last executing test programs: 2.374476315s ago: executing program 3 (id=4572): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c00000019000100000000000000000080200000000400050000000008000100ac1e0001080001064bbc907e00ffffffff"], 0x2c}}, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @empty}, 0x8, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080)='ip_vti0\x00', 0xc6c, 0xff, 0x6}) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000400)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x2, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000440)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket(0x10, 0x3, 0x0) r7 = gettid() r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c042000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r7, @ANYBLOB="0f4636cb2cb01944d736d17af534fd3634acbc241bf7e508156233c3b142dbb7149a9b68f239b1019ab7ead12ced69a82764010bd2ba569bbd9b59d99c52eee22262fc9f4ed9a66ab769d16b20b5b841fcb68405d634aca492253dab864612e4b911aae579322e82e51f75a2bbf0c04793a3f36a901a83135a4e405f7c06e5a413"], 0x3c}}, 0x0) 2.283215227s ago: executing program 4 (id=4575): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000600), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x20}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3b25fe80070000000000002000000009ffffffe00000000000000000", 0x22}], 0x1}, 0x20040000) 2.021029003s ago: executing program 4 (id=4577): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000f5) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00), 0x20008b88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (fail_nth: 6) 1.569632403s ago: executing program 0 (id=4579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x50}, 0x1, 0x0, 0x0, 0x10044840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x50}, 0x1, 0x0, 0x0, 0x10044840}, 0x0) (async) 1.476997698s ago: executing program 4 (id=4580): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@call], {0x95, 0x0, 0x5a5}}, 0x0, 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44890) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e381", 0xd}], 0x1}}], 0x1, 0x24044015) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x6e922}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @void}, 0x10) 1.399272226s ago: executing program 4 (id=4582): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a0104"], 0xcc}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x100, r2, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}]}, 0x100}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) 1.149102817s ago: executing program 0 (id=4584): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001c0081064e81f782db44b9040a1d08040e000000000002a1180002000600142603600e1208000f0000810401a8001605200001400200680803600cfab94dcf5c0461c1d67f6f94007134cf61e08000a0e4", 0x55}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00\"\x00'], 0x20}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 1.110979075s ago: executing program 3 (id=4585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1629d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.062706531s ago: executing program 4 (id=4586): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x218000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151d0100000000002800128009000100766c616e000000001800028006000100fe0f00000c0002001a0000001a00000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.006103547s ago: executing program 2 (id=4587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffffffffffc2, 0x2, {0x3, "416643c46427168209669d736b27af61"}}}]}, 0x48}}, 0x0) 891.256083ms ago: executing program 0 (id=4589): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) (async, rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002780)=ANY=[], 0xfb5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000080), 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) (async) sendmmsg$sock(r5, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000000000000000000000049001400078008000800000000000800064000000000050001001b00000005000500020000000500040000000000090002009c5b7a310000000015000300686173683a6970", @ANYBLOB, @ANYRES32=r5, @ANYRES16=r5, @ANYRES16=r4, @ANYRES64=r5], 0x64}}, 0x0) writev(r4, &(0x7f0000000180), 0x0) 810.909091ms ago: executing program 4 (id=4590): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x68000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601010000000000c800000700000a0900020073797a31000000000500010007000000100008800c000780080009400000000308000940000000002326ef18f2d320f5f7df07ff361fee95740667f40c37305088158e04bc99ea59660f5b410606640b64a5b37cf487c8d51338373905c26eccea73b31fbac5be299476d698b17ac73b76383380704be7f76073874abc5d1fb404788f9cfa9956169b"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20080) 780.662609ms ago: executing program 2 (id=4591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0xff05, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="03050000000000006d6163766c616e0014000280080003000100000008000100100000009a02f80ea8a6989e4ca415cecc53d0f0074dd409c89e1051c4040873db0789630ca72844ebc43ce39eedc1bff422ea5b760a89e22f697fab8ba0e09bb67469ddf4b8ed816ee352a9240d942b2b72a45d78dc6a57ea7c22192440d811508149eea28a76c4a4a2e6a4793dbb370a9123a37277f1dfbae240ca2aaef45027ac7df008e2d8d15a00"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x4, 0x25ffdbfe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0xff05, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x8b) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="03050000000000006d6163766c616e0014000280080003000100000008000100100000009a02f80ea8a6989e4ca415cecc53d0f0074dd409c89e1051c4040873db0789630ca72844ebc43ce39eedc1bff422ea5b760a89e22f697fab8ba0e09bb67469ddf4b8ed816ee352a9240d942b2b72a45d78dc6a57ea7c22192440d811508149eea28a76c4a4a2e6a4793dbb370a9123a37277f1dfbae240ca2aaef45027ac7df008e2d8d15a00"], 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x4, 0x25ffdbfe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) 675.529387ms ago: executing program 3 (id=4593): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd700000100000010000000c00020002"], 0x54}}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="07012cbd7000fedbdf251f00000008"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 658.931069ms ago: executing program 1 (id=4594): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 469.360144ms ago: executing program 1 (id=4595): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 404.638347ms ago: executing program 2 (id=4596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40024}, 0x40) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x40000) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, 0xb, 0x6, 0x101, 0x0, 0x0, {0xb, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008090}, 0x8000) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="c265487cc7221ba54a1a7c2d85dc0f1ac9e08c5f7c5cdee67f0b275f1b204f30c218b1ba67eae650313242a78efc0a99495a7c23670e15fc6ecf2d2bd4342d37fb46106dbaec6b32f0c96ba4dea176947ca12bd36b", 0x55) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f00000004c0)={&(0x7f0000000440)=[{0x2, 0x0, 0xfffffffffffffff7, 0x71, 0x1, 0x6, 0x7fffffffffffffff, 0x37}, {0x3, 0x0, 0x10000, 0xfffffffffffffffe, 0xfdbe, 0x69dbb4e1, 0xc, 0x101}], 0x2, 0x38, 0x0, 0x9}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1e0, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xb6}, {0x6, 0x16, 0x1e4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x51b}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x1000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x81}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x2b}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x49891}, 0x40000044) socketpair(0x1f, 0x800, 0x91a1, &(0x7f0000000880)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r4, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4009001) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000a40)={r0, 0x1, 0x9, 0x4}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x1404, 0x4, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24001) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000b80)={0xff, 0x1e, '\x00', [@ra={0x5, 0x2, 0x40}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xb, 0xd1, "1c555ea41c5075875d6a0bbbf132ff12c3b209bdd69286604e463e9a91f97c87d8fe5332002fd7e9f85c05c2403d8bb428c31ea4d8bdf2fba68c0ac555098c56a0bb2700e00e2a70ddc2a28adcad77032c81968ab021ecd1494132fcd9c8fd3d1f224de5bc374b5ad7c4435e02af07009842daaf074bc091d551bdef57f9df0e6ee33a1d06fd2edb652e5862ec944783c611962c395cda83eaa810ffe28f721fd2b7928ed557a18d8bb6bfa65beb469ada127598965d30686ad7ef7bc9851d39fb1397d44fe7487106a40c08244e1d6db9"}]}, 0x100) socket$inet6(0xa, 0x2, 0xb2b9) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000c80)={0x0, 0x1000, "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"}, &(0x7f0000001cc0)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001d00)={0x4e, 0x8009, 0x2, 0x7fffffff, r8}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001d40)={r3}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r3) sendmsg$NL80211_CMD_RADAR_DETECT(r9, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x2c, r10, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x48d0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x3c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, &(0x7f0000001fc0)) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000002000), r12) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r10, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x841) 375.96381ms ago: executing program 1 (id=4597): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x140c, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x14) 350.093515ms ago: executing program 3 (id=4598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x14, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000026a9488bcf79237b14ea396800000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000086994e0650300000000000085000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004200000000000000b0000000c000580040001"], 0x20}}, 0x0) 281.180149ms ago: executing program 2 (id=4599): syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @local, @local}, "f35885767f000600"}}}}}, 0x0) 278.225581ms ago: executing program 1 (id=4600): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x17, 0x2, 0xa, 0x3b, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bb3, 0x7f, {0x6, 0x3c, 0x10, 0xf8, 0x0, 0x7f, 0x0, @in=@multicast2, @in6=@mcast1}}, @sadb_lifetime={0x4, 0x3, 0x0, 0x401, 0x0, 0x2}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_key={0xc, 0x9, 0x290, 0x0, "87bc0278a922259915f5ba3d5639300f240f4a31e4c4267017e019a075244ed4fbd9ded25408587857e57a9116a26905f19ebd46056c78fc9bd4a58cf4115bf4971c02658e8d37c8667940e3351860b76211"}, @sadb_key={0x19, 0x9, 0x600, 0x0, "bc5ecdc8c167412d1de28099862b4376afbc475344184f09ffdbf94c5baacbb8f5b1c4308f5cef294a84bfa7d4852a769766ec5b7dce466085ec35fc69c92e5aa0233bfc616c71e8201df8882713c81c90afbf37a1c7cec4577ac33e80b0a3d20414fdefaca41c826f51d8bd37e896fea23668201a3e632b6ebdaef27e52c083da4bb9628e5dce342a0d73578a365b8e7acf45bf386e7bf3868ee49be45deba99664a3688ad58cd3b8043d0878de530d66624951bbaa7a0e3919c4bd87b3ff2d"}, @sadb_x_sec_ctx={0x6, 0x18, 0x2, 0x3e, 0x22, "123238f972df36caf3a379a1f47dd87e00e7fbf3601ec37627693ad1ecbf08932bba"}]}, 0x1d8}}, 0x840) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x9, 0xd9, 0x3, 0x2, 0x0, 0x4070bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10, 0x800) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="8401000021000100000000000000e00000050000100000000000000000fc020000000000000000000000000000008cde54d8a1f902a10dca1c3816ca000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14141e000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000e0000002000000000000000000000000ff0000000135000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ac1e0001000000000000000000000000ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000003c000000000000000800020000000000000000000000ffffe0000001640101000000000000000000000000000a010103000000000000000000000000ac1414aa00000000000000000000000033040000063500000a000800"], 0x184}}, 0x0) 275.851359ms ago: executing program 0 (id=4601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d235f45", 0x5}], 0x1}}], 0x1, 0x40060) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x4, 0xed, 0x1a, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast1, 0x700, 0x8000, 0x7fffffff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x80, 0x8000, 0x8, 0x8, {{0x1a, 0x4, 0x1, 0x3f, 0x68, 0x66, 0x3, 0x8, 0x4, 0x0, @local, @broadcast, {[@generic={0x88, 0x9, "2d7719485a6186"}, @ssrr={0x89, 0xb, 0xc5, [@empty, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x43, 0x0, 0x7, [0x6, 0x100]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x2c, 0xff, 0x0, 0xa, [0x0, 0x80000000, 0x2, 0x101, 0x401, 0x0, 0x7fffffff, 0x3, 0x7, 0x7]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x7, 0xf, 0x18, @dev={0xfe, 0x80, '\x00', 0x3c}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x2, 0x2}}) sendmsg$nl_route_sched(r2, &(0x7f0000003ac0)={&(0x7f0000000040), 0xc, &(0x7f0000003a80)={&(0x7f0000001940)=@newtaction={0x2114, 0x30, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{0x174, 0x1, [@m_skbmod={0x170, 0x12, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="553ae3e64a45"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x400, 0xffffffffffffffff, 0x9, 0x3}}}]}, {0xc7, 0x6, "ac544510b88539f7323e18e13bbb0473fd3fd0115ae186b44305e52af00249863adb32f13dbf6a01bb6130f5bce689806fb258ae0b64bf8157da0d8944a19eacfc8fd8af6180786424965e0d42d3f1b558f2ea08284e8d56e7fd91c3c902e4a51bedd701e26b25a2671375f1c8066038e9cb4df3d7e2cfc970409ad2a22cb8699ea94bb206f39300766fc4e6b37fdba7f37c40dd7943cbd480ce5364ab4e1b0e5d3af2605d0262f633bae42f5d2b21bfeb639fb8ed9bdb0600e206ea48b5a0182b582e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x2fc, 0x1, [@m_mirred={0xe0, 0x18, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x39dd, 0x3, 0x0, 0x6, 0x3}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x1, 0x1, 0x4}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x5, 0xf182, 0x1}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x1, 0x2, 0x8}, 0x4, r6}}]}, {0x34, 0x6, "f62635c8c8d6af8a0b6ae39ef05860d882c72f3de52b90cfc0026441e75c49a5858346a85f71102dbd1f02cb10714f31"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_csum={0x134, 0x1d, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x20000000, 0x6, 0x8262}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x75, 0xa, 0xffffffffcffffff6, 0x101, 0x8001}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0xfff, 0x1, 0x4, 0x3}, 0x1}}]}, {0xb3, 0x6, "702e83764b7dcfdd8201abdcf7bdbaa6dd0713aa61d804943f524b1303a8351c27eb32b63c1a4aec9111dfc469b81bac3d3106f8d268e04746361655d608d91b2a56c5e64aa7f750aabadaf17051c7897f7965708b246b720dd3411e464c93121dd3fc8e59d3867d4cbaee93a93015bda968270c7aac8eb2925290e13de5ebd99263def1bc1167269417cb73646b7870f959baa503a11f1862fe655c91605c4179aea0441b40a100acc661d6de52b7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xe4, 0x1d, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x98, 0x6, "50be512e97f563f3db06d2d03e5b9a8431599cf10d396301eb97773747d7942c0e5ffc8e82dc835c584e56eff165ea41d8fd338a4eda247cbf68dd1c76f4e1e3195e2881e839125a3c9b1f61535b798347085c0d24820719c8da03deed475f314a3de866f40566b98a2f61e2aaeccd1a1f54b06f8ca554ed412197dfab01e43deb73f656c3bd96b9b20e1b7bf0f8eb1871064fee"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x1c90, 0x1, [@m_nat={0x198, 0x19, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0xffffffffffffffff, 0x1, 0x7}, @loopback, @private=0x2b62, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0xfffffff9, 0x0, 0x5, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x0, 0x12, 0xbf}, @multicast1, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x2, 0x6, 0x1000, 0x3}, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7d9e, 0x9, 0x3, 0x5, 0x8}, @multicast2, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x900000, 0xffff, 0x0, 0x4, 0x10001}, @loopback, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0xd, 0x1, 0x1, 0x80000000}, @multicast1, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x5, 0x3, 0xd, 0x3}, @multicast1, @private=0xa010102, 0xff000000}}]}, {0x2d, 0x6, "8e178e1b6e14a2598d7555060258dcfcaf9f5d2e66e62e4e6f9e07433b36ce2e91927bcba3c5a97f71"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x164, 0x6, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x9f9, 0x0, 0x2, 0x3}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0xc43, 0x4, 0x5, 0xd4}, 0xac4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6d9, 0x1, 0x0, 0x6, 0x9}, 0x4b3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0xffffffffffffffff, 0x2, 0x5}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x612, 0x8, 0x3, 0x7, 0x7ff}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x6, 0x7, 0x9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x23a4, 0x4, 0xffffffffffffffff, 0x7fffffff, 0xa}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x5, 0x1bf, 0x1ff}, 0x4}}]}, {0x54, 0x6, "fa35e09cd7cfbaa5f0befbca527e3fd20eba2e3b999f8de262b9d7728f029f54f4dcd0981339f74bd8b134828e6a8a498dfe88c3a293b4e01f19bb9ae50149076e2b7eca363f29fa3916a4182299ce16"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x1990, 0x1e, 0x0, 0x0, {{0xb}, {0x1960, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2ff, 0xffffffffffffffff, 0x80000001, 0x7, 0x6, {0x4, 0x0, 0x6, 0xff0, 0x3, 0x3ff}, {0x0, 0x1, 0x8, 0x262, 0x9, 0x7}, 0x7, 0x8, 0xd}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2f, 0x9, 0x9, 0xff, 0x7, 0x7ff, 0x4, 0x4, 0x3ff, 0x2, 0x9, 0xffff718d, 0x80, 0x5, 0x8, 0x80000001, 0xfffffe00, 0x0, 0x86, 0x4, 0x2, 0x0, 0x3, 0x1, 0x2, 0xa, 0x1ff, 0x401, 0x6, 0x5, 0x80, 0xab7, 0x2, 0x6, 0x3, 0x0, 0xff, 0x9, 0x3, 0x0, 0x2, 0xe, 0xeb56, 0x6, 0xffff8000, 0x101, 0x75, 0x4, 0x4538, 0x4, 0x3, 0x1ee120, 0xfffffffc, 0x7a3, 0x3, 0x20000, 0x101, 0x4, 0x36, 0x9, 0x81, 0x1, 0x2, 0x1000, 0x0, 0x100, 0x300000, 0xb, 0x33bccf01, 0x9, 0x5, 0x1, 0xffffc621, 0x4, 0x20200, 0x2, 0x4, 0x80, 0x7, 0x10001, 0x8, 0x4, 0x1, 0x3, 0x2, 0x4, 0x9, 0xfffffffd, 0xffffffff, 0x10ae1698, 0x8, 0x73f, 0xfffffffb, 0xf5, 0x1, 0x72b4, 0x9, 0x7fff, 0x4, 0x100, 0x60, 0x6, 0x3e, 0x7fffffff, 0x5, 0x80000000, 0x1, 0xbccc300, 0x1, 0x7, 0x2, 0x7f, 0x9, 0x0, 0x1062, 0x40, 0x7, 0x61000, 0xbc99, 0x5, 0x6, 0x5, 0x101, 0x3, 0xc13, 0x9, 0x3, 0x4, 0x8, 0x4, 0x2, 0x1, 0x9, 0x0, 0xffffffff, 0x800, 0xc, 0x7, 0x7, 0x400, 0x6, 0x9, 0x6, 0x0, 0x5, 0xffffff56, 0x7, 0x9, 0x7fffffff, 0xfffffffb, 0x1, 0x0, 0x10000, 0x7, 0x0, 0x44, 0x1, 0x8a0, 0x8, 0x8, 0xfff, 0xbe000000, 0x7f, 0x20e6, 0xd6, 0x2, 0x1, 0x3ff, 0xfffffffe, 0x2, 0xbdf, 0xa4, 0x8a, 0x266, 0x3e, 0x8, 0x7ff, 0x7f, 0x1, 0x1c96, 0x6, 0x100, 0x100, 0x2, 0x9, 0x1, 0x8, 0xfffffffa, 0x7, 0x101, 0x0, 0xfffffc01, 0x7fffffff, 0x8126, 0x4, 0x7, 0x756, 0x5, 0x2, 0x1, 0x6, 0x9, 0x2, 0x400, 0x0, 0x2, 0x8, 0x10, 0x400, 0x123e, 0xf8000000, 0x10001, 0x4, 0x401, 0xd, 0x4, 0x6, 0x1, 0x800, 0xfffffffc, 0x80, 0x5, 0x0, 0xfff, 0x1, 0x1, 0x7, 0x7, 0x48, 0x1, 0x3, 0x8ded, 0xb80000, 0x7, 0x5, 0xe2d, 0x3ff, 0xc, 0x7f, 0x5f, 0x81, 0x6, 0x8, 0x3, 0xffff, 0x5, 0x6, 0x6, 0x9, 0x4, 0x4, 0x6, 0x7, 0x2, 0x8]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x574a1bcf, 0x14000, 0x7d, 0x101, 0x5, 0x3, 0x0, 0x430, 0x4, 0x467, 0x3, 0x80000001, 0x8, 0x0, 0x1, 0xffffffff, 0x8, 0x7, 0x10, 0x7, 0x4, 0x5, 0x5, 0x0, 0x5, 0x6, 0x1, 0x6, 0x7, 0x8, 0xfffffc00, 0x1, 0xa, 0xfff, 0xd53, 0x6, 0x9, 0x8, 0x5f7dabc3, 0x4, 0xcbfb, 0x8, 0x2f8b, 0x8, 0x5, 0xa7c, 0x2, 0x7a, 0x1000, 0x40, 0x800, 0x4, 0x1, 0xffffffff, 0x8000, 0x1, 0xffffffff, 0xb9, 0x8f92, 0x101, 0x9, 0xffff3223, 0x5, 0xdd0, 0x1, 0x8, 0x7, 0x7, 0x7, 0x101, 0x1, 0x5, 0x7fff, 0x2, 0x4, 0x3, 0x4, 0xf84, 0x6, 0x8, 0x3, 0x100, 0x1000, 0x4, 0xf7f0, 0x200, 0x3ea, 0xbf, 0x4, 0x5, 0x10001, 0x9, 0x8, 0x60000000, 0x8, 0x5, 0xd, 0xfffffffe, 0x8, 0x7, 0x9, 0x3, 0x3ff, 0x7, 0x3, 0x4e, 0x4, 0x7fff, 0x6e, 0xd, 0x80000001, 0x6, 0x0, 0xff7f, 0x40, 0x6, 0x6, 0x10001, 0x0, 0x7, 0x7, 0x1, 0x7, 0xffffff80, 0x2603, 0xa1, 0x4, 0x5, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x8, 0x7, 0x8cf9, 0x9, 0x8, 0x1, 0x4, 0x4, 0x400, 0x8000, 0x0, 0x0, 0x401, 0x1, 0x46, 0x10, 0x1, 0x3, 0x7, 0xe9f, 0x10001, 0x8, 0x5461, 0x2, 0x8, 0x1, 0x7, 0x2, 0x3, 0x8, 0x8000, 0x1, 0x0, 0x3, 0x8, 0x1, 0x0, 0x5, 0x7, 0x0, 0x0, 0xfff, 0x9b, 0x5, 0x6, 0x7ff, 0xea7, 0x2, 0x2, 0x8, 0x800, 0x5cc45fe2, 0x8, 0x8, 0x8, 0x5, 0x1, 0x0, 0x0, 0x4, 0x9, 0x6, 0x8, 0x7, 0x5, 0x1, 0x3, 0x0, 0x9, 0x5, 0x101, 0x8, 0x5, 0x5, 0x0, 0x6, 0xd, 0x7f, 0x4, 0x7, 0x0, 0x11, 0x0, 0x6, 0x5, 0x0, 0x1a2, 0x2, 0x3, 0x1, 0x9, 0x2, 0x0, 0xd3c1, 0x4, 0x3, 0x4, 0x1ff, 0x6, 0xffffffff, 0x8, 0x3, 0x1, 0xfffffffb, 0x6, 0x7ff, 0x81, 0x809, 0x800, 0x4, 0x4, 0x7fff, 0x8, 0xa49e, 0x6, 0x0, 0xc3, 0x4, 0x80000000, 0x5, 0x0, 0x8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0xfffffffb, 0x5, 0x8, 0x9, 0x3, 0x8, 0x0, 0x4, 0x3, 0xfffffffc, 0x7, 0x6, 0xff, 0xf, 0x8, 0x2, 0xa08b, 0x8, 0x2, 0x2, 0xffffffff, 0x7f, 0x0, 0xfffff91c, 0x5859, 0x2e2, 0x7fff, 0x8, 0x832, 0x2, 0x1, 0x9, 0x8, 0x4, 0xff, 0x5, 0x3, 0x7, 0x8, 0x794a, 0x6, 0x4, 0x1, 0x7, 0xfffffff7, 0x2, 0x4, 0x3, 0x4, 0x81, 0x3, 0x3, 0x395, 0x5, 0x8000, 0x8, 0x5, 0x0, 0x7, 0x40, 0x6, 0x9, 0x1792ee01, 0x6a, 0x1, 0x3, 0xff, 0x24, 0x4, 0x5, 0xfffffff9, 0x0, 0x7, 0x0, 0x8, 0x9, 0x1, 0x9, 0x1, 0x1, 0x1, 0xc044, 0xeab, 0x10000, 0xac5, 0x6, 0x1, 0x4, 0x80, 0x1000000, 0x4, 0x2, 0x70ec, 0x6c40, 0x10, 0xc9f2, 0x0, 0xbc34, 0xfff, 0x0, 0x7, 0x1, 0xa22, 0x3ff, 0xa, 0x401, 0x2, 0x7, 0x7, 0x7, 0x1, 0x2, 0x6, 0x3, 0xff, 0x8, 0x0, 0x9, 0xffffffff, 0x100, 0x2, 0x3, 0x7, 0xaea, 0x10001, 0xc3f9, 0xd, 0x9, 0x6, 0x84c, 0xe3ff, 0x1, 0x6, 0x7209, 0xd, 0xe, 0x8, 0xffff, 0xd, 0x1f, 0x5, 0x2, 0x1a2, 0xfffffffc, 0xffffffff, 0xffff, 0x1, 0x80, 0x100, 0x1, 0x1, 0x10, 0x800, 0xff, 0x101, 0x2, 0x1, 0x6, 0xfffffffb, 0x0, 0xb, 0xa, 0x9, 0x4, 0x5, 0x488e, 0x5, 0x7fff, 0x401, 0xff, 0x3, 0x8, 0xfffffdc0, 0x6, 0x8000, 0x9, 0x4, 0x1, 0x4, 0x1, 0x6, 0x4, 0xffffa9b8, 0xc, 0x8000, 0x53bba802, 0x2, 0x101, 0xb2a, 0x8, 0x5ef5, 0x6, 0x4, 0x0, 0x4dd, 0x80000001, 0x8001, 0x6c6d, 0x10, 0xab7, 0x1ff, 0xf49, 0x39b1, 0x0, 0x3, 0x3, 0x8, 0x6, 0xefe6, 0x5, 0x1, 0x7, 0x5, 0x5, 0x28ff, 0x7, 0x5, 0x1, 0x9, 0x41e8293b, 0x7ff, 0x5, 0x7fffffff, 0xd, 0x80, 0x5f2, 0x0, 0x7f, 0x5, 0xe1b, 0x7b9f, 0x634aff99, 0x0, 0x2, 0x6, 0x7de6, 0x9, 0xeb, 0x3, 0x8001, 0x8, 0x2, 0x8, 0x73e6, 0xfff, 0x8000, 0xfff, 0x1000, 0x3, 0x2, 0x6408, 0xa, 0x9, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xa64, 0x6, 0xf3, 0xe191, 0x8, 0xffffff0d, 0x8, 0xffffffff, 0x9, 0x7, 0x2877, 0x4, 0xe12d, 0x3, 0x2, 0xd, 0x2452, 0xd, 0x5, 0x8, 0x2, 0x4f23, 0x2, 0xfffffff7, 0x0, 0x7, 0xfffffffa, 0x9cb3, 0x7f, 0xfff, 0x7, 0x1, 0x5620, 0x0, 0x3, 0x7, 0x8001, 0x4, 0x1, 0x0, 0xffffffff, 0x40, 0x4, 0x7, 0x4, 0x6b36, 0x8ad8, 0x6, 0x0, 0x2, 0x4, 0x7ff, 0x0, 0x8, 0x3, 0x0, 0x7, 0x9, 0x3, 0x2, 0x3, 0x3ff, 0x9, 0x0, 0x2c3898df, 0x5, 0x8, 0x8, 0x5, 0x0, 0x4, 0x8, 0x800, 0x9, 0x10001, 0x2, 0xb4, 0x400, 0xbd, 0x10, 0x0, 0x3d, 0x9, 0x3, 0xffffffff, 0x144, 0x5, 0x5404, 0x7, 0xaf7d, 0x1af, 0xfffffff9, 0x9, 0x0, 0x2, 0x5, 0x7, 0x0, 0x200, 0x4, 0xffff, 0x9, 0x7, 0x8, 0xe1, 0x6, 0x2, 0x10001, 0xffff, 0x400, 0xff, 0x10, 0x2, 0x5, 0x1, 0x2, 0x0, 0x8, 0x9, 0x7, 0x400, 0x3, 0x4, 0xc, 0x1, 0x9, 0x7f, 0x7fff, 0x7f, 0x5, 0xbae, 0x10001, 0x122, 0x9, 0x0, 0xfffffff7, 0x9e, 0x7f, 0x8, 0x5048, 0x8, 0x8, 0x8, 0xc46, 0xe08, 0xfffffff1, 0x3, 0x6, 0x9, 0x6, 0x0, 0x4, 0x0, 0xfff, 0x1ff, 0x7e, 0x8, 0x2, 0x1, 0x4, 0x5, 0x4, 0x3ff, 0x6, 0xfa, 0x8819, 0xf9b5, 0x7, 0x9, 0x3, 0x81, 0x2, 0x0, 0x1, 0x0, 0x2, 0x100, 0x2c, 0x1, 0x2, 0x3, 0x5e, 0x1c, 0x7, 0x0, 0x0, 0x10000, 0x8, 0x7, 0x309, 0x186, 0x3, 0xd, 0x100000, 0x5, 0x4, 0xba, 0x3, 0x4, 0x1c9f, 0x10, 0x10001, 0x2, 0x9, 0xffffff00, 0xb3e8, 0xc17b, 0x800, 0x3, 0x2, 0x9, 0xfffffff7, 0x8, 0x8000, 0x4, 0x933, 0x5, 0x6, 0x1f, 0x63, 0x6, 0x7, 0xef, 0x0, 0xd3d, 0x6, 0xb, 0x1, 0x3, 0x0, 0x3, 0x401, 0x9, 0x0, 0xf7c2, 0x81, 0x7, 0xffffff22, 0x8, 0x8, 0x9, 0x2, 0xe, 0xa7a4, 0xfffffff7, 0x401, 0x4, 0x4, 0x3, 0x8, 0x1c40, 0x5, 0x9, 0x7, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0x1, 0x2, 0x34f2, 0x7, 0x7ff, 0x4, 0x10001, 0x9, 0x9, 0x92, 0x5, 0x10, 0x2, 0x80, 0x80000000, 0x688, 0xe9c2, 0x2, 0x4, 0x0, 0x5, 0x100, 0x7, 0xf, 0x1, 0x6, 0x0, 0x2, 0xff, 0x8, 0x10000, 0x800, 0x2, 0x7, 0x4, 0x9, 0xffff, 0x7, 0x8d, 0x7fff, 0x6965f1f9, 0x2, 0x5, 0x2, 0x6, 0x6, 0x5, 0x0, 0xffff, 0x401, 0x8, 0x832, 0xffffff6d, 0x7fffffff, 0x2, 0x80, 0xc92c, 0x8, 0xe, 0x9, 0x4, 0x1, 0x0, 0xa, 0x80000001, 0x6, 0x8001, 0x8, 0x1, 0x8, 0xffffffff, 0x6, 0x4, 0x9, 0x3, 0x4, 0x4, 0xb0, 0x6771, 0x5, 0x920d, 0x1, 0x8, 0x0, 0x1, 0x3, 0x1ff, 0xc96c, 0x8, 0xf, 0x6, 0x4, 0x6, 0x9, 0x3, 0x80000000, 0x9, 0x4, 0x7fffffff, 0x0, 0x8, 0x5, 0xff, 0x4, 0x10000, 0x7aa, 0x6, 0xfffffffa, 0x0, 0xff, 0xa9, 0x3, 0x21f, 0x7f, 0x2, 0x5, 0xcb8, 0x7, 0x7fffffff, 0x0, 0x8, 0x1, 0x8, 0x1, 0x101, 0x2, 0x10000, 0x175, 0x9, 0x3, 0xffffffff, 0x6, 0x6, 0x9, 0x6c5f, 0xf2de, 0xb, 0x0, 0x4, 0x0, 0x6, 0x83b, 0x9, 0x81, 0x2, 0x4, 0x4, 0x1, 0xb, 0x400, 0x7, 0x3, 0xfffffffe, 0x1, 0x8000, 0xbde, 0xd, 0x9255, 0xaca, 0x1, 0x1, 0x0, 0x8, 0x5, 0x400, 0x7, 0x4, 0x0, 0x1, 0xc7, 0x8, 0x2, 0x8, 0xd8, 0xffff7f69, 0x2, 0x8, 0x9, 0x7ff, 0x7fff, 0x64f2, 0x6, 0x800, 0x2, 0x9, 0x7, 0x9, 0x80000001, 0x7, 0xd12, 0x8, 0x10001, 0x10, 0x5, 0x9, 0xe6, 0x800, 0xa83, 0x0, 0x200, 0x80000000, 0x0, 0x9e3, 0x5, 0x2f, 0x5, 0x9, 0x1ff, 0x6, 0x7, 0xa, 0x1, 0x4, 0x7, 0xffffffff, 0x0, 0x6, 0x5, 0x7, 0x40, 0x8, 0x14, 0x0, 0x7, 0x8000, 0xfffffffa, 0x8, 0x7fff, 0xb0, 0x9, 0x7205, 0x7, 0x0, 0x4, 0x7, 0xfffffffb, 0x7fff, 0xfffffffe, 0x6, 0x4, 0x9e88, 0x9e4f, 0x8000, 0x8, 0x9, 0x3, 0x80000001, 0x6, 0x8, 0x5a0d, 0x6, 0x1, 0x400, 0x10]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9, 0xfffffeff, 0x7, 0x6, 0x6, 0x7fff, 0x6, 0xe, 0x11, 0xffffffff, 0xb, 0x6, 0x8, 0xf9, 0x81, 0xfffffffa, 0x101, 0x80000001, 0x2, 0x7fff, 0x1, 0x9, 0x7f, 0x1, 0x9, 0x7fffffff, 0x5, 0x61, 0x6af0, 0x8, 0x2ce, 0x5, 0x21b0, 0x81a5, 0x7, 0xd, 0xffffffc0, 0x6, 0x5, 0x2, 0x5, 0x33b2, 0xef8a, 0x8, 0x83bb, 0x5, 0x80, 0x6, 0x1, 0x3, 0x0, 0x6, 0x667, 0x1, 0xfffffff5, 0x10001, 0x0, 0x1, 0x1, 0x9c26, 0x3, 0x9, 0x0, 0x0, 0x2, 0xd, 0x9, 0x2, 0xd49e, 0x8001, 0x7, 0xffff2236, 0x90a1, 0x240, 0x4, 0x10, 0x2, 0x2, 0x2, 0x4a2aa3be, 0xffffffff, 0x8, 0x3, 0x2, 0xc4, 0x2, 0x0, 0x4, 0xfffffe00, 0x4, 0x8, 0xfff, 0x5, 0x3, 0xfffffc00, 0x0, 0x0, 0x3, 0x100, 0x4, 0xb, 0x5, 0x1f, 0x5, 0x3, 0xfffff13a, 0x0, 0x6, 0x3, 0x3ff, 0x4, 0x7, 0xffffff05, 0x7, 0x9, 0x1, 0x7, 0xffff2882, 0x1, 0x2, 0x4, 0x6, 0x200, 0x81, 0x8, 0x1000, 0xfcca, 0x4, 0x1, 0x9, 0x4, 0x9, 0x30, 0x897e, 0x7, 0x0, 0xfffffffa, 0x10000, 0x1, 0xfffffbff, 0x4, 0x1, 0x6, 0x5, 0xa, 0xf, 0x3c, 0x4, 0x76, 0x3, 0x755, 0x1, 0x8b5, 0x3, 0x7b72b7, 0x1, 0x0, 0x2, 0x7, 0x4, 0xe, 0x7, 0x100, 0xc, 0x7, 0x3, 0x7fffffff, 0x5, 0x80, 0x80000000, 0x9, 0x2, 0x0, 0x5, 0x5, 0x4, 0x8001, 0xa, 0x0, 0x7, 0xd, 0xa10, 0xfc87, 0x8001, 0xf2b, 0xe405, 0x6, 0x76b8, 0x6, 0x3, 0x3, 0x800, 0x10000, 0x0, 0x109, 0x1, 0xefd9, 0x4, 0x7, 0x1, 0x4, 0x101, 0x1, 0xfffffffd, 0x7608c0b, 0x4, 0x3, 0x40000000, 0x7fffffff, 0x3, 0x0, 0x6, 0x17, 0xb, 0x3, 0x10001, 0x69, 0x2, 0x0, 0x7, 0x80000001, 0x0, 0x2a8, 0x2, 0x6, 0x64, 0x44, 0x7, 0x8, 0x0, 0xfffffff8, 0x8, 0x5, 0x2, 0x80000000, 0xfffffe00, 0x6, 0x3, 0x0, 0x97, 0x3, 0x3, 0x4, 0x0, 0x4, 0xb325, 0x7, 0x7, 0x9, 0x2, 0x1, 0x33a1, 0x7ff, 0x2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1e00000}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x800, 0x30, 0x4, {0xd, 0x2, 0x6, 0x3, 0x2, 0x7}, {0x2, 0x0, 0x4, 0x8, 0x9, 0x721}, 0x1, 0xfffffffe, 0x80000001}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0xa, 0xa, 0x3000, {0x7, 0x1, 0x9, 0xffff, 0x6, 0x8}, {0x2, 0x0, 0x40, 0x6, 0x5, 0x1}, 0x0, 0x9c7d, 0x3}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2ea2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]]}, {0x6, 0x6, "e248"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x2114}, 0x1, 0x0, 0x0, 0x4008808}, 0x20000000) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x7}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151d0100000000002800128009000100766c616e000000001800028006000100fe0f00000c0002001a0000001a00000008000500", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 228.15235ms ago: executing program 3 (id=4602): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0x3}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x2, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0xd, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r6, 0x58, &(0x7f0000000340)}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @broadcast, @val={@void, {0x8100, 0x7}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x1c, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x4, 0xf, @remote, 0x5, 0x1, 0x0, 0x5}}}}}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r7, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x2000) 170.826301ms ago: executing program 2 (id=4603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1629d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 123.522953ms ago: executing program 1 (id=4604): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@call], {0x95, 0x0, 0x5a5}}, 0x0, 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e381", 0xd}], 0x1}}], 0x1, 0x24044015) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x6e922}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @void}, 0x10) 113.635175ms ago: executing program 0 (id=4605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 51.09911ms ago: executing program 0 (id=4606): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000d00)={0x0, 0xfffffffd}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) 1.199332ms ago: executing program 2 (id=4607): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x40, 0xee, 0x58, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0xfffffff9}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff05, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x1, 0x7, 0x2, 0x2, r0, 0x2, '\x00', r1, r3, 0x5, 0x4, 0x5, 0x2}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000200)=0x3, 0x4) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) 583.797µs ago: executing program 3 (id=4608): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004000000080000000102000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r9, 0x84, 0x14, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x78400500}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfff}, @NFACCT_QUOTA={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8840) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r8}, 0x38) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r10}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x1d145aa8ea516c49}, 0x38) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a8008"], 0x30}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r13, @ANYBLOB="0a000100aa941da21805"], 0x48}}, 0x0) 0s ago: executing program 1 (id=4609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) gettid() setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140003800800024000000009080001400001"], 0xc8}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0xe8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xc0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x0, 0x5, 0x7fff}, @WGPEER_A_ALLOWEDIPS={0x4c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, {0x3, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) kernel console output (not intermixed with test programs): bearer [ 350.595019][T14328] tipc: Resetting bearer [ 350.672122][T14328] tipc: Disabling bearer [ 350.709567][T14342] netlink: 'syz.1.2559': attribute type 1 has an invalid length. [ 350.785448][T14351] netlink: 'syz.4.2561': attribute type 1 has an invalid length. [ 350.804684][T14342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.887628][T14351] bond12: (slave bridge8): making interface the new active one [ 350.899440][T14351] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 350.914717][T14342] syzkaller0: entered promiscuous mode [ 350.920194][T14342] syzkaller0: entered allmulticast mode [ 351.211756][T14366] netlink: 'syz.2.2568': attribute type 32 has an invalid length. [ 352.075078][T14418] syzkaller0: entered promiscuous mode [ 352.088585][T14418] syzkaller0: entered allmulticast mode [ 352.520003][T14436] __nla_validate_parse: 11 callbacks suppressed [ 352.520088][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 352.535569][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2592'. [ 352.570010][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'. [ 352.665463][T14443] FAULT_INJECTION: forcing a failure. [ 352.665463][T14443] name failslab, interval 1, probability 0, space 0, times 0 [ 352.679296][T14443] CPU: 0 UID: 0 PID: 14443 Comm: syz.4.2594 Not tainted syzkaller #0 PREEMPT(full) [ 352.679324][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.679337][T14443] Call Trace: [ 352.679412][T14443] [ 352.679476][T14443] dump_stack_lvl+0xe8/0x150 [ 352.679628][T14443] should_fail_ex+0x40c/0x560 [ 352.679724][T14443] should_failslab+0xa8/0x100 [ 352.679779][T14443] __kmalloc_noprof+0xfe/0x720 [ 352.679817][T14443] ? tomoyo_encode+0x2ad/0x570 [ 352.679884][T14443] ? tomoyo_encode+0x2ad/0x570 [ 352.679913][T14443] tomoyo_encode+0x2ad/0x570 [ 352.679942][T14443] tomoyo_realpath_from_path+0x5fa/0x640 [ 352.679982][T14443] ? tomoyo_path_number_perm+0x219/0x5f0 [ 352.680044][T14443] tomoyo_path_number_perm+0x246/0x5f0 [ 352.680075][T14443] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 352.680103][T14443] ? __lock_acquire+0x683/0x2cf0 [ 352.680168][T14443] ? hook_file_ioctl+0x1f0/0x5f0 [ 352.680258][T14443] ? __fget_files+0x2a/0x420 [ 352.680320][T14443] ? __fget_files+0x2a/0x420 [ 352.680345][T14443] ? __fget_files+0x3a2/0x420 [ 352.680370][T14443] ? __fget_files+0x2a/0x420 [ 352.680402][T14443] security_file_ioctl+0xc3/0x2a0 [ 352.680459][T14443] __se_sys_ioctl+0x47/0x170 [ 352.680479][T14443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.680518][T14443] do_syscall_64+0x174/0x580 [ 352.680609][T14443] ? trace_irq_disable+0x3b/0x140 [ 352.680654][T14443] ? clear_bhb_loop+0x40/0x90 [ 352.680679][T14443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.680700][T14443] RIP: 0033:0x7fb942f9de59 [ 352.680744][T14443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.680763][T14443] RSP: 002b:00007fb943e45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.680792][T14443] RAX: ffffffffffffffda RBX: 00007fb943225fa0 RCX: 00007fb942f9de59 [ 352.680808][T14443] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004 [ 352.680821][T14443] RBP: 00007fb943e45090 R08: 0000000000000000 R09: 0000000000000000 [ 352.680832][T14443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.680845][T14443] R13: 00007fb943226038 R14: 00007fb943225fa0 R15: 00007fff70020098 [ 352.680878][T14443] [ 352.681081][T14443] ERROR: Out of memory at tomoyo_realpath_from_path. [ 352.838655][T14445] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2596'. [ 352.974095][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'. [ 353.296316][T14464] netlink: zone id is out of range [ 353.302036][T14464] netlink: set zone limit has 4 unknown bytes [ 353.444407][T14469] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2605'. [ 353.480171][T14470] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2605'. [ 353.494225][T14467] netlink: 'syz.1.2604': attribute type 21 has an invalid length. [ 353.521734][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2604'. [ 353.583399][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2606'. [ 353.599271][T14467] netlink: 'syz.1.2604': attribute type 21 has an invalid length. [ 353.628875][T14272] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.641637][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2604'. [ 353.664252][T14272] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.684908][T14272] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.706103][T14467] syzkaller0: entered promiscuous mode [ 353.715761][T14467] syzkaller0: entered allmulticast mode [ 353.735575][T14272] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.843458][T14490] openvswitch: netlink: Message has 24 unknown bytes. [ 354.389158][T14517] openvswitch: netlink: Message has 24 unknown bytes. [ 354.418264][T14518] netlink: 'syz.2.2623': attribute type 21 has an invalid length. [ 354.485859][T14518] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 354.711354][T14542] FAULT_INJECTION: forcing a failure. [ 354.711354][T14542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.725132][T14542] CPU: 0 UID: 0 PID: 14542 Comm: syz.1.2632 Not tainted syzkaller #0 PREEMPT(full) [ 354.725160][T14542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.725173][T14542] Call Trace: [ 354.725183][T14542] [ 354.725192][T14542] dump_stack_lvl+0xe8/0x150 [ 354.725230][T14542] should_fail_ex+0x40c/0x560 [ 354.725260][T14542] _copy_from_user+0x2d/0xb0 [ 354.725385][T14542] generic_map_update_batch+0x651/0x9a0 [ 354.725417][T14542] ? __pfx_generic_map_update_batch+0x10/0x10 [ 354.725441][T14542] ? __fget_files+0x2a/0x420 [ 354.725475][T14542] ? __pfx_generic_map_update_batch+0x10/0x10 [ 354.725497][T14542] bpf_map_do_batch+0x391/0x630 [ 354.725533][T14542] __sys_bpf+0xbe5/0xd90 [ 354.725568][T14542] ? __pfx___sys_bpf+0x10/0x10 [ 354.725613][T14542] ? __fget_files+0x2a/0x420 [ 354.725658][T14542] ? ksys_write+0x242/0x270 [ 354.725698][T14542] ? __pfx_ksys_write+0x10/0x10 [ 354.725736][T14542] __x64_sys_bpf+0xba/0xd0 [ 354.725760][T14542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.725783][T14542] do_syscall_64+0x174/0x580 [ 354.725811][T14542] ? trace_irq_disable+0x3b/0x140 [ 354.725837][T14542] ? clear_bhb_loop+0x40/0x90 [ 354.725864][T14542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.725884][T14542] RIP: 0033:0x7f832119de59 [ 354.725943][T14542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.725977][T14542] RSP: 002b:00007f832200d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.725999][T14542] RAX: ffffffffffffffda RBX: 00007f8321425fa0 RCX: 00007f832119de59 [ 354.726014][T14542] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 354.726027][T14542] RBP: 00007f832200d090 R08: 0000000000000000 R09: 0000000000000000 [ 354.726040][T14542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.726052][T14542] R13: 00007f8321426038 R14: 00007f8321425fa0 R15: 00007ffd0d940508 [ 354.726085][T14542] [ 355.031509][T14551] openvswitch: netlink: Message has 24 unknown bytes. [ 355.523134][T14586] netlink: 'syz.0.2652': attribute type 29 has an invalid length. [ 355.607971][T14595] netlink: 'syz.3.2646': attribute type 64 has an invalid length. [ 356.444240][T14658] openvswitch: netlink: Message has 24 unknown bytes. [ 356.622284][T14666] xt_l2tp: invalid flags combination: 0 [ 356.669356][T14674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 356.679765][T14674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 356.693091][T14674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 356.723862][T14674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 356.734003][T14674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 356.747032][T14674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 356.758088][T14674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 356.768207][T14674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 356.778314][T14674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 356.788422][T14674] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 357.779150][T14748] __nla_validate_parse: 28 callbacks suppressed [ 357.779172][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'. [ 357.821684][T14756] netlink: 'syz.2.2715': attribute type 3 has an invalid length. [ 357.829508][T14756] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2715'. [ 358.079241][T14758] syzkaller0: entered promiscuous mode [ 358.092705][T14758] syzkaller0: entered allmulticast mode [ 358.113522][ T6074] syzkaller0: tun_net_xmit 48 [ 359.735904][T14786] syzkaller0: entered promiscuous mode [ 359.741433][T14786] syzkaller0: entered allmulticast mode [ 359.903577][T14804] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2730'. [ 360.094427][T14813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2733'. [ 360.103601][T14813] netlink: 'syz.3.2733': attribute type 7 has an invalid length. [ 360.111386][T14813] netlink: 'syz.3.2733': attribute type 8 has an invalid length. [ 360.119649][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'. [ 360.408027][T14824] netlink: 'syz.2.2736': attribute type 2 has an invalid length. [ 360.416262][T14824] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2736'. [ 360.495548][T14825] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2736'. [ 360.505085][T14828] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2736'. [ 361.679463][T14813] syz_tun: entered promiscuous mode [ 361.686310][T14813] syz_tun: left promiscuous mode [ 362.295417][T14872] bridge_slave_0 (unregistering): left allmulticast mode [ 362.310265][T14872] bridge_slave_0 (unregistering): left promiscuous mode [ 362.317965][T14872] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.619990][T14895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2751'. [ 362.629012][T14895] netlink: 'syz.1.2751': attribute type 7 has an invalid length. [ 362.636758][T14895] netlink: 'syz.1.2751': attribute type 8 has an invalid length. [ 362.691205][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2751'. [ 363.089672][T14914] bond0: entered promiscuous mode [ 363.095917][T14914] bond6: entered promiscuous mode [ 363.105022][T14894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.226520][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2758'. [ 363.298630][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2761'. [ 363.300786][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2760'. [ 363.386827][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2760'. [ 363.395732][T14921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2760'. [ 363.736613][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'. [ 364.033460][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2776'. [ 364.047707][T14968] openvswitch: netlink: Flow actions attr not present in new flow. [ 364.166589][T14973] ipt_REJECT: ECHOREPLY no longer supported. [ 364.173607][T14974] ipt_REJECT: ECHOREPLY no longer supported. [ 364.306987][T14980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2781'. [ 364.331463][T14980] netlink: 'syz.2.2781': attribute type 7 has an invalid length. [ 364.342276][T14980] netlink: 'syz.2.2781': attribute type 8 has an invalid length. [ 364.350801][T14980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2781'. [ 364.483225][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 364.533932][T14987] netlink: 'syz.3.2785': attribute type 16 has an invalid length. [ 364.779076][T14978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.571492][T14991] syz.4.2787 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 365.582765][T14991] CPU: 1 UID: 0 PID: 14991 Comm: syz.4.2787 Not tainted syzkaller #0 PREEMPT(full) [ 365.582804][T14991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.582829][T14991] Call Trace: [ 365.582838][T14991] [ 365.582846][T14991] dump_stack_lvl+0xe8/0x150 [ 365.582879][T14991] dump_header+0xd3/0x4b0 [ 365.582923][T14991] oom_kill_process+0x3ab/0x970 [ 365.582956][T14991] out_of_memory+0x1064/0x1480 [ 365.582973][T14991] ? try_charge_memcg+0xbca/0x1590 [ 365.583011][T14991] ? __pfx_out_of_memory+0x10/0x10 [ 365.583027][T14991] ? do_raw_spin_unlock+0xf5/0x210 [ 365.583057][T14991] try_charge_memcg+0xc74/0x1590 [ 365.583098][T14991] ? __pfx_try_charge_memcg+0x10/0x10 [ 365.583122][T14991] ? percpu_ref_tryget+0x15/0x180 [ 365.583167][T14991] ? charge_memcg+0x20/0x2b0 [ 365.583194][T14991] charge_memcg+0x19c/0x2b0 [ 365.583220][T14991] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 365.583244][T14991] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 365.583273][T14991] swap_cache_alloc_folio+0x4de/0x990 [ 365.583307][T14991] swap_cache_read_folio+0x44/0x120 [ 365.583348][T14991] swap_cluster_readahead+0x3a0/0x640 [ 365.583377][T14991] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 365.583413][T14991] ? get_vma_policy+0x27b/0x3c0 [ 365.583446][T14991] swapin_readahead+0x19a/0xc10 [ 365.583471][T14991] ? swap_table_get+0x1e/0x260 [ 365.583492][T14991] ? swap_table_get+0x1e/0x260 [ 365.583514][T14991] ? __pfx_swapin_readahead+0x10/0x10 [ 365.583537][T14991] ? swap_table_get+0x1e/0x260 [ 365.583556][T14991] ? swap_table_get+0x1e/0x260 [ 365.583573][T14991] ? swap_table_get+0x1e/0x260 [ 365.583593][T14991] ? swap_table_get+0x216/0x260 [ 365.583615][T14991] ? swap_cache_get_folio+0x2e7/0x2f0 [ 365.583642][T14991] do_swap_page+0x455/0x5060 [ 365.583676][T14991] ? __pte_offset_map+0x29/0x240 [ 365.583704][T14991] ? __lock_acquire+0x683/0x2cf0 [ 365.583727][T14991] ? do_swap_page+0x124/0x5060 [ 365.583746][T14991] ? __pfx_do_swap_page+0x10/0x10 [ 365.583783][T14991] ? __pte_offset_map+0x1ae/0x240 [ 365.583807][T14991] ? pte_offset_map_rw_nolock+0xea/0x160 [ 365.583832][T14991] handle_mm_fault+0x124c/0x3080 [ 365.583868][T14991] ? handle_mm_fault+0xec/0x3080 [ 365.583898][T14991] ? __pfx_handle_mm_fault+0x10/0x10 [ 365.583917][T14991] ? lock_vma_under_rcu+0x45a/0x500 [ 365.583968][T14991] do_user_addr_fault+0xa4d/0x1340 [ 365.584025][T14991] ? trace_page_fault_user+0x84/0x1e0 [ 365.584056][T14991] exc_page_fault+0x6a/0xc0 [ 365.584137][T14991] asm_exc_page_fault+0x26/0x30 [ 365.584156][T14991] RIP: 0033:0x7fb942e6659e [ 365.584175][T14991] Code: e9 27 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 5b ba 3b 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 365.584192][T14991] RSP: 002b:00007fff70020190 EFLAGS: 00010206 [ 365.584210][T14991] RAX: 00007fb943225fa0 RBX: 00007fb943225fa0 RCX: 0000000000000026 [ 365.584224][T14991] RDX: 0000000000000001 RSI: 00007fb943226038 RDI: 0000000000000003 [ 365.584236][T14991] RBP: 00007fb943227da0 R08: 0000000000000000 R09: 0000000000000001 [ 365.584248][T14991] R10: 0000000000000026 R11: 0000000000000246 R12: 0000000000059380 [ 365.584260][T14991] R13: 00007fb94322609c R14: 00000000000590b4 R15: 00007fb943226090 [ 365.584292][T14991] [ 365.584304][T14991] memory: usage 307200kB, limit 307200kB, failcnt 566 [ 366.016189][T14991] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 366.024492][T14991] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 366.031798][T14991] Memory cgroup stats for /syz4: [ 366.032178][T14991] cache 0 [ 366.040081][T14991] rss 0 [ 366.042858][T14991] rss_huge 0 [ 366.046075][T14991] shmem 0 [ 366.049039][T14991] mapped_file 0 [ 366.052512][T14991] dirty 0 [ 366.055482][T14991] writeback 0 [ 366.058777][T14991] workingset_refault_anon 7 [ 366.063329][T14991] workingset_refault_file 0 [ 366.067847][T14991] swap 176128 [ 366.071147][T14991] swapcached 233472 [ 366.074962][T14991] pgpgin 51303 [ 366.101402][T14991] pgpgout 51296 [ 366.104912][T14991] pgfault 95934 [ 366.108423][T14991] pgmajfault 4 [ 366.111808][T14991] inactive_anon 4096 [ 366.115733][T14991] active_anon 8192 [ 366.119470][T14991] inactive_file 0 [ 366.123135][T14991] active_file 0 [ 366.126618][T14991] unevictable 0 [ 366.130119][T14991] hierarchical_memory_limit 314572800 [ 366.135513][T14991] hierarchical_memsw_limit 9223372036854771712 [ 366.141689][T14991] total_cache 0 [ 366.145180][T14991] total_rss 0 [ 366.148481][T14991] total_rss_huge 0 [ 366.152217][T14991] total_shmem 0 [ 366.155689][T14991] total_mapped_file 0 [ 366.159688][T14991] total_dirty 0 [ 366.163164][T14991] total_writeback 0 [ 366.166986][T14991] total_workingset_refault_anon 7 [ 366.172028][T14991] total_workingset_refault_file 0 [ 366.177074][T14991] total_swap 176128 [ 366.180909][T14991] total_swapcached 233472 [ 366.185255][T14991] total_pgpgin 51303 [ 366.236277][T14991] total_pgpgout 51296 [ 366.240305][T14991] total_pgfault 95934 [ 366.244299][T14991] total_pgmajfault 4 [ 366.248200][T14991] total_inactive_anon 4096 [ 366.252643][T14991] total_active_anon 8192 [ 366.256894][T14991] total_inactive_file 0 [ 366.261057][T14991] total_active_file 0 [ 366.311348][T15039] netlink: 'syz.1.2801': attribute type 17 has an invalid length. [ 366.325101][T15039] 0ªX¹¦Dö»: entered promiscuous mode [ 366.336370][T14991] total_unevictable 0 [ 366.340387][T14991] anon_cost 0 [ 366.343702][T14991] file_cost 0 [ 366.352860][T15039] 0ªX¹¦Dö»: left promiscuous mode [ 366.358648][T14991] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2787,pid=14991,uid=0 [ 366.375780][T14991] Memory cgroup out of memory: Killed process 14991 (syz.4.2787) total-vm:102304kB, anon-rss:1276kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 366.440035][T15050] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 366.467090][T14996] syz.4.2787 (14996) used greatest stack depth: 18560 bytes left [ 367.964923][T15099] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 368.337166][T15119] block nbd0: reconnected socket [ 368.342720][T15119] block nbd0: reconnected socket [ 368.347118][ T5631] block nbd0: Receive control failed (result -107) [ 368.355504][ T4943] block nbd0: Receive control failed (result -107) [ 368.386984][T15123] netlink: 'syz.0.2827': attribute type 2 has an invalid length. [ 368.395744][T15123] netlink: 'syz.0.2827': attribute type 2 has an invalid length. [ 368.404686][T15123] __nla_validate_parse: 14 callbacks suppressed [ 368.404701][T15123] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.2827'. [ 369.022413][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'. [ 369.477591][T15127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2828'. [ 370.146567][T15180] h: entered promiscuous mode [ 370.402690][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2843'. [ 370.447746][T15182] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2843'. [ 370.671664][T15190] macvlan0: entered promiscuous mode [ 371.022513][T15207] Cannot find del_set index 65534 as target [ 371.031516][T15207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2853'. [ 371.053907][T15209] tipc: Enabling of bearer rejected, failed to enable media [ 371.095526][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2855'. [ 371.139709][T15213] x_tables: duplicate underflow at hook 2 [ 371.175207][T15188] wg2 speed is unknown, defaulting to 1000 [ 371.354524][T15226] bond16: Unable to set up delay as MII monitoring is disabled [ 371.364327][T15226] bond16 (unregistering): Released all slaves [ 371.760644][T15243] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 372.687536][T15291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.880891][T15301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2880'. [ 372.930513][T15301] openvswitch: netlink: Flow key attr not present in new flow. [ 373.053286][T15312] FAULT_INJECTION: forcing a failure. [ 373.053286][T15312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.066394][T15312] CPU: 1 UID: 0 PID: 15312 Comm: syz.3.2884 Not tainted syzkaller #0 PREEMPT(full) [ 373.066420][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.066432][T15312] Call Trace: [ 373.066440][T15312] [ 373.066448][T15312] dump_stack_lvl+0xe8/0x150 [ 373.066484][T15312] should_fail_ex+0x40c/0x560 [ 373.066512][T15312] _copy_from_user+0x2d/0xb0 [ 373.066542][T15312] generic_map_update_batch+0x651/0x9a0 [ 373.066573][T15312] ? __pfx_generic_map_update_batch+0x10/0x10 [ 373.066594][T15312] ? __fget_files+0x2a/0x420 [ 373.066626][T15312] ? __pfx_generic_map_update_batch+0x10/0x10 [ 373.066647][T15312] bpf_map_do_batch+0x391/0x630 [ 373.066680][T15312] __sys_bpf+0xbe5/0xd90 [ 373.066713][T15312] ? __pfx___sys_bpf+0x10/0x10 [ 373.066747][T15312] ? __fget_files+0x2a/0x420 [ 373.066789][T15312] ? ksys_write+0x242/0x270 [ 373.066820][T15312] ? __pfx_ksys_write+0x10/0x10 [ 373.066855][T15312] __x64_sys_bpf+0xba/0xd0 [ 373.066877][T15312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.066897][T15312] do_syscall_64+0x174/0x580 [ 373.066923][T15312] ? trace_irq_disable+0x3b/0x140 [ 373.066945][T15312] ? clear_bhb_loop+0x40/0x90 [ 373.066967][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.066986][T15312] RIP: 0033:0x7f8de299de59 [ 373.067005][T15312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.067021][T15312] RSP: 002b:00007f8de3849028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.067041][T15312] RAX: ffffffffffffffda RBX: 00007f8de2c25fa0 RCX: 00007f8de299de59 [ 373.067054][T15312] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 373.067065][T15312] RBP: 00007f8de3849090 R08: 0000000000000000 R09: 0000000000000000 [ 373.067077][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.067088][T15312] R13: 00007f8de2c26038 R14: 00007f8de2c25fa0 R15: 00007ffe635e2028 [ 373.067117][T15312] [ 373.374464][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 373.384799][T15322] tipc: Enabling of bearer rejected, failed to enable media [ 373.738495][T15338] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2893'. [ 373.835863][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 373.847811][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 373.964522][T15350] syzkaller0: entered promiscuous mode [ 373.970166][T15350] syzkaller0: entered allmulticast mode [ 374.131775][T15354] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2900'. [ 374.168068][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2897'. [ 374.599030][T15382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2908'. [ 374.608046][T15382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2908'. [ 374.672222][T15382] ip6gretap0: entered promiscuous mode [ 374.678919][T15382] syz_tun: entered promiscuous mode [ 374.685177][T15382] debugfs: 'hsr1' already exists in 'hsr' [ 374.690951][T15382] Cannot create hsr debugfs directory [ 374.708372][T15382] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 374.719075][T15382] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 374.743896][T15381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.800089][T15393] syzkaller0: entered promiscuous mode [ 374.805622][T15393] syzkaller0: entered allmulticast mode [ 374.845212][T15395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.042336][T15407] rdma_rxe: rxe_newlink: failed to add wg2 [ 375.190121][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2919'. [ 375.332258][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'. [ 375.445837][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2923'. [ 375.593405][T15431] bond5: (slave lo): Releasing backup interface [ 375.609796][T15431] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 375.628864][T15448] rdma_rxe: rxe_newlink: failed to add wg2 [ 375.635932][T15431] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 375.810027][T15452] syzkaller0: entered promiscuous mode [ 375.826252][T15452] syzkaller0: entered allmulticast mode [ 375.993281][T15471] openvswitch: netlink: Flow key attr not present in new flow. [ 377.130035][T15533] syzkaller0: entered promiscuous mode [ 377.135567][T15533] syzkaller0: entered allmulticast mode [ 377.289984][T15538] syzkaller0: entered promiscuous mode [ 377.295517][T15538] syzkaller0: entered allmulticast mode [ 379.343750][T15594] __nla_validate_parse: 9 callbacks suppressed [ 379.343768][T15594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2974'. [ 379.451258][T15596] syzkaller0: entered promiscuous mode [ 379.471001][T15596] syzkaller0: entered allmulticast mode [ 379.586816][T15600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2979'. [ 379.650411][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2978'. [ 379.749467][T15605] syzkaller0: entered promiscuous mode [ 379.777426][T15605] syzkaller0: entered allmulticast mode [ 379.783872][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 379.907467][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2985'. [ 379.953314][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 379.962260][T15616] netlink: 'syz.4.2982': attribute type 10 has an invalid length. [ 379.970100][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2982'. [ 380.035294][T15630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2986'. [ 380.181212][T15616] geneve2: entered promiscuous mode [ 380.198881][T15616] geneve2: entered allmulticast mode [ 380.477604][T15648] syzkaller0: entered promiscuous mode [ 380.484878][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 380.489219][T15648] syzkaller0: entered allmulticast mode [ 380.493790][T15650] netlink: 'syz.3.2994': attribute type 18 has an invalid length. [ 380.493812][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2994'. [ 380.541333][T15650] netlink: 'syz.3.2994': attribute type 18 has an invalid length. [ 380.578996][T15653] ip6gretap0: entered promiscuous mode [ 380.591553][T15653] syz_tun: entered promiscuous mode [ 380.605538][T15653] hsr2: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 380.619154][T15653] hsr2: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 380.634690][T15651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.800422][T15667] FAULT_INJECTION: forcing a failure. [ 380.800422][T15667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.814481][T15667] CPU: 0 UID: 0 PID: 15667 Comm: syz.0.3002 Not tainted syzkaller #0 PREEMPT(full) [ 380.814505][T15667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.814516][T15667] Call Trace: [ 380.814524][T15667] [ 380.814531][T15667] dump_stack_lvl+0xe8/0x150 [ 380.814564][T15667] should_fail_ex+0x40c/0x560 [ 380.814596][T15667] _copy_from_iter+0x1d3/0x1660 [ 380.814678][T15667] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 380.814704][T15667] ? rcu_is_watching+0x15/0xb0 [ 380.814744][T15667] ? trace_kmem_cache_alloc+0x29/0xe0 [ 380.814768][T15667] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 380.814790][T15667] ? __pfx__copy_from_iter+0x10/0x10 [ 380.814813][T15667] ? __alloc_skb+0x276/0x7a0 [ 380.814892][T15667] ? __alloc_skb+0x276/0x7a0 [ 380.814922][T15667] ? netlink_sendmsg+0x650/0xb40 [ 380.814993][T15667] ? skb_put+0x112/0x210 [ 380.815021][T15667] netlink_sendmsg+0x6c0/0xb40 [ 380.815047][T15667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.815069][T15667] ? aa_sock_msg_perm+0xf1/0x1b0 [ 380.815137][T15667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.815154][T15667] sock_sendmsg_nosec+0x13a/0x180 [ 380.815200][T15667] ____sys_sendmsg+0x54e/0x850 [ 380.815254][T15667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.815302][T15667] ? import_iovec+0x73/0xa0 [ 380.815331][T15667] ___sys_sendmsg+0x2a5/0x360 [ 380.815358][T15667] ? __lock_acquire+0x683/0x2cf0 [ 380.815387][T15667] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.815447][T15667] ? __fget_files+0x2a/0x420 [ 380.815470][T15667] ? __fget_files+0x3a2/0x420 [ 380.815503][T15667] __x64_sys_sendmsg+0x1b1/0x290 [ 380.815534][T15667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.815579][T15667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.815605][T15667] do_syscall_64+0x174/0x580 [ 380.815648][T15667] ? trace_irq_disable+0x3b/0x140 [ 380.815673][T15667] ? clear_bhb_loop+0x40/0x90 [ 380.815697][T15667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.815717][T15667] RIP: 0033:0x7f1b8119de59 [ 380.815735][T15667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.815752][T15667] RSP: 002b:00007f1b8200d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.815773][T15667] RAX: ffffffffffffffda RBX: 00007f1b81425fa0 RCX: 00007f1b8119de59 [ 380.815787][T15667] RDX: 0000000000004000 RSI: 0000200000001b80 RDI: 0000000000000003 [ 380.815800][T15667] RBP: 00007f1b8200d090 R08: 0000000000000000 R09: 0000000000000000 [ 380.815812][T15667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.815823][T15667] R13: 00007f1b81426038 R14: 00007f1b81425fa0 R15: 00007fff7c4cf3d8 [ 380.815855][T15667] [ 381.240893][T15679] netlink: 'syz.3.3007': attribute type 10 has an invalid length. [ 381.248942][T15679] team0: entered allmulticast mode [ 381.254090][T15679] team_slave_1: entered allmulticast mode [ 381.260208][T15679] bridge0: port 1(team0) entered blocking state [ 381.283324][T15679] bridge0: port 1(team0) entered disabled state [ 381.332879][T15679] team0: entered promiscuous mode [ 381.337964][T15679] team_slave_1: entered promiscuous mode [ 381.361835][T15686] syzkaller0: entered promiscuous mode [ 381.367491][T15686] syzkaller0: entered allmulticast mode [ 381.654243][T15701] FAULT_INJECTION: forcing a failure. [ 381.654243][T15701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.682039][T15701] CPU: 0 UID: 0 PID: 15701 Comm: syz.3.3014 Not tainted syzkaller #0 PREEMPT(full) [ 381.682064][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.682075][T15701] Call Trace: [ 381.682083][T15701] [ 381.682091][T15701] dump_stack_lvl+0xe8/0x150 [ 381.682123][T15701] should_fail_ex+0x40c/0x560 [ 381.682149][T15701] _copy_from_user+0x2d/0xb0 [ 381.682178][T15701] generic_map_update_batch+0x651/0x9a0 [ 381.682206][T15701] ? __pfx_generic_map_update_batch+0x10/0x10 [ 381.682226][T15701] ? __fget_files+0x2a/0x420 [ 381.682256][T15701] ? __pfx_generic_map_update_batch+0x10/0x10 [ 381.682275][T15701] bpf_map_do_batch+0x391/0x630 [ 381.682305][T15701] __sys_bpf+0xbe5/0xd90 [ 381.682337][T15701] ? __pfx___sys_bpf+0x10/0x10 [ 381.682370][T15701] ? __fget_files+0x2a/0x420 [ 381.682414][T15701] ? ksys_write+0x242/0x270 [ 381.682445][T15701] ? __pfx_ksys_write+0x10/0x10 [ 381.682478][T15701] __x64_sys_bpf+0xba/0xd0 [ 381.682500][T15701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.682520][T15701] do_syscall_64+0x174/0x580 [ 381.682545][T15701] ? trace_irq_disable+0x3b/0x140 [ 381.682569][T15701] ? clear_bhb_loop+0x40/0x90 [ 381.682590][T15701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.682608][T15701] RIP: 0033:0x7f8de299de59 [ 381.682625][T15701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.682641][T15701] RSP: 002b:00007f8de3849028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.682660][T15701] RAX: ffffffffffffffda RBX: 00007f8de2c25fa0 RCX: 00007f8de299de59 [ 381.682673][T15701] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 381.682684][T15701] RBP: 00007f8de3849090 R08: 0000000000000000 R09: 0000000000000000 [ 381.682696][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.682706][T15701] R13: 00007f8de2c26038 R14: 00007f8de2c25fa0 R15: 00007ffe635e2028 [ 381.682735][T15701] [ 381.907143][T15706] netlink: 'syz.2.3017': attribute type 8 has an invalid length. [ 381.949851][T15708] syzkaller0: entered promiscuous mode [ 381.955367][T15708] syzkaller0: entered allmulticast mode [ 382.111199][T15712] team0: left promiscuous mode [ 382.116099][T15712] team_slave_1: left promiscuous mode [ 382.122032][T15712] bridge0: port 1(team0) entered disabled state [ 382.134617][T15712] bridge_slave_1: left promiscuous mode [ 382.140407][T15712] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.152379][T15712] .`: (slave bond_slave_0): Releasing backup interface [ 382.176326][T15712] .`: (slave bond_slave_1): Releasing backup interface [ 382.188798][T15712] team_slave_1: left allmulticast mode [ 382.195322][T15716] netlink: 'syz.1.3022': attribute type 4 has an invalid length. [ 382.217915][T15712] team0: Port device team_slave_1 removed [ 382.228292][T15712] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 382.246702][ T5738] syz0: Port: 1 Link DOWN [ 382.335562][T15709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.400477][T15722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.536864][T15733] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 382.557343][T15733] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 382.710307][T15748] syzkaller0: entered promiscuous mode [ 382.715880][T15748] syzkaller0: entered allmulticast mode [ 382.948908][T15762] openvswitch: netlink: Message has 16 unknown bytes. [ 383.815835][T15812] syzkaller0: entered promiscuous mode [ 383.825328][T15812] syzkaller0: entered allmulticast mode [ 383.885627][T15798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.211547][T15838] syzkaller0: entered promiscuous mode [ 384.220649][T15838] syzkaller0: entered allmulticast mode [ 384.385901][T15845] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 384.414321][T15849] atomic_op ffff88803583c198 conn xmit_atomic 0000000000000000 [ 384.823841][T15876] syzkaller0: entered promiscuous mode [ 384.838644][T15876] syzkaller0: entered allmulticast mode [ 385.609434][T15925] __nla_validate_parse: 23 callbacks suppressed [ 385.609454][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3095'. [ 385.685237][T15925] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 386.091018][T15957] netlink: 'syz.0.3104': attribute type 21 has an invalid length. [ 386.099699][T15957] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3104'. [ 386.111786][T15957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3104'. [ 386.113526][T15955] syzkaller0: entered promiscuous mode [ 386.126241][T15955] syzkaller0: entered allmulticast mode [ 386.270875][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3107'. [ 386.343275][T15966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3107'. [ 386.387944][T15973] gre0: entered promiscuous mode [ 386.392941][T15973] gre0: entered allmulticast mode [ 386.477452][T15981] netlink: 'syz.2.3113': attribute type 3 has an invalid length. [ 386.568407][T15984] FAULT_INJECTION: forcing a failure. [ 386.568407][T15984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.596713][T15984] CPU: 0 UID: 0 PID: 15984 Comm: syz.1.3115 Not tainted syzkaller #0 PREEMPT(full) [ 386.596740][T15984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.596751][T15984] Call Trace: [ 386.596759][T15984] [ 386.596767][T15984] dump_stack_lvl+0xe8/0x150 [ 386.596803][T15984] should_fail_ex+0x40c/0x560 [ 386.596830][T15984] _copy_from_user+0x2d/0xb0 [ 386.596860][T15984] generic_map_update_batch+0x6a3/0x9a0 [ 386.596892][T15984] ? __pfx_generic_map_update_batch+0x10/0x10 [ 386.596913][T15984] ? __fget_files+0x2a/0x420 [ 386.596963][T15984] ? __pfx_generic_map_update_batch+0x10/0x10 [ 386.596985][T15984] bpf_map_do_batch+0x391/0x630 [ 386.597020][T15984] __sys_bpf+0xbe5/0xd90 [ 386.597056][T15984] ? __pfx___sys_bpf+0x10/0x10 [ 386.597094][T15984] ? __fget_files+0x2a/0x420 [ 386.597139][T15984] ? ksys_write+0x242/0x270 [ 386.597174][T15984] ? __pfx_ksys_write+0x10/0x10 [ 386.597210][T15984] __x64_sys_bpf+0xba/0xd0 [ 386.597234][T15984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.597256][T15984] do_syscall_64+0x174/0x580 [ 386.597286][T15984] ? trace_irq_disable+0x3b/0x140 [ 386.597311][T15984] ? clear_bhb_loop+0x40/0x90 [ 386.597337][T15984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.597358][T15984] RIP: 0033:0x7f832119de59 [ 386.597377][T15984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.597395][T15984] RSP: 002b:00007f832200d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.597417][T15984] RAX: ffffffffffffffda RBX: 00007f8321425fa0 RCX: 00007f832119de59 [ 386.597432][T15984] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 386.597445][T15984] RBP: 00007f832200d090 R08: 0000000000000000 R09: 0000000000000000 [ 386.597458][T15984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.597470][T15984] R13: 00007f8321426038 R14: 00007f8321425fa0 R15: 00007ffd0d940508 [ 386.597503][T15984] [ 386.827056][T15988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.911082][T15993] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.944329][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3119'. [ 386.999696][T15997] bond8: entered promiscuous mode [ 387.005394][T15997] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.062552][T15991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3117'. [ 387.136727][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3121'. [ 387.210521][T16006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3121'. [ 387.446429][T16022] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3125'. [ 388.392863][T16085] FAULT_INJECTION: forcing a failure. [ 388.392863][T16085] name failslab, interval 1, probability 0, space 0, times 0 [ 388.405510][T16085] CPU: 1 UID: 0 PID: 16085 Comm: syz.4.3147 Not tainted syzkaller #0 PREEMPT(full) [ 388.405534][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.405546][T16085] Call Trace: [ 388.405554][T16085] [ 388.405561][T16085] dump_stack_lvl+0xe8/0x150 [ 388.405596][T16085] should_fail_ex+0x40c/0x560 [ 388.405622][T16085] should_failslab+0xa8/0x100 [ 388.405651][T16085] __kmalloc_cache_noprof+0xa8/0x660 [ 388.405677][T16085] ? tcf_action_init_1+0x1c2/0x740 [ 388.405765][T16085] ? tcf_action_init_1+0x1c2/0x740 [ 388.405795][T16085] tcf_action_init_1+0x1c2/0x740 [ 388.405824][T16085] ? __pfx_tcf_action_init_1+0x10/0x10 [ 388.405848][T16085] ? _raw_read_unlock+0x28/0x50 [ 388.405919][T16085] ? tc_action_load_ops+0x247/0x540 [ 388.405956][T16085] ? is_bpf_text_address+0x292/0x2b0 [ 388.405987][T16085] ? __nla_parse+0x40/0x60 [ 388.406042][T16085] tcf_action_init+0x30e/0xb10 [ 388.406076][T16085] ? __pfx_tcf_action_init+0x10/0x10 [ 388.406123][T16085] ? netlink_sendmsg+0x813/0xb40 [ 388.406141][T16085] ? sock_sendmsg_nosec+0x13a/0x180 [ 388.406163][T16085] ? __pfx___nla_validate_parse+0x10/0x10 [ 388.406185][T16085] ? do_syscall_64+0x174/0x580 [ 388.406211][T16085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.406263][T16085] tc_ctl_action+0x43b/0xc70 [ 388.406300][T16085] ? __pfx_tc_ctl_action+0x10/0x10 [ 388.406329][T16085] ? rcu_is_watching+0x15/0xb0 [ 388.406399][T16085] ? __pfx_tc_ctl_action+0x10/0x10 [ 388.406429][T16085] rtnetlink_rcv_msg+0x7b9/0xc00 [ 388.406489][T16085] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 388.406513][T16085] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.406536][T16085] ? ref_tracker_free+0x689/0x830 [ 388.406571][T16085] ? __pfx_ref_tracker_free+0x10/0x10 [ 388.406603][T16085] netlink_rcv_skb+0x226/0x4a0 [ 388.406654][T16085] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.406682][T16085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.406721][T16085] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.406749][T16085] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.406783][T16085] netlink_unicast+0x7bb/0x940 [ 388.406820][T16085] netlink_sendmsg+0x813/0xb40 [ 388.406847][T16085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.406869][T16085] ? aa_sock_msg_perm+0xf1/0x1b0 [ 388.406894][T16085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.406912][T16085] sock_sendmsg_nosec+0x13a/0x180 [ 388.406936][T16085] ____sys_sendmsg+0x54e/0x850 [ 388.406969][T16085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.407005][T16085] ? import_iovec+0x73/0xa0 [ 388.407035][T16085] ___sys_sendmsg+0x2a5/0x360 [ 388.407062][T16085] ? __lock_acquire+0x683/0x2cf0 [ 388.407091][T16085] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.407152][T16085] ? __fget_files+0x2a/0x420 [ 388.407176][T16085] ? __fget_files+0x3a2/0x420 [ 388.407209][T16085] __x64_sys_sendmsg+0x1b1/0x290 [ 388.407240][T16085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.407286][T16085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.407306][T16085] do_syscall_64+0x174/0x580 [ 388.407331][T16085] ? trace_irq_disable+0x3b/0x140 [ 388.407354][T16085] ? clear_bhb_loop+0x40/0x90 [ 388.407377][T16085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.407396][T16085] RIP: 0033:0x7fb942f9de59 [ 388.407422][T16085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.407438][T16085] RSP: 002b:00007fb943e45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.407458][T16085] RAX: ffffffffffffffda RBX: 00007fb943225fa0 RCX: 00007fb942f9de59 [ 388.407472][T16085] RDX: 0000000020040804 RSI: 0000200000000300 RDI: 0000000000000003 [ 388.407484][T16085] RBP: 00007fb943e45090 R08: 0000000000000000 R09: 0000000000000000 [ 388.407495][T16085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.407506][T16085] R13: 00007fb943226038 R14: 00007fb943225fa0 R15: 00007fff70020098 [ 388.407536][T16085] [ 389.606621][T16134] tipc: Enabled bearer , priority 0 [ 389.614723][T16134] syzkaller0: entered promiscuous mode [ 389.620303][T16134] syzkaller0: entered allmulticast mode [ 389.680390][T16135] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 389.757290][T16135] tipc: Resetting bearer [ 389.886659][T16131] tipc: Resetting bearer [ 389.996715][T16131] tipc: Disabling bearer [ 390.060806][T16163] netlink: 'syz.0.3166': attribute type 1 has an invalid length. [ 390.108289][T16167] syzkaller1: entered promiscuous mode [ 390.113873][T16167] syzkaller1: entered allmulticast mode [ 390.755941][T16204] __nla_validate_parse: 8 callbacks suppressed [ 390.755962][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3178'. [ 390.875263][T16208] netlink: 'syz.0.3180': attribute type 1 has an invalid length. [ 390.913634][T16202] Bluetooth: MGMT ver 1.23 [ 390.919334][T16202] Bluetooth: hci1: too big key_count value 32778 [ 390.929784][T16202] team0: Device vlan0 failed to register rx_handler [ 391.447991][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3187'. [ 391.496081][T16234] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 391.709961][T16249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3191'. [ 391.894172][T16246] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 391.925214][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 392.040441][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3198'. [ 392.055859][T16270] vlan2: entered promiscuous mode [ 392.061036][T16270] hsr0: entered promiscuous mode [ 392.067138][T16270] vlan2: entered allmulticast mode [ 392.074514][T16270] hsr0: entered allmulticast mode [ 392.080067][T16270] hsr_slave_0: entered allmulticast mode [ 392.086807][T16270] hsr_slave_1: entered allmulticast mode [ 392.129519][T16275] bond17: (slave sit0): The slave device specified does not support setting the MAC address [ 392.140215][T16275] bond17: (slave sit0): Error -95 calling set_mac_address [ 392.147781][T16270] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 392.257952][T16280] pimreg3: entered allmulticast mode [ 392.759912][T16325] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 392.852555][T16330] pim6reg: entered allmulticast mode [ 392.914888][T16336] pim6reg: left allmulticast mode [ 393.036085][T16340] tunl0: Caught tx_queue_len zero misconfig [ 393.112007][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3221'. [ 393.223821][T16348] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3222'. [ 393.327891][T16351] netlink: 'syz.1.3224': attribute type 10 has an invalid length. [ 393.335789][T16351] openvswitch: netlink: Flow key attr not present in new flow. [ 393.504874][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3228'. [ 393.716359][T16365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 393.930264][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3233'. [ 394.205102][T16380] bond10: (slave sit0): The slave device specified does not support setting the MAC address [ 394.226190][T16380] bond10: (slave sit0): Error -95 calling set_mac_address [ 394.256628][T16387] FAULT_INJECTION: forcing a failure. [ 394.256628][T16387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.287722][T16387] CPU: 0 UID: 0 PID: 16387 Comm: syz.1.3236 Not tainted syzkaller #0 PREEMPT(full) [ 394.287746][T16387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.287758][T16387] Call Trace: [ 394.287765][T16387] [ 394.287773][T16387] dump_stack_lvl+0xe8/0x150 [ 394.287807][T16387] should_fail_ex+0x40c/0x560 [ 394.287851][T16387] _copy_from_user+0x2d/0xb0 [ 394.287880][T16387] kstrtouint_from_user+0xd6/0x180 [ 394.287906][T16387] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 394.287947][T16387] proc_fail_nth_write+0x8e/0x210 [ 394.288000][T16387] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.288054][T16387] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.288078][T16387] vfs_write+0x296/0xba0 [ 394.288114][T16387] ? __pfx_vfs_write+0x10/0x10 [ 394.288144][T16387] ? __fget_files+0x2a/0x420 [ 394.288171][T16387] ? __fget_files+0x3a2/0x420 [ 394.288194][T16387] ? __fget_files+0x2a/0x420 [ 394.288226][T16387] ksys_write+0x150/0x270 [ 394.288255][T16387] ? __pfx_ksys_write+0x10/0x10 [ 394.288291][T16387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.288311][T16387] do_syscall_64+0x174/0x580 [ 394.288336][T16387] ? trace_irq_disable+0x3b/0x140 [ 394.288360][T16387] ? clear_bhb_loop+0x40/0x90 [ 394.288385][T16387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.288404][T16387] RIP: 0033:0x7f832115e68e [ 394.288421][T16387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 394.288437][T16387] RSP: 002b:00007f832200cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 394.288457][T16387] RAX: ffffffffffffffda RBX: 00007f832200d6c0 RCX: 00007f832115e68e [ 394.288470][T16387] RDX: 0000000000000001 RSI: 00007f832200d0a0 RDI: 0000000000000005 [ 394.288481][T16387] RBP: 00007f832200d090 R08: 0000000000000000 R09: 0000000000000000 [ 394.288492][T16387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.288503][T16387] R13: 00007f8321426038 R14: 00007f8321425fa0 R15: 00007ffd0d940508 [ 394.288533][T16387] [ 394.587431][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3241'. [ 394.593580][T16395] ip6gre0: Caught tx_queue_len zero misconfig [ 394.758638][T16401] netlink: 'syz.0.3242': attribute type 10 has an invalid length. [ 394.775810][T16401] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.823157][T16401] team0: entered promiscuous mode [ 394.828245][T16401] team_slave_0: entered promiscuous mode [ 394.834165][T16401] team_slave_1: entered promiscuous mode [ 394.840196][T16401] team0: entered allmulticast mode [ 394.845350][T16401] team_slave_0: entered allmulticast mode [ 394.851105][T16401] team_slave_1: entered allmulticast mode [ 394.865204][T16403] netlink: 'syz.3.3244': attribute type 1 has an invalid length. [ 395.437222][T16435] bond11: (slave sit0): The slave device specified does not support setting the MAC address [ 395.450776][T16435] bond11: (slave sit0): Error -95 calling set_mac_address [ 395.460118][T16437] bond7: (slave sit0): The slave device specified does not support setting the MAC address [ 395.478255][T16437] bond7: (slave sit0): Error -95 calling set_mac_address [ 395.487651][T14272] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.502332][T14272] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.514147][T16449] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 395.539542][T14272] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.548822][T14272] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.719098][T16468] lo: entered promiscuous mode [ 395.731873][T16468] netlink: 'syz.0.3262': attribute type 2 has an invalid length. [ 395.743020][T16468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.449559][T16498] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 396.677188][T16513] __nla_validate_parse: 3 callbacks suppressed [ 396.677206][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3278'. [ 397.037485][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3285'. [ 397.067541][T16538] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 397.236806][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3291'. [ 397.508367][T16567] lo: left promiscuous mode [ 397.514436][T16567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.516220][T16570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.541383][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3295'. [ 397.735418][T16579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'. [ 397.767350][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3301'. [ 397.796474][T16581] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.903675][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3305'. [ 398.064991][T16597] netlink: 'syz.1.3309': attribute type 1 has an invalid length. [ 398.083435][T16597] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3309'. [ 398.183030][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 398.253590][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3314'. [ 399.623433][T16626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 400.451514][T16688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.706283][T16712] No such timeout policy "syz0" [ 400.868550][T16717] bridge2: entered allmulticast mode [ 400.922434][T16722] ip6gretap0: entered promiscuous mode [ 400.948409][T16722] syz_tun: entered promiscuous mode [ 400.969442][T16722] debugfs: 'hsr1' already exists in 'hsr' [ 400.992027][T16722] Cannot create hsr debugfs directory [ 401.005484][T16722] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 401.018340][T16722] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 401.039075][T16721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.076250][T16735] veth1_macvtap: Caught tx_queue_len zero misconfig [ 401.188714][T16739] syzkaller0: entered promiscuous mode [ 401.205065][T16739] syzkaller0: entered allmulticast mode [ 401.258760][T16746] syzkaller0: entered promiscuous mode [ 401.265383][T16746] syzkaller0: entered allmulticast mode [ 401.545673][T16756] ip6t_rpfilter: unknown options [ 401.577586][T16756] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 401.585095][ T809] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 401.679018][T16756] veth9: entered allmulticast mode [ 401.924354][T16779] syzkaller0: entered promiscuous mode [ 401.930050][T16779] syzkaller0: entered allmulticast mode [ 401.931747][T16780] __nla_validate_parse: 7 callbacks suppressed [ 401.931782][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3374'. [ 402.265305][T16800] openvswitch: netlink: Missing key (keys=40, expected=100) [ 402.284137][ T30] audit: type=1800 audit(1783805636.554:7): pid=16800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3383" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3533 res=0 errno=0 [ 402.317769][T16801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3382'. [ 402.343194][T16801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3382'. [ 402.360908][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3384'. [ 402.394127][T16801] ip6gretap0: entered promiscuous mode [ 402.406118][T16801] syz_tun: entered promiscuous mode [ 402.423830][T16801] debugfs: 'hsr1' already exists in 'hsr' [ 402.429662][T16801] Cannot create hsr debugfs directory [ 402.445285][T16801] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 402.474072][T16799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.587409][T16814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.619077][T16814] netlink: 'syz.1.3388': attribute type 7 has an invalid length. [ 402.715289][T16819] syzkaller0: entered promiscuous mode [ 402.725188][T16819] syzkaller0: entered allmulticast mode [ 402.982321][T16841] FAULT_INJECTION: forcing a failure. [ 402.982321][T16841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.001472][T16841] CPU: 0 UID: 0 PID: 16841 Comm: syz.2.3397 Not tainted syzkaller #0 PREEMPT(full) [ 403.001498][T16841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.001508][T16841] Call Trace: [ 403.001515][T16841] [ 403.001523][T16841] dump_stack_lvl+0xe8/0x150 [ 403.001557][T16841] should_fail_ex+0x40c/0x560 [ 403.001583][T16841] _copy_from_user+0x2d/0xb0 [ 403.001613][T16841] generic_map_update_batch+0x6a3/0x9a0 [ 403.001643][T16841] ? __pfx_generic_map_update_batch+0x10/0x10 [ 403.001665][T16841] ? __fget_files+0x2a/0x420 [ 403.001695][T16841] ? __pfx_generic_map_update_batch+0x10/0x10 [ 403.001715][T16841] bpf_map_do_batch+0x391/0x630 [ 403.001747][T16841] __sys_bpf+0xbe5/0xd90 [ 403.001789][T16841] ? __pfx___sys_bpf+0x10/0x10 [ 403.001824][T16841] ? __fget_files+0x2a/0x420 [ 403.001865][T16841] ? ksys_write+0x242/0x270 [ 403.001896][T16841] ? __pfx_ksys_write+0x10/0x10 [ 403.001933][T16841] __x64_sys_bpf+0xba/0xd0 [ 403.001955][T16841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.001977][T16841] do_syscall_64+0x174/0x580 [ 403.002004][T16841] ? trace_irq_disable+0x3b/0x140 [ 403.002028][T16841] ? clear_bhb_loop+0x40/0x90 [ 403.002051][T16841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.002070][T16841] RIP: 0033:0x7f572139de59 [ 403.002086][T16841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.002099][T16841] RSP: 002b:00007f5722208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.002116][T16841] RAX: ffffffffffffffda RBX: 00007f5721625fa0 RCX: 00007f572139de59 [ 403.002128][T16841] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 403.002138][T16841] RBP: 00007f5722208090 R08: 0000000000000000 R09: 0000000000000000 [ 403.002147][T16841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.002156][T16841] R13: 00007f5721626038 R14: 00007f5721625fa0 R15: 00007ffce5a21268 [ 403.002181][T16841] [ 403.490528][T16864] openvswitch: netlink: Key type 8220 is out of range max 32 [ 403.587387][T16870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3411'. [ 403.597363][T16870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3411'. [ 403.687872][T16869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.948281][T16893] xt_limit: Overflow, try lower: 271964/0 [ 403.972771][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 404.061188][T16899] syzkaller0: entered promiscuous mode [ 404.074409][T16899] syzkaller0: entered allmulticast mode [ 404.193497][T16909] xt_hashlimit: max too large, truncated to 1048576 [ 404.245472][T16911] netlink: 'syz.3.3428': attribute type 1 has an invalid length. [ 404.315370][T16911] 8021q: adding VLAN 0 to HW filter on device bond12 [ 404.385994][T16909] vlan2: entered promiscuous mode [ 404.395165][T16909] bond12: entered promiscuous mode [ 404.400596][T16909] vlan2: entered allmulticast mode [ 404.407564][T16909] bond12: entered allmulticast mode [ 404.440153][T16911] bond12: (slave bridge3): making interface the new active one [ 404.457285][T16911] bridge3: entered promiscuous mode [ 404.470835][T16911] bridge3: entered allmulticast mode [ 404.484279][T16911] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 404.549473][T16929] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3434'. [ 404.777615][T16941] openvswitch: netlink: Key type 15644 is out of range max 32 [ 404.796667][T16944] openvswitch: netlink: Missing key (keys=40, expected=100) [ 404.894424][T16949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3439'. [ 404.938592][T16949] unsupported nla_type 7424 [ 404.953353][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3439'. [ 405.114711][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3449'. [ 405.261305][T16968] netlink: 'syz.2.3451': attribute type 1 has an invalid length. [ 405.337518][T16981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.682715][T17003] bridge0: port 1(vlan1) entered blocking state [ 405.695185][T17003] bridge0: port 1(vlan1) entered disabled state [ 405.711544][T17003] vlan1: entered allmulticast mode [ 405.732693][T17003] geneve0: entered allmulticast mode [ 405.750236][T17010] netlink: 'syz.1.3464': attribute type 1 has an invalid length. [ 405.772381][T17010] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 405.834614][T17021] openvswitch: netlink: Message has 24 unknown bytes. [ 405.949286][T17024] netlink: 'syz.3.3468': attribute type 1 has an invalid length. [ 405.963603][T17030] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:0 [ 406.591872][T17082] netlink: 'syz.2.3487': attribute type 2 has an invalid length. [ 407.092116][T17119] __nla_validate_parse: 8 callbacks suppressed [ 407.092130][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3500'. [ 407.139238][T17122] syzkaller0: entered promiscuous mode [ 407.150649][T17122] syzkaller0: entered allmulticast mode [ 407.204350][T17122] x_tables: duplicate underflow at hook 2 [ 407.256973][T17130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3505'. [ 407.438148][T17142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3507'. [ 407.590092][T17152] xt_hl: Unknown Hop Limit match mode: 206 [ 407.608992][T17152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3511'. [ 408.058882][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3519'. [ 408.082878][T17174] tipc: Invalid UDP bearer configuration [ 408.082937][T17174] tipc: Enabling of bearer rejected, failed to enable media [ 408.181987][T17182] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3519'. [ 408.317231][T17194] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 408.417647][T17192] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 408.439231][T17192] syzkaller1: Refused to change device type [ 408.466129][T17192] ip6gre0: Master is either lo or non-ether device [ 408.633878][T17211] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.3527'. [ 408.820759][T17224] ip6t_srh: unknown srh match flags 5F28 [ 408.915193][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'. [ 408.968113][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'. [ 408.995529][T17234] vlan3: entered promiscuous mode [ 409.015485][T17234] bridge0: entered promiscuous mode [ 409.227180][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3537'. [ 409.247549][T17250] netlink: 'syz.4.3538': attribute type 24 has an invalid length. [ 409.780583][T17271] syzkaller0: entered promiscuous mode [ 409.797099][T17271] syzkaller0: entered allmulticast mode [ 410.454655][T17296] vcan0: entered allmulticast mode [ 410.461055][T17296] netlink: 'syz.0.3558': attribute type 21 has an invalid length. [ 410.530948][T17307] FAULT_INJECTION: forcing a failure. [ 410.530948][T17307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.550224][T17307] CPU: 1 UID: 0 PID: 17307 Comm: syz.1.3562 Not tainted syzkaller #0 PREEMPT(full) [ 410.550249][T17307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.550260][T17307] Call Trace: [ 410.550267][T17307] [ 410.550275][T17307] dump_stack_lvl+0xe8/0x150 [ 410.550307][T17307] should_fail_ex+0x40c/0x560 [ 410.550333][T17307] _copy_from_user+0x2d/0xb0 [ 410.550360][T17307] generic_map_update_batch+0x6a3/0x9a0 [ 410.550389][T17307] ? __pfx_generic_map_update_batch+0x10/0x10 [ 410.550409][T17307] ? __fget_files+0x2a/0x420 [ 410.550456][T17307] ? __pfx_generic_map_update_batch+0x10/0x10 [ 410.550478][T17307] bpf_map_do_batch+0x391/0x630 [ 410.550510][T17307] __sys_bpf+0xbe5/0xd90 [ 410.550543][T17307] ? __pfx___sys_bpf+0x10/0x10 [ 410.550579][T17307] ? __fget_files+0x2a/0x420 [ 410.550621][T17307] ? ksys_write+0x242/0x270 [ 410.550653][T17307] ? __pfx_ksys_write+0x10/0x10 [ 410.550688][T17307] __x64_sys_bpf+0xba/0xd0 [ 410.550711][T17307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.550733][T17307] do_syscall_64+0x174/0x580 [ 410.550761][T17307] ? trace_irq_disable+0x3b/0x140 [ 410.550785][T17307] ? clear_bhb_loop+0x40/0x90 [ 410.550808][T17307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.550828][T17307] RIP: 0033:0x7f832119de59 [ 410.550846][T17307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.550863][T17307] RSP: 002b:00007f832200d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.550883][T17307] RAX: ffffffffffffffda RBX: 00007f8321425fa0 RCX: 00007f832119de59 [ 410.550897][T17307] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 410.550910][T17307] RBP: 00007f832200d090 R08: 0000000000000000 R09: 0000000000000000 [ 410.550922][T17307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.550933][T17307] R13: 00007f8321426038 R14: 00007f8321425fa0 R15: 00007ffd0d940508 [ 410.550964][T17307] [ 410.829786][T17309] syzkaller0: entered promiscuous mode [ 410.835602][T17309] syzkaller0: entered allmulticast mode [ 410.910893][T17315] openvswitch: netlink: Key type 16156 is out of range max 32 [ 411.291668][T17324] xt_hashlimit: overflow, rate too high: 0 [ 412.413318][T17336] lo: left promiscuous mode [ 412.431189][T17336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.501569][T17341] __nla_validate_parse: 4 callbacks suppressed [ 412.501587][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3574'. [ 412.703352][T17353] xt_cgroup: path and classid specified [ 412.827841][T17359] tc action pedit offset 132 out of bounds [ 412.869083][T17368] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3585'. [ 412.879984][T17368] nbd: illegal input index -8454144 [ 412.974542][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3589'. [ 412.983960][T17371] pimreg: entered allmulticast mode [ 412.991575][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3589'. [ 413.108764][T17376] syzkaller0: entered promiscuous mode [ 413.115391][T17376] syzkaller0: entered allmulticast mode [ 413.269970][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3596'. [ 414.692095][T17390] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 414.707451][T17399] geneve0: mtu less than device minimum [ 414.767806][T17405] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 414.987640][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3607'. [ 414.998341][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3605'. [ 415.021591][T17420] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 415.111671][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 415.150281][T17428] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 415.207163][T17435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3612'. [ 415.264050][T17436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3613'. [ 415.411087][ T30] audit: type=1804 audit(1783805649.684:8): pid=17453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3617" name="/newroot/805/cgroup.controllers" dev="tmpfs" ino=4109 res=1 errno=0 [ 415.478889][T17441] syzkaller0: entered promiscuous mode [ 415.495431][T17441] syzkaller0: entered allmulticast mode [ 415.501604][ T30] audit: type=1800 audit(1783805649.684:9): pid=17453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3617" name="cgroup.controllers" dev="tmpfs" ino=4109 res=0 errno=0 [ 417.153583][T17480] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 417.459120][T17495] netlink: 'syz.2.3630': attribute type 1 has an invalid length. [ 417.502460][T17495] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 417.541107][T17495] veth7: entered promiscuous mode [ 417.551848][T17495] bond9: (slave veth7): Enslaving as a backup interface with a down link [ 417.567000][T17495] __nla_validate_parse: 2 callbacks suppressed [ 417.567015][T17495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3630'. [ 417.624303][T17495] 8021q: adding VLAN 0 to HW filter on device bond9 [ 417.640555][ T6074] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 417.808909][T17515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3636'. [ 417.818113][T14270] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 417.878658][T17524] netlink: 'syz.2.3640': attribute type 1 has an invalid length. [ 417.954997][T17529] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3642'. [ 417.978219][T17524] bond10: entered promiscuous mode [ 417.984222][T17524] 8021q: adding VLAN 0 to HW filter on device bond10 [ 418.022799][T17530] bond10: (slave bridge4): making interface the new active one [ 418.030503][T17530] bridge4: entered promiscuous mode [ 418.038941][T17530] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 418.073619][T17534] syz2: rxe_newlink: already configured on wg2 [ 418.240533][T17546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3648'. [ 418.251617][T17549] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3644'. [ 418.500897][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'. [ 418.582219][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3658'. [ 418.605140][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3658'. [ 418.622951][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3658'. [ 418.983794][T14272] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.006156][T14272] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.029016][T17599] tipc: Enabling of bearer rejected, failed to enable media [ 419.049829][T14272] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.065066][T17599] tipc: Enabling of bearer rejected, failed to enable media [ 419.083268][T14272] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.181818][T17607] netlink: 'syz.1.3672': attribute type 1 has an invalid length. [ 419.228950][T17607] 8021q: adding VLAN 0 to HW filter on device bond9 [ 419.255492][T17611] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3673'. [ 419.268276][T17611] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 419.280408][T17607] vlan4: entered promiscuous mode [ 419.285897][T17607] bond9: entered promiscuous mode [ 419.286553][T17611] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.291669][T17607] vlan4: entered allmulticast mode [ 419.304862][T17607] bond9: entered allmulticast mode [ 419.332766][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 419.370011][T17612] bond9: (slave bridge6): making interface the new active one [ 419.393617][T17612] bridge6: entered promiscuous mode [ 419.406291][T17612] bridge6: entered allmulticast mode [ 419.428933][T17612] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 419.588092][T17633] bridge0: left allmulticast mode [ 419.787122][T17646] bridge_slave_1: left promiscuous mode [ 419.797699][T17649] netlink: 'syz.4.3683': attribute type 3 has an invalid length. [ 419.805325][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.819056][T17646] bridge_slave_0: left allmulticast mode [ 419.832210][T17646] bridge_slave_0: left promiscuous mode [ 419.855010][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.131617][T17674] netlink: 'syz.0.3690': attribute type 1 has an invalid length. [ 420.171764][T17676] syzkaller1: entered promiscuous mode [ 420.184433][ T30] audit: type=1107 audit(1783805654.454:10): pid=17678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<#þ|àÁõD”•³ô7 :Ø(¾"÷ª%·I#sG(|Ó¬*ñ~un9˜ÍL>XÓøƒðýå™®áòøu˜á?“ÃôÚÚRˆ]q¹ê¢f!œõø!"*ÀbÞJè' [ 420.193929][T17676] syzkaller1: entered allmulticast mode [ 420.217804][T17674] vcan0 (unregistering): left allmulticast mode [ 420.249981][T17677] veth0: entered promiscuous mode [ 420.529371][T17702] netlink: 'syz.0.3699': attribute type 83 has an invalid length. [ 420.871540][T17664] veth0: left promiscuous mode [ 421.193682][T17690] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 421.211921][T17690] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 421.522431][T17776] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 421.615343][T17783] netlink: 'syz.1.3726': attribute type 1 has an invalid length. [ 421.844719][T17801] veth1: Caught tx_queue_len zero misconfig [ 421.989923][T17813] netlink: 'syz.4.3732': attribute type 9 has an invalid length. [ 422.437289][T17839] block nbd0: Unsupported socket: should be TCP or UNIX. [ 422.444986][T17845] netlink: 'syz.4.3743': attribute type 1 has an invalid length. [ 422.514880][T17846] bond18: Unable to set up delay as MII monitoring is disabled [ 422.528309][T17846] bond18 (unregistering): Released all slaves [ 422.565404][T17845] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 422.880730][T17876] __nla_validate_parse: 16 callbacks suppressed [ 422.880749][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3751'. [ 423.016208][T17884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3754'. [ 423.374070][T17909] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 423.472219][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 423.528818][T17921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3768'. [ 423.632946][T17928] syzkaller0: entered promiscuous mode [ 423.638665][T17928] syzkaller0: entered allmulticast mode [ 423.696284][T17937] netlink: 'syz.1.3772': attribute type 4 has an invalid length. [ 423.710394][T17937] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3772'. [ 423.749254][T17939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3772'. [ 423.903448][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'. [ 423.919481][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'. [ 424.226837][T17971] bond0: entered promiscuous mode [ 424.239190][T17971] bond_slave_0: entered promiscuous mode [ 424.251573][T17971] bond_slave_1: entered promiscuous mode [ 424.260058][T17971] batadv0: entered promiscuous mode [ 424.272210][T17971] hsr3: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 424.285975][T17971] hsr3: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 424.299962][T17971] 8021q: adding VLAN 0 to HW filter on device hsr3 [ 424.309153][T17971] bond0: left promiscuous mode [ 424.314856][T17971] bond_slave_0: left promiscuous mode [ 424.320618][T17971] bond_slave_1: left promiscuous mode [ 424.329709][T17971] batadv0: left promiscuous mode [ 424.341680][T17981] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 424.421214][T17966] netlink: 'syz.0.3785': attribute type 21 has an invalid length. [ 424.443998][T17966] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3785'. [ 424.484625][T17989] netlink: 'syz.2.3793': attribute type 1 has an invalid length. [ 424.502439][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'. [ 424.540691][T17989] 8021q: adding VLAN 0 to HW filter on device bond11 [ 424.569594][T17989] bond11: (slave geneve3): making interface the new active one [ 424.578955][T17989] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 424.587956][T14273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.613665][T14273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.624535][T14273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.667080][T14273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.746596][T18000] netlink: 'syz.4.3798': attribute type 39 has an invalid length. [ 424.889559][T18014] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 425.286098][T18038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.305748][T18039] netlink: 'syz.0.3811': attribute type 14 has an invalid length. [ 425.326861][T18039] netlink: 'syz.0.3811': attribute type 14 has an invalid length. [ 425.621789][T18054] nbd: must specify at least one socket [ 425.930025][T18071] team0: Device gtp2 is up. Set it down before adding it as a team port [ 427.262205][T18158] syzkaller1: entered promiscuous mode [ 427.274759][T18158] syzkaller1: entered allmulticast mode [ 427.537742][T18181] xt_hashlimit: overflow, try lower: 3/0 [ 427.586718][T18182] netlink: 'syz.2.3866': attribute type 4 has an invalid length. [ 427.818766][T18193] netlink: 'syz.4.3871': attribute type 1 has an invalid length. [ 428.294154][T18232] rdma_rxe: rxe_newlink: failed to add wg2 [ 428.328363][T18235] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 428.397022][T18237] lo: entered promiscuous mode [ 428.407272][T18237] netlink: 'syz.1.3887': attribute type 2 has an invalid length. [ 428.429922][T18237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.508365][T18233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.638458][T18238] __nla_validate_parse: 76 callbacks suppressed [ 428.638480][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'. [ 428.667973][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3885'. [ 428.701481][T18255] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3890'. [ 428.729287][T18247] syzkaller0: entered promiscuous mode [ 428.735809][T18247] syzkaller0: entered allmulticast mode [ 428.744980][T18233] team0: Mode changed to "activebackup" [ 428.791164][T18264] IPVS: sh: FWM 3 0x00000003 - no destination available [ 428.962758][T18273] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3894'. [ 428.973184][T18274] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3894'. [ 430.774479][T18303] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.965162][T18316] x_tables: duplicate underflow at hook 2 [ 431.094007][T18319] syzkaller0: entered promiscuous mode [ 431.099629][T18319] syzkaller0: entered allmulticast mode [ 431.196044][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3916'. [ 432.736118][T18336] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 432.743447][T18344] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 432.963911][T18371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3924'. [ 433.182097][T18384] netlink: 'syz.4.3927': attribute type 5 has an invalid length. [ 433.198422][T18391] gre0: left promiscuous mode [ 433.247050][T18391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.258918][T18391] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.293222][T18391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.301404][T18400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3930'. [ 433.328840][T18391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.338770][T18391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.347324][T18401] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3931'. [ 433.358947][T18391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.369803][T18391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.383938][T18391] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 433.657384][T18415] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3937'. [ 433.698718][T18421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3940'. [ 433.863233][T18436] netlink: 'syz.2.3944': attribute type 5 has an invalid length. [ 433.944179][T18433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3942'. [ 433.964826][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3946'. [ 434.007792][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3946'. [ 434.160713][T18450] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3948'. [ 434.186140][T18450] tipc: Enabled bearer , priority 10 [ 434.327941][T18463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3954'. [ 434.540751][T18476] team0: entered promiscuous mode [ 434.554812][T18476] team0: left allmulticast mode [ 434.586590][T18478] netlink: 'syz.2.3960': attribute type 2 has an invalid length. [ 434.592015][T18476] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 434.665556][T18484] FAULT_INJECTION: forcing a failure. [ 434.665556][T18484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.679719][T18484] CPU: 0 UID: 0 PID: 18484 Comm: syz.2.3961 Not tainted syzkaller #0 PREEMPT(full) [ 434.679764][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 434.679776][T18484] Call Trace: [ 434.679783][T18484] [ 434.679791][T18484] dump_stack_lvl+0xe8/0x150 [ 434.679824][T18484] should_fail_ex+0x40c/0x560 [ 434.679851][T18484] _copy_from_user+0x2d/0xb0 [ 434.679878][T18484] generic_map_update_batch+0x6a3/0x9a0 [ 434.679926][T18484] ? __pfx_generic_map_update_batch+0x10/0x10 [ 434.679948][T18484] ? __fget_files+0x2a/0x420 [ 434.679981][T18484] ? __pfx_generic_map_update_batch+0x10/0x10 [ 434.680001][T18484] bpf_map_do_batch+0x391/0x630 [ 434.680034][T18484] __sys_bpf+0xbe5/0xd90 [ 434.680067][T18484] ? __pfx___sys_bpf+0x10/0x10 [ 434.680104][T18484] ? __fget_files+0x2a/0x420 [ 434.680144][T18484] ? ksys_write+0x242/0x270 [ 434.680178][T18484] ? __pfx_ksys_write+0x10/0x10 [ 434.680225][T18484] __x64_sys_bpf+0xba/0xd0 [ 434.680246][T18484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.680266][T18484] do_syscall_64+0x174/0x580 [ 434.680292][T18484] ? trace_irq_disable+0x3b/0x140 [ 434.680315][T18484] ? clear_bhb_loop+0x40/0x90 [ 434.680338][T18484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.680356][T18484] RIP: 0033:0x7f572139de59 [ 434.680373][T18484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.680388][T18484] RSP: 002b:00007f5722208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.680407][T18484] RAX: ffffffffffffffda RBX: 00007f5721625fa0 RCX: 00007f572139de59 [ 434.680420][T18484] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 434.680431][T18484] RBP: 00007f5722208090 R08: 0000000000000000 R09: 0000000000000000 [ 434.680442][T18484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.680452][T18484] R13: 00007f5721626038 R14: 00007f5721625fa0 R15: 00007ffce5a21268 [ 434.680478][T18484] [ 435.064317][T18495] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3965'. [ 435.100213][T18496] netlink: 'syz.3.3966': attribute type 21 has an invalid length. [ 435.203749][ T809] tipc: Node number set to 4063469317 [ 435.215505][T18507] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3966'. [ 435.250263][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3966'. [ 435.349200][T18514] netlink: 'syz.0.3972': attribute type 9 has an invalid length. [ 435.382333][T18510] netlink: 'syz.1.3971': attribute type 1 has an invalid length. [ 435.907929][T18539] syzkaller0: entered promiscuous mode [ 435.913889][T18539] syzkaller0: entered allmulticast mode [ 437.558346][T18574] syz2: rxe_newlink: already configured on wg2 [ 437.845528][T18593] netlink: 'syz.3.3997': attribute type 21 has an invalid length. [ 437.865249][T18593] netlink: 'syz.3.3997': attribute type 21 has an invalid length. [ 438.034663][T18609] xt_CONNSECMARK: invalid mode: 0 [ 438.170598][T18621] syzkaller0: entered promiscuous mode [ 438.188447][T18621] syzkaller0: entered allmulticast mode [ 438.206935][T18626] ªªªªªª: renamed from bond_slave_0 [ 438.496357][T18641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.420845][T18675] x_tables: duplicate underflow at hook 2 [ 439.426657][T18644] wg2 speed is unknown, defaulting to 1000 [ 439.677887][T18685] FAULT_INJECTION: forcing a failure. [ 439.677887][T18685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.691574][T18685] CPU: 1 UID: 0 PID: 18685 Comm: syz.4.4025 Not tainted syzkaller #0 PREEMPT(full) [ 439.691597][T18685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 439.691609][T18685] Call Trace: [ 439.691616][T18685] [ 439.691624][T18685] dump_stack_lvl+0xe8/0x150 [ 439.691657][T18685] should_fail_ex+0x40c/0x560 [ 439.691683][T18685] _copy_from_user+0x2d/0xb0 [ 439.691710][T18685] generic_map_update_batch+0x651/0x9a0 [ 439.691739][T18685] ? __pfx_generic_map_update_batch+0x10/0x10 [ 439.691759][T18685] ? __fget_files+0x2a/0x420 [ 439.691789][T18685] ? __pfx_generic_map_update_batch+0x10/0x10 [ 439.691808][T18685] bpf_map_do_batch+0x391/0x630 [ 439.691839][T18685] __sys_bpf+0xbe5/0xd90 [ 439.691870][T18685] ? __pfx___sys_bpf+0x10/0x10 [ 439.691904][T18685] ? __fget_files+0x2a/0x420 [ 439.691943][T18685] ? ksys_write+0x242/0x270 [ 439.691973][T18685] ? __pfx_ksys_write+0x10/0x10 [ 439.692004][T18685] __x64_sys_bpf+0xba/0xd0 [ 439.692026][T18685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.692046][T18685] do_syscall_64+0x174/0x580 [ 439.692072][T18685] ? trace_irq_disable+0x3b/0x140 [ 439.692095][T18685] ? clear_bhb_loop+0x40/0x90 [ 439.692117][T18685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.692135][T18685] RIP: 0033:0x7fb942f9de59 [ 439.692152][T18685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.692168][T18685] RSP: 002b:00007fb943e45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.692188][T18685] RAX: ffffffffffffffda RBX: 00007fb943225fa0 RCX: 00007fb942f9de59 [ 439.692201][T18685] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 439.692213][T18685] RBP: 00007fb943e45090 R08: 0000000000000000 R09: 0000000000000000 [ 439.692225][T18685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.692236][T18685] R13: 00007fb943226038 R14: 00007fb943225fa0 R15: 00007fff70020098 [ 439.692265][T18685] [ 440.061449][T18696] __nla_validate_parse: 14 callbacks suppressed [ 440.061468][T18696] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4028'. [ 440.089712][T18697] syzkaller1: entered promiscuous mode [ 440.095632][T18697] syzkaller1: entered allmulticast mode [ 440.161489][T18697] syzkaller0: entered promiscuous mode [ 440.167202][T18697] syzkaller0: entered allmulticast mode [ 440.190980][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4030'. [ 440.200665][T18707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4030'. [ 440.877517][T18723] netlink: 'syz.3.4034': attribute type 11 has an invalid length. [ 440.885474][T18723] netlink: 'syz.3.4034': attribute type 4 has an invalid length. [ 440.893725][T18723] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4034'. [ 440.910828][T18723] netlink: 'syz.3.4034': attribute type 12 has an invalid length. [ 441.882374][T18707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.992217][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 442.353999][T18751] netlink: 'syz.2.4042': attribute type 1 has an invalid length. [ 442.541687][T18751] 8021q: adding VLAN 0 to HW filter on device bond13 [ 442.763989][T18772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4049'. [ 442.826784][T18774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4048'. [ 442.867302][T18771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4048'. [ 442.898557][T18771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4048'. [ 442.921054][T18771] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4048'. [ 443.100632][T18792] netlink: 'syz.2.4057': attribute type 13 has an invalid length. [ 443.123549][T18792] gretap0: refused to change device tx_queue_len [ 443.136071][T18792] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 443.176014][T18785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.290736][T18803] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 443.840313][T18840] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 443.871569][T18843] syzkaller0: entered promiscuous mode [ 443.880498][T18843] syzkaller0: entered allmulticast mode [ 443.918233][T18847] FAULT_INJECTION: forcing a failure. [ 443.918233][T18847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.933304][T18847] CPU: 1 UID: 0 PID: 18847 Comm: syz.2.4077 Not tainted syzkaller #0 PREEMPT(full) [ 443.933329][T18847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.933341][T18847] Call Trace: [ 443.933348][T18847] [ 443.933355][T18847] dump_stack_lvl+0xe8/0x150 [ 443.933388][T18847] should_fail_ex+0x40c/0x560 [ 443.933414][T18847] _copy_from_user+0x2d/0xb0 [ 443.933442][T18847] generic_map_update_batch+0x6a3/0x9a0 [ 443.933471][T18847] ? __pfx_generic_map_update_batch+0x10/0x10 [ 443.933492][T18847] ? __fget_files+0x2a/0x420 [ 443.933522][T18847] ? __pfx_generic_map_update_batch+0x10/0x10 [ 443.933542][T18847] bpf_map_do_batch+0x391/0x630 [ 443.933589][T18847] __sys_bpf+0xbe5/0xd90 [ 443.933623][T18847] ? __pfx___sys_bpf+0x10/0x10 [ 443.933658][T18847] ? __fget_files+0x2a/0x420 [ 443.933700][T18847] ? ksys_write+0x242/0x270 [ 443.933732][T18847] ? __pfx_ksys_write+0x10/0x10 [ 443.933777][T18847] __x64_sys_bpf+0xba/0xd0 [ 443.933799][T18847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.933819][T18847] do_syscall_64+0x174/0x580 [ 443.933845][T18847] ? trace_irq_disable+0x3b/0x140 [ 443.933867][T18847] ? clear_bhb_loop+0x40/0x90 [ 443.933890][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.933907][T18847] RIP: 0033:0x7f572139de59 [ 443.933924][T18847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.933940][T18847] RSP: 002b:00007f5722208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.933959][T18847] RAX: ffffffffffffffda RBX: 00007f5721625fa0 RCX: 00007f572139de59 [ 443.933973][T18847] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 443.933984][T18847] RBP: 00007f5722208090 R08: 0000000000000000 R09: 0000000000000000 [ 443.933996][T18847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.934005][T18847] R13: 00007f5721626038 R14: 00007f5721625fa0 R15: 00007ffce5a21268 [ 443.934034][T18847] [ 444.356536][T18864] netlink: 'syz.4.4080': attribute type 2 has an invalid length. [ 444.429174][T18866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.536809][T18875] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 445.005341][T18903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.328926][T18932] __nla_validate_parse: 17 callbacks suppressed [ 445.328944][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4107'. [ 445.677844][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4112'. [ 445.858174][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'. [ 446.040821][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4118'. [ 446.194598][T18967] netlink: 'syz.0.4119': attribute type 8 has an invalid length. [ 446.251438][T18969] netlink: 'syz.1.4120': attribute type 17 has an invalid length. [ 446.268704][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4120'. [ 446.303205][T18969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4120'. [ 446.528774][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4129'. [ 446.865067][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4138'. [ 446.882971][T19016] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4136'. [ 446.892278][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4134'. [ 446.994860][T19021] macvtap1: entered promiscuous mode [ 447.018758][T19021] vlan0: entered promiscuous mode [ 447.037027][T19021] macvtap1: entered allmulticast mode [ 447.049830][T19021] vlan0: entered allmulticast mode [ 447.294780][T19035] bridge5: entered promiscuous mode [ 447.303663][T19035] bridge5: entered allmulticast mode [ 447.528895][T19038] netlink: 'syz.2.4141': attribute type 1 has an invalid length. [ 447.656880][T19018] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 447.701323][T19018] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 447.786441][T19028] wg2 speed is unknown, defaulting to 1000 [ 448.355725][T19084] batadv_slave_1: entered promiscuous mode [ 448.450644][T19081] batadv_slave_1: left promiscuous mode [ 448.716550][T19102] bond0: Error: CAN devices cannot be enslaved [ 448.817139][T19105] xt_hashlimit: size too large, truncated to 1048576 [ 449.029620][T19122] netlink: 'syz.4.4167': attribute type 21 has an invalid length. [ 449.408534][T19141] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 449.457752][T19140] syzkaller0: entered promiscuous mode [ 449.479656][T19140] syzkaller0: entered allmulticast mode [ 449.938073][T19172] syzkaller0: entered promiscuous mode [ 449.945156][T19172] syzkaller0: entered allmulticast mode [ 450.230555][T19192] syzkaller1: entered promiscuous mode [ 450.239016][T19192] syzkaller1: entered allmulticast mode [ 450.261095][T19191] syzkaller0: entered promiscuous mode [ 450.267246][T19191] syzkaller0: entered allmulticast mode [ 450.588636][T19213] __nla_validate_parse: 4 callbacks suppressed [ 450.588655][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4199'. [ 450.602398][T19211] geneve2: entered promiscuous mode [ 450.628327][T19214] tipc: Resetting bearer [ 450.906436][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 450.938793][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 450.958122][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 450.974700][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 450.990445][T19236] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 450.999974][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.018328][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.031478][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.039722][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.047812][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.055520][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.063074][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.070280][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.081430][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.100850][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.129268][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.146090][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.166278][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.187843][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.199063][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.206786][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.214304][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.239958][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.258361][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.270196][T19248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4211'. [ 451.276187][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.305745][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.323128][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.341962][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.363049][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.380120][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.399898][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.421167][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.447256][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.455320][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.462950][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.470135][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.480188][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.489253][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.497430][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.505192][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.512849][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.537190][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.561466][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.571915][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.579394][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.587337][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.595914][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.603487][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.610750][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.619884][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.641244][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.657816][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.672368][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.689315][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.703699][T19229] IPVS: set_ctl: invalid protocol: 59 172.20.20.20:20001 [ 451.806016][T19270] netlink: 'syz.3.4217': attribute type 1 has an invalid length. [ 451.813973][T19270] netlink: 'syz.3.4217': attribute type 4 has an invalid length. [ 451.821820][T19270] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4217'. [ 451.833309][T19270] netlink: 'syz.3.4217': attribute type 10 has an invalid length. [ 451.845868][T19270] dummy0: left promiscuous mode [ 451.876131][T19270] .`: (slave dummy0): Enslaving as an active interface with an up link [ 452.034547][T19276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4218'. [ 453.885425][T19320] netlink: 'syz.0.4230': attribute type 1 has an invalid length. [ 453.893907][T19317] netlink: 'syz.0.4230': attribute type 1 has an invalid length. [ 453.919493][T19314] bridge0: port 1(vlan3) entered blocking state [ 453.936692][T19314] bridge0: port 1(vlan3) entered disabled state [ 453.944842][T19314] vlan3: entered allmulticast mode [ 453.950110][T19314] geneve0: entered allmulticast mode [ 453.961095][T19314] vlan3: entered promiscuous mode [ 453.967668][T19314] geneve0: entered promiscuous mode [ 454.011506][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4232'. [ 454.192349][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4235'. [ 454.237979][T19339] veth1_macvtap: left promiscuous mode [ 454.244361][T19339] macsec0: entered promiscuous mode [ 454.253708][T19339] macsec0: entered allmulticast mode [ 454.271852][T19334] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 454.323345][T19339] veth1_macvtap: entered promiscuous mode [ 454.358147][T19339] veth1_macvtap: entered allmulticast mode [ 454.369843][T19339] macsec0: left promiscuous mode [ 454.380426][T19348] netlink: 'syz.2.4239': attribute type 1 has an invalid length. [ 454.380633][T19339] macsec0: left allmulticast mode [ 454.398497][T19348] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4239'. [ 454.413029][T19339] veth1_macvtap: left allmulticast mode [ 454.546808][T19361] netlink: 'syz.3.4244': attribute type 1 has an invalid length. [ 454.643980][T19361] 8021q: adding VLAN 0 to HW filter on device bond13 [ 454.726375][T19366] bond13: (slave geneve2): making interface the new active one [ 454.736959][T19366] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 455.039991][T19401] netlink: 'syz.4.4253': attribute type 1 has an invalid length. [ 455.092442][T19406] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4253'. [ 455.126420][T19395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4253'. [ 455.138302][T19395] 8021q: adding VLAN 0 to HW filter on device bond18 [ 455.955707][T19439] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 456.041983][T19439] xt_hashlimit: size too large, truncated to 1048576 [ 456.210497][T19457] FAULT_INJECTION: forcing a failure. [ 456.210497][T19457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.249021][T19457] CPU: 1 UID: 0 PID: 19457 Comm: syz.2.4273 Not tainted syzkaller #0 PREEMPT(full) [ 456.249048][T19457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 456.249084][T19457] Call Trace: [ 456.249092][T19457] [ 456.249101][T19457] dump_stack_lvl+0xe8/0x150 [ 456.249141][T19457] should_fail_ex+0x40c/0x560 [ 456.249172][T19457] _copy_from_user+0x2d/0xb0 [ 456.249215][T19457] kstrtouint_from_user+0xd6/0x180 [ 456.249242][T19457] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 456.249282][T19457] proc_fail_nth_write+0x8e/0x210 [ 456.249311][T19457] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 456.249345][T19457] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 456.249371][T19457] vfs_write+0x296/0xba0 [ 456.249410][T19457] ? __pfx_vfs_write+0x10/0x10 [ 456.249441][T19457] ? __fget_files+0x2a/0x420 [ 456.249472][T19457] ? __fget_files+0x3a2/0x420 [ 456.249496][T19457] ? __fget_files+0x2a/0x420 [ 456.249530][T19457] ksys_write+0x150/0x270 [ 456.249561][T19457] ? __pfx_ksys_write+0x10/0x10 [ 456.249600][T19457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.249623][T19457] do_syscall_64+0x174/0x580 [ 456.249651][T19457] ? trace_irq_disable+0x3b/0x140 [ 456.249676][T19457] ? clear_bhb_loop+0x40/0x90 [ 456.249700][T19457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.249719][T19457] RIP: 0033:0x7f572135e68e [ 456.249737][T19457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 456.249753][T19457] RSP: 002b:00007f5722207fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.249774][T19457] RAX: ffffffffffffffda RBX: 00007f57222086c0 RCX: 00007f572135e68e [ 456.249786][T19457] RDX: 0000000000000001 RSI: 00007f57222080a0 RDI: 0000000000000004 [ 456.249797][T19457] RBP: 00007f5722208090 R08: 0000000000000000 R09: 0000000000000000 [ 456.249808][T19457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.249819][T19457] R13: 00007f5721626038 R14: 00007f5721625fa0 R15: 00007ffce5a21268 [ 456.249851][T19457] [ 456.777892][T19479] netlink: 'syz.1.4281': attribute type 13 has an invalid length. [ 456.840551][ T30] audit: type=1804 audit(1783805691.114:11): pid=19485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4283" name="/newroot/878/cgroup.controllers" dev="tmpfs" ino=4465 res=1 errno=0 [ 456.885986][ T30] audit: type=1800 audit(1783805691.114:12): pid=19485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4283" name="cgroup.controllers" dev="tmpfs" ino=4465 res=0 errno=0 [ 456.911308][T19482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4282'. [ 457.187853][T19508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4289'. [ 457.362006][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4295'. [ 457.371648][T19523] gretap0: entered promiscuous mode [ 457.413215][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4297'. [ 457.434406][T19526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4297'. [ 457.500501][T19530] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4299'. [ 457.530869][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4300'. [ 457.583963][T19533] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 457.605266][T19533] macvlan2: entered promiscuous mode [ 457.610655][T19533] macvlan2: entered allmulticast mode [ 457.617041][T19533] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 457.766946][T19545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4302'. [ 457.798348][T19548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4305'. [ 457.815231][T19549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4305'. [ 457.990053][T19562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.208461][T19575] sctp: [Deprecated]: syz.1.4315 (pid 19575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.208461][T19575] Use struct sctp_sack_info instead [ 458.334250][T19581] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 458.348047][T19585] netlink: 'syz.4.4321': attribute type 1 has an invalid length. [ 458.367383][T19585] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 459.187047][T19652] unsupported nlmsg_type 40 [ 459.676268][T19680] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.075584][T19705] tipc: Resetting bearer [ 460.096567][T19705] tipc: Resetting bearer [ 460.331875][T19669] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 460.504180][T19737] netlink: 'syz.3.4377': attribute type 1 has an invalid length. [ 460.918124][T19762] lo: Caught tx_queue_len zero misconfig [ 461.182942][T19779] netlink: 'syz.3.4389': attribute type 32 has an invalid length. [ 461.221327][T19779] bond14: Setting coupled_control to off (0) [ 461.417447][T19799] openvswitch: netlink: Flow key attr not present in new flow. [ 461.888878][T19835] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 461.919144][T19835] __nla_validate_parse: 18 callbacks suppressed [ 461.919162][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'. [ 461.976994][T19835] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 461.995487][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 462.012851][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'. [ 462.034866][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 462.044737][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 462.067785][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 462.087452][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 462.124582][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 462.153358][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 462.189172][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 463.012229][T19908] ipt_ECN: cannot use operation on non-tcp rule [ 463.177910][T19926] syzkaller1: entered promiscuous mode [ 463.186904][T19926] syzkaller1: entered allmulticast mode [ 463.568490][T19951] syzkaller0: entered promiscuous mode [ 463.593362][T19951] syzkaller0: entered allmulticast mode [ 464.040547][T19983] netlink: 'syz.0.4454': attribute type 1 has an invalid length. [ 464.072387][T19983] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 464.151185][T19987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.318837][T19993] netlink: 'syz.0.4460': attribute type 1 has an invalid length. [ 464.840833][T20050] tipc: Enabled bearer , priority 10 [ 465.001520][T20062] syzkaller0: entered promiscuous mode [ 465.011260][T20062] syzkaller0: entered allmulticast mode [ 465.615229][T20104] syzkaller0: entered promiscuous mode [ 465.641772][T20104] syzkaller0: entered allmulticast mode [ 466.606396][T20163] bond21: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 466.939532][T20184] syzkaller0: entered promiscuous mode [ 466.945472][T20184] syzkaller0: entered allmulticast mode [ 467.859602][T20197] pimreg: left allmulticast mode [ 467.957430][T20201] pimreg: entered allmulticast mode [ 468.132316][T20213] __nla_validate_parse: 71 callbacks suppressed [ 468.132334][T20213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4527'. [ 468.377441][T20227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4532'. [ 468.523506][T20233] syzkaller0: entered promiscuous mode [ 468.529332][T20233] syzkaller0: entered allmulticast mode [ 468.547107][T20242] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 468.824594][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4541'. [ 469.430794][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4543'. [ 470.337818][T20267] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 470.341190][T20275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4546'. [ 470.363848][T20276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4546'. [ 470.431431][T20281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4548'. [ 470.459364][T20283] netlink: 'syz.2.4547': attribute type 1 has an invalid length. [ 470.468008][T20280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4548'. [ 470.477346][T20283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.484678][T20283] IPv6: NLM_F_CREATE should be set when creating new route [ 470.491980][T20283] IPv6: NLM_F_CREATE should be set when creating new route [ 470.538531][T20281] bond16: (slave vti0): The slave device specified does not support setting the MAC address [ 470.552174][T20291] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4549'. [ 470.562949][T20281] bond16: (slave vti0): Error -95 calling set_mac_address [ 470.718266][T20295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4554'. [ 470.729242][T20295] netlink: 'syz.3.4554': attribute type 7 has an invalid length. [ 470.737864][T20295] netlink: 'syz.3.4554': attribute type 8 has an invalid length. [ 470.825970][T20301] netlink: 'syz.0.4553': attribute type 3 has an invalid length. [ 470.861954][T20301] netlink: 'syz.0.4553': attribute type 22 has an invalid length. [ 470.892117][T20301] netlink: 'syz.0.4553': attribute type 22 has an invalid length. [ 471.119529][T20324] FAULT_INJECTION: forcing a failure. [ 471.119529][T20324] name failslab, interval 1, probability 0, space 0, times 0 [ 471.136523][T20324] CPU: 1 UID: 0 PID: 20324 Comm: syz.4.4561 Not tainted syzkaller #0 PREEMPT(full) [ 471.136548][T20324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.136560][T20324] Call Trace: [ 471.136567][T20324] [ 471.136574][T20324] dump_stack_lvl+0xe8/0x150 [ 471.136609][T20324] should_fail_ex+0x40c/0x560 [ 471.136637][T20324] should_failslab+0xa8/0x100 [ 471.136666][T20324] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 471.136697][T20324] ? __kasan_kmalloc+0x93/0xb0 [ 471.136724][T20324] ? __request_module+0x2ec/0x630 [ 471.136752][T20324] ? __request_module+0x2ec/0x630 [ 471.136785][T20324] kstrdup+0x42/0x100 [ 471.136843][T20323] vlan5: entered promiscuous mode [ 471.136839][T20324] __request_module+0x2ec/0x630 [ 471.136873][T20324] ? __pfx___request_module+0x10/0x10 [ 471.136949][T20324] ? kasan_quarantine_put+0xbb/0x1f0 [ 471.137079][T20324] ? security_capable+0x7e/0x2c0 [ 471.137231][T20324] ? dev_load+0x21/0x1f0 [ 471.137342][T20324] dev_load+0x190/0x1f0 [ 471.137417][T20324] ? __pfx_ioctl_standard_call+0x10/0x10 [ 471.137562][T20324] wext_ioctl_dispatch+0x9d/0x410 [ 471.137625][T20324] wext_handle_ioctl+0x110/0x1d0 [ 471.137698][T20324] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 471.137757][T20324] ? hook_file_ioctl+0x1f0/0x5f0 [ 471.137859][T20324] sock_ioctl+0x159/0x7e0 [ 471.137926][T20324] ? __pfx_sock_ioctl+0x10/0x10 [ 471.137984][T20324] ? __fget_files+0x2a/0x420 [ 471.138044][T20324] ? __fget_files+0x3a2/0x420 [ 471.138107][T20324] ? __fget_files+0x2a/0x420 [ 471.138181][T20324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 471.138248][T20324] ? __pfx_sock_ioctl+0x10/0x10 [ 471.138306][T20324] __se_sys_ioctl+0xfc/0x170 [ 471.138368][T20324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.138442][T20324] do_syscall_64+0x174/0x580 [ 471.138515][T20324] ? trace_irq_disable+0x3b/0x140 [ 471.138574][T20324] ? clear_bhb_loop+0x40/0x90 [ 471.138639][T20324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.138686][T20324] RIP: 0033:0x7fb942f9de59 [ 471.138746][T20324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.138789][T20324] RSP: 002b:00007fb943e45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.138854][T20324] RAX: ffffffffffffffda RBX: 00007fb943225fa0 RCX: 00007fb942f9de59 [ 471.138868][T20324] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000003 [ 471.138898][T20324] RBP: 00007fb943e45090 R08: 0000000000000000 R09: 0000000000000000 [ 471.138930][T20324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.138978][T20324] R13: 00007fb943226038 R14: 00007fb943225fa0 R15: 00007fff70020098 [ 471.139074][T20324] [ 471.550113][T20336] syzkaller0: entered promiscuous mode [ 471.565458][T20336] syzkaller0: entered allmulticast mode [ 471.595682][T20334] nbd2: detected capacity change from 0 to 63 [ 471.622063][ T4943] block nbd2: Receive control failed (result -32) [ 471.633945][ T11] block nbd2: Dead connection, failed to find a fallback [ 471.644172][ T11] block nbd2: shutting down sockets [ 471.650605][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.664015][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 471.682092][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.692098][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 471.700680][ T11] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.709970][ T11] Buffer I/O error on dev nbd2, logical block 2, async page read [ 471.718482][ T11] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.728348][ T11] Buffer I/O error on dev nbd2, logical block 3, async page read [ 471.739419][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.748822][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 471.757340][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.767757][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 471.775772][ T11] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.785795][ T11] Buffer I/O error on dev nbd2, logical block 2, async page read [ 471.793775][ T11] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.802968][ T11] Buffer I/O error on dev nbd2, logical block 3, async page read [ 471.810867][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.820912][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 471.828946][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.838256][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 471.849937][T20341] ldm_validate_partition_table(): Disk read failed. [ 471.859632][T20341] Dev nbd2: unable to read RDB block 0 [ 471.867760][T20341] nbd2: unable to read partition table [ 471.911577][T20341] ldm_validate_partition_table(): Disk read failed. [ 471.980988][T20341] Dev nbd2: unable to read RDB block 0 [ 472.014905][T20341] nbd2: unable to read partition table [ 472.087891][T20364] bond0: left promiscuous mode [ 472.104893][T20364] bond_slave_0: left promiscuous mode [ 472.122746][T20364] bond_slave_1: left promiscuous mode [ 472.188741][T20364] macvlan0: left promiscuous mode [ 472.208428][T20364] ipvlan0: left promiscuous mode [ 472.228749][T20364] macsec0: left promiscuous mode [ 472.254544][T20364] gtp0: left promiscuous mode [ 472.270560][T20364] veth5: left promiscuous mode [ 472.301936][T20375] FAULT_INJECTION: forcing a failure. [ 472.301936][T20375] name failslab, interval 1, probability 0, space 0, times 0 [ 472.315010][T20364] vlan2: left promiscuous mode [ 472.322213][T20364] hsr0: left promiscuous mode [ 472.332992][T20375] CPU: 0 UID: 0 PID: 20375 Comm: syz.4.4577 Not tainted syzkaller #0 PREEMPT(full) [ 472.333014][T20375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.333025][T20375] Call Trace: [ 472.333032][T20375] [ 472.333041][T20375] dump_stack_lvl+0xe8/0x150 [ 472.333076][T20375] should_fail_ex+0x40c/0x560 [ 472.333103][T20375] should_failslab+0xa8/0x100 [ 472.333132][T20375] __kmalloc_cache_noprof+0xa8/0x660 [ 472.333158][T20375] ? call_usermodehelper_setup+0x8e/0x270 [ 472.333234][T20375] ? call_usermodehelper_setup+0x8e/0x270 [ 472.333255][T20375] ? __request_module+0x2ec/0x630 [ 472.333305][T20375] call_usermodehelper_setup+0x8e/0x270 [ 472.333327][T20375] ? __pfx_free_modprobe_argv+0x10/0x10 [ 472.333364][T20375] __request_module+0x3ba/0x630 [ 472.333402][T20375] ? __pfx___request_module+0x10/0x10 [ 472.333432][T20375] ? kasan_quarantine_put+0xbb/0x1f0 [ 472.333473][T20375] ? security_capable+0x7e/0x2c0 [ 472.333510][T20375] ? dev_load+0x21/0x1f0 [ 472.333537][T20375] dev_load+0x190/0x1f0 [ 472.333564][T20375] ? __pfx_ioctl_standard_call+0x10/0x10 [ 472.333592][T20375] wext_ioctl_dispatch+0x9d/0x410 [ 472.333622][T20375] wext_handle_ioctl+0x110/0x1d0 [ 472.333651][T20375] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 472.333675][T20375] ? hook_file_ioctl+0x1f0/0x5f0 [ 472.333723][T20375] sock_ioctl+0x159/0x7e0 [ 472.333758][T20375] ? __pfx_sock_ioctl+0x10/0x10 [ 472.333781][T20375] ? __fget_files+0x2a/0x420 [ 472.333808][T20375] ? __fget_files+0x3a2/0x420 [ 472.333833][T20375] ? __fget_files+0x2a/0x420 [ 472.333863][T20375] ? bpf_lsm_file_ioctl+0x9/0x20 [ 472.333887][T20375] ? __pfx_sock_ioctl+0x10/0x10 [ 472.333910][T20375] __se_sys_ioctl+0xfc/0x170 [ 472.333930][T20375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.333953][T20375] do_syscall_64+0x174/0x580 [ 472.333983][T20375] ? trace_irq_disable+0x3b/0x140 [ 472.334026][T20375] ? clear_bhb_loop+0x40/0x90 [ 472.334053][T20375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.334074][T20375] RIP: 0033:0x7fb942f9de59 [ 472.334093][T20375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.334112][T20375] RSP: 002b:00007fb943e45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.334134][T20375] RAX: ffffffffffffffda RBX: 00007fb943225fa0 RCX: 00007fb942f9de59 [ 472.334149][T20375] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000003 [ 472.334163][T20375] RBP: 00007fb943e45090 R08: 0000000000000000 R09: 0000000000000000 [ 472.334177][T20375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.334190][T20375] R13: 00007fb943226038 R14: 00007fb943225fa0 R15: 00007fff70020098 [ 472.334225][T20375] [ 472.338846][T20364] macvtap1: left promiscuous mode [ 472.620043][T20364] vlan0: left promiscuous mode [ 472.709745][T20379] veth7: entered allmulticast mode [ 472.769009][T20382] vlan3: entered promiscuous mode [ 472.774612][T20382] bridge0: entered promiscuous mode [ 472.785697][T20382] vlan1: entered promiscuous mode [ 472.799792][T20382] geneve0: entered promiscuous mode [ 472.862303][T20385] bond0: left allmulticast mode [ 472.878193][T20385] bond_slave_0: left allmulticast mode [ 472.889995][T20385] bond_slave_1: left allmulticast mode [ 473.343759][T20416] vlan5: entered promiscuous mode [ 473.354721][T20416] bridge0: entered promiscuous mode [ 473.436639][T20422] __nla_validate_parse: 7 callbacks suppressed [ 473.436658][T20422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4587'. [ 473.438689][T20427] netlink: 'syz.1.4588': attribute type 1 has an invalid length. [ 473.707788][T20440] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 473.739655][T20440] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4591'. [ 474.111079][T20464] netlink: 308 bytes leftover after parsing attributes in process `syz.1.4600'. [ 474.123519][T20465] netlink: 'syz.0.4601': attribute type 7 has an invalid length. [ 474.126539][T20463] sctp: [Deprecated]: syz.3.4602 (pid 20463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.126539][T20463] Use struct sctp_sack_info instead [ 474.353229][T20480] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4609'. [ 474.368774][T20477] macvtap3: entered promiscuous mode [ 474.375405][T20477] macvtap3: entered allmulticast mode [ 474.394441][T20477] [ 474.396822][T20477] ====================================================== [ 474.403882][T20477] WARNING: possible circular locking dependency detected [ 474.410981][T20477] syzkaller #0 Not tainted [ 474.415418][T20477] ------------------------------------------------------ [ 474.422505][T20477] syz.3.4608/20477 is trying to acquire lock: [ 474.428634][T20477] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 474.438647][T20477] [ 474.438647][T20477] but task is already holding lock: [ 474.446029][T20477] ffffffff8f5e37c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 474.454841][T20477] [ 474.454841][T20477] which lock already depends on the new lock. [ 474.454841][T20477] [ 474.465261][T20477] [ 474.465261][T20477] the existing dependency chain (in reverse order) is: [ 474.474297][T20477] [ 474.474297][T20477] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 474.481614][T20477] __mutex_lock+0x19d/0x1550 [ 474.486762][T20477] get_device_parent+0x16f/0x3a0 [ 474.492297][T20477] device_add+0x2d4/0xb80 [ 474.497185][T20477] device_create+0x269/0x300 [ 474.502311][T20477] msr_device_create+0x33/0x50 [ 474.507647][T20477] cpuhp_invoke_callback+0x434/0x810 [ 474.513475][T20477] cpuhp_thread_fun+0x362/0x780 [ 474.518866][T20477] smpboot_thread_fn+0x57c/0xa80 [ 474.524359][T20477] kthread+0x388/0x470 [ 474.528961][T20477] ret_from_fork+0x514/0xb70 [ 474.534102][T20477] ret_from_fork_asm+0x1a/0x30 [ 474.539394][T20477] [ 474.539394][T20477] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 474.546953][T20477] cpuhp_thread_fun+0x127/0x780 [ 474.552360][T20477] smpboot_thread_fn+0x57c/0xa80 [ 474.557829][T20477] kthread+0x388/0x470 [ 474.562457][T20477] ret_from_fork+0x514/0xb70 [ 474.567590][T20477] ret_from_fork_asm+0x1a/0x30 [ 474.572879][T20477] [ 474.572879][T20477] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 474.580627][T20477] cpus_read_lock+0x42/0x160 [ 474.585747][T20477] static_key_slow_inc+0x12/0x30 [ 474.591220][T20477] nbd_genl_reconfigure+0x1301/0x1e80 [ 474.597211][T20477] genl_family_rcv_msg_doit+0x233/0x340 [ 474.603320][T20477] genl_rcv_msg+0x614/0x7a0 [ 474.608358][T20477] netlink_rcv_skb+0x226/0x4a0 [ 474.613664][T20477] genl_rcv+0x28/0x40 [ 474.618172][T20477] netlink_unicast+0x7bb/0x940 [ 474.623464][T20477] netlink_sendmsg+0x813/0xb40 [ 474.628751][T20477] sock_sendmsg_nosec+0x13a/0x180 [ 474.634308][T20477] ____sys_sendmsg+0x54e/0x850 [ 474.639623][T20477] ___sys_sendmsg+0x2a5/0x360 [ 474.644845][T20477] __x64_sys_sendmsg+0x1b1/0x290 [ 474.650329][T20477] do_syscall_64+0x174/0x580 [ 474.655454][T20477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.661878][T20477] [ 474.661878][T20477] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 474.669533][T20477] __mutex_lock+0x19d/0x1550 [ 474.674667][T20477] nbd_queue_rq+0x373/0x1150 [ 474.679802][T20477] blk_mq_dispatch_rq_list+0x499/0x1990 [ 474.685984][T20477] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 474.692878][T20477] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 474.699409][T20477] blk_mq_run_work_fn+0x16c/0x300 [ 474.704964][T20477] process_scheduled_works+0xa8e/0x14e0 [ 474.711043][T20477] worker_thread+0xa47/0xfb0 [ 474.716170][T20477] kthread+0x388/0x470 [ 474.720773][T20477] ret_from_fork+0x514/0xb70 [ 474.725901][T20477] ret_from_fork_asm+0x1a/0x30 [ 474.731193][T20477] [ 474.731193][T20477] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 474.738416][T20477] __mutex_lock+0x19d/0x1550 [ 474.743550][T20477] nbd_queue_rq+0xc1/0x1150 [ 474.748625][T20477] blk_mq_dispatch_rq_list+0x499/0x1990 [ 474.754707][T20477] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 474.761581][T20477] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 474.768096][T20477] blk_mq_run_work_fn+0x16c/0x300 [ 474.773692][T20477] process_scheduled_works+0xa8e/0x14e0 [ 474.779775][T20477] worker_thread+0xa47/0xfb0 [ 474.784893][T20477] kthread+0x388/0x470 [ 474.789499][T20477] ret_from_fork+0x514/0xb70 [ 474.794631][T20477] ret_from_fork_asm+0x1a/0x30 [ 474.799921][T20477] [ 474.799921][T20477] -> #5 (set->srcu){.+.+}-{0:0}: [ 474.807050][T20477] __synchronize_srcu+0xc9/0x2f0 [ 474.812524][T20477] elevator_switch+0x1e8/0x7b0 [ 474.817905][T20477] elevator_change+0x2fa/0x480 [ 474.823198][T20477] elevator_set_default+0x375/0x440 [ 474.828925][T20477] blk_register_queue+0x3f3/0x4e0 [ 474.834528][T20477] __add_disk+0x6cb/0xe30 [ 474.839399][T20477] add_disk_fwnode+0xfb/0x4b0 [ 474.844605][T20477] nbd_dev_add+0x733/0xb60 [ 474.849558][T20477] nbd_init+0x15f/0x1e0 [ 474.854310][T20477] do_one_initcall+0x250/0x870 [ 474.859612][T20477] do_initcall_level+0x10a/0x1a0 [ 474.865144][T20477] do_initcalls+0x59/0xa0 [ 474.870012][T20477] kernel_init_freeable+0x29d/0x3e0 [ 474.875756][T20477] kernel_init+0x1d/0x1d0 [ 474.880615][T20477] ret_from_fork+0x514/0xb70 [ 474.885738][T20477] ret_from_fork_asm+0x1a/0x30 [ 474.891026][T20477] [ 474.891026][T20477] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 474.898859][T20477] __mutex_lock+0x19d/0x1550 [ 474.903997][T20477] elevator_change+0x1af/0x480 [ 474.909302][T20477] elevator_set_none+0xb5/0x140 [ 474.914690][T20477] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 474.921039][T20477] nbd_start_device+0x189/0xb30 [ 474.926426][T20477] nbd_genl_connect+0x1597/0x1c10 [ 474.931984][T20477] genl_family_rcv_msg_doit+0x233/0x340 [ 474.938060][T20477] genl_rcv_msg+0x614/0x7a0 [ 474.943092][T20477] netlink_rcv_skb+0x226/0x4a0 [ 474.948389][T20477] genl_rcv+0x28/0x40 [ 474.952896][T20477] netlink_unicast+0x7bb/0x940 [ 474.958189][T20477] netlink_sendmsg+0x813/0xb40 [ 474.963480][T20477] sock_sendmsg_nosec+0x13a/0x180 [ 474.969047][T20477] ____sys_sendmsg+0x54e/0x850 [ 474.974347][T20477] ___sys_sendmsg+0x2a5/0x360 [ 474.979557][T20477] __x64_sys_sendmsg+0x1b1/0x290 [ 474.985030][T20477] do_syscall_64+0x174/0x580 [ 474.990172][T20477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.996600][T20477] [ 474.996600][T20477] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 475.005226][T20477] blk_alloc_queue+0x544/0x690 [ 475.010525][T20477] __blk_mq_alloc_disk+0x194/0x390 [ 475.016175][T20477] nbd_dev_add+0x494/0xb60 [ 475.021134][T20477] nbd_init+0x15f/0x1e0 [ 475.025834][T20477] do_one_initcall+0x250/0x870 [ 475.031139][T20477] do_initcall_level+0x10a/0x1a0 [ 475.036613][T20477] do_initcalls+0x59/0xa0 [ 475.041474][T20477] kernel_init_freeable+0x29d/0x3e0 [ 475.047203][T20477] kernel_init+0x1d/0x1d0 [ 475.052066][T20477] ret_from_fork+0x514/0xb70 [ 475.057187][T20477] ret_from_fork_asm+0x1a/0x30 [ 475.062472][T20477] [ 475.062472][T20477] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 475.069697][T20477] fs_reclaim_acquire+0x71/0x100 [ 475.075165][T20477] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 475.081417][T20477] alloc_inode+0xb8/0x1b0 [ 475.086276][T20477] iget_locked+0x131/0x6a0 [ 475.091225][T20477] kernfs_get_inode+0x4f/0x770 [ 475.096524][T20477] kernfs_get_tree+0x5cd/0x980 [ 475.101821][T20477] vfs_get_tree+0x92/0x2a0 [ 475.106767][T20477] do_new_mount+0x319/0xdc0 [ 475.111812][T20477] __se_sys_mount+0x31d/0x420 [ 475.117027][T20477] do_syscall_64+0x174/0x580 [ 475.122154][T20477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.128569][T20477] [ 475.128569][T20477] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 475.136568][T20477] down_write+0x96/0x200 [ 475.141338][T20477] kernfs_remove_by_name_ns+0x4e/0x140 [ 475.147337][T20477] device_links_driver_bound+0x4ab/0x1440 [ 475.153590][T20477] driver_bound+0xd8/0x2e0 [ 475.158597][T20477] really_probe+0x774/0xae0 [ 475.163634][T20477] __driver_probe_device+0x1e8/0x360 [ 475.169446][T20477] driver_probe_device+0x4f/0x240 [ 475.175003][T20477] __device_attach_driver+0x270/0x410 [ 475.180898][T20477] bus_for_each_drv+0x258/0x2f0 [ 475.186277][T20477] __device_attach+0x2c4/0x450 [ 475.191566][T20477] device_initial_probe+0xa1/0xd0 [ 475.197122][T20477] bus_probe_device+0x12a/0x220 [ 475.202504][T20477] device_add+0x7d7/0xb80 [ 475.207378][T20477] faux_device_create_with_groups+0x1a5/0x2b0 [ 475.214061][T20477] regulator_dummy_init+0x19/0x40 [ 475.219640][T20477] regulator_init+0xca/0x110 [ 475.224776][T20477] do_one_initcall+0x250/0x870 [ 475.230082][T20477] do_initcall_level+0x10a/0x1a0 [ 475.235564][T20477] do_initcalls+0x59/0xa0 [ 475.240425][T20477] kernel_init_freeable+0x29d/0x3e0 [ 475.246151][T20477] kernel_init+0x1d/0x1d0 [ 475.251007][T20477] ret_from_fork+0x514/0xb70 [ 475.256131][T20477] ret_from_fork_asm+0x1a/0x30 [ 475.261416][T20477] [ 475.261416][T20477] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 475.270027][T20477] __lock_acquire+0x1520/0x2cf0 [ 475.275414][T20477] lock_acquire+0x106/0x350 [ 475.280457][T20477] down_read+0x4a/0x330 [ 475.285136][T20477] kernfs_remove+0x35/0x80 [ 475.290085][T20477] __kobject_del+0xe0/0x310 [ 475.295183][T20477] kobject_del+0x45/0x60 [ 475.299953][T20477] cleanup_glue_dir+0x1a3/0x220 [ 475.305331][T20477] device_del+0x77d/0x8f0 [ 475.310185][T20477] device_destroy+0xb2/0x1a0 [ 475.315302][T20477] macvtap_device_event+0x226/0x400 [ 475.321113][T20477] notifier_call_chain+0x1a5/0x3d0 [ 475.326773][T20477] unregister_netdevice_many_notify+0x17de/0x2150 [ 475.333782][T20477] rtnl_newlink_create+0x7d9/0xb00 [ 475.339433][T20477] rtnl_newlink+0x167f/0x1bd0 [ 475.344654][T20477] rtnetlink_rcv_msg+0x802/0xc00 [ 475.350138][T20477] netlink_rcv_skb+0x226/0x4a0 [ 475.355445][T20477] netlink_unicast+0x7bb/0x940 [ 475.360748][T20477] netlink_sendmsg+0x813/0xb40 [ 475.366035][T20477] sock_sendmsg_nosec+0x13a/0x180 [ 475.371584][T20477] ____sys_sendmsg+0x54e/0x850 [ 475.376889][T20477] ___sys_sendmsg+0x2a5/0x360 [ 475.382104][T20477] __x64_sys_sendmsg+0x1b1/0x290 [ 475.387582][T20477] do_syscall_64+0x174/0x580 [ 475.392718][T20477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.399137][T20477] [ 475.399137][T20477] other info that might help us debug this: [ 475.399137][T20477] [ 475.409364][T20477] Chain exists of: [ 475.409364][T20477] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 475.409364][T20477] [ 475.422765][T20477] Possible unsafe locking scenario: [ 475.422765][T20477] [ 475.430251][T20477] CPU0 CPU1 [ 475.435681][T20477] ---- ---- [ 475.441085][T20477] lock(gdp_mutex); [ 475.444998][T20477] lock(cpuhp_state-up); [ 475.451858][T20477] lock(gdp_mutex); [ 475.458305][T20477] rlock(&root->kernfs_supers_rwsem); [ 475.463775][T20477] [ 475.463775][T20477] *** DEADLOCK *** [ 475.463775][T20477] [ 475.471962][T20477] 3 locks held by syz.3.4608/20477: [ 475.477155][T20477] #0: ffffffff9057b750 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 475.486727][T20477] #1: ffffffff9002c000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 475.495791][T20477] #2: ffffffff8f5e37c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 475.504935][T20477] [ 475.504935][T20477] stack backtrace: [ 475.510834][T20477] CPU: 1 UID: 0 PID: 20477 Comm: syz.3.4608 Not tainted syzkaller #0 PREEMPT(full) [ 475.510856][T20477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.510867][T20477] Call Trace: [ 475.510874][T20477] [ 475.510882][T20477] dump_stack_lvl+0xe8/0x150 [ 475.510910][T20477] print_circular_bug+0x2e1/0x300 [ 475.510929][T20477] check_noncircular+0x12e/0x150 [ 475.510961][T20477] __lock_acquire+0x1520/0x2cf0 [ 475.510996][T20477] ? kernfs_remove+0x35/0x80 [ 475.511022][T20477] lock_acquire+0x106/0x350 [ 475.511044][T20477] ? kernfs_remove+0x35/0x80 [ 475.511075][T20477] down_read+0x4a/0x330 [ 475.511091][T20477] ? kernfs_remove+0x35/0x80 [ 475.511117][T20477] kernfs_remove+0x35/0x80 [ 475.511142][T20477] __kobject_del+0xe0/0x310 [ 475.511162][T20477] kobject_del+0x45/0x60 [ 475.511179][T20477] cleanup_glue_dir+0x1a3/0x220 [ 475.511198][T20477] device_del+0x77d/0x8f0 [ 475.511217][T20477] ? __pfx_device_del+0x10/0x10 [ 475.511234][T20477] ? kobject_put+0x50f/0x550 [ 475.511253][T20477] device_destroy+0xb2/0x1a0 [ 475.511270][T20477] ? __pfx_device_destroy+0x10/0x10 [ 475.511290][T20477] ? kernfs_remove_by_name_ns+0x101/0x140 [ 475.511319][T20477] macvtap_device_event+0x226/0x400 [ 475.511345][T20477] ? __pfx_macvtap_device_event+0x10/0x10 [ 475.511385][T20477] notifier_call_chain+0x1a5/0x3d0 [ 475.511413][T20477] unregister_netdevice_many_notify+0x17de/0x2150 [ 475.511439][T20477] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 475.511460][T20477] ? netdev_upper_dev_unlink+0x99/0xe0 [ 475.511493][T20477] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 475.511533][T20477] ? macvlan_dellink+0x3e4/0x470 [ 475.511587][T20477] rtnl_newlink_create+0x7d9/0xb00 [ 475.511615][T20477] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 475.511641][T20477] ? __pfx___mutex_lock+0x10/0x10 [ 475.511668][T20477] ? ns_capable+0x89/0xe0 [ 475.511687][T20477] rtnl_newlink+0x167f/0x1bd0 [ 475.511714][T20477] ? __pfx_rtnl_newlink+0x10/0x10 [ 475.511735][T20477] ? do_syscall_64+0x174/0x580 [ 475.511757][T20477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.511786][T20477] ? kasan_quarantine_put+0xbb/0x1f0 [ 475.511806][T20477] ? lockdep_hardirqs_on+0x7a/0x110 [ 475.511829][T20477] ? nlmon_xmit+0xb0/0x100 [ 475.511911][T20477] ? kmem_cache_free+0x182/0x650 [ 475.511936][T20477] ? __lock_acquire+0x683/0x2cf0 [ 475.511958][T20477] ? __dev_queue_xmit+0x29b/0x3820 [ 475.511975][T20477] ? __local_bh_enable_ip+0xd0/0x130 [ 475.511993][T20477] ? lockdep_hardirqs_on+0x7a/0x110 [ 475.512015][T20477] ? __dev_queue_xmit+0x29b/0x3820 [ 475.512029][T20477] ? __local_bh_enable_ip+0xd0/0x130 [ 475.512046][T20477] ? __dev_queue_xmit+0x29b/0x3820 [ 475.512063][T20477] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 475.512091][T20477] ? __pfx_rtnl_newlink+0x10/0x10 [ 475.512112][T20477] rtnetlink_rcv_msg+0x802/0xc00 [ 475.512135][T20477] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 475.512156][T20477] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.512176][T20477] ? ref_tracker_free+0x689/0x830 [ 475.512197][T20477] ? __pfx_ref_tracker_free+0x10/0x10 [ 475.512220][T20477] netlink_rcv_skb+0x226/0x4a0 [ 475.512246][T20477] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.512269][T20477] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.512297][T20477] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.512321][T20477] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.512347][T20477] netlink_unicast+0x7bb/0x940 [ 475.512373][T20477] netlink_sendmsg+0x813/0xb40 [ 475.512392][T20477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.512408][T20477] ? aa_sock_msg_perm+0xf1/0x1b0 [ 475.512426][T20477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.512440][T20477] sock_sendmsg_nosec+0x13a/0x180 [ 475.512474][T20477] ____sys_sendmsg+0x54e/0x850 [ 475.512504][T20477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.512558][T20477] ? import_iovec+0x73/0xa0 [ 475.512583][T20477] ___sys_sendmsg+0x2a5/0x360 [ 475.512606][T20477] ? __lock_acquire+0x683/0x2cf0 [ 475.512647][T20477] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.512674][T20477] ? futex_wake+0x51b/0x5f0 [ 475.512714][T20477] ? __fget_files+0x2a/0x420 [ 475.512736][T20477] ? __fget_files+0x3a2/0x420 [ 475.512761][T20477] __x64_sys_sendmsg+0x1b1/0x290 [ 475.512788][T20477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.512822][T20477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.512839][T20477] do_syscall_64+0x174/0x580 [ 475.512863][T20477] ? trace_irq_disable+0x3b/0x140 [ 475.512884][T20477] ? clear_bhb_loop+0x40/0x90 [ 475.512903][T20477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.512920][T20477] RIP: 0033:0x7f8de299de59 [ 475.512936][T20477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.512951][T20477] RSP: 002b:00007f8de3849028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.512969][T20477] RAX: ffffffffffffffda RBX: 00007f8de2c25fa0 RCX: 00007f8de299de59 [ 475.512982][T20477] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 475.512993][T20477] RBP: 00007f8de2a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 475.513003][T20477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.513014][T20477] R13: 00007f8de2c26038 R14: 00007f8de2c25fa0 R15: 00007ffe635e2028 [ 475.513126][T20477] [ 476.070267][ T30] audit: type=1800 audit(1783805710.344:13): pid=20481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4607" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 476.092396][T20481] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 476.102154][T20481] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 476.112008][T20481] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db