last executing test programs: 4m40.514907807s ago: executing program 2 (id=4623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x405, 0xfffffffe, 0x40000000, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x12) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x13, 0x58, &(0x7f0000000000)="f746f357cfe2cb99be0db4c9ef67e115c80cf9", &(0x7f0000000180)=""/88, 0x6, 0x0, 0x9c, 0x83, &(0x7f0000000200)="4d735240f9ab1737dc78a34b5de901d8ef289a8ec060adb7524714f48d4a0e981d7af9ba00cccc4ea67fcb49938ee1ae93282140b36b55bb95915a7da1dca385279f2d213f83f315c35f5d191241d972bd3248c6988484c7f71c61cd7919dcb83b78847dfc9817030371d0c3ab2515738dc51b791ab1a4be00cbb80046364f24cf036876c78c15dda120f5b64cc39cc4f14865aed6d1ec7099a92cf3", &(0x7f00000002c0)="033e3fd592a70496f77d93c0685a73142b97b97d1a8d151e3becd8f106aca146b577d90567f6f6740bad4c932bc1db35ed964165c8c0468941a6416673709c64fd4c1e7f05992e539675fb2bf49f6461550f724c927ffd98c6e50c3592689ca1278dfc934a23295ae081dffc68680177c1fbdb1f1178b807770a314e156824a7b1bc66", 0x1, 0x0, 0x81}, 0x50) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$MRT(r3, 0x0, 0xd0, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x405, 0xfffffffe, 0x40000000, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$netlink(0x10, 0x3, 0x12) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) accept4(r2, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x13, 0x58, &(0x7f0000000000)="f746f357cfe2cb99be0db4c9ef67e115c80cf9", &(0x7f0000000180)=""/88, 0x6, 0x0, 0x9c, 0x83, &(0x7f0000000200)="4d735240f9ab1737dc78a34b5de901d8ef289a8ec060adb7524714f48d4a0e981d7af9ba00cccc4ea67fcb49938ee1ae93282140b36b55bb95915a7da1dca385279f2d213f83f315c35f5d191241d972bd3248c6988484c7f71c61cd7919dcb83b78847dfc9817030371d0c3ab2515738dc51b791ab1a4be00cbb80046364f24cf036876c78c15dda120f5b64cc39cc4f14865aed6d1ec7099a92cf3", &(0x7f00000002c0)="033e3fd592a70496f77d93c0685a73142b97b97d1a8d151e3becd8f106aca146b577d90567f6f6740bad4c932bc1db35ed964165c8c0468941a6416673709c64fd4c1e7f05992e539675fb2bf49f6461550f724c927ffd98c6e50c3592689ca1278dfc934a23295ae081dffc68680177c1fbdb1f1178b807770a314e156824a7b1bc66", 0x1, 0x0, 0x81}, 0x50) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$MRT(r3, 0x0, 0xd0, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108) (async) 4m39.410347238s ago: executing program 2 (id=4632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x8101, {0xe, 0x10000000, 0x6, 0x8, 0x8, {0x1, 0x1, 0x0, 0x101, 0x45}, {0xf, 0x2, 0x8, 0x5, 0xff81, 0xfffff3e5}, 0xfffffff7, 0xfffffffa, 0x92}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) 4m38.84537158s ago: executing program 2 (id=4640): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'geneve0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x7, r1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x7, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000640)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24008821}, 0x48095) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) getsockname$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs, &(0x7f0000000700)=0x6e) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000007c0)={0x0, 0xffffff4f, 0xb, 0x4, 0x3, 0x1ff, 0xfb9d, 0x5, {0x0, @in6={{0xa, 0x4e20, 0x9, @local, 0xa1}}, 0x81, 0x2, 0x80000001, 0xd4, 0x9}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000007c0)={0x0, 0xffffff4f, 0xb, 0x4, 0x3, 0x1ff, 0xfb9d, 0x5, {0x0, @in6={{0xa, 0x4e20, 0x9, @local, 0xa1}}, 0x81, 0x2, 0x80000001, 0xd4, 0x9}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="21ff86f066934b07b5d8ba35e8d96f04c8ad8ea59f6b7b0e24a1b54a77d5995e60c7070adffa0f98749fc34eef0b0317eea7c2484df18194e0d05d66586b7a0e1ee1140edb9dc574b9ceba9fd0e99890598a01ed9380d443c69a1ae762c36b94c9db7aec8b9f762d1bccbd80ed7e2b563bc38130d5334d0b5b59d8c34fd6b76f89454cfd42afc485f574a0d1a7776698df92a9f996272a0d9a707c8c6d05a5d07531e5e523768305b8e903996fc9937135c9ae5a0b9c42b8945d87de278d6e366c0865f44dcdf9e09e150992fe34658d58311203f4482f3972d25948c21dadd51621bc9b06d7a0557d6b0d682853"], 0x21c}, 0x1, 0x0, 0x0, 0x48055}, 0x4008804) (async) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="21ff86f066934b07b5d8ba35e8d96f04c8ad8ea59f6b7b0e24a1b54a77d5995e60c7070adffa0f98749fc34eef0b0317eea7c2484df18194e0d05d66586b7a0e1ee1140edb9dc574b9ceba9fd0e99890598a01ed9380d443c69a1ae762c36b94c9db7aec8b9f762d1bccbd80ed7e2b563bc38130d5334d0b5b59d8c34fd6b76f89454cfd42afc485f574a0d1a7776698df92a9f996272a0d9a707c8c6d05a5d07531e5e523768305b8e903996fc9937135c9ae5a0b9c42b8945d87de278d6e366c0865f44dcdf9e09e150992fe34658d58311203f4482f3972d25948c21dadd51621bc9b06d7a0557d6b0d682853"], 0x21c}, 0x1, 0x0, 0x0, 0x48055}, 0x4008804) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d001180"], 0x70}}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d001180"], 0x70}}, 0x0) shutdown(r6, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000800001701000000803437c64f75b6eb8c8209dc786685a1dfa54bab9623c4bdaa7cbfc680924e0c3f57"], 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000800001701000000803437c64f75b6eb8c8209dc786685a1dfa54bab9623c4bdaa7cbfc680924e0c3f57"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010002f8ffffffb702000008000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x4, 0x14, &(0x7f00000002c0)="0000ffff", &(0x7f00000003c0)=""/20, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x4, 0x14, &(0x7f00000002c0)="0000ffff", &(0x7f00000003c0)=""/20, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fedbdf25250000000a0001007770616e3400000008000200", @ANYRES32=0x0, @ANYBLOB="38efdc1f1d22e411cc35be128316ed4ac02c86af6e88da35a82a36adb7e7c1e7d6177eff6cc7aed766a87d"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fedbdf25250000000a0001007770616e3400000008000200", @ANYRES32=0x0, @ANYBLOB="38efdc1f1d22e411cc35be128316ed4ac02c86af6e88da35a82a36adb7e7c1e7d6177eff6cc7aed766a87d"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000bc0)={r11, @in6={{0xa, 0x3, 0x4, @mcast1, 0xe6b3}}}, &(0x7f0000000040)=0xc7) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000bc0)={r11, @in6={{0xa, 0x3, 0x4, @mcast1, 0xe6b3}}}, &(0x7f0000000040)=0xc7) sendmmsg$inet_sctp(r5, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtaction={0xa8, 0x30, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{0x94, 0x1, [@m_skbmod={0x90, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x64, 0x6, "1837e69712d2da5b679590b852240473fd51db41752d254217a5ca0b941aa064023d4479438fbcc6a909c0f436f791844d5f6157b646ff90fb7009cc25768c7d84151c8475641cfe34b22be22f44df6e96da633f4663b4b46e9eca31e7aba979"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 4m38.030923873s ago: executing program 2 (id=4648): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180041000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 4m37.946180853s ago: executing program 2 (id=4650): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0xf00}}], 0x1, 0x0) 4m37.721732764s ago: executing program 2 (id=4653): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5f185ca15076bad27577cda8bcf7d5e068648c82c9bd6ec5f92c2b54c09718a12b3749b1ada6f05a20427070b6a34416197391b1c63ecfc50266aaaa5559a1cd81c5a756e163e583636246381c41110b9b298f0306ed2de54e1a89a79a8ae068f4eb6e55dd6a71ea7b468f6a62c25a02d7952b930f65b9327db37108a9fda"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001) socket$inet6_tcp(0xa, 0x1, 0x0) 4m22.672569014s ago: executing program 32 (id=4653): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001) socket$inet6_tcp(0xa, 0x1, 0x0) 3.288536777s ago: executing program 0 (id=7003): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="8400080000c5f0a96c0600000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 2.505995882s ago: executing program 4 (id=7006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0xffffff7f, 0x20000884}, 0xc000) 2.370281165s ago: executing program 0 (id=7007): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xce, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4}]}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0200020900000026bd700007fff2000500060033000e000a004e240000000120010000000000000000000000000000988500000000000002000100000004d4008100000000000000", @ANYBLOB="09e253eaf8ba46b0c78bd356806379795071ea85834a7d0c7b2222b7d64318a85818bcfc32506b7e8ec12eb57a3bae7f7a8297e77708fcaed542208d1e0c7c6f72e704cf27cb08edb99424c6f48970a677054400a72dbed970435e8e117203752f60e1e41b2c3717d516391e76c3624202b9b9df42e1010f7d6000b43f430aa5d9ec0a174581ff9801d26f63056128423f8533d91a5054b49bac4b3f259ebf1ff9eede76d82a4dc25e11c24436c872a69380a867931ac507fdf45db71c5c3add4992cdc93ff70caba3dd1a4d592107421bc91f5754fd9aa6e11921c30c576360"], 0x48}, 0x1, 0x400000000000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0xae, 0x0, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x700, 0x4, 0xfffc}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="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") pipe(&(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000006c0)={'wlan0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'netpci0\x00', 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r5, 0x0) recvmmsg(r6, &(0x7f00000055c0), 0x0, 0x40010380, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 2.245963153s ago: executing program 4 (id=7008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r0, 0xfff) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x800) r1 = socket(0xa, 0x3, 0x3a) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffff00000007, 0x25d4283d975b53f0}, 0xc) 2.070406142s ago: executing program 4 (id=7011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000004", @ANYRES16=r1, @ANYBLOB="819b08000000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x34, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xb8d2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7fff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000240)={@mcast2, 0x1, r4}) 1.994784596s ago: executing program 1 (id=7012): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xffe3, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x60000000, 0x44000}, 0x20040844) 1.891901717s ago: executing program 1 (id=7015): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000410000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="8400080000c5f0a96c0600000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 1.60272842s ago: executing program 4 (id=7016): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b8a00003015010008001d0080"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00006fc5f7556d0000000000000000000000006409163f954f525500000000007d1b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008040000000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000000000000000000000000000000000000600000004030000010400"/180], 0xfc}}, 0x4080014) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) 1.465386318s ago: executing program 3 (id=7018): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000850000000000000013"], 0x0, 0x32, 0x0, 0x9}, 0x28) 1.305074635s ago: executing program 5 (id=7019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) (fail_nth: 8) 1.277421673s ago: executing program 3 (id=7020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100840000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.057433965s ago: executing program 5 (id=7021): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000010100000080000000", @ANYRES32, @ANYBLOB="0600000000000000000010000000000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000001"], 0x50) close(0x4) 1.046674682s ago: executing program 0 (id=7022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x40000001) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000300030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) sendmmsg$sock(r5, &(0x7f00000004c0)=[{{&(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x20004874) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010000104000000000000000000000000bbc05250f5c5dcc361de1d6f3da6d9b9eff2aedf1307b5b8aeadb32bd5d5e1706e47097bb7b228e310d99b139803658ead6c8f4d48ac8798ee86b648574e986a3ad1c4ce76d17e501e5e943d96e81e1af7f6318fc764c8753dd19568d64feb0ff6cacf376101aa7c37ac", @ANYRES32=0x0, @ANYBLOB="0000000000040000240012800b00010067656e657665000014000280080001000100000005000300040000001400030067656e65766531000000000000000000"], 0x58}}, 0x2000000) 1.017183752s ago: executing program 3 (id=7023): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x200, 0x70bd2d, 0x25dfdc02, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000440000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r5, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xe, 0xfffffffb, @udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x81) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000600), &(0x7f0000000480)=@tcp=r3}, 0x20) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r6, &(0x7f0000007700)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x94}, 0x1c, 0x0}}], 0x1, 0x888) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000200)=""/244, 0xf4}], 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x80, 0x7800, 0x6, 0x9, {{0x18, 0x4, 0x3, 0x4, 0x60, 0x67, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@rr={0x7, 0x13, 0x90, [@empty, @broadcast, @private=0xa010101, @multicast2]}, @generic={0x88, 0x5, "1fffff"}, @end, @cipso={0x86, 0x2b, 0x0, [{0x0, 0x11, "d5023294a3dcb33dfc6dc3f939aa51"}, {0x5, 0x2}, {0x7, 0x12, "9fc763f2a0707281c8259ecd794f07fe"}]}, @lsrr={0x83, 0x7, 0x1c, [@private=0xa010102]}]}}}}}) r9 = socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x58, &(0x7f00000007c0)}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x128, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x122a23ffd533a68a}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000500)="790be47119c3c5216685d434d293d13fcda98d5859a565436f49927536200f17a7339d8e87ce8a64c545158781dcfc42af6c19d6405b144e7341dffa4b4ea8ea864341044bf01e458cb01abc8f608043f4d0ce950246f63969635ba1d3f9280a44e264b8e9ac4902b4cacc5de788d570b7c594d4fa614de3fac6e2131129e0815db06b195b926705294c489d0d8283af885e4e18ec0d740d62a3e3ebb79e9020c57fe44fa8d6df28700f5d40a91f5bf2df0037a5cf15d891eee41d36c8c1358182eaa8cacac6c9e97e00020000be75c1a6fb16a2376e44a2056b2fe4ddc21efe994221c7340f8d", &(0x7f0000000080)=@tcp6=r6}, 0x20) 777.311562ms ago: executing program 1 (id=7024): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0xf00000000000000) 683.049999ms ago: executing program 5 (id=7025): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0xa, 0x3, 0xff) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000002000)={0xa, 0x4e23, 0x5, @private2, 0x9}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@local, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9ca5700fa4e0aedc}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8001}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc2, 0xfffffffe}}, 0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="07ec000006fd8ee96656a96c32e5888fb68cb89716b125012c4c8d0fd8e92c409960b7202efbcda8b46446bf56d48d44b820eb2cb742d40d9aa13db58631853329f357de89758259c6666b8dbc0d0578a515122ce2d996d2e8ffd241042d142a", @ANYRES16=r5, @ANYBLOB="010b28bd7000f8dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x10) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000080)={r7, 0x1, 0x6, @multicast}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000400)={0x1, 'macvlan1\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) unshare(0x700) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb410}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x200000b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 632.789101ms ago: executing program 0 (id=7026): r0 = socket$inet(0x2, 0x3, 0xa) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {0x0, 0x20000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 543.772511ms ago: executing program 1 (id=7027): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 541.949844ms ago: executing program 3 (id=7028): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r0, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0xffa1) 465.971621ms ago: executing program 5 (id=7029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x4fff5) 445.229366ms ago: executing program 4 (id=7030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x24040015}, 0x40000) 382.244081ms ago: executing program 1 (id=7031): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x2c, 0x0, 0x0, 0x0, "5eb95d332554a486fef9a435c07eed823733a0bdd7c32ce4568f9cd83d926c956495cd34c8cf77cf881acf418672f5e52af248404413ce564b92cec00e0349a9"}, 0x48}, 0x1, 0x0, 0x0, 0x20008814}, 0x40) (async) r2 = socket(0x1d, 0x80802, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000300)=0x8001, 0x4) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x4e23, 0xe, 0x4e24, 0x0, 0xa, 0x1c0, 0x20, 0x3c, 0x0, 0xee01}, {0x80000001, 0x5, 0x8001, 0x0, 0x4, 0x1000, 0x1, 0x8}, {0xed40000000000000, 0x6, 0x0, 0x3}, 0x800, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x2b}, 0x2, @in6=@remote, 0x3504, 0x4, 0x3, 0x8, 0x9, 0x40, 0x1}}, 0xe8) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x25dfdbff, {0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x1d8, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}, {0x9}], 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {0xff}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000680)="e2", 0x1}], 0x1}}], 0x1, 0x14) (async) shutdown(r6, 0x1) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x85, &(0x7f00000061c0)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000e33c0001800c002e28a8f601002f0000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff010000003c0003800c00028085000100000000002c00581a000000000000000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c000280050001000000ec002c000180040003"], 0xc8}}, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0xd, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048040}, 0x80) 362.666913ms ago: executing program 0 (id=7032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x5000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xc4}}, 0x4000040) 313.828621ms ago: executing program 3 (id=7033): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x8c28, 0x10, 0x5, 0x7f, 0x2, 0x93, 0x9, 0xb4d, 0xfffffff7, 0x1, 0x1, 0x4, 0xfffffffa, 0x0, 0x6, 0x3, 0x40, 0x4, 0x5, 0x5, 0x0, 0x6, 0x1, 0x1, 0x8001, 0x7, 0xb, 0x0, 0x2, 0x7, 0xfe7, 0x1, 0x1808d6ff, 0x2, 0x9fa, 0x80, 0x8001, 0x80, 0xfffff5d1, 0xb61e, 0xd, 0x1ff, 0xb0, 0x84, 0x6, 0x1, 0x7, 0x2, 0x4, 0xa8, 0xfffffffd, 0x7, 0x6fb, 0x8, 0xfffffffb, 0x2, 0x0, 0xff, 0x4, 0xd9, 0x4, 0xf0e, 0xfffff001, 0x5, 0x7, 0x7, 0x1, 0x8, 0xd, 0x8, 0x8001, 0x10, 0x3, 0x80000000, 0x0, 0x100, 0xf0c4, 0x4, 0x2, 0x8, 0x9, 0x4, 0xb, 0x5, 0x20, 0x5, 0xffffffff, 0x1ff, 0x3, 0x0, 0x1, 0xe5, 0x0, 0x1, 0x1, 0x4, 0x4, 0x7fffffff, 0x101, 0xf, 0x7, 0x9, 0xffffffff, 0x2, 0x1, 0x9, 0xed19, 0x4, 0xc22d, 0x2, 0x1, 0x1, 0x3ff, 0x1, 0x4, 0xc, 0x9, 0xfffff699, 0x3, 0x80000000, 0xb6, 0x800000, 0x0, 0x7, 0x6, 0x7, 0x5, 0x4, 0x7ff, 0x2, 0x7, 0x0, 0x9, 0x8, 0x0, 0x8, 0xd699, 0x8, 0xed, 0x5, 0x7, 0xfffffffb, 0x7, 0x5, 0x6, 0x0, 0xd6, 0x23, 0x1, 0x9, 0xe, 0x100, 0xb2, 0x3, 0x2, 0x4, 0x5, 0x7527, 0x7f, 0x0, 0x9a6b, 0x9, 0xfff, 0x7, 0x8faa, 0xf, 0x4, 0x8, 0xfb5, 0x4, 0x9, 0xc350, 0x10, 0x3, 0xcd6, 0x1, 0xf, 0xb, 0xfc, 0x0, 0x7, 0x3, 0x4a1, 0x10000008, 0x1, 0x6, 0x9, 0x1000, 0x85aa, 0x3f61, 0x280, 0x3d0e, 0x8000, 0x7, 0x1, 0x4, 0xffffffff, 0xfbee, 0xf, 0x8, 0x4, 0x1, 0x7f, 0x40, 0x3, 0x40, 0x7, 0x1, 0x3, 0x401, 0xfffffffe, 0xfffffff7, 0x80000001, 0x2, 0x8d, 0x8, 0xaefd, 0x3, 0x1, 0x3, 0x463, 0x0, 0x8, 0x7, 0x9b, 0x6, 0x2, 0x7, 0x8c000000, 0x7, 0x7, 0xfff, 0xc0b2, 0x1, 0x8, 0x3, 0x7, 0x8, 0x8, 0x7fff, 0x8, 0x3, 0xa6, 0x6, 0x4, 0x3, 0x267, 0x1ff, 0x7, 0x2, 0x10, 0x2, 0x5, 0x3, 0x6b0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0xd, 0xfffa, 0x9, 0x7}, {0xc, 0x2, 0xd, 0x6, 0x7f, 0xffff}, 0x5, 0x7, 0x97}}]}}]}, 0x45c}}, 0x4000010) (fail_nth: 3) 313.010207ms ago: executing program 5 (id=7034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x20, &(0x7f0000000c40)="63eced8e46dc3f4bdf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0xb}, 0x50) 301.075404ms ago: executing program 4 (id=7035): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x86, &(0x7f0000000c00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x50, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0d0802", 0x0, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b, 0x1, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @pad1]}, @dstopts={0x84}]}}}}}}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x52, &(0x7f0000000000)=""/121, &(0x7f0000000080)=0x79) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x2f08, 0x73, 0x0, &(0x7f0000000100)="a162cef0563a20f5177241eeb3f0311a24907baf8f19334cfebe55f0c82b5b48844b47f9fda725e9dbb8a5d66335af516d097e891e2991dcca406a6652f66d496d157ca668a1b7d01ac7cb6fa8536ae8c22ab833126cccb51313ba08f6ad6e950aa5097e0d91fa661c6d08f0d5fe0027dd501a", 0x0, 0x6, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x44) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffffffffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1e4, 0x14, 0x8, 0x70bd25, 0x25dfdbff, {0xd}, [@nested={0x197, 0x95, 0x0, 0x1, [@typed={0x14, 0x98, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @nested={0x4, 0x119}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@empty}, @generic="f81f1fe58eaa7ef6b6fb7ff46e72c28fd16304a2e0057e06f880642728c724acb6178f57389a1c0043e13ea50393e2d9504fc554a271531cb3ae9c541eb2252357b46bc8ce0bc4a351d2f6cff28711bacab2f86534d1ed", @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x10a}, @generic="4790c60ba5a630efb78953be90cb28b3c28044e0e7718931867a2bb704cf08831d772e2dc3e1ca586fcff8e4bb0b4e680b909a060d787fc034823dc807e1f972c2faff1796e310a50e7916f10830ef13", @generic="bed5ceb6c0f6eef99a4e4142344207f2766ff0d657d1153347e2784e4defb1a68ae6ac516646a56da68fe09b75a898a102504abf3154ff86c39361f10beb1cd36afaf7d2b52a41318cc9aeb965054374f164f1f9eae4f02a22478acf980b50d76fb171fa273f7b3c648937c01fd76056fd7d64dd46e656952b2766f0557613e93526322def85e2dd4083422ba29e96e7aea4deb786bd6be9c18577edb0df743cbc78f11e9bd38cfdb2b0ee5d", @nested={0x4, 0x12}, @typed={0x4, 0x31}]}, @typed={0x4, 0x130}, @nested={0x8, 0x40, 0x0, 0x1, [@nested={0x4, 0x8e}]}, @generic="2086cae54bb0d88c719887d227498a56ab57c3116ed349", @typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x10}, 0x4840) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r2}, 0x8) (async) sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0x6, 0x6, @remote}, 0x14) 153.161818ms ago: executing program 5 (id=7036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x40000001) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000300030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) sendmmsg$sock(r5, &(0x7f00000004c0)=[{{&(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x20004874) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010000104000000000000000000000000bbc05250f5c5dcc361de1d6f3da6d9b9eff2aedf1307b5b8aeadb32bd5d5e1706e47097bb7b228e310d99b139803658ead6c8f4d48ac8798ee86b648574e986a3ad1c4ce76d17e501e5e943d96e81e1af7f6318fc764c8753dd19568d64feb0ff6cacf376101aa7c37ac", @ANYRES32=0x0, @ANYBLOB="0000000000040000240012800b00010067656e657665000014000280080001000100000005000300040000001400030067656e65766531000000000000000000"], 0x58}}, 0x2000000) 152.410783ms ago: executing program 3 (id=7037): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r2 = socket(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000740)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={0x0, 0xda}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r3, 0x29, 0x6, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000480)) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="0cd60d9f2108df99cdc827431b235e4691417d60d4e9708581ec20ae2fa779db600fbbf5b7004f4aa958cffeb7d0673be3a4c95930c4ad3f39bdae72a8110e5c9c46893e8b73ab7080e4de4bc8a1e1090028b3798610f1939d", @ANYRES8=r2, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="85798f41c03537498ed36578a264dbf0e671c14e9b08b170708e0656881760172e2aa399c46b7086026ed3df007af92d504dcb62f4cec333054058cbceed5db472b4f6652b8667f41a275c77a0a45454e14507a5eb63218fbcd7f238dde7e2673993037b3fe0ae752bb17267c32f070d55764c43db555167ecdcc54e082502e49437bf9ce0e90a3e7f441942398b7ad6b53314364826859af237b307b4ca1d77ff3b8a91edc305b92c37571889de41fd2265623c5939143eb950e65824c35722e200bc7c34c2384a56efaa76599c4775da917e266f192722d7f07fd6c781c21ba658ff0eb63548edfb6396b627329eede53b9b", @ANYRESOCT], 0x20) setsockopt$inet6_int(r5, 0x29, 0x24, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000faa345f901277a5340000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a08000240000000040900018073797a30000000000900020073797a3200000000000300000a"], 0xc0}, 0x1, 0x0, 0x0, 0x44010}, 0x0) sendmmsg$unix(r0, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="8dbffaa307ba9f10a0a447b2fd6e97065dfa64fdcac31d791121b518779cad610135da01a0095f44c7e41bc174118a1bd1ea93e8d08058fca5af1310a263017ee16abb484362596fea418e842a3496c3f974c82703190cf5178f080e59433820016a6b36ce1fdee7", 0x68}, {&(0x7f0000000580)="e5190bc586115ae2dc422f2c87259350a8174841276136f68f0d764e75772895c3fd5f196b62bb2f54a6202f0cfecb68a1b5b35611e6c506829e0d0a635b4b28df32f5fe8d65f830f00eee", 0x4b}, {&(0x7f0000000600)="153adf86e4c536e619f0661b66cfddcf070ad13f2e749787a6db5eacafbd4c93006d1ee1af390899519274c0dfdb3fd38750784c715fc0cec8233cf21e5ce1c35384cd36bcbeff2a2885e1b230c42a852d38aeb7dc6a7a9592c3b1655637b864e49886b1b431cd544e7cbeaed86b2c61b251b5f56e84394c48ead0e5e52d87b440ea7cb5ee2c3f6b2308b27b0ea5ba722b6d3de3fd61d8786c57e1f03a95d378284ac4af1ddc0c2ebd0f8c22a3d2b908cd897311fefdb6789c7442165d392786a48b1a9ba1768044593bdc97ef423810cae48b03aa47ff519ccbb90d1f", 0xdd}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYBLOB="a905000000000000010005942e370000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3], 0x60, 0x40080}}, {{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e80)=[{&(0x7f00000009c0)="36cd4fcae509630a57d4a81564ab1022a1454ccb66af5e57dca988255928e9c2a798c19701b9c451", 0x28}, {&(0x7f0000000b00)="f9de3bce9df4f9a40725117bf9d45cb3332db84964f0f66261d39dd84ca51a9822d2a5c13171fc5f2b4ddce1e54525fcc16e22252774aa552aff469d20d9189f96b7485ae61be20b85127fef923752138d82ce808e7651ae4b54f1724a31fe6d44c482d8f0091790e4918eeab8d048fb6171ca79c6d060edf0d2b0e50cd1722b66133c313bad6ad0bd1be6f51ec582b23ed75852b834816d1ef2d5b2169d823a8e8c03fe20d4955c04f0874d1c2ca7e8d0fa8307f9fab4f23552df571956c491", 0xc0}, {&(0x7f0000000bc0)="63daaa3f558b7885fa792cadaadd9360b25bb230b8dd87c6593edda306d87432c395f71b102287c96b991141fb54d6dbce610fd81628e32de9de8819670fbb2fadf3b4b48f5e283e6b117b021a2e79d989f42b8976e2ccdf7b38abc9f049a616a0bebc3f448b91d77b48589d223f3422818e0e67b78bbbc5ac7c895f34c9eeea14eb6298ccd83057a96a7f50e585f11766d19e8ff138af108c5a8e38545c9fcca508e621debf36b2fc8a8b53c027447210510b08258d5591c2ecad3c69b61b5603f398a28b43c936e1a1329a6f", 0xcd}, {&(0x7f0000000cc0)="a10ac7e04a52fb79a5d2c2d96d1cd1551bf8fc5117de85a9eb2d46fdfb3f695ba9692a5ec2aa61c83615e39c800d1b07ec50cf1237bf4f1c629c7a9f17e84813a5026e03ca2af3f37410dfb836713ad8ce5052d268dc46ab30b9a795c172daabda56d97f1c7d523889aea8b4ac65f21c251b288e52de86966b38a31a1516185e3750e321ad382a8216968622", 0x8c}, {&(0x7f0000000d80)="bd05c9b3b9bd061440cd702251932e147d3ed68c0c0a2994f4e2d21c00b387ea444423d45b331e3b191c882611848ef1d7acbc842330ce91f4a9cdf93f49c3c1c0b45acb4396174a2b0960b6416c8114e83196ff4883b15c0effa1a5247692cd05a4824e6a33736a37770812a9fdd8d8407d779deecd8b8a6757bbb9d23026d50f72bdecd3665cd2eb0bdc24d667f0ea51e4924aab9d6bd0f8f41d2cb442c0c1414bb281ba4253394b80065edffef2d794cdbdb0bd020a703429340fa5062b24794e536c3fc0e610e8123993", 0xcc}], 0x5, &(0x7f0000000f00)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18, 0x800}}, {{&(0x7f0000000f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000000fc0)="a7e9f9151fcf1ac3a5bddeafc2fd35df43e47b39e18f38ad26be25fb424331006ad17e18b7fa6b9644cd6d7eaa14282a0860d71235f19c2e91f3ff8ef31418558a63b9a654fbeb84174b24f8a5a18d2040bd9fcb60711482590cfd0525cf136ec39d4bb4e0e4422663f6c663b52aa78b1297b5a7eed543d41489d857583fc863abb54e94", 0x84}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="05d07e78b0efef44eaf49199835edcbd99453ae748195515f955fbea050d21d4d32bd4fd5d58fe444dcc66dc4c5bb70cca29", 0x32}, {&(0x7f00000020c0)="24143c0389a056a59b674d8a4c86086bee4f9eb632f3a8ebf4d667767eb015512afc3c96347c579e4dbb9017722aaf7f592b1ec3f3d88008d94e0973f567010cfd1d8f5401f9f630065c01eba46bfd08b0088e8d27c3c6afb04fe7234643f49135639c0430f50a99199cfa3874d3c1d21c52588a6476a07041a5f77ca5868a6e1bd30f0853c8ac751672250a1f852c3189e6b537ef447dbe9bc2f03cf92eb2d0a6a75d26bd3e25294080b99d26f5ded27a08f949d899a2684ac9c77412be72197e22897d1b956d8ee6dd14f62d97daaa43bd1d71a05d8063e5a4097136d91646df3d6fda7b8d7c781f0ec9b01257", 0xee}, {&(0x7f00000021c0)="b69a2adc42608287d7486c0dcbb90bbb2118f7c5ec36ed0ade2826495faafacab230dd2f34bd69a50aae99d801c0ca5274027d49679c3451994f9355fc693c50882ab9ce13d6532559e78b3c625159420c26af7e492b1953bf32f65d1b76c6380df12cb5146ef89802ee247a968325", 0x6f}], 0x5, &(0x7f0000002480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r4, r0, r6, r4]}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x80, 0x80}}, {{&(0x7f0000002500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000002580)="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", 0xff}, {&(0x7f0000002680)="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", 0xfe}, {&(0x7f0000002780)="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", 0x1000}], 0x3, &(0x7f0000003a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x4004080}}, {{&(0x7f0000003ac0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003b40)="8f5f7a693fd0bdf7ade39163b0c228656bc1768e95978251d42943dadc5cd2179ad7779f4c6defc6f51389b8c33987243cb520b1a0a7963305647457ef19064c0a209d7b5bfb654457f137c2f08e2798405bcaeedacd2f514c88bc09f6db347567b7932ea1d7849c43cc25a9fbb34b600181", 0x72}, {&(0x7f0000003bc0)="19adf1f4dde20176700bd30b2293cf86d5c4e4dd245e089edaf69a35deba1f462d0a921f8f1151b8358f5aae2411f2878716cb8419ea109eff90437614f6ce9dd964fc164000fc4a8c25d0646451bcfdab33274f0558250eda3b43621c8d1bb948ff7d495c85f1c2eeb92c45fbe06feef67ff99cdaa79eb662e7ca53c4e7b807d93007e69ec296c68ec2f6172913383f62640c49a1bcec0e111babbf9fb8f5aaf3314fc9acdfc20b3c9d", 0xaa}, {&(0x7f0000003c80)}, {&(0x7f0000003cc0)="9df58e4342c0acbc4f8e792cf672242da62917271c25e75c9ba8d1aaec83194396edf7b89e10cf6c849c467fcc8f8c7da07130100cb88ddf2352093466f24b6f379cf3ffc7749285d819dd747b5707cd236ce8b5e99314dc272108e55b6f289f77c7babcc8bd4d370491f91369257f672e2147b7630704b7ccd1b8f4950a2a03cc6f8f8603c0825e8a61de1c74bed06eb1b27e932cfb095910b4a546f390f199353a1f1c5a4dc3e3a49ee550", 0xac}, {&(0x7f0000003d80)="e6bd7a413d727365b9adb28932c2ea6afcb1fdb36364e33d65d0d8907a8d165a7ebd0002b71211f7230b9f554dbd22b29bcf84f30129b6810dc7042cf4cd0a820678451bb0199ee9e3d567b77b", 0x4d}, {0x0}, {&(0x7f0000004e00)="907f569bd58f37820e2eca97f356a5bae23371032bd6d6b68e346ea70899a65df516013fe7dcc6c3b368edfcc08a819914d6c9180865b0dfd3fcadab90a47f694cc6c8158a29c61146bd600ddfd38e1c5d0837c262d2a2beddf8431892a7b2239da88e03ae3d4534c6e56aedd92ffec9fc0d37c2ec3f224e8248375870ba70215ba215e512a893d46b833ce83fe577f8de29de70996ebbb5003963b918ed2080ef8a4364eb900c1ab1f1d851e007cc950b4482c9ffdecd342c", 0xb9}, {&(0x7f0000004ec0)}], 0x8, &(0x7f0000004f80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}}, {{&(0x7f0000004fc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000006380)=[{&(0x7f0000005040)="3de164e14de33e77d74ac876a10bada3749afbbe8d8bfe5146dc799fbc690cf0a72ff414be8f7cd504a1ec396950f13929ce64dc808a2098fe5c3629f913d767050d101743491bf4d97d6d42fed29426ef7f63f99b6ccd16a2f7d96d935b61240bf6a93826ddc90ff1d15fc116d3155e56f6f19e0bfcaf829de2ac7f4eac107ff2fcccf1ffe7d02f9eb2b8b1919904e1fe05ab84d78c0c4f383c5250bb7d3279ae64f968279d8de92799e3041a4ea77fde3f495c30789de5371ec00cd7632debac44b36839d41a14d78b6bbcd360ae7640d2bcaf1b4b89652583cf78c350cbc02dd23bee6a3cfa09dbf6ccc585a28991381118b1a5e7b570b335ee4eedd02bc2abd279a90f00d879f6a094ddf29acaeb580f6dd38d1955e6c9d1ccc7463e3f6bfaa71ea2c81103af04ae94ac173579d4c8ac035c48b5b3c85d939030b1759315c7230f517b2bbced35143c8c42155bd19b8f95be4614d24e76912a1c95081403244d59658ae8255d96f992aefdcade7052d68e9d8ecb97ab4262d48a98ec8aa493c49dfa38b159a4999f22935b146fc3e7e0f98d7c8180e40567cbc1174278d8deabb03b2856f659160052dc7a818e79360f72d93bb6baeaf15f5b45d7bc0c85782258dc04e39b3a8dc5226e491d97f3d116328d98389e16210f4e57fcf5af31be772b2c698c6ce4073a68e2205724374469bb7ad3e135d832b967653341588acb9ccb319fc568a5faf699dadffaebdcb383235ab1db96e3bd786994bbc0cff6258cd64fb3fd4bb491e9bba2c3bef65f42f01b173356f47f34f08acc55401d766fa2a7d702b2ca03e0fd2dbe9d1173be5c938aa85e19fda90549782c20c7fb98b20071e3a2848ca9983f08cc2843ab899e200ce7f189396c3a0f984f1809ba859f46ea4d2d0ba09c4c2f9c3ddb8925b372f7a11d8458495701cfc91ba6327c74d1f8f73cd797755a6173aac994ab68685742a54ba7f56c9950ef6ee638dba59a6fe04798b604c5abbb50217119ed1b637b6ac063d8b366391c3944701a599c8af09e08327468673dc9dac0e0f101d7ad366afb02b976dba5215a8b245f52d0d39c3ed2e21761ca5d7215bd81b4dbc136ca14f8fca93cab9fc3bb03713d0ce6972167ec5d2ecbef6e6f29353df46a360fc9e13bf29a3d63703761617ff38e7e23327ede85542e5fcf7601b5106edfd1558788544dbeb8237d38ce4c1a8fc9d41e90d63d99a83692f4499a266bc6eab353a720d3fefcf76b557a65074f0b67aea630bcc2d5f8f4383e1acebcb08592dd8331a3a33202e0d4fe30dd604db26e9fedd782491c4941457f6c3d5b0b300104170467b73d51a9e5eceb8c9040d2a8ae8db5b0a72f34cd530292e29e6bb0164bf870fd7ed6634eb0080e90dbb95ea391ae281964f9153157ffd83fcca0848a1d846ae92b84b3f54c6ca4949bd8226ad9b659e7a52459afcff1a6743705a6eecb07e20e170d98d14bbbbccd5b953ec160395822f0fce045763864e5294c8ed500b7ad53f48495cde2117dbd803233a39bf487f50da57e07226baaa04382d618c6c28dedf8b26689079189dd67e851c6699cf253b9f313275d1e74d2a92b147aa688a2b430ee743f1a506cb32ee22b96e1d8e07d7087fc47abfc3f3607ca0d01c7f1964bd3f62bed736d2ea59a12f0a2084d26d97aa6e5cce4b4fc5d9bfe5f262cfb80612aa83647ea4bc8e4697bd32c9ab717764a59c2dd527e2cf358b8837d314cadc29798b96d398d122a32b6746b9ceb3f5a4aabe104eafd38aaceb743845704a6c936e9515f8859cfa15a73d300ffee7c6126021c294faee04f5e2f848bd230f8fe334d1ac64820e1145a6fe14c883be82aa6cd115e7d070cde3f74825925dba41986c8b0467e9371a95544a62b5ff155b58669ecfd0aaceb3e9d72330a51d25e83f7c71b59ac44c536c4a3d4a6eb62005fcf0f1330e679a7465f1bc412fd34b1ea50632fbec620d97743e638fa11c7f08e115fba64ad8979a2f0224c61a5abba1b6f0ac55fb8e35da1b5fb598b24f96f75d127258abcea6ee3b609f1c2f890d57a27395e094a1c8349772ac73445bcd2befad3dec93c33e5ef4f3066867f41d8eb7447512d33cde33342631f322462097097908df1ab545ccfdab74952efce8ee38d4d8cb5031bda98f88125e2712e86f0e6802a97def4972bad8b75d8170455339e78ac02153a3a708f30d8331888e1a02e671a6dc9da037f7f0b862c44f8386600091bc1678b98e8979e1813084ef408129bf9084656d23e4ad9cfc3b0c9db813a395e3969af408717bfdc0dc1aab904a75176eb4b52b8fd3b6a91a0aecd71176c68e15feca24703dc9ddd244c5656a1e730a9a6f72b0603c4d2bb39b2bf1be413a62c9c762b46fad423c6e8562da0c8c0ed12e7ca6383a1238b131f4eb2e6682837b12c1b46c7d5cc07d05b5eeae38f6e3b60bc27beef2c758ca46dbce87002ac6f13f91aa8e613d17ac6475f5fbe4873718ffd2a7303ebfd5064e723bbaedd67c27d015fdafaf7e1cb59519f15a808897319706a0078759757a851def28fb1981cc814e3a7d901a680b70f8f2f7aa08d6056ff81422e922912ae0a7fc54a7939e7d554fbdc043536f476221884538311e20e06be9f35669fdb226f18af182bf264fb826115f82db11edaceb22d2a02845763ade84afe9fb69b4aaf3eb9a9ed52c217be0b2c67126d1cb61adb96f817e57ec75f67f98186785ef70200f16fdc6a9877273968d55b476afe1b2a0775a14e00a437486169e36c082e17bab5b0978fdc47be2b90994844f831fe824f11b6783b6897a5c38c26f1901ace8f10d534f39efa26dc00353313ae87b634ac77826266d4c082944ad7361edc6cf21a7b2e5338d047e08814b8e656db88e093317f058c4c3aebcdbdb000d28d51e17590cf41e87c648ded49f0a05e8bed0eb1b08a8576e60448c89629310d073750681beee7de8e89cc647571f54944d36c8936e109c6d981a858abdfec7f4766f0a667e1d09d98112199382de8c5be949d9f9ffeac1cfcd977f840a5b826f6f2d30861c87a305979e822ba8dcf8fce63371f5ad8546d30e0980eace71df349fb1214fcf82100402eeaffe218259072ff51f5f9827864a0bd7e0ca71f35172eaee40588afdaac390de689e880a34915efc274ba58e805c89211e48dd5b2d599dfccf3667e1e599b553aedc669c4cfb46724e6b2bc649c44f151e203fa05cfe739754f918a298f034aebc98e1ffafc07339a92e23c1c65209bab64293843f9762a3ac6fb59b7b6b86880b3a389b8d12eec3bc504fe0ba1a4a4227c1abf7d45cc48d57fb45dfa986f00ad2fdc67a3f85466970fb18e5f77dcb8fdd05072c15930688e1b679da487c8385ba24f8caa45d0e77c98aff155ea0d0211990fcf8590179c872d50371b7531df8050f9e725703586224da8ee28d02fdabb17b5e3a07d994e29829993c029c12bbc9d43e2db9416618066980eda2f06ffce206681f448ff8aae6921ece773e701d27639593d0fe6e1db0e080d063e5a2258e4289f1ceef853a96c610c1bffc4d3bf78f6fbf169ef7476c40b4bfce6b8024ebb743ec7bbd1b55894c31c54dbc37e5a273e4b6404ea1141ebf1df8acdc64cac55adfb272814c2e94a2a721964244c2c44ac6e3075f8f8794c7d7395204d5e2b0dda951ad29fbdfc10f9f89d06c881a458af2e6d04fb01f44c0116c4cf59f295f806128680654780133e04c730bebc40118937c99de210fbbf9a6c29f1c1b3061852505f3897b25c0c68f1d9d24e9bf05b8aaf2e117e254d37b7d6ad017979a817792bf42da886ee3d3c90cdb65afc3f3088ab2ce45006d85f64a35a9aaa6a84677c306123fa0608e74869ab72412798074e4f47b2dc9d2a4d67cd08e34c5ef9121bf27f3402b9e93cd7823d60b743441272f82eea5130730344b6794be05de26b5f14ee3b65028972bd2c4c3d14a30230d499ce3aba23aa52163b81f598428a0246746293b2cf17ca9acc8cc4dbadd694d650453d18d636a3a31377e1f73530ba195f43c955c4ece0ca9ccd3075884bf2769e64cf3ac3a4aecd5e94e1f71a64a852b5fd543e715186d72ba5c71a44bb2417000f8db4ffda634f5a6ae7cc69216a4acc313fc71dd7f7195223e2594267aaa20a218d25d378610b74937e7671170a1b07f4fa5953a50294b26f1d0227a8847e1d2349933f96a0cb9c07a96f57cc90a349045d4ddf223ffd082a22d3060cd3f42776320b779fb8d99d54b97553c1a7d6d4df5e4f63ca7a8482423ac3cdaff3f94163b5ba2406912b00536d3a725afaf61276c8387ab20d9705e03b779cfa264e3ba8049de5692280975c533ce3c469b2c8e1cec5698ccb3efdae68f66bb8c45b848349748edd1fd7a10ae7e63391fe34f23f3d90c14398b0be133cb4b6ae27b50bc9333ecb89f72cc7828633c443bf303e5a3684935767cb223a585f5241a2f4b7b9e8667f5c426561f86c14c699691f3f29244f9d4a04d569be8e34f8aecdd87a4229374169546bae727140854f423fbcddc04a22e47259a87a5bff1bcac638880bf0fb4ea0a7185881c810971fae97059e89901452d4a593ccc666b06955c76ce7e76d499fbdac26f9ecd6da1f5f2353600de5688408a9b36fa35465af4b5705e55d849d9b82513284bcb36be4291eee6e0b3ca9614222f8b7ad697aa3e2a523f7c7cf10da16b0f19f8ba5fb047756b05fa30ba6cdb28b2c0a9d7bd5ea13b8f97bbd6befb7f39947e1fbc7f07dd4b7dbb886025dcbb4a21501c12a2b4604f762dc916d04c5874f2a09f39997220e3ba3472e36c83e46237804962936f51759ff7915592ee66ea24c17d39aea558816574a6bb77e4af70ef226d319ea5b70ba657c41fb8641ee174d4ab5c464b2c82c1c4498ee242134f138dfe8f98c77c6e0a48b1884eed0b2d0ee8a727664c31d7b36dc4a624cd477d2be209b0cccbb37afa79252896a78a22e0f7b992f871bb322f8acaf054540b80fcf08532e3d84c16a45e085e15dc9907c3d31e6146c6fca534cff3eb1299f2f34c05087e45cf063474237024ad2492dde29a22604360a462caa8045a6f150d71fdb147291b2cff89fcde36a1bab5ea64fdfe67ff03c7cc1e79858cb21356a3c76db81a4c977e377161a9073aa08eff7b5f5823b3384253c176d2b150b20115c8c3065819093bd704ae4a8e413a0eabfde7fcb407aee9fa8e03ace3e7ee5fa256c50b50e3e52aeb00c9aa0bffa949e219818d90d06abe98f62f9a20d033e1ff1ac2a89ff6c728c67d3f5508364771b4dfb73be13ad3d4ca8043bda10acdc569cd40a46e9c4b706b7d4351e43cabf8e39d9cb2a3462a635db76d8cbe2f0d36f4d0bed9eaf91de54f42e6522e4f06e9aab67824149d87e7fc47e48062ba7c5cf2338f6993101df32a8525f3cfb8c52d1b888b588611f030b8768e6ccc8179da6eec0abef08d76e8cd2b31491ee8e46aefcfe19c7ea4cb012f24b00dbc8d29fb30859bf823be5a088d4c6cdf5dc69bcb7bb6efb983510aea002658426cd1c0c4b11ef6ca2ebb6d767ca600e34fa26e637c24d2cbb0b7c940b1420a988b38ae15276ece91d4715640157a25cf8392d35d9936c4d4c7cfebc27668bc521a21cc549403799d904384dafe0f13f8a1011c8c66e1bb61e22968e80c70b1a24874ca2be3fc5ff0ae849a354a5a77d50343f924af8e9ecdee0d41a3f1d0f1fa1d5c114b69d2cff9f441fbd16ef40f21ac66831c1869a56a2621444a6811073fd100811a28be4476b3ad6504460680a608a1a7877a0", 0x1000}, {&(0x7f0000006040)="0f95c4fcaede2fa99f4860c9a476a851952ddb3aba2ffb3955328f40d5fe3b441f90f221aeca60c39734cfffbecc076cf628d1727c382b85bc259c2f2f458aa597a7556adb20c60ca70508ecec7cbf837c910011e8449c87719f66392a3a9292a722c01e9475e0", 0x67}, {&(0x7f00000060c0)="bd579d619e4dbe4b8cabe10314a35ee887a256d3680e839225e9effa27196f9872506fedf215f3e2333d811c38cbab0cbdfe35b9d50d885e89c64e1d5496312325539e8137aeb654fecaacb3ff382736629cbf914084d6e84b35df75bcce1939b7b7499efb1c3383ca4cb8afde9b6a5f364fb5050ca6", 0x76}, {&(0x7f0000006140)="79e9e3ff1e0587226eb123550fd4a0ab797761f66188235f9effa25a187722f8499b431a0c6670154cab58ad2dc79b7cd1e3fd73735ed79aa36fa1ddb33b63b7b193fadd2929a2dc4cc29ceb", 0x4c}, {&(0x7f00000061c0)="e65014ed44b305ce7a67400d504574a795f1c53e562d81f5c06825dfbba776dafdbd3a5dc198f9d7c174a20420a2809d887acf10659e0e4655fad62a9b6916ae92d1a807cfe2229b72bc70654cebfed03ed7abbccce64212f1e161d90e4dae0c67ebb6e5d690d62754e14b082302c394e499c2a7e955d7f71dad6ad8a58be4f029e9d583187a7c68e5727f5a8db442c1691f74346789197aad4e85dcd856e8d840ee91d7afe904f2cc2304951af9d85ae95512d952fb61b4a06de98f0945f39fe93eb873f410e6cbf63e25d046ec9d5568b7949be843044762259d098ba4bbccc79fc6eb77", 0xe5}, {&(0x7f00000062c0)="68fe398938814707b98cf185d334871574c7a20ee6fc705252f8a3aec1465bea2977a265ffff1aa366f7c311fe4cc5a85a5faeab482695b908fefb26c870a6f995d12b8eef506c7389dcece4fc09f9c37b371cf3994e7ebb58b7750865972e4f1b53361b492b5c385d5d316b9e03b122593ec3dc5b74bc704d76033079f2837141376c0770b6a318e887b1c28ddc99c213d0a0cf85b503d57d2836491889bb1121583ffd80c74c02859eca295f04f03abf", 0xb1}], 0x6, &(0x7f0000006840)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r5, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xd0, 0x800}}], 0x6, 0x8000) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/203, 0xcb}, 0xa}], 0x1, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) 65.93528ms ago: executing program 0 (id=7038): r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000480)="9ba623329effd828e7c5473e2fbfb95c7bff724ba23ce6bcf184c4594208e96df0692a31875bad6e374004bbae2568613c254c0216fbaecd30b549214f50acfc55818d2e077d1ebaae1d63bd2f31f936dcaa", 0x52}, {&(0x7f0000000500)="7f592e23cf749e7c0e7a86c061b9dc4d429b25c898829e23eaf3820d7b337c4fd4ea83a930", 0x25}], 0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400052143834e0b6c2265670658bdc81b9f18003a000103e92e37cd5f2c6415fc8fe7d28b3507d546fcffffff06000000b3543df03243455a79b65fc2923e4e5dc507a58470303e50b219846720d173a8418a9a643dfa47a1479e9f9f37c2a11d35e444fd934240280963baa00f1a87384bd4e1517321840f5c8ff712d00ae0122a746544719d5831637b71d559817dbe004ee3a2418197503ba09ae8767ed07167848970000000000000"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000340)="00215717a707007428e82a8d74030600710a5e31163c48", 0xffffffa9}], 0x1, 0x40007ce, 0x5) 0s ago: executing program 1 (id=7039): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000000000000000) kernel console output (not intermixed with test programs): oogle 03/18/2026 [ 788.029298][T26178] Call Trace: [ 788.029306][T26178] [ 788.029313][T26178] dump_stack_lvl+0xe8/0x150 [ 788.029344][T26178] should_fail_ex+0x412/0x560 [ 788.029372][T26178] should_failslab+0xa8/0x100 [ 788.029393][T26178] __kmalloc_cache_noprof+0x88/0x660 [ 788.029418][T26178] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 788.029438][T26178] ? sctp_add_bind_addr+0x8c/0x370 [ 788.029464][T26178] sctp_add_bind_addr+0x8c/0x370 [ 788.029488][T26178] sctp_copy_local_addr_list+0x314/0x4f0 [ 788.029512][T26178] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 788.029531][T26178] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 788.029554][T26178] ? sctp_v6_is_any+0x64/0x80 [ 788.029577][T26178] ? sctp_copy_one_addr+0x93/0x360 [ 788.029600][T26178] sctp_bind_addr_copy+0x189/0x3c0 [ 788.029629][T26178] sctp_connect_new_asoc+0x2ff/0x6b0 [ 788.029656][T26178] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 788.029686][T26178] ? __local_bh_enable_ip+0xd0/0x130 [ 788.029709][T26178] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 788.029727][T26178] ? security_sctp_bind_connect+0x7e/0x2c0 [ 788.029750][T26178] sctp_sendmsg+0x1528/0x2c10 [ 788.029799][T26178] ? __pfx_sctp_sendmsg+0x10/0x10 [ 788.029824][T26178] ? aa_sk_perm+0x6d5/0x900 [ 788.029851][T26178] ? __pfx_aa_sk_perm+0x10/0x10 [ 788.029874][T26178] ? sock_rps_record_flow+0x19/0x350 [ 788.029896][T26178] ? inet_sendmsg+0x2f4/0x370 [ 788.029917][T26178] ____sys_sendmsg+0x80a/0x9f0 [ 788.029948][T26178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.029983][T26178] ? import_iovec+0x73/0xa0 [ 788.030004][T26178] ___sys_sendmsg+0x2a5/0x360 [ 788.030028][T26178] ? __lock_acquire+0x6b5/0x2cf0 [ 788.030056][T26178] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.030087][T26178] ? kstrtouint+0x6e/0xe0 [ 788.030134][T26178] ? __fget_files+0x2a/0x420 [ 788.030155][T26178] ? __fget_files+0x3a0/0x420 [ 788.030184][T26178] __sys_sendmmsg+0x27c/0x4e0 [ 788.030216][T26178] ? __pfx___sys_sendmmsg+0x10/0x10 [ 788.030240][T26178] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 788.030287][T26178] ? ksys_write+0x242/0x270 [ 788.030315][T26178] ? __pfx_ksys_write+0x10/0x10 [ 788.030347][T26178] __x64_sys_sendmmsg+0xa0/0xc0 [ 788.030374][T26178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.030394][T26178] do_syscall_64+0x15f/0xf80 [ 788.030415][T26178] ? trace_irq_disable+0x3b/0x140 [ 788.030435][T26178] ? clear_bhb_loop+0x40/0x90 [ 788.030457][T26178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.030474][T26178] RIP: 0033:0x7fc12f99c819 [ 788.030492][T26178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.030508][T26178] RSP: 002b:00007fc1307ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 788.030529][T26178] RAX: ffffffffffffffda RBX: 00007fc12fc15fa0 RCX: 00007fc12f99c819 [ 788.030543][T26178] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 788.030556][T26178] RBP: 00007fc1307ad090 R08: 0000000000000000 R09: 0000000000000000 [ 788.030566][T26178] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000002 [ 788.030577][T26178] R13: 00007fc12fc16038 R14: 00007fc12fc15fa0 R15: 00007fff4b4f1c48 [ 788.030607][T26178] [ 788.030801][T26176] syzkaller0: entered allmulticast mode [ 788.539185][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 788.713931][T26209] IPv6: NLM_F_CREATE should be specified when creating new route [ 788.726037][T26210] FAULT_INJECTION: forcing a failure. [ 788.726037][T26210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.761941][T26210] CPU: 0 UID: 0 PID: 26210 Comm: syz.4.5655 Not tainted syzkaller #0 PREEMPT(full) [ 788.761970][T26210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 788.761989][T26210] Call Trace: [ 788.761998][T26210] [ 788.762006][T26210] dump_stack_lvl+0xe8/0x150 [ 788.762051][T26210] should_fail_ex+0x412/0x560 [ 788.762082][T26210] _copy_to_user+0x31/0xb0 [ 788.762104][T26210] simple_read_from_buffer+0xe1/0x170 [ 788.762134][T26210] proc_fail_nth_read+0x1bb/0x230 [ 788.762160][T26210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.762185][T26210] ? rw_verify_area+0x2a6/0x4d0 [ 788.762209][T26210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.762234][T26210] vfs_read+0x20c/0xa70 [ 788.762262][T26210] ? __pfx___mutex_lock+0x10/0x10 [ 788.762285][T26210] ? __pfx_vfs_read+0x10/0x10 [ 788.762309][T26210] ? __fget_files+0x2a/0x420 [ 788.762334][T26210] ? __fget_files+0x3a0/0x420 [ 788.762354][T26210] ? __fget_files+0x2a/0x420 [ 788.762383][T26210] ksys_read+0x150/0x270 [ 788.762411][T26210] ? __pfx_ksys_read+0x10/0x10 [ 788.762443][T26210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.762463][T26210] do_syscall_64+0x15f/0xf80 [ 788.762483][T26210] ? trace_irq_disable+0x3b/0x140 [ 788.762501][T26210] ? clear_bhb_loop+0x40/0x90 [ 788.762523][T26210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.762539][T26210] RIP: 0033:0x7fc12f95d04e [ 788.762558][T26210] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 788.762573][T26210] RSP: 002b:00007fc1307acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 788.762594][T26210] RAX: ffffffffffffffda RBX: 00007fc1307ad6c0 RCX: 00007fc12f95d04e [ 788.762608][T26210] RDX: 000000000000000f RSI: 00007fc1307ad0a0 RDI: 0000000000000004 [ 788.762619][T26210] RBP: 00007fc1307ad090 R08: 0000000000000000 R09: 0000000000000000 [ 788.762630][T26210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.762641][T26210] R13: 00007fc12fc16038 R14: 00007fc12fc15fa0 R15: 00007fff4b4f1c48 [ 788.762669][T26210] [ 788.791125][T26214] batadv_slave_1: entered promiscuous mode [ 789.022023][T26211] batadv_slave_1: left promiscuous mode [ 789.063474][T26218] syzkaller0: entered promiscuous mode [ 789.075781][T26218] syzkaller0: entered allmulticast mode [ 789.080144][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 789.159469][T26221] openvswitch: netlink: IPv6 tunnel dst address is zero [ 789.168538][T26222] x_tables: duplicate underflow at hook 4 [ 789.287703][T26229] batadv0: entered promiscuous mode [ 789.301472][T26229] batadv0: entered allmulticast mode [ 789.317428][T26229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.434825][T26236] IPv6: NLM_F_CREATE should be specified when creating new route [ 789.639438][T21070] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 789.922914][T26254] __nla_validate_parse: 9 callbacks suppressed [ 789.922932][T26254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5668'. [ 790.113306][T26264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5668'. [ 790.180361][T21072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 790.711062][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 790.904713][T26284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5673'. [ 790.937396][T26284] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5673'. [ 790.982216][T26284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5673'. [ 791.034465][T26284] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5673'. [ 791.071936][T26289] syzkaller0: entered promiscuous mode [ 791.088639][T26289] syzkaller0: entered allmulticast mode [ 791.113665][T26281] syzkaller1: entered promiscuous mode [ 791.119803][T26281] syzkaller1: entered allmulticast mode [ 791.269129][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 791.537117][T26308] syzkaller0: entered promiscuous mode [ 791.576771][T26308] syzkaller0: entered allmulticast mode [ 791.819910][T21081] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 791.845801][T26321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5680'. [ 792.361668][T21072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 792.686196][T26336] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5682'. [ 792.956004][T26361] syzkaller0: entered promiscuous mode [ 792.969258][T26370] syzkaller0: entered promiscuous mode [ 793.001507][T26370] syzkaller0: entered allmulticast mode [ 793.025929][T26377] net_ratelimit: 2 callbacks suppressed [ 793.025948][T26377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.334715][T26391] IPv6: NLM_F_CREATE should be specified when creating new route [ 793.439437][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 793.971590][T21070] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 794.499235][T21070] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 795.023900][T21072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 795.540137][T21072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 796.035272][T26379] syzkaller0: entered promiscuous mode [ 796.041224][T26379] syzkaller0: entered allmulticast mode [ 796.059289][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 796.639104][T21072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 796.705097][T26434] xt_CT: No such helper "snmp_trap" [ 796.716706][T26438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5698'. [ 796.863616][T26443] syzkaller0: entered promiscuous mode [ 796.890188][T26443] syzkaller0: entered allmulticast mode [ 797.062676][T26388] lo speed is unknown, defaulting to 1000 [ 797.135173][T26459] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 797.209466][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 797.724659][T26474] syzkaller0: entered promiscuous mode [ 797.759255][T21072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 798.167828][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5708'. [ 798.309649][T21070] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 798.606583][T26508] No such timeout policy "syz1" [ 798.836119][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 799.361745][T21081] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 799.900644][T21081] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 800.421197][T21077] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 800.939928][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 801.004466][T26521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5711'. [ 801.337831][T26534] syzkaller0: entered promiscuous mode [ 801.359192][T26534] syzkaller0: entered allmulticast mode [ 801.499208][T21070] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 801.590274][T26545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5716'. [ 802.028796][T26559] No such timeout policy "syz1" [ 802.059176][T21077] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 802.555279][T26592] syzkaller0: entered promiscuous mode [ 802.566465][T26592] syzkaller0: entered allmulticast mode [ 802.609846][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 802.787118][T26600] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 802.852832][T26607] syzkaller0: entered promiscuous mode [ 802.873084][T26607] syzkaller0: entered allmulticast mode [ 803.139759][ T6066] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 803.193427][T26621] syzkaller0: entered promiscuous mode [ 803.306666][T26631] IPv6: NLM_F_CREATE should be specified when creating new route [ 803.488545][T26634] syzkaller0: entered promiscuous mode [ 803.515044][T26634] syzkaller0: entered allmulticast mode [ 803.679395][T21081] net_ratelimit: 1 callbacks suppressed [ 803.679413][T21081] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 804.142121][T26665] No such timeout policy "syz1" [ 804.269320][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 804.315265][T26679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5743'. [ 804.465214][T26686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5743'. [ 804.752569][T26698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5748'. [ 804.840197][T21071] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 805.282945][T26677] lo speed is unknown, defaulting to 1000 [ 805.338127][T26723] netlink: 'syz.0.5751': attribute type 4 has an invalid length. [ 805.346256][T26722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5752'. [ 805.390141][T21071] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 805.810634][T26732] IPv6: NLM_F_CREATE should be specified when creating new route [ 805.949223][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 806.202121][T26746] netlink: 'syz.3.5756': attribute type 1 has an invalid length. [ 806.285404][T26748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5757'. [ 806.355773][T26749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5758'. [ 806.384318][T26749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5758'. [ 806.409643][T26749] netlink: 58 bytes leftover after parsing attributes in process `syz.0.5758'. [ 806.458663][T26760] netlink: 'syz.1.5761': attribute type 1 has an invalid length. [ 806.485877][T26760] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5761'. [ 806.487707][T26764] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5762'. [ 806.504810][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 806.540165][T26749] team0 (unregistering): Port device team_slave_0 removed [ 806.562440][T26749] team0 (unregistering): Port device team_slave_1 removed [ 806.872105][T26775] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 806.918084][T26782] syzkaller0: entered promiscuous mode [ 806.928941][T26782] syzkaller0: entered allmulticast mode [ 807.049335][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 807.086013][T26786] netlink: 'syz.5.5768': attribute type 6 has an invalid length. [ 807.109177][T26791] netlink: 'syz.5.5768': attribute type 6 has an invalid length. [ 807.227370][T26799] syzkaller0: entered promiscuous mode [ 807.243014][T26799] syzkaller0: entered allmulticast mode [ 807.376230][T26812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 807.589207][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 807.731616][T26787] lo speed is unknown, defaulting to 1000 [ 807.863309][T26832] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 807.941500][T26837] FAULT_INJECTION: forcing a failure. [ 807.941500][T26837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.955006][T26837] CPU: 1 UID: 0 PID: 26837 Comm: syz.0.5790 Not tainted syzkaller #0 PREEMPT(full) [ 807.955032][T26837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 807.955043][T26837] Call Trace: [ 807.955052][T26837] [ 807.955060][T26837] dump_stack_lvl+0xe8/0x150 [ 807.955090][T26837] should_fail_ex+0x412/0x560 [ 807.955118][T26837] _copy_from_user+0x2d/0xb0 [ 807.955138][T26837] ipv6_flowlabel_opt+0x1493/0x28e0 [ 807.955177][T26837] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 807.955225][T26837] ? do_raw_spin_lock+0x12b/0x2f0 [ 807.955244][T26837] ? lock_sock_nested+0x6a/0x100 [ 807.955281][T26837] ? __local_bh_enable_ip+0xd0/0x130 [ 807.955318][T26837] do_ipv6_setsockopt+0xd9f/0x3150 [ 807.955342][T26837] ? get_pid_task+0x20/0x1f0 [ 807.955369][T26837] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 807.955399][T26837] ? get_pid_task+0x20/0x1f0 [ 807.955416][T26837] ? get_pid_task+0x20/0x1f0 [ 807.955431][T26837] ? get_pid_task+0x20/0x1f0 [ 807.955457][T26837] ? __lock_acquire+0x6b5/0x2cf0 [ 807.955500][T26837] ? aa_sk_perm+0x6d5/0x900 [ 807.955524][T26837] ? __fget_files+0x2a/0x420 [ 807.955551][T26837] ? __pfx_aa_sk_perm+0x10/0x10 [ 807.955575][T26837] ? __fget_files+0x2a/0x420 [ 807.955595][T26837] ? aa_sock_opt_perm+0xff/0x1a0 [ 807.955621][T26837] ipv6_setsockopt+0x59/0x170 [ 807.955645][T26837] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 807.955669][T26837] do_sock_setsockopt+0x17c/0x1b0 [ 807.955698][T26837] __x64_sys_setsockopt+0x13d/0x1b0 [ 807.955726][T26837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.955747][T26837] do_syscall_64+0x15f/0xf80 [ 807.955767][T26837] ? trace_irq_disable+0x3b/0x140 [ 807.955787][T26837] ? clear_bhb_loop+0x40/0x90 [ 807.955811][T26837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.955829][T26837] RIP: 0033:0x7fa99559c819 [ 807.955847][T26837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.955863][T26837] RSP: 002b:00007fa9963b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 807.955883][T26837] RAX: ffffffffffffffda RBX: 00007fa995815fa0 RCX: 00007fa99559c819 [ 807.955897][T26837] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 807.955908][T26837] RBP: 00007fa9963b0090 R08: 000000000000002f R09: 0000000000000000 [ 807.955919][T26837] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.955931][T26837] R13: 00007fa995816038 R14: 00007fa995815fa0 R15: 00007ffde8f3f248 [ 807.955959][T26837] [ 808.206729][T21071] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 808.339133][T26842] syzkaller0: entered promiscuous mode [ 808.359245][T26842] syzkaller0: entered allmulticast mode [ 808.608829][T26848] x_tables: duplicate underflow at hook 4 [ 808.729659][T21077] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 808.753530][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.800018][T26857] netlink: 'syz.0.5798': attribute type 1 has an invalid length. [ 808.809864][T26857] nbd: must specify at least one socket [ 809.201466][T26875] No such timeout policy "syz1" [ 809.223562][T26877] IPv6: NLM_F_CREATE should be specified when creating new route [ 809.279350][ T6066] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 809.584530][T26887] tipc: Enabled bearer , priority 21 [ 809.800264][T26895] FAULT_INJECTION: forcing a failure. [ 809.800264][T26895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.809606][T21077] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 809.835552][T26895] CPU: 1 UID: 0 PID: 26895 Comm: syz.1.5811 Not tainted syzkaller #0 PREEMPT(full) [ 809.835577][T26895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.835588][T26895] Call Trace: [ 809.835595][T26895] [ 809.835604][T26895] dump_stack_lvl+0xe8/0x150 [ 809.835636][T26895] should_fail_ex+0x412/0x560 [ 809.835667][T26895] _copy_to_user+0x31/0xb0 [ 809.835689][T26895] simple_read_from_buffer+0xe1/0x170 [ 809.835718][T26895] proc_fail_nth_read+0x1bb/0x230 [ 809.835746][T26895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 809.835773][T26895] ? rw_verify_area+0x2a6/0x4d0 [ 809.835799][T26895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 809.835824][T26895] vfs_read+0x20c/0xa70 [ 809.835854][T26895] ? __pfx___mutex_lock+0x10/0x10 [ 809.835878][T26895] ? __pfx_vfs_read+0x10/0x10 [ 809.835905][T26895] ? __fget_files+0x2a/0x420 [ 809.835931][T26895] ? __fget_files+0x3a0/0x420 [ 809.835953][T26895] ? __fget_files+0x2a/0x420 [ 809.835983][T26895] ksys_read+0x150/0x270 [ 809.836012][T26895] ? __pfx_ksys_read+0x10/0x10 [ 809.836045][T26895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.836066][T26895] do_syscall_64+0x15f/0xf80 [ 809.836086][T26895] ? trace_irq_disable+0x3b/0x140 [ 809.836107][T26895] ? clear_bhb_loop+0x40/0x90 [ 809.836129][T26895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.836148][T26895] RIP: 0033:0x7f27ceb5d04e [ 809.836165][T26895] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 809.836181][T26895] RSP: 002b:00007f27cfa77fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 809.836202][T26895] RAX: ffffffffffffffda RBX: 00007f27cfa786c0 RCX: 00007f27ceb5d04e [ 809.836216][T26895] RDX: 000000000000000f RSI: 00007f27cfa780a0 RDI: 0000000000000005 [ 809.836228][T26895] RBP: 00007f27cfa78090 R08: 0000000000000000 R09: 0000000000000000 [ 809.836240][T26895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.836251][T26895] R13: 00007f27cee16038 R14: 00007f27cee15fa0 R15: 00007ffd17490488 [ 809.836283][T26895] [ 810.283529][T26909] netlink: 'syz.1.5813': attribute type 64 has an invalid length. [ 810.313429][T26907] __nla_validate_parse: 15 callbacks suppressed [ 810.313452][T26907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5815'. [ 810.579374][T21071] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 810.808685][T26919] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5818'. [ 810.831892][T26921] FAULT_INJECTION: forcing a failure. [ 810.831892][T26921] name failslab, interval 1, probability 0, space 0, times 0 [ 810.865020][T26921] CPU: 0 UID: 0 PID: 26921 Comm: syz.3.5820 Not tainted syzkaller #0 PREEMPT(full) [ 810.865046][T26921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 810.865058][T26921] Call Trace: [ 810.865066][T26921] [ 810.865075][T26921] dump_stack_lvl+0xe8/0x150 [ 810.865107][T26921] should_fail_ex+0x412/0x560 [ 810.865137][T26921] should_failslab+0xa8/0x100 [ 810.865166][T26921] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 810.865191][T26921] ? __alloc_skb+0x186/0x7d0 [ 810.865214][T26921] ? __alloc_skb+0x1d0/0x7d0 [ 810.865235][T26921] ? __local_bh_enable_ip+0xd0/0x130 [ 810.865264][T26921] __alloc_skb+0x1d0/0x7d0 [ 810.865293][T26921] netlink_sendmsg+0x5d4/0xb40 [ 810.865328][T26921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.865356][T26921] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.865381][T26921] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.865410][T26921] ____sys_sendmsg+0x972/0x9f0 [ 810.865436][T26921] ? __might_fault+0xaf/0x130 [ 810.865464][T26921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.865498][T26921] ? import_iovec+0x73/0xa0 [ 810.865521][T26921] ___sys_sendmsg+0x2a5/0x360 [ 810.865545][T26921] ? __lock_acquire+0x6b5/0x2cf0 [ 810.865572][T26921] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.865632][T26921] ? __fget_files+0x2a/0x420 [ 810.865655][T26921] ? __fget_files+0x3a0/0x420 [ 810.865686][T26921] __x64_sys_sendmsg+0x1bd/0x2a0 [ 810.865715][T26921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.865749][T26921] ? __pfx_ksys_write+0x10/0x10 [ 810.865783][T26921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.865803][T26921] do_syscall_64+0x15f/0xf80 [ 810.865825][T26921] ? trace_irq_disable+0x3b/0x140 [ 810.865846][T26921] ? clear_bhb_loop+0x40/0x90 [ 810.865869][T26921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.865887][T26921] RIP: 0033:0x7fe7ccb9c819 [ 810.865905][T26921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.865921][T26921] RSP: 002b:00007fe7cd9b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.865942][T26921] RAX: ffffffffffffffda RBX: 00007fe7cce15fa0 RCX: 00007fe7ccb9c819 [ 810.865956][T26921] RDX: 000000000400c8dc RSI: 0000200000000240 RDI: 0000000000000003 [ 810.865968][T26921] RBP: 00007fe7cd9b2090 R08: 0000000000000000 R09: 0000000000000000 [ 810.865980][T26921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.865992][T26921] R13: 00007fe7cce16038 R14: 00007fe7cce15fa0 R15: 00007ffd9283f088 [ 810.866019][T26921] [ 810.975065][T26928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5821'. [ 811.109253][ T6066] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 811.409417][T26936] syzkaller0: entered promiscuous mode [ 811.427735][T26936] syzkaller0: entered allmulticast mode [ 811.492096][T26942] netlink: 'syz.1.5826': attribute type 1 has an invalid length. [ 811.501781][T26942] netlink: 'syz.1.5826': attribute type 2 has an invalid length. [ 811.510598][T26942] netlink: 'syz.1.5826': attribute type 1 has an invalid length. [ 811.519668][T26942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5826'. [ 811.585094][T26942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5826'. [ 811.649424][ T6066] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 811.963166][T26960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5830'. [ 812.111851][T26968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5835'. [ 812.190574][T21071] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 812.283934][T26976] syzkaller0: entered promiscuous mode [ 812.347854][T26980] netlink: 'syz.5.5837': attribute type 13 has an invalid length. [ 812.370271][T26980] netlink: 'syz.5.5837': attribute type 17 has an invalid length. [ 812.580316][T26980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.596845][T26980] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.608403][T26980] batman_adv: batadv0: Interface activated: dummy0 [ 812.615865][T26980] batadv0: mtu less than device minimum [ 812.623410][T26980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 812.635422][T26980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 812.680454][T26979] syzkaller0: entered promiscuous mode [ 812.699236][T26979] syzkaller0: entered allmulticast mode [ 812.713255][T26987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5841'. [ 812.729898][T26987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5841'. [ 812.748573][T26987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5841'. [ 812.776091][T26990] geneve4: entered promiscuous mode [ 812.782844][T26993] FAULT_INJECTION: forcing a failure. [ 812.782844][T26993] name failslab, interval 1, probability 0, space 0, times 0 [ 812.801867][ T48] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 44836 - 0 [ 812.814975][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 44836 - 0 [ 812.828360][T26993] CPU: 0 UID: 0 PID: 26993 Comm: syz.0.5843 Not tainted syzkaller #0 PREEMPT(full) [ 812.828386][T26993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 812.828398][T26993] Call Trace: [ 812.828406][T26993] [ 812.828416][T26993] dump_stack_lvl+0xe8/0x150 [ 812.828449][T26993] should_fail_ex+0x412/0x560 [ 812.828481][T26993] should_failslab+0xa8/0x100 [ 812.828503][T26993] __kmalloc_cache_noprof+0x88/0x660 [ 812.828529][T26993] ? __raw_spin_lock_init+0x45/0x100 [ 812.828549][T26993] ? pfkey_add+0x1354/0x2df0 [ 812.828573][T26993] pfkey_add+0x1354/0x2df0 [ 812.828599][T26993] ? kasan_quarantine_put+0xbc/0x1f0 [ 812.828632][T26993] ? __pfx_pfkey_add+0x10/0x10 [ 812.828664][T26993] pfkey_sendmsg+0xc56/0x1120 [ 812.828690][T26993] ? unwind_next_frame+0xa6/0x2550 [ 812.828724][T26993] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 812.828776][T26993] ? aa_sock_msg_perm+0xf1/0x1b0 [ 812.828802][T26993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.828833][T26993] ____sys_sendmsg+0x972/0x9f0 [ 812.828860][T26993] ? __might_fault+0xaf/0x130 [ 812.828891][T26993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.828933][T26993] ? import_iovec+0x73/0xa0 [ 812.828957][T26993] ___sys_sendmsg+0x2a5/0x360 [ 812.828985][T26993] ? __lock_acquire+0x6b5/0x2cf0 [ 812.829009][T26993] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.829064][T26993] ? __fget_files+0x2a/0x420 [ 812.829084][T26993] ? __fget_files+0x3a0/0x420 [ 812.829115][T26993] __x64_sys_sendmsg+0x1bd/0x2a0 [ 812.829142][T26993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 812.829176][T26993] ? __pfx_ksys_write+0x10/0x10 [ 812.829207][T26993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.829225][T26993] do_syscall_64+0x15f/0xf80 [ 812.829245][T26993] ? trace_irq_disable+0x3b/0x140 [ 812.829265][T26993] ? clear_bhb_loop+0x40/0x90 [ 812.829288][T26993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.829306][T26993] RIP: 0033:0x7fa99559c819 [ 812.829323][T26993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.829337][T26993] RSP: 002b:00007fa9963b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.829358][T26993] RAX: ffffffffffffffda RBX: 00007fa995815fa0 RCX: 00007fa99559c819 [ 812.829372][T26993] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 812.829382][T26993] RBP: 00007fa9963b0090 R08: 0000000000000000 R09: 0000000000000000 [ 812.829393][T26993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.829404][T26993] R13: 00007fa995816038 R14: 00007fa995815fa0 R15: 00007ffde8f3f248 [ 812.829433][T26993] [ 813.301667][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 44836 - 0 [ 813.388773][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 44836 - 0 [ 813.435923][T27002] syzkaller0: entered promiscuous mode [ 813.442163][T27002] syzkaller0: entered allmulticast mode [ 813.616408][T27012] veth1: entered promiscuous mode [ 813.633495][T27012] veth1: entered allmulticast mode [ 813.769298][T21077] net_ratelimit: 20 callbacks suppressed [ 813.769318][T21077] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 814.311603][T21077] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 814.437905][T27047] netlink: 'syz.4.5859': attribute type 2 has an invalid length. [ 814.463365][T27047] netlink: 'syz.4.5859': attribute type 1 has an invalid length. [ 814.609194][T27056] sctp: [Deprecated]: syz.3.5861 (pid 27056) Use of int in maxseg socket option. [ 814.609194][T27056] Use struct sctp_assoc_value instead [ 814.835220][T27066] No such timeout policy "syz1" [ 814.840351][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 815.051088][T27038] lo speed is unknown, defaulting to 1000 [ 815.077238][T27073] siw: device registration error -23 [ 815.399730][T21071] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 815.531670][T27089] syzkaller0: entered promiscuous mode [ 815.541110][T27089] syzkaller0: entered allmulticast mode [ 815.910000][T27104] bridge7: entered allmulticast mode [ 815.930121][T21077] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 815.993842][T27108] syzkaller0: entered promiscuous mode [ 816.008430][T27108] 0: reclassify loop, rule prio 0, protocol 800 [ 816.347126][T27118] __nla_validate_parse: 10 callbacks suppressed [ 816.347150][T27118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5880'. [ 816.383010][T27118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5880'. [ 816.479194][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 816.570172][T27128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5883'. [ 816.887348][T27139] xt_CT: No such helper "snmp_trap" [ 816.963182][T27142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5888'. [ 817.021519][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 817.188219][T27147] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5890'. [ 817.250060][T27147] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5890'. [ 817.514012][T27131] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 817.560325][T21077] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 817.631147][T27170] syzkaller0: entered promiscuous mode [ 817.649456][T27170] syzkaller0: entered allmulticast mode [ 817.667608][T27170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5897'. [ 817.710346][T27176] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 817.995211][T27187] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5902'. [ 818.037270][T27187] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5902'. [ 818.080530][T27188] IPVS: set_ctl: invalid protocol: 136 100.0.1.1:20001 [ 818.080637][T27187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5902'. [ 818.120197][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.248385][T27195] 8021q: adding VLAN 0 to HW filter on device bond18 [ 818.346841][T27202] netlink: 'syz.0.5909': attribute type 3 has an invalid length. [ 818.749133][T20007] Bluetooth: hci4: command 0x0406 tx timeout [ 818.831120][T27219] net_ratelimit: 1 callbacks suppressed [ 818.831138][T27219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.068727][T27184] lo speed is unknown, defaulting to 1000 [ 819.108751][T27226] FAULT_INJECTION: forcing a failure. [ 819.108751][T27226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.130657][T27226] CPU: 1 UID: 0 PID: 27226 Comm: syz.5.5917 Not tainted syzkaller #0 PREEMPT(full) [ 819.130683][T27226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 819.130695][T27226] Call Trace: [ 819.130703][T27226] [ 819.130710][T27226] dump_stack_lvl+0xe8/0x150 [ 819.130741][T27226] should_fail_ex+0x412/0x560 [ 819.130771][T27226] _copy_to_user+0x31/0xb0 [ 819.130791][T27226] simple_read_from_buffer+0xe1/0x170 [ 819.130820][T27226] proc_fail_nth_read+0x1bb/0x230 [ 819.130846][T27226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.130873][T27226] ? rw_verify_area+0x2a6/0x4d0 [ 819.130897][T27226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.130921][T27226] vfs_read+0x20c/0xa70 [ 819.130951][T27226] ? __pfx___mutex_lock+0x10/0x10 [ 819.130974][T27226] ? __pfx_vfs_read+0x10/0x10 [ 819.131000][T27226] ? __fget_files+0x2a/0x420 [ 819.131025][T27226] ? __fget_files+0x3a0/0x420 [ 819.131048][T27226] ? __fget_files+0x2a/0x420 [ 819.131076][T27226] ksys_read+0x150/0x270 [ 819.131102][T27226] ? __pfx_ksys_read+0x10/0x10 [ 819.131134][T27226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.131154][T27226] do_syscall_64+0x15f/0xf80 [ 819.131174][T27226] ? trace_irq_disable+0x3b/0x140 [ 819.131193][T27226] ? clear_bhb_loop+0x40/0x90 [ 819.131215][T27226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.131234][T27226] RIP: 0033:0x7f7970b5d04e [ 819.131252][T27226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 819.131266][T27226] RSP: 002b:00007f7971a66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 819.131286][T27226] RAX: ffffffffffffffda RBX: 00007f7971a676c0 RCX: 00007f7970b5d04e [ 819.131299][T27226] RDX: 000000000000000f RSI: 00007f7971a670a0 RDI: 0000000000000004 [ 819.131311][T27226] RBP: 00007f7971a67090 R08: 0000000000000000 R09: 0000000000000000 [ 819.131322][T27226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 819.131333][T27226] R13: 00007f7970e16038 R14: 00007f7970e15fa0 R15: 00007fffde720f78 [ 819.131365][T27226] [ 819.347588][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 819.439486][T27230] syzkaller0: entered promiscuous mode [ 819.603939][T27236] sctp: [Deprecated]: syz.1.5922 (pid 27236) Use of int in max_burst socket option deprecated. [ 819.603939][T27236] Use struct sctp_assoc_value instead [ 819.756206][T27241] FAULT_INJECTION: forcing a failure. [ 819.756206][T27241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.780370][T27241] CPU: 1 UID: 0 PID: 27241 Comm: syz.1.5925 Not tainted syzkaller #0 PREEMPT(full) [ 819.780396][T27241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 819.780407][T27241] Call Trace: [ 819.780415][T27241] [ 819.780424][T27241] dump_stack_lvl+0xe8/0x150 [ 819.780456][T27241] should_fail_ex+0x412/0x560 [ 819.780495][T27241] _copy_to_user+0x31/0xb0 [ 819.780521][T27241] simple_read_from_buffer+0xe1/0x170 [ 819.780550][T27241] proc_fail_nth_read+0x1bb/0x230 [ 819.780578][T27241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.780605][T27241] ? rw_verify_area+0x2a6/0x4d0 [ 819.780631][T27241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.780656][T27241] vfs_read+0x20c/0xa70 [ 819.780686][T27241] ? __pfx___mutex_lock+0x10/0x10 [ 819.780710][T27241] ? __pfx_vfs_read+0x10/0x10 [ 819.780736][T27241] ? __fget_files+0x2a/0x420 [ 819.780763][T27241] ? __fget_files+0x3a0/0x420 [ 819.780784][T27241] ? __fget_files+0x2a/0x420 [ 819.780814][T27241] ksys_read+0x150/0x270 [ 819.780841][T27241] ? __pfx_ksys_read+0x10/0x10 [ 819.780873][T27241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.780893][T27241] do_syscall_64+0x15f/0xf80 [ 819.780913][T27241] ? trace_irq_disable+0x3b/0x140 [ 819.780933][T27241] ? clear_bhb_loop+0x40/0x90 [ 819.780954][T27241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.780972][T27241] RIP: 0033:0x7f27ceb5d04e [ 819.780988][T27241] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 819.781003][T27241] RSP: 002b:00007f27cfa77fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 819.781022][T27241] RAX: ffffffffffffffda RBX: 00007f27cfa786c0 RCX: 00007f27ceb5d04e [ 819.781034][T27241] RDX: 000000000000000f RSI: 00007f27cfa780a0 RDI: 0000000000000005 [ 819.781044][T27241] RBP: 00007f27cfa78090 R08: 0000000000000000 R09: 0000000000000000 [ 819.781054][T27241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.781064][T27241] R13: 00007f27cee16038 R14: 00007f27cee15fa0 R15: 00007ffd17490488 [ 819.781094][T27241] [ 819.995709][T21078] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 820.096103][T21071] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 44836 - 0 [ 820.121271][T21071] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 44836 - 0 [ 820.134561][T21071] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 44836 - 0 [ 820.163909][T21071] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 44836 - 0 [ 820.186414][T27242] IPv6: NLM_F_CREATE should be specified when creating new route [ 820.304216][T27250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.480947][T27258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.514028][T27256] syzkaller0: entered promiscuous mode [ 820.520009][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 820.607876][T27260] syzkaller0: entered promiscuous mode [ 820.805923][T27273] digital: digital_start_poll: Unknown protocol [ 820.831851][T27266] 8021q: adding VLAN 0 to HW filter on device bond21 [ 820.871622][T27282] FAULT_INJECTION: forcing a failure. [ 820.871622][T27282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.887526][T27282] CPU: 0 UID: 0 PID: 27282 Comm: syz.0.5939 Not tainted syzkaller #0 PREEMPT(full) [ 820.887554][T27282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 820.887566][T27282] Call Trace: [ 820.887574][T27282] [ 820.887583][T27282] dump_stack_lvl+0xe8/0x150 [ 820.887614][T27282] should_fail_ex+0x412/0x560 [ 820.887716][T27282] _copy_from_user+0x2d/0xb0 [ 820.887736][T27282] __sys_connect+0x156/0x450 [ 820.887762][T27282] ? __pfx___sys_connect+0x10/0x10 [ 820.887796][T27282] ? __pfx_ksys_write+0x10/0x10 [ 820.887825][T27282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.887844][T27282] __x64_sys_connect+0x7a/0x90 [ 820.887867][T27282] do_syscall_64+0x15f/0xf80 [ 820.887886][T27282] ? trace_irq_disable+0x3b/0x140 [ 820.887906][T27282] ? clear_bhb_loop+0x40/0x90 [ 820.887927][T27282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.887943][T27282] RIP: 0033:0x7fa99559c819 [ 820.887961][T27282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.887976][T27282] RSP: 002b:00007fa9963b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 820.887996][T27282] RAX: ffffffffffffffda RBX: 00007fa995815fa0 RCX: 00007fa99559c819 [ 820.888009][T27282] RDX: 000000000000001e RSI: 0000200000000080 RDI: 0000000000000003 [ 820.888020][T27282] RBP: 00007fa9963b0090 R08: 0000000000000000 R09: 0000000000000000 [ 820.888032][T27282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.888043][T27282] R13: 00007fa995816038 R14: 00007fa995815fa0 R15: 00007ffde8f3f248 [ 820.888072][T27282] [ 821.064924][T21071] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 821.124621][T27285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.589703][T21071] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 821.620400][T27301] __nla_validate_parse: 14 callbacks suppressed [ 821.620420][T27301] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5946'. [ 821.722565][T27305] syzkaller0: entered promiscuous mode [ 821.890012][T27312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.036570][T27317] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5954'. [ 822.119183][T21071] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 822.122402][T27323] syzkaller0: entered promiscuous mode [ 822.152958][T27323] syzkaller0: entered allmulticast mode [ 822.433074][T27326] syzkaller0: entered promiscuous mode [ 822.443665][T27335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5960'. [ 822.471334][T27326] syzkaller0: entered allmulticast mode [ 822.615206][T27340] syzkaller0: entered promiscuous mode [ 822.958694][T27352] bond19 (unregistering): Released all slaves [ 823.036749][T27360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5970'. [ 823.225109][T27366] IPv6: NLM_F_CREATE should be specified when creating new route [ 823.491912][T27375] syzkaller0: entered promiscuous mode [ 823.536975][T27380] bond22: option arp_interval: invalid value (18446744073709551615) [ 823.557453][T27380] bond22: option arp_interval: allowed values 0 - 2147483647 [ 823.568079][T27380] bond22 (unregistering): Released all slaves [ 823.626705][T27378] syzkaller0: entered promiscuous mode [ 824.192662][T21081] net_ratelimit: 5 callbacks suppressed [ 824.192680][T21081] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 824.367530][T27413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5993'. [ 824.423399][T27416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5994'. [ 824.570502][T27411] syzkaller0: entered promiscuous mode [ 824.595466][T27411] syzkaller0: entered allmulticast mode [ 824.619122][T27389] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 824.759416][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 824.871153][T27422] syzkaller0: entered promiscuous mode [ 825.309988][T21072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 825.388142][T27439] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5999'. [ 825.834646][T21081] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 826.373124][T21072] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 826.889368][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 827.409401][T21071] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 827.585935][T27445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6001'. [ 827.604227][T27438] batman_adv: batadv0: Interface deactivated: dummy0 [ 827.763782][T27445] ipip0: entered promiscuous mode [ 827.872862][T27455] syzkaller1: tun_chr_ioctl cmd 35108 [ 827.887481][T27455] netlink: 'syz.5.6005': attribute type 4 has an invalid length. [ 828.181598][T27472] syzkaller0: entered promiscuous mode [ 828.183464][T27473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6009'. [ 828.255924][T27475] netlink: 'syz.5.6012': attribute type 1 has an invalid length. [ 828.478844][T27465] lo speed is unknown, defaulting to 1000 [ 828.486819][T27481] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 828.967762][T27500] netlink: 49 bytes leftover after parsing attributes in process `syz.0.6019'. [ 828.999298][T27500] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6019'. [ 829.146484][T27500] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6019'. [ 829.689829][T27516] syzkaller0: entered promiscuous mode [ 832.477944][T27534] syzkaller0: entered promiscuous mode [ 832.483855][T27534] syzkaller0: entered allmulticast mode [ 832.496259][T27531] syzkaller1: entered promiscuous mode [ 832.502152][T27531] syzkaller1: entered allmulticast mode [ 835.459528][T27591] syzkaller0: entered promiscuous mode [ 835.796562][T27580] lo speed is unknown, defaulting to 1000 [ 836.951732][T27610] lo speed is unknown, defaulting to 1000 [ 837.366621][T27654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6064'. [ 837.385546][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6064'. [ 837.428011][T27654] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6064'. [ 837.784019][T27654] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.794547][T27654] bond_slave_0: left allmulticast mode [ 837.802152][T27654] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.811351][T27654] bond_slave_1: left allmulticast mode [ 837.817282][T27654] .` (unregistering): Released all slaves [ 837.840041][T27659] bond19: option resend_igmp: invalid value (2878) [ 837.846604][T27659] bond19: option resend_igmp: allowed values 0 - 255 [ 837.870710][T27659] bond19 (unregistering): Released all slaves [ 837.964024][T27661] bond19: option resend_igmp: invalid value (2878) [ 837.971590][T27661] bond19: option resend_igmp: allowed values 0 - 255 [ 837.982213][T27661] bond19 (unregistering): Released all slaves [ 838.504256][T27674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6070'. [ 838.763823][T27680] syzkaller0: entered promiscuous mode [ 838.860713][T27688] x_tables: duplicate underflow at hook 4 [ 838.898032][T27691] No such timeout policy "syz1" [ 838.994588][T27695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6077'. [ 839.119373][T27695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6077'. [ 839.386420][T27710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6079'. [ 839.517423][T11479] IPVS: starting estimator thread 0... [ 839.619107][T27718] IPVS: using max 33 ests per chain, 79200 per kthread [ 839.669392][T27721] netlink: 'syz.3.6084': attribute type 29 has an invalid length. [ 839.687360][T27721] netlink: 'syz.3.6084': attribute type 29 has an invalid length. [ 839.721531][T27721] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6084'. [ 839.746027][T27721] unsupported nla_type 58 [ 839.788553][T27729] FAULT_INJECTION: forcing a failure. [ 839.788553][T27729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.822562][T27729] CPU: 0 UID: 0 PID: 27729 Comm: syz.5.6087 Not tainted syzkaller #0 PREEMPT(full) [ 839.822590][T27729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 839.822601][T27729] Call Trace: [ 839.822609][T27729] [ 839.822617][T27729] dump_stack_lvl+0xe8/0x150 [ 839.822649][T27729] should_fail_ex+0x412/0x560 [ 839.822680][T27729] _copy_from_user+0x2d/0xb0 [ 839.822701][T27729] __copy_msghdr+0x3c5/0x5b0 [ 839.822736][T27729] ___sys_sendmsg+0x213/0x360 [ 839.822762][T27729] ? __lock_acquire+0x6b5/0x2cf0 [ 839.822790][T27729] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.822847][T27729] ? __fget_files+0x2a/0x420 [ 839.822869][T27729] ? __fget_files+0x3a0/0x420 [ 839.822901][T27729] __x64_sys_sendmsg+0x1bd/0x2a0 [ 839.822931][T27729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.822965][T27729] ? __pfx_ksys_write+0x10/0x10 [ 839.822998][T27729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.823017][T27729] do_syscall_64+0x15f/0xf80 [ 839.823039][T27729] ? trace_irq_disable+0x3b/0x140 [ 839.823059][T27729] ? clear_bhb_loop+0x40/0x90 [ 839.823081][T27729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.823099][T27729] RIP: 0033:0x7f7970b9c819 [ 839.823125][T27729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.823141][T27729] RSP: 002b:00007f7971a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.823163][T27729] RAX: ffffffffffffffda RBX: 00007f7970e15fa0 RCX: 00007f7970b9c819 [ 839.823176][T27729] RDX: 0000000024004800 RSI: 0000200000000040 RDI: 0000000000000003 [ 839.823186][T27729] RBP: 00007f7971a67090 R08: 0000000000000000 R09: 0000000000000000 [ 839.823197][T27729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.823208][T27729] R13: 00007f7970e16038 R14: 00007f7970e15fa0 R15: 00007fffde720f78 [ 839.823238][T27729] [ 840.215151][T27741] netlink: 'syz.5.6090': attribute type 8 has an invalid length. [ 840.223204][T27741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6090'. [ 840.292352][T27741] bond0: entered promiscuous mode [ 840.304438][T27741] bond_slave_0: entered promiscuous mode [ 840.322570][T27741] gretap0: entered promiscuous mode [ 840.340163][T27741] debugfs: 'hsr1' already exists in 'hsr' [ 840.353040][T27741] Cannot create hsr debugfs directory [ 840.370656][T27741] hsr1: entered promiscuous mode [ 840.406632][T27750] 8021q: adding VLAN 0 to HW filter on device bond21 [ 840.517071][T27754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6095'. [ 840.526950][T27750] bond21: (slave ip6gretap4): Enslaving as a backup interface with an up link [ 840.619811][T21071] bond21: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 840.809491][T21078] bond21: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 841.686872][T27803] batman_adv: batadv0: Interface deactivated: dummy0 [ 841.825061][T27810] syzkaller0: entered promiscuous mode [ 844.781472][T27818] pim6reg1: entered promiscuous mode [ 844.786911][T27818] pim6reg1: entered allmulticast mode [ 846.222674][T27867] syzkaller0: entered promiscuous mode [ 846.486506][T27876] syzkaller0: entered promiscuous mode [ 847.377528][T27900] syzkaller0: entered promiscuous mode [ 847.588698][T27910] __nla_validate_parse: 8 callbacks suppressed [ 847.588719][T27910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6153'. [ 847.597424][T27913] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6155'. [ 847.649334][T27910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6153'. [ 847.653100][T27913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6155'. [ 847.666610][T27910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6153'. [ 847.678204][T27914] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6154'. [ 847.738861][T27919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6157'. [ 848.102020][T27932] xt_CT: No such helper "snmp_trap" [ 848.312034][T27945] netlink: 'syz.1.6168': attribute type 4 has an invalid length. [ 848.342146][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6168'. [ 848.751453][T27963] syzkaller0: entered promiscuous mode [ 848.766839][T27963] syzkaller0: entered allmulticast mode [ 848.780237][T27968] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6175'. [ 848.805745][T27970] netlink: 'syz.0.6176': attribute type 13 has an invalid length. [ 848.829510][T27970] netlink: 'syz.0.6176': attribute type 17 has an invalid length. [ 848.884047][T27971] netlink: 'syz.0.6176': attribute type 10 has an invalid length. [ 848.993849][T27970] batman_adv: batadv0: Interface activated: dummy0 [ 849.009692][T27970] batadv0: mtu less than device minimum [ 849.017615][T27970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 849.029503][T27970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 849.041025][T27970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 849.052465][T27970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 849.064019][T27970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 849.075546][T27970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 849.087059][T27970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 849.098718][T27970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 849.110126][T27970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 849.181472][T27987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6182'. [ 849.236603][T27981] netlink: 'syz.1.6181': attribute type 13 has an invalid length. [ 849.998239][T28016] syzkaller0: entered promiscuous mode [ 850.134199][T28039] FAULT_INJECTION: forcing a failure. [ 850.134199][T28039] name failslab, interval 1, probability 0, space 0, times 0 [ 850.166871][T28039] CPU: 1 UID: 0 PID: 28039 Comm: syz.1.6192 Not tainted syzkaller #0 PREEMPT(full) [ 850.166920][T28039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 850.166945][T28039] Call Trace: [ 850.166961][T28039] [ 850.166969][T28039] dump_stack_lvl+0xe8/0x150 [ 850.167001][T28039] should_fail_ex+0x412/0x560 [ 850.167031][T28039] should_failslab+0xa8/0x100 [ 850.167053][T28039] __kmalloc_noprof+0xe8/0x760 [ 850.167080][T28039] ? sk_prot_alloc+0xe7/0x210 [ 850.167119][T28039] sk_prot_alloc+0xe7/0x210 [ 850.167142][T28039] ? sk_alloc+0x27/0x390 [ 850.167168][T28039] sk_alloc+0x3a/0x390 [ 850.167197][T28039] bpf_prog_test_run_skb+0x415/0x2350 [ 850.167223][T28039] ? __fget_files+0x2a/0x420 [ 850.167248][T28039] ? bpf_prog_test_run_skb+0x1d1/0x2350 [ 850.167277][T28039] ? __fget_files+0x2a/0x420 [ 850.167301][T28039] ? __fget_files+0x2a/0x420 [ 850.167322][T28039] ? __fget_files+0x3a0/0x420 [ 850.167341][T28039] ? __fget_files+0x2a/0x420 [ 850.167367][T28039] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 850.167393][T28039] bpf_prog_test_run+0x2c7/0x340 [ 850.167426][T28039] __sys_bpf+0x643/0x950 [ 850.167447][T28039] ? __pfx___sys_bpf+0x10/0x10 [ 850.167482][T28039] ? ksys_write+0x242/0x270 [ 850.167509][T28039] ? __pfx_ksys_write+0x10/0x10 [ 850.167538][T28039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.167559][T28039] __x64_sys_bpf+0x7c/0x90 [ 850.167577][T28039] do_syscall_64+0x15f/0xf80 [ 850.167599][T28039] ? trace_irq_disable+0x3b/0x140 [ 850.167618][T28039] ? clear_bhb_loop+0x40/0x90 [ 850.167641][T28039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.167659][T28039] RIP: 0033:0x7f27ceb9c819 [ 850.167677][T28039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.167693][T28039] RSP: 002b:00007f27cfa78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 850.167714][T28039] RAX: ffffffffffffffda RBX: 00007f27cee15fa0 RCX: 00007f27ceb9c819 [ 850.167727][T28039] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 850.167740][T28039] RBP: 00007f27cfa78090 R08: 0000000000000000 R09: 0000000000000000 [ 850.167752][T28039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.167763][T28039] R13: 00007f27cee16038 R14: 00007f27cee15fa0 R15: 00007ffd17490488 [ 850.167794][T28039] [ 850.628467][T28043] netlink: 'syz.5.6194': attribute type 2 has an invalid length. [ 854.063477][T28065] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 854.504134][T28083] __nla_validate_parse: 6 callbacks suppressed [ 854.504151][T28083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6201'. [ 854.810784][T28096] syzkaller0: entered promiscuous mode [ 855.604937][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6213'. [ 855.621227][T28122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6213'. [ 855.635549][T28122] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6213'. [ 855.910682][T28137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6217'. [ 855.952532][T28142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6218'. [ 855.980666][T28142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6218'. [ 856.006078][T28140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6212'. [ 856.015867][T28142] netlink: 'syz.1.6218': attribute type 11 has an invalid length. [ 856.189510][T28151] syzkaller0: entered promiscuous mode [ 856.195427][T28151] syzkaller0: entered allmulticast mode [ 856.518622][T28155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6224'. [ 856.586155][T28155] No such timeout policy "syz1" [ 856.627160][T28133] lo speed is unknown, defaulting to 1000 [ 857.182629][T28180] syzkaller0: entered promiscuous mode [ 857.303063][T28178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6232'. [ 857.508278][T28189] net_ratelimit: 11 callbacks suppressed [ 857.508299][T28189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.967771][T28193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6236'. [ 860.237512][T28204] syzkaller0: entered promiscuous mode [ 860.266379][T28204] 0: reclassify loop, rule prio 0, protocol 800 [ 860.374530][T28174] lo speed is unknown, defaulting to 1000 [ 860.406651][T28216] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20003 [ 860.968016][T28225] batman_adv: batadv0: Interface deactivated: dummy0 [ 860.996193][T28225] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6246'. [ 861.392607][T28243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6247'. [ 861.448512][T28247] netlink: 'syz.4.6252': attribute type 83 has an invalid length. [ 861.815150][T28246] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6251'. [ 861.958631][T28258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6255'. [ 861.997509][T28258] No such timeout policy "syz1" [ 862.450752][T28250] lo speed is unknown, defaulting to 1000 [ 862.489881][T28271] batadv_slave_1: entered promiscuous mode [ 862.513539][T28270] batadv_slave_1: left promiscuous mode [ 862.561885][T28275] 8021q: adding VLAN 0 to HW filter on device bond18 [ 862.589520][T28277] SET target dimension over the limit! [ 862.701335][T28275] bond18: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 862.732139][T28279] ip6tnl2: entered allmulticast mode [ 862.779205][ T48] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 862.861564][T28290] syzkaller0: entered promiscuous mode [ 862.886143][T28290] 0: reclassify loop, rule prio 0, protocol 800 [ 862.939459][ T48] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 863.526853][T28316] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6274'. [ 863.713147][T28321] batadv_slave_1: entered promiscuous mode [ 863.726589][T28328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6276'. [ 863.740201][T28320] batadv_slave_1: left promiscuous mode [ 863.878754][T28333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6279'. [ 863.899412][T28333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6279'. [ 864.416427][T28353] batadv_slave_1: entered promiscuous mode [ 864.435167][T28352] batadv_slave_1: left promiscuous mode [ 864.573517][T28361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 864.729706][T28364] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 864.795152][T21085] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 864.917500][T28379] syzkaller0: entered promiscuous mode [ 864.975945][ T48] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 865.095720][T28389] syzkaller0: entered promiscuous mode [ 865.125580][T28389] 0: reclassify loop, rule prio 0, protocol 800 [ 865.284747][T28401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6301'. [ 865.328210][T28403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6306'. [ 865.406792][T28407] x_tables: duplicate underflow at hook 4 [ 865.427828][T28400] netlink: 15672 bytes leftover after parsing attributes in process `syz.5.6305'. [ 865.448445][T28400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6305'. [ 865.485191][T28400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6305'. [ 865.576054][T28414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6310'. [ 865.618368][T28414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6310'. [ 865.652403][T28414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6310'. [ 865.652507][T28415] netlink: 'syz.4.6310': attribute type 1 has an invalid length. [ 865.738296][T28415] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6310'. [ 865.789200][T28415] NCSI netlink: No device for ifindex 0 [ 865.890734][T28422] syzkaller0: entered promiscuous mode [ 866.202559][T28430] syzkaller0: entered promiscuous mode [ 866.220107][T28430] syzkaller0: entered allmulticast mode [ 866.345260][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6319'. [ 866.608053][T28444] netlink: 'syz.0.6322': attribute type 1 has an invalid length. [ 866.909956][T28454] bond21: option mode: unable to set because the bond device has slaves [ 866.943687][T28456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.159474][T28458] syzkaller0: entered promiscuous mode [ 867.169216][T28458] syzkaller0: entered allmulticast mode [ 870.208273][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.516435][T28465] syzkaller0: entered promiscuous mode [ 873.196487][T28491] __nla_validate_parse: 2 callbacks suppressed [ 873.196507][T28491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6336'. [ 873.225487][T28491] openvswitch: netlink: Flow actions attr not present in new flow. [ 873.296592][T28498] bond3: option mode: unable to set because the bond device has slaves [ 873.485435][T28507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6340'. [ 873.501736][T28507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6340'. [ 873.511505][T28507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6340'. [ 873.609620][T28507] netlink: 'syz.3.6340': attribute type 20 has an invalid length. [ 873.928335][T28492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6337'. [ 874.074263][T28531] netlink: 'syz.1.6346': attribute type 39 has an invalid length. [ 874.082896][T28528] syzkaller0: entered promiscuous mode [ 874.093134][T28528] syzkaller0: entered allmulticast mode [ 874.356188][T28541] FAULT_INJECTION: forcing a failure. [ 874.356188][T28541] name failslab, interval 1, probability 0, space 0, times 0 [ 874.396307][T28541] CPU: 1 UID: 0 PID: 28541 Comm: syz.0.6348 Not tainted syzkaller #0 PREEMPT(full) [ 874.396332][T28541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 874.396343][T28541] Call Trace: [ 874.396351][T28541] [ 874.396359][T28541] dump_stack_lvl+0xe8/0x150 [ 874.396388][T28541] should_fail_ex+0x412/0x560 [ 874.396415][T28541] should_failslab+0xa8/0x100 [ 874.396434][T28541] __kmalloc_noprof+0xe8/0x760 [ 874.396458][T28541] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 874.396484][T28541] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 874.396512][T28541] genl_family_rcv_msg_doit+0xd9/0x330 [ 874.396539][T28541] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 874.396563][T28541] ? __pfx_genl_get_cmd+0x10/0x10 [ 874.396579][T28541] ? stack_trace_save+0xa9/0x100 [ 874.396596][T28541] ? __pfx_fou_nl_get_doit+0x10/0x10 [ 874.396616][T28541] ? __pfx_fou_nl_get_dumpit+0x10/0x10 [ 874.396637][T28541] ? __lock_acquire+0x6b5/0x2cf0 [ 874.396670][T28541] genl_rcv_msg+0x61c/0x7a0 [ 874.396697][T28541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 874.396715][T28541] ? __pfx_fou_nl_get_doit+0x10/0x10 [ 874.396750][T28541] netlink_rcv_skb+0x232/0x4b0 [ 874.396776][T28541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 874.396797][T28541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 874.396838][T28541] ? down_read+0x270/0x2e0 [ 874.396859][T28541] ? genl_rcv+0xd/0x40 [ 874.396880][T28541] genl_rcv+0x28/0x40 [ 874.396898][T28541] netlink_unicast+0x75c/0x8e0 [ 874.396932][T28541] netlink_sendmsg+0x813/0xb40 [ 874.396965][T28541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.396993][T28541] ? aa_sock_msg_perm+0xf1/0x1b0 [ 874.397018][T28541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 874.397049][T28541] ____sys_sendmsg+0x972/0x9f0 [ 874.397075][T28541] ? __might_fault+0xaf/0x130 [ 874.397106][T28541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 874.397141][T28541] ? import_iovec+0x73/0xa0 [ 874.397164][T28541] ___sys_sendmsg+0x2a5/0x360 [ 874.397188][T28541] ? __lock_acquire+0x6b5/0x2cf0 [ 874.397215][T28541] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.397277][T28541] ? __fget_files+0x2a/0x420 [ 874.397309][T28541] ? __fget_files+0x3a0/0x420 [ 874.397341][T28541] __x64_sys_sendmsg+0x1bd/0x2a0 [ 874.397371][T28541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 874.397405][T28541] ? __pfx_ksys_write+0x10/0x10 [ 874.397438][T28541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.397458][T28541] do_syscall_64+0x15f/0xf80 [ 874.397480][T28541] ? trace_irq_disable+0x3b/0x140 [ 874.397499][T28541] ? clear_bhb_loop+0x40/0x90 [ 874.397521][T28541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.397539][T28541] RIP: 0033:0x7fa99559c819 [ 874.397557][T28541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.397573][T28541] RSP: 002b:00007fa9963b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.397593][T28541] RAX: ffffffffffffffda RBX: 00007fa995815fa0 RCX: 00007fa99559c819 [ 874.397605][T28541] RDX: 0000000000000840 RSI: 0000200000000200 RDI: 0000000000000003 [ 874.397616][T28541] RBP: 00007fa9963b0090 R08: 0000000000000000 R09: 0000000000000000 [ 874.397627][T28541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.397637][T28541] R13: 00007fa995816038 R14: 00007fa995815fa0 R15: 00007ffde8f3f248 [ 874.397660][T28541] [ 874.775412][T28547] FAULT_INJECTION: forcing a failure. [ 874.775412][T28547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.811907][T28547] CPU: 0 UID: 0 PID: 28547 Comm: syz.0.6350 Not tainted syzkaller #0 PREEMPT(full) [ 874.811935][T28547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 874.811946][T28547] Call Trace: [ 874.811954][T28547] [ 874.811963][T28547] dump_stack_lvl+0xe8/0x150 [ 874.811994][T28547] should_fail_ex+0x412/0x560 [ 874.812023][T28547] _copy_from_user+0x2d/0xb0 [ 874.812044][T28547] kstrtouint_from_user+0xd6/0x180 [ 874.812072][T28547] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 874.812132][T28547] proc_fail_nth_write+0x8e/0x210 [ 874.812158][T28547] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 874.812188][T28547] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 874.812215][T28547] vfs_write+0x29a/0xb90 [ 874.812249][T28547] ? __pfx_vfs_write+0x10/0x10 [ 874.812277][T28547] ? __fget_files+0x2a/0x420 [ 874.812304][T28547] ? __fget_files+0x3a0/0x420 [ 874.812325][T28547] ? __fget_files+0x2a/0x420 [ 874.812363][T28547] ksys_write+0x150/0x270 [ 874.812392][T28547] ? __pfx_ksys_write+0x10/0x10 [ 874.812426][T28547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.812446][T28547] do_syscall_64+0x15f/0xf80 [ 874.812467][T28547] ? trace_irq_disable+0x3b/0x140 [ 874.812488][T28547] ? clear_bhb_loop+0x40/0x90 [ 874.812512][T28547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.812531][T28547] RIP: 0033:0x7fa99555d04e [ 874.812549][T28547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 874.812566][T28547] RSP: 002b:00007fa9963affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 874.812586][T28547] RAX: ffffffffffffffda RBX: 00007fa9963b06c0 RCX: 00007fa99555d04e [ 874.812600][T28547] RDX: 0000000000000001 RSI: 00007fa9963b00a0 RDI: 0000000000000005 [ 874.812612][T28547] RBP: 00007fa9963b0090 R08: 0000000000000000 R09: 0000000000000000 [ 874.812624][T28547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 874.812636][T28547] R13: 00007fa995816038 R14: 00007fa995815fa0 R15: 00007ffde8f3f248 [ 874.812668][T28547] [ 877.917192][T28503] lo speed is unknown, defaulting to 1000 [ 877.939323][ T5904] lo speed is unknown, defaulting to 1000 [ 877.962374][ T5904] syz2: Port: 1 Link ACTIVE [ 878.475302][T28580] netlink: 'syz.5.6359': attribute type 39 has an invalid length. [ 878.610269][T28586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6361'. [ 879.523847][T28626] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6372'. [ 879.696446][T28636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6375'. [ 879.753105][T28636] No such timeout policy "syz1" [ 879.911171][T28645] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6378'. [ 879.911171][T28643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6369'. [ 880.196486][T28652] syzkaller0: entered promiscuous mode [ 883.119386][T28633] lo speed is unknown, defaulting to 1000 [ 883.350779][T28674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6385'. [ 883.675041][T28684] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6389'. [ 883.795623][T28649] lo speed is unknown, defaulting to 1000 [ 884.301043][T28709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6398'. [ 884.335658][T28709] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6398'. [ 884.593408][T28721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6399'. [ 884.788216][T28725] syzkaller0: entered promiscuous mode [ 884.798662][T28725] syzkaller0: entered allmulticast mode [ 884.819528][T28725] FAULT_INJECTION: forcing a failure. [ 884.819528][T28725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.847805][T28725] CPU: 0 UID: 0 PID: 28725 Comm: syz.0.6402 Not tainted syzkaller #0 PREEMPT(full) [ 884.847833][T28725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 884.847845][T28725] Call Trace: [ 884.847853][T28725] [ 884.847862][T28725] dump_stack_lvl+0xe8/0x150 [ 884.847894][T28725] should_fail_ex+0x412/0x560 [ 884.847925][T28725] _copy_from_iter+0x1d3/0x1670 [ 884.847955][T28725] ? sock_alloc_send_pskb+0x896/0x990 [ 884.847981][T28725] ? __pfx__copy_from_iter+0x10/0x10 [ 884.848018][T28725] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 884.848040][T28725] skb_copy_datagram_from_iter+0xf5/0x710 [ 884.848067][T28725] ? dev_get_by_index+0x22/0x2e0 [ 884.848087][T28725] ? skb_put+0x11b/0x210 [ 884.848116][T28725] packet_sendmsg+0x37ea/0x50f0 [ 884.848147][T28725] ? lock_release+0x228/0x3c0 [ 884.848205][T28725] ? aa_sk_perm+0x6d5/0x900 [ 884.848226][T28725] ? __pfx_packet_sendmsg+0x10/0x10 [ 884.848255][T28725] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 884.848287][T28725] ? aa_sock_msg_perm+0xf1/0x1b0 [ 884.848311][T28725] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 884.848336][T28725] ? __pfx_packet_sendmsg+0x10/0x10 [ 884.848356][T28725] __sys_sendto+0x672/0x710 [ 884.848381][T28725] ? __pfx___sys_sendto+0x10/0x10 [ 884.848400][T28725] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 884.848430][T28725] ? __fget_files+0x3a0/0x420 [ 884.848461][T28725] ? ksys_write+0x242/0x270 [ 884.848494][T28725] ? __pfx_ksys_write+0x10/0x10 [ 884.848520][T28725] __x64_sys_sendto+0xde/0x100 [ 884.848542][T28725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.848558][T28725] do_syscall_64+0x15f/0xf80 [ 884.848580][T28725] ? clear_bhb_loop+0x40/0x90 [ 884.848606][T28725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.848625][T28725] RIP: 0033:0x7fa99559c819 [ 884.848683][T28725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.848699][T28725] RSP: 002b:00007fa9963b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 884.848720][T28725] RAX: ffffffffffffffda RBX: 00007fa995815fa0 RCX: 00007fa99559c819 [ 884.848732][T28725] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 884.848745][T28725] RBP: 00007fa9963b0090 R08: 0000200000000140 R09: 0000000000000014 [ 884.848756][T28725] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 884.848765][T28725] R13: 00007fa995816038 R14: 00007fa995815fa0 R15: 00007ffde8f3f248 [ 884.848793][T28725] [ 884.906014][T28729] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6403'. [ 885.213987][T28732] FAULT_INJECTION: forcing a failure. [ 885.213987][T28732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.228342][T28732] CPU: 0 UID: 0 PID: 28732 Comm: syz.4.6404 Not tainted syzkaller #0 PREEMPT(full) [ 885.228372][T28732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 885.228384][T28732] Call Trace: [ 885.228392][T28732] [ 885.228400][T28732] dump_stack_lvl+0xe8/0x150 [ 885.228432][T28732] should_fail_ex+0x412/0x560 [ 885.228462][T28732] _copy_from_user+0x2d/0xb0 [ 885.228491][T28732] ___sys_sendmsg+0x1c6/0x360 [ 885.228517][T28732] ? __lock_acquire+0x6b5/0x2cf0 [ 885.228550][T28732] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.228611][T28732] ? __fget_files+0x2a/0x420 [ 885.228633][T28732] ? __fget_files+0x3a0/0x420 [ 885.228665][T28732] __x64_sys_sendmsg+0x1bd/0x2a0 [ 885.228694][T28732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 885.228728][T28732] ? __pfx_ksys_write+0x10/0x10 [ 885.228762][T28732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.228783][T28732] do_syscall_64+0x15f/0xf80 [ 885.228807][T28732] ? clear_bhb_loop+0x40/0x90 [ 885.228830][T28732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.228848][T28732] RIP: 0033:0x7fc12f99c819 [ 885.228866][T28732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.228882][T28732] RSP: 002b:00007fc1307ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.228903][T28732] RAX: ffffffffffffffda RBX: 00007fc12fc15fa0 RCX: 00007fc12f99c819 [ 885.228918][T28732] RDX: 0000000000044002 RSI: 0000200000000140 RDI: 0000000000000003 [ 885.228930][T28732] RBP: 00007fc1307ad090 R08: 0000000000000000 R09: 0000000000000000 [ 885.228943][T28732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.228954][T28732] R13: 00007fc12fc16038 R14: 00007fc12fc15fa0 R15: 00007fff4b4f1c48 [ 885.228984][T28732] [ 885.690955][T28740] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6408'. [ 885.731529][T28742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6406'. [ 885.743926][T28743] No such timeout policy "syz1" [ 886.589528][T28753] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6409'. [ 888.434747][T28755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6410'. [ 888.552243][T28760] IPv6: NLM_F_CREATE should be specified when creating new route [ 888.668622][T28770] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6417'. [ 888.678304][T28761] netlink: 'syz.1.6413': attribute type 1 has an invalid length. [ 888.686436][T28761] __nla_validate_parse: 1 callbacks suppressed [ 888.686453][T28761] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6413'. [ 888.880988][T28780] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6419'. [ 889.039175][T28783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6420'. [ 889.064838][T28783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6420'. [ 889.085742][T28783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6420'. [ 889.107527][T28783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6420'. [ 889.134971][T28783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6420'. [ 889.168101][T28783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6420'. [ 889.188052][T28783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6420'. [ 889.214185][T28783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6420'. [ 889.251829][T28783] 8021q: adding VLAN 0 to HW filter on device .` [ 889.261306][T28783] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.270275][T28783] batman_adv: batadv0: Interface activated: dummy0 [ 889.278307][T28783] batadv0: mtu less than device minimum [ 889.290876][T28783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 889.302852][T28783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 889.314729][T28783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 889.326521][T28783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 889.338198][T28783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 889.349616][T28783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 889.360771][T28783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 889.372272][T28783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 889.383492][T28783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 889.450892][T28776] lo speed is unknown, defaulting to 1000 [ 889.904667][T28804] syzkaller0: entered promiscuous mode [ 889.922760][T28804] syzkaller0: entered allmulticast mode [ 889.943914][T28804] FAULT_INJECTION: forcing a failure. [ 889.943914][T28804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.981478][T28804] CPU: 1 UID: 0 PID: 28804 Comm: syz.5.6426 Not tainted syzkaller #0 PREEMPT(full) [ 889.981509][T28804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 889.981521][T28804] Call Trace: [ 889.981529][T28804] [ 889.981538][T28804] dump_stack_lvl+0xe8/0x150 [ 889.981569][T28804] should_fail_ex+0x412/0x560 [ 889.981600][T28804] _copy_from_iter+0x1d3/0x1670 [ 889.981637][T28804] ? __pfx__copy_from_iter+0x10/0x10 [ 889.981661][T28804] ? sock_alloc_send_pskb+0x896/0x990 [ 889.981687][T28804] ? __pfx__copy_from_iter+0x10/0x10 [ 889.981715][T28804] ? page_copy_sane+0x16a/0x270 [ 889.981741][T28804] copy_page_from_iter+0xdd/0x170 [ 889.981770][T28804] skb_copy_datagram_from_iter+0x306/0x710 [ 889.981801][T28804] packet_sendmsg+0x37ea/0x50f0 [ 889.981832][T28804] ? lock_release+0x228/0x3c0 [ 889.981890][T28804] ? aa_sk_perm+0x6d5/0x900 [ 889.981912][T28804] ? __pfx_packet_sendmsg+0x10/0x10 [ 889.981941][T28804] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 889.981973][T28804] ? aa_sock_msg_perm+0xf1/0x1b0 [ 889.981998][T28804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 889.982023][T28804] ? __pfx_packet_sendmsg+0x10/0x10 [ 889.982046][T28804] __sys_sendto+0x672/0x710 [ 889.982073][T28804] ? __pfx___sys_sendto+0x10/0x10 [ 889.982095][T28804] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 889.982130][T28804] ? __fget_files+0x3a0/0x420 [ 889.982163][T28804] ? ksys_write+0x242/0x270 [ 889.982198][T28804] ? __pfx_ksys_write+0x10/0x10 [ 889.982228][T28804] __x64_sys_sendto+0xde/0x100 [ 889.982253][T28804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.982273][T28804] do_syscall_64+0x15f/0xf80 [ 889.982294][T28804] ? trace_irq_disable+0x3b/0x140 [ 889.982314][T28804] ? clear_bhb_loop+0x40/0x90 [ 889.982337][T28804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.982355][T28804] RIP: 0033:0x7f7970b9c819 [ 889.982373][T28804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.982389][T28804] RSP: 002b:00007f7971a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 889.982410][T28804] RAX: ffffffffffffffda RBX: 00007f7970e15fa0 RCX: 00007f7970b9c819 [ 889.982424][T28804] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 889.982436][T28804] RBP: 00007f7971a67090 R08: 0000200000000140 R09: 0000000000000014 [ 889.982449][T28804] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 889.982460][T28804] R13: 00007f7970e16038 R14: 00007f7970e15fa0 R15: 00007fffde720f78 [ 889.982490][T28804] [ 891.504655][T28829] bond19: option mode: invalid value (254) [ 891.512474][T28829] bond19 (unregistering): Released all slaves [ 891.961301][T28857] syzkaller0: entered promiscuous mode [ 892.045888][T28862] syzkaller0: entered promiscuous mode [ 892.057614][T28862] FAULT_INJECTION: forcing a failure. [ 892.057614][T28862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.083722][T28862] CPU: 0 UID: 0 PID: 28862 Comm: syz.5.6447 Not tainted syzkaller #0 PREEMPT(full) [ 892.083747][T28862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 892.083758][T28862] Call Trace: [ 892.083766][T28862] [ 892.083774][T28862] dump_stack_lvl+0xe8/0x150 [ 892.083803][T28862] should_fail_ex+0x412/0x560 [ 892.083833][T28862] _copy_from_user+0x2d/0xb0 [ 892.083854][T28862] __copy_msghdr+0x3c5/0x5b0 [ 892.083879][T28862] ___sys_sendmsg+0x213/0x360 [ 892.083893][T28862] ? __lock_acquire+0x6b5/0x2cf0 [ 892.083909][T28862] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.083940][T28862] ? __fget_files+0x2a/0x420 [ 892.083953][T28862] ? __fget_files+0x3a0/0x420 [ 892.083970][T28862] __x64_sys_sendmsg+0x1bd/0x2a0 [ 892.083993][T28862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 892.084012][T28862] ? __pfx_ksys_write+0x10/0x10 [ 892.084031][T28862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.084042][T28862] do_syscall_64+0x15f/0xf80 [ 892.084055][T28862] ? trace_irq_disable+0x3b/0x140 [ 892.084066][T28862] ? clear_bhb_loop+0x40/0x90 [ 892.084078][T28862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.084088][T28862] RIP: 0033:0x7f7970b9c819 [ 892.084100][T28862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.084109][T28862] RSP: 002b:00007f7971a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.084121][T28862] RAX: ffffffffffffffda RBX: 00007f7970e15fa0 RCX: 00007f7970b9c819 [ 892.084129][T28862] RDX: 008bb3a301eb080b RSI: 0000200000000280 RDI: 0000000000000006 [ 892.084136][T28862] RBP: 00007f7971a67090 R08: 0000000000000000 R09: 0000000000000000 [ 892.084142][T28862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.084148][T28862] R13: 00007f7970e16038 R14: 00007f7970e15fa0 R15: 00007fffde720f78 [ 892.084164][T28862] [ 892.464559][T28874] syzkaller0: entered promiscuous mode [ 892.479823][T28874] syzkaller0: entered allmulticast mode [ 892.908277][T28892] tun0: tun_chr_ioctl cmd 1074025675 [ 892.922451][T28892] tun0: persist enabled [ 892.958155][T28892] tun0: tun_chr_ioctl cmd 1074025675 [ 892.970685][T28892] tun0: persist disabled [ 893.121413][T28866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 893.419735][T28899] netlink: 'syz.3.6458': attribute type 10 has an invalid length. [ 893.461956][T28899] batman_adv: batadv0: Interface deactivated: dummy0 [ 893.470445][T28902] netlink: 'syz.3.6458': attribute type 10 has an invalid length. [ 893.517525][T28899] batman_adv: batadv0: Removing interface: dummy0 [ 893.574933][T28899] team0: Port device dummy0 added [ 893.603797][T28902] team0: Port device dummy0 removed [ 893.616841][T28902] dummy0: entered promiscuous mode [ 893.627608][T28902] .`: (slave dummy0): Enslaving as an active interface with an up link [ 894.026271][T28930] netem: change failed [ 894.397089][T28945] netlink: 'syz.1.6474': attribute type 1 has an invalid length. [ 894.446356][T28945] bond15: (slave bridge8): making interface the new active one [ 894.455277][T28945] bond15: (slave bridge8): Enslaving as an active interface with an up link [ 894.476883][T28946] bond15: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 895.193571][T28963] __nla_validate_parse: 17 callbacks suppressed [ 895.193590][T28963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6478'. [ 895.225093][T28963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6478'. [ 895.387013][T28970] bridge_slave_0: left allmulticast mode [ 895.400187][T28970] bridge_slave_0: left promiscuous mode [ 895.409248][T28970] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.422691][T28970] bridge_slave_1: left allmulticast mode [ 895.428486][T28970] bridge_slave_1: left promiscuous mode [ 895.443421][T28970] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.469646][T28970] .`: (slave bond_slave_0): Releasing backup interface [ 895.482738][T28970] .`: (slave bond_slave_1): Releasing backup interface [ 895.494494][T28970] team0: Port device team_slave_0 removed [ 895.513922][T28970] team0: Port device team_slave_1 removed [ 895.538343][T28970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.563963][T28970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.602315][T28970] net_ratelimit: 374 callbacks suppressed [ 895.602336][T28970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 895.961088][T28990] syzkaller0: entered promiscuous mode [ 895.973352][T28990] syzkaller0: entered allmulticast mode [ 896.162393][T28999] bond19: option resend_igmp: invalid value (2878) [ 896.169397][T28999] bond19: option resend_igmp: allowed values 0 - 255 [ 896.202888][T28999] bond19 (unregistering): Released all slaves [ 896.372536][T29004] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6491'. [ 898.364401][T28973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 898.513927][T29050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6506'. [ 898.538935][T29053] x_tables: duplicate underflow at hook 4 [ 898.744670][T29067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6511'. [ 898.829884][T29065] batadv0: left promiscuous mode [ 898.851477][T29065] batadv0: left allmulticast mode [ 898.870961][T29065] bond14: left promiscuous mode [ 898.876213][T29065] bond14: left allmulticast mode [ 898.881454][T29068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6513'. [ 898.891580][T29065] erspan1: left allmulticast mode [ 898.896862][T29065] vlan2: left allmulticast mode [ 898.902099][T29065] bond0: left allmulticast mode [ 898.907345][T29065] geneve3: left promiscuous mode [ 898.913758][T29065] ip6gre1: left promiscuous mode [ 898.918830][T29065] ip6gre1: left allmulticast mode [ 898.924401][T29065] geneve4: left promiscuous mode [ 898.956019][T29072] ip6tnl3: entered allmulticast mode [ 899.479672][T29100] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 899.610615][T29103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6523'. [ 899.644417][T29103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6523'. [ 899.670995][T29103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6523'. [ 899.708615][T29108] FAULT_INJECTION: forcing a failure. [ 899.708615][T29108] name failslab, interval 1, probability 0, space 0, times 0 [ 899.761594][T29108] CPU: 1 UID: 0 PID: 29108 Comm: syz.0.6526 Not tainted syzkaller #0 PREEMPT(full) [ 899.761622][T29108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 899.761634][T29108] Call Trace: [ 899.761648][T29108] [ 899.761657][T29108] dump_stack_lvl+0xe8/0x150 [ 899.761689][T29108] should_fail_ex+0x412/0x560 [ 899.761720][T29108] should_failslab+0xa8/0x100 [ 899.761740][T29108] ? security_inode_alloc+0x39/0x310 [ 899.761766][T29108] kmem_cache_alloc_noprof+0x87/0x650 [ 899.761800][T29108] security_inode_alloc+0x39/0x310 [ 899.761827][T29108] inode_init_always_gfp+0x9c8/0xda0 [ 899.761856][T29108] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 899.761877][T29108] alloc_inode+0x82/0x1b0 [ 899.761900][T29108] new_inode+0x22/0x170 [ 899.761926][T29108] __debugfs_create_file+0xb8/0x400 [ 899.761951][T29108] debugfs_create_file_full+0x3f/0x60 [ 899.761974][T29108] ref_tracker_dir_debugfs+0x197/0x360 [ 899.762002][T29108] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 899.762056][T29108] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 899.762075][T29108] ? alloc_netdev_mqs+0xa6/0x11b0 [ 899.762098][T29108] ? __raw_spin_lock_init+0x45/0x100 [ 899.762122][T29108] alloc_netdev_mqs+0x272/0x11b0 [ 899.762141][T29108] ? __pfx_macsec_setup+0x10/0x10 [ 899.762173][T29108] rtnl_create_link+0x31f/0xd70 [ 899.762201][T29108] rtnl_newlink_create+0x277/0xb70 [ 899.762227][T29108] ? __pfx___nla_validate_parse+0x10/0x10 [ 899.762256][T29108] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 899.762286][T29108] ? __pfx___mutex_lock+0x10/0x10 [ 899.762320][T29108] ? ns_capable+0x89/0xe0 [ 899.762347][T29108] rtnl_newlink+0x166a/0x1bb0 [ 899.762385][T29108] ? __pfx_rtnl_newlink+0x10/0x10 [ 899.762412][T29108] ? __lock_acquire+0x6b5/0x2cf0 [ 899.762437][T29108] ? __lock_acquire+0x6b5/0x2cf0 [ 899.762468][T29108] ? unwind_next_frame+0xa6/0x2550 [ 899.762492][T29108] ? unwind_next_frame+0xa6/0x2550 [ 899.762513][T29108] ? is_bpf_text_address+0x26/0x2b0 [ 899.762546][T29108] ? is_bpf_text_address+0x26/0x2b0 [ 899.762574][T29108] ? __lock_acquire+0x6b5/0x2cf0 [ 899.762600][T29108] ? kernel_text_address+0xa5/0xe0 [ 899.762621][T29108] ? __kernel_text_address+0xd/0x30 [ 899.762647][T29108] ? unwind_get_return_address+0x4d/0x90 [ 899.762665][T29108] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 899.762685][T29108] ? arch_stack_walk+0xfb/0x150 [ 899.762714][T29108] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 899.762754][T29108] ? __pfx_rtnl_newlink+0x10/0x10 [ 899.762777][T29108] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 899.762799][T29108] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 899.762828][T29108] ? netlink_sendmsg+0x5d4/0xb40 [ 899.762855][T29108] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 899.762877][T29108] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 899.762901][T29108] ? __lock_acquire+0x6b5/0x2cf0 [ 899.762934][T29108] netlink_rcv_skb+0x232/0x4b0 [ 899.762961][T29108] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 899.762986][T29108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 899.763025][T29108] ? netlink_deliver_tap+0x2e/0x1b0 [ 899.763049][T29108] ? netlink_deliver_tap+0x2e/0x1b0 [ 899.763080][T29108] netlink_unicast+0x75c/0x8e0 [ 899.763116][T29108] netlink_sendmsg+0x813/0xb40 [ 899.763152][T29108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.763181][T29108] ? aa_sock_msg_perm+0xf1/0x1b0 [ 899.763207][T29108] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 899.763238][T29108] ____sys_sendmsg+0x972/0x9f0 [ 899.763265][T29108] ? __might_fault+0xaf/0x130 [ 899.763296][T29108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 899.763333][T29108] ? import_iovec+0x73/0xa0 [ 899.763356][T29108] ___sys_sendmsg+0x2a5/0x360 [ 899.763381][T29108] ? __lock_acquire+0x6b5/0x2cf0 [ 899.763408][T29108] ? __pfx____sys_sendmsg+0x10/0x10 [ 899.763472][T29108] ? __fget_files+0x2a/0x420 [ 899.763494][T29108] ? __fget_files+0x3a0/0x420 [ 899.763526][T29108] __x64_sys_sendmsg+0x1bd/0x2a0 [ 899.763556][T29108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 899.763594][T29108] ? __pfx_ksys_write+0x10/0x10 [ 899.763628][T29108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.763655][T29108] do_syscall_64+0x15f/0xf80 [ 899.763676][T29108] ? trace_irq_disable+0x3b/0x140 [ 899.763696][T29108] ? clear_bhb_loop+0x40/0x90 [ 899.763718][T29108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.763737][T29108] RIP: 0033:0x7fa99559c819 [ 899.763754][T29108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.763769][T29108] RSP: 002b:00007fa9963b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.763791][T29108] RAX: ffffffffffffffda RBX: 00007fa995815fa0 RCX: 00007fa99559c819 [ 899.763805][T29108] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 899.763817][T29108] RBP: 00007fa9963b0090 R08: 0000000000000000 R09: 0000000000000000 [ 899.763829][T29108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.763841][T29108] R13: 00007fa995816038 R14: 00007fa995815fa0 R15: 00007ffde8f3f248 [ 899.763873][T29108] [ 899.819177][T29108] debugfs: out of free dentries, can not create file 'netdev@ffff88802ac02620' [ 900.337174][T29118] syzkaller0: entered promiscuous mode [ 900.458110][T29121] 8021q: adding VLAN 0 to HW filter on device bond17 [ 900.470348][T29126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6530'. [ 900.543046][T29127] bond17: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 900.572470][T21073] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 900.758818][T29133] tipc: Enabled bearer , priority 0 [ 900.773024][ T6066] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 900.787900][T29133] syzkaller0: entered promiscuous mode [ 900.810766][T29133] syzkaller0: entered allmulticast mode [ 901.017675][T29142] tipc: Resetting bearer [ 901.080346][T29113] lo speed is unknown, defaulting to 1000 [ 901.088012][T29131] tipc: Resetting bearer [ 901.174314][T29131] tipc: Disabling bearer [ 901.235276][T29153] x_tables: duplicate underflow at hook 4 [ 901.526402][T29165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6545'. [ 902.053715][T29181] netlink: 'syz.0.6548': attribute type 12 has an invalid length. [ 902.421456][T29185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6549'. [ 902.491308][T29189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6550'. [ 902.664673][T29191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6553'. [ 903.104640][T29209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6557'. [ 903.244724][T29213] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 903.861224][T29242] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6567'. [ 904.137652][T29250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6570'. [ 904.161769][T29250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6570'. [ 904.513216][T29228] lo speed is unknown, defaulting to 1000 [ 904.912268][T29284] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6582'. [ 905.523929][T29238] lo speed is unknown, defaulting to 1000 [ 905.618218][T29274] lo speed is unknown, defaulting to 1000 [ 905.956808][T29316] syzkaller0: entered promiscuous mode [ 906.206616][T29318] __nla_validate_parse: 4 callbacks suppressed [ 906.206636][T29318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6593'. [ 906.237499][T29322] veth0_to_batadv: entered promiscuous mode [ 906.246822][T29322] veth0_to_batadv: entered allmulticast mode [ 906.256837][T29318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6593'. [ 906.743315][T29335] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6598'. [ 907.063942][T29346] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6601'. [ 907.375776][T29353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.448786][T29353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6604'. [ 907.516405][T29358] syzkaller0: entered promiscuous mode [ 907.767750][T29369] syzkaller0: entered promiscuous mode [ 907.782696][T29369] syzkaller0: entered allmulticast mode [ 907.797765][T29369] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6609'. [ 907.810274][T29370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6610'. [ 908.213862][T29377] syzkaller0: entered promiscuous mode [ 908.229260][T29377] syzkaller0: entered allmulticast mode [ 908.237974][T29374] syzkaller0: entered promiscuous mode [ 908.448608][T29366] lo speed is unknown, defaulting to 1000 [ 908.807590][T29400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'. [ 908.944692][T29404] FAULT_INJECTION: forcing a failure. [ 908.944692][T29404] name failslab, interval 1, probability 0, space 0, times 0 [ 908.959229][T29404] CPU: 0 UID: 0 PID: 29404 Comm: syz.5.6621 Not tainted syzkaller #0 PREEMPT(full) [ 908.959256][T29404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 908.959267][T29404] Call Trace: [ 908.959276][T29404] [ 908.959284][T29404] dump_stack_lvl+0xe8/0x150 [ 908.959316][T29404] should_fail_ex+0x412/0x560 [ 908.959345][T29404] should_failslab+0xa8/0x100 [ 908.959365][T29404] __kmalloc_cache_noprof+0x88/0x660 [ 908.959390][T29404] ? __asan_memset+0x22/0x50 [ 908.959413][T29404] ? alloc_netdev_mqs+0xb97/0x11b0 [ 908.959433][T29404] ? __xdp_rxq_info_reg+0x171/0x280 [ 908.959463][T29404] alloc_netdev_mqs+0xb97/0x11b0 [ 908.959488][T29404] rtnl_create_link+0x31f/0xd70 [ 908.959515][T29404] rtnl_newlink_create+0x277/0xb70 [ 908.959541][T29404] ? __pfx___nla_validate_parse+0x10/0x10 [ 908.959566][T29404] ? __mutex_lock+0x606/0x1550 [ 908.959591][T29404] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 908.959620][T29404] ? __pfx___mutex_lock+0x10/0x10 [ 908.959653][T29404] ? ns_capable+0x89/0xe0 [ 908.959681][T29404] rtnl_newlink+0x166a/0x1bb0 [ 908.959718][T29404] ? __pfx_rtnl_newlink+0x10/0x10 [ 908.959747][T29404] ? __lock_acquire+0x6b5/0x2cf0 [ 908.959774][T29404] ? __lock_acquire+0x6b5/0x2cf0 [ 908.959807][T29404] ? unwind_next_frame+0xa6/0x2550 [ 908.959832][T29404] ? unwind_next_frame+0xa6/0x2550 [ 908.959853][T29404] ? is_bpf_text_address+0x26/0x2b0 [ 908.959885][T29404] ? is_bpf_text_address+0x26/0x2b0 [ 908.959911][T29404] ? __lock_acquire+0x6b5/0x2cf0 [ 908.959938][T29404] ? kernel_text_address+0xa5/0xe0 [ 908.959967][T29404] ? __kernel_text_address+0xd/0x30 [ 908.959988][T29404] ? unwind_get_return_address+0x4d/0x90 [ 908.960006][T29404] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 908.960027][T29404] ? arch_stack_walk+0xfb/0x150 [ 908.960057][T29404] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 908.960096][T29404] ? __pfx_rtnl_newlink+0x10/0x10 [ 908.960119][T29404] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 908.960140][T29404] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 908.960164][T29404] ? netlink_sendmsg+0x5d4/0xb40 [ 908.960191][T29404] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 908.960214][T29404] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 908.960239][T29404] ? __lock_acquire+0x6b5/0x2cf0 [ 908.960275][T29404] netlink_rcv_skb+0x232/0x4b0 [ 908.960301][T29404] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 908.960327][T29404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 908.960365][T29404] ? netlink_deliver_tap+0x2e/0x1b0 [ 908.960389][T29404] ? netlink_deliver_tap+0x2e/0x1b0 [ 908.960419][T29404] netlink_unicast+0x75c/0x8e0 [ 908.960454][T29404] netlink_sendmsg+0x813/0xb40 [ 908.960491][T29404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.960519][T29404] ? aa_sock_msg_perm+0xf1/0x1b0 [ 908.960562][T29404] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 908.960591][T29404] ____sys_sendmsg+0x972/0x9f0 [ 908.960618][T29404] ? __might_fault+0xaf/0x130 [ 908.960648][T29404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.960698][T29404] ? import_iovec+0x73/0xa0 [ 908.960721][T29404] ___sys_sendmsg+0x2a5/0x360 [ 908.960746][T29404] ? __lock_acquire+0x6b5/0x2cf0 [ 908.960770][T29404] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.960842][T29404] ? __fget_files+0x2a/0x420 [ 908.960863][T29404] ? __fget_files+0x3a0/0x420 [ 908.960897][T29404] __x64_sys_sendmsg+0x1bd/0x2a0 [ 908.960926][T29404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 908.960967][T29404] ? rcu_is_watching+0x15/0xb0 [ 908.961003][T29404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.961023][T29404] do_syscall_64+0x15f/0xf80 [ 908.961045][T29404] ? trace_irq_disable+0x3b/0x140 [ 908.961064][T29404] ? clear_bhb_loop+0x40/0x90 [ 908.961087][T29404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.961106][T29404] RIP: 0033:0x7f7970b9c819 [ 908.961124][T29404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.961140][T29404] RSP: 002b:00007f7971a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.961161][T29404] RAX: ffffffffffffffda RBX: 00007f7970e15fa0 RCX: 00007f7970b9c819 [ 908.961175][T29404] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 908.961186][T29404] RBP: 00007f7971a67090 R08: 0000000000000000 R09: 0000000000000000 [ 908.961198][T29404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 908.961209][T29404] R13: 00007f7970e16038 R14: 00007f7970e15fa0 R15: 00007fffde720f78 [ 908.961241][T29404] [ 909.776994][T29406] syzkaller0: entered promiscuous mode [ 909.990124][T29428] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6625'. [ 910.308538][T29439] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6629'. [ 912.883284][T29441] syzkaller0: entered promiscuous mode [ 912.907572][T29441] syzkaller0: entered allmulticast mode [ 913.901443][T29483] bridge0: port 1(vlan3) entered blocking state [ 913.932827][T29483] bridge0: port 1(vlan3) entered disabled state [ 913.953075][T29483] vlan3: entered allmulticast mode [ 913.965961][T29483] dummy0: entered allmulticast mode [ 913.982954][T29483] vlan3: entered promiscuous mode [ 913.991548][T29483] dummy0: entered promiscuous mode [ 914.877429][T29480] lo speed is unknown, defaulting to 1000 [ 915.190516][T29514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6649'. [ 915.263063][T29512] bridge0: entered promiscuous mode [ 915.308246][T29512] 8021q: adding VLAN 0 to HW filter on device .` [ 915.356346][T29512] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.398570][T29512] bridge0: port 1(vlan3) entered blocking state [ 915.406768][T29512] bridge0: port 1(vlan3) entered forwarding state [ 915.431581][T29519] netlink: 'syz.5.6651': attribute type 1 has an invalid length. [ 915.440105][T29512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 915.514400][T29520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 915.551599][T29505] lo speed is unknown, defaulting to 1000 [ 915.603334][T11479] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 915.771732][T29524] netlink: 'syz.3.6652': attribute type 3 has an invalid length. [ 915.939265][T11479] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.176166][T29535] netlink: 'syz.4.6655': attribute type 11 has an invalid length. [ 916.623776][ T48] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.846647][T29547] batadv_slave_1: entered promiscuous mode [ 916.873821][T29546] batadv_slave_1: left promiscuous mode [ 916.937812][T29554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6663'. [ 916.971630][T29555] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.6662'. [ 917.156021][T29563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6667'. [ 917.233589][T29568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6671'. [ 917.338755][T29575] openvswitch: netlink: IPv4 tunnel dst address is zero [ 917.399193][T29575] netlink: 'syz.0.6673': attribute type 89 has an invalid length. [ 917.424818][T29575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6673'. [ 917.612121][T29587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6677'. [ 917.636391][T21073] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 917.653762][T29590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6679'. [ 917.665954][T21073] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 917.949805][T11479] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 919.042095][T29646] x_tables: duplicate underflow at hook 4 [ 919.094525][T29649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6700'. [ 919.106917][T29649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6700'. [ 919.687519][T29669] netlink: 'syz.5.6707': attribute type 1 has an invalid length. [ 919.847239][T29669] bond4: entered promiscuous mode [ 919.866718][T29669] 8021q: adding VLAN 0 to HW filter on device bond4 [ 919.942951][T29672] bond4: (slave bridge4): making interface the new active one [ 919.966710][T29672] bridge4: entered promiscuous mode [ 919.973804][T29672] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 919.984205][T29680] netlink: 'syz.4.6708': attribute type 29 has an invalid length. [ 920.023890][T29682] netlink: 'syz.4.6708': attribute type 29 has an invalid length. [ 920.243602][T29694] __nla_validate_parse: 5 callbacks suppressed [ 920.243624][T29694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6716'. [ 920.283578][T29692] syzkaller0: entered promiscuous mode [ 920.311693][T29692] 0: reclassify loop, rule prio 0, protocol 800 [ 920.483167][T29698] syzkaller0: entered promiscuous mode [ 920.614201][T29709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6720'. [ 920.640663][T29710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.312741][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 923.471043][T29718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6723'. [ 923.657933][T29732] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6726'. [ 923.787785][T29739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6729'. [ 923.867037][T29742] netlink: 'syz.5.6731': attribute type 29 has an invalid length. [ 924.003818][T29748] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6732'. [ 924.277943][T29746] bridge0: port 1(vlan3) entered disabled state [ 924.360272][T29716] lo speed is unknown, defaulting to 1000 [ 924.668590][T29774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6742'. [ 925.436130][T29803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6752'. [ 925.450262][T29803] bond0: Unable to set up delay as MII monitoring is disabled [ 925.814168][T29811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6755'. [ 925.912358][T29815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6756'. [ 925.989835][T29817] netlink: 'syz.5.6758': attribute type 1 has an invalid length. [ 926.179955][T29825] netlink: 'syz.5.6761': attribute type 4 has an invalid length. [ 926.274149][T29827] syzkaller0: entered promiscuous mode [ 926.286500][T29827] syzkaller0: entered allmulticast mode [ 926.596000][T29839] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6767'. [ 926.612300][T29841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6769'. [ 926.639497][T29841] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 926.887608][T29861] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6775'. [ 926.933555][T29849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6772'. [ 926.960449][T29867] bond21: option mode: unable to set because the bond device has slaves [ 927.255297][T29876] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6779'. [ 927.540055][T29883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6783'. [ 927.642566][T29887] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6785'. [ 927.934157][T29904] pimreg0: tun_chr_ioctl cmd 1074025681 [ 927.960782][T29904] IPVS: Error connecting to the multicast addr [ 928.000911][T29902] syzkaller0: entered promiscuous mode [ 928.006646][T29902] syzkaller0: entered allmulticast mode [ 928.622991][T29937] netlink: 'syz.5.6805': attribute type 21 has an invalid length. [ 928.725503][T29937] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 928.764573][T29937] bond5 (unregistering): Released all slaves [ 928.855292][T29960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.853004][T29994] syzkaller0: entered promiscuous mode [ 930.112357][T29971] lo speed is unknown, defaulting to 1000 [ 930.125347][T30004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.170968][T30004] netlink: 'syz.1.6829': attribute type 10 has an invalid length. [ 930.262378][T30004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.797411][T30031] xt_CT: No such helper "snmp_trap" [ 930.951475][T30034] __nla_validate_parse: 10 callbacks suppressed [ 930.951497][T30034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6839'. [ 931.028076][T30034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6839'. [ 931.143898][T30043] syzkaller0: entered promiscuous mode [ 931.174922][T30043] 0: reclassify loop, rule prio 0, protocol 800 [ 931.184257][T30045] netlink: 'syz.5.6844': attribute type 4 has an invalid length. [ 931.196453][T30045] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6844'. [ 931.285165][T30048] syzkaller0: entered promiscuous mode [ 931.531358][T30056] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 931.557449][T30054] syzkaller0: entered promiscuous mode [ 931.565948][T30054] syzkaller0: entered allmulticast mode [ 931.604164][T30054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6848'. [ 931.639199][T30054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6848'. [ 931.982154][T30078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6855'. [ 932.084750][T30078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6855'. [ 932.194624][T30081] xt_CT: No such helper "snmp_trap" [ 932.377490][T30088] bond18: option arp_all_targets: invalid value (63) [ 932.727732][T30088] bond18 (unregistering): Released all slaves [ 932.924676][T30106] syzkaller0: entered promiscuous mode [ 935.642394][T30114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6863'. [ 935.651870][T30114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6863'. [ 935.661349][T30114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6863'. [ 936.002168][T30128] __nla_validate_parse: 2 callbacks suppressed [ 936.002190][T30128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6869'. [ 936.022727][T30126] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6868'. [ 936.111573][T30100] lo speed is unknown, defaulting to 1000 [ 936.215488][T30132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6871'. [ 936.698862][T30152] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 937.403824][T30172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6882'. [ 937.476956][T30172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6882'. [ 937.486967][T30171] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6881'. [ 937.585293][T30170] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6883'. [ 937.626565][T30175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6885'. [ 937.641399][T30175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6885'. [ 937.780697][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6886'. [ 938.203206][T30200] batadv_slave_1: entered promiscuous mode [ 938.266506][T30198] batadv_slave_1: left promiscuous mode [ 938.549403][T30220] x_tables: duplicate underflow at hook 4 [ 938.766641][T30237] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 938.934467][T30240] batadv_slave_1: entered promiscuous mode [ 938.953336][T30244] syzkaller0: entered promiscuous mode [ 938.967163][T30244] syzkaller0: entered allmulticast mode [ 938.992738][T30239] batadv_slave_1: left promiscuous mode [ 939.308076][T30230] lo speed is unknown, defaulting to 1000 [ 939.722857][T30258] xt_CT: No such helper "snmp_trap" [ 939.782430][T30263] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 939.867972][T30266] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 939.901780][T30269] x_tables: duplicate underflow at hook 4 [ 940.113588][T30277] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 940.708905][T30297] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 940.864129][T30301] x_tables: duplicate underflow at hook 4 [ 941.101273][T30311] __nla_validate_parse: 13 callbacks suppressed [ 941.101295][T30311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6936'. [ 941.120611][T30315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6938'. [ 941.217397][T30319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6940'. [ 941.235125][T30319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6940'. [ 941.251454][T30319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6940'. [ 941.258153][T30311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6936'. [ 941.277412][T30319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6940'. [ 941.399191][T30295] lo speed is unknown, defaulting to 1000 [ 941.922236][T30358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6954'. [ 941.937676][T30359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6951'. [ 941.973223][T30341] batadv_slave_1: entered promiscuous mode [ 941.991234][T30358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6954'. [ 942.001241][T30340] batadv_slave_1: left promiscuous mode [ 943.012070][T30404] netlink: 'syz.5.6972': attribute type 39 has an invalid length. [ 943.876025][T30433] batman_adv: batadv0: Interface activated: dummy0 [ 943.904545][T30433] batadv0: mtu less than device minimum [ 943.931578][T30433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 943.943391][T30433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 943.954927][T30433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 943.966385][T30433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 943.977899][T30433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 943.989656][T30433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 944.001595][T30433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 944.336229][T30453] x_tables: duplicate underflow at hook 4 [ 944.528728][T30464] Cannot find del_set index 0 as target [ 944.686844][T30468] macsec0: entered promiscuous mode [ 944.703274][T30468] erspan0: entered promiscuous mode [ 944.727468][T30468] erspan0: left promiscuous mode [ 944.744276][T30478] netlink: 'syz.3.6994': attribute type 39 has an invalid length. [ 946.787324][T30545] batadv_slave_1: entered promiscuous mode [ 946.810280][T30544] batadv_slave_1: left promiscuous mode [ 947.386826][T30565] __nla_validate_parse: 11 callbacks suppressed [ 947.386845][T30565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7020'. [ 947.420849][T30565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7020'. [ 947.655757][T30571] net_ratelimit: 13 callbacks suppressed [ 947.655776][T30571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.681455][T30569] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7022'. [ 947.832017][T30576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7024'. [ 947.857470][T30576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7024'. [ 947.896234][T30576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7024'. [ 947.930960][T30576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7024'. [ 947.954862][T30578] batadv_slave_1: entered promiscuous mode [ 947.975854][T30577] batadv_slave_1: left promiscuous mode [ 948.122385][T30580] xt_CT: No such helper "snmp_trap" [ 948.284436][T30596] FAULT_INJECTION: forcing a failure. [ 948.284436][T30596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.300229][T30594] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 948.331115][T30596] CPU: 1 UID: 0 PID: 30596 Comm: syz.3.7033 Not tainted syzkaller #0 PREEMPT(full) [ 948.331142][T30596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 948.331155][T30596] Call Trace: [ 948.331162][T30596] [ 948.331170][T30596] dump_stack_lvl+0xe8/0x150 [ 948.331202][T30596] should_fail_ex+0x412/0x560 [ 948.331233][T30596] _copy_from_iter+0x1d3/0x1670 [ 948.331262][T30596] ? rcu_is_watching+0x15/0xb0 [ 948.331293][T30596] ? __pfx__copy_from_iter+0x10/0x10 [ 948.331315][T30596] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 948.331347][T30596] ? netlink_sendmsg+0x650/0xb40 [ 948.331370][T30596] ? skb_put+0x11b/0x210 [ 948.331394][T30596] netlink_sendmsg+0x6c0/0xb40 [ 948.331427][T30596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.331454][T30596] ? aa_sock_msg_perm+0xf1/0x1b0 [ 948.331478][T30596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 948.331509][T30596] ____sys_sendmsg+0x972/0x9f0 [ 948.331533][T30596] ? __might_fault+0xaf/0x130 [ 948.331562][T30596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.331596][T30596] ? import_iovec+0x73/0xa0 [ 948.331618][T30596] ___sys_sendmsg+0x2a5/0x360 [ 948.331640][T30596] ? __lock_acquire+0x6b5/0x2cf0 [ 948.331665][T30596] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.331720][T30596] ? __fget_files+0x2a/0x420 [ 948.331741][T30596] ? __fget_files+0x3a0/0x420 [ 948.331772][T30596] __x64_sys_sendmsg+0x1bd/0x2a0 [ 948.331799][T30596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 948.331832][T30596] ? __pfx_ksys_write+0x10/0x10 [ 948.331865][T30596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.331882][T30596] do_syscall_64+0x15f/0xf80 [ 948.331902][T30596] ? trace_irq_disable+0x3b/0x140 [ 948.331921][T30596] ? clear_bhb_loop+0x40/0x90 [ 948.331942][T30596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.331960][T30596] RIP: 0033:0x7fe7ccb9c819 [ 948.331986][T30596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.332001][T30596] RSP: 002b:00007fe7cd9b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.332023][T30596] RAX: ffffffffffffffda RBX: 00007fe7cce15fa0 RCX: 00007fe7ccb9c819 [ 948.332036][T30596] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 948.332048][T30596] RBP: 00007fe7cd9b2090 R08: 0000000000000000 R09: 0000000000000000 [ 948.332059][T30596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.332069][T30596] R13: 00007fe7cce16038 R14: 00007fe7cce15fa0 R15: 00007ffd9283f088 [ 948.332095][T30596] [ 948.343074][T30602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7035'. [ 948.600408][T30608] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7036'. [ 948.614561][T30602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7035'. [ 948.632804][T30602] bridge0: left promiscuous mode [ 948.639666][T30602] vlan3: left promiscuous mode [ 948.644993][T30602] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:609 [ 948.654561][T30602] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 30602, name: syz.4.7035 [ 948.663720][T30602] preempt_count: 201, expected: 0 [ 948.668907][T30602] RCU nest depth: 0, expected: 0 [ 948.673974][T30602] 3 locks held by syz.4.7035/30602: [ 948.679205][T30602] #0: ffffffff90340150 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 948.688813][T30602] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 948.698068][T30602] #2: ffff888030a54370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_set_rx_mode+0x65/0x2d0 [ 948.708776][T30602] Preemption disabled at: [ 948.708786][T30602] [] dev_set_rx_mode+0x54/0x2d0 [ 948.719623][T30602] CPU: 1 UID: 0 PID: 30602 Comm: syz.4.7035 Not tainted syzkaller #0 PREEMPT(full) [ 948.719645][T30602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 948.719655][T30602] Call Trace: [ 948.719662][T30602] [ 948.719670][T30602] dump_stack_lvl+0xe8/0x150 [ 948.719783][T30602] __might_resched+0x378/0x4d0 [ 948.719808][T30602] ? dev_set_rx_mode+0x54/0x2d0 [ 948.719834][T30602] __mutex_lock+0x11c/0x1550 [ 948.719861][T30602] ? __pfx__printk+0x10/0x10 [ 948.719878][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 948.719901][T30602] ? dev_set_promiscuity+0x10e/0x260 [ 948.719923][T30602] ? __netdev_printk+0x36f/0x480 [ 948.719943][T30602] ? __pfx___mutex_lock+0x10/0x10 [ 948.719966][T30602] ? netdev_info+0x11e/0x180 [ 948.719988][T30602] ? __pfx_netdev_info+0x10/0x10 [ 948.720011][T30602] dev_set_promiscuity+0x10e/0x260 [ 948.720038][T30602] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 948.720061][T30602] __dev_set_promiscuity+0x515/0x710 [ 948.720092][T30602] netif_set_promiscuity+0x50/0xe0 [ 948.720115][T30602] dev_set_promiscuity+0x126/0x260 [ 948.720141][T30602] br_manage_promisc+0x4db/0x560 [ 948.720174][T30602] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 948.720193][T30602] __dev_set_promiscuity+0x515/0x710 [ 948.720226][T30602] dev_set_rx_mode+0x1c9/0x2d0 [ 948.720251][T30602] __dev_open+0x672/0x830 [ 948.720276][T30602] ? __pfx___dev_open+0x10/0x10 [ 948.720293][T30602] ? __dev_change_flags+0x1b0/0x690 [ 948.720317][T30602] ? __local_bh_enable_ip+0xd0/0x130 [ 948.720344][T30602] __dev_change_flags+0x1f7/0x690 [ 948.720372][T30602] ? __switchdev_handle_port_attr_set+0x25b/0x2e0 [ 948.720393][T30602] ? __pfx___dev_change_flags+0x10/0x10 [ 948.720414][T30602] ? __pfx_dsa_user_dev_check+0x10/0x10 [ 948.720440][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 948.720467][T30602] netif_change_flags+0x88/0x1a0 [ 948.720495][T30602] do_setlink+0xf82/0x4590 [ 948.720533][T30602] ? __pfx_do_setlink+0x10/0x10 [ 948.720556][T30602] ? br_vlan_filter_toggle+0x32d/0x5d0 [ 948.720582][T30602] ? __local_bh_enable_ip+0xd0/0x130 [ 948.720608][T30602] ? br_vlan_filter_toggle+0x42c/0x5d0 [ 948.720634][T30602] ? __pfx_br_vlan_filter_toggle+0x10/0x10 [ 948.720672][T30602] ? br_changelink+0x1464/0x18d0 [ 948.720710][T30602] ? __pfx_br_changelink+0x10/0x10 [ 948.720734][T30602] ? __mutex_lock+0x606/0x1550 [ 948.720759][T30602] ? rtnl_newlink+0x883/0x1bb0 [ 948.720783][T30602] ? __pfx___mutex_lock+0x10/0x10 [ 948.720813][T30602] ? ns_capable+0x89/0xe0 [ 948.720840][T30602] rtnl_newlink+0x15ad/0x1bb0 [ 948.720874][T30602] ? __pfx_rtnl_newlink+0x10/0x10 [ 948.720903][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 948.720929][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 948.720955][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 948.720980][T30602] ? unwind_next_frame+0xa6/0x2550 [ 948.721004][T30602] ? unwind_next_frame+0xa6/0x2550 [ 948.721025][T30602] ? is_bpf_text_address+0x26/0x2b0 [ 948.721058][T30602] ? is_bpf_text_address+0x26/0x2b0 [ 948.721085][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 948.721110][T30602] ? kernel_text_address+0xa5/0xe0 [ 948.721131][T30602] ? __kernel_text_address+0xd/0x30 [ 948.721150][T30602] ? unwind_get_return_address+0x4d/0x90 [ 948.721168][T30602] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 948.721189][T30602] ? arch_stack_walk+0xfb/0x150 [ 948.721216][T30602] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 948.721251][T30602] ? __pfx_rtnl_newlink+0x10/0x10 [ 948.721272][T30602] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 948.721293][T30602] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 948.721317][T30602] ? netlink_sendmsg+0x5d4/0xb40 [ 948.721341][T30602] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 948.721363][T30602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 948.721401][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 948.721436][T30602] netlink_rcv_skb+0x232/0x4b0 [ 948.721459][T30602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 948.721483][T30602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 948.721518][T30602] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.721542][T30602] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.721572][T30602] netlink_unicast+0x75c/0x8e0 [ 948.721605][T30602] netlink_sendmsg+0x813/0xb40 [ 948.721639][T30602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.721664][T30602] ? aa_sock_msg_perm+0xf1/0x1b0 [ 948.721690][T30602] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 948.721708][T30602] ____sys_sendmsg+0x972/0x9f0 [ 948.721723][T30602] ? __might_fault+0xaf/0x130 [ 948.721740][T30602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.721760][T30602] ? import_iovec+0x73/0xa0 [ 948.721772][T30602] ___sys_sendmsg+0x2a5/0x360 [ 948.721787][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 948.721802][T30602] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.721820][T30602] ? futex_wait+0x2a2/0x390 [ 948.721844][T30602] ? __fget_files+0x2a/0x420 [ 948.721857][T30602] ? __fget_files+0x3a0/0x420 [ 948.721879][T30602] __x64_sys_sendmsg+0x1bd/0x2a0 [ 948.721902][T30602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 948.721930][T30602] ? rcu_is_watching+0x15/0xb0 [ 948.721952][T30602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.721963][T30602] do_syscall_64+0x15f/0xf80 [ 948.721976][T30602] ? trace_irq_disable+0x3b/0x140 [ 948.721988][T30602] ? clear_bhb_loop+0x40/0x90 [ 948.722001][T30602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.722011][T30602] RIP: 0033:0x7fc12f99c819 [ 948.722023][T30602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.722033][T30602] RSP: 002b:00007fc1307ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.722045][T30602] RAX: ffffffffffffffda RBX: 00007fc12fc15fa0 RCX: 00007fc12f99c819 [ 948.722053][T30602] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 948.722060][T30602] RBP: 00007fc12fa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 948.722069][T30602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.722075][T30602] R13: 00007fc12fc16038 R14: 00007fc12fc15fa0 R15: 00007fff4b4f1c48 [ 948.722092][T30602] [ 948.722108][T30602] [ 949.299756][T30602] ============================= [ 949.304595][T30602] [ BUG: Invalid wait context ] [ 949.309525][T30602] syzkaller #0 Tainted: G W [ 949.315494][T30602] ----------------------------- [ 949.320326][T30602] syz.4.7035/30602 is trying to lock: [ 949.325687][T30602] ffff888077a08d88 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 949.336110][T30602] other info that might help us debug this: [ 949.342001][T30602] context-{5:5} [ 949.345550][T30602] 3 locks held by syz.4.7035/30602: [ 949.350838][T30602] #0: ffffffff90340150 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 949.360401][T30602] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 949.369439][T30602] #2: ffff888030a54370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_set_rx_mode+0x65/0x2d0 [ 949.380051][T30602] stack backtrace: [ 949.384112][T30602] CPU: 1 UID: 0 PID: 30602 Comm: syz.4.7035 Tainted: G W syzkaller #0 PREEMPT(full) [ 949.384130][T30602] Tainted: [W]=WARN [ 949.384135][T30602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 949.384141][T30602] Call Trace: [ 949.384147][T30602] [ 949.384153][T30602] dump_stack_lvl+0xe8/0x150 [ 949.384172][T30602] __lock_acquire+0xec1/0x2cf0 [ 949.384188][T30602] ? __show_trace_log_lvl+0x478/0x550 [ 949.384204][T30602] ? dev_set_promiscuity+0x10e/0x260 [ 949.384218][T30602] lock_acquire+0x106/0x350 [ 949.384230][T30602] ? dev_set_promiscuity+0x10e/0x260 [ 949.384244][T30602] ? dump_stack_lvl+0x135/0x150 [ 949.384256][T30602] ? __might_resched+0x378/0x4d0 [ 949.384276][T30602] __mutex_lock+0x1a3/0x1550 [ 949.384297][T30602] ? dev_set_promiscuity+0x10e/0x260 [ 949.384323][T30602] ? __pfx__printk+0x10/0x10 [ 949.384335][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 949.384347][T30602] ? dev_set_promiscuity+0x10e/0x260 [ 949.384360][T30602] ? __pfx___mutex_lock+0x10/0x10 [ 949.384372][T30602] ? netdev_info+0x11e/0x180 [ 949.384383][T30602] ? __pfx_netdev_info+0x10/0x10 [ 949.384395][T30602] dev_set_promiscuity+0x10e/0x260 [ 949.384409][T30602] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 949.384423][T30602] __dev_set_promiscuity+0x515/0x710 [ 949.384439][T30602] netif_set_promiscuity+0x50/0xe0 [ 949.384453][T30602] dev_set_promiscuity+0x126/0x260 [ 949.384467][T30602] br_manage_promisc+0x4db/0x560 [ 949.384483][T30602] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 949.384494][T30602] __dev_set_promiscuity+0x515/0x710 [ 949.384509][T30602] dev_set_rx_mode+0x1c9/0x2d0 [ 949.384522][T30602] __dev_open+0x672/0x830 [ 949.384535][T30602] ? __pfx___dev_open+0x10/0x10 [ 949.384546][T30602] ? __dev_change_flags+0x1b0/0x690 [ 949.384560][T30602] ? __local_bh_enable_ip+0xd0/0x130 [ 949.384574][T30602] __dev_change_flags+0x1f7/0x690 [ 949.384588][T30602] ? __switchdev_handle_port_attr_set+0x25b/0x2e0 [ 949.384608][T30602] ? __pfx___dev_change_flags+0x10/0x10 [ 949.384629][T30602] ? __pfx_dsa_user_dev_check+0x10/0x10 [ 949.384651][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 949.384670][T30602] netif_change_flags+0x88/0x1a0 [ 949.384685][T30602] do_setlink+0xf82/0x4590 [ 949.384702][T30602] ? __pfx_do_setlink+0x10/0x10 [ 949.384715][T30602] ? br_vlan_filter_toggle+0x32d/0x5d0 [ 949.384729][T30602] ? __local_bh_enable_ip+0xd0/0x130 [ 949.384742][T30602] ? br_vlan_filter_toggle+0x42c/0x5d0 [ 949.384755][T30602] ? __pfx_br_vlan_filter_toggle+0x10/0x10 [ 949.384771][T30602] ? br_changelink+0x1464/0x18d0 [ 949.384784][T30602] ? __pfx_br_changelink+0x10/0x10 [ 949.384796][T30602] ? __mutex_lock+0x606/0x1550 [ 949.384809][T30602] ? rtnl_newlink+0x883/0x1bb0 [ 949.384821][T30602] ? __pfx___mutex_lock+0x10/0x10 [ 949.384834][T30602] ? ns_capable+0x89/0xe0 [ 949.384848][T30602] rtnl_newlink+0x15ad/0x1bb0 [ 949.384863][T30602] ? __pfx_rtnl_newlink+0x10/0x10 [ 949.384876][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 949.384888][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 949.384901][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 949.384916][T30602] ? unwind_next_frame+0xa6/0x2550 [ 949.384927][T30602] ? unwind_next_frame+0xa6/0x2550 [ 949.384937][T30602] ? is_bpf_text_address+0x26/0x2b0 [ 949.384951][T30602] ? is_bpf_text_address+0x26/0x2b0 [ 949.384963][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 949.384975][T30602] ? kernel_text_address+0xa5/0xe0 [ 949.384987][T30602] ? __kernel_text_address+0xd/0x30 [ 949.384997][T30602] ? unwind_get_return_address+0x4d/0x90 [ 949.385005][T30602] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 949.385017][T30602] ? arch_stack_walk+0xfb/0x150 [ 949.385028][T30602] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 949.385043][T30602] ? __pfx_rtnl_newlink+0x10/0x10 [ 949.385055][T30602] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 949.385067][T30602] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 949.385081][T30602] ? netlink_sendmsg+0x5d4/0xb40 [ 949.385095][T30602] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 949.385107][T30602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 949.385119][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 949.385133][T30602] netlink_rcv_skb+0x232/0x4b0 [ 949.385146][T30602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 949.385159][T30602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 949.385174][T30602] ? netlink_deliver_tap+0x2e/0x1b0 [ 949.385186][T30602] ? netlink_deliver_tap+0x2e/0x1b0 [ 949.385200][T30602] netlink_unicast+0x75c/0x8e0 [ 949.385215][T30602] netlink_sendmsg+0x813/0xb40 [ 949.385230][T30602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.385244][T30602] ? aa_sock_msg_perm+0xf1/0x1b0 [ 949.385257][T30602] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 949.385273][T30602] ____sys_sendmsg+0x972/0x9f0 [ 949.385287][T30602] ? __might_fault+0xaf/0x130 [ 949.385302][T30602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.385317][T30602] ? import_iovec+0x73/0xa0 [ 949.385328][T30602] ___sys_sendmsg+0x2a5/0x360 [ 949.385342][T30602] ? __lock_acquire+0x6b5/0x2cf0 [ 949.385354][T30602] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.385376][T30602] ? futex_wait+0x2a2/0x390 [ 949.385401][T30602] ? __fget_files+0x2a/0x420 [ 949.385421][T30602] ? __fget_files+0x3a0/0x420 [ 949.385437][T30602] __x64_sys_sendmsg+0x1bd/0x2a0 [ 949.385452][T30602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.385468][T30602] ? rcu_is_watching+0x15/0xb0 [ 949.385483][T30602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.385493][T30602] do_syscall_64+0x15f/0xf80 [ 949.385505][T30602] ? trace_irq_disable+0x3b/0x140 [ 949.385516][T30602] ? clear_bhb_loop+0x40/0x90 [ 949.385527][T30602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.385537][T30602] RIP: 0033:0x7fc12f99c819 [ 949.385552][T30602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.385561][T30602] RSP: 002b:00007fc1307ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.385574][T30602] RAX: ffffffffffffffda RBX: 00007fc12fc15fa0 RCX: 00007fc12f99c819 [ 949.385581][T30602] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 949.385588][T30602] RBP: 00007fc12fa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 949.385594][T30602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.385600][T30602] R13: 00007fc12fc16038 R14: 00007fc12fc15fa0 R15: 00007fff4b4f1c48 [ 949.385612][T30602] [ 949.992429][T30602] dummy0: left promiscuous mode