab1", @TCF_META_TYPE_VAR="a4ad26f332"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5db6, 0x0, 0x1}, {0x3800, 0x40}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2bc0, 0x3, 0x1}, {0x56, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x1, 0x2}, {0x80, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="123cd753f16d15f93b00", @TCF_META_TYPE_VAR="3dc8e0d359", @TCF_META_TYPE_VAR="be51", @TCF_META_TYPE_VAR="b66a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x10, 0x1}, {0x60, 0x9a, 0x2}}}]}}, @TCF_EM_CONTAINER={0x18, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x4}, "46934a0bca4f079e1953"}}, @TCF_EM_META={0x54, 0x1, 0x0, 0x0, {{0x9, 0x4, 0xc}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xae40, 0x81, 0x2}, {0x9, 0x2, 0x2}}}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="f4371061986a10cca0"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="a3918c65a74db2", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="3e0dadf3ae8029f5cfd1", @TCF_META_TYPE_VAR="fed8d7", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x1c0, 0x4, 0xff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x7, 0x1}, {0x40, 0xe, 0x1}}}, @TCA_EM_META_RVALUE={0x39, 0x3, [@TCF_META_TYPE_VAR="1b9302ae9ec97f", @TCF_META_TYPE_VAR="ef9d2e941f6a3a", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="33c6b3026ca7b0", @TCF_META_TYPE_VAR="11a9bf7293abf3f02bf2", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="ae85bc843de9d4a76dee"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x8, 0x1}, {0x77, 0x4, 0x3}}}]}}, @TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="4eb6eec8f65302e6"]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="58a82016d20923301b", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1833, 0x35}, {0xc, 0x6b}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='E']}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x1000}, {0x8, 0x82e, 0x40, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x1, 0x2b, 0x1, 0xa, {0x4e, 0x0, 0x4, 0x5, 0x2, 0x800}, {0x3, 0x3, 0x9, 0x5, 0x3, 0x10}, 0x2, 0x4, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xa, 0x4, 0x0, 0x8, 0x4673b352, 0xee, 0x4, 0x7f, 0x1, 0x800, 0x40, 0xc3, 0x6, 0x6, 0x6, 0x3, 0x514f, 0x7, 0xfffff212, 0xffffffff, 0x1, 0xd5a, 0x3ff, 0x6, 0x3, 0x1ff, 0x8, 0x6, 0x6, 0x1ff, 0x4, 0x4, 0xd, 0x5, 0x9, 0x4, 0x4c00, 0x5, 0x2, 0x0, 0x4, 0xf00, 0xc036, 0x419, 0x2, 0x1, 0x3, 0x70, 0x7, 0x9, 0x0, 0x80000001, 0x4, 0xd4, 0x8, 0x4, 0x8, 0x1, 0x6, 0x10, 0x1, 0x2, 0x7, 0x66, 0x9, 0x5, 0xfffffff7, 0x1, 0xffff, 0x7, 0x8, 0x8, 0x5, 0x800, 0x1, 0x9, 0x0, 0xf, 0x0, 0x6, 0x2, 0xfffffff3, 0x3ff, 0xc726, 0x8, 0x1, 0x3, 0x7, 0xfffffffe, 0x1, 0x6, 0x42e4e03f, 0x4, 0x6, 0x98, 0x5, 0x9, 0x0, 0xfffffffa, 0x2, 0x6, 0x9c8, 0x5eb, 0x0, 0x2, 0xc01d, 0x400, 0x800, 0x6, 0x7fffffff, 0x6, 0x9, 0x3, 0x81, 0x7, 0x3, 0x5, 0xd0, 0x8, 0x6d, 0x1df, 0x12e, 0x2, 0x7120, 0x1, 0x6, 0xfffffffb, 0xc9, 0x5, 0x80, 0x2, 0x5, 0x4, 0x4, 0x1, 0x80000001, 0x4aa9, 0x7, 0x4, 0x1, 0x7, 0xffffffc4, 0x3, 0x101, 0xfffff800, 0x3, 0x1ff, 0x5, 0x3, 0x0, 0x3ff, 0x0, 0x1, 0xffffffc0, 0x7, 0x1, 0x5, 0x4, 0x7, 0x63b9, 0x3, 0x14, 0x5, 0x8db, 0x8, 0x2, 0xe, 0x8, 0x1, 0xc0000000, 0x7, 0x8, 0x63a, 0x2, 0x2f, 0x1297337b, 0x1, 0x8, 0x8, 0x807, 0x9, 0x4, 0x9, 0x3, 0x4, 0x200000, 0x5, 0x10001, 0x40, 0x3, 0x3, 0x7, 0x4f8f6823, 0x9, 0xfffffffd, 0x1, 0x7, 0x0, 0x3, 0x2d, 0x330cddf8, 0x4, 0x9, 0x80000001, 0x1f, 0x10000, 0x7, 0x9, 0x1, 0x8000, 0x8, 0x7, 0x4, 0x318f, 0x0, 0x2, 0x9, 0x8, 0x7, 0x10, 0x7fff, 0x6, 0x9d3, 0xd2c, 0x80000000, 0x9, 0x2, 0x220, 0x9, 0x1, 0x7, 0x80000001, 0x4, 0x7fff, 0x9, 0x1, 0x9, 0x4, 0x1, 0x4, 0x5d5, 0x9, 0x1, 0x9, 0xd, 0x1, 0x3, 0x1, 0x4, 0x2c442dcb, 0x6, 0xf, 0x10001, 0x8, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}]}]}}]}, 0x2508}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x84, 0x24, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0xffe0}, {0x15, 0xd}, {0x10, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x10000}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xa55}]}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff584, 0x0, 0x32a, 0x7fffffff, 0xce1, 0xffff, 0xe, 0x2, 0x2}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97816000000000000000a0000000000000004000400"], 0x1c}}, 0x0) 16.432192s ago: executing program 0 (id=4417): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004380)=@newtaction={0x47c, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x32c, 0x1, [@m_xt={0x9c, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x90, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6f543d2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xf5, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248ff34da3a7feb0b33e3daf741eaf0028a3028cadff8319f24f3fcf384b8ebc5d6acc0a15408058408ac4ec371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x19, 0x6, "12df59202984a7d58c1b88abb797475ada8903aa97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x13c, 0x1, [@m_nat={0x138, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x1}}]}, {0x6d, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d34c0212052e2b133f828d5344be697c8a1e248c0c894f3f3574cd0cbf17e94c545c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 16.388254714s ago: executing program 0 (id=4420): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0xe8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed", 0x99}], 0x1}], 0x1, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) 16.197175358s ago: executing program 0 (id=4421): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x28, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) 16.197058166s ago: executing program 1 (id=4422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x501, 0x70bd27, 0x25dfdbfe, {{0x1, 0x0, 0x6000}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x0, 0x40a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) 16.196923876s ago: executing program 3 (id=4423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ipvlan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0xf0ffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0xc01) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) 16.165851606s ago: executing program 1 (id=4424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60b3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4000000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x505001, 0x0) r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @remote}, &(0x7f0000004500)=0x1c) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) r10 = getpid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004540)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004580)={0x0, 0x0, 0x0}, &(0x7f00000045c0)=0xc) r13 = getpid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004600)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004640)={0x0, 0x0, 0x0}, &(0x7f0000004680)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000046c0)={0x0}, &(0x7f0000004700)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004740)={0x0, 0x0, 0x0}, &(0x7f0000004780)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000047c0)={0x0}, &(0x7f0000004800)=0xc) r19 = getgid() r20 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004840)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000004940)=0xe8) r22 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000000940)={0x3d4, 0x2f, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@typed={0xc, 0x128, 0x0, 0x0, @u64=0x8}, @generic="89efedd9c95ea844608fd76477c4e6040e1919e89136e207cfd0d2ce4403c6300e4b1cd40f63045347d4b644b5387fcaf1b3c975a0b58220c1a37d1a42b05984b4c2f29136e4fed8d75bba20", @typed={0x8, 0xcb, 0x0, 0x0, @uid}, @generic="080582da3c05377d0f1d801e3f0ba4d219b764e14cce0ff523ed452857f958620ac1ffc3cf9960ec498af6389f1c4c55cd116650c6d36526998c0415e29aba94377cb50ab2f9286665bc533ad1d00b9ddb20a6b5f855bee7fa3390f2e4096a9a7df4b209c2e17920a3144449583dae7858b7ce9ebc75e7a7bae69d67c67bd2f9884f0e6b0777abfdc9e71a7b5288a3063f8502ad9cc7fc437c1db4c89cbc0f3054e0545197b24feae77005bd4b3d83c5819dc1d4d2940e810121567511b8872c", @nested={0x2a2, 0x52, 0x0, 0x1, [@generic="3e269cd92172b3bbc27963df86760148ff0972aa4cc5d2bf89b0b3ee97d78e3b7d193731d66e9e9b64889863b2c9f7e455a8f75b0ca42805c0034ce42132086cd005380b6fd0f1ff3a43b557270b4354473f6059f2517045c91e0abcbe320c93cb1cdb20ced6bb108fd8261fcb17955702b13f49f20756e24019e7c886cb5bb67e8f3bfc112eafa5d7b5d623234c832fcca3255ac535ef5a4b8e509a723d54a93e6f85c9757fde4822fc0a541edba41ce4cf09d3bb9877366c077da21fb4fd242ab75541de1076ec55097fc7edf58e2cd0308a96763b5dcd8555e6f579", @generic="8bda1d7e37dfe84f6338c4d66992a95e70dcb074f161d9d55aeb79463be65d0d59ce070fe29f50b9726ad1e4d96cf79aa71d12f2a2bcbf3daaaf532d3e2eba62d7d7", @typed={0x14, 0xda, 0x0, 0x0, @ipv6=@private0}, @generic="e7805da7c6b71d3eb80becad938c6e19b88a78ed9aa453c9104e207abcc955a5c12dd5ec3c25e31ab00160fc77c77648685d7ccf37e99d4014f80dda1a1300da75c66f7868302863d8b4055bcbdd266cf1141064df40b015543e97407eec6bb5dd54c4f3a4428b8fd49ebcdcbfa681bd6a40b13de09b944d02a07a46c8394e78a90e46954b567ac0683a9d1b3a0c5e4b9c92a10aa6359798dfbfeed1f6e9c27015bc6f3b1b27c65e376d0caa3d", @generic="8b6c5019856b5c37ad2557113141a1cac883dbd81bb3ebe70de93568438f1d4fbc01a560e3a3add9e05257561d4da7c8647033b9ff55be7f3ead5d97f44f598639ed2b70e206cb7672082b4e3ec1ca7c30c48a094ae2c51ce2d1d1853c096f34bb68817efd3cc8d5c6e5126d2898abed8ec5bed979fd8291f0ac2841ed7084171f250c5c623e6ee32322acacc24a87fff81c4b13a6c6241b594b29e348b9af64630d2a224160147d0bcf1012fff4e2e76f3d", @nested={0x4, 0x22}, @typed={0x8, 0x133, 0x0, 0x0, @ipv4=@remote}]}]}, 0x3d4}, {&(0x7f00000000c0)={0x10, 0x41, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x10}, {&(0x7f0000000580)={0xdc, 0x42, 0x300, 0x70bd29, 0x25dfdbff, "", [@generic="7f40db07c357d9159ba732efcc900f89c4c7d3d8fab4c0cfd0b617bdf000bac689563aa3c514e1c7d89035933567943afdd2e43721ae8d828fafc843d4d3511ddedc20e2a5e80f4857518f86632d27102db5f49af39cf34035f89246c3e616dec91f35afbd655b4922a4cef4f40d79511d575faa9845709829af029ecbfdadae2ec672534a8a", @generic="ba910c1cdf8c2b60a29160718d85242f6b41c75e7fe86796e5c0b4f1da5f9ecd89f87da39e6e0d9a71e82b93d6eab1bdcf3a0706d06616aed4cf7ee812e20247d52f316f76a3"]}, 0xdc}, {&(0x7f0000000d40)={0x11b4, 0x14, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x87, 0x0, 0x0, @pid}, @generic="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", @nested={0x19c, 0x42, 0x0, 0x1, [@nested={0x4, 0x142}, @typed={0x8, 0x12a, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x120, 0x0, 0x0, @u32=0x1723a8c}, @nested={0x4, 0x12a}, @generic="78b38939ecc24b62270bce1dd7bcd15fbb9cdba8da9a302e16ae2c6cc36284ad25d294079b172b9c2e65626f5d2ab01e3240651472acf9446fae7ca36f7a", @generic="72af63ab71a3f1964eff79e25fad83c9e8fec2efacc6e1fbd31d799f9b28eed79b43352be6b55cfdbd8f8b09ff630b6678bf30878035b38f7dffb944e6985b1419d1e07450d3e5b3510f2ba21dcbc15b6e25b90272b5360c6cf6fbae1bec6b9263dfc4f897d718bb8679db1c72e39c1e6640fc43317d1494a51ce6b4a0bdb0f48f3bed1f86cb8e1ae2f43b71b5e26ad87c6c46582c9ac61aa82cb9bd83e917b10d2c391ffc5407b981de4c1ba2cdc9ae1e610f63a7851f715ff7ca92ef353ae294b7b4432185798a3f6372380d813bdb5a433919d1c9de47d27591cdf25a988202dc301c6e3b2915c8dae11a01bb4962feaa95a334f158cd", @typed={0x4, 0xc7}, @generic="4f5f222da14cbf6e0b2189f62efa917fa74bffea1ccbf1fc14748b416e8427661a4b52ed683ccacf737c4ae92b0b7bc36ca61eb57bc9913612a16975705b91392b08", @nested={0x4, 0x98}]}]}, 0x11b4}, {&(0x7f0000000700)={0xa0, 0x2e, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0x90, 0xc, 0x0, 0x1, [@nested={0x4, 0xc4}, @nested={0x4, 0xd2}, @generic="90ab", @generic="06ce481bb9fbcd262c9b9b05379bdb7ee2c96c97518a9e2dba2b78e54e9b2e7e2d175659127817ef018f313f6d9cc6914bc853fa6efa3f238194aeb2c4ed172076756656345afee8767b2195d2706cdeeb3bbaf0f2a43ecaeb9d7e75ecd6238cd165692cfd7b61f07a57e81f9987a3538aaa1b2593f0", @typed={0x4, 0x7c, 0x0, 0x0, @binary}, @typed={0x5, 0x13, 0x0, 0x0, @str='\x00'}]}]}, 0xa0}, {&(0x7f0000001f00)={0x22d0, 0x30, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@generic="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", @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@remote}, @nested={0x1153, 0x3e, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @uid}, @typed={0x8, 0x60, 0x0, 0x0, @pid=r5}, @generic="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", @generic="cbd9f05d67a9a04f6ca4dac666a7e3d158b58d93a6bd3a9c552ee3c8cddf8400de7e75d1821306c3925c690b5dd16ee9f43bbc6f0a1a9e1625f64b3bad9d493a1af343d96552cea90b102d9dadc9b918b8803201aa5c2cff47d0280d905e6d35196d6b02b20fd8f23af0d6a2ba906ccdfcecdaea8114d3ce34ef34614e69d8c0396f230367fe53bab9b7074d1deb755c89fa34ff48604c690cdb5af4be0f7caa4bec9437137749212cfe1c78194e099528b8c7b2c74739b4f7a9d3dd1ecb339a158beeedff00ab274e868211aaabe3484d4b9eb8f0fa42b482e71e", @generic="76e3dbd1d716f625413b1e5fd89164c1ea1021e9cbccc757df55f66b066d22981108f12443a05f68ee37fa0874b364be6e51d316968fa9ea9474dc72dd12bf08bede5e5c2657f6f5dc5fcd458363d4d242f912b6e11a3dfa0496d3cd12c6c8e5", @nested={0x4, 0x38}]}, @generic="8c76c0283e0900d1d91f5a68eefb57a604ab", @nested={0x8b, 0x8e, 0x0, 0x1, [@nested={0x4, 0xdc}, @generic="51b4ea5596eaa804a09930f293abda06130a14cdc7c27bac58848b12f39c2af7b1a467ddf37e83e874e9acaff2def5de4000d38962a8926e3b55a42d7a23e34c7c09de6d83319c22c3b106e81973f26994015ffe2f7ddb9430a1c1a8c80508e5f36f3ea9a22e0b6c4cc8611575f3e5f0f1f575a15955f55afe20c595033e84", @nested={0x4, 0x8a}]}, @typed={0xc, 0x4f, 0x0, 0x0, @u64}, @typed={0x8, 0x84, 0x0, 0x0, @pid}, @generic="2b563ca6d34d968b0ed5da069274e2f0773a6070ebe09bacecb53ffdee1b9429fd125aef6980f9007e24caba938afb7e3da202eade6ac98d75a5ac9f86014bbf530d339852482591958e4eb299b0faf09ea541c9a8a27c3ec7dbbabf472604d49d3f5c083a0c31c200fc5f45c16b11fd969f9c5ef065c2453507de4115a7ac963b68a7ea560c1fde3dae680e63e8cfdeacdca758573c53151d3c53ac98fdeffe980e9d9c88fdec412759c863ae6808"]}, 0x22d0}, {&(0x7f0000004200)={0x1a0, 0x21, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x116, 0x0, 0x0, @uid=r6}, @nested={0x185, 0x4, 0x0, 0x1, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x6}, @generic="ad6c6b535ff21161052d3743bff0a358bbac1f862d9c1b2256fa4fd26f30fb86997e1e51f84d5254389294c8fe3d69e883be5f8ec0291daf338a8e4725845eda12b1866bf2f40354875b07a2a6131194ee81882d35c533a49a8975d15d12f5de21099064dcda0f23155d872e6e", @generic="2639a903a2043d401431d54b4c7f", @generic="398454a8f7a9a40135ced272d367d127a84383a6f49e313f8f2f33d7f255316e962b70e3b4969a8f6698c5d113726604d9afdb1800007e1230ba896ba09cf39fd54cdd42443b95ebc0d2fdf099dcbac683bc90f33f8174e01e39a46a390eac79b03f7d06aebf64343952195dad9e1e7553535b10367b1d095ebf", @generic="492f7aec212792fa", @typed={0x6f, 0xf, 0x0, 0x0, @binary="b3b67f93ee80617fcb35c4fef62fced5391b921434153fb835ab16d1321f589a08f265045954f8e4c98d68377f1c6ad2e0c0e8b23eec7f5a5606d825d3335a39e1a426685c6a2e64c4733ba24f92c95192dd9d1c5632d88d9304096fd1db37c098b4938ce31a7c110df3c7"}, @nested={0x4, 0x13a}, @nested={0x4, 0xbc}]}]}, 0x1a0}, {&(0x7f0000000400)=ANY=[@ANYBLOB="a0000000420000082dbd0400fcdbdf2508007100ac1414aa0800490003000000e2ee43fd25120dd630675f81ac8f8b4e1e11681b25e69192d70f271848bb1bb2e06ed91f4b99dad1e86ae7a59cfbe4b4d381b627d49519ae9cf727d341c8049cd1a43b2d61e2a4120d9c51b15aa897a0fbad9478a04980e53945aca3f788d0414900df7be156034b34f82f33aefc402e30db8090b921b59ab25d88fac9e9ad0000"], 0xa0}], 0x8, &(0x7f0000004980)=[@rights={{0x1c, 0x1, 0x1, [r4, r3, r7]}}, @rights={{0x2c, 0x1, 0x1, [r4, r8, r3, r4, r9, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, 0xee00, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xee01, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, 0xffffffffffffffff]}}], 0x110, 0x4004890}, 0x4000000) 16.153720638s ago: executing program 4 (id=4425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00008900bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000ada100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdff2fffff56b65f580036b2b90000000000000000000038946b74e195952f1c8163d48ae7214c386aa1f1fe9f0caa6b27fd701ea24734516757e822eb17e7ccaff38956", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507", @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400601, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0xc) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000580), 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) ioctl$PPPIOCGIDLE64(r5, 0x8010743f, &(0x7f0000000240)) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000001c00)="b702", 0x2}], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r10, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r9, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="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"]) 16.053147261s ago: executing program 3 (id=4426): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.052935237s ago: executing program 0 (id=4427): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) socket$inet(0x2, 0xa, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) r2 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 16.045736007s ago: executing program 4 (id=4428): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 7) 15.995668989s ago: executing program 1 (id=4429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x700}, 0x88890) 15.909256256s ago: executing program 3 (id=4430): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004380)=@newtaction={0x47c, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x32c, 0x1, [@m_xt={0x9c, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x90, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6f543d2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xf5, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248ff34da3a7feb0b33e3daf741eaf0028a3028cadff8319f24f3fcf384b8ebc5d6acc0a15408058408ac4ec371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x19, 0x6, "12df59202984a7d58c1b88abb797475ada8903aa97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x13c, 0x1, [@m_nat={0x138, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x1}}]}, {0x6d, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d34c0212052e2b133f828d5344be697c8a1e248c0c894f3f3574cd0cbf17e94c545c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 15.876659192s ago: executing program 3 (id=4431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}}, 0xc000) 15.551011096s ago: executing program 1 (id=4432): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000061104cfff30000005f500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) 15.469280475s ago: executing program 3 (id=4433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000a80)={{r0}, r1, 0x4, @unused=[0x7fffffffffffffff, 0x11, 0x5, 0x8], @devid}) 15.469012072s ago: executing program 4 (id=4434): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}]}}]}, 0x94}}, 0x0) 15.468889426s ago: executing program 1 (id=4435): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r1, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0xc0a1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 15.419703914s ago: executing program 1 (id=4436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netrom(r0, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000100000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x30, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 15.407553185s ago: executing program 3 (id=4437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0xc8, 0x5, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x14) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/110], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 15.321447518s ago: executing program 4 (id=4438): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1409, 0x1, 0x0, 0xfffffffd}, 0x10}}, 0x0) 15.318891426s ago: executing program 4 (id=4439): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) close(r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000040)="2fa17d086fe74c2ce3a95b24e355d635b055b78e0ea4f523b3ccbc0986cd4370d8d031e99da14ab52b7b237d415d0ec1290eb614dba0499bf7bcf3fa66d64284dcb25bdc1607cb24c6a54f9c8b164c46cd80daa352038871595b550e0d19d1a8ff501bafaffb542ea56144f45ea33853f902224e5030aed02235fd92a7791692f0341cb0e8f65346213befbe73cae9205a0d7c7fa8d769e96b4dc0fdfd2ad644e7c72e4b0b94b25a99f6ea9a7a536609f7fc2787520084b03a4a942374d3ef99c5c060", &(0x7f0000000140)=""/86, 0x4}, 0x20) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000240)) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000002c0)=@generic={0x0, 0x0, 0xedc200}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xbe}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r1, r1, r1, r1], &(0x7f0000000440)=[{0x2, 0x5, 0xe, 0x3}], 0x10, 0xff}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000540)={{0x0, 0x101, 0x8, 0x4, 0x2, 0xa, 0x100000000, 0x5, 0x8, 0x4, 0x5, 0x9, 0x1, 0x5, 0x5}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001540)={0x0, r3, "5e214d2487af4e651a5002691b335c588b822b7ec1f786fba0ac5d24eddc6488046eab2a3cb2b96075fa3d05a89936210f5563c5ddb490b886963fde336772e654b90253c974d261b18c1bd6a727925dcf44cea33a3f035a593cde0b2214dd8466196e04a6cbb521d10c09db25d94f3b0006426bb2bd9e9476c3be6ea19e34fb948307e8b5c5d79fd3421ecd27f1b71135e2c9c0ef4d4d3563c407f1a4b0c1cc7fb5ca7856727f5e94d0d544aae5cee57956cb3f9f332f1ba97c2cb75d904939aea82030c244ef5f4f97e3d2822b68d151c78eb094346bfd02b81e647619e6a2eeb37188700d49880e0ea486985cd0214a07a22e90f79edaead365d2ab03e538", "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"}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000002540), &(0x7f0000002580)=0x4) r4 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000025c0)={0x0, 0x5}, 0xc) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000002600)) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r6, 0x80044944, &(0x7f0000002700)={0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000002740)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002b40)={r5}) setsockopt$inet_tcp_buf(r7, 0x6, 0x1c, &(0x7f0000002b80)="67c265536c94630efebc00d248ce9aabc3c0d6fc1d1078a849f132ae4b8a1cec411e2f84171dcb41b43527053e2e1fd01218b0156613be09597c8913bebe2bac0a06e0524b4613b95597d50640f309373961f09605e55c8699ac6509fe63abb29842223c741747003f447539682f9ee9c60e9adbd5ed33b9f0278fcf612f25f29522768ab802199b597560001c624e269ef1178779c046d061b81a280809f505d8c6b720be9a0fce60cbab9762616a681290ac6c755817d0ea91d70c78afaecda5a17c568c90dc71a877f49cd0ce", 0xce) r8 = accept$inet6(r7, 0x0, &(0x7f0000002c80)) setsockopt$MRT6_DEL_MFC(r8, 0x29, 0xcd, &(0x7f0000002cc0)={{0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x46b7}, {0xa, 0x4e20, 0x1, @remote}, 0x1, {[0x10001, 0x40, 0x8, 0xa, 0xab, 0xffffffff, 0x7fffffff, 0x6]}}, 0x5c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002d80), r7) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000002e80)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x54, r9, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x2404c080) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000002f00), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002f40)={&(0x7f0000002ec0)='f2fs_issue_flush\x00', r10, 0x0, 0x7fffffff}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002f80)={r6}) mmap(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x2, 0x13, r11, 0x31d24000) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) 1.590945534s ago: executing program 32 (id=4412): socket(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 567.55092ms ago: executing program 33 (id=4427): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) socket$inet(0x2, 0xa, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) r2 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 90.426183ms ago: executing program 34 (id=4436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netrom(r0, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000100000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x30, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 51.312637ms ago: executing program 35 (id=4437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0xc8, 0x5, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x14) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/110], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 0s ago: executing program 36 (id=4439): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) close(r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000040)="2fa17d086fe74c2ce3a95b24e355d635b055b78e0ea4f523b3ccbc0986cd4370d8d031e99da14ab52b7b237d415d0ec1290eb614dba0499bf7bcf3fa66d64284dcb25bdc1607cb24c6a54f9c8b164c46cd80daa352038871595b550e0d19d1a8ff501bafaffb542ea56144f45ea33853f902224e5030aed02235fd92a7791692f0341cb0e8f65346213befbe73cae9205a0d7c7fa8d769e96b4dc0fdfd2ad644e7c72e4b0b94b25a99f6ea9a7a536609f7fc2787520084b03a4a942374d3ef99c5c060", &(0x7f0000000140)=""/86, 0x4}, 0x20) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x20}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000240)) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000002c0)=@generic={0x0, 0x0, 0xedc200}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xbe}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r1, r1, r1, r1], &(0x7f0000000440)=[{0x2, 0x5, 0xe, 0x3}], 0x10, 0xff}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000540)={{0x0, 0x101, 0x8, 0x4, 0x2, 0xa, 0x100000000, 0x5, 0x8, 0x4, 0x5, 0x9, 0x1, 0x5, 0x5}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001540)={0x0, r3, "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", "1a2a22f55e394b8c209b0bbe0a4245e87b6f934400c0b347ed049586c361837f530514f70bacdbf6f14862b05422ca2e0c48150992fffe315eca35e8d0c1f68f1cf5721dff4eba0ed392e6ad1b7d481bc89270cfa318693547f69fc0082b79653b250fda27b6bcaae799f890f787856854cf97ca54baf912ba46ece752647d62d7b09cfeca5e236c0a802f86ad0cbdb49e5372fbcc0e6a67ff08cdf7ebc56b4cc777437fa06dc958ef41a876c6be4c23576f4c65ef9c8e7e401ccd22a58668001af6e67d0f30bcfae79682ef1cebdeced8636df47db15fb54dbc50f072cae0cd3e5c7fe30488d0df8dc934d7725eaff40868840622a15fbe237d3b524a3b2fcabf56e07c556152946904986bc0d9609a2406000032e5b6bfab6f9bb38648d72a6dec186758bde03501306e314031c7a53c6ddf52e47a35e0ac48531bc7c234aa3db4cfb9bbbbe2ebc079191d08f55fa00a3ae9c2fe3fae581c68c6e40b3ccb6da377e1d6e9f31bd3517a52f84b8b57f72633ac0b7ad313e097c3fe81946632b0a40788f83f4ff7febb547c0ef7a7c7423f8b415584609d02a071f216db660f107e1326d4ad5829410e279b2bc730940f86067a9dd9dc4bd57b031e2ddde02c51c922256d36fca66aa31a6b0923abc9d3b2d7957bf4d2ef2a9b86ca7d84a0f2c7849e3a0cc7c0d02ddc3e7362265593a1bc8ba9b547c990c1843e8b01562728284a7be7e39af376a369084c21cba0076e6af286fc25d18d0af1fa4dd11968f9905d69f5604fc9c88941d7d76d054ed687bfa257156a11dc45ac1a16101ff3a350154ab76860f31ebb7808187566cf65623a3453a9a48f20b497c35e5127832879ca2c2f47fc49cbcff32726d026512547dc36bce1969d3a08d7e7011659ce0aabfd3b2ab7b755ca0529fa7353a35e953ff8ba111bf83e8156c9f03c4dcfed37e437b2a941a43f6e7194871f0e942482d7a3efe3caec168e7037aee7a4564095d03596e1a2549586336f739316b46248802061ec7a282f0f60b09001bd6da10da0844fd65fd9183ffaabcb0c77894155911bf69a071b3127cf36a9365e2792a25a18000b492211217f022cb552bfa24a7f9797e0d67f2971b7c0362bf1a833a121655170962de1cc75a073e969bdf837d2f4ca5d7312af7f164592c84a37e51c14e33e865c9e3af06a0ee0f2886fcfe8abb89a50d909c0b24139b45a63b0959a24b91bb1a80af6238ab8302e1f2b871e4c80cb2c622cb308773f8edbad18fd7c9333f49e149f76d33c394618414821744618dd8d0f31ec36764e7c153b15d709d2f3c773ccd6da2a41cfe20e45432e8d411f2174a78053978ad95a6c2b4b5f91254e84c5cdbd07e9dfeb8aa6322fad37bc03e1a15c7667761ef76ef4287de713ed88a95a2cca202ecab42d9ef86535e34d2cc6a55ac0771be06b9de1e7de9851d4a442ca4760457236f6d1d4fd8fbca22861939ee5266ee79c8221599233ebf414a2bd0417d3269314d12c3f4e9c710754f9facc65691d0c67fb6bf16e09b0bfbb702fd72433e2dc5b55b9f5eea0cb86d9a08cf4cd252efc75a89ae148b098f73327a07debcc7f631b4a85d52604b70404174018d67a980115840502488724187bb5762c7c2cf53c4a4e17fce0fcee853b358a0a08257bbb7f574f573835eb728991cf45ee024fa8ae7f66f17c0a7b3a43074771185cf78ec2052e3435c96ba8586d4f6871f14c228ab2002b927c70a66d5c0b665b6af710c1c7eca00001395835f72e9959b2416d9f196bc2988712260ba899c4526a4c76f8bbf07a6de59d1a1bffd507499a2ee8af678bab750b606ff5c3880cb75eeeb6aae4de752b3d248cd7bf4335f27aada1571015380ef57c6c14768f382d47e28744a4d3eaadf0aa128ca3cf5aa57ea917b73308e37baf5e41dab20a36f3565bb112058b181c8142269edaabd616de47adffa15deca0ebfa178fca0877fd143d37245275767e5aa5d9695588d645b8460ea1896e6fbf41bef70c4612e93e2bab0c81dd166234c61803687abce7a84316e5ca6049d8c6071e972b24e2a84faeb491e263dac9a212a59ff45fb8ef7c0e808147f2344d5fbce7b828249ab19524fac362198ead4390f803d962fb1f05d13d344908df2ee82275807112843dca46e8b8bb1b2fa6d87090e51ad21b669a2c958e46dac936be9c73de393d747d879c31b9c20ad3b6f7d59d86be798855c9be48cea2348b10a4d975e08fb9609fab5af1cc99c5053eb5f50869f4bdd0bb024d76ad3b7143cb4fe2d3f73e52492a1a1d9989835515f0c1140133e61d7c529638c991a8e3d988a7d9236b88317890fd85c5e42f20fbf01f8cdf0fba4ccf1f4a23a852095092c413f062f9d26422ee4062c4ae0a0d7adc796f017a673c1d371c200706613ad20502ff4cf2a3f56e890dd63f8b8e654292885eff51becba2cd75cf12d0dc683901ce5a16a9b734778f6a150f95064cf57dd584d4636d9e5016dd8b61451279156faa32153439646c0445818dbc8b995f1764d395ff11405872401aef9738220dabb153aad4ed614433c292bb5793740fffff2944cb4c88a5e56fd3bfbc6cc2356633677b0be3cadfe3bfc1ce0a958fd58c12de32aad7bd52b951edc890e504879dc5c81c13118d8222264ec46e682cecb0b1ecfceff7145a92c4490649f10e018bfc2284f6f66e2934b085ef7376865904c6cb65fb2acb676b0bab271cf4455909e59bf8f4854985fd662daaecf7dc3a3fb4be02ef9da2bec76ce9797ce212f0f58bd8b1dc2c7172108d78d11a0bed53ef874525ebcc4ecc856854843e2dec51e37e83768e1cc6429fe2b306362252dfb75c733380ff3f0bbd47b123b11f75bcb4be937be1a980888e428997e22228db4a35c2357eaef54b15475b66581dd471261f826ac024f3e9a721f4acd1fa12ecafbd56f39e33a651c04243140249c7c26fbce6e26df0e73a3b0a699722d5fa7079f72b6b546ddee9e5b5fdf5171275bdbdae885ea3bc5cfa1d0039a583ac14aa600d56ae36e62df41d4fbbdc0a493262ab4c25cb362c6b92e12ff602c853c5c5f86099a842707ec3f2f2f85491a80197fede3bacf4b58b6a13c6fc77c0e2f9840fffee05ecb25504884adcdae65e3aa8892288b64141e6cdd9e50572fcd2f802b2098d0b98f9a9c4094957097afee575fac8abb1ae1c45dfc90a2e38b45f28dc716f5d9231dbebe68dc38a060f86b417f3a7bf6c06e4212d4b200c602dbf99513524bf0de31dc7b7a5ae4a8ff91df42ede4982b5d9741c7f58ec86e6f4bd5f67fa841ed4298cc6c15f7633c4883a3314ba09d400aad3ab36bcd652d91a4f3e4497f391494f0b40fe18c66caea99beb6a1aab0d5fa5b8dae22e6642b981b1718c229144886fe314cf3b37efd0dda5b9c05cb3b82a9c982b61b7af0a12707e583161d591f018bfd25101b5efb26e8a892bf860dba48c0d506283b4c002e9207d8eaadc10e583b20845bb008e8c5dc46a974ad81b02177a34782bd60f4a42134aeb5a761e78ad559b799222eb4f640bd383fed48d84010622dd748f38cb7f0057ea3bc62da6db7983b0ea74324a2dfab832c20d6752177a60e94cba6e76fdebc1f3ccb1aaae09a9a3e99a349989423faf8fdd0dd59b3a5590d7451d80649be671e4b5236f6d812840a1e7ad70c514e10f42e57dfbadf1efce66a3127c69e7da19ea702d3d54ffe9de687e6df904f8900bf3032a6f72f3d094ce40a15e4ed1d277359fdde18b0e9b04ef298acd9bd6562297aba5fb04ad63cdbbf02fe4c0caf091697eb2a6575d43eaeba4fac30d5c3841c7ee48b7fee0fff90e5b6a4d118769fb022323cb30116af6351780aad8155fde3a3d323ab3a2e0ad2545f5a61239726fcaa5a08652e8456e51c7e6b319947576f5377f4255a518e87da88825b3a229d0cce3977dd0f47fca15cf6de3ca73819856c87772225c67e39777e6ecf22d277ec831b01354046d7fe834299455d438944b165468ebefef767cce9fa7965b3a4262986a196d95e3199a219d26fb62815c6bac61d41d89c6070aac15e625243cbd80b1430f2c89ddd55b292d198cf09bf10c92309a4438211729888ace27c391e14117c2385290ba88397d8a31576cc600557e2192ba002a1a5ddbb071c25836bd1c1cca7a259173242c3223f46cfafe054b7352b3502a0879a7c1f7d3de5c9b7dd8bb7f92070921fe11d4c719f6ad73d315ae308370e8ec4d259c5a3a2b8987eb00cb81bbaa96b7afe85d34c583b7f333cb7e5dca23ea14a72501d2f92498eca6d7cbc9705a15786ae933983a933e2b55c82cbf3c09dd44e24eca9070cdeaf00f4232d85df5d564ac9e9706734ab798bec8a04cb32bcf39e5aabf4374d7681f23eec134cd16418b68089fb9ef0ca22fbe403626ef1a74b7c18d295a68a6fcba6b9831da08b0960d77f17fde60131fdd6e808e199527a7eac6221698a41677b18fbdbe3cdea3eddb0bb15e221410677320bf4fed5e73a72092ce56feeecc3eddaab679ee8e14e240cb010a4c7685a36778a29a18776b1560d9c83fae8ddc4714e87679b0a6b33a0871f715bbfccb6e688e80032af186d79ef03eb33316eac824a873f290bb910beddb77b069f51181ac1f97a6c786680d6473a01841f59074495cb17e25b42866d5ff4c20c4df555cd9b4942082c7515a0f86c65480a9c2fd392e78ecf7ef4e74d47af9cf7469852cc92b4c756d8bffd6838af2943d18acbc27626468279e9b703d8bad91735d084cde155b6d048a732f29091191c46c913573fba1d8b4f6e39a3fcc90fb0d24db279410330fa3fd64187aa4efd86bd18d3a9da69f31a16d9a9526d3fa4baaed794f0bfca5122728ce936458d95106b96f4ba9d5b92a685bf356c0bab36b7df9514d9a4957174e0c18daea4b7817f0719bc160e829e5aa450148ebbc03f6583a7d7739217ba613f4dfd45232f982e3e2c05d50a9a6433b7d81405fd76dc9e48b83b0c97a2794854abbbc264ab727212b4e473ec93c6220ed17dc3290a5c30daef08e7995d0043176de31df7cc143f3a33cf0d9b17014b389d07259215b8d6d775635d04fdda87068d83ac1fa165309a0f30c18c9f7ce311722b7866be72659c1cfa0eff2e1c2324a89b018638c808a98f5f5f3b6e024dd5f9feb99133ca9cc58abbd8b3b276114bdd4287c8e96216bda0fcc37d7420c6c99d3c9c5193cf54cb58826f96646ece4cc3cd37bd1933dbf81569872fabedae03d6a5afc6cf79340125b9e09ea0cdf1983d0ab174ee40ed323f50bb9327a3120ffa22652dbca567703907930e176427bd1edeb0f0dd29b9a6fb22f07f7dfb884b7e2bbdf03911b96f449347d0ff994a2af24a2d22d2e6cb8b0c9615b80f31523992dfc882854049da6ceb5bfe16454da8c0277b5"}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000002540), &(0x7f0000002580)=0x4) r4 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000025c0)={0x0, 0x5}, 0xc) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000002600)) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r6, 0x80044944, &(0x7f0000002700)={0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000002740)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002b40)={r5}) setsockopt$inet_tcp_buf(r7, 0x6, 0x1c, &(0x7f0000002b80)="67c265536c94630efebc00d248ce9aabc3c0d6fc1d1078a849f132ae4b8a1cec411e2f84171dcb41b43527053e2e1fd01218b0156613be09597c8913bebe2bac0a06e0524b4613b95597d50640f309373961f09605e55c8699ac6509fe63abb29842223c741747003f447539682f9ee9c60e9adbd5ed33b9f0278fcf612f25f29522768ab802199b597560001c624e269ef1178779c046d061b81a280809f505d8c6b720be9a0fce60cbab9762616a681290ac6c755817d0ea91d70c78afaecda5a17c568c90dc71a877f49cd0ce", 0xce) r8 = accept$inet6(r7, 0x0, &(0x7f0000002c80)) setsockopt$MRT6_DEL_MFC(r8, 0x29, 0xcd, &(0x7f0000002cc0)={{0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x46b7}, {0xa, 0x4e20, 0x1, @remote}, 0x1, {[0x10001, 0x40, 0x8, 0xa, 0xab, 0xffffffff, 0x7fffffff, 0x6]}}, 0x5c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002d80), r7) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000002e80)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x54, r9, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x2404c080) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000002f00), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002f40)={&(0x7f0000002ec0)='f2fs_issue_flush\x00', r10, 0x0, 0x7fffffff}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002f80)={r6}) mmap(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x2, 0x13, r11, 0x31d24000) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) kernel console output (not intermixed with test programs): tribute type 8 has an invalid length. [ 316.353480][T15381] syzkaller1: entered promiscuous mode [ 316.359204][T15381] syzkaller1: entered allmulticast mode [ 316.753900][T15427] __nla_validate_parse: 4 callbacks suppressed [ 316.753922][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'. [ 316.823814][T15430] netlink: 'syz.0.3004': attribute type 1 has an invalid length. [ 316.923472][T15436] macvlan2: entered promiscuous mode [ 316.928821][T15436] macvlan2: entered allmulticast mode [ 316.938812][T15436] bond12: entered promiscuous mode [ 316.949810][T15436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 316.961583][T15436] bond12: left promiscuous mode [ 317.067397][T15447] FAULT_INJECTION: forcing a failure. [ 317.067397][T15447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.091909][T15444] bridge_slave_0: left allmulticast mode [ 317.092756][T15447] CPU: 1 UID: 0 PID: 15447 Comm: syz.0.3008 Not tainted syzkaller #0 PREEMPT(full) [ 317.092788][T15447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.092803][T15447] Call Trace: [ 317.092815][T15447] [ 317.092826][T15447] dump_stack_lvl+0x189/0x250 [ 317.092862][T15447] ? __pfx____ratelimit+0x10/0x10 [ 317.092901][T15447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.092932][T15447] ? __pfx__printk+0x10/0x10 [ 317.092969][T15447] ? __might_fault+0xb0/0x130 [ 317.093013][T15447] should_fail_ex+0x414/0x560 [ 317.093054][T15447] _copy_from_user+0x2d/0xb0 [ 317.093084][T15447] ___sys_sendmsg+0x158/0x2a0 [ 317.093116][T15447] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.093190][T15447] ? __fget_files+0x2a/0x420 [ 317.093222][T15447] ? __fget_files+0x3a0/0x420 [ 317.093268][T15447] __x64_sys_sendmsg+0x19b/0x260 [ 317.093300][T15447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.093343][T15447] ? __pfx_ksys_write+0x10/0x10 [ 317.093369][T15447] ? rcu_is_watching+0x15/0xb0 [ 317.093404][T15447] ? do_syscall_64+0xbe/0x3b0 [ 317.093435][T15447] do_syscall_64+0xfa/0x3b0 [ 317.093459][T15447] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.093498][T15447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.093524][T15447] ? clear_bhb_loop+0x60/0xb0 [ 317.093554][T15447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.093577][T15447] RIP: 0033:0x7f6f1db8eec9 [ 317.093600][T15447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.093620][T15447] RSP: 002b:00007f6f1eb06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.093646][T15447] RAX: ffffffffffffffda RBX: 00007f6f1dde5fa0 RCX: 00007f6f1db8eec9 [ 317.093670][T15447] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 317.093684][T15447] RBP: 00007f6f1eb06090 R08: 0000000000000000 R09: 0000000000000000 [ 317.093700][T15447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.093714][T15447] R13: 00007f6f1dde6038 R14: 00007f6f1dde5fa0 R15: 00007ffecf3b4978 [ 317.093760][T15447] [ 317.340513][T15444] bridge_slave_0: left promiscuous mode [ 317.346422][T15444] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.398372][T15444] bridge_slave_1: left allmulticast mode [ 317.408461][T15444] bridge_slave_1: left promiscuous mode [ 317.438325][T15444] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.473502][T15444] bond0: (slave bond_slave_0): Releasing backup interface [ 317.497480][T15444] bond0: (slave bond_slave_1): Releasing backup interface [ 317.599052][T15444] team0: Port device team_slave_0 removed [ 317.612180][T15444] team0: Port device team_slave_1 removed [ 317.628502][T15444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.653330][T15468] netlink: 'syz.0.3015': attribute type 1 has an invalid length. [ 317.664771][T15444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.695451][T15444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.704166][T15444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.720984][T15444] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 317.756601][T15470] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3016'. [ 317.841395][T15479] netlink: 'syz.1.3018': attribute type 1 has an invalid length. [ 317.899321][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 318.001854][T15468] macvlan2: entered promiscuous mode [ 318.022353][T15468] macvlan2: entered allmulticast mode [ 318.035185][T15468] bond13: entered promiscuous mode [ 318.057692][T15468] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.079040][T15491] netlink: 'syz.4.3019': attribute type 1 has an invalid length. [ 318.097296][T15468] bond13: left promiscuous mode [ 318.135908][T15493] siw: device registration error -23 [ 318.155921][T15482] macvlan2: entered promiscuous mode [ 318.164259][T15482] macvlan2: entered allmulticast mode [ 318.171738][T15482] bond7: entered promiscuous mode [ 318.178065][T15482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.192403][T15482] bond7: left promiscuous mode [ 318.228591][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3019'. [ 318.311411][T15500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3025'. [ 318.393549][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 318.435592][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 318.855180][T15529] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 319.116821][T15544] netlink: 'syz.3.3039': attribute type 13 has an invalid length. [ 319.130536][T15544] netlink: 'syz.3.3039': attribute type 58 has an invalid length. [ 319.138593][T15544] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3039'. [ 319.164908][T15542] tipc: Enabled bearer , priority 0 [ 319.173755][T15542] syzkaller0: entered promiscuous mode [ 319.180811][T15542] syzkaller0: entered allmulticast mode [ 319.192195][T15542] tipc: Resetting bearer [ 319.208518][T15541] tipc: Resetting bearer [ 319.250698][T15541] tipc: Disabling bearer [ 319.379839][T15559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3045'. [ 319.528577][T15567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.588877][T15575] netlink: 'syz.3.3047': attribute type 1 has an invalid length. [ 319.695137][T15572] ip_vti0: left promiscuous mode [ 319.710231][T15572] ip_vti0: left allmulticast mode [ 319.741499][T15572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.963875][T15591] syzkaller1: entered promiscuous mode [ 319.986892][T15591] syzkaller1: entered allmulticast mode [ 320.290897][T15609] sctp: [Deprecated]: syz.2.3060 (pid 15609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.290897][T15609] Use struct sctp_sack_info instead [ 320.538340][T15627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3065'. [ 320.602541][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'. [ 320.894999][T15649] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 321.010041][T15649] macvlan3: entered promiscuous mode [ 321.015405][T15649] macvlan3: entered allmulticast mode [ 321.033384][T15649] bond7: entered promiscuous mode [ 321.039867][T15649] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 321.058134][T15649] bond7: left promiscuous mode [ 321.709262][T15699] sctp: [Deprecated]: syz.2.3087 (pid 15699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.709262][T15699] Use struct sctp_sack_info instead [ 321.954298][T15712] __nla_validate_parse: 1 callbacks suppressed [ 321.954418][T15712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3090'. [ 321.962482][T15714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3091'. [ 322.610201][T15741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'. [ 322.823132][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3098'. [ 323.289570][T15782] virt_wifi0: mtu less than device minimum [ 323.305472][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 323.348953][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 323.570203][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'. [ 323.746728][T15804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3111'. [ 324.426325][T15830] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3120'. [ 324.451871][T15830] gretap0: entered promiscuous mode [ 324.496361][T15841] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3120'. [ 324.518209][T15839] 0ªî{X¹¦: renamed from gretap0 [ 324.585845][T15839] 0ªî{X¹¦: left promiscuous mode [ 324.629202][T15839] 0ªî{X¹¦: entered allmulticast mode [ 324.660906][T15839] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 324.709503][T15841] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 324.731993][T15858] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 324.751660][T15841] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 324.903338][T15862] macvlan2: entered promiscuous mode [ 324.908811][T15862] macvlan2: entered allmulticast mode [ 324.916522][T15862] bond12: entered promiscuous mode [ 324.922874][T15862] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 324.952657][T15862] bond12: left promiscuous mode [ 325.371941][T15885] tipc: Enabling of bearer rejected, already enabled [ 326.566310][T15953] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 327.092641][T15953] bond13 (unregistering): Released all slaves [ 329.526613][T15970] __nla_validate_parse: 5 callbacks suppressed [ 329.526634][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 329.765811][T15994] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 329.835530][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 329.960767][T16010] netlink: 'syz.2.3162': attribute type 26 has an invalid length. [ 329.963179][T16006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.968707][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3162'. [ 330.035810][T16011] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 330.197887][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3164'. [ 330.211421][T16025] netlink: 'syz.1.3164': attribute type 7 has an invalid length. [ 330.220537][T16025] netlink: 'syz.1.3164': attribute type 8 has an invalid length. [ 330.228404][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3164'. [ 330.247414][T16023] sctp: [Deprecated]: syz.3.3165 (pid 16023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.247414][T16023] Use struct sctp_sack_info instead [ 330.405255][T16032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3168'. [ 330.419572][T16032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3168'. [ 330.445153][T16032] netlink: 'syz.1.3168': attribute type 17 has an invalid length. [ 330.453903][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 330.474138][T16032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3168'. [ 330.511645][T16032] erspan0: entered promiscuous mode [ 330.518771][T16032] 1ªî{X¹¦: entered promiscuous mode [ 330.520672][T16037] netlink: 'syz.3.3169': attribute type 1 has an invalid length. [ 330.676088][T16044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3171'. [ 330.946819][T16059] tipc: Enabled bearer , priority 0 [ 330.967543][T16059] syzkaller0: entered promiscuous mode [ 330.984611][T16059] syzkaller0: entered allmulticast mode [ 331.004225][T16063] 0ªî{X¹¦: entered promiscuous mode [ 331.043105][T16063] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 331.061923][T16063] 1ªî{X¹¦: left promiscuous mode [ 331.076881][T16063] 1ªî{X¹¦: entered allmulticast mode [ 331.101850][T16063] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 331.155362][T16059] tipc: Resetting bearer [ 331.221235][T16055] tipc: Resetting bearer [ 331.335705][T16055] tipc: Disabling bearer [ 331.340488][T16078] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 332.016749][T16118] tipc: Enabled bearer , priority 0 [ 332.043537][T16118] syzkaller0: entered promiscuous mode [ 332.066452][T16118] syzkaller0: entered allmulticast mode [ 332.095255][T16122] tipc: Enabling of bearer rejected, already enabled [ 332.117192][T16118] tipc: Resetting bearer [ 332.161888][T16116] tipc: Resetting bearer [ 332.189373][T16131] netlink: 'syz.0.3197': attribute type 1 has an invalid length. [ 332.222986][T16116] tipc: Disabling bearer [ 332.476265][T16149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.653624][T16154] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.928271][T16169] tipc: Enabled bearer , priority 0 [ 332.943349][T16169] syzkaller0: entered promiscuous mode [ 332.950024][T16169] syzkaller0: entered allmulticast mode [ 332.984645][T16169] tipc: Resetting bearer [ 333.014637][T16166] tipc: Resetting bearer [ 333.092074][T16166] tipc: Disabling bearer [ 333.233842][T16178] team_slave_0: entered allmulticast mode [ 333.273899][T16181] tipc: Enabled bearer , priority 0 [ 333.414648][T16185] syzkaller0: entered promiscuous mode [ 333.433620][T16194] netlink: 'syz.3.3214': attribute type 1 has an invalid length. [ 333.445342][T16185] syzkaller0: entered allmulticast mode [ 333.459892][T16192] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 333.595073][T16194] bond14: entered promiscuous mode [ 333.600939][T16194] 8021q: adding VLAN 0 to HW filter on device bond14 [ 333.646328][T16170] tipc: Resetting bearer [ 333.677356][T16206] openvswitch: netlink: Message has 8 unknown bytes. [ 333.705928][T16170] tipc: Disabling bearer [ 334.281050][T16236] tipc: Enabling of bearer rejected, failed to enable media [ 334.316741][T16232] tipc: Enabled bearer , priority 0 [ 334.334105][T16232] syzkaller0: entered promiscuous mode [ 334.345805][T16232] syzkaller0: entered allmulticast mode [ 334.365809][T16232] tipc: Resetting bearer [ 334.406190][T16229] tipc: Resetting bearer [ 334.442536][T16229] tipc: Disabling bearer [ 334.470169][T16245] netlink: 'syz.0.3227': attribute type 1 has an invalid length. [ 334.535528][T16245] bond14: entered promiscuous mode [ 334.542185][T16245] 8021q: adding VLAN 0 to HW filter on device bond14 [ 334.642902][T16256] tipc: Enabled bearer , priority 0 [ 334.650727][T16256] syzkaller0: entered promiscuous mode [ 334.656420][T16256] syzkaller0: entered allmulticast mode [ 334.681225][T16256] tipc: Resetting bearer [ 334.709616][T16254] tipc: Resetting bearer [ 334.797604][T16254] tipc: Disabling bearer [ 334.824981][T16267] __nla_validate_parse: 8 callbacks suppressed [ 334.825002][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3234'. [ 335.004503][T16277] tipc: Enabling of bearer rejected, failed to enable media [ 335.155034][T16286] netlink: 'syz.2.3242': attribute type 1 has an invalid length. [ 335.172290][T16284] tipc: Enabled bearer , priority 0 [ 335.233868][T16286] bond8: entered promiscuous mode [ 335.240406][T16286] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.248230][T16284] syzkaller0: entered promiscuous mode [ 335.254283][T16284] syzkaller0: entered allmulticast mode [ 335.298115][T16284] tipc: Resetting bearer [ 335.342768][T16283] tipc: Resetting bearer [ 335.361831][T16283] tipc: Disabling bearer [ 335.377871][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3246'. [ 335.509770][T16288] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 335.821250][T16323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3254'. [ 335.841149][T16323] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3254'. [ 335.844420][T16322] tipc: Enabling of bearer rejected, failed to enable media [ 335.865586][T16323] netlink: 'syz.3.3254': attribute type 6 has an invalid length. [ 335.873648][T16325] netlink: 'syz.4.3257': attribute type 1 has an invalid length. [ 335.897081][T16323] netlink: 'syz.3.3254': attribute type 5 has an invalid length. [ 335.906675][T16328] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3256'. [ 335.932512][T16323] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3254'. [ 335.948477][T16325] bond11: entered promiscuous mode [ 335.956406][T16325] 8021q: adding VLAN 0 to HW filter on device bond11 [ 336.104526][T16331] bond9: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 336.115664][T16323] syzkaller1: entered promiscuous mode [ 336.134780][T16323] syzkaller1: entered allmulticast mode [ 336.438065][T16367] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3268'. [ 336.486023][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3268'. [ 336.519954][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3268'. [ 336.653741][T16380] netlink: 'syz.0.3273': attribute type 1 has an invalid length. [ 336.655406][T16376] tipc: Enabling of bearer rejected, already enabled [ 336.706869][T16384] netlink: 'syz.1.3274': attribute type 2 has an invalid length. [ 336.737090][T16384] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3274'. [ 336.747806][T16378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.125029][T16410] sctp: [Deprecated]: syz.4.3281 (pid 16410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.125029][T16410] Use struct sctp_sack_info instead [ 337.296768][T16420] netlink: 'syz.4.3284': attribute type 10 has an invalid length. [ 337.317749][T16420] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 337.947433][T16460] netlink: 'syz.2.3292': attribute type 4 has an invalid length. [ 338.004185][T16460] netlink: 'syz.2.3292': attribute type 4 has an invalid length. [ 338.962984][T16517] tipc: Enabling of bearer rejected, failed to enable media [ 339.836480][T16573] __nla_validate_parse: 2 callbacks suppressed [ 339.836503][T16573] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3322'. [ 339.856985][T16575] tipc: Enabling of bearer rejected, failed to enable media [ 340.004076][T16581] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3328'. [ 340.288587][T16596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'. [ 340.467306][T16610] tipc: Enabling of bearer rejected, already enabled [ 340.776327][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3346'. [ 340.811413][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3346'. [ 340.871689][T16637] syzkaller0: refused to change device tx_queue_len [ 340.885937][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 341.071437][T16645] tipc: Enabling of bearer rejected, failed to enable media [ 341.578147][T16672] netlink: 'syz.3.3358': attribute type 10 has an invalid length. [ 341.665566][T16661] vlan0 (unregistering): left allmulticast mode [ 341.672311][T16661] veth0_vlan (unregistering): left allmulticast mode [ 341.679273][T16661] vlan0 (unregistering): left promiscuous mode [ 341.777543][T16672] veth1_macvtap: left promiscuous mode [ 341.787700][T16672] team0: Device veth1_macvtap failed to register rx_handler [ 342.085993][T16704] netlink: 'syz.0.3365': attribute type 39 has an invalid length. [ 342.371033][T16718] netlink: 'syz.1.3372': attribute type 1 has an invalid length. [ 342.406151][T16718] bond8: entered promiscuous mode [ 342.413336][T16718] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.694214][T16724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3375'. [ 342.704756][T16724] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3375'. [ 343.234736][T16768] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3389'. [ 343.796610][T16804] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3402'. [ 344.216752][T16826] netlink: 'syz.0.3409': attribute type 4 has an invalid length. [ 344.507063][T16844] netlink: 'syz.3.3415': attribute type 2 has an invalid length. [ 344.512671][T16846] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 344.533248][T16847] netlink: 'syz.2.3414': attribute type 10 has an invalid length. [ 344.660388][T16853] macvlan4: entered promiscuous mode [ 344.674451][T16853] macvlan4: entered allmulticast mode [ 344.682185][T16853] bond12: entered promiscuous mode [ 344.688050][T16853] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 344.716588][T16853] bond12: left promiscuous mode [ 345.045142][T16883] netlink: 'syz.0.3425': attribute type 10 has an invalid length. [ 345.056787][T16883] veth1_macvtap: left promiscuous mode [ 345.172213][T16891] netlink: 'syz.2.3428': attribute type 2 has an invalid length. [ 345.181667][T16891] __nla_validate_parse: 3 callbacks suppressed [ 345.181687][T16891] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3428'. [ 345.203100][T16891] nbd: must specify a device to reconfigure [ 345.255838][T16892] netlink: 'syz.1.3427': attribute type 1 has an invalid length. [ 345.342280][T16898] bond9: (slave ip6gretap1): making interface the new active one [ 345.374425][T16898] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.413619][T16898] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.447987][T16906] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3432'. [ 345.457626][T16898] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 345.458080][T16892] tipc: Enabled bearer , priority 13 [ 345.586490][T16910] gre2: entered promiscuous mode [ 345.601689][T16910] gre2: entered allmulticast mode [ 346.447492][T16957] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3451'. [ 346.463104][T16959] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3453'. [ 347.114474][T17005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3467'. [ 347.167726][T17007] validate_nla: 2 callbacks suppressed [ 347.167746][T17007] netlink: 'syz.3.3468': attribute type 2 has an invalid length. [ 347.182668][T17007] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3468'. [ 347.368371][T17016] tipc: Enabled bearer , priority 0 [ 347.390079][T17016] syzkaller0: entered promiscuous mode [ 347.407066][T17016] syzkaller0: entered allmulticast mode [ 347.415446][T17020] netlink: 'syz.2.3473': attribute type 26 has an invalid length. [ 347.425783][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 347.453942][T17016] tipc: Resetting bearer [ 347.460482][T17020] netlink: 'syz.2.3473': attribute type 26 has an invalid length. [ 347.471104][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 347.481116][T17015] tipc: Resetting bearer [ 347.482086][T17023] netlink: 'syz.2.3473': attribute type 26 has an invalid length. [ 347.526883][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 347.527222][T17015] tipc: Disabling bearer [ 347.568046][T17023] netlink: 'syz.2.3473': attribute type 26 has an invalid length. [ 347.609237][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 366.815698][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3479'. [ 366.845641][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3479'. [ 366.951194][T17059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3481'. [ 367.034602][T17064] netlink: 'syz.3.3485': attribute type 2 has an invalid length. [ 367.042579][T17064] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3485'. [ 367.322385][T17077] tipc: Enabled bearer , priority 0 [ 367.390211][T17077] syzkaller0: entered promiscuous mode [ 367.396414][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'. [ 367.405803][T17077] syzkaller0: entered allmulticast mode [ 367.408704][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3492'. [ 367.422675][T17081] netlink: 'syz.0.3492': attribute type 32 has an invalid length. [ 367.437479][T17077] tipc: Resetting bearer [ 367.447174][T17074] tipc: Resetting bearer [ 367.484514][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3493'. [ 367.495741][T17074] tipc: Disabling bearer [ 367.735376][T17099] FAULT_INJECTION: forcing a failure. [ 367.735376][T17099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.769411][T17099] CPU: 1 UID: 0 PID: 17099 Comm: syz.0.3498 Not tainted syzkaller #0 PREEMPT(full) [ 367.769442][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.769468][T17099] Call Trace: [ 367.769477][T17099] [ 367.769487][T17099] dump_stack_lvl+0x189/0x250 [ 367.769519][T17099] ? __pfx____ratelimit+0x10/0x10 [ 367.769559][T17099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.769586][T17099] ? __pfx__printk+0x10/0x10 [ 367.769619][T17099] ? __might_fault+0xb0/0x130 [ 367.769659][T17099] should_fail_ex+0x414/0x560 [ 367.769695][T17099] _copy_from_iter+0x404/0x1790 [ 367.769728][T17099] ? rcu_is_watching+0x15/0xb0 [ 367.769758][T17099] ? __pfx__copy_from_iter+0x10/0x10 [ 367.769783][T17099] ? __build_skb_around+0x257/0x3e0 [ 367.769811][T17099] ? netlink_sendmsg+0x642/0xb30 [ 367.769832][T17099] ? skb_put+0x11b/0x210 [ 367.769860][T17099] netlink_sendmsg+0x6b2/0xb30 [ 367.769893][T17099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.769921][T17099] ? aa_sock_msg_perm+0xf1/0x1d0 [ 367.769954][T17099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.769987][T17099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.770011][T17099] __sock_sendmsg+0x219/0x270 [ 367.770048][T17099] ____sys_sendmsg+0x505/0x830 [ 367.770080][T17099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.770124][T17099] ? import_iovec+0x74/0xa0 [ 367.770152][T17099] ___sys_sendmsg+0x21f/0x2a0 [ 367.770182][T17099] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.770249][T17099] ? __fget_files+0x2a/0x420 [ 367.770278][T17099] ? __fget_files+0x3a0/0x420 [ 367.770319][T17099] __x64_sys_sendmsg+0x19b/0x260 [ 367.770349][T17099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.770386][T17099] ? __pfx_ksys_write+0x10/0x10 [ 367.770410][T17099] ? rcu_is_watching+0x15/0xb0 [ 367.770438][T17099] ? do_syscall_64+0xbe/0x3b0 [ 367.770464][T17099] do_syscall_64+0xfa/0x3b0 [ 367.770485][T17099] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.770519][T17099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.770541][T17099] ? clear_bhb_loop+0x60/0xb0 [ 367.770567][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.770589][T17099] RIP: 0033:0x7f6f1db8eec9 [ 367.770608][T17099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.770628][T17099] RSP: 002b:00007f6f1eb06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.770651][T17099] RAX: ffffffffffffffda RBX: 00007f6f1dde5fa0 RCX: 00007f6f1db8eec9 [ 367.770667][T17099] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 367.770681][T17099] RBP: 00007f6f1eb06090 R08: 0000000000000000 R09: 0000000000000000 [ 367.770694][T17099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.770708][T17099] R13: 00007f6f1dde6038 R14: 00007f6f1dde5fa0 R15: 00007ffecf3b4978 [ 367.770743][T17099] [ 368.141929][T17103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3499'. [ 368.331257][T17119] netlink: 'syz.2.3505': attribute type 11 has an invalid length. [ 368.341629][T17121] tipc: Enabling of bearer rejected, already enabled [ 368.547466][T17134] FAULT_INJECTION: forcing a failure. [ 368.547466][T17134] name failslab, interval 1, probability 0, space 0, times 0 [ 368.562452][T17135] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3509'. [ 368.572979][T17135] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3509'. [ 368.594392][T17134] CPU: 1 UID: 0 PID: 17134 Comm: syz.0.3510 Not tainted syzkaller #0 PREEMPT(full) [ 368.594421][T17134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 368.594433][T17134] Call Trace: [ 368.594446][T17134] [ 368.594456][T17134] dump_stack_lvl+0x189/0x250 [ 368.594489][T17134] ? __pfx____ratelimit+0x10/0x10 [ 368.594525][T17134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.594552][T17134] ? __pfx__printk+0x10/0x10 [ 368.594585][T17134] ? __lock_acquire+0xab9/0xd20 [ 368.594616][T17134] should_fail_ex+0x414/0x560 [ 368.594651][T17134] should_failslab+0xa8/0x100 [ 368.594682][T17134] kmem_cache_alloc_noprof+0x73/0x3c0 [ 368.594717][T17134] ? skb_clone+0x212/0x3a0 [ 368.594748][T17134] skb_clone+0x212/0x3a0 [ 368.594779][T17134] __netlink_deliver_tap+0x404/0x850 [ 368.594818][T17134] ? netlink_deliver_tap+0x2e/0x1b0 [ 368.594842][T17134] netlink_deliver_tap+0x19c/0x1b0 [ 368.594867][T17134] netlink_unicast+0x7fa/0x9e0 [ 368.594921][T17134] ? __pfx_netlink_unicast+0x10/0x10 [ 368.594956][T17134] ? netlink_sendmsg+0x642/0xb30 [ 368.594977][T17134] ? skb_put+0x11b/0x210 [ 368.595005][T17134] netlink_sendmsg+0x805/0xb30 [ 368.595040][T17134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.595067][T17134] ? aa_sock_msg_perm+0xf1/0x1d0 [ 368.595101][T17134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.595134][T17134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.595160][T17134] __sock_sendmsg+0x219/0x270 [ 368.595194][T17134] ____sys_sendmsg+0x505/0x830 [ 368.595226][T17134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.595263][T17134] ? import_iovec+0x74/0xa0 [ 368.595293][T17134] ___sys_sendmsg+0x21f/0x2a0 [ 368.595322][T17134] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.595393][T17134] ? __fget_files+0x2a/0x420 [ 368.595423][T17134] ? __fget_files+0x3a0/0x420 [ 368.595466][T17134] __x64_sys_sendmsg+0x19b/0x260 [ 368.595497][T17134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.595536][T17134] ? __pfx_ksys_write+0x10/0x10 [ 368.595559][T17134] ? rcu_is_watching+0x15/0xb0 [ 368.595591][T17134] ? do_syscall_64+0xbe/0x3b0 [ 368.595619][T17134] do_syscall_64+0xfa/0x3b0 [ 368.595640][T17134] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.595674][T17134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.595696][T17134] ? clear_bhb_loop+0x60/0xb0 [ 368.595735][T17134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.595756][T17134] RIP: 0033:0x7f6f1db8eec9 [ 368.595777][T17134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.595797][T17134] RSP: 002b:00007f6f1eb06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.595821][T17134] RAX: ffffffffffffffda RBX: 00007f6f1dde5fa0 RCX: 00007f6f1db8eec9 [ 368.595837][T17134] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 368.595851][T17134] RBP: 00007f6f1eb06090 R08: 0000000000000000 R09: 0000000000000000 [ 368.595865][T17134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.595878][T17134] R13: 00007f6f1dde6038 R14: 00007f6f1dde5fa0 R15: 00007ffecf3b4978 [ 368.595915][T17134] [ 369.257527][T17155] netlink: 'syz.1.3517': attribute type 16 has an invalid length. [ 369.287036][T17155] netlink: 'syz.1.3517': attribute type 3 has an invalid length. [ 369.302513][T17155] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 369.334914][T17162] tipc: Enabled bearer , priority 0 [ 369.384430][T17162] syzkaller0: entered promiscuous mode [ 369.391980][T17162] syzkaller0: entered allmulticast mode [ 369.469712][T17162] tipc: Resetting bearer [ 369.493836][T17161] tipc: Resetting bearer [ 369.568711][T17161] tipc: Disabling bearer [ 369.810331][T17188] netlink: 'syz.0.3530': attribute type 1 has an invalid length. [ 369.895422][T17188] bond15: entered promiscuous mode [ 369.901811][T17188] 8021q: adding VLAN 0 to HW filter on device bond15 [ 369.920891][T17187] tipc: Enabled bearer , priority 0 [ 369.993499][T17192] bond15: (slave bridge11): making interface the new active one [ 370.023478][T17192] bridge11: entered promiscuous mode [ 370.041642][T17192] bond15: (slave bridge11): Enslaving as an active interface with an up link [ 370.071872][T17187] syzkaller0: entered promiscuous mode [ 370.089331][T17187] syzkaller0: entered allmulticast mode [ 370.245966][T17187] tipc: Resetting bearer [ 370.276416][T17180] tipc: Resetting bearer [ 370.315781][T17180] tipc: Disabling bearer [ 370.781599][T17247] FAULT_INJECTION: forcing a failure. [ 370.781599][T17247] name failslab, interval 1, probability 0, space 0, times 0 [ 370.797013][T17247] CPU: 1 UID: 0 PID: 17247 Comm: syz.1.3542 Not tainted syzkaller #0 PREEMPT(full) [ 370.797042][T17247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.797056][T17247] Call Trace: [ 370.797065][T17247] [ 370.797073][T17247] dump_stack_lvl+0x189/0x250 [ 370.797105][T17247] ? __pfx____ratelimit+0x10/0x10 [ 370.797140][T17247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.797167][T17247] ? __pfx__printk+0x10/0x10 [ 370.797205][T17247] ? __pfx___might_resched+0x10/0x10 [ 370.797227][T17247] ? fs_reclaim_acquire+0x7d/0x100 [ 370.797262][T17247] should_fail_ex+0x414/0x560 [ 370.797298][T17247] should_failslab+0xa8/0x100 [ 370.797328][T17247] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 370.797355][T17247] ? __alloc_skb+0x112/0x2d0 [ 370.797382][T17247] __alloc_skb+0x112/0x2d0 [ 370.797409][T17247] netlink_ack+0x146/0xa50 [ 370.797430][T17247] ? __up_read+0x280/0x680 [ 370.797461][T17247] ? __pfx___up_read+0x10/0x10 [ 370.797498][T17247] rdma_nl_rcv+0x3c8/0x980 [ 370.797547][T17247] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 370.797591][T17247] ? __lock_acquire+0xab9/0xd20 [ 370.797631][T17247] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.797663][T17247] netlink_unicast+0x82c/0x9e0 [ 370.797708][T17247] ? __pfx_netlink_unicast+0x10/0x10 [ 370.797742][T17247] ? netlink_sendmsg+0x642/0xb30 [ 370.797763][T17247] ? skb_put+0x11b/0x210 [ 370.797791][T17247] netlink_sendmsg+0x805/0xb30 [ 370.797825][T17247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.797852][T17247] ? aa_sock_msg_perm+0xf1/0x1d0 [ 370.797886][T17247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.797919][T17247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.797944][T17247] __sock_sendmsg+0x219/0x270 [ 370.797979][T17247] ____sys_sendmsg+0x505/0x830 [ 370.798012][T17247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.798047][T17247] ? import_iovec+0x74/0xa0 [ 370.798076][T17247] ___sys_sendmsg+0x21f/0x2a0 [ 370.798104][T17247] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.798171][T17247] ? __fget_files+0x2a/0x420 [ 370.798198][T17247] ? __fget_files+0x3a0/0x420 [ 370.798239][T17247] __x64_sys_sendmsg+0x19b/0x260 [ 370.798267][T17247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.798305][T17247] ? __pfx_ksys_write+0x10/0x10 [ 370.798329][T17247] ? rcu_is_watching+0x15/0xb0 [ 370.798358][T17247] ? do_syscall_64+0xbe/0x3b0 [ 370.798383][T17247] do_syscall_64+0xfa/0x3b0 [ 370.798403][T17247] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.798437][T17247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.798460][T17247] ? clear_bhb_loop+0x60/0xb0 [ 370.798487][T17247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.798508][T17247] RIP: 0033:0x7f9b57b8eec9 [ 370.798530][T17247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.798549][T17247] RSP: 002b:00007f9b58a13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.798583][T17247] RAX: ffffffffffffffda RBX: 00007f9b57de5fa0 RCX: 00007f9b57b8eec9 [ 370.798600][T17247] RDX: 0000000000000810 RSI: 0000200000000a40 RDI: 0000000000000003 [ 370.798614][T17247] RBP: 00007f9b58a13090 R08: 0000000000000000 R09: 0000000000000000 [ 370.798628][T17247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.798641][T17247] R13: 00007f9b57de6038 R14: 00007f9b57de5fa0 R15: 00007ffe63532c18 [ 370.798676][T17247] [ 370.838956][T17251] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20002 [ 371.071170][T17256] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 371.257563][T17263] tipc: Enabling of bearer rejected, failed to enable media [ 372.115963][T17312] tipc: Enabling of bearer rejected, already enabled [ 372.174123][T17298] "syz.2.3551" (17298) uses obsolete ecb(arc4) skcipher [ 372.324968][T17322] block nbd3: NBD_DISCONNECT [ 372.379562][T17323] __nla_validate_parse: 11 callbacks suppressed [ 372.379584][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3558'. [ 372.441056][T17327] tipc: Enabled bearer , priority 0 [ 372.456223][T17327] syzkaller0: entered promiscuous mode [ 372.470241][T17327] syzkaller0: entered allmulticast mode [ 372.513658][T17334] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3563'. [ 372.521907][T17327] tipc: Resetting bearer [ 372.579704][T17324] tipc: Resetting bearer [ 372.654217][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3565'. [ 372.670659][T17324] tipc: Disabling bearer [ 372.883084][T17348] FAULT_INJECTION: forcing a failure. [ 372.883084][T17348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.936842][T17348] CPU: 1 UID: 0 PID: 17348 Comm: syz.4.3569 Not tainted syzkaller #0 PREEMPT(full) [ 372.936875][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.936889][T17348] Call Trace: [ 372.936898][T17348] [ 372.936908][T17348] dump_stack_lvl+0x189/0x250 [ 372.936940][T17348] ? __pfx____ratelimit+0x10/0x10 [ 372.936975][T17348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.937003][T17348] ? __pfx__printk+0x10/0x10 [ 372.937051][T17348] should_fail_ex+0x414/0x560 [ 372.937089][T17348] _copy_to_user+0x31/0xb0 [ 372.937117][T17348] simple_read_from_buffer+0xe1/0x170 [ 372.937152][T17348] proc_fail_nth_read+0x1b3/0x220 [ 372.937179][T17348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.937205][T17348] ? rw_verify_area+0x2a6/0x4d0 [ 372.937229][T17348] ? __lock_acquire+0xab9/0xd20 [ 372.937248][T17348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.937272][T17348] vfs_read+0x1fd/0xa30 [ 372.937297][T17348] ? fdget_pos+0x247/0x320 [ 372.937331][T17348] ? __pfx___mutex_lock+0x10/0x10 [ 372.937355][T17348] ? __pfx_vfs_read+0x10/0x10 [ 372.937382][T17348] ? __fget_files+0x2a/0x420 [ 372.937417][T17348] ? __fget_files+0x3a0/0x420 [ 372.937453][T17348] ? __fget_files+0x2a/0x420 [ 372.937492][T17348] ksys_read+0x145/0x250 [ 372.937521][T17348] ? __pfx_ksys_read+0x10/0x10 [ 372.937544][T17348] ? rcu_is_watching+0x15/0xb0 [ 372.937575][T17348] ? do_syscall_64+0xbe/0x3b0 [ 372.937603][T17348] do_syscall_64+0xfa/0x3b0 [ 372.937624][T17348] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.937658][T17348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.937680][T17348] ? clear_bhb_loop+0x60/0xb0 [ 372.937708][T17348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.937730][T17348] RIP: 0033:0x7fcb2558d8dc [ 372.937749][T17348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 372.937769][T17348] RSP: 002b:00007fcb237f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.937793][T17348] RAX: ffffffffffffffda RBX: 00007fcb257e5fa0 RCX: 00007fcb2558d8dc [ 372.937809][T17348] RDX: 000000000000000f RSI: 00007fcb237f60a0 RDI: 0000000000000004 [ 372.937823][T17348] RBP: 00007fcb237f6090 R08: 0000000000000000 R09: 0000000000000000 [ 372.937837][T17348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.937850][T17348] R13: 00007fcb257e6038 R14: 00007fcb257e5fa0 R15: 00007fffafe5ebf8 [ 372.937887][T17348] [ 373.601879][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 373.730244][T17387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3579'. [ 373.804967][T17390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3580'. [ 373.874895][T17387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3579'. [ 373.903570][T17387] openvswitch: netlink: ufid size 200 bytes exceeds the range (1, 16) [ 373.913791][T17387] openvswitch: netlink: Message has 8 unknown bytes. [ 373.942052][T17387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3579'. [ 373.958354][T17399] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3583'. [ 374.125230][T17407] tipc: Enabled bearer , priority 0 [ 374.159743][T17407] syzkaller0: entered promiscuous mode [ 374.185256][T17407] syzkaller0: entered allmulticast mode [ 374.226351][T17407] tipc: Resetting bearer [ 374.238579][T17405] tipc: Resetting bearer [ 374.275771][T17405] tipc: Disabling bearer [ 374.330022][T17418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3591'. [ 374.490359][T17422] block nbd2: NBD_DISCONNECT [ 374.636135][T17431] syzkaller0: entered promiscuous mode [ 374.642096][T17431] syzkaller0: entered allmulticast mode [ 374.705721][T17434] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 374.721879][T17434] bond13 (unregistering): Released all slaves [ 374.797516][T17442] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 374.817291][T17442] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 374.957643][T17450] netlink: 'syz.2.3600': attribute type 12 has an invalid length. [ 375.038868][T17454] tipc: Enabled bearer , priority 0 [ 375.046828][T17454] syzkaller0: entered promiscuous mode [ 375.069493][T17454] syzkaller0: entered allmulticast mode [ 375.105264][T17454] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 375.171184][T17454] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 375.201879][T17459] tipc: Enabled bearer , priority 0 [ 375.219918][T17454] tipc: Resetting bearer [ 375.232776][T17459] syzkaller0: entered promiscuous mode [ 375.242639][T17459] syzkaller0: entered allmulticast mode [ 375.250589][T17454] netlink: 'syz.1.3602': attribute type 21 has an invalid length. [ 375.259338][T17454] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.329880][T17459] tipc: Resetting bearer [ 375.359435][T17453] tipc: Resetting bearer [ 375.392860][T17453] tipc: Disabling bearer [ 375.417922][T17458] tipc: Resetting bearer [ 375.443636][T17458] tipc: Disabling bearer [ 375.703045][T17489] delete_channel: no stack [ 375.826438][T17481] tipc: Enabled bearer , priority 0 [ 375.886566][T17481] syzkaller0: entered promiscuous mode [ 375.890754][T17502] netlink: 'syz.4.3614': attribute type 1 has an invalid length. [ 375.896787][T17481] syzkaller0: entered allmulticast mode [ 375.958584][T17480] tipc: Resetting bearer [ 377.348300][T17480] tipc: Disabling bearer [ 377.367924][T17505] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 377.380108][T17505] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 377.415080][T17502] bond13: (slave bridge3): Enslaving as an active interface with an up link [ 377.471374][T17510] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 377.485706][T17513] macvlan4: entered promiscuous mode [ 377.492787][T17513] macvlan4: entered allmulticast mode [ 377.498825][T17513] bond13: entered promiscuous mode [ 377.504466][T17513] bridge3: entered promiscuous mode [ 377.510254][T17513] gretap2: entered promiscuous mode [ 377.516144][T17513] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 377.524639][T17513] bond13: left promiscuous mode [ 377.529806][T17513] bridge3: left promiscuous mode [ 377.535068][T17513] gretap2: left promiscuous mode [ 377.605421][T17530] tipc: Enabled bearer , priority 0 [ 377.635305][T17531] syzkaller0: entered promiscuous mode [ 377.647762][T17531] syzkaller0: entered allmulticast mode [ 377.663142][T17550] netlink: 'syz.3.3624': attribute type 24 has an invalid length. [ 377.674921][T17539] tipc: Resetting bearer [ 377.698498][T17525] tipc: Resetting bearer [ 377.731966][T17525] tipc: Disabling bearer [ 378.039585][T17567] __nla_validate_parse: 11 callbacks suppressed [ 378.039606][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3628'. [ 378.045870][T17562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3626'. [ 378.166658][T17570] tipc: Enabled bearer , priority 0 [ 378.186493][T17570] syzkaller0: entered promiscuous mode [ 378.205367][T17570] syzkaller0: entered allmulticast mode [ 378.228622][T17570] tipc: Resetting bearer [ 378.252991][T17568] tipc: Resetting bearer [ 378.280951][T17568] tipc: Disabling bearer [ 378.310638][T17586] tipc: Enabled bearer , priority 0 [ 378.328457][T17573] syzkaller0: entered promiscuous mode [ 378.351165][T17573] syzkaller0: entered allmulticast mode [ 378.360659][T17573] netem: change failed [ 378.384178][T17573] tipc: Resetting bearer [ 378.391579][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3635'. [ 378.422779][T17572] tipc: Resetting bearer [ 378.491135][T17572] tipc: Disabling bearer [ 378.620984][T17606] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3639'. [ 378.666063][T17600] tipc: Enabled bearer , priority 0 [ 378.683082][T17610] netlink: 'syz.3.3641': attribute type 1 has an invalid length. [ 378.683641][T17608] syzkaller0: entered promiscuous mode [ 378.698987][T17608] syzkaller0: entered allmulticast mode [ 378.771574][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3643'. [ 378.803532][T17610] bond16: entered promiscuous mode [ 378.828853][T17610] 8021q: adding VLAN 0 to HW filter on device bond16 [ 378.907448][T17615] bond16: (slave bridge7): making interface the new active one [ 378.917129][T17615] bridge7: entered promiscuous mode [ 378.923907][T17615] bond16: (slave bridge7): Enslaving as an active interface with an up link [ 378.951524][T17608] tipc: Resetting bearer [ 378.961745][T17599] tipc: Resetting bearer [ 379.025691][T17599] tipc: Disabling bearer [ 379.166248][T17640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3654'. [ 379.209739][T17640] netlink: 'syz.3.3654': attribute type 2 has an invalid length. [ 379.222199][T17640] netlink: 'syz.3.3654': attribute type 1 has an invalid length. [ 379.230153][T17640] netlink: 'syz.3.3654': attribute type 1 has an invalid length. [ 379.242730][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 379.253143][T17640] netlink: 'syz.3.3654': attribute type 1 has an invalid length. [ 379.312858][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'. [ 379.314633][T17638] syzkaller0: entered promiscuous mode [ 379.327457][T17638] syzkaller0: entered allmulticast mode [ 379.427505][T17638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3651'. [ 379.627997][T17669] netlink: 'syz.1.3661': attribute type 1 has an invalid length. [ 379.694148][T17669] bond10: entered promiscuous mode [ 379.699917][T17669] 8021q: adding VLAN 0 to HW filter on device bond10 [ 379.728098][T17676] bond10: (slave bridge6): making interface the new active one [ 379.735870][T17676] bridge6: entered promiscuous mode [ 379.742690][T17676] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 379.769794][T17671] tipc: Enabling of bearer rejected, already enabled [ 380.270120][T17709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3668'. [ 381.085738][T17738] netlink: 'syz.0.3676': attribute type 12 has an invalid length. [ 381.896359][T17742] tipc: Enabling of bearer rejected, already enabled [ 382.546435][T17786] tipc: Enabled bearer , priority 0 [ 382.556902][T17786] syzkaller0: entered promiscuous mode [ 382.562790][T17786] syzkaller0: entered allmulticast mode [ 382.589326][T17786] tipc: Resetting bearer [ 382.607695][T17785] tipc: Resetting bearer [ 382.627411][T17785] tipc: Disabling bearer [ 383.074353][T17812] netlink: 'syz.2.3700': attribute type 11 has an invalid length. [ 383.103814][T17812] netlink: 'syz.2.3700': attribute type 11 has an invalid length. [ 383.123877][T17812] __nla_validate_parse: 7 callbacks suppressed [ 383.123897][T17812] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3700'. [ 383.293026][T17822] syzkaller1: entered promiscuous mode [ 383.302053][T17822] syzkaller1: entered allmulticast mode [ 383.390194][T17828] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3703'. [ 383.400152][T17832] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 383.530805][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3709'. [ 383.788659][T17848] netlink: 'syz.4.3711': attribute type 12 has an invalid length. [ 383.850918][T17848] bond14: option primary_reselect: invalid value (255) [ 383.873318][T17848] bond14 (unregistering): Released all slaves [ 383.988152][T17868] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3714'. [ 384.198404][T17880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3717'. [ 384.383075][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'. [ 384.422207][T17889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.443478][T17889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.523705][T17889] bridge0: port 3(batadv0) entered disabled state [ 384.808858][T17912] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3731'. [ 385.057185][T17924] tipc: Enabled bearer , priority 0 [ 385.065121][T17924] syzkaller0: entered promiscuous mode [ 385.071199][T17924] syzkaller0: entered allmulticast mode [ 385.084554][T17924] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 385.126407][T17923] tipc: Resetting bearer [ 385.151716][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3736'. [ 385.178174][T17923] tipc: Disabling bearer [ 385.277945][T17933] FAULT_INJECTION: forcing a failure. [ 385.277945][T17933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.297995][T17933] CPU: 1 UID: 0 PID: 17933 Comm: syz.4.3739 Not tainted syzkaller #0 PREEMPT(full) [ 385.298039][T17933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.298052][T17933] Call Trace: [ 385.298061][T17933] [ 385.298070][T17933] dump_stack_lvl+0x189/0x250 [ 385.298100][T17933] ? __pfx____ratelimit+0x10/0x10 [ 385.298134][T17933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.298160][T17933] ? __pfx__printk+0x10/0x10 [ 385.298193][T17933] ? __might_fault+0xb0/0x130 [ 385.298231][T17933] should_fail_ex+0x414/0x560 [ 385.298267][T17933] _copy_from_user+0x2d/0xb0 [ 385.298293][T17933] rfkill_fop_write+0x136/0x570 [ 385.298323][T17933] ? __pfx_rfkill_fop_write+0x10/0x10 [ 385.298348][T17933] ? security_file_permission+0x70/0x290 [ 385.298374][T17933] ? rw_verify_area+0x255/0x4d0 [ 385.298397][T17933] ? __lock_acquire+0xab9/0xd20 [ 385.298416][T17933] ? __pfx_rfkill_fop_write+0x10/0x10 [ 385.298444][T17933] vfs_write+0x27e/0xb30 [ 385.298478][T17933] ? __pfx_vfs_write+0x10/0x10 [ 385.298505][T17933] ? __fget_files+0x2a/0x420 [ 385.298536][T17933] ? __fget_files+0x2a/0x420 [ 385.298563][T17933] ? __fget_files+0x3a0/0x420 [ 385.298590][T17933] ? __fget_files+0x2a/0x420 [ 385.298629][T17933] ksys_write+0x145/0x250 [ 385.298656][T17933] ? __pfx_ksys_write+0x10/0x10 [ 385.298678][T17933] ? rcu_is_watching+0x15/0xb0 [ 385.298708][T17933] ? do_syscall_64+0xbe/0x3b0 [ 385.298748][T17933] do_syscall_64+0xfa/0x3b0 [ 385.298768][T17933] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.298801][T17933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.298822][T17933] ? clear_bhb_loop+0x60/0xb0 [ 385.298848][T17933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.298869][T17933] RIP: 0033:0x7fcb2558eec9 [ 385.298887][T17933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.298906][T17933] RSP: 002b:00007fcb237f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 385.298928][T17933] RAX: ffffffffffffffda RBX: 00007fcb257e5fa0 RCX: 00007fcb2558eec9 [ 385.298944][T17933] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 385.298958][T17933] RBP: 00007fcb237f6090 R08: 0000000000000000 R09: 0000000000000000 [ 385.298971][T17933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.298984][T17933] R13: 00007fcb257e6038 R14: 00007fcb257e5fa0 R15: 00007fffafe5ebf8 [ 385.299018][T17933] [ 385.933718][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3749'. [ 386.140865][T17974] tipc: Enabled bearer , priority 0 [ 386.164870][T17974] syzkaller0: entered promiscuous mode [ 386.181157][T17974] syzkaller0: entered allmulticast mode [ 386.203749][T17974] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.295843][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'. [ 386.305127][T17973] tipc: Resetting bearer [ 386.354055][T17973] tipc: Disabling bearer [ 386.631053][T18001] tipc: Enabling of bearer rejected, already enabled [ 387.327583][T18041] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 387.449486][T18056] FAULT_INJECTION: forcing a failure. [ 387.449486][T18056] name failslab, interval 1, probability 0, space 0, times 0 [ 387.499465][T18056] CPU: 0 UID: 0 PID: 18056 Comm: syz.2.3780 Not tainted syzkaller #0 PREEMPT(full) [ 387.499498][T18056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.499512][T18056] Call Trace: [ 387.499520][T18056] [ 387.499529][T18056] dump_stack_lvl+0x189/0x250 [ 387.499562][T18056] ? __pfx____ratelimit+0x10/0x10 [ 387.499598][T18056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.499625][T18056] ? __pfx__printk+0x10/0x10 [ 387.499663][T18056] ? __nla_validate_parse+0x2400/0x2d40 [ 387.499695][T18056] should_fail_ex+0x414/0x560 [ 387.499732][T18056] should_failslab+0xa8/0x100 [ 387.499763][T18056] kmem_cache_alloc_noprof+0x73/0x3c0 [ 387.499789][T18056] ? xfrm_state_alloc+0x24/0x2f0 [ 387.499820][T18056] xfrm_state_alloc+0x24/0x2f0 [ 387.499847][T18056] xfrm_add_sa+0x17d1/0x41d0 [ 387.499892][T18056] ? __pfx_xfrm_add_sa+0x10/0x10 [ 387.499921][T18056] ? apparmor_capable+0x137/0x1b0 [ 387.499951][T18056] ? __nla_parse+0x40/0x60 [ 387.499977][T18056] xfrm_user_rcv_msg+0x7a0/0xab0 [ 387.500018][T18056] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 387.500096][T18056] ? __pfx___mutex_trylock_common+0x10/0x10 [ 387.500129][T18056] ? rcu_is_watching+0x15/0xb0 [ 387.500154][T18056] ? trace_contention_end+0x39/0x120 [ 387.500181][T18056] ? __mutex_lock+0x335/0x1350 [ 387.500212][T18056] netlink_rcv_skb+0x205/0x470 [ 387.500237][T18056] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 387.500273][T18056] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.500321][T18056] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.500343][T18056] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.500369][T18056] xfrm_netlink_rcv+0x79/0x90 [ 387.500402][T18056] netlink_unicast+0x82c/0x9e0 [ 387.500446][T18056] ? __pfx_netlink_unicast+0x10/0x10 [ 387.500483][T18056] ? netlink_sendmsg+0x642/0xb30 [ 387.500504][T18056] ? skb_put+0x11b/0x210 [ 387.500532][T18056] netlink_sendmsg+0x805/0xb30 [ 387.500568][T18056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.500597][T18056] ? aa_sock_msg_perm+0xf1/0x1d0 [ 387.500630][T18056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.500663][T18056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.500687][T18056] __sock_sendmsg+0x219/0x270 [ 387.500724][T18056] ____sys_sendmsg+0x505/0x830 [ 387.500758][T18056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.500796][T18056] ? import_iovec+0x74/0xa0 [ 387.500826][T18056] ___sys_sendmsg+0x21f/0x2a0 [ 387.500855][T18056] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.500926][T18056] ? __fget_files+0x2a/0x420 [ 387.500955][T18056] ? __fget_files+0x3a0/0x420 [ 387.500998][T18056] __x64_sys_sendmsg+0x19b/0x260 [ 387.501028][T18056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.501067][T18056] ? __pfx_ksys_write+0x10/0x10 [ 387.501100][T18056] ? do_syscall_64+0xbe/0x3b0 [ 387.501128][T18056] do_syscall_64+0xfa/0x3b0 [ 387.501148][T18056] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.501182][T18056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.501204][T18056] ? clear_bhb_loop+0x60/0xb0 [ 387.501232][T18056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.501253][T18056] RIP: 0033:0x7f708d98eec9 [ 387.501273][T18056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.501292][T18056] RSP: 002b:00007f708e754038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.501321][T18056] RAX: ffffffffffffffda RBX: 00007f708dbe5fa0 RCX: 00007f708d98eec9 [ 387.501338][T18056] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 387.501351][T18056] RBP: 00007f708e754090 R08: 0000000000000000 R09: 0000000000000000 [ 387.501365][T18056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.501378][T18056] R13: 00007f708dbe6038 R14: 00007f708dbe5fa0 R15: 00007fff768ae298 [ 387.501415][T18056] [ 387.899107][T18023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.919225][T18023] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 387.940611][T18062] netlink: 'syz.4.3783': attribute type 5 has an invalid length. [ 388.001204][T18023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.020225][T18023] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 388.070788][T18023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.100997][T18023] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 388.118774][T18023] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 388.125476][T18023] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 388.210658][T18073] FAULT_INJECTION: forcing a failure. [ 388.210658][T18073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.227910][T18073] CPU: 0 UID: 0 PID: 18073 Comm: syz.3.3787 Not tainted syzkaller #0 PREEMPT(full) [ 388.227948][T18073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.227962][T18073] Call Trace: [ 388.227970][T18073] [ 388.227979][T18073] dump_stack_lvl+0x189/0x250 [ 388.228013][T18073] ? __pfx____ratelimit+0x10/0x10 [ 388.228048][T18073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.228075][T18073] ? __pfx__printk+0x10/0x10 [ 388.228109][T18073] ? __might_fault+0xb0/0x130 [ 388.228149][T18073] should_fail_ex+0x414/0x560 [ 388.228185][T18073] _copy_from_iter+0x1de/0x1790 [ 388.228217][T18073] ? rcu_is_watching+0x15/0xb0 [ 388.228243][T18073] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 388.228273][T18073] ? __pfx__copy_from_iter+0x10/0x10 [ 388.228297][T18073] ? __build_skb_around+0x257/0x3e0 [ 388.228324][T18073] ? netlink_sendmsg+0x642/0xb30 [ 388.228346][T18073] ? skb_put+0x11b/0x210 [ 388.228374][T18073] netlink_sendmsg+0x6b2/0xb30 [ 388.228408][T18073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.228434][T18073] ? aa_sock_msg_perm+0xf1/0x1d0 [ 388.228474][T18073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.228508][T18073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.228532][T18073] __sock_sendmsg+0x219/0x270 [ 388.228575][T18073] ____sys_sendmsg+0x505/0x830 [ 388.228607][T18073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.228643][T18073] ? import_iovec+0x74/0xa0 [ 388.228672][T18073] ___sys_sendmsg+0x21f/0x2a0 [ 388.228701][T18073] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.228777][T18073] ? __fget_files+0x2a/0x420 [ 388.228806][T18073] ? __fget_files+0x3a0/0x420 [ 388.228844][T18073] __x64_sys_sendmsg+0x19b/0x260 [ 388.228873][T18073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.228909][T18073] ? __pfx_ksys_write+0x10/0x10 [ 388.228932][T18073] ? rcu_is_watching+0x15/0xb0 [ 388.228960][T18073] ? do_syscall_64+0xbe/0x3b0 [ 388.228983][T18073] do_syscall_64+0xfa/0x3b0 [ 388.229000][T18073] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.229031][T18073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.229056][T18073] ? clear_bhb_loop+0x60/0xb0 [ 388.229082][T18073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.229102][T18073] RIP: 0033:0x7fde3b98eec9 [ 388.229121][T18073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.229139][T18073] RSP: 002b:00007fde3c8cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.229162][T18073] RAX: ffffffffffffffda RBX: 00007fde3bbe5fa0 RCX: 00007fde3b98eec9 [ 388.229178][T18073] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 388.229192][T18073] RBP: 00007fde3c8cd090 R08: 0000000000000000 R09: 0000000000000000 [ 388.229205][T18073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.229218][T18073] R13: 00007fde3bbe6038 R14: 00007fde3bbe5fa0 R15: 00007ffc90d5bbb8 [ 388.229252][T18073] [ 388.555505][T18067] tipc: Enabled bearer , priority 0 [ 388.563537][T18074] syzkaller0: entered promiscuous mode [ 388.591293][T18074] syzkaller0: entered allmulticast mode [ 388.648419][T18023] tipc: Resetting bearer [ 388.752338][T18071] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 388.760666][T18067] __nla_validate_parse: 4 callbacks suppressed [ 388.760687][T18067] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3785'. [ 388.896453][T18088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3792'. [ 388.937854][T18071] tipc: Resetting bearer [ 388.977908][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3793'. [ 389.005703][T18074] vlan2: entered promiscuous mode [ 389.011055][T18074] bridge0: entered promiscuous mode [ 389.064768][T18066] tipc: Resetting bearer [ 389.130188][T18066] tipc: Disabling bearer [ 389.281812][T18109] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3797'. [ 389.407713][T18117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3800'. [ 389.437629][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3799'. [ 389.496096][T18120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3799'. [ 389.643336][T18127] netlink: 'syz.3.3802': attribute type 4 has an invalid length. [ 389.838431][T18140] bridge8: entered promiscuous mode [ 389.848158][T18140] bridge8: entered allmulticast mode [ 390.049566][T18156] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3811'. [ 390.208507][T18165] tipc: Enabling of bearer rejected, failed to enable media [ 390.442225][T18177] netem: incorrect ge model size [ 390.451870][T18180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3817'. [ 390.465261][T18177] netem: change failed [ 390.634715][T18193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3820'. [ 391.609826][T18227] blkio.reset_stats is deprecated [ 392.375221][T18275] netlink: 'syz.1.3843': attribute type 1 has an invalid length. [ 392.521733][T18275] bond11: entered promiscuous mode [ 392.527768][T18275] 8021q: adding VLAN 0 to HW filter on device bond11 [ 392.592897][T18280] bond11: (slave bridge7): making interface the new active one [ 392.600776][T18280] bridge7: entered promiscuous mode [ 392.607418][T18280] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 393.078137][T18313] netlink: 'syz.3.3856': attribute type 1 has an invalid length. [ 393.206507][T18323] netlink: 'syz.1.3861': attribute type 1 has an invalid length. [ 393.325182][T18323] bond12: entered promiscuous mode [ 393.346834][T18323] 8021q: adding VLAN 0 to HW filter on device bond12 [ 393.377305][T18327] bond12: (slave bridge8): making interface the new active one [ 393.386654][T18327] bridge8: entered promiscuous mode [ 393.393737][T18327] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 393.568479][T18347] netlink: 'syz.0.3870': attribute type 2 has an invalid length. [ 393.706920][T18357] nbd: must specify at least one socket [ 393.778284][T18362] netlink: 'syz.1.3874': attribute type 11 has an invalid length. [ 393.807530][T18362] __nla_validate_parse: 16 callbacks suppressed [ 393.807552][T18362] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3874'. [ 394.009404][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3875'. [ 394.018761][T18362] netlink: 900 bytes leftover after parsing attributes in process `syz.1.3874'. [ 394.056440][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3875'. [ 394.405896][T18400] netlink: 'syz.1.3880': attribute type 10 has an invalid length. [ 394.450502][T18400] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.559792][T18400] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.567119][T18400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.624155][T18400] bridge0: entered allmulticast mode [ 394.640759][T18400] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 394.713206][T18408] veth0: entered promiscuous mode [ 394.784453][T18401] veth0: left promiscuous mode [ 394.960413][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'. [ 395.054569][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 395.074304][T18430] vlan3: entered promiscuous mode [ 395.085691][T18432] FAULT_INJECTION: forcing a failure. [ 395.085691][T18432] name failslab, interval 1, probability 0, space 0, times 0 [ 395.089990][T18430] vlan3: entered allmulticast mode [ 395.106335][T18430] hsr_slave_1: entered allmulticast mode [ 395.129708][T18432] CPU: 0 UID: 0 PID: 18432 Comm: syz.4.3888 Not tainted syzkaller #0 PREEMPT(full) [ 395.129738][T18432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.129752][T18432] Call Trace: [ 395.129760][T18432] [ 395.129770][T18432] dump_stack_lvl+0x189/0x250 [ 395.129802][T18432] ? __pfx____ratelimit+0x10/0x10 [ 395.129837][T18432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.129864][T18432] ? __pfx__printk+0x10/0x10 [ 395.129898][T18432] ? __pfx___might_resched+0x10/0x10 [ 395.129937][T18432] ? fs_reclaim_acquire+0x7d/0x100 [ 395.129972][T18432] should_fail_ex+0x414/0x560 [ 395.130009][T18432] should_failslab+0xa8/0x100 [ 395.130039][T18432] __kmalloc_noprof+0xcb/0x4f0 [ 395.130064][T18432] ? tomoyo_encode+0x28b/0x550 [ 395.130101][T18432] tomoyo_encode+0x28b/0x550 [ 395.130140][T18432] tomoyo_realpath_from_path+0x58d/0x5d0 [ 395.130176][T18432] ? tomoyo_domain+0xd9/0x130 [ 395.130216][T18432] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 395.130243][T18432] tomoyo_path_number_perm+0x1e8/0x5a0 [ 395.130274][T18432] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 395.130322][T18432] ? __lock_acquire+0xab9/0xd20 [ 395.130368][T18432] ? __fget_files+0x2a/0x420 [ 395.130401][T18432] ? __fget_files+0x2a/0x420 [ 395.130429][T18432] ? __fget_files+0x3a0/0x420 [ 395.130458][T18432] ? __fget_files+0x2a/0x420 [ 395.130493][T18432] security_file_ioctl+0xcb/0x2d0 [ 395.130521][T18432] __se_sys_ioctl+0x47/0x170 [ 395.130548][T18432] do_syscall_64+0xfa/0x3b0 [ 395.130569][T18432] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.130603][T18432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.130625][T18432] ? clear_bhb_loop+0x60/0xb0 [ 395.130652][T18432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.130673][T18432] RIP: 0033:0x7fcb2558eec9 [ 395.130692][T18432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.130712][T18432] RSP: 002b:00007fcb237f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.130735][T18432] RAX: ffffffffffffffda RBX: 00007fcb257e5fa0 RCX: 00007fcb2558eec9 [ 395.130751][T18432] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 0000000000000004 [ 395.130766][T18432] RBP: 00007fcb237f6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.130780][T18432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.130793][T18432] R13: 00007fcb257e6038 R14: 00007fcb257e5fa0 R15: 00007fffafe5ebf8 [ 395.130829][T18432] [ 395.130851][T18432] ERROR: Out of memory at tomoyo_realpath_from_path. [ 395.308863][T18430] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3887'. [ 395.336368][T18440] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 395.430833][T18434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 395.699516][T18454] tipc: Enabled bearer , priority 0 [ 395.718103][T18454] syzkaller0: entered promiscuous mode [ 395.719585][T18462] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3898'. [ 395.730097][T18454] syzkaller0: entered allmulticast mode [ 395.825469][T18466] netlink: 'syz.1.3899': attribute type 1 has an invalid length. [ 395.890882][T18466] bond13: entered promiscuous mode [ 395.896556][T18466] 8021q: adding VLAN 0 to HW filter on device bond13 [ 395.906079][T18470] FAULT_INJECTION: forcing a failure. [ 395.906079][T18470] name failslab, interval 1, probability 0, space 0, times 0 [ 395.923499][T18470] CPU: 0 UID: 0 PID: 18470 Comm: syz.1.3899 Not tainted syzkaller #0 PREEMPT(full) [ 395.923528][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.923542][T18470] Call Trace: [ 395.923550][T18470] [ 395.923560][T18470] dump_stack_lvl+0x189/0x250 [ 395.923592][T18470] ? __pfx____ratelimit+0x10/0x10 [ 395.923628][T18470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.923655][T18470] ? __pfx__printk+0x10/0x10 [ 395.923695][T18470] ? __pfx___might_resched+0x10/0x10 [ 395.923719][T18470] ? fs_reclaim_acquire+0x7d/0x100 [ 395.923756][T18470] should_fail_ex+0x414/0x560 [ 395.923790][T18470] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 395.923810][T18470] should_failslab+0xa8/0x100 [ 395.923839][T18470] __kvmalloc_node_noprof+0x161/0x5f0 [ 395.923866][T18470] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 395.923895][T18470] rhashtable_init_noprof+0x4ee/0xbb0 [ 395.923926][T18470] br_mdb_hash_init+0x52/0x90 [ 395.923971][T18470] br_dev_init+0x47/0x490 [ 395.924012][T18470] register_netdevice+0x6bf/0x1ae0 [ 395.924050][T18470] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 395.924081][T18470] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 395.924109][T18470] ? trace_kmalloc+0x1f/0xd0 [ 395.924133][T18470] ? __pfx_register_netdevice+0x10/0x10 [ 395.924167][T18470] ? validate_linkmsg+0x765/0x950 [ 395.924220][T18470] br_dev_newlink+0x6a/0x140 [ 395.924247][T18470] ? rtnl_newlink_create+0x2fd/0xb00 [ 395.924274][T18470] ? __pfx_br_dev_newlink+0x10/0x10 [ 395.924306][T18470] rtnl_newlink_create+0x30d/0xb00 [ 395.924348][T18470] ? __mutex_lock+0x5bb/0x1350 [ 395.924378][T18470] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 395.924408][T18470] ? __pfx___mutex_lock+0x10/0x10 [ 395.924442][T18470] ? ns_capable+0x8a/0xf0 [ 395.924467][T18470] rtnl_newlink+0x16e4/0x1c80 [ 395.924496][T18470] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 395.924552][T18470] ? __pfx_rtnl_newlink+0x10/0x10 [ 395.924605][T18470] ? kasan_quarantine_put+0xdd/0x220 [ 395.924629][T18470] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.924671][T18470] ? nlmon_xmit+0xb0/0x100 [ 395.924703][T18470] ? kmem_cache_free+0x18f/0x400 [ 395.924738][T18470] ? __local_bh_enable_ip+0x12d/0x1c0 [ 395.924762][T18470] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.924797][T18470] ? __local_bh_enable_ip+0x12d/0x1c0 [ 395.924820][T18470] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 395.924848][T18470] ? __dev_queue_xmit+0x27b/0x3b50 [ 395.924876][T18470] ? __dev_queue_xmit+0x27b/0x3b50 [ 395.924902][T18470] ? __dev_queue_xmit+0x27b/0x3b50 [ 395.924933][T18470] ? __dev_queue_xmit+0x1d79/0x3b50 [ 395.924975][T18470] ? __lock_acquire+0xab9/0xd20 [ 395.925024][T18470] ? __pfx_rtnl_newlink+0x10/0x10 [ 395.925046][T18470] rtnetlink_rcv_msg+0x7cc/0xb70 [ 395.925072][T18470] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 395.925092][T18470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.925111][T18470] ? ref_tracker_free+0x63a/0x7d0 [ 395.925144][T18470] ? __asan_memcpy+0x40/0x70 [ 395.925165][T18470] ? __pfx_ref_tracker_free+0x10/0x10 [ 395.925211][T18470] netlink_rcv_skb+0x205/0x470 [ 395.925235][T18470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.925259][T18470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.925295][T18470] ? netlink_deliver_tap+0x2e/0x1b0 [ 395.925328][T18470] netlink_unicast+0x82c/0x9e0 [ 395.925372][T18470] ? __pfx_netlink_unicast+0x10/0x10 [ 395.925416][T18470] ? netlink_sendmsg+0x642/0xb30 [ 395.925435][T18470] ? skb_put+0x11b/0x210 [ 395.925461][T18470] netlink_sendmsg+0x805/0xb30 [ 395.925493][T18470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.925517][T18470] ? aa_sock_msg_perm+0xf1/0x1d0 [ 395.925548][T18470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.925578][T18470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.925601][T18470] __sock_sendmsg+0x219/0x270 [ 395.925637][T18470] ____sys_sendmsg+0x505/0x830 [ 395.925670][T18470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.925708][T18470] ? import_iovec+0x74/0xa0 [ 395.925739][T18470] ___sys_sendmsg+0x21f/0x2a0 [ 395.925769][T18470] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.925840][T18470] ? __fget_files+0x2a/0x420 [ 395.925870][T18470] ? __fget_files+0x3a0/0x420 [ 395.925912][T18470] __x64_sys_sendmsg+0x19b/0x260 [ 395.925949][T18470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.925989][T18470] ? __pfx_ksys_write+0x10/0x10 [ 395.926021][T18470] ? do_syscall_64+0xbe/0x3b0 [ 395.926049][T18470] do_syscall_64+0xfa/0x3b0 [ 395.926070][T18470] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.926104][T18470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.926126][T18470] ? clear_bhb_loop+0x60/0xb0 [ 395.926153][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.926174][T18470] RIP: 0033:0x7f9b57b8eec9 [ 395.926193][T18470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.926210][T18470] RSP: 002b:00007f9b589f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.926233][T18470] RAX: ffffffffffffffda RBX: 00007f9b57de6090 RCX: 00007f9b57b8eec9 [ 395.926250][T18470] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000004 [ 395.926264][T18470] RBP: 00007f9b589f2090 R08: 0000000000000000 R09: 0000000000000000 [ 395.926278][T18470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.926291][T18470] R13: 00007f9b57de6128 R14: 00007f9b57de6090 R15: 00007ffe63532c18 [ 395.926326][T18470] [ 396.451178][T18467] block nbd0: server does not support multiple connections per device. [ 396.460455][T18467] block nbd0: shutting down sockets [ 396.503001][T18470] bond13: (slave bridge9): making interface the new active one [ 396.512773][T18470] bridge9: entered promiscuous mode [ 396.524869][T18470] bond13: (slave bridge9): Enslaving as an active interface with an up link [ 396.566696][T18454] tipc: Resetting bearer [ 396.569927][T18479] netlink: 'syz.2.3905': attribute type 2 has an invalid length. [ 396.587052][T18453] tipc: Resetting bearer [ 396.611386][T18479] netlink: 'syz.2.3905': attribute type 8 has an invalid length. [ 396.628216][T18479] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3905'. [ 396.667453][T18485] FAULT_INJECTION: forcing a failure. [ 396.667453][T18485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.682037][T18453] tipc: Disabling bearer [ 396.688281][T18485] CPU: 0 UID: 0 PID: 18485 Comm: syz.3.3906 Not tainted syzkaller #0 PREEMPT(full) [ 396.688310][T18485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 396.688323][T18485] Call Trace: [ 396.688332][T18485] [ 396.688340][T18485] dump_stack_lvl+0x189/0x250 [ 396.688372][T18485] ? __pfx____ratelimit+0x10/0x10 [ 396.688405][T18485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.688431][T18485] ? __pfx__printk+0x10/0x10 [ 396.688462][T18485] ? __might_fault+0xb0/0x130 [ 396.688499][T18485] should_fail_ex+0x414/0x560 [ 396.688533][T18485] _copy_from_user+0x2d/0xb0 [ 396.688559][T18485] rose_rt_ioctl+0x484/0x1240 [ 396.688607][T18485] ? __pfx_rose_rt_ioctl+0x10/0x10 [ 396.688668][T18485] ? bpf_lsm_capable+0x9/0x20 [ 396.688693][T18485] ? security_capable+0x7e/0x2e0 [ 396.688731][T18485] rose_ioctl+0x3ce/0x8b0 [ 396.688758][T18485] ? __pfx_rose_ioctl+0x10/0x10 [ 396.688787][T18485] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 396.688819][T18485] sock_do_ioctl+0xdc/0x300 [ 396.688855][T18485] ? __pfx_sock_do_ioctl+0x10/0x10 [ 396.688884][T18485] ? __lock_acquire+0xab9/0xd20 [ 396.688922][T18485] sock_ioctl+0x576/0x790 [ 396.688955][T18485] ? __pfx_sock_ioctl+0x10/0x10 [ 396.688986][T18485] ? __fget_files+0x2a/0x420 [ 396.689013][T18485] ? __fget_files+0x3a0/0x420 [ 396.689041][T18485] ? __fget_files+0x2a/0x420 [ 396.689075][T18485] ? bpf_lsm_file_ioctl+0x9/0x20 [ 396.689097][T18485] ? __pfx_sock_ioctl+0x10/0x10 [ 396.689125][T18485] __se_sys_ioctl+0xfc/0x170 [ 396.689151][T18485] do_syscall_64+0xfa/0x3b0 [ 396.689171][T18485] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.689203][T18485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.689225][T18485] ? clear_bhb_loop+0x60/0xb0 [ 396.689252][T18485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.689273][T18485] RIP: 0033:0x7fde3b98eec9 [ 396.689292][T18485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.689312][T18485] RSP: 002b:00007fde3c8cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.689335][T18485] RAX: ffffffffffffffda RBX: 00007fde3bbe5fa0 RCX: 00007fde3b98eec9 [ 396.689351][T18485] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 0000000000000004 [ 396.689366][T18485] RBP: 00007fde3c8cd090 R08: 0000000000000000 R09: 0000000000000000 [ 396.689379][T18485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.689392][T18485] R13: 00007fde3bbe6038 R14: 00007fde3bbe5fa0 R15: 00007ffc90d5bbb8 [ 396.689427][T18485] [ 396.749301][ T9583] tipc: Node number set to 432512741 [ 397.196733][T18510] bridge0: port 1(vlan3) entered blocking state [ 397.221329][T18510] bridge0: port 1(vlan3) entered disabled state [ 397.237527][T18510] vlan3: entered allmulticast mode [ 397.254144][T18510] bridge0: entered allmulticast mode [ 397.284451][T18510] vlan3: left allmulticast mode [ 397.289759][T18510] bridge0: left allmulticast mode [ 397.311696][T18518] lo: left promiscuous mode [ 397.316652][T18518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.425017][T18520] netlink: 'syz.1.3917': attribute type 1 has an invalid length. [ 397.497821][T18520] bond14: entered promiscuous mode [ 397.504056][T18520] 8021q: adding VLAN 0 to HW filter on device bond14 [ 397.620566][T18528] bond14: (slave bridge10): making interface the new active one [ 397.637759][T18528] bridge10: entered promiscuous mode [ 397.645137][T18528] bond14: (slave bridge10): Enslaving as an active interface with an up link [ 397.733487][T18535] wlan0 speed is unknown, defaulting to 1000 [ 397.763564][T18541] syzkaller0: refused to change device tx_queue_len [ 397.843683][T18543] netlink: 'syz.0.3923': attribute type 13 has an invalid length. [ 398.281035][T18543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.317835][T18565] tipc: Enabled bearer , priority 10 [ 398.330747][T18565] tipc: Enabling of bearer rejected, failed to enable media [ 398.442918][T18539] infiniband syz1: set active [ 398.448097][T18539] infiniband syz1: added bond0 [ 398.468529][T18539] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 398.474448][T18539] infiniband syz1: Couldn't open port 1 [ 398.653572][T18539] RDS/IB: syz1: added [ 398.826772][T18579] __nla_validate_parse: 5 callbacks suppressed [ 398.826792][T18579] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3936'. [ 399.513591][T18601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3944'. [ 399.525453][T18596] tipc: Enabling of bearer rejected, failed to enable media [ 399.531144][T18595] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3943'. [ 400.402889][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3955'. [ 400.587401][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3957'. [ 400.660573][T18646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3957'. [ 402.462542][T18683] netlink: 'syz.2.3968': attribute type 1 has an invalid length. [ 402.492500][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3968'. [ 403.046376][T18712] pim6reg1: entered promiscuous mode [ 403.069466][T18712] pim6reg1: entered allmulticast mode [ 403.147934][T18720] FAULT_INJECTION: forcing a failure. [ 403.147934][T18720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.183661][T18720] CPU: 0 UID: 0 PID: 18720 Comm: syz.0.3977 Not tainted syzkaller #0 PREEMPT(full) [ 403.183692][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.183706][T18720] Call Trace: [ 403.183715][T18720] [ 403.183724][T18720] dump_stack_lvl+0x189/0x250 [ 403.183756][T18720] ? __pfx____ratelimit+0x10/0x10 [ 403.183792][T18720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.183820][T18720] ? __pfx__printk+0x10/0x10 [ 403.183854][T18720] ? __might_fault+0xb0/0x130 [ 403.183894][T18720] should_fail_ex+0x414/0x560 [ 403.183931][T18720] _copy_from_user+0x2d/0xb0 [ 403.183958][T18720] ___sys_sendmsg+0x158/0x2a0 [ 403.183989][T18720] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.184066][T18720] ? __fget_files+0x2a/0x420 [ 403.184095][T18720] ? __fget_files+0x3a0/0x420 [ 403.184138][T18720] __x64_sys_sendmsg+0x19b/0x260 [ 403.184168][T18720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.184207][T18720] ? __pfx_ksys_write+0x10/0x10 [ 403.184229][T18720] ? rcu_is_watching+0x15/0xb0 [ 403.184261][T18720] ? do_syscall_64+0xbe/0x3b0 [ 403.184289][T18720] do_syscall_64+0xfa/0x3b0 [ 403.184312][T18720] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.184346][T18720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.184369][T18720] ? clear_bhb_loop+0x60/0xb0 [ 403.184397][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.184418][T18720] RIP: 0033:0x7f6f1db8eec9 [ 403.184438][T18720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.184458][T18720] RSP: 002b:00007f6f1eb06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.184481][T18720] RAX: ffffffffffffffda RBX: 00007f6f1dde5fa0 RCX: 00007f6f1db8eec9 [ 403.184498][T18720] RDX: 0000000000004098 RSI: 0000200000000200 RDI: 0000000000000003 [ 403.184512][T18720] RBP: 00007f6f1eb06090 R08: 0000000000000000 R09: 0000000000000000 [ 403.184525][T18720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.184539][T18720] R13: 00007f6f1dde6038 R14: 00007f6f1dde5fa0 R15: 00007ffecf3b4978 [ 403.184575][T18720] [ 403.762433][T18740] FAULT_INJECTION: forcing a failure. [ 403.762433][T18740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.785316][T18740] CPU: 0 UID: 0 PID: 18740 Comm: syz.0.3983 Not tainted syzkaller #0 PREEMPT(full) [ 403.785347][T18740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.785361][T18740] Call Trace: [ 403.785370][T18740] [ 403.785380][T18740] dump_stack_lvl+0x189/0x250 [ 403.785411][T18740] ? __pfx____ratelimit+0x10/0x10 [ 403.785446][T18740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.785472][T18740] ? __pfx__printk+0x10/0x10 [ 403.785518][T18740] should_fail_ex+0x414/0x560 [ 403.785553][T18740] _copy_to_user+0x31/0xb0 [ 403.785581][T18740] simple_read_from_buffer+0xe1/0x170 [ 403.785615][T18740] proc_fail_nth_read+0x1b3/0x220 [ 403.785640][T18740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.785666][T18740] ? rw_verify_area+0x2a6/0x4d0 [ 403.785688][T18740] ? __lock_acquire+0xab9/0xd20 [ 403.785707][T18740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.785730][T18740] vfs_read+0x1fd/0xa30 [ 403.785754][T18740] ? fdget_pos+0x247/0x320 [ 403.785789][T18740] ? __pfx___mutex_lock+0x10/0x10 [ 403.785812][T18740] ? __pfx_vfs_read+0x10/0x10 [ 403.785839][T18740] ? __fget_files+0x2a/0x420 [ 403.785872][T18740] ? __fget_files+0x3a0/0x420 [ 403.785898][T18740] ? __fget_files+0x2a/0x420 [ 403.785938][T18740] ksys_read+0x145/0x250 [ 403.785967][T18740] ? __pfx_ksys_read+0x10/0x10 [ 403.786014][T18740] ? rcu_is_watching+0x15/0xb0 [ 403.786050][T18740] ? do_syscall_64+0xbe/0x3b0 [ 403.786077][T18740] do_syscall_64+0xfa/0x3b0 [ 403.786097][T18740] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.786131][T18740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.786154][T18740] ? clear_bhb_loop+0x60/0xb0 [ 403.786179][T18740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.786200][T18740] RIP: 0033:0x7f6f1db8d8dc [ 403.786219][T18740] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 403.786239][T18740] RSP: 002b:00007f6f1eb06030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.786261][T18740] RAX: ffffffffffffffda RBX: 00007f6f1dde5fa0 RCX: 00007f6f1db8d8dc [ 403.786278][T18740] RDX: 000000000000000f RSI: 00007f6f1eb060a0 RDI: 0000000000000005 [ 403.786292][T18740] RBP: 00007f6f1eb06090 R08: 0000000000000000 R09: 0000000000000000 [ 403.786306][T18740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.786318][T18740] R13: 00007f6f1dde6038 R14: 00007f6f1dde5fa0 R15: 00007ffecf3b4978 [ 403.786354][T18740] [ 404.357505][T18765] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3994'. [ 404.866356][T18792] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4005'. [ 404.927201][T18794] syzkaller0: entered promiscuous mode [ 404.949220][T18794] syzkaller0: entered allmulticast mode [ 404.974348][T18794] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 404.992071][T18800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4008'. [ 405.430063][T18828] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4018'. [ 405.618099][T18828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.645623][T18828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.671722][T18828] bond0 (unregistering): Released all slaves [ 405.879607][T18843] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4022'. [ 406.250452][T18854] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 406.722868][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4033'. [ 406.974873][T18877] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 407.006871][T18882] FAULT_INJECTION: forcing a failure. [ 407.006871][T18882] name failslab, interval 1, probability 0, space 0, times 0 [ 407.024379][T18882] CPU: 1 UID: 0 PID: 18882 Comm: syz.2.4037 Not tainted syzkaller #0 PREEMPT(full) [ 407.024410][T18882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.024423][T18882] Call Trace: [ 407.024431][T18882] [ 407.024440][T18882] dump_stack_lvl+0x189/0x250 [ 407.024481][T18882] ? __pfx____ratelimit+0x10/0x10 [ 407.024517][T18882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.024541][T18882] ? __pfx__printk+0x10/0x10 [ 407.024572][T18882] ? __lock_acquire+0xab9/0xd20 [ 407.024600][T18882] should_fail_ex+0x414/0x560 [ 407.024632][T18882] should_failslab+0xa8/0x100 [ 407.024666][T18882] kmem_cache_alloc_noprof+0x73/0x3c0 [ 407.024688][T18882] ? skb_clone+0x212/0x3a0 [ 407.024717][T18882] skb_clone+0x212/0x3a0 [ 407.024744][T18882] __netlink_deliver_tap+0x404/0x850 [ 407.024778][T18882] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.024799][T18882] netlink_deliver_tap+0x19c/0x1b0 [ 407.024822][T18882] netlink_unicast+0x7fa/0x9e0 [ 407.024861][T18882] ? __pfx_netlink_unicast+0x10/0x10 [ 407.024892][T18882] ? netlink_sendmsg+0x642/0xb30 [ 407.024911][T18882] ? skb_put+0x11b/0x210 [ 407.024935][T18882] netlink_sendmsg+0x805/0xb30 [ 407.024965][T18882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.024989][T18882] ? aa_sock_msg_perm+0xf1/0x1d0 [ 407.025019][T18882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.025048][T18882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.025082][T18882] __sock_sendmsg+0x219/0x270 [ 407.025114][T18882] ____sys_sendmsg+0x505/0x830 [ 407.025143][T18882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.025175][T18882] ? import_iovec+0x74/0xa0 [ 407.025201][T18882] ___sys_sendmsg+0x21f/0x2a0 [ 407.025227][T18882] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.025287][T18882] ? __fget_files+0x2a/0x420 [ 407.025312][T18882] ? __fget_files+0x3a0/0x420 [ 407.025354][T18882] __x64_sys_sendmsg+0x19b/0x260 [ 407.025380][T18882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.025414][T18882] ? __pfx_ksys_write+0x10/0x10 [ 407.025434][T18882] ? rcu_is_watching+0x15/0xb0 [ 407.025461][T18882] ? do_syscall_64+0xbe/0x3b0 [ 407.025484][T18882] do_syscall_64+0xfa/0x3b0 [ 407.025502][T18882] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.025531][T18882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.025551][T18882] ? clear_bhb_loop+0x60/0xb0 [ 407.025574][T18882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.025592][T18882] RIP: 0033:0x7f708d98eec9 [ 407.025610][T18882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.025626][T18882] RSP: 002b:00007f708e754038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.025648][T18882] RAX: ffffffffffffffda RBX: 00007f708dbe5fa0 RCX: 00007f708d98eec9 [ 407.025662][T18882] RDX: 0000000000004098 RSI: 0000200000000200 RDI: 0000000000000003 [ 407.025674][T18882] RBP: 00007f708e754090 R08: 0000000000000000 R09: 0000000000000000 [ 407.025686][T18882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.025697][T18882] R13: 00007f708dbe6038 R14: 00007f708dbe5fa0 R15: 00007fff768ae298 [ 407.025728][T18882] [ 407.472416][T18877] bond17 (unregistering): Released all slaves [ 407.565187][T18879] ip6tnl1: entered promiscuous mode [ 407.585722][T18879] ip6tnl1: entered allmulticast mode [ 407.738692][T18898] "syz.1.4043" (18898) uses obsolete ecb(arc4) skcipher [ 407.772585][T18896] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.4042'. [ 408.018165][T18915] FAULT_INJECTION: forcing a failure. [ 408.018165][T18915] name failslab, interval 1, probability 0, space 0, times 0 [ 408.052030][T18915] CPU: 0 UID: 0 PID: 18915 Comm: syz.1.4049 Not tainted syzkaller #0 PREEMPT(full) [ 408.052063][T18915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.052077][T18915] Call Trace: [ 408.052085][T18915] [ 408.052095][T18915] dump_stack_lvl+0x189/0x250 [ 408.052128][T18915] ? __pfx____ratelimit+0x10/0x10 [ 408.052165][T18915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.052193][T18915] ? __pfx__printk+0x10/0x10 [ 408.052235][T18915] ? __pfx___might_resched+0x10/0x10 [ 408.052264][T18915] should_fail_ex+0x414/0x560 [ 408.052302][T18915] should_failslab+0xa8/0x100 [ 408.052333][T18915] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 408.052362][T18915] ? __alloc_skb+0x112/0x2d0 [ 408.052390][T18915] __alloc_skb+0x112/0x2d0 [ 408.052417][T18915] tipc_nl_compat_dumpit+0x116/0x7b0 [ 408.052449][T18915] tipc_nl_compat_recv+0x802/0xbe0 [ 408.052475][T18915] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 408.052494][T18915] ? __mutex_trylock_common+0x153/0x260 [ 408.052519][T18915] ? __pfx_tipc_nl_compat_name_table_dump_header+0x10/0x10 [ 408.052542][T18915] ? __pfx_tipc_nl_name_table_dump+0x10/0x10 [ 408.052574][T18915] ? __pfx_tipc_nl_compat_name_table_dump+0x10/0x10 [ 408.052598][T18915] ? __pfx___mutex_trylock_common+0x10/0x10 [ 408.052620][T18915] ? __local_bh_enable_ip+0x12d/0x1c0 [ 408.052650][T18915] ? trace_contention_end+0x39/0x120 [ 408.052685][T18915] genl_family_rcv_msg_doit+0x212/0x300 [ 408.052724][T18915] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 408.052791][T18915] genl_rcv_msg+0x60e/0x790 [ 408.052830][T18915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.052859][T18915] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 408.052883][T18915] ? __asan_memcpy+0x40/0x70 [ 408.052904][T18915] ? __pfx_ref_tracker_free+0x10/0x10 [ 408.052944][T18915] netlink_rcv_skb+0x205/0x470 [ 408.052969][T18915] ? __lock_acquire+0xab9/0xd20 [ 408.052990][T18915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.053022][T18915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.053068][T18915] ? down_read+0x1ad/0x2e0 [ 408.053097][T18915] genl_rcv+0x28/0x40 [ 408.053123][T18915] netlink_unicast+0x82c/0x9e0 [ 408.053167][T18915] ? __pfx_netlink_unicast+0x10/0x10 [ 408.053204][T18915] ? netlink_sendmsg+0x642/0xb30 [ 408.053225][T18915] ? skb_put+0x11b/0x210 [ 408.053253][T18915] netlink_sendmsg+0x805/0xb30 [ 408.053288][T18915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.053316][T18915] ? aa_sock_msg_perm+0xf1/0x1d0 [ 408.053349][T18915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 408.053382][T18915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.053407][T18915] __sock_sendmsg+0x219/0x270 [ 408.053444][T18915] ____sys_sendmsg+0x505/0x830 [ 408.053479][T18915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.053518][T18915] ? import_iovec+0x74/0xa0 [ 408.053548][T18915] ___sys_sendmsg+0x21f/0x2a0 [ 408.053577][T18915] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.053647][T18915] ? __fget_files+0x2a/0x420 [ 408.053676][T18915] ? __fget_files+0x3a0/0x420 [ 408.053719][T18915] __x64_sys_sendmsg+0x19b/0x260 [ 408.053750][T18915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.053800][T18915] ? rcu_is_watching+0x15/0xb0 [ 408.053825][T18915] ? trace_sys_enter+0x25/0x100 [ 408.053853][T18915] do_syscall_64+0xfa/0x3b0 [ 408.053874][T18915] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.053907][T18915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.053929][T18915] ? clear_bhb_loop+0x60/0xb0 [ 408.053954][T18915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.053975][T18915] RIP: 0033:0x7f9b57b8eec9 [ 408.053993][T18915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.054011][T18915] RSP: 002b:00007f9b58a13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.054032][T18915] RAX: ffffffffffffffda RBX: 00007f9b57de5fa0 RCX: 00007f9b57b8eec9 [ 408.054048][T18915] RDX: 0000000000004098 RSI: 0000200000000200 RDI: 0000000000000003 [ 408.054061][T18915] RBP: 00007f9b58a13090 R08: 0000000000000000 R09: 0000000000000000 [ 408.054073][T18915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.054086][T18915] R13: 00007f9b57de6038 R14: 00007f9b57de5fa0 R15: 00007ffe63532c18 [ 408.054120][T18915] [ 408.739731][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4054'. [ 408.957547][T18942] tipc: Enabling of bearer rejected, already enabled [ 409.356476][T18972] netlink: 'syz.0.4067': attribute type 1 has an invalid length. [ 409.364340][T18976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.364431][T18976] IPv6: NLM_F_CREATE should be set when creating new route [ 409.383981][T18969] nbd: device at index 1 is going down [ 409.414804][T18975] nbd: couldn't find a device at index -373156329 [ 409.438536][T18978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4069'. [ 409.538088][T18980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.566073][T18982] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4070'. [ 409.688311][T18972] bond0: (slave geneve2): making interface the new active one [ 409.696828][T18972] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 409.908662][T18999] FAULT_INJECTION: forcing a failure. [ 409.908662][T18999] name failslab, interval 1, probability 0, space 0, times 0 [ 409.934102][T18999] CPU: 0 UID: 0 PID: 18999 Comm: syz.0.4074 Not tainted syzkaller #0 PREEMPT(full) [ 409.934135][T18999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.934149][T18999] Call Trace: [ 409.934158][T18999] [ 409.934167][T18999] dump_stack_lvl+0x189/0x250 [ 409.934199][T18999] ? __pfx____ratelimit+0x10/0x10 [ 409.934235][T18999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.934262][T18999] ? __pfx__printk+0x10/0x10 [ 409.934302][T18999] ? __pfx___might_resched+0x10/0x10 [ 409.934332][T18999] should_fail_ex+0x414/0x560 [ 409.934370][T18999] should_failslab+0xa8/0x100 [ 409.934401][T18999] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 409.934429][T18999] ? __alloc_skb+0x112/0x2d0 [ 409.934457][T18999] __alloc_skb+0x112/0x2d0 [ 409.934486][T18999] tipc_nl_compat_dumpit+0x34d/0x7b0 [ 409.934518][T18999] tipc_nl_compat_recv+0x802/0xbe0 [ 409.934544][T18999] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 409.934569][T18999] ? __mutex_trylock_common+0x153/0x260 [ 409.934594][T18999] ? __pfx_tipc_nl_compat_name_table_dump_header+0x10/0x10 [ 409.934617][T18999] ? __pfx_tipc_nl_name_table_dump+0x10/0x10 [ 409.934648][T18999] ? __pfx_tipc_nl_compat_name_table_dump+0x10/0x10 [ 409.934672][T18999] ? __pfx___mutex_trylock_common+0x10/0x10 [ 409.934697][T18999] ? __local_bh_enable_ip+0x12d/0x1c0 [ 409.934729][T18999] ? trace_contention_end+0x39/0x120 [ 409.934769][T18999] genl_family_rcv_msg_doit+0x212/0x300 [ 409.934810][T18999] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 409.934870][T18999] genl_rcv_msg+0x60e/0x790 [ 409.934907][T18999] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.934936][T18999] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 409.934959][T18999] ? __asan_memcpy+0x40/0x70 [ 409.934980][T18999] ? __pfx_ref_tracker_free+0x10/0x10 [ 409.935022][T18999] netlink_rcv_skb+0x205/0x470 [ 409.935042][T18999] ? __lock_acquire+0xab9/0xd20 [ 409.935063][T18999] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.935094][T18999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.935141][T18999] ? down_read+0x1ad/0x2e0 [ 409.935169][T18999] genl_rcv+0x28/0x40 [ 409.935195][T18999] netlink_unicast+0x82c/0x9e0 [ 409.935239][T18999] ? __pfx_netlink_unicast+0x10/0x10 [ 409.935275][T18999] ? netlink_sendmsg+0x642/0xb30 [ 409.935296][T18999] ? skb_put+0x11b/0x210 [ 409.935325][T18999] netlink_sendmsg+0x805/0xb30 [ 409.935360][T18999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.935389][T18999] ? aa_sock_msg_perm+0xf1/0x1d0 [ 409.935423][T18999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.935457][T18999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.935481][T18999] __sock_sendmsg+0x219/0x270 [ 409.935519][T18999] ____sys_sendmsg+0x505/0x830 [ 409.935560][T18999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.935599][T18999] ? import_iovec+0x74/0xa0 [ 409.935630][T18999] ___sys_sendmsg+0x21f/0x2a0 [ 409.935660][T18999] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.935733][T18999] ? __fget_files+0x2a/0x420 [ 409.935762][T18999] ? __fget_files+0x3a0/0x420 [ 409.935806][T18999] __x64_sys_sendmsg+0x19b/0x260 [ 409.935837][T18999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.935878][T18999] ? rcu_is_watching+0x15/0xb0 [ 409.935904][T18999] ? trace_sys_enter+0x25/0x100 [ 409.935934][T18999] do_syscall_64+0xfa/0x3b0 [ 409.935955][T18999] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.935989][T18999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.936011][T18999] ? clear_bhb_loop+0x60/0xb0 [ 409.936039][T18999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.936061][T18999] RIP: 0033:0x7f6f1db8eec9 [ 409.936081][T18999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.936101][T18999] RSP: 002b:00007f6f1eb06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.936125][T18999] RAX: ffffffffffffffda RBX: 00007f6f1dde5fa0 RCX: 00007f6f1db8eec9 [ 409.936141][T18999] RDX: 0000000000004098 RSI: 0000200000000200 RDI: 0000000000000003 [ 409.936155][T18999] RBP: 00007f6f1eb06090 R08: 0000000000000000 R09: 0000000000000000 [ 409.936170][T18999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.936183][T18999] R13: 00007f6f1dde6038 R14: 00007f6f1dde5fa0 R15: 00007ffecf3b4978 [ 409.936220][T18999] [ 410.524796][T19020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4079'. [ 411.798875][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 411.808050][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 411.818643][T19005] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 411.851579][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 411.880528][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 411.936228][T19027] netlink: 'syz.0.4080': attribute type 1 has an invalid length. [ 411.982607][T19027] bond16: entered promiscuous mode [ 411.988296][T19027] 8021q: adding VLAN 0 to HW filter on device bond16 [ 412.022496][T19027] bond16: (slave bridge12): making interface the new active one [ 412.030484][T19027] bridge12: entered promiscuous mode [ 412.037102][T19027] bond16: (slave bridge12): Enslaving as an active interface with an up link [ 412.055743][T19030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4081'. [ 412.354674][T19053] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4087'. [ 412.399346][T19057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 412.523455][T19059] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4089'. [ 412.764822][T19073] syz_tun: entered allmulticast mode [ 412.786363][T19073] syz_tun: left allmulticast mode [ 412.841753][T19073] siw: device registration error -23 [ 412.932341][T19087] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4098'. [ 412.969562][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4098'. [ 412.988811][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4098'. [ 413.154999][T19098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 413.302384][T19105] vlan0: entered promiscuous mode [ 413.307875][T19105] vlan0: entered allmulticast mode [ 413.314432][T19105] hsr_slave_1: entered allmulticast mode [ 413.354459][T19107] netlink: 'syz.0.4106': attribute type 2 has an invalid length. [ 413.643073][T19120] vlan4: entered allmulticast mode [ 413.648269][T19120] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 414.031003][T19156] netlink: 'syz.4.4121': attribute type 2 has an invalid length. [ 414.831240][T19201] netlink: 'syz.0.4136': attribute type 2 has an invalid length. [ 414.839620][T19201] __nla_validate_parse: 12 callbacks suppressed [ 414.839640][T19201] netlink: 119 bytes leftover after parsing attributes in process `syz.0.4136'. [ 414.912145][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4137'. [ 415.063433][T19217] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4141'. [ 415.313053][T19230] netlink: 'syz.3.4146': attribute type 1 has an invalid length. [ 415.330162][T19230] netlink: 784 bytes leftover after parsing attributes in process `syz.3.4146'. [ 415.358464][T19230] netlink: 5380 bytes leftover after parsing attributes in process `syz.3.4146'. [ 415.369239][T19230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.473887][T19235] netlink: 'syz.4.4147': attribute type 1 has an invalid length. [ 415.625980][T19235] bond14: (slave bridge4): making interface the new active one [ 415.636672][T19235] bond14: (slave bridge4): Enslaving as an active interface with an up link [ 415.650725][T19244] netlink: 'syz.1.4150': attribute type 2 has an invalid length. [ 415.686228][T19244] netlink: 119 bytes leftover after parsing attributes in process `syz.1.4150'. [ 415.732273][T19235] macvlan4: entered promiscuous mode [ 415.755532][T19235] macvlan4: entered allmulticast mode [ 415.783356][T19235] bond14: entered promiscuous mode [ 415.800766][T19235] bridge4: entered promiscuous mode [ 415.825411][T19235] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 415.845136][T19235] bond14: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 415.863423][T19235] bond14: left promiscuous mode [ 415.876234][T19235] bridge4: left promiscuous mode [ 416.111998][T19268] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4154'. [ 416.138606][T19269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4155'. [ 416.276719][T19272] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 416.299657][T19273] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 416.315080][T19272] netlink: 'syz.1.4156': attribute type 1 has an invalid length. [ 416.325990][T19273] netlink: 'syz.1.4156': attribute type 1 has an invalid length. [ 416.411322][T19272] bond16: entered promiscuous mode [ 416.417859][T19272] 8021q: adding VLAN 0 to HW filter on device bond16 [ 416.472431][T19284] bond16: (slave bridge11): making interface the new active one [ 416.483777][T19284] bridge11: entered promiscuous mode [ 416.510573][T19284] bond16: (slave bridge11): Enslaving as an active interface with an up link [ 416.554372][T19291] netlink: 'syz.3.4164': attribute type 10 has an invalid length. [ 416.567325][T19291] openvswitch: netlink: Flow key attr not present in new flow. [ 416.660364][T19297] netlink: 'syz.2.4162': attribute type 4 has an invalid length. [ 416.928159][T19316] netlink: 'syz.0.4172': attribute type 4 has an invalid length. [ 416.967189][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4172'. [ 417.122709][T19328] netlink: 'syz.3.4175': attribute type 14 has an invalid length. [ 417.139227][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4175'. [ 417.432999][T19343] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 417.453871][T19343] team0: Device macvtap0 is already an upper device of the team interface [ 417.459711][T19350] nbd: must specify a device to reconfigure [ 417.557327][T19346] 8021q: adding VLAN 0 to HW filter on device bond15 [ 417.587435][T19351] bond15: (slave geneve3): making interface the new active one [ 417.598545][T19351] bond15: (slave geneve3): Enslaving as an active interface with an up link [ 418.029715][T19380] bond16: (slave bridge5): making interface the new active one [ 418.038719][T19380] bond16: (slave bridge5): Enslaving as an active interface with an up link [ 418.061600][T19380] macvlan4: entered promiscuous mode [ 418.067514][T19380] macvlan4: entered allmulticast mode [ 418.074199][T19380] bond16: entered promiscuous mode [ 418.079488][T19380] bridge5: entered promiscuous mode [ 418.085779][T19380] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 418.094089][T19380] bond16: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 418.119903][T19380] bond16: left promiscuous mode [ 418.124934][T19380] bridge5: left promiscuous mode [ 418.441358][T19402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.455187][T19402] batadv_slave_0: entered promiscuous mode [ 418.462390][T19402] batadv_slave_0: entered allmulticast mode [ 419.654045][T19484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.921936][T19496] __nla_validate_parse: 11 callbacks suppressed [ 419.921960][T19496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4228'. [ 419.994051][T19508] validate_nla: 7 callbacks suppressed [ 419.994071][T19508] netlink: 'syz.3.4227': attribute type 10 has an invalid length. [ 420.004646][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 420.078084][T19510] netlink: 'syz.2.4231': attribute type 1 has an invalid length. [ 420.107060][T19513] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4232'. [ 420.230338][T19510] bond10: (slave bridge8): making interface the new active one [ 420.259566][T19510] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 420.270173][T19519] netlink: 'syz.4.4233': attribute type 2 has an invalid length. [ 420.298251][T19519] netlink: 119 bytes leftover after parsing attributes in process `syz.4.4233'. [ 420.326209][T19510] macvlan0: entered promiscuous mode [ 420.341327][T19510] macvlan0: entered allmulticast mode [ 420.353943][T19510] bond10: entered promiscuous mode [ 420.366844][T19510] bridge8: entered promiscuous mode [ 420.378417][T19510] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 420.388646][T19510] bond10: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 420.407822][T19510] bond10: left promiscuous mode [ 420.413191][T19510] bridge8: left promiscuous mode [ 420.466510][ T24] IPVS: starting estimator thread 0... [ 420.559177][T19532] IPVS: using max 27 ests per chain, 64800 per kthread [ 420.696575][T19547] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4244'. [ 420.864254][T19557] netlink: 'syz.2.4250': attribute type 2 has an invalid length. [ 420.873018][T19557] netlink: 119 bytes leftover after parsing attributes in process `syz.2.4250'. [ 420.966062][T19560] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 421.649484][T19605] netlink: 'syz.4.4264': attribute type 2 has an invalid length. [ 421.698008][T19605] netlink: 119 bytes leftover after parsing attributes in process `syz.4.4264'. [ 421.969825][T19620] netlink: 'syz.1.4270': attribute type 1 has an invalid length. [ 422.005750][T19620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4270'. [ 422.217122][T19641] netlink: 'syz.4.4277': attribute type 2 has an invalid length. [ 422.236173][T19641] netlink: 119 bytes leftover after parsing attributes in process `syz.4.4277'. [ 422.753356][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4287'. [ 423.420143][T19715] netlink: 'syz.4.4300': attribute type 1 has an invalid length. [ 423.511506][T19715] bond17: entered promiscuous mode [ 423.534188][T19715] 8021q: adding VLAN 0 to HW filter on device bond17 [ 423.630784][T19733] bond17: (slave bridge6): making interface the new active one [ 423.638802][T19733] bridge6: entered promiscuous mode [ 423.646618][T19733] bond17: (slave bridge6): Enslaving as an active interface with an up link [ 423.767715][T19739] netlink: 'syz.1.4306': attribute type 1 has an invalid length. [ 423.809140][T19739] netlink: 'syz.1.4306': attribute type 1 has an invalid length. [ 424.158242][T19762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.720900][T19805] netlink: 'syz.1.4330': attribute type 11 has an invalid length. [ 424.983548][T19822] __nla_validate_parse: 75 callbacks suppressed [ 424.983573][T19822] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4335'. [ 425.072877][T19830] validate_nla: 4 callbacks suppressed [ 425.072898][T19830] netlink: 'syz.3.4338': attribute type 1 has an invalid length. [ 425.144015][T19832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4340'. [ 425.188060][T19830] bond17: entered promiscuous mode [ 425.229578][T19830] 8021q: adding VLAN 0 to HW filter on device bond17 [ 425.347263][T19834] bond17: (slave bridge9): making interface the new active one [ 425.366266][T19848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4341'. [ 425.399598][T19834] bridge9: entered promiscuous mode [ 425.411400][T19834] bond17: (slave bridge9): Enslaving as an active interface with an up link [ 425.833923][T19872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4349'. [ 425.850191][T19872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4349'. [ 426.670897][T19922] gtp0: entered promiscuous mode [ 426.683729][T19922] gtp0: entered allmulticast mode [ 427.110277][T19943] nbd: device at index 1 is going down [ 427.200670][T19947] wlan0 speed is unknown, defaulting to 1000 [ 427.284063][T19956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4373'. [ 427.343995][T19956] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.4373'. [ 427.359624][T19956] netlink: get zone limit has 8 unknown bytes [ 427.404687][T19956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4373'. [ 427.533264][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4373'. [ 427.561278][T19970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4380'. [ 427.973514][T19990] nbd: device at index 3 is going down [ 428.094938][T19998] netlink: 'syz.0.4389': attribute type 1 has an invalid length. [ 428.105978][T19997] wg2: entered promiscuous mode [ 428.115317][T19997] wg2: entered allmulticast mode [ 428.151412][T19996] can: request_module (can-proto-4) failed. [ 428.294114][T20010] veth0: entered promiscuous mode [ 428.303542][T20009] veth0: left promiscuous mode [ 428.486665][T20022] netlink: 'syz.4.4396': attribute type 1 has an invalid length. [ 428.523586][T20022] bond18: entered promiscuous mode [ 428.530353][T20022] 8021q: adding VLAN 0 to HW filter on device bond18 [ 428.752818][T20035] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 428.970379][T20050] tipc: Enabling of bearer rejected, failed to enable media [ 429.021391][T20055] tipc: Enabled bearer , priority 0 [ 429.049927][T20055] syzkaller0: entered promiscuous mode [ 429.068328][T20055] syzkaller0: entered allmulticast mode [ 429.149890][T20055] tipc: Resetting bearer [ 429.180106][T20049] tipc: Resetting bearer [ 429.251608][T20049] tipc: Disabling bearer [ 429.279805][T20061] netlink: 'syz.4.4410': attribute type 4 has an invalid length. [ 429.460717][T20074] FAULT_INJECTION: forcing a failure. [ 429.460717][T20074] name failslab, interval 1, probability 0, space 0, times 0 [ 429.477866][T20074] CPU: 1 UID: 0 PID: 20074 Comm: syz.0.4413 Not tainted syzkaller #0 PREEMPT(full) [ 429.477896][T20074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 429.477910][T20074] Call Trace: [ 429.477918][T20074] [ 429.477927][T20074] dump_stack_lvl+0x189/0x250 [ 429.477960][T20074] ? __pfx____ratelimit+0x10/0x10 [ 429.477996][T20074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.478023][T20074] ? __pfx__printk+0x10/0x10 [ 429.478071][T20074] ? __pfx___might_resched+0x10/0x10 [ 429.478095][T20074] ? fs_reclaim_acquire+0x7d/0x100 [ 429.478133][T20074] should_fail_ex+0x414/0x560 [ 429.478170][T20074] should_failslab+0xa8/0x100 [ 429.478201][T20074] __kmalloc_noprof+0xcb/0x4f0 [ 429.478226][T20074] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 429.478264][T20074] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 429.478305][T20074] genl_family_rcv_msg_doit+0xb8/0x300 [ 429.478344][T20074] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.478384][T20074] ? apparmor_capable+0x137/0x1b0 [ 429.478409][T20074] ? bpf_lsm_capable+0x9/0x20 [ 429.478438][T20074] ? security_capable+0x7e/0x2e0 [ 429.478475][T20074] genl_rcv_msg+0x60e/0x790 [ 429.478511][T20074] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.478539][T20074] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 429.478569][T20074] ? __asan_memcpy+0x40/0x70 [ 429.478590][T20074] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.478631][T20074] netlink_rcv_skb+0x205/0x470 [ 429.478652][T20074] ? __lock_acquire+0xab9/0xd20 [ 429.478673][T20074] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.478704][T20074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.478750][T20074] ? down_read+0x1ad/0x2e0 [ 429.478778][T20074] genl_rcv+0x28/0x40 [ 429.478803][T20074] netlink_unicast+0x82c/0x9e0 [ 429.478848][T20074] ? __pfx_netlink_unicast+0x10/0x10 [ 429.478884][T20074] ? netlink_sendmsg+0x642/0xb30 [ 429.478905][T20074] ? skb_put+0x11b/0x210 [ 429.478934][T20074] netlink_sendmsg+0x805/0xb30 [ 429.478969][T20074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.478997][T20074] ? aa_sock_msg_perm+0xf1/0x1d0 [ 429.479029][T20074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.479068][T20074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.479092][T20074] __sock_sendmsg+0x219/0x270 [ 429.479127][T20074] ____sys_sendmsg+0x505/0x830 [ 429.479160][T20074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.479198][T20074] ? import_iovec+0x74/0xa0 [ 429.479228][T20074] ___sys_sendmsg+0x21f/0x2a0 [ 429.479258][T20074] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.479327][T20074] ? __fget_files+0x2a/0x420 [ 429.479355][T20074] ? __fget_files+0x3a0/0x420 [ 429.479397][T20074] __x64_sys_sendmsg+0x19b/0x260 [ 429.479427][T20074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.479464][T20074] ? __pfx_ksys_write+0x10/0x10 [ 429.479487][T20074] ? rcu_is_watching+0x15/0xb0 [ 429.479517][T20074] ? do_syscall_64+0xbe/0x3b0 [ 429.479543][T20074] do_syscall_64+0xfa/0x3b0 [ 429.479571][T20074] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.479605][T20074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.479627][T20074] ? clear_bhb_loop+0x60/0xb0 [ 429.479654][T20074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.479675][T20074] RIP: 0033:0x7f6f1db8eec9 [ 429.479695][T20074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.479715][T20074] RSP: 002b:00007f6f1eb06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.479738][T20074] RAX: ffffffffffffffda RBX: 00007f6f1dde5fa0 RCX: 00007f6f1db8eec9 [ 429.479754][T20074] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001b [ 429.479768][T20074] RBP: 00007f6f1eb06090 R08: 0000000000000000 R09: 0000000000000000 [ 429.479783][T20074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.479795][T20074] R13: 00007f6f1dde6038 R14: 00007f6f1dde5fa0 R15: 00007ffecf3b4978 [ 429.479831][T20074] [ 430.073453][T20091] macvtap1: entered allmulticast mode [ 430.217030][T20102] __nla_validate_parse: 6 callbacks suppressed [ 430.217053][T20102] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4421'. [ 430.377386][T20114] FAULT_INJECTION: forcing a failure. [ 430.377386][T20114] name failslab, interval 1, probability 0, space 0, times 0 [ 430.401217][T20113] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4427'. [ 430.421889][T20114] CPU: 1 UID: 0 PID: 20114 Comm: syz.4.4428 Not tainted syzkaller #0 PREEMPT(full) [ 430.421920][T20114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.421933][T20114] Call Trace: [ 430.421942][T20114] [ 430.421952][T20114] dump_stack_lvl+0x189/0x250 [ 430.421984][T20114] ? __pfx____ratelimit+0x10/0x10 [ 430.422018][T20114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.422045][T20114] ? __pfx__printk+0x10/0x10 [ 430.422081][T20114] ? __pfx___might_resched+0x10/0x10 [ 430.422103][T20114] ? fs_reclaim_acquire+0x7d/0x100 [ 430.422139][T20114] should_fail_ex+0x414/0x560 [ 430.422175][T20114] should_failslab+0xa8/0x100 [ 430.422212][T20114] __kmalloc_noprof+0xcb/0x4f0 [ 430.422237][T20114] ? ethnl_default_set_doit+0x168/0x890 [ 430.422268][T20114] ethnl_default_set_doit+0x168/0x890 [ 430.422293][T20114] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 430.422324][T20114] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 430.422362][T20114] genl_family_rcv_msg_doit+0x212/0x300 [ 430.422401][T20114] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 430.422442][T20114] ? bpf_lsm_capable+0x9/0x20 [ 430.422464][T20114] ? security_capable+0x7e/0x2e0 [ 430.422497][T20114] genl_rcv_msg+0x60e/0x790 [ 430.422530][T20114] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.422574][T20114] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 430.422601][T20114] ? __asan_memcpy+0x40/0x70 [ 430.422621][T20114] ? __pfx_ref_tracker_free+0x10/0x10 [ 430.422661][T20114] netlink_rcv_skb+0x205/0x470 [ 430.422679][T20114] ? __lock_acquire+0xab9/0xd20 [ 430.422700][T20114] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.422729][T20114] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.422773][T20114] ? down_read+0x1ad/0x2e0 [ 430.422799][T20114] genl_rcv+0x28/0x40 [ 430.422824][T20114] netlink_unicast+0x82c/0x9e0 [ 430.422866][T20114] ? __pfx_netlink_unicast+0x10/0x10 [ 430.422901][T20114] ? netlink_sendmsg+0x642/0xb30 [ 430.422921][T20114] ? skb_put+0x11b/0x210 [ 430.422948][T20114] netlink_sendmsg+0x805/0xb30 [ 430.422981][T20114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.423007][T20114] ? aa_sock_msg_perm+0xf1/0x1d0 [ 430.423039][T20114] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.423072][T20114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.423096][T20114] __sock_sendmsg+0x219/0x270 [ 430.423130][T20114] ____sys_sendmsg+0x505/0x830 [ 430.423163][T20114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.423207][T20114] ? import_iovec+0x74/0xa0 [ 430.423238][T20114] ___sys_sendmsg+0x21f/0x2a0 [ 430.423267][T20114] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.423337][T20114] ? __fget_files+0x2a/0x420 [ 430.423367][T20114] ? __fget_files+0x3a0/0x420 [ 430.423409][T20114] __x64_sys_sendmsg+0x19b/0x260 [ 430.423440][T20114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.423478][T20114] ? __pfx_ksys_write+0x10/0x10 [ 430.423502][T20114] ? rcu_is_watching+0x15/0xb0 [ 430.423533][T20114] ? do_syscall_64+0xbe/0x3b0 [ 430.423562][T20114] do_syscall_64+0xfa/0x3b0 [ 430.423582][T20114] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.423616][T20114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.423638][T20114] ? clear_bhb_loop+0x60/0xb0 [ 430.423663][T20114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.423687][T20114] RIP: 0033:0x7fcb2558eec9 [ 430.423707][T20114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.423727][T20114] RSP: 002b:00007fcb237f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.423751][T20114] RAX: ffffffffffffffda RBX: 00007fcb257e5fa0 RCX: 00007fcb2558eec9 [ 430.423768][T20114] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001b [ 430.423783][T20114] RBP: 00007fcb237f6090 R08: 0000000000000000 R09: 0000000000000000 [ 430.423799][T20114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.423812][T20114] R13: 00007fcb257e6038 R14: 00007fcb257e5fa0 R15: 00007fffafe5ebf8 [ 430.423850][T20114] [ 573.899223][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 573.907268][ T31] Not tainted syzkaller #0 [ 573.912354][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.921088][ T31] task:kworker/1:0 state:D stack:22984 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 573.933297][ T31] Workqueue: events rfkill_sync_work [ 573.938632][ T31] Call Trace: [ 573.941964][ T31] [ 573.944953][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 573.949647][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 573.955727][ T31] ? __pfx___schedule+0x10/0x10 [ 573.960750][ T31] ? schedule+0x91/0x360 [ 573.965044][ T31] schedule+0x165/0x360 [ 573.969305][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.974808][ T31] __mutex_lock+0x7e6/0x1350 [ 573.979689][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.009042][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 574.014414][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.039722][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.045012][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 574.059073][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 574.065494][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 574.073174][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 574.078341][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 574.084792][ T31] rfkill_set_block+0x1cf/0x440 [ 574.089846][ T31] rfkill_sync_work+0x114/0x200 [ 574.094737][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 574.100639][ T31] process_scheduled_works+0xade/0x17b0 [ 574.106238][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.112508][ T31] worker_thread+0x8a0/0xda0 [ 574.117154][ T31] kthread+0x711/0x8a0 [ 574.121452][ T31] ? __pfx_worker_thread+0x10/0x10 [ 574.126598][ T31] ? __pfx_kthread+0x10/0x10 [ 574.131287][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.136520][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.141824][ T31] ? __pfx_kthread+0x10/0x10 [ 574.146453][ T31] ret_from_fork+0x436/0x7d0 [ 574.151278][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.156435][ T31] ? __switch_to_asm+0x39/0x70 [ 574.161307][ T31] ? __switch_to_asm+0x33/0x70 [ 574.166114][ T31] ? __pfx_kthread+0x10/0x10 [ 574.170786][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.175594][ T31] [ 574.178724][ T31] INFO: task kworker/1:9:9583 blocked for more than 143 seconds. [ 574.186549][ T31] Not tainted syzkaller #0 [ 574.191585][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.200342][ T31] task:kworker/1:9 state:D stack:22968 pid:9583 tgid:9583 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 574.212453][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 574.219268][ T31] Call Trace: [ 574.222663][ T31] [ 574.226043][ T31] __schedule+0x1798/0x4cc0 [ 574.230705][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.236118][ T31] ? __pfx___schedule+0x10/0x10 [ 574.241091][ T31] ? schedule+0x91/0x360 [ 574.245378][ T31] schedule+0x165/0x360 [ 574.249641][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.255140][ T31] __mutex_lock+0x7e6/0x1350 [ 574.259808][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.264608][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 574.270953][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.276018][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 574.281841][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 574.287603][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 574.293809][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 574.299782][ T31] process_scheduled_works+0xade/0x17b0 [ 574.305361][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.311463][ T31] worker_thread+0x8a0/0xda0 [ 574.316119][ T31] kthread+0x711/0x8a0 [ 574.320272][ T31] ? __pfx_worker_thread+0x10/0x10 [ 574.325430][ T31] ? __pfx_kthread+0x10/0x10 [ 574.330142][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.335468][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.340786][ T31] ? __pfx_kthread+0x10/0x10 [ 574.345416][ T31] ret_from_fork+0x436/0x7d0 [ 574.350132][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.355282][ T31] ? __switch_to_asm+0x39/0x70 [ 574.360128][ T31] ? __switch_to_asm+0x33/0x70 [ 574.364945][ T31] ? __pfx_kthread+0x10/0x10 [ 574.369622][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.374434][ T31] [ 574.377540][ T31] INFO: task syz.2.4412:20067 blocked for more than 143 seconds. [ 574.386674][ T31] Not tainted syzkaller #0 [ 574.391752][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.400482][ T31] task:syz.2.4412 state:D stack:26920 pid:20067 tgid:20067 ppid:5841 task_flags:0x400040 flags:0x00080002 [ 574.412589][ T31] Call Trace: [ 574.415886][ T31] [ 574.418822][ T31] __schedule+0x1798/0x4cc0 [ 574.423607][ T31] ? validate_chain+0x897/0x2140 [ 574.428599][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.433593][ T31] ? __pfx___schedule+0x10/0x10 [ 574.438512][ T31] ? schedule+0x91/0x360 [ 574.442885][ T31] schedule+0x165/0x360 [ 574.447086][ T31] schedule_timeout+0x9a/0x270 [ 574.452094][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 574.457514][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.462901][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.468142][ T31] ? wait_for_completion+0x267/0x5d0 [ 574.473531][ T31] wait_for_completion+0x2bf/0x5d0 [ 574.478718][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 574.484444][ T31] ? __flush_work+0xd2/0xbc0 [ 574.489136][ T31] ? __flush_work+0xd2/0xbc0 [ 574.493757][ T31] __flush_work+0x9b9/0xbc0 [ 574.498272][ T31] ? __flush_work+0xd2/0xbc0 [ 574.502945][ T31] ? __pfx___flush_work+0x10/0x10 [ 574.508002][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 574.513398][ T31] ? __pfx___cancel_work+0x10/0x10 [ 574.518567][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 574.524293][ T31] __cancel_work_sync+0xbe/0x110 [ 574.529320][ T31] rfkill_unregister+0x92/0x220 [ 574.534185][ T31] nfc_unregister_device+0x96/0x2a0 [ 574.540844][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 574.546622][ T31] virtual_ncidev_close+0x56/0x90 [ 574.551783][ T31] __fput+0x44c/0xa70 [ 574.555814][ T31] task_work_run+0x1d1/0x260 [ 574.560510][ T31] ? __pfx_task_work_run+0x10/0x10 [ 574.565711][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 574.571339][ T31] exit_to_user_mode_loop+0xe9/0x110 [ 574.576735][ T31] do_syscall_64+0x2bd/0x3b0 [ 574.581439][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.586679][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.592840][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.597575][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.603545][ T31] RIP: 0033:0x7f708d98eec9 [ 574.607989][ T31] RSP: 002b:00007fff768ae3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 574.616521][ T31] RAX: 0000000000000000 RBX: 0000000000068d01 RCX: 00007f708d98eec9 [ 574.624722][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 574.632798][ T31] RBP: 00007f708dbe7da0 R08: 0000000000000001 R09: 00000012768ae6ef [ 574.641423][ T31] R10: 0000001b30520000 R11: 0000000000000246 R12: 00007f708dbe5fac [ 574.649497][ T31] R13: 00007f708dbe5fa0 R14: ffffffffffffffff R15: 00007fff768ae510 [ 574.657512][ T31] [ 574.660625][ T31] INFO: task syz.0.4427:20113 blocked for more than 143 seconds. [ 574.668425][ T31] Not tainted syzkaller #0 [ 574.675462][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.686037][ T31] task:syz.0.4427 state:D stack:23208 pid:20113 tgid:20111 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 574.698436][ T31] Call Trace: [ 574.702045][ T31] [ 574.705192][ T31] __schedule+0x1798/0x4cc0 [ 574.710136][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.715031][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.719995][ T31] ? __pfx___schedule+0x10/0x10 [ 574.724895][ T31] ? schedule+0x91/0x360 [ 574.729307][ T31] schedule+0x165/0x360 [ 574.733504][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.739066][ T31] __mutex_lock+0x7e6/0x1350 [ 574.743690][ T31] ? rcu_is_watching+0x15/0xb0 [ 574.748466][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.753498][ T31] ? rfkill_register+0x37/0x8e0 [ 574.758388][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.763592][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 574.768562][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.774046][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 574.779471][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 574.785134][ T31] rfkill_register+0x37/0x8e0 [ 574.790091][ T31] wiphy_register+0x2231/0x2aa0 [ 574.795006][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 574.800376][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 574.805533][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 574.811743][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 574.817255][ T31] ? ieee80211_register_hw+0x14a1/0x40d0 [ 574.823013][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 574.828857][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 574.835033][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 574.841156][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 574.847541][ T31] ? __hrtimer_setup+0x187/0x210 [ 574.852620][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 574.858569][ T31] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 574.865717][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 574.872096][ T31] ? __nla_validate_parse+0x251c/0x2d40 [ 574.877685][ T31] ? ____sys_sendmsg+0x505/0x830 [ 574.882755][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 574.887915][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 574.893792][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 574.899543][ T31] ? __nla_parse+0x40/0x60 [ 574.903974][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 574.910531][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 574.916138][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 574.922356][ T31] ? bpf_lsm_capable+0x9/0x20 [ 574.927067][ T31] ? security_capable+0x7e/0x2e0 [ 574.932137][ T31] genl_rcv_msg+0x60e/0x790 [ 574.936679][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.942045][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 574.947636][ T31] netlink_rcv_skb+0x205/0x470 [ 574.952656][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.957554][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.962680][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.968017][ T31] ? down_read+0x1ad/0x2e0 [ 574.972583][ T31] genl_rcv+0x28/0x40 [ 574.976605][ T31] netlink_unicast+0x82c/0x9e0 [ 574.981481][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 574.986807][ T31] ? netlink_sendmsg+0x642/0xb30 [ 574.991988][ T31] ? skb_put+0x11b/0x210 [ 574.996266][ T31] netlink_sendmsg+0x805/0xb30 [ 575.001122][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.006455][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 575.011551][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.016963][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.022508][ T31] __sock_sendmsg+0x219/0x270 [ 575.027227][ T31] ____sys_sendmsg+0x505/0x830 [ 575.032241][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.037595][ T31] ? import_iovec+0x74/0xa0 [ 575.042313][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 575.047042][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.052411][ T31] ? __fget_files+0x2a/0x420 [ 575.057040][ T31] ? __fget_files+0x3a0/0x420 [ 575.061823][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 575.066796][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.072521][ T31] ? rcu_is_watching+0x15/0xb0 [ 575.077312][ T31] ? do_syscall_64+0xbe/0x3b0 [ 575.082071][ T31] do_syscall_64+0xfa/0x3b0 [ 575.086601][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.091985][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.098181][ T31] ? clear_bhb_loop+0x60/0xb0 [ 575.103021][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.108952][ T31] RIP: 0033:0x7f6f1db8eec9 [ 575.113617][ T31] RSP: 002b:00007f6f1eb06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.122126][ T31] RAX: ffffffffffffffda RBX: 00007f6f1dde5fa0 RCX: 00007f6f1db8eec9 [ 575.130224][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 575.138219][ T31] RBP: 00007f6f1dc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.146286][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.154421][ T31] R13: 00007f6f1dde6038 R14: 00007f6f1dde5fa0 R15: 00007ffecf3b4978 [ 575.162874][ T31] [ 575.165972][ T31] [ 575.165972][ T31] Showing all locks held in the system: [ 575.173863][ T31] 4 locks held by kworker/1:0/24: [ 575.179043][ T31] #0: ffff88801a081148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 575.190282][ T31] #1: ffffc900001e7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 575.202952][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 575.213242][ T31] #3: ffff88807c9cd100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 575.223011][ T31] 1 lock held by khungtaskd/31: [ 575.227866][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 575.237932][ T31] 5 locks held by kworker/u8:5/75: [ 575.243141][ T31] 1 lock held by klogd/5195: [ 575.247777][ T31] 2 locks held by getty/5596: [ 575.252549][ T31] #0: ffff88802fb5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 575.262497][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 575.272900][ T31] 3 locks held by kworker/1:9/9583: [ 575.278134][ T31] #0: ffff88801a081148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 575.289215][ T31] #1: ffffc9001bda7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 575.302829][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 575.314371][ T31] 1 lock held by syz.2.4412/20067: [ 575.319538][ T31] #0: ffff88807c9cd100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 575.329408][ T31] 3 locks held by syz.0.4427/20113: [ 575.334626][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.342915][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.352081][ T31] #2: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.362465][ T31] 2 locks held by syz.1.4436/20131: [ 575.367700][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.376063][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.385393][ T31] 2 locks held by syz.3.4437/20133: [ 575.390716][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.398995][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.408024][ T31] 2 locks held by syz.4.4439/20141: [ 575.413365][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.421762][ T31] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.430988][ T31] 2 locks held by syz-executor/20143: [ 575.436461][ T31] #0: ffff8880244d4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.446632][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.456759][ T31] 2 locks held by syz-executor/20145: [ 575.462230][ T31] #0: ffff888023b90118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.472537][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.482537][ T31] 2 locks held by syz-executor/20149: [ 575.487923][ T31] #0: ffff88807b438918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.498030][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.508099][ T31] 2 locks held by syz-executor/20150: [ 575.513564][ T31] #0: ffff88807a781918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.523678][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.533688][ T31] 2 locks held by syz-executor/20151: [ 575.539253][ T31] #0: ffff888024dc8918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.549522][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.559590][ T31] 2 locks held by syz-executor/20153: [ 575.564981][ T31] #0: ffff888024279118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.575063][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.585236][ T31] 2 locks held by syz-executor/20155: [ 575.590878][ T31] #0: ffff8880332ab118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.601011][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.611021][ T31] 2 locks held by syz-executor/20158: [ 575.616412][ T31] #0: ffff888142f1b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.626532][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.636619][ T31] 2 locks held by syz-executor/20159: [ 575.642067][ T31] #0: ffff888053c2a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.652188][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.662205][ T31] 2 locks held by syz-executor/20161: [ 575.667603][ T31] #0: ffff888062369918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.677782][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.687825][ T31] 2 locks held by syz-executor/20164: [ 575.693455][ T31] #0: ffff88802428a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.703555][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.713581][ T31] 2 locks held by syz-executor/20166: [ 575.719006][ T31] #0: ffff888025a53918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.729134][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.739368][ T31] 2 locks held by syz-executor/20169: [ 575.744761][ T31] #0: ffff88802c0f1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.754868][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.764861][ T31] 2 locks held by syz-executor/20170: [ 575.770326][ T31] #0: ffff88802c0f6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.780503][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.790501][ T31] 2 locks held by syz-executor/20172: [ 575.795895][ T31] #0: ffff888063eea118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.806201][ T31] #1: ffffffff8f3948c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.816217][ T31] [ 575.818552][ T31] ============================================= [ 575.818552][ T31] [ 575.829175][ T31] NMI backtrace for cpu 1 [ 575.829195][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 575.829219][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 575.829233][ T31] Call Trace: [ 575.829242][ T31] [ 575.829252][ T31] dump_stack_lvl+0x189/0x250 [ 575.829287][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.829315][ T31] ? __pfx__printk+0x10/0x10 [ 575.829362][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 575.829403][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 575.829438][ T31] ? __pfx__printk+0x10/0x10 [ 575.829475][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 575.829505][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 575.829539][ T31] watchdog+0xf93/0xfe0 [ 575.829566][ T31] ? watchdog+0x1de/0xfe0 [ 575.829594][ T31] kthread+0x711/0x8a0 [ 575.829625][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.829646][ T31] ? __pfx_kthread+0x10/0x10 [ 575.829694][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.829735][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.829768][ T31] ? __pfx_kthread+0x10/0x10 [ 575.829798][ T31] ret_from_fork+0x436/0x7d0 [ 575.829827][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.829857][ T31] ? __switch_to_asm+0x39/0x70 [ 575.829887][ T31] ? __switch_to_asm+0x33/0x70 [ 575.829915][ T31] ? __pfx_kthread+0x10/0x10 [ 575.829946][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.829995][ T31] [ 575.830004][ T31] Sending NMI from CPU 1 to CPUs 0: [ 575.975320][ C0] NMI backtrace for cpu 0 [ 575.975338][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 575.975359][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 575.975371][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 575.975405][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c9 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 575.975422][ C0] RSP: 0018:ffffffff8da07d80 EFLAGS: 000002c6 [ 575.975439][ C0] RAX: 65d69ec25b462800 RBX: ffffffff81953917 RCX: 65d69ec25b462800 [ 575.975453][ C0] RDX: 0000000000000001 RSI: ffffffff8d50d356 RDI: ffffffff8b9ec4e0 [ 575.975467][ C0] RBP: ffffffff8da07eb8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 575.975481][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f5b8630 [ 575.975495][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b52a28 [ 575.975508][ C0] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 575.975523][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.975536][ C0] CR2: 000055cdb6a8ff70 CR3: 000000000db36000 CR4: 00000000003526f0 [ 575.975553][ C0] Call Trace: [ 575.975561][ C0] [ 575.975568][ C0] default_idle+0x13/0x20 [ 575.975588][ C0] default_idle_call+0x73/0xb0 [ 575.975610][ C0] do_idle+0x1e7/0x510 [ 575.975633][ C0] ? __pfx_do_idle+0x10/0x10 [ 575.975662][ C0] cpu_startup_entry+0x44/0x60 [ 575.975681][ C0] rest_init+0x2de/0x300 [ 575.975704][ C0] start_kernel+0x3ae/0x410 [ 575.975732][ C0] x86_64_start_reservations+0x24/0x30 [ 575.975752][ C0] x86_64_start_kernel+0x143/0x1c0 [ 575.975771][ C0] common_startup_64+0x13e/0x147 [ 575.975806][ C0] [ 575.983302][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 576.159705][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 576.168820][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 576.178879][ T31] Call Trace: [ 576.182162][ T31] [ 576.185113][ T31] dump_stack_lvl+0x99/0x250 [ 576.189722][ T31] ? __asan_memcpy+0x40/0x70 [ 576.194317][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.199523][ T31] ? __pfx__printk+0x10/0x10 [ 576.204150][ T31] vpanic+0x281/0x750 [ 576.208151][ T31] ? __pfx_vpanic+0x10/0x10 [ 576.212666][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 576.218253][ T31] ? preempt_schedule+0xae/0xc0 [ 576.223121][ T31] ? preempt_schedule_common+0x83/0xd0 [ 576.228592][ T31] panic+0xb9/0xc0 [ 576.232320][ T31] ? __pfx_panic+0x10/0x10 [ 576.236741][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 576.242126][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 576.248291][ T31] watchdog+0xfd2/0xfe0 [ 576.252451][ T31] ? watchdog+0x1de/0xfe0 [ 576.256787][ T31] kthread+0x711/0x8a0 [ 576.260901][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.265604][ T31] ? __pfx_kthread+0x10/0x10 [ 576.270242][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.275460][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.280687][ T31] ? __pfx_kthread+0x10/0x10 [ 576.285291][ T31] ret_from_fork+0x436/0x7d0 [ 576.289893][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.295018][ T31] ? __switch_to_asm+0x39/0x70 [ 576.299796][ T31] ? __switch_to_asm+0x33/0x70 [ 576.304579][ T31] ? __pfx_kthread+0x10/0x10 [ 576.309181][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.314061][ T31] [ 576.317449][ T31] Kernel Offset: disabled [ 576.321803][ T31] Rebooting in 86400 seconds..