last executing test programs: 3.398662504s ago: executing program 4 (id=3364): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0xaeaf9ec181b6dfc9, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="0500f0ffffffffffffff0200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 1.874276144s ago: executing program 4 (id=3371): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffd76) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r6) unshare(0x40000000) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0xf74e04854622b7a1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x881c}, 0x4048000) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffd76) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200), 0x8) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r6) (async) unshare(0x40000000) (async) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0xf74e04854622b7a1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x881c}, 0x4048000) (async) 1.617161343s ago: executing program 0 (id=3377): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4092, 0x1000}, {&(0x7f00000013c0)=""/251, 0xfb}, {&(0x7f00000014c0)=""/44, 0x2c}], 0x3, 0x0, 0x600}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000002d80)=""/208, 0xd0}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000002f80)=""/245, 0xf5}, {0x0}, {&(0x7f0000003180)=""/246, 0xf6}], 0xa}, 0x81}], 0x400000000000043, 0x40012032, 0x0) 1.524170918s ago: executing program 0 (id=3380): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x11c, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}, @nested={0x4, 0x2}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x11c, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}, @nested={0x4, 0x2}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 1.477154338s ago: executing program 1 (id=3381): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x15, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r1, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4, 0xc4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xfff0, 0x6, 0xaf, 0x84}, {0x2, 0x7, 0x4b, 0xe6}, {0x7, 0x4, 0xfd, 0x6}, {0x600, 0x7, 0x80, 0xffffffff}, {0x0, 0x1, 0x5, 0xff}, {0x290, 0x5e, 0x10, 0xff}]}, 0x10) 1.372454046s ago: executing program 0 (id=3383): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xc3, 0x1, @vifc_lcl_ifindex, @remote}, 0x10) 1.217154491s ago: executing program 0 (id=3385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b00000000000000000000000000000200000000"], 0xfc}}, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) 1.212464159s ago: executing program 1 (id=3386): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x40}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r9) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r13, &(0x7f0000000640)={0x1d, r14, 0xffffffffffffffff, {0x0, 0x1}}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x1, 0x5}, {0x4}, {0xe, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000280)={{0x2, 0x4e22, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x48, {0x2, 0x4e24, @rand_addr=0x64010101}, 'veth0_virt_wifi\x00'}) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x1c}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 1.180738592s ago: executing program 0 (id=3388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0) 1.073177274s ago: executing program 4 (id=3390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{0x7e, 0x0, 0x20}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 1.029861644s ago: executing program 3 (id=3391): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x21000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x4000000) 981.246886ms ago: executing program 2 (id=3392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000600), &(0x7f0000000700)=""/127}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x21, 0x0, &(0x7f0000000080)) 944.615898ms ago: executing program 0 (id=3393): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0xd}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000009, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x20, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="48000000360001000000400000000000380000800c0011001d0000000000000014000100fe800000000000000000216d362f44b1222faffd8b22fd0000000000bb14003a00fe800000000000000000000000020036a0dd6ee10b1283f269b1222d149f29c7"], 0x48}], 0x1}, 0x8000) 880.880784ms ago: executing program 2 (id=3394): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0xaeaf9ec181b6dfc9, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000140000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 732.596075ms ago: executing program 3 (id=3395): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getroute={0x38, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x28, 0xfc, 0x1, 0xff, 0x7, 0x300}, [@RTA_MULTIPATH={0xc, 0x9, {0x9, 0x10, 0xff}}, @RTA_MARK={0x8, 0x10, 0x3}, @RTA_IIF={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x600}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) 732.044683ms ago: executing program 4 (id=3396): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000340)="eb6fa3829f414228e2de5139032ae9f5c15e4cff3bb98fc0b8c5", 0x1a}, {&(0x7f0000000500)="ae148c3d6e663570d5bbc0a455f22f80279dbcc61510593a0ec05a83ff420834089fe1393827eaf11ef81a7bb07dec7db2ca7efe32f65e63fd2faf42b4fcd844a65848366977e39812e3cfe4aa68f53f8d366f6f2525004400e7f2929e839721643867ddca222bfca3ada8572350dd0c6fedc471b1bde5db3bc96d283b7b340648c68f7160ea66d3494cc4530960efbf99583427377dd0acef7f265ee2878fb24cdadd5ae7c4e7dc7f7b605ae835ea8774992d6e32df3e5fea1f9a", 0xbb}, {&(0x7f0000001540)="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", 0xf2b}], 0x3}}], 0x1, 0x6ef8eb023116b2d8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x401) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="02000000000000e5ffff2b000200"], 0x14}}, 0x2004c089) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="e001e6ff", @ANYRES16=r5, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e83e6a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c", 0x56}, {&(0x7f0000000280)="af4c42680bee64c57b0c7748a3924e8e5599e0238057", 0x16}, {&(0x7f0000000140)="d6f12351876d5702fb64018cc67dcb307616eafb60", 0x15}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r7, 0x0) listen(r3, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) accept4(r3, &(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x80, 0x800) bind$unix(r8, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r8, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 658.893258ms ago: executing program 2 (id=3397): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async) r8 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) (async, rerun: 32) r13 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc) (async, rerun: 64) r14 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 631.853352ms ago: executing program 3 (id=3398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f4000020000000000000800000000000000"], 0xfc}}, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) 548.157284ms ago: executing program 1 (id=3399): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a08004500fd223006907864160101ac1414aa0000462200"/48, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c0400ca9056050200"/20], 0x0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) shutdown(r0, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xfffc, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000300010003", 0x7) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet(r5, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[@ip_pktinfo={{0x1c, 0x11a, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x80) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) 484.810633ms ago: executing program 3 (id=3400): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x43}, 0x1c) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'veth1_to_bond\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4082201}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24008831) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x404, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x40440c0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xbd, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000000780)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x76, 0x4e23, 0x8, 0x2, 0x80, 0x80, 0x2c, r4, r5}, {0x6, 0xde7, 0x0, 0x8, 0x4, 0x10000, 0x8, 0x7}, {0x6, 0x6, 0x2}, 0xfff, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d5, 0xff}, 0xa, @in6=@mcast1, 0x0, 0x2, 0x2, 0x8, 0x60000, 0x7, 0x1}}, 0xe8) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x3, 0x6, 0x804, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a00)={'syztnl0\x00', r4, 0x0, 0x40, 0x81, 0xb, {{0x23, 0x4, 0x2, 0x5, 0x8c, 0x65, 0x0, 0xc2, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@cipso={0x86, 0xf, 0x0, [{0x1, 0x4, "9cb2"}, {0x6, 0x5, "e92525"}]}, @ssrr={0x89, 0x1b, 0xf6, [@remote, @remote, @broadcast, @empty, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x4c, 0xf3, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0xb60}, {@multicast1, 0x6bd}, {@private=0xa010102, 0xffffff0f}, {@empty, 0x2}, {@multicast2, 0x8}, {@local, 0x2}, {@multicast2, 0xf24}, {@local, 0xe}, {@loopback, 0x10}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x6, r7, 0x7f}, 0xc) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40), 0x8) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x9c, 0x1, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}, @NFQA_CT={0x7c, 0xb, 0x0, 0x1, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xff}]}}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x321}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x48}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x880}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x143}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40051}, 0x4000) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000000d00)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000d40)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x7f, 0x7fff, 0x4, 0x1}, &(0x7f0000000e00)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000e40)={r10, 0xdc, "477653dfe8d8930509c109c6d9c31951b70149e6ab4f9cd29730b55a42fd9d2621253123f5748914a7eb83fd594f11763d6f207794aad16ad65e464feaca28cf4a593dfa7af25ee8957197826611b66eb284408a46893b8bf89fdc144a23e03570d0888d3594a4a954d93d8358ed8c99d2748ca4a683df2d9ea207fb814236fab7ec06da5f505f062e6452a8d6f3edd225222d1a206587b7ca5a32ebcd3bf7451527195d067b1cbfdefa8f031ff697cbd75a55e8348d6b9bdf61f8c5dc8cbec77ae1f58aaa81ee888e089ce2e7c4df6820aac6ac39fd20b86c7ff0a4"}, &(0x7f0000000f40)=0xe4) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000fc0)={0x0, @qipcrtr={0x2a, 0x0, 0x1}, @hci={0x1f, 0x4, 0x2}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x8000, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f80)='pim6reg1\x00', 0xb, 0x7fffffff, 0x5}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x68, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5a6}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x536}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x44880) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f00000011c0)={'syztnl1\x00', &(0x7f0000001180)={'erspan0\x00', r7, 0x7, 0x20, 0xd36, 0x6, {{0x6, 0x4, 0x0, 0x33, 0x18, 0x66, 0x0, 0xc0, 0x2b, 0x0, @loopback, @broadcast, {[@end]}}}}}) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x20000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 385.999721ms ago: executing program 2 (id=3401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4004891) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x441}, @IFA_LOCAL={0xf, 0x2, @remote}]}, 0x34}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 313.244939ms ago: executing program 1 (id=3402): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}, 0x1, 0x0, 0xc0fe}, 0x44) 258.715751ms ago: executing program 4 (id=3403): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x68, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010102, 0x6, 0x4, 0x3, 0x0, 0x0, 0x80000}]}]}, 0xfc}}, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bind$netlink(r2, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x100000}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x8, 0x4e20, 0xdc, 0x2, 0xa0, 0x80, 0xc}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r10, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) 217.697863ms ago: executing program 1 (id=3404): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000040000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 199.203629ms ago: executing program 2 (id=3405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000006f3035654eddb603110000261acb477a0ac733b5030644f200183a27e81e5d3d770d92e8dc5099d420a8e0228bfb9af5fa3c5cbeeb63eca9febd4ec26b84bd772f93cbbebc0e37aba09c263628b3ba32cd10339e299062f164762a791ca4b9f20ad3", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0x50}}, 0x40040d4) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) 117.218464ms ago: executing program 3 (id=3406): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x20000400) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x24040040) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x4000000) 94.281915ms ago: executing program 1 (id=3407): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x16, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @btf_id={0x18, 0x14, 0x3, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x4, 0x44, &(0x7f0000000600)=""/68, 0x40f00, 0x3b, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xe, 0x7f, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700)=[r1, r1, r1, r1, r1, 0x1, r1, r1, r1], &(0x7f0000000740)=[{0x4, 0x5, 0x5, 0x6}, {0x0, 0x3, 0x2, 0x4}, {0x0, 0x3, 0x0, 0x3}, {0x5, 0x3, 0x7}], 0x10, 0x90c}, 0x94) recvmmsg(r2, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r2, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001800ef012bbd7000000000000a0000000000fd0000000000140005000000000000000000000000000000000208000400", @ANYRES32=r11], 0x38}, 0x1, 0x11}, 0x0) sendmmsg$sock(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="20215ef7b34f093f49f3ad8a470b8345cd0e1b78c2a1185c8d", 0x19}, {&(0x7f0000000280)="fb11f5c0232a0cdfcdfbe32039089eac08880a1c18ed0932ca9391f6626df09c6ff65a699d6e2a6171ad266fcf7ea633dbec74cb2e74e306933351d82cc84d1ed9c98dedcacc43e5c6bda9236a852248c796a235b7d81c1288907803e8676ffbc7bcf0fc36afe871c4700dd9bef47dce391ce49aef199a70d480955e79c5cfb240f479cd3bdbc141c1b19d3b", 0x8c}], 0x2, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xf0}}, {{&(0x7f0000000480)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000a40)="235f3e081fb43c38a64786c33b9c11fc8b167b6f03916158cc8acac1dbb29ef0759859b1a68c08ee3f4b8b456c05176a08012fc4162e1eec32bd1c70a47298450c883cc818e4f9fde239c2733b023f18bc7b67b93324169a167a90249642608ee146218b5283922d74ee27cbcef52546fc97352769b74c7652a86a99ad54d497262069e48cdac7b1569f93283126c383bc8438b8f961f6080e4d05142448fd4fc55b7688b3432bb31ac47596e0ec8a029cfe4e487866a1068bf17624f4776579aca172e074e9f37cf9cdbee3331b055acdde77f9abb24463cd310e1b868403bbd74af48b85601e5a320cf989866d4f2e3d3580d809410d37ef3995744ee2d77dc59f549fd76fbd46ba1f11f51412958e8184c8c3bf0e7867776d4176695eda1ba7d26610963e165c54747ee30f6363c9976b34feafe52e2734639644368af36b7ee7a376fcb8ebf029d61602f43811d254608210cfd723f66a290a7b2844e4ed3695310bf2f33c2fba38d888d8e54b9fd8d5f3acd25d07d8fb820a9f8d700d82d3a4ddc2227bad0d9a7db54a67a838f4d02ebe16ec15e4e3ca43a9c6f2c5b7b9e62975d428efbb60a67c786786d26f6c1e4402aa63a0b7f6e18ea77b29133e622e654b6d2241f38fd158345beab22088e331c4bba70b8c2833d2e9d16bc3940943354d72c167a3419a7c197fdff691dd7accc8c2c4a244b9494ca7695d0702ada803053319fdbbda73cbfad736007f120c1908b93c85285738a0ec8261b2f93f5a3cc56e16289c457a37b3feca611e5763ce8e5ea49c266fbc42771bd3a34acda0d8454a3d9731ac35dc97d411bbbd5e4251d8428b1008ce24d0bfe6eb520134319268a1c50b0fca3df0ed451839407004b105359c544c08ba85f9b43b76d6c13731879a39db4c472386c877a5a5da15840268f4f04168e0cbb6ed59bdffee447d0cf6d7fbe612c61c8cb7e4c931dd74354de2a8f93f8ad1da37a10ea9e66050b340cf542ef6cd2ce5095976704f5a3afa648db5256eb746383bf2e1b0bf4947a94d1550956fbce3c7c7fa1bf72f46518e7cee47d4b770b28ea0913dc8dd465739f1547b06f0565f7dbfe28756e8099facf64c7d99bb0447cce9efef4f9b792cb37efa7da22f012224f783209e660dc61ed23571215b8b697689523a82ce1df5a1585913bec3f6597bb5ccfd8823d1880321b14f8b4acf20e5cb51e6b6e83882fd97f1b0b14856c3ee35c6d3f980e082b8fa5628b03d7287387f6756a4f255e8426bc19b73b2b1a17d396909179e406d2c6b30367f680380abb9caff01991059fd287965acdc3191b6e1b8e292ced142a5001cc5ae1edc7cef2708e029ad1f13096658d59c366f450ab3bf79f4f5853825a7eda1b235cec8aef0a9e7e77ed12ddfd826b031d27b51c3ed86598ae9b31975686402667a528627718dece0afe92d7a035016378f18162f0607170f3749659b3b9bb81bbde738ed253a0c9b944b3805f8646ebe8d4ad59f0145daa26f245d5e7739a2882e5734f40ec8efe3327050fb6b45f6d8c49c25e59008313114ab97c26a1a1eb6037d40a5231e29058bd1798b0854ca4d472542ebe0a387e636fb449c06502d35daa08f64dbb82786f2bf3bbe7e696d504c83edbeeb7d32b8c249b9b7d0c966379a226ee4f4543cad626ce04572b56ecdb114395d428edcbabff753abd66a0576b5aa556275c8a334930203d50da1e2d1bee91a6ddc6d20196a1d24c50f9cf52ae93f29ca0467fbf0cab6bc6aac42277dfe7cf14f77674f8cc194563047cd17f19ab24608b0464359792e31266c3f5fe878406f13de55571ebe231e7a5dac4a56c161f24ed015b0fd7087fda56a8fc9aee9e9cd41479cab5cf5cf459c92ae8adc76d3831191e2f699ebb6ceab74c8cf1145121ffbef2ac01f2a83fecceab319ae48762bc576cdd00e776ce48916e5210f0c62fbff88ab74120e2b7d70d885ee85518ef22cdbd0f2236063afc39683f35c36fcc586e7fb568e93b9dd0df4ef8ac8dcb5f97611260000d5b8eb1110e4872a2ef39e23b0f2dd5f7fea6f02f7c241b89dd1fa04ae2844c5f342f5ea9c861b4dcc78998b2949c1231416bbfd2b35522044462199d53311126f52608f86aa0fa7dc8abc62330d7f9a3037e3289ae2c28f807e28ab197769e89d1b927ea9ad79f3222b6827c092d8112abbd3314332ee7dc5f530961bbf7f043ed22d85d3334980c5066ba60e4909a582a9ada5930c42fe7cb298bdeb2f832a2e23ae1ec342df5c58c7967097eb6ddf4d052c360f762e4963cc399089db0a6f0857fe011d00eaa8c65fa531cd8ddd0858dc072024ce01def64450213a9546085d473076d546447cd0262df371b6726248bdc127fd380b22b46bf1d44fd7df89fee4b44952ebc74f65029b8a7f435715ac6d7a552c2f9a8ba76e98c141d9f76830f8767756c10f88dee0bddba7360f7bc038defb3bc9bcf6ee5bdc744351cfb3e34fd5396699869ea332040d1707ebd45c28093158ede2a9ca4a6fb1b76fbbe106117d55de08b073a4b9db6a39f63128e0f0c668e8ae232e9e778edeef64c76c142e91e1d32503ad67e0630d043bd9e92262983c21c85e32bfefd06f0e0939d35b3f135ae7ba89407b6e0110253abb45bf8453f6ebda33790f9fcf47b6da44e60e7e2b99766e5fa78ad3df17e6e0fac99327d25cae6756ac09b9ae76467d8b4e8f568272b0ed7debc8c38697bde6f13cd7a3e4c2245f23ba4f5337bfd6674f5e18166835efcc4a5134d467e0fe10f60a0cfcb19efc6b9910c690c811575051cf8191f6913b4d3ea7eda36e206cb6ec0693ad694efd45476117d00c99ac9a5a6fde70fc757e2e26f3f3b3e2c46f9adf636cc05dc928f16163549da916341708c18c47391a15e017109c686d1fa394ce3acc751374181fc14e459fbe8a937ebb256ad5db62ef04fcf0a73703b827b188dc83cf2cbc16254548f389793841154e483b83f11ee630703abd7b52047d8da36a0b3e67ae3ca94a09bfa3191b878e2259605103fca365cd55a578c690da8fec6fa2e1af6ecb64ec249dba6afad765e5389cc0aca690f7e71cb2755fbcbf4f230ef83dfb167ff2ecf99d618171c640101f5f86c1a70403bc7b81e6c4cfab43479c63454c78ac1e15ad1d6d64f1bc0980ff610bfecf9fe71360706bc1959f3558aaac89b11a603d2c35eb3ec4a8b5b3bf494dc4243f9541c1178744c47d4f1efca22da097f9ae8a51db5ee488319c4e23de47210aafb5f040c765ef2728598c2cb42f079d6649b06bbf7f3429aff99bfdfe3342ed6a3628a8a02e027b65c1a2fa7c5d49d1172cabfbeb4b84ab4609f7646b2c580993559dc4e87af89691402de9aa7045b44a0cc9da3a852c2d0973396eaa7b889445b6ed1cefc39b0e5311b9b6034926b9ebabc6946ccd3456b6f5a1fc009e33c28394cf11530500c86e36b04f089b34fcce6fee2aa70b83e46dc6f9237f4d0b97e3d1083268679f72a6ab8285cfa4b27cad81387dcb1b512e7aaaf02a551b8fdec2e60cc69f80fc854bd1b7d213263468ad37f6931d1a1ee208132a84e8012efb6108dd28f5f872d5818ea6ef97ec3186489eb8fb116bbf049ae59e7d15b996d687c6f8db85afc5c58642925830dbf9c0071b4f0007572e017f79ab5bad462599d9b488585962ed559666e5a191ac9c91ebaf7d89bf713a9c27001b11d8ec59be4f45529eee9f2e491be0e95ad12c89223184b7011885230ecaa848ef76f2aa5fca2b23d976a3f34cd09e42733a208ffdad65783b618e8125a1d1cdde21d82589a8f0a8b63ba3d0ec7e677e7e7fd0caf0d9a8d91704dd7f390a8484f88b8b8d53e3fedf29e8225d8762fb69642ebeb5b9d38c1b12f20c81baf935cedbe521a7af20124f8e2344e1e2090a965fcd36cbfea927d331635aeaf75cb1b7ef6fd3d3dbf8a51f12469279dba25837387c25fd447b53f4d7c5567ae39cc19ec64e1daed98b4c5b347df82f8eafde2c3be05a060e82a6dca6f8f313b6818fc292ba3bdac860ee2faf717319c3a1b4d1560737f740f916e0bd449727950b49252eee55d0dc262c7194110435b8eb46fcbe3f7984536dd9972dfcd22760e56a04c7a2f33639d721c57e6608ac4c6756d5fd1e7e9011a97b96e359abcda3456b9c41a67d0df933d50e186a6409e7e743cb4a3c6aa93cb554eb9302c04f17f675cceaaad8d95d46776dc191fc731079376e2f69d040d75facd91aae154f67fb9b6914dfb753fb70c1a90ad58d1ad4ccb3ecd1250cda925be6a6bc5c579b98d8ab0697fe01f94e92783927366423592e0c00c08ba3cfa14ae7d0c61ec977e7a19b7bb78688bce01683865c3f65c9218e1f476e6a01995b5bc4c9274fcf26aa399f0982567039c9f58e6c7c27f5785e883862d5b8efa387ff57814cc98f5521d7cc39b95736335948d63fd5b6b66da823b239bc1b20dc197adf288200d008cf9d8ac31177d54f0b1a66b51ddcc297ada278c334a39bb43d542722ccd594092bc512b28344441769c532d3f045460163092b0d2dee430ff9a9b15ece89a40131e70255a4379629f98208f2d93231096bf8dfd09e1633fb0be2fe788547b50b3eb9c226e522132f0b0282864fbea16120053d0fa4346eb50061e8fd0b9957b3bca69a920daa4a958383039de2602d44190056298668c9f2d3f76b903d04b59d2eddb3058b4c18f6b3a02a10b9e97b51d9e20bffaa753b42906c31967869c01fc3565dfa2d8f11b1b96dab52ec6b31b12fb4cfffd7b8216ee3f0c9bfd0d712edd50f4028d1a88bca9c2c1e6ac8df436af7790e05b6de547baeac3dae052c31990a6ac27888dac9f96865d614a57a2f5fb7adcac5a46c7de3d2b1f60cae10f079193d640a7e707d64152c83d7933fef58abe09768baba3b841180a5f017876ddc0cad2f59fb83bf1f36261a466fd3be5dec77e3c0941dbbea96d31936efac5991efd6fca772924d6dd32da87ddf8df40272958ec04563b224d9869966dffb8b44a78ca27fb5224268e8d56f006770a33e9aff71e4ce7854864bd76e96a0a2b0443a8fcc40d35e4126394a642d213a78c517654be26e5b8df0555f7945bece39e34c754c1fdf62c936b251163c6c058395eb76432f20396aa40ca01467ae4406ca8adabb67fdd8b270005c29f0f635fa6b1be11000b474782d1483fde58891562b0b92f5c58b3e9b349131339aed6af5522829b131e3897424552c2efd6475a1d99857b74c1c14a646d9601d7334a3894f02529f39c36d1304646caed0a123941030771a50c0f0ed94cde8bf7ba7cdf51500bee7ec751c60d89a154e9d4640db8efb763bf538696dc604fc883613b24407336799314a0e468bc1fa4f745374971fc785481104897b1bea0b5a89ac26fcef4ed299cf6df9313b1199343e8a0c71d4259c55161c65a14d0954ca48c9d2ac1b3d195f6b5707594c0937c2ea74d746b77ed98c3005828b98f3d8e5c903603059e98a84f1534e17c9979b4f21d5c3b93f3b860850d96bcfee270f3ef7c7db8820cae00341cfc6cb85676bec67f5abd22949cee69b4dcc6b2ccd3e93b6ce04e3300d1692a03bc7802ba1c2c8ac03ad89b9a88524dec1f53a2e92007e1b689626d18e68568e053d828937a220ee4a47905e5f437b71e24f38b03183d676afe48d8c8a3e7cd02f146b9b410a96c4a7d867ff7fc3376fc63e16c83d702af418759f933cc53cdf62b54d3f77fb093647032c5d44977218a1c7735bb745d1e3b442cd42005fed02cc400d8c9b8ffb72111902099c7d2c95532c186761", 0x1000}], 0x1, &(0x7f0000001a80)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0xf5}}, @txtime={{0x18, 0x1, 0x3d, 0x367}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @timestamping={{0x14, 0x1, 0x25, 0xffff934a}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0xa8}}, {{&(0x7f0000001b40)=@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1_to_batadv\x00'}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001bc0)="ad6ad7c92df11bc596a6df997720c2af9720d7a011ed04cfcb980da26d71ea8f95b155f7dabdc18b4683528407e730a55a36720204fd337db7ff34b2864275", 0x3f}, {&(0x7f0000001c00)="44182b9947cfa7672d5f6f60b0ab49cf5467b8ae83e56092162345b2ac406f442fe65b7c4d332f685f08050f991f7f04080eca49fdcd75a5832e9d2a8f2831f41bf93a636bf46c6e8e69b94f38ebf31258f408fc26a0956e3edad1532eb0e4d13586b5ccd7c8661672074952fdba1aafaef2b9d5db745b0ba340072e03c88369a1b2b305b37db0c926e3edd665d487ff9554a09d5334a9599e6b382997028b6b0be043303627ca2608160f88a03e941e9e5b10d3", 0xb4}, {&(0x7f0000001cc0)="17eaebc17df3ab805b773345d0c89ad34526c3034c27ef95c3873c6a7bfb6f8fdf6fb146935ddc0e0278dffa5ef73c92b60de4e824efc31bc6b7d78372b099711087b2b561d0bb2a4b89c01ace95cfccd9d4f76bc67efb383c8eafe819c1560d9e2f09e88f2b91af8b9f1b323d15eed1c888c2f66efc7b270b", 0x79}], 0x3, &(0x7f0000001d80)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0xe1}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x401}}], 0x90}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001e40)="96779133c8c083b9856a2fb2722b56b484be65fe5b9edcc5", 0x18}, {&(0x7f0000001e80)="dc3c37eadfc25e5516e60b1fb27ba706aec600f330e0c87b4323a8a4e19b8381122b1166624aa1e0154f3ee0a1a297966e2e74a30cd2539fe87cf8addb4ae35288002c96ebde699c6f206cec2904eecb1a70d715aea44bad32f47977576f2d6198314d7ff75e8ba29c1dfa49d39215e184989de0ff1d5327d8a9f1342d75bda171fc5eee5a6e7ee8923ed836d515578d475bc5645f1f771a6e9c6b846b4df9be062b661006bba104df58fded38a629aa3fc2b2872cb009360de187df6af533e0fd912d7c036bba1213900f196a3e4b1cdb77e62423", 0xd5}, {&(0x7f0000001f80)="73a2bfcad32f732d86bfca9129e1aa7b379dd3a0e846864136277096e8d044fa76935bd7a7ff38177022b65b3c10000b982dc3fee5cb662ef45c403ff8aa0b5b238c8b8e4d50a5372fdfba1bec6a433370af92360e9bebbb6c053d695b6a46c880abbe7dbb72f5c6465300aa2ac19f2b674e926ab4249de00da2b0da89a4b34411ca2b0f2c3032f1939eda79c862a9fe2be2bda05a454592351f30e2d398fcdfd7467798b40cbbace41003a8c0434d8a4ea2cff94b3dfe5edf061bfc496a420f590c", 0xc2}], 0x3, &(0x7f00000020c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xc12}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x638d}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}], 0x90}}, {{&(0x7f0000002180)=@can={0x1d, r11}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002200)="890bc2dd5c09a0b267901b0c28f974932e285e4694f33ea11ce887125a3e09222d31207fc03961dc4c2901ac4641873e926d50ef3197598f675587c415389503ff2c0fbe749713fca8e9e2753a14419f9fe437b5d6db8f7f7b7ac588f5160cba7e7766672a82d54329ef478715976b7cb5357bcbb3fe6a1055fb587ef74d1d77a62e1cc5b90216ef1f83161b7b70d9d84f5b4dea994b563ad0910207f36818c25defae4a2d0fc2f20977e3fdaae39322b23808788f243ac3ae6efaa6aaaeb9bf539c4ea66f0f5bf2b055bbbf89a01a374e4224d19d355f", 0xd7}, {&(0x7f0000002300)="0bc688b9658ebad89bc074b2a4312457b8", 0x11}, {&(0x7f0000002340)="bfff2e4bd26b4b3eaec83b559406e9375ea971637561678fbe1197fa6e5fd8822f92f2eb7c906dd43199303e404a75700cf9c6fbe3b1198221c7121fd7cbb3a671be33b309dc2a6ae6b8f9208361efcfae53f10b76a63be1a32abdb08fe48fd97f566e2f5f020ee37a46f4da898ed73d2c4419af1227eaae", 0x78}, {&(0x7f00000023c0)="ae136a4836965ec0f060d5be96760989ef4b77d7ab353f7479f5f3034dfc081b4ab01906f12e480a453d3379c527112cf94648110c02f14e946cca5b76ba04e9ae4e67184447fde9fc7a5aef13041b6f18d1fa8753d14f24465605f43f98d6260c2c7d1e91f631eb3b424854962000b725914889c97d487171b5d3871e452014a3c1096174a3ac29bfc4850e7f76b3b52ab616279e3be2db2547c522109c8c5c0967ad4f4c536a35a9e2ee0a59d40cda56710225d4a6c97d0206f6e2d0951775e2586b74c08b3501b0021e6b492873cbbe6de650d3407bdbdc3033baa2e9df5e07d2a16761f414d43b04144bcf8b51d9986101b8ccb109", 0xf7}, {&(0x7f00000024c0)="bb0caf96e2d70fe7b2874cd0", 0xc}, {&(0x7f0000002500)="f6a71a294faec57fc16ea95158c48fe06f210e1f72c2328a9c91b85ee9c8acc468268b5cdd645da20ec6529cf52e741a03b1cb8dc1d0fb0e6f805c53aca2d6854a43a5eaf5357eaf36447d25ffc5755064a5ddc4562d0bb79fe791f3d086859f120a045e50eed17e8b24ca3b089d600700fc4b6a864083ce", 0x78}, {&(0x7f0000002580)="63a2cda4bf5c4f1fde5915b217abb4717937009bd80af295d072802b992860fabac1ed1ae39ed7ea5cd44bfb57af115b090ca707845051fe654c84629516fba2400cf40ba2d3a32c41eccb2980a9e124d94f460d9c7176d0107b4ccb83d9335f10d36ec7ae477c72686a2534f30ebbd9c50a65774a9d6ba40ae0234c47f83984e75fa4f4ddc27a8f3d48c72117595c2294459655512910293cf062ce9d4a74141a108c7799bd9a8bf5d86ce2b6ec8b6166b2dbd4226aa407", 0xb8}, {&(0x7f0000002640)="15ec879e9fd2f3645dd31c129545d3b6ab849d47bd8897c551e9ac35f137c8ede4921a7e7b1484bfb6d626223b53cddf1c572f7792c73244ff7a93155700676c3881989216f98412e29e3b79c1727cb339c9165219bb55f061108ab7c5dae343c4017ec4f9b97720fd1632f90599ece198fd93b0b4cb0ae63471e992178232fa5827d4cea3523bf7e34acca4e81e6503aaf3dd9fc420887d66c176", 0x9b}, {&(0x7f0000002700)="62016eea8a0b55c7867805d2227ff547c43077819a00d29af2ae940f746a8d0ff5c72e9ba05e072d2f3f0f5938a7c57916bb79be491e0e2bb1dda6fad4a44a2455bda97982ce1dadca46475870955951afbb203b839b475595eb68a8cd783c75d53774b45853ed567b8617d837b6749380", 0x71}], 0x9, &(0x7f0000002840)=[@timestamping={{0x14, 0x1, 0x25, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0xcf}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @mark={{0x14, 0x1, 0x24, 0xcd}}], 0x78}}], 0x5, 0xc093) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) 90.004054ms ago: executing program 4 (id=3408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x164, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e25, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a06000000"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 497.095µs ago: executing program 2 (id=3409): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004090}, 0x42000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000240), r3) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000380)={r3, &(0x7f0000000280)='\x00', 0x0, &(0x7f00000002c0)={@align=0x6, {0x7fff, 0x6, 0x2, 0x10001}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x401}) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @remote, 0x5}}}, &(0x7f0000000480)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000004c0)={r5, 0x800, 0x5, [0x9, 0x0, 0x77f, 0x100, 0x1000]}, 0x12) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x4c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000014) (async) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", ""]}, 0x24}}, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0xb, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum64={0xe, 0x6, 0x0, 0x13, 0x0, 0x4, [{0xa, 0x100, 0x4}, {0x8, 0x0, 0x3}, {0x3, 0x10001, 0xa000}, {0xe, 0x10001, 0xfffffffd}, {0x6, 0x4, 0x3}, {0x7, 0x5868, 0x6}]}, @volatile={0x8, 0x0, 0x0, 0x9, 0x4}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x79, 0x0, 0x6c, 0xa}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @struct={0x3, 0x6, 0x0, 0x4, 0x1, 0x7, [{0x6, 0x3, 0x1d1}, {0xc, 0x1, 0x7}, {0x2, 0x3, 0x3}, {0xe, 0x3, 0x4}, {0xa, 0x3, 0x2}, {0x0, 0x5, 0x4}]}]}, {0x0, [0x30, 0x5f, 0x2e, 0x61, 0x30, 0x5f, 0x30, 0x0, 0x5f]}}, &(0x7f00000008c0)=""/6, 0x10f, 0x6, 0x0, 0x10000}, 0x28) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x81, 0x0, r4, 0xf59, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r4, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r4}, 0x20) (rerun: 64) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x2f, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x0, 0x3, 0x2, 0x1, 0xb, 0x80, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ldst={0x1, 0x3, 0x6, 0x3, 0x1, 0x80, 0x10}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @alu={0x4, 0x0, 0x2, 0x0, 0xa, 0x30, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='GPL\x00', 0x1, 0x3e, &(0x7f0000000b80)=""/62, 0x41100, 0x2, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000bc0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xa, 0x20, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r4, r9, r10, r4, r4, r4], 0x0, 0x10, 0x5c2}, 0x94) ioctl$XFS_IOC_FREE_EOFBLOCKS(r11, 0x8080583a, &(0x7f0000000e40)={0x8, 0x0, 0x7, 0x2c000000, 0x10, 0x0, 0x3}) (async, rerun: 64) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000ec0)=0x3, 0x4) (async, rerun: 64) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x80010, r11, 0x8b500000) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x4, 0x3, 0x7, 0xf0c, 0x0, r10, 0xc0, '\x00', r1, r6, 0x4, 0x2, 0x5}, 0x50) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000fc0)={'ip6tnl0\x00', r1, 0x29, 0x69, 0x0, 0x0, 0x8, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7, 0x4, 0x5}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xc4, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x8051) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r13, 0x0, 0x3, &(0x7f0000001200), &(0x7f0000001240)=0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$XFS_IOC_INUMBERS(r9, 0x80405880, &(0x7f0000001280)={{0x5, 0x1, 0x7, 0x2, 0x8}, [{0x800, 0x2, 0x7, 0x40}, {0x3, 0x3, 0xa2, 0x8}, {0x3, 0x10001, 0x4, 0x80}, {0x20c5aebe, 0x134, 0x4, 0x2}]}) (async, rerun: 32) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001380), r4) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x58, r14, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}}, 0x1) 0s ago: executing program 3 (id=3410): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f4000020000000000000800000000000000"], 0xfc}}, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): v_slave_1 [ 270.677172][T12232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.689161][T12232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 270.701572][T12232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.711909][T12232] batman_adv: batadv0: Interface activated: ipvlan3 [ 270.873227][T12244] x_tables: duplicate underflow at hook 3 [ 270.951589][T12256] Bluetooth: MGMT ver 1.23 [ 271.741227][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 271.896052][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 273.857906][T12245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.044410][T12287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.114191][T12290] macvlan0: entered promiscuous mode [ 274.142193][T12290] macvlan0: left allmulticast mode [ 274.186398][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'. [ 274.286990][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1951'. [ 274.364290][T12302] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 274.380132][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1953'. [ 274.395059][T12302] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 274.417347][T12302] gretap1: entered promiscuous mode [ 274.430266][T12302] gretap1: entered allmulticast mode [ 274.448213][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1953'. [ 274.574656][T12306] veth1_macvtap: default FDB implementation only supports local addresses [ 274.909075][T12334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1960'. [ 274.920179][T12334] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1960'. [ 275.422032][T12348] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1965'. [ 277.469660][T12313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.638329][T12354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1967'. [ 277.672206][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1968'. [ 277.684012][T12363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1970'. [ 277.961720][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1976'. [ 278.369941][T12408] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 281.151193][T12392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.403065][T12493] FAULT_INJECTION: forcing a failure. [ 281.403065][T12493] name failslab, interval 1, probability 0, space 0, times 0 [ 281.432632][T12492] syzkaller0: entered promiscuous mode [ 281.446861][T12492] syzkaller0: entered allmulticast mode [ 281.486525][T12493] CPU: 1 UID: 0 PID: 12493 Comm: syz.1.2003 Not tainted syzkaller #0 PREEMPT(full) [ 281.486556][T12493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 281.486570][T12493] Call Trace: [ 281.486579][T12493] [ 281.486589][T12493] dump_stack_lvl+0xe8/0x150 [ 281.486627][T12493] should_fail_ex+0x412/0x560 [ 281.486677][T12493] should_failslab+0xa8/0x100 [ 281.486709][T12493] __kmalloc_cache_noprof+0x88/0x660 [ 281.486736][T12493] ? nl80211_prepare_wdev_dump+0x55f/0x6a0 [ 281.486762][T12493] ? nl80211_dump_station+0x3f5/0xdd0 [ 281.486784][T12493] ? __kmalloc_cache_noprof+0x15b/0x660 [ 281.486814][T12493] nl80211_dump_station+0x3f5/0xdd0 [ 281.486841][T12493] ? kasan_save_track+0x3e/0x80 [ 281.486879][T12493] ? __pfx_nl80211_dump_station+0x10/0x10 [ 281.486944][T12493] ? trace_kmalloc+0x2a/0x110 [ 281.486973][T12493] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 281.487013][T12493] genl_dumpit+0x10b/0x1b0 [ 281.487049][T12493] netlink_dump+0x722/0xe80 [ 281.487088][T12493] ? __pfx_netlink_dump+0x10/0x10 [ 281.487131][T12493] ? genl_start+0x499/0x6c0 [ 281.487171][T12493] __netlink_dump_start+0x5cb/0x7e0 [ 281.487206][T12493] genl_family_rcv_msg_dumpit+0x213/0x310 [ 281.487242][T12493] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 281.487272][T12493] ? genl_get_cmd+0x7f4/0x930 [ 281.487309][T12493] ? __pfx_genl_start+0x10/0x10 [ 281.487336][T12493] ? __pfx_genl_dumpit+0x10/0x10 [ 281.487365][T12493] ? __pfx_genl_done+0x10/0x10 [ 281.487403][T12493] ? __lock_acquire+0x6b5/0x2cf0 [ 281.487439][T12493] genl_rcv_msg+0x5e8/0x7a0 [ 281.487483][T12493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.487514][T12493] ? __pfx_nl80211_dump_station+0x10/0x10 [ 281.487539][T12493] ? __lock_acquire+0x6b5/0x2cf0 [ 281.487580][T12493] netlink_rcv_skb+0x232/0x4b0 [ 281.487607][T12493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.487651][T12493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.487698][T12493] ? down_read+0x272/0x2e0 [ 281.487717][T12493] ? genl_rcv+0xd/0x40 [ 281.487750][T12493] genl_rcv+0x28/0x40 [ 281.487779][T12493] netlink_unicast+0x80f/0x9b0 [ 281.487811][T12493] ? __pfx_netlink_unicast+0x10/0x10 [ 281.487836][T12493] ? netlink_sendmsg+0x650/0xb40 [ 281.487861][T12493] ? skb_put+0x11b/0x210 [ 281.487893][T12493] netlink_sendmsg+0x813/0xb40 [ 281.487929][T12493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.487958][T12493] ? aa_sock_msg_perm+0xf1/0x1b0 [ 281.487992][T12493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.488021][T12493] ____sys_sendmsg+0x972/0x9f0 [ 281.488061][T12493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.488095][T12493] ? import_iovec+0x73/0xa0 [ 281.488122][T12493] ___sys_sendmsg+0x2a5/0x360 [ 281.488153][T12493] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.488221][T12493] ? __fget_files+0x2a/0x420 [ 281.488240][T12493] ? __fget_files+0x3a0/0x420 [ 281.488271][T12493] __x64_sys_sendmsg+0x1bd/0x2a0 [ 281.488305][T12493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.488346][T12493] ? __pfx_ksys_write+0x10/0x10 [ 281.488384][T12493] do_syscall_64+0x14d/0xf80 [ 281.488527][T12493] ? trace_irq_disable+0x3b/0x150 [ 281.488549][T12493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.488577][T12493] ? clear_bhb_loop+0x40/0x90 [ 281.488606][T12493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.488631][T12493] RIP: 0033:0x7f0db5f9c819 [ 281.488654][T12493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.488675][T12493] RSP: 002b:00007f0db6ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.488700][T12493] RAX: ffffffffffffffda RBX: 00007f0db6215fa0 RCX: 00007f0db5f9c819 [ 281.488718][T12493] RDX: 0000000020004044 RSI: 0000200000000180 RDI: 0000000000000003 [ 281.488734][T12493] RBP: 00007f0db6ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 281.488749][T12493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.488763][T12493] R13: 00007f0db6216038 R14: 00007f0db6215fa0 R15: 00007ffcdfbd91f8 [ 281.488802][T12493] [ 281.950609][T12499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2008'. [ 282.069815][T12510] macsec0: left allmulticast mode [ 282.088849][T12512] openvswitch: netlink: Message has 8 unknown bytes. [ 282.095641][T12512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.149990][T12514] netlink: 'syz.0.2012': attribute type 11 has an invalid length. [ 282.158119][T12514] netlink: 'syz.0.2012': attribute type 11 has an invalid length. [ 282.165983][T12514] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2012'. [ 282.207235][T12515] netlink: 'syz.3.2011': attribute type 5 has an invalid length. [ 282.222529][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2011'. [ 282.253009][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 282.283787][T12524] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2015'. [ 282.302549][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2014'. [ 282.450031][T12535] FAULT_INJECTION: forcing a failure. [ 282.450031][T12535] name failslab, interval 1, probability 0, space 0, times 0 [ 282.486406][T12535] CPU: 1 UID: 0 PID: 12535 Comm: syz.1.2020 Not tainted syzkaller #0 PREEMPT(full) [ 282.486438][T12535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 282.486451][T12535] Call Trace: [ 282.486460][T12535] [ 282.486469][T12535] dump_stack_lvl+0xe8/0x150 [ 282.486507][T12535] should_fail_ex+0x412/0x560 [ 282.486553][T12535] should_failslab+0xa8/0x100 [ 282.486585][T12535] __kmalloc_cache_noprof+0x88/0x660 [ 282.486614][T12535] ? nl80211_prepare_wdev_dump+0x55f/0x6a0 [ 282.486639][T12535] ? nl80211_dump_station+0x430/0xdd0 [ 282.486660][T12535] ? __kmalloc_cache_noprof+0x15b/0x660 [ 282.486691][T12535] nl80211_dump_station+0x430/0xdd0 [ 282.486717][T12535] ? kasan_save_track+0x3e/0x80 [ 282.486753][T12535] ? __pfx_nl80211_dump_station+0x10/0x10 [ 282.486817][T12535] ? trace_kmalloc+0x2a/0x110 [ 282.486845][T12535] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 282.486882][T12535] genl_dumpit+0x10b/0x1b0 [ 282.486919][T12535] netlink_dump+0x722/0xe80 [ 282.486955][T12535] ? __pfx_netlink_dump+0x10/0x10 [ 282.487004][T12535] ? genl_start+0x499/0x6c0 [ 282.487044][T12535] __netlink_dump_start+0x5cb/0x7e0 [ 282.487078][T12535] genl_family_rcv_msg_dumpit+0x213/0x310 [ 282.487114][T12535] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 282.487146][T12535] ? genl_get_cmd+0x7f4/0x930 [ 282.487183][T12535] ? __pfx_genl_start+0x10/0x10 [ 282.487211][T12535] ? __pfx_genl_dumpit+0x10/0x10 [ 282.487240][T12535] ? __pfx_genl_done+0x10/0x10 [ 282.487278][T12535] ? __lock_acquire+0x6b5/0x2cf0 [ 282.487314][T12535] genl_rcv_msg+0x5e8/0x7a0 [ 282.487353][T12535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.487384][T12535] ? __pfx_nl80211_dump_station+0x10/0x10 [ 282.487408][T12535] ? __lock_acquire+0x6b5/0x2cf0 [ 282.487450][T12535] netlink_rcv_skb+0x232/0x4b0 [ 282.487475][T12535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.487509][T12535] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.487562][T12535] ? down_read+0x272/0x2e0 [ 282.487581][T12535] ? genl_rcv+0xd/0x40 [ 282.487614][T12535] genl_rcv+0x28/0x40 [ 282.487642][T12535] netlink_unicast+0x80f/0x9b0 [ 282.487676][T12535] ? __pfx_netlink_unicast+0x10/0x10 [ 282.487701][T12535] ? netlink_sendmsg+0x650/0xb40 [ 282.487725][T12535] ? skb_put+0x11b/0x210 [ 282.487757][T12535] netlink_sendmsg+0x813/0xb40 [ 282.487794][T12535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.487825][T12535] ? aa_sock_msg_perm+0xf1/0x1b0 [ 282.487862][T12535] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.487892][T12535] ____sys_sendmsg+0x972/0x9f0 [ 282.487934][T12535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.487977][T12535] ? import_iovec+0x73/0xa0 [ 282.488008][T12535] ___sys_sendmsg+0x2a5/0x360 [ 282.488046][T12535] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.488115][T12535] ? __fget_files+0x2a/0x420 [ 282.488134][T12535] ? __fget_files+0x3a0/0x420 [ 282.488167][T12535] __x64_sys_sendmsg+0x1bd/0x2a0 [ 282.488202][T12535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.488244][T12535] ? __pfx_ksys_write+0x10/0x10 [ 282.488295][T12535] do_syscall_64+0x14d/0xf80 [ 282.488325][T12535] ? trace_irq_disable+0x3b/0x150 [ 282.488343][T12535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.488365][T12535] ? clear_bhb_loop+0x40/0x90 [ 282.488391][T12535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.488412][T12535] RIP: 0033:0x7f0db5f9c819 [ 282.488432][T12535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.488452][T12535] RSP: 002b:00007f0db6ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.488474][T12535] RAX: ffffffffffffffda RBX: 00007f0db6215fa0 RCX: 00007f0db5f9c819 [ 282.488490][T12535] RDX: 0000000020004044 RSI: 0000200000000180 RDI: 0000000000000003 [ 282.488504][T12535] RBP: 00007f0db6ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 282.488517][T12535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.488529][T12535] R13: 00007f0db6216038 R14: 00007f0db6215fa0 R15: 00007ffcdfbd91f8 [ 282.488591][T12535] [ 282.942333][T12544] netlink: 'syz.2.2023': attribute type 1 has an invalid length. [ 282.987922][T12544] netlink: 'syz.2.2023': attribute type 3 has an invalid length. [ 283.017671][T12544] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2023'. [ 283.211134][T12560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2028'. [ 283.244830][T12563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2027'. [ 283.262821][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'. [ 283.351034][T12552] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 283.381523][T12552] bond5 (unregistering): Released all slaves [ 283.486036][T12586] netlink: 'syz.3.2032': attribute type 8 has an invalid length. [ 286.153420][T12567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.485886][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'. [ 286.604281][T12645] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2053'. [ 286.626734][T12645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2053'. [ 287.135131][ T9547] tipc: Subscription rejected, illegal request [ 287.205502][T12682] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.2059'. [ 287.382681][T12688] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 287.433817][T12698] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 287.466692][T12688] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.523083][T12698] bond4: (slave ip6gretap1): making interface the new active one [ 287.537381][T12698] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 287.583449][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 287.634899][T12705] netlink: 'syz.2.2065': attribute type 1 has an invalid length. [ 287.813301][T12716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2070'. [ 288.280237][T12723] __nla_validate_parse: 2 callbacks suppressed [ 288.280256][T12723] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2073'. [ 288.465192][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'. [ 288.531798][T12752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.940044][T12777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2085'. [ 289.233239][T12787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2089'. [ 289.364327][T12790] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 289.387746][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2088'. [ 289.629288][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 289.690269][T12808] gtp0: entered promiscuous mode [ 289.712356][T12802] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2093'. [ 289.727901][T12808] gtp0: entered allmulticast mode [ 289.739719][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2093'. [ 289.811920][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2097'. [ 289.838019][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2097'. [ 289.879880][T12819] wg1: left promiscuous mode [ 289.921052][T12819] syztnl1: entered allmulticast mode [ 289.944460][T12819] bridge0: entered allmulticast mode [ 290.001572][T12819] bridge1: entered allmulticast mode [ 290.010993][T12819] bond3: left promiscuous mode [ 290.021883][T12819] bond3: entered allmulticast mode [ 290.038722][T12819] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 290.047792][T12819] : entered allmulticast mode [ 290.053021][T12819] erspan1: entered allmulticast mode [ 290.075277][T12819] macvlan2: entered allmulticast mode [ 290.406100][T12845] syzkaller1: entered promiscuous mode [ 290.539380][T12858] syzkaller1: entered promiscuous mode [ 290.730172][T12868] netlink: 'syz.3.2110': attribute type 4 has an invalid length. [ 290.982428][T12888] sit0: entered promiscuous mode [ 291.018767][T12888] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 291.712846][T12914] syzkaller1: entered promiscuous mode [ 292.380260][T12965] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 294.919626][T12935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.087684][T13048] __nla_validate_parse: 24 callbacks suppressed [ 295.087706][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2140'. [ 295.119562][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2140'. [ 295.144683][T13055] ipvlan3: entered allmulticast mode [ 295.152118][T13055] batman_adv: batadv0: Adding interface: ipvlan3 [ 295.160609][T13055] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.187610][T13055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.199625][T13055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.211030][T13055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 295.233915][T13055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.252530][T13055] batman_adv: batadv0: Interface activated: ipvlan3 [ 295.269316][T13056] veth1_macvtap: default FDB implementation only supports local addresses [ 295.555480][T13082] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2150'. [ 295.583130][ T30] audit: type=1107 audit(1776061941.364:3): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 295.601990][T13086] syzkaller1: entered promiscuous mode [ 298.447111][T13070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.629663][T13099] vlan1: entered promiscuous mode [ 298.634952][T13099] bridge0: entered promiscuous mode [ 298.653134][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2158'. [ 298.662381][T13104] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2158'. [ 298.690017][T13104] veth7: entered promiscuous mode [ 299.121409][T13126] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2167'. [ 299.221276][T13132] nbd: must specify at least one socket [ 299.765192][T13168] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2180'. [ 300.228427][T13183] syzkaller1: entered promiscuous mode [ 302.274776][T13134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.483127][ T5897] IPVS: starting estimator thread 0... [ 302.523111][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2189'. [ 302.577608][T13196] IPVS: using max 30 ests per chain, 72000 per kthread [ 302.617362][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2192'. [ 302.684847][T13203] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 302.978417][T13218] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2199'. [ 303.361276][T13238] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.2203'. [ 303.373824][T13232] netlink: 'syz.1.2203': attribute type 29 has an invalid length. [ 303.569478][T13257] netlink: 'syz.2.2211': attribute type 3 has an invalid length. [ 303.571964][T13255] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2212'. [ 303.614779][T13245] bond4: Removing last ns target with arp_interval on [ 303.777529][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 303.925812][T13270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.291468][T13304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2221'. [ 304.380451][T13309] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.2224'. [ 304.608420][T13325] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2227'. [ 304.644718][T13326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 304.805173][T13335] xfrm1: entered promiscuous mode [ 304.817599][T13335] xfrm1: entered allmulticast mode [ 304.968273][T13346] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 304.988549][T13346] ipip1: entered allmulticast mode [ 304.993959][T13346] bond4: entered allmulticast mode [ 305.038858][T13346] xfrm1: left promiscuous mode [ 305.120174][T13351] syzkaller1: entered promiscuous mode [ 305.541532][T13386] delete_channel: no stack [ 305.549475][T13380] syzkaller0: entered promiscuous mode [ 305.569070][T13380] syzkaller0: entered allmulticast mode [ 305.663074][T13394] syzkaller0: entered promiscuous mode [ 305.668888][T13394] syzkaller0: entered allmulticast mode [ 305.722403][T13401] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 305.946858][T13406] h: entered promiscuous mode [ 306.006357][T13414] syzkaller1: entered promiscuous mode [ 306.222684][T13428] netlink: 'syz.2.2262': attribute type 1 has an invalid length. [ 306.250270][T13435] hashlimit_mt_check_common: 1 callbacks suppressed [ 306.250291][T13435] xt_hashlimit: invalid interval [ 306.412735][T13445] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 306.424115][T13445] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 306.643780][T13435] syzkaller0: entered promiscuous mode [ 306.678396][T13435] syzkaller0: entered allmulticast mode [ 307.111648][T13486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.373032][T13503] netlink: 'syz.4.2283': attribute type 1 has an invalid length. [ 307.504170][T13500] "syz.4.2283" (13500) uses obsolete ecb(arc4) skcipher [ 307.649436][T13523] __nla_validate_parse: 11 callbacks suppressed [ 307.649458][T13523] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2288'. [ 307.804427][T13533] netlink: 320 bytes leftover after parsing attributes in process `syz.4.2292'. [ 307.820404][T13529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.869161][T13535] netlink: 'syz.2.2295': attribute type 10 has an invalid length. [ 307.949204][T13535] bridge_slave_1: left allmulticast mode [ 307.961452][T13535] bridge_slave_1: left promiscuous mode [ 307.970699][T13535] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.026109][T13535] bridge_slave_1: entered allmulticast mode [ 308.078014][T13535] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 308.586682][T13575] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 308.603230][T13575] x_tables: duplicate underflow at hook 1 [ 308.821051][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 308.841719][T13585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2316'. [ 308.893139][T13589] syzkaller1: entered promiscuous mode [ 309.268310][T13615] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2325'. [ 309.286165][T13615] openvswitch: netlink: Flow key attr not present in new flow. [ 309.297930][T13617] lo: entered allmulticast mode [ 309.302984][T13617] tunl0: entered allmulticast mode [ 309.317055][T13617] gre0: entered allmulticast mode [ 309.338154][T13617] gretap0: entered allmulticast mode [ 309.343633][T13617] erspan0: entered allmulticast mode [ 309.360485][T13617] ip_vti0: entered allmulticast mode [ 309.366647][T13617] ip6_vti0: entered allmulticast mode [ 309.372898][T13617] sit0: left promiscuous mode [ 309.378033][T13617] sit0: entered allmulticast mode [ 309.383617][T13617] ip6tnl0: entered allmulticast mode [ 309.389260][T13617] ip6gre0: entered allmulticast mode [ 309.396893][T13617] syz_tun: entered allmulticast mode [ 309.403069][T13617] ip6gretap0: entered allmulticast mode [ 309.411483][T13623] netlink: 'syz.1.2327': attribute type 1 has an invalid length. [ 309.420548][T13617] vcan0: entered allmulticast mode [ 309.426129][T13617] team0: entered allmulticast mode [ 309.432067][T13617] team_slave_0: entered allmulticast mode [ 309.438586][T13617] team_slave_1: entered allmulticast mode [ 309.454792][T13617] dummy0: entered allmulticast mode [ 309.467077][T13617] nlmon0: entered allmulticast mode [ 309.479651][T13617] caif0: entered allmulticast mode [ 309.498833][T13617] batadv0: entered allmulticast mode [ 309.511162][T13617] vxcan0: entered allmulticast mode [ 309.520918][T13617] vxcan1: entered allmulticast mode [ 309.529299][T13629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2328'. [ 309.538457][T13617] wg0: entered allmulticast mode [ 309.561251][T13617] wg1: entered allmulticast mode [ 309.574536][T13617] wg2: entered allmulticast mode [ 309.590781][T13617] veth0_to_bridge: entered allmulticast mode [ 309.606415][T13617] bridge_slave_0: entered allmulticast mode [ 309.614976][T13617] veth1_to_bridge: entered allmulticast mode [ 309.621651][T13617] bridge_slave_1: entered allmulticast mode [ 309.628967][T13617] veth0_to_bond: entered allmulticast mode [ 309.635303][T13617] veth1_to_bond: entered allmulticast mode [ 309.642032][T13617] veth0_to_team: entered allmulticast mode [ 309.651315][T13617] veth1_to_team: entered allmulticast mode [ 309.658133][T13617] veth0_to_batadv: entered allmulticast mode [ 309.664451][T13617] batadv_slave_0: entered allmulticast mode [ 309.671011][T13617] veth1_to_batadv: entered allmulticast mode [ 309.677840][T13617] veth0_to_hsr: entered allmulticast mode [ 309.683889][T13617] hsr_slave_0: entered allmulticast mode [ 309.690285][T13617] veth1_to_hsr: entered allmulticast mode [ 309.696310][T13617] hsr_slave_1: entered allmulticast mode [ 309.702620][T13617] hsr0: entered allmulticast mode [ 309.709026][T13617] veth1_virt_wifi: entered allmulticast mode [ 309.715344][T13617] veth0_virt_wifi: entered allmulticast mode [ 309.722417][T13617] virt_wifi0: entered allmulticast mode [ 309.728669][T13617] veth1_vlan: entered allmulticast mode [ 309.734551][T13617] veth0_vlan: entered allmulticast mode [ 309.740785][T13617] vlan0: entered allmulticast mode [ 309.746302][T13617] vlan1: entered allmulticast mode [ 309.752080][T13617] macvlan0: entered allmulticast mode [ 309.758027][T13617] macvlan1: entered allmulticast mode [ 309.763691][T13617] ipvlan0: entered allmulticast mode [ 309.769959][T13617] ipvlan1: entered allmulticast mode [ 309.775542][T13617] veth1_macvtap: entered allmulticast mode [ 309.781987][T13617] veth0_macvtap: entered allmulticast mode [ 309.788492][T13617] macvtap0: entered allmulticast mode [ 309.794179][T13617] macsec0: entered allmulticast mode [ 309.800205][T13617] geneve0: entered allmulticast mode [ 309.805807][T13617] geneve1: entered allmulticast mode [ 309.811819][T13617] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 309.819770][T13617] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 309.828815][T13617] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 309.837870][T13617] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 309.845586][T13617] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 309.853343][T13617] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 309.872161][T13617] : entered allmulticast mode [ 309.885689][T13617] vxlan0: entered allmulticast mode [ 309.891849][T13617] sit1: entered allmulticast mode [ 309.905197][T13617] bridge0: entered allmulticast mode [ 309.916948][T13617] bridge1: entered allmulticast mode [ 309.926113][T13617] bond2: left promiscuous mode [ 309.936002][T13617] bond2: entered allmulticast mode [ 309.947121][T13617] bond3: entered allmulticast mode [ 309.962645][T13617] geneve2: entered allmulticast mode [ 309.973000][T13617] bond4: entered allmulticast mode [ 309.980045][T13617] gretap1: entered allmulticast mode [ 310.008776][T13617] sit2: entered allmulticast mode [ 310.031592][T13617] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 310.042605][T13617] gretap2: left promiscuous mode [ 310.050453][T13617] ip6tnl1: entered allmulticast mode [ 310.056175][T13617] bridge2: entered allmulticast mode [ 310.062731][T13617] bridge3: entered allmulticast mode [ 310.069401][T13617] mac80211_hwsim hwsim17 wlan2: entered allmulticast mode [ 310.077971][T13617] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 310.088196][T13617] : entered allmulticast mode [ 310.093164][T13617] mac80211_hwsim hwsim19 wlan3: entered allmulticast mode [ 310.101060][T13613] syzkaller0: entered promiscuous mode [ 310.148412][T13623] bond3: entered promiscuous mode [ 310.153913][T13623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.217703][T13633] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.233966][T13633] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 310.244686][T13633] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 310.257174][T13633] bond3: (slave ip6gre1): making interface the new active one [ 310.265636][T13633] ip6gre1: entered promiscuous mode [ 310.273262][T13633] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 310.283864][ T9547] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.294454][ T9547] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 310.305375][T13667] netlink: 'syz.0.2330': attribute type 7 has an invalid length. [ 310.319012][ T9547] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.330108][ T9547] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.339316][ T9547] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 310.348801][ T9547] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.396924][T13670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2331'. [ 310.406436][T13670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2331'. [ 310.417991][T13667] netlink: 'syz.0.2330': attribute type 7 has an invalid length. [ 310.427137][ T9547] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.477565][ T9547] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 310.509798][ T9547] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.587800][ T9547] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.596842][ T9547] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 310.651775][ T9547] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.686146][T13686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2335'. [ 310.840541][T13692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2338'. [ 310.853665][T13696] syzkaller0: entered promiscuous mode [ 310.876637][T13696] syzkaller0: entered allmulticast mode [ 311.032193][T13712] xt_hashlimit: size too large, truncated to 1048576 [ 311.310361][T13728] netlink: 'syz.0.2344': attribute type 1 has an invalid length. [ 311.370222][T13730] netlink: 'syz.3.2347': attribute type 39 has an invalid length. [ 311.531988][T13735] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 311.665889][T13745] ipvlan7: entered allmulticast mode [ 311.781041][T13749] syzkaller0: entered promiscuous mode [ 311.786802][T13749] syzkaller0: entered allmulticast mode [ 311.955801][T13756] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 312.637624][T13795] openvswitch: netlink: IPv6 tunnel dst address is zero [ 312.685112][T13801] __nla_validate_parse: 10 callbacks suppressed [ 312.685133][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'. [ 312.803788][T13808] block nbd0: not configured, cannot reconfigure [ 312.846810][T13811] bridge_slave_0: left promiscuous mode [ 312.854481][T13811] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.901617][T13813] ipt_rpfilter: unknown options [ 313.090552][T13818] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 313.439532][T13838] macvlan0: left promiscuous mode [ 313.475057][T13838] netlink: 'syz.1.2385': attribute type 2 has an invalid length. [ 313.942646][T13861] vlan2: entered allmulticast mode [ 313.954002][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 314.114107][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 314.144573][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2398'. [ 314.183662][T13875] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 314.250140][T13880] block nbd0: not configured, cannot reconfigure [ 314.340794][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2402'. [ 314.831375][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2415'. [ 314.866980][T13915] bond5: entered promiscuous mode [ 314.872718][T13915] bond5: entered allmulticast mode [ 314.897808][T13918] netlink: 'syz.4.2416': attribute type 16 has an invalid length. [ 314.906481][T13921] netlink: zone id is out of range [ 314.918162][T13920] netlink: zone id is out of range [ 314.923331][T13920] netlink: zone id is out of range [ 314.938301][T13918] netlink: 'syz.4.2416': attribute type 3 has an invalid length. [ 314.946077][T13918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2416'. [ 314.968000][T13921] netlink: zone id is out of range [ 315.099835][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'. [ 315.191824][T13939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.248311][T13939] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2423'. [ 315.373420][T13950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2427'. [ 315.556216][T13960] block nbd0: not configured, cannot reconfigure [ 315.605120][T13964] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003 [ 315.822961][T13977] batman_adv: batadv0: Adding interface: ipvlan4 [ 315.838061][T13977] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.890105][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.904576][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.915243][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 315.928935][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.939256][T13977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 315.950229][T13977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.960537][T13977] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 316.062164][T13987] netlink: 'syz.4.2442': attribute type 9 has an invalid length. [ 316.281728][T13995] netlink: 'syz.2.2445': attribute type 1 has an invalid length. [ 316.294762][T13989] bond5: Removing last ns target with arp_interval on [ 316.313941][T13995] Bluetooth: MGMT ver 1.23 [ 316.375464][T14002] netlink: 'syz.0.2447': attribute type 3 has an invalid length. [ 316.612720][T14014] batman_adv: batadv0: Adding interface: ipvlan5 [ 316.620512][T14014] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.648108][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.659113][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.669861][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 316.681307][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.691792][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 316.734009][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.789211][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 316.805240][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.818228][T14014] batman_adv: batadv0: Not using interface ipvlan5 (retrying later): interface not active [ 317.091731][T14032] netlink: 'syz.2.2463': attribute type 6 has an invalid length. [ 317.135231][T14039] xt_nfacct: accounting object `syz1' does not exist [ 317.164727][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.176825][T14039] syzkaller1: entered promiscuous mode [ 317.187013][T14042] block nbd0: not configured, cannot reconfigure [ 317.310885][T14045] netlink: 'syz.1.2465': attribute type 10 has an invalid length. [ 317.534968][T14051] netlink: 'syz.4.2466': attribute type 3 has an invalid length. [ 317.572948][T14051] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 317.930190][T14067] __nla_validate_parse: 13 callbacks suppressed [ 317.930214][T14067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2470'. [ 318.220715][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2474'. [ 318.373372][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2474'. [ 318.418554][T14099] syzkaller1: entered promiscuous mode [ 318.656575][T14095] syzkaller0: entered promiscuous mode [ 318.666423][T14095] syzkaller0: entered allmulticast mode [ 318.863353][T14121] block nbd0: not configured, cannot reconfigure [ 318.933409][T14124] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.2482'. [ 318.957773][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 318.989083][T14126] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2484'. [ 319.006833][T14128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 319.063795][T14128] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 319.082209][T14128] gretap2: entered promiscuous mode [ 319.101482][T14128] gretap2: entered allmulticast mode [ 319.112046][T14130] bridge_slave_0: invalid flags given to default FDB implementation [ 319.139388][T14140] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2487'. [ 319.331288][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2488'. [ 319.652967][T14145] 8021q: adding VLAN 0 to HW filter on device bond6 [ 319.692287][T14145] bond6 (unregistering): Released all slaves [ 319.790793][T14165] syzkaller0: entered promiscuous mode [ 319.796368][T14165] syzkaller0: entered allmulticast mode [ 319.888596][T14169] block nbd0: not configured, cannot reconfigure [ 320.173849][T14179] FAULT_INJECTION: forcing a failure. [ 320.173849][T14179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.225140][T14179] CPU: 0 UID: 0 PID: 14179 Comm: syz.1.2499 Not tainted syzkaller #0 PREEMPT(full) [ 320.225172][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 320.225185][T14179] Call Trace: [ 320.225194][T14179] [ 320.225203][T14179] dump_stack_lvl+0xe8/0x150 [ 320.225247][T14179] should_fail_ex+0x412/0x560 [ 320.225286][T14179] _copy_from_iter+0x1d3/0x1670 [ 320.225315][T14179] ? sock_alloc_send_pskb+0x896/0x990 [ 320.225353][T14179] ? __pfx__copy_from_iter+0x10/0x10 [ 320.225385][T14179] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 320.225427][T14179] skb_copy_datagram_from_iter+0xf5/0x710 [ 320.225466][T14179] ? skb_put+0x11b/0x210 [ 320.225497][T14179] tun_get_user+0xc38/0x3dd0 [ 320.225538][T14179] ? aa_file_perm+0x192/0x15e0 [ 320.225566][T14179] ? aa_file_perm+0x50e/0x15e0 [ 320.225588][T14179] ? __pfx_tun_get_user+0x10/0x10 [ 320.225612][T14179] ? aa_file_perm+0x192/0x15e0 [ 320.225641][T14179] ? __lock_acquire+0x6b5/0x2cf0 [ 320.225682][T14179] ? ref_tracker_alloc+0x35c/0x4c0 [ 320.225707][T14179] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 320.225736][T14179] ? tun_get+0x1c/0x2f0 [ 320.225768][T14179] ? tun_get+0x1c/0x2f0 [ 320.225793][T14179] ? tun_get+0x1c/0x2f0 [ 320.225823][T14179] tun_chr_write_iter+0x113/0x200 [ 320.225853][T14179] vfs_write+0x61d/0xb90 [ 320.225887][T14179] ? __pfx_vfs_write+0x10/0x10 [ 320.225928][T14179] ? __fget_files+0x2a/0x420 [ 320.225958][T14179] ksys_write+0x150/0x270 [ 320.225986][T14179] ? __pfx_ksys_write+0x10/0x10 [ 320.226023][T14179] do_syscall_64+0x14d/0xf80 [ 320.226054][T14179] ? trace_irq_disable+0x3b/0x150 [ 320.226073][T14179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.226096][T14179] ? clear_bhb_loop+0x40/0x90 [ 320.226123][T14179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.226150][T14179] RIP: 0033:0x7f0db5f9c819 [ 320.226171][T14179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.226190][T14179] RSP: 002b:00007f0db6ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.226221][T14179] RAX: ffffffffffffffda RBX: 00007f0db6215fa0 RCX: 00007f0db5f9c819 [ 320.226238][T14179] RDX: 0000000000000ffe RSI: 0000200000000040 RDI: 0000000000000003 [ 320.226252][T14179] RBP: 00007f0db6ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 320.226266][T14179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.226279][T14179] R13: 00007f0db6216038 R14: 00007f0db6215fa0 R15: 00007ffcdfbd91f8 [ 320.226314][T14179] [ 320.536747][T14186] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2503'. [ 320.554641][T14186] netlink: 'syz.3.2503': attribute type 26 has an invalid length. [ 320.562708][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 320.573243][T14186] netlink: 'syz.3.2503': attribute type 26 has an invalid length. [ 320.811672][T14199] syzkaller1: entered promiscuous mode [ 320.817660][T14199] syzkaller1: entered allmulticast mode [ 320.856943][T14203] block nbd0: not configured, cannot reconfigure [ 320.940488][T14205] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 320.973371][T14205] team1: entered promiscuous mode [ 320.979236][T14205] team1: entered allmulticast mode [ 320.988988][T14205] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 321.034474][T14205] team2: entered promiscuous mode [ 321.048630][T14205] team2: entered allmulticast mode [ 321.281467][T14227] ipvlan4: entered allmulticast mode [ 321.290512][T14227] batman_adv: batadv0: Adding interface: ipvlan4 [ 321.296906][T14227] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.339392][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.354783][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.365722][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 321.376468][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.388437][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 321.399447][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.409883][T14227] batman_adv: batadv0: Interface activated: ipvlan4 [ 322.056842][T14279] netlink: 'syz.3.2531': attribute type 3 has an invalid length. [ 322.074136][T14276] netlink: 'syz.1.2530': attribute type 11 has an invalid length. [ 322.082524][T14276] netlink: 'syz.1.2530': attribute type 4 has an invalid length. [ 322.094527][T14276] netlink: 'syz.1.2530': attribute type 5 has an invalid length. [ 322.114327][T14276] netlink: 'syz.1.2530': attribute type 6 has an invalid length. [ 322.143377][T14276] netlink: 'syz.1.2530': attribute type 11 has an invalid length. [ 322.158972][T14276] netlink: 'syz.1.2530': attribute type 4 has an invalid length. [ 322.166750][T14276] netlink: 'syz.1.2530': attribute type 5 has an invalid length. [ 322.190234][T14276] netlink: 'syz.1.2530': attribute type 6 has an invalid length. [ 322.199126][T14276] netlink: 'syz.1.2530': attribute type 11 has an invalid length. [ 322.207087][T14276] netlink: 'syz.1.2530': attribute type 4 has an invalid length. [ 322.216526][T14276] netlink: 'syz.1.2530': attribute type 11 has an invalid length. [ 322.225351][T14276] netlink: 'syz.1.2530': attribute type 11 has an invalid length. [ 322.234806][T14276] netlink: 'syz.1.2530': attribute type 11 has an invalid length. [ 322.243627][T14276] netlink: 'syz.1.2530': attribute type 11 has an invalid length. [ 322.289968][T14276] netlink: 'syz.1.2530': attribute type 11 has an invalid length. [ 322.320252][T14276] netlink: 'syz.1.2530': attribute type 11 has an invalid length. [ 322.333182][T14287] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.335047][T14276] netlink: 'syz.1.2530': attribute type 11 has an invalid length. [ 322.575168][T14310] syzkaller1: entered promiscuous mode [ 322.594057][T14310] syzkaller1: entered allmulticast mode [ 322.613994][T14304] syzkaller0: entered promiscuous mode [ 322.619687][T14304] syzkaller0: entered allmulticast mode [ 323.028776][T14332] __nla_validate_parse: 81 callbacks suppressed [ 323.028797][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2545'. [ 323.063455][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2540'. [ 323.092399][T14337] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2546'. [ 323.106382][T14337] syzkaller1: entered promiscuous mode [ 323.117601][T14337] syzkaller1: entered allmulticast mode [ 323.249316][T14340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2547'. [ 323.275698][T14344] syzkaller1: entered promiscuous mode [ 323.283886][T14344] syzkaller1: entered allmulticast mode [ 323.385493][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 323.401704][T14347] wireguard: wg1: Could not create IPv4 socket [ 323.412006][T14347] wg1: entered promiscuous mode [ 323.514044][T14348] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.570953][T14359] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2553'. [ 323.583737][T14359] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2553'. [ 323.633517][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2555'. [ 323.655680][T14364] openvswitch: netlink: Flow actions attr not present in new flow. [ 323.836709][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2558'. [ 323.937758][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'. [ 324.148152][T14392] wireguard: wg1: Could not create IPv4 socket [ 324.316092][T14396] veth2: entered allmulticast mode [ 324.335670][T14396] veth3: entered allmulticast mode [ 324.351991][T14396] veth4: entered allmulticast mode [ 324.375396][T14396] veth5: entered allmulticast mode [ 324.395387][T14396] bond5: left promiscuous mode [ 324.423879][T14396] bridge2: entered allmulticast mode [ 324.440113][T14396] gretap2: left promiscuous mode [ 324.455078][T14396] team1: left promiscuous mode [ 324.469060][T14396] team2: left promiscuous mode [ 324.475156][T14408] openvswitch: netlink: Multiple metadata blocks provided [ 324.483463][T14396] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 324.505660][T14402] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 324.755259][T14420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.003832][T14432] block nbd0: Unsupported socket: should be TCP or UNIX. [ 325.319239][T14448] team0: left promiscuous mode [ 325.331735][T14448] team_slave_0: left promiscuous mode [ 325.343033][T14448] team_slave_1: left promiscuous mode [ 325.355406][T14448] bond2: left promiscuous mode [ 325.372657][T14448] team0: entered allmulticast mode [ 325.383880][T14442] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 325.393123][T14448] wg1: left promiscuous mode [ 325.422381][T14448] bond3: left promiscuous mode [ 325.427245][T14448] bond3: entered allmulticast mode [ 325.458804][T14448] gre1: entered allmulticast mode [ 325.474688][T14448] gretap1: entered allmulticast mode [ 325.500673][T14448] veth0: entered allmulticast mode [ 325.506553][T14448] veth1: entered allmulticast mode [ 325.522260][T14448] mac80211_hwsim hwsim15 wlan3: entered allmulticast mode [ 325.551936][T14448] ip6tnl1: entered allmulticast mode [ 325.568119][T14448] ipip0: entered allmulticast mode [ 325.579500][T14448] veth2: entered allmulticast mode [ 325.600189][T14448] veth3: entered allmulticast mode [ 325.605697][T14448] gtp0: left promiscuous mode [ 325.632203][T14448] veth4: entered allmulticast mode [ 325.643378][T14448] veth5: entered allmulticast mode [ 325.649338][T14448] veth6: entered allmulticast mode [ 325.654786][T14448] veth7: left promiscuous mode [ 325.659764][T14448] veth7: entered allmulticast mode [ 325.665282][T14448] h: left promiscuous mode [ 325.670186][T14448] h: entered allmulticast mode [ 325.675218][T14448] bond4: entered allmulticast mode [ 325.681072][T14448] bridge2: entered allmulticast mode [ 325.686547][T14448] mac80211_hwsim hwsim23 wlan4: entered allmulticast mode [ 325.694860][T14448] sit1: entered allmulticast mode [ 325.702854][T14448] ipvlan8: entered allmulticast mode [ 325.709248][T14448] veth8: entered allmulticast mode [ 325.714623][T14448] veth9: entered allmulticast mode [ 325.751542][T14448] bond5: entered allmulticast mode [ 325.760151][T14448] veth10: entered allmulticast mode [ 325.765629][T14448] veth11: entered allmulticast mode [ 325.772722][T14295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 325.791422][T14295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 325.816009][T14295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 325.862223][T14295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 326.175361][T14490] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 326.189338][T14490] bond6 (unregistering): Released all slaves [ 326.216066][T14495] validate_nla: 192 callbacks suppressed [ 326.216088][T14495] netlink: 'syz.0.2599': attribute type 64 has an invalid length. [ 326.247869][T14494] bond6 (unregistering): Released all slaves [ 326.561703][T14516] wg1: entered promiscuous mode [ 326.580258][T14506] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 327.288446][T14571] syzkaller1: entered promiscuous mode [ 327.736083][T14599] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 328.204190][T14626] __nla_validate_parse: 22 callbacks suppressed [ 328.204211][T14626] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2643'. [ 328.328066][T14633] netlink: 'syz.0.2646': attribute type 2 has an invalid length. [ 328.340921][T14630] syzkaller1: entered promiscuous mode [ 328.368104][T14636] netlink: 'syz.3.2647': attribute type 10 has an invalid length. [ 328.376004][T14636] netlink: 396 bytes leftover after parsing attributes in process `syz.3.2647'. [ 328.387730][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2646'. [ 328.522995][T14641] syzkaller1: entered promiscuous mode [ 328.528592][T14641] syzkaller1: entered allmulticast mode [ 328.714017][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 328.725085][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 329.070264][T14678] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.085061][T14679] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.203140][T14684] syzkaller1: entered promiscuous mode [ 329.791889][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'. [ 329.817541][T14722] netlink: 'syz.4.2676': attribute type 7 has an invalid length. [ 329.825333][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2676'. [ 329.852013][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'. [ 329.864703][T14722] netlink: 'syz.4.2676': attribute type 7 has an invalid length. [ 329.875330][T14727] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2676'. [ 329.888647][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2676'. [ 329.930633][T14722] netlink: 'syz.4.2676': attribute type 1 has an invalid length. [ 331.095630][T14806] netlink: 'syz.3.2701': attribute type 10 has an invalid length. [ 331.644919][T14835] netlink: 'syz.4.2715': attribute type 10 has an invalid length. [ 331.875865][T14853] ipt_rpfilter: unknown options [ 332.136973][T14874] netlink: Unknown conntrack attr (0) [ 332.179600][T14877] netlink: 'syz.2.2727': attribute type 10 has an invalid length. [ 332.205713][T14879] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 332.900582][T14915] syzkaller0: entered promiscuous mode [ 332.916462][T14915] syzkaller0: entered allmulticast mode [ 332.980060][T14919] bond7: Invalid ad_actor_system MAC address. [ 332.986210][T14919] bond7: option ad_actor_system: invalid value (1) [ 333.029381][T14919] bond7 (unregistering): Released all slaves [ 333.286742][T14932] __nla_validate_parse: 20 callbacks suppressed [ 333.286774][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2747'. [ 333.355544][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 333.469277][T14939] netlink: 'syz.4.2750': attribute type 12 has an invalid length. [ 333.477254][T14939] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.2750'. [ 333.601430][T14947] netlink: 'syz.4.2755': attribute type 10 has an invalid length. [ 333.611497][T14947] netlink: 396 bytes leftover after parsing attributes in process `syz.4.2755'. [ 333.670625][T14949] sctp: [Deprecated]: syz.3.2753 (pid 14949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.670625][T14949] Use struct sctp_sack_info instead [ 333.720326][T14955] xt_TPROXY: Can be used only with -p tcp or -p udp [ 333.959859][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 334.031622][T14975] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 334.070803][T14975] bond6 (unregistering): Released all slaves [ 334.559362][T14999] pim6reg: entered allmulticast mode [ 334.762500][T15014] ipvlan9: entered allmulticast mode [ 334.928652][T15017] syzkaller0: entered promiscuous mode [ 334.961598][T15017] syzkaller0: entered allmulticast mode [ 335.021410][T15031] netlink: 'syz.3.2779': attribute type 10 has an invalid length. [ 335.029669][T15031] netlink: 396 bytes leftover after parsing attributes in process `syz.3.2779'. [ 335.122315][T15038] netlink: 'syz.4.2780': attribute type 8 has an invalid length. [ 335.223917][T15042] FAULT_INJECTION: forcing a failure. [ 335.223917][T15042] name failslab, interval 1, probability 0, space 0, times 0 [ 335.238232][T15042] CPU: 1 UID: 0 PID: 15042 Comm: syz.1.2781 Not tainted syzkaller #0 PREEMPT(full) [ 335.238262][T15042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 335.238276][T15042] Call Trace: [ 335.238284][T15042] [ 335.238293][T15042] dump_stack_lvl+0xe8/0x150 [ 335.238331][T15042] should_fail_ex+0x412/0x560 [ 335.238372][T15042] should_failslab+0xa8/0x100 [ 335.238401][T15042] ? skb_clone+0x212/0x3a0 [ 335.238432][T15042] kmem_cache_alloc_noprof+0x87/0x650 [ 335.238467][T15042] skb_clone+0x212/0x3a0 [ 335.238497][T15042] ? pfkey_broadcast_one+0x7d/0x360 [ 335.238534][T15042] pfkey_broadcast_one+0x9b/0x360 [ 335.238567][T15042] ? pfkey_broadcast+0x39c/0x3e0 [ 335.238604][T15042] pfkey_broadcast+0x3a9/0x3e0 [ 335.238637][T15042] ? pfkey_broadcast+0x48/0x3e0 [ 335.238673][T15042] pfkey_spdflush+0xd8/0x2a0 [ 335.238701][T15042] ? __pfx_pfkey_spdflush+0x10/0x10 [ 335.238722][T15042] ? pfkey_broadcast+0x3c2/0x3e0 [ 335.238770][T15042] pfkey_sendmsg+0xc56/0x1120 [ 335.238810][T15042] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 335.238887][T15042] ? aa_sock_msg_perm+0xf1/0x1b0 [ 335.238924][T15042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.238955][T15042] ____sys_sendmsg+0x972/0x9f0 [ 335.238997][T15042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.239037][T15042] ? import_iovec+0x73/0xa0 [ 335.239068][T15042] ___sys_sendmsg+0x2a5/0x360 [ 335.239105][T15042] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.239176][T15042] ? __fget_files+0x2a/0x420 [ 335.239195][T15042] ? __fget_files+0x3a0/0x420 [ 335.239227][T15042] __x64_sys_sendmsg+0x1bd/0x2a0 [ 335.239261][T15042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.239302][T15042] ? __pfx_ksys_write+0x10/0x10 [ 335.239340][T15042] do_syscall_64+0x14d/0xf80 [ 335.239369][T15042] ? trace_irq_disable+0x3b/0x150 [ 335.239389][T15042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.239411][T15042] ? clear_bhb_loop+0x40/0x90 [ 335.239436][T15042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.239458][T15042] RIP: 0033:0x7f0db5f9c819 [ 335.239479][T15042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.239499][T15042] RSP: 002b:00007f0db6ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.239523][T15042] RAX: ffffffffffffffda RBX: 00007f0db6215fa0 RCX: 00007f0db5f9c819 [ 335.239557][T15042] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 335.239571][T15042] RBP: 00007f0db6ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 335.239585][T15042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.239598][T15042] R13: 00007f0db6216038 R14: 00007f0db6215fa0 R15: 00007ffcdfbd91f8 [ 335.239634][T15042] [ 335.684590][T15057] sctp: [Deprecated]: syz.0.2784 (pid 15057) Use of int in max_burst socket option. [ 335.684590][T15057] Use struct sctp_assoc_value instead [ 335.750998][T15060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2786'. [ 335.826111][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'. [ 335.980303][T15077] FAULT_INJECTION: forcing a failure. [ 335.980303][T15077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.005742][T15075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2792'. [ 336.014598][T15077] CPU: 0 UID: 0 PID: 15077 Comm: syz.3.2793 Not tainted syzkaller #0 PREEMPT(full) [ 336.014686][T15077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 336.014752][T15077] Call Trace: [ 336.014776][T15077] [ 336.014785][T15077] dump_stack_lvl+0xe8/0x150 [ 336.014822][T15077] should_fail_ex+0x412/0x560 [ 336.014899][T15077] _copy_to_user+0x31/0xb0 [ 336.015001][T15077] simple_read_from_buffer+0xe1/0x170 [ 336.015132][T15077] proc_fail_nth_read+0x1bb/0x230 [ 336.015218][T15077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.015310][T15077] ? rw_verify_area+0x2a6/0x4d0 [ 336.015386][T15077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.015477][T15077] vfs_read+0x20c/0xa70 [ 336.015549][T15077] ? fdget_pos+0x246/0x320 [ 336.015618][T15077] ? __pfx___mutex_lock+0x10/0x10 [ 336.015707][T15077] ? __pfx_vfs_read+0x10/0x10 [ 336.015770][T15077] ? __fget_files+0x2a/0x420 [ 336.015843][T15077] ? __fget_files+0x3a0/0x420 [ 336.015890][T15077] ? __fget_files+0x2a/0x420 [ 336.015976][T15077] ksys_read+0x150/0x270 [ 336.016043][T15077] ? __pfx_ksys_read+0x10/0x10 [ 336.016152][T15077] do_syscall_64+0x14d/0xf80 [ 336.016239][T15077] ? trace_irq_disable+0x3b/0x150 [ 336.016302][T15077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.016382][T15077] ? clear_bhb_loop+0x40/0x90 [ 336.016484][T15077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.016549][T15077] RIP: 0033:0x7ffa3a75d04e [ 336.016605][T15077] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 336.016652][T15077] RSP: 002b:00007ffa3b62cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.016718][T15077] RAX: ffffffffffffffda RBX: 00007ffa3b62d6c0 RCX: 00007ffa3a75d04e [ 336.016761][T15077] RDX: 000000000000000f RSI: 00007ffa3b62d0a0 RDI: 0000000000000004 [ 336.016789][T15077] RBP: 00007ffa3b62d090 R08: 0000000000000000 R09: 0000000000000000 [ 336.016853][T15077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.016895][T15077] R13: 00007ffa3aa16038 R14: 00007ffa3aa15fa0 R15: 00007ffccd590608 [ 336.016985][T15077] [ 336.149548][T15082] netlink: 'syz.2.2792': attribute type 6 has an invalid length. [ 336.259798][T15076] netlink: 'syz.1.2790': attribute type 1 has an invalid length. [ 336.467748][T15093] syzkaller1: entered promiscuous mode [ 336.570379][T15085] syzkaller0: entered promiscuous mode [ 336.576114][T15085] syzkaller0: entered allmulticast mode [ 336.676953][T15108] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2801'. [ 336.841719][T15114] netlink: 'syz.0.2803': attribute type 10 has an invalid length. [ 337.790381][T15135] netlink: 'syz.0.2809': attribute type 1 has an invalid length. [ 337.799169][T15135] netlink: 'syz.0.2809': attribute type 1 has an invalid length. [ 338.269134][T15143] netlink: 'syz.1.2811': attribute type 7 has an invalid length. [ 338.310576][T15143] netlink: 'syz.1.2811': attribute type 7 has an invalid length. [ 338.339242][T15143] __nla_validate_parse: 5 callbacks suppressed [ 338.339282][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2811'. [ 338.404952][T15147] syzkaller0: entered promiscuous mode [ 338.415931][T15147] syzkaller0: entered allmulticast mode [ 338.480436][T15147] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2813'. [ 338.570554][T15157] ipvlan3: entered allmulticast mode [ 338.579315][T15157] batman_adv: batadv0: Adding interface: ipvlan3 [ 338.585708][T15157] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.616684][T15157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.638080][T15157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.657604][T15157] batman_adv: batadv0: Interface activated: ipvlan3 [ 338.786241][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2822'. [ 338.898433][T15174] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2825'. [ 338.937102][T15176] ipvlan6: entered allmulticast mode [ 338.954421][T15176] batman_adv: batadv0: Adding interface: ipvlan6 [ 338.963692][T15176] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.989903][T15176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.001572][T15176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.012657][T15176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 339.026622][T15176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.039809][T15176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 339.050134][T15176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.062292][T15176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 339.073213][T15176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.083367][T15176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 339.099540][T15176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.109919][T15176] batman_adv: batadv0: Interface activated: ipvlan6 [ 339.119491][T15179] team0 (unregistering): left promiscuous mode [ 339.135444][T15179] team_slave_0: left promiscuous mode [ 339.147738][T15179] team_slave_1: left promiscuous mode [ 339.153391][T15179] bridge2: left promiscuous mode [ 339.174298][T15179] bridge0: port 4(team0) entered disabled state [ 339.185087][T15185] ksmbd: Unknown IPC event: 8, ignore. [ 339.198035][T15179] team0 (unregistering): Port device team_slave_0 removed [ 339.208224][T15179] team0 (unregistering): Port device team_slave_1 removed [ 339.222314][T15179] team0 (unregistering): Port device bridge2 removed [ 339.356226][T15194] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 339.482785][T15199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.490083][T15199] IPv6: NLM_F_CREATE should be set when creating new route [ 339.497373][T15199] IPv6: NLM_F_CREATE should be set when creating new route [ 339.505181][T15197] ipvlan4: entered allmulticast mode [ 339.518863][T15197] batman_adv: batadv0: Adding interface: ipvlan4 [ 339.531882][T15197] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.538269][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'. [ 339.569173][T15194] openvswitch: netlink: Unknown nsh attribute 0 [ 339.572199][T15197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.587008][T15197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.598188][T15197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 339.608136][T15197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.618367][T15197] batman_adv: batadv0: Interface activated: ipvlan4 [ 340.619927][T15249] netlink: 'syz.4.2844': attribute type 83 has an invalid length. [ 340.890272][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2848'. [ 340.926019][T15259] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2848'. [ 340.948863][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2848'. [ 340.958551][T15259] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2848'. [ 340.987150][T15259] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2848'. [ 341.068072][T15261] ipvlan5: entered allmulticast mode [ 341.079261][T15261] batman_adv: batadv0: Adding interface: ipvlan5 [ 341.085664][T15261] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.177535][T15261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.238219][T15261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.256593][T15261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 341.306922][T15261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.360956][T15261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 341.413971][T15261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.492053][T15261] batman_adv: batadv0: Interface activated: ipvlan5 [ 341.647646][T15280] syzkaller0: entered promiscuous mode [ 341.653318][T15280] syzkaller0: entered allmulticast mode [ 343.363648][T15306] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 343.373447][T15306] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 343.383279][T15306] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 343.507227][T15331] h: entered promiscuous mode [ 344.021688][T15357] __nla_validate_parse: 1 callbacks suppressed [ 344.021708][T15357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2865'. [ 344.244517][T15368] netlink: 'syz.1.2869': attribute type 1 has an invalid length. [ 344.355487][T15368] bond5: entered promiscuous mode [ 344.372292][T15368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 344.428819][T15369] bond5: (slave bridge5): making interface the new active one [ 344.454018][T15369] bridge5: entered promiscuous mode [ 344.466829][T15369] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 344.494656][T15373] netlink: 'syz.0.2870': attribute type 12 has an invalid length. [ 344.507692][T15377] wg1: entered promiscuous mode [ 344.529285][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'. [ 344.851542][T15394] nla_validate_range_unsigned: 55 callbacks suppressed [ 344.851568][T15394] netlink: 'syz.3.2877': attribute type 11 has an invalid length. [ 344.883909][T15394] netlink: 'syz.3.2877': attribute type 11 has an invalid length. [ 344.892802][T15394] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2877'. [ 344.929586][T15398] wg1: left promiscuous mode [ 344.939653][T15398] bridge4: entered allmulticast mode [ 344.945261][T15398] ipvlan4: entered allmulticast mode [ 344.950859][T15398] bond5: entered allmulticast mode [ 344.956223][T15398] ipvlan5: entered allmulticast mode [ 344.965127][T15398] bond6: entered allmulticast mode [ 344.974791][T15398] bridge5: entered allmulticast mode [ 344.980510][T15398] batman_adv: batadv0: Interface deactivated: ipvlan6 [ 345.462922][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2886'. [ 345.510984][T15425] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2887'. [ 345.825018][T15442] syzkaller0: entered promiscuous mode [ 345.912034][T15447] syzkaller0: entered promiscuous mode [ 345.928199][T15447] syzkaller0: entered allmulticast mode [ 346.021400][T15449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2892'. [ 346.040962][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2892'. [ 346.230394][T15458] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 346.284082][T15457] FAULT_INJECTION: forcing a failure. [ 346.284082][T15457] name failslab, interval 1, probability 0, space 0, times 0 [ 346.357777][T15457] CPU: 1 UID: 0 PID: 15457 Comm: syz.1.2894 Not tainted syzkaller #0 PREEMPT(full) [ 346.357808][T15457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 346.357822][T15457] Call Trace: [ 346.357831][T15457] [ 346.357840][T15457] dump_stack_lvl+0xe8/0x150 [ 346.357877][T15457] should_fail_ex+0x412/0x560 [ 346.357918][T15457] should_failslab+0xa8/0x100 [ 346.357949][T15457] __kmalloc_cache_noprof+0x88/0x660 [ 346.357974][T15457] ? __mutex_unlock_slowpath+0x722/0x7d0 [ 346.358008][T15457] ? _request_firmware+0x2a3/0x1780 [ 346.358037][T15457] _request_firmware+0x2a3/0x1780 [ 346.358072][T15457] ? __mutex_lock+0x5ac/0x1300 [ 346.358106][T15457] ? __rtnl_unlock+0xc8/0xf0 [ 346.358135][T15457] ? __pfx__request_firmware+0x10/0x10 [ 346.358157][T15457] ? netdev_run_todo+0xd5c/0xde0 [ 346.358196][T15457] ? __pfx_netdev_run_todo+0x10/0x10 [ 346.358231][T15457] request_firmware+0x36/0x50 [ 346.358260][T15457] reg_reload_regdb+0x95/0x490 [ 346.358284][T15457] ? __nla_parse+0x40/0x60 [ 346.358309][T15457] ? __pfx_reg_reload_regdb+0x10/0x10 [ 346.358333][T15457] ? nl80211_pre_doit+0x4f1/0x930 [ 346.358373][T15457] genl_family_rcv_msg_doit+0x22a/0x330 [ 346.358414][T15457] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 346.358460][T15457] ? bpf_lsm_capable+0x9/0x20 [ 346.358490][T15457] ? security_capable+0x7e/0x2c0 [ 346.358548][T15457] genl_rcv_msg+0x61c/0x7a0 [ 346.358587][T15457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.358623][T15457] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 346.358653][T15457] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 346.358676][T15457] ? __pfx_nl80211_post_doit+0x10/0x10 [ 346.358708][T15457] ? __lock_acquire+0x6b5/0x2cf0 [ 346.358748][T15457] netlink_rcv_skb+0x232/0x4b0 [ 346.358772][T15457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.358804][T15457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.358846][T15457] ? down_read+0x272/0x2e0 [ 346.358864][T15457] ? genl_rcv+0xd/0x40 [ 346.358895][T15457] genl_rcv+0x28/0x40 [ 346.358922][T15457] netlink_unicast+0x80f/0x9b0 [ 346.358953][T15457] ? __pfx_netlink_unicast+0x10/0x10 [ 346.358977][T15457] ? netlink_sendmsg+0x650/0xb40 [ 346.359001][T15457] ? skb_put+0x11b/0x210 [ 346.359033][T15457] netlink_sendmsg+0x813/0xb40 [ 346.359069][T15457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.359098][T15457] ? aa_sock_msg_perm+0xf1/0x1b0 [ 346.359135][T15457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.359165][T15457] ____sys_sendmsg+0x972/0x9f0 [ 346.359205][T15457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.359243][T15457] ? import_iovec+0x73/0xa0 [ 346.359274][T15457] ___sys_sendmsg+0x2a5/0x360 [ 346.359311][T15457] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.359380][T15457] ? __fget_files+0x2a/0x420 [ 346.359399][T15457] ? __fget_files+0x3a0/0x420 [ 346.359429][T15457] __x64_sys_sendmsg+0x1bd/0x2a0 [ 346.359463][T15457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.359503][T15457] ? __pfx_ksys_write+0x10/0x10 [ 346.359542][T15457] do_syscall_64+0x14d/0xf80 [ 346.359573][T15457] ? trace_irq_disable+0x3b/0x150 [ 346.359592][T15457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.359622][T15457] ? clear_bhb_loop+0x40/0x90 [ 346.359650][T15457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.359672][T15457] RIP: 0033:0x7f0db5f9c819 [ 346.359692][T15457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.359712][T15457] RSP: 002b:00007f0db6ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.359735][T15457] RAX: ffffffffffffffda RBX: 00007f0db6215fa0 RCX: 00007f0db5f9c819 [ 346.359752][T15457] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 0000000000000003 [ 346.359765][T15457] RBP: 00007f0db6ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 346.359778][T15457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.359790][T15457] R13: 00007f0db6216038 R14: 00007f0db6215fa0 R15: 00007ffcdfbd91f8 [ 346.359823][T15457] [ 346.359988][T15457] faux_driver regulatory: _request_firmware_prepare: kmalloc(struct firmware) failed [ 347.335706][T15503] syzkaller1: entered promiscuous mode [ 347.369206][T15503] syzkaller1: entered allmulticast mode [ 347.563873][T15516] FAULT_INJECTION: forcing a failure. [ 347.563873][T15516] name failslab, interval 1, probability 0, space 0, times 0 [ 347.614123][T15516] CPU: 1 UID: 0 PID: 15516 Comm: syz.0.2910 Not tainted syzkaller #0 PREEMPT(full) [ 347.614155][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 347.614169][T15516] Call Trace: [ 347.614178][T15516] [ 347.614187][T15516] dump_stack_lvl+0xe8/0x150 [ 347.614223][T15516] should_fail_ex+0x412/0x560 [ 347.614263][T15516] should_failslab+0xa8/0x100 [ 347.614293][T15516] __kmalloc_cache_noprof+0x88/0x660 [ 347.614320][T15516] ? _request_firmware+0x61b/0x1780 [ 347.614350][T15516] _request_firmware+0x61b/0x1780 [ 347.614386][T15516] ? __mutex_lock+0x5ac/0x1300 [ 347.614424][T15516] ? __pfx__request_firmware+0x10/0x10 [ 347.614445][T15516] ? netdev_run_todo+0xd5c/0xde0 [ 347.614482][T15516] ? __pfx_netdev_run_todo+0x10/0x10 [ 347.614525][T15516] request_firmware+0x36/0x50 [ 347.614550][T15516] reg_reload_regdb+0x95/0x490 [ 347.614574][T15516] ? __nla_parse+0x40/0x60 [ 347.614598][T15516] ? __pfx_reg_reload_regdb+0x10/0x10 [ 347.614623][T15516] ? nl80211_pre_doit+0x4f1/0x930 [ 347.614661][T15516] genl_family_rcv_msg_doit+0x22a/0x330 [ 347.614701][T15516] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 347.614746][T15516] ? bpf_lsm_capable+0x9/0x20 [ 347.614776][T15516] ? security_capable+0x7e/0x2c0 [ 347.614816][T15516] genl_rcv_msg+0x61c/0x7a0 [ 347.614853][T15516] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.614881][T15516] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 347.614911][T15516] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 347.614933][T15516] ? __pfx_nl80211_post_doit+0x10/0x10 [ 347.614964][T15516] ? __lock_acquire+0x6b5/0x2cf0 [ 347.615004][T15516] netlink_rcv_skb+0x232/0x4b0 [ 347.615029][T15516] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.615061][T15516] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.615104][T15516] ? down_read+0x272/0x2e0 [ 347.615126][T15516] ? genl_rcv+0xd/0x40 [ 347.615157][T15516] genl_rcv+0x28/0x40 [ 347.615184][T15516] netlink_unicast+0x80f/0x9b0 [ 347.615216][T15516] ? __pfx_netlink_unicast+0x10/0x10 [ 347.615239][T15516] ? netlink_sendmsg+0x650/0xb40 [ 347.615262][T15516] ? skb_put+0x11b/0x210 [ 347.615292][T15516] netlink_sendmsg+0x813/0xb40 [ 347.615327][T15516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.615355][T15516] ? aa_sock_msg_perm+0xf1/0x1b0 [ 347.615390][T15516] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.615418][T15516] ____sys_sendmsg+0x972/0x9f0 [ 347.615457][T15516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.615503][T15516] ? import_iovec+0x73/0xa0 [ 347.615532][T15516] ___sys_sendmsg+0x2a5/0x360 [ 347.615567][T15516] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.615634][T15516] ? __fget_files+0x2a/0x420 [ 347.615653][T15516] ? __fget_files+0x3a0/0x420 [ 347.615683][T15516] __x64_sys_sendmsg+0x1bd/0x2a0 [ 347.615716][T15516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.615756][T15516] ? __pfx_ksys_write+0x10/0x10 [ 347.615793][T15516] do_syscall_64+0x14d/0xf80 [ 347.615822][T15516] ? trace_irq_disable+0x3b/0x150 [ 347.615840][T15516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.615862][T15516] ? clear_bhb_loop+0x40/0x90 [ 347.615889][T15516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.615910][T15516] RIP: 0033:0x7f702af9c819 [ 347.615929][T15516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.615947][T15516] RSP: 002b:00007f702bd9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.615971][T15516] RAX: ffffffffffffffda RBX: 00007f702b215fa0 RCX: 00007f702af9c819 [ 347.615986][T15516] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 0000000000000003 [ 347.616000][T15516] RBP: 00007f702bd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 347.616013][T15516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.616026][T15516] R13: 00007f702b216038 R14: 00007f702b215fa0 R15: 00007ffd1c023168 [ 347.616059][T15516] [ 347.616134][T15516] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 347.711929][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'. [ 347.799585][T15516] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 348.047515][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 348.072553][T15522] netlink: 'syz.1.2912': attribute type 7 has an invalid length. [ 348.101207][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'. [ 348.113486][T15522] netlink: 'syz.1.2912': attribute type 7 has an invalid length. [ 348.453175][T15552] syzkaller0: entered promiscuous mode [ 348.468954][T15552] syzkaller0: entered allmulticast mode [ 348.692595][T15562] netlink: ct family unspecified [ 348.810859][T15568] wireguard: wg1: Could not create IPv4 socket [ 348.868230][T15569] netlink: 'syz.0.2931': attribute type 3 has an invalid length. [ 349.218961][T15584] netlink: 'syz.4.2935': attribute type 1 has an invalid length. [ 349.285674][T15591] __nla_validate_parse: 7 callbacks suppressed [ 349.285697][T15591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2935'. [ 349.306734][T15591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2935'. [ 349.377073][T15596] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2939'. [ 349.389692][T15596] netlink: 'syz.0.2939': attribute type 30 has an invalid length. [ 349.552621][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'. [ 349.689901][T15613] netlink: 'syz.1.2945': attribute type 4 has an invalid length. [ 349.817011][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 349.828966][T15621] syzkaller1: entered promiscuous mode [ 349.834667][T15620] netlink: 'syz.4.2947': attribute type 3 has an invalid length. [ 349.917369][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2947'. [ 349.931125][T15620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2947'. [ 350.039124][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 350.084038][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2950'. [ 350.093348][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2950'. [ 350.258742][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'. [ 350.483864][T15665] netlink: 'syz.0.2963': attribute type 3 has an invalid length. [ 350.524266][T15668] openvswitch: netlink: Duplicate key (type 2). [ 350.643665][T15673] syzkaller1: entered promiscuous mode [ 350.661206][T15673] syzkaller1: entered allmulticast mode [ 351.093799][T15700] syzkaller1: entered promiscuous mode [ 351.199614][T15706] netlink: 'syz.3.2980': attribute type 3 has an invalid length. [ 351.351330][T15718] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 351.769518][T15748] netlink: 'syz.0.2994': attribute type 3 has an invalid length. [ 351.798229][T15751] wg1: left promiscuous mode [ 351.812040][T15751] geneve2: entered allmulticast mode [ 351.824684][T15751] macvlan2: entered allmulticast mode [ 351.830521][T15751] macvlan3: entered allmulticast mode [ 351.836314][T15751] gre1: entered allmulticast mode [ 351.845424][T15751] bond2: left promiscuous mode [ 351.850719][T15751] bridge3: left promiscuous mode [ 351.856476][T15751] bond2: entered allmulticast mode [ 351.866302][T15751] bridge3: entered allmulticast mode [ 351.893408][T15751] bridge4: entered allmulticast mode [ 351.900105][T15751] bond3: entered allmulticast mode [ 351.908782][T15751] gre2: entered allmulticast mode [ 351.914554][T15751] mac80211_hwsim hwsim18 wlan3: entered allmulticast mode [ 351.923343][T15751] bond4: entered allmulticast mode [ 351.930159][T15751] ip6gretap1: entered allmulticast mode [ 351.945216][T15751] bridge5: entered allmulticast mode [ 351.950978][T15751] mac80211_hwsim hwsim22 wlan4: entered allmulticast mode [ 351.959055][T15751] vti0: entered allmulticast mode [ 351.969901][T15763] netlink: 'syz.2.2997': attribute type 1 has an invalid length. [ 351.977781][T15763] netlink: 'syz.2.2997': attribute type 3 has an invalid length. [ 351.988786][T15751] bridge6: entered allmulticast mode [ 351.998499][T15751] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 352.006603][T15751] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 352.015255][T15751] syztnl0: entered allmulticast mode [ 352.021444][T15751] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 352.029763][T15751] mac80211_hwsim hwsim3 pimreg: entered allmulticast mode [ 352.037210][T14295] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 352.046889][T14295] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 352.131367][T14295] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 352.151873][T14295] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 352.197141][T15766] netlink: 'syz.3.2998': attribute type 1 has an invalid length. [ 352.629517][T15792] batadv0: left promiscuous mode [ 352.634747][T15792] bridge0: port 3(batadv0) entered disabled state [ 352.644278][T15792] bridge_slave_0: left promiscuous mode [ 352.650177][T15792] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.659950][T15792] bridge_slave_1: left promiscuous mode [ 352.665863][T15792] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.676324][T15792] bond0: (slave bond_slave_0): Releasing backup interface [ 352.687056][T15792] bond0: (slave bond_slave_1): Releasing backup interface [ 352.696304][T15792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.705351][T15792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.713971][T15792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.780990][T15753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.007892][T15808] __nla_validate_parse: 18 callbacks suppressed [ 355.007917][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'. [ 355.067714][T15811] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 355.094968][T15808] netlink: 'syz.2.3009': attribute type 3 has an invalid length. [ 355.148003][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3014'. [ 355.181339][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3014'. [ 355.202790][T15808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3009'. [ 355.289977][T15828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.321616][T15830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.353663][T15832] sock: sock_set_timeout: `syz.3.3018' (pid 15832) tries to set negative timeout [ 355.425822][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3021'. [ 355.817610][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 355.826619][T15866] netlink: 'syz.2.3032': attribute type 3 has an invalid length. [ 355.886892][T15866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3032'. [ 356.003033][T15878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3035'. [ 356.052237][T15878] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 356.075128][T15878] gretap3: entered promiscuous mode [ 356.090634][T15878] gretap3: entered allmulticast mode [ 356.264684][T15892] gre0: entered promiscuous mode [ 356.384424][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3042'. [ 356.522532][T15905] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3046'. [ 356.556965][T15907] netlink: 'syz.2.3047': attribute type 4 has an invalid length. [ 356.748860][T15920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.779128][T15920] batman_adv: batadv0: Removing interface: ipvlan2 [ 356.845277][T15920] batman_adv: batadv0: Removing interface: ipvlan3 [ 356.875949][T15920] batman_adv: batadv0: Removing interface: ipvlan4 [ 356.897158][T15920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.956469][T15923] wg1: entered promiscuous mode [ 357.031637][T15930] syzkaller1: entered promiscuous mode [ 357.590114][T15967] openvswitch: netlink: Message has 8 unknown bytes. [ 357.597158][T15967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.701075][T15972] syzkaller0: entered promiscuous mode [ 357.706624][T15972] syzkaller0: entered allmulticast mode [ 357.828845][T15974] delete_channel: no stack [ 358.028019][T15988] lo: Caught tx_queue_len zero misconfig [ 358.289995][T16003] FAULT_INJECTION: forcing a failure. [ 358.289995][T16003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.317760][T16003] CPU: 0 UID: 0 PID: 16003 Comm: syz.0.3083 Not tainted syzkaller #0 PREEMPT(full) [ 358.317792][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 358.317806][T16003] Call Trace: [ 358.317815][T16003] [ 358.317824][T16003] dump_stack_lvl+0xe8/0x150 [ 358.317862][T16003] should_fail_ex+0x412/0x560 [ 358.317904][T16003] _copy_from_iter+0x1d3/0x1670 [ 358.317933][T16003] ? rcu_is_watching+0x15/0xb0 [ 358.317971][T16003] ? __pfx__copy_from_iter+0x10/0x10 [ 358.318004][T16003] ? netlink_sendmsg+0x650/0xb40 [ 358.318029][T16003] ? skb_put+0x11b/0x210 [ 358.318060][T16003] netlink_sendmsg+0x6c0/0xb40 [ 358.318095][T16003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.318125][T16003] ? aa_sock_msg_perm+0xf1/0x1b0 [ 358.318162][T16003] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.318191][T16003] ____sys_sendmsg+0x972/0x9f0 [ 358.318220][T16003] ? __lock_acquire+0x6b5/0x2cf0 [ 358.318257][T16003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.318297][T16003] ? import_iovec+0x73/0xa0 [ 358.318327][T16003] ___sys_sendmsg+0x2a5/0x360 [ 358.318362][T16003] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.318444][T16003] __sys_sendmmsg+0x27c/0x4e0 [ 358.318480][T16003] ? __pfx___sys_sendmmsg+0x10/0x10 [ 358.318508][T16003] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 358.318575][T16003] ? ksys_write+0x242/0x270 [ 358.318603][T16003] ? __pfx_ksys_write+0x10/0x10 [ 358.318635][T16003] __x64_sys_sendmmsg+0xa0/0xc0 [ 358.318668][T16003] do_syscall_64+0x14d/0xf80 [ 358.318697][T16003] ? trace_irq_disable+0x3b/0x150 [ 358.318723][T16003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.318753][T16003] ? clear_bhb_loop+0x40/0x90 [ 358.318780][T16003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.318802][T16003] RIP: 0033:0x7f702af9c819 [ 358.318823][T16003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.318843][T16003] RSP: 002b:00007f702bd9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 358.318867][T16003] RAX: ffffffffffffffda RBX: 00007f702b215fa0 RCX: 00007f702af9c819 [ 358.318883][T16003] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 358.318897][T16003] RBP: 00007f702bd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 358.318912][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.318925][T16003] R13: 00007f702b216038 R14: 00007f702b215fa0 R15: 00007ffd1c023168 [ 358.318969][T16003] [ 358.871325][T16017] syzkaller0: entered promiscuous mode [ 358.877053][T16017] syzkaller0: entered allmulticast mode [ 358.931700][T16021] tipc: Failed to obtain node identity [ 358.939101][T16021] tipc: Enabling of bearer rejected, failed to enable media [ 359.080404][T16026] netlink: 'syz.0.3093': attribute type 23 has an invalid length. [ 359.120076][T16026] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 360.020136][T16087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 360.140090][T16087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 360.163297][T16096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.249112][T16100] bond7: entered allmulticast mode [ 360.263238][T16100] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.305128][T16109] __nla_validate_parse: 24 callbacks suppressed [ 360.305152][T16109] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3123'. [ 360.333045][T16087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 360.365086][T16111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.411125][T16112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.441083][T16087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 360.472732][T16116] netlink: 'syz.4.3126': attribute type 4 has an invalid length. [ 360.600119][ T9546] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 360.629252][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3128'. [ 360.638419][ T9546] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 360.678849][ T73] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 360.697305][T16121] FAULT_INJECTION: forcing a failure. [ 360.697305][T16121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.712077][ T73] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 360.727898][T16125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3129'. [ 360.761278][T16121] CPU: 0 UID: 0 PID: 16121 Comm: syz.4.3128 Not tainted syzkaller #0 PREEMPT(full) [ 360.761307][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.761321][T16121] Call Trace: [ 360.761330][T16121] [ 360.761339][T16121] dump_stack_lvl+0xe8/0x150 [ 360.761377][T16121] should_fail_ex+0x412/0x560 [ 360.761418][T16121] _copy_from_iter+0x1d3/0x1670 [ 360.761446][T16121] ? rcu_is_watching+0x15/0xb0 [ 360.761484][T16121] ? __pfx__copy_from_iter+0x10/0x10 [ 360.761516][T16121] ? netlink_sendmsg+0x650/0xb40 [ 360.761541][T16121] ? skb_put+0x11b/0x210 [ 360.761573][T16121] netlink_sendmsg+0x6c0/0xb40 [ 360.761609][T16121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.761638][T16121] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.761675][T16121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.761704][T16121] ____sys_sendmsg+0x972/0x9f0 [ 360.761732][T16121] ? __lock_acquire+0x6b5/0x2cf0 [ 360.761769][T16121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.761812][T16121] ? import_iovec+0x73/0xa0 [ 360.761842][T16121] ___sys_sendmsg+0x2a5/0x360 [ 360.761878][T16121] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.761961][T16121] __sys_sendmmsg+0x27c/0x4e0 [ 360.761999][T16121] ? __pfx___sys_sendmmsg+0x10/0x10 [ 360.762027][T16121] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 360.762087][T16121] ? ksys_write+0x242/0x270 [ 360.762117][T16121] ? __pfx_ksys_write+0x10/0x10 [ 360.762148][T16121] __x64_sys_sendmmsg+0xa0/0xc0 [ 360.762182][T16121] do_syscall_64+0x14d/0xf80 [ 360.762211][T16121] ? trace_irq_disable+0x3b/0x150 [ 360.762231][T16121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.762260][T16121] ? clear_bhb_loop+0x40/0x90 [ 360.762287][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.762309][T16121] RIP: 0033:0x7f332899c819 [ 360.762329][T16121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.762348][T16121] RSP: 002b:00007f332993e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.762373][T16121] RAX: ffffffffffffffda RBX: 00007f3328c15fa0 RCX: 00007f332899c819 [ 360.762389][T16121] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 360.762411][T16121] RBP: 00007f332993e090 R08: 0000000000000000 R09: 0000000000000000 [ 360.762425][T16121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.762437][T16121] R13: 00007f3328c16038 R14: 00007f3328c15fa0 R15: 00007ffe1cb12db8 [ 360.762472][T16121] [ 361.184517][T16136] lo: left promiscuous mode [ 361.233079][T16136] tunl0: left promiscuous mode [ 361.260947][T16136] gre0: left promiscuous mode [ 361.265833][T16136] gretap0: left promiscuous mode [ 361.289856][T16136] erspan0: left promiscuous mode [ 361.295007][T16136] ip_vti0: left promiscuous mode [ 361.337748][T16136] wg1: left promiscuous mode [ 361.464887][T16136] gretap1: left promiscuous mode [ 361.496185][T16140] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 361.520888][T16136] bond3: left promiscuous mode [ 361.529287][T16136] ip6gre1: left promiscuous mode [ 361.548425][T16136] h: left promiscuous mode [ 361.583380][T16136] bond5: left promiscuous mode [ 361.600444][T16136] bridge5: left promiscuous mode [ 361.673023][ T9546] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 361.684294][T16163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3136'. [ 361.697383][ T9546] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 361.736530][ T9546] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 361.772348][T16181] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 361.784453][T16181] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 361.822487][ T9546] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 362.084585][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3147'. [ 362.163946][T16202] rdma_op ffff888055bc49f0 conn xmit_rdma 0000000000000000 [ 362.462945][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3153'. [ 362.489617][T16218] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 362.504669][T16218] syzkaller1: linktype set to 823 [ 362.517306][T16216] netlink: 'syz.0.3154': attribute type 4 has an invalid length. [ 362.542482][T16216] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3154'. [ 362.568340][T16218] netlink: 'syz.1.3155': attribute type 10 has an invalid length. [ 362.591305][T16218] netlink: 396 bytes leftover after parsing attributes in process `syz.1.3155'. [ 362.742684][T16230] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3158'. [ 364.135559][T16263] netlink: 496 bytes leftover after parsing attributes in process `syz.0.3166'. [ 364.530619][T16277] openvswitch: netlink: IP tunnel TTL not specified. [ 365.064487][T16304] netlink: 'syz.1.3181': attribute type 10 has an invalid length. [ 365.183746][T16313] FAULT_INJECTION: forcing a failure. [ 365.183746][T16313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.211566][T16313] CPU: 0 UID: 0 PID: 16313 Comm: syz.3.3184 Not tainted syzkaller #0 PREEMPT(full) [ 365.211599][T16313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 365.211618][T16313] Call Trace: [ 365.211627][T16313] [ 365.211637][T16313] dump_stack_lvl+0xe8/0x150 [ 365.211674][T16313] should_fail_ex+0x412/0x560 [ 365.211715][T16313] _copy_from_iter+0x1d3/0x1670 [ 365.211745][T16313] ? rcu_is_watching+0x15/0xb0 [ 365.211789][T16313] ? __pfx__copy_from_iter+0x10/0x10 [ 365.211810][T16313] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 365.211847][T16313] ? netlink_sendmsg+0x650/0xb40 [ 365.211871][T16313] ? skb_put+0x11b/0x210 [ 365.211903][T16313] netlink_sendmsg+0x6c0/0xb40 [ 365.211949][T16313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.211979][T16313] ? aa_sock_msg_perm+0xf1/0x1b0 [ 365.212015][T16313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.212045][T16313] ____sys_sendmsg+0x972/0x9f0 [ 365.212086][T16313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.212127][T16313] ? import_iovec+0x73/0xa0 [ 365.212156][T16313] ___sys_sendmsg+0x2a5/0x360 [ 365.212192][T16313] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.212262][T16313] ? __fget_files+0x2a/0x420 [ 365.212282][T16313] ? __fget_files+0x3a0/0x420 [ 365.212313][T16313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 365.212346][T16313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.212388][T16313] ? __pfx_ksys_write+0x10/0x10 [ 365.212427][T16313] do_syscall_64+0x14d/0xf80 [ 365.212456][T16313] ? trace_irq_disable+0x3b/0x150 [ 365.212476][T16313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.212499][T16313] ? clear_bhb_loop+0x40/0x90 [ 365.212525][T16313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.212553][T16313] RIP: 0033:0x7ffa3a79c819 [ 365.212573][T16313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.212592][T16313] RSP: 002b:00007ffa3b62d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.212615][T16313] RAX: ffffffffffffffda RBX: 00007ffa3aa15fa0 RCX: 00007ffa3a79c819 [ 365.212631][T16313] RDX: 0000000004000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 365.212645][T16313] RBP: 00007ffa3b62d090 R08: 0000000000000000 R09: 0000000000000000 [ 365.212659][T16313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.212671][T16313] R13: 00007ffa3aa16038 R14: 00007ffa3aa15fa0 R15: 00007ffccd590608 [ 365.212706][T16313] [ 365.522463][T16318] __nla_validate_parse: 4 callbacks suppressed [ 365.522485][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'. [ 365.537727][T16318] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3187'. [ 365.694192][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3189'. [ 365.703538][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3189'. [ 365.841768][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3190'. [ 365.932237][T16329] batadv0: entered promiscuous mode [ 365.939378][T16329] batadv0: left promiscuous mode [ 366.112180][T16344] netlink: 'syz.4.3194': attribute type 4 has an invalid length. [ 366.128588][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3195'. [ 366.173245][T16346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3195'. [ 366.446519][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3200'. [ 366.494519][T16373] siw: device registration error -23 [ 366.511423][T16363] macvtap2: entered allmulticast mode [ 366.520998][T16364] wg1 speed is unknown, defaulting to 1000 [ 366.538621][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3204'. [ 366.539577][T16364] wg1 speed is unknown, defaulting to 1000 [ 366.559331][T16364] wg1 speed is unknown, defaulting to 1000 [ 366.572733][T16364] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 366.605065][T16372] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3204'. [ 366.624016][T16364] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 366.741411][T16364] wg1 speed is unknown, defaulting to 1000 [ 366.776867][T16383] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 366.788780][T16364] wg1 speed is unknown, defaulting to 1000 [ 366.806825][T16364] wg1 speed is unknown, defaulting to 1000 [ 366.829882][T16364] wg1 speed is unknown, defaulting to 1000 [ 366.859632][T16364] wg1 speed is unknown, defaulting to 1000 [ 367.148528][T16406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.159032][T16406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.245175][T16416] : left allmulticast mode [ 367.273914][T14296] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.294534][T14296] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.324406][T14296] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.387019][T14296] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.426393][T16421] lo speed is unknown, defaulting to 1000 [ 367.432763][T16421] lo speed is unknown, defaulting to 1000 [ 367.445572][T16421] lo speed is unknown, defaulting to 1000 [ 367.487026][T16421] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 367.561235][T16421] lo speed is unknown, defaulting to 1000 [ 367.572266][T16421] lo speed is unknown, defaulting to 1000 [ 367.580848][T16421] lo speed is unknown, defaulting to 1000 [ 367.588975][T16421] lo speed is unknown, defaulting to 1000 [ 367.596841][T16421] lo speed is unknown, defaulting to 1000 [ 367.715680][T16440] netlink: 'syz.0.3223': attribute type 1 has an invalid length. [ 367.861072][T16450] ieee802154 phy1 wpan1: encryption failed: -22 [ 368.168854][T16475] FAULT_INJECTION: forcing a failure. [ 368.168854][T16475] name failslab, interval 1, probability 0, space 0, times 0 [ 368.182524][T16475] CPU: 0 UID: 0 PID: 16475 Comm: syz.0.3237 Not tainted syzkaller #0 PREEMPT(full) [ 368.182553][T16475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 368.182567][T16475] Call Trace: [ 368.182576][T16475] [ 368.182585][T16475] dump_stack_lvl+0xe8/0x150 [ 368.182622][T16475] should_fail_ex+0x412/0x560 [ 368.182662][T16475] should_failslab+0xa8/0x100 [ 368.182693][T16475] __kmalloc_noprof+0xe8/0x760 [ 368.182720][T16475] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.182751][T16475] tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.182786][T16475] ? tomoyo_path_number_perm+0x219/0x630 [ 368.182827][T16475] tomoyo_path_number_perm+0x246/0x630 [ 368.182862][T16475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.182897][T16475] ? __lock_acquire+0x6b5/0x2cf0 [ 368.182939][T16475] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 368.182995][T16475] ? __fget_files+0x2a/0x420 [ 368.183018][T16475] ? __fget_files+0x2a/0x420 [ 368.183037][T16475] ? __fget_files+0x3a0/0x420 [ 368.183056][T16475] ? __fget_files+0x2a/0x420 [ 368.183081][T16475] security_file_ioctl+0xc3/0x2a0 [ 368.183117][T16475] __se_sys_ioctl+0x47/0x170 [ 368.183147][T16475] do_syscall_64+0x14d/0xf80 [ 368.183177][T16475] ? trace_irq_disable+0x3b/0x150 [ 368.183197][T16475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.183220][T16475] ? clear_bhb_loop+0x40/0x90 [ 368.183248][T16475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.183270][T16475] RIP: 0033:0x7f702af9c819 [ 368.183290][T16475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.183310][T16475] RSP: 002b:00007f702bd9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.183333][T16475] RAX: ffffffffffffffda RBX: 00007f702b215fa0 RCX: 00007f702af9c819 [ 368.183350][T16475] RDX: 0000200000000040 RSI: 0000000000008b1b RDI: 0000000000000003 [ 368.183364][T16475] RBP: 00007f702bd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 368.183378][T16475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.183391][T16475] R13: 00007f702b216038 R14: 00007f702b215fa0 R15: 00007ffd1c023168 [ 368.183427][T16475] [ 368.183504][T16475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.484633][T16480] openvswitch: netlink: Flow key attr not present in new flow. [ 368.641901][T16491] FAULT_INJECTION: forcing a failure. [ 368.641901][T16491] name failslab, interval 1, probability 0, space 0, times 0 [ 368.694942][T16491] CPU: 1 UID: 0 PID: 16491 Comm: syz.3.3241 Not tainted syzkaller #0 PREEMPT(full) [ 368.694974][T16491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 368.694988][T16491] Call Trace: [ 368.694997][T16491] [ 368.695006][T16491] dump_stack_lvl+0xe8/0x150 [ 368.695043][T16491] should_fail_ex+0x412/0x560 [ 368.695088][T16491] should_failslab+0xa8/0x100 [ 368.695121][T16491] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 368.695148][T16491] ? trace_kmalloc+0x2a/0x110 [ 368.695170][T16491] ? page_pool_create_percpu+0x76/0xb80 [ 368.695209][T16491] page_pool_create_percpu+0x76/0xb80 [ 368.695242][T16491] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 368.695276][T16491] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 368.695311][T16491] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 368.695367][T16491] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 368.695403][T16491] ? __pfx_autoremove_wake_function+0x10/0x10 [ 368.695431][T16491] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 368.695481][T16491] ? 0xffffffffa0201658 [ 368.695501][T16491] ? 0xffffffffa0201698 [ 368.695524][T16491] ? 0xffffffffa020178c [ 368.695572][T16491] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 368.695610][T16491] ? _copy_from_user+0x94/0xb0 [ 368.695638][T16491] ? bpf_test_init+0x113/0x150 [ 368.695660][T16491] ? xdp_convert_md_to_buff+0x5b/0x330 [ 368.695688][T16491] bpf_prog_test_run_xdp+0x81c/0x1160 [ 368.695731][T16491] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 368.695763][T16491] ? __fget_files+0x2a/0x420 [ 368.695790][T16491] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 368.695817][T16491] bpf_prog_test_run+0x2c7/0x340 [ 368.695845][T16491] __sys_bpf+0x643/0x950 [ 368.695875][T16491] ? __pfx___sys_bpf+0x10/0x10 [ 368.695914][T16491] ? ksys_write+0x242/0x270 [ 368.695942][T16491] ? __pfx_ksys_write+0x10/0x10 [ 368.695975][T16491] __x64_sys_bpf+0x7c/0x90 [ 368.696014][T16491] do_syscall_64+0x14d/0xf80 [ 368.696055][T16491] ? trace_irq_disable+0x3b/0x150 [ 368.696074][T16491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.696097][T16491] ? clear_bhb_loop+0x40/0x90 [ 368.696124][T16491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.696151][T16491] RIP: 0033:0x7ffa3a79c819 [ 368.696171][T16491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.696197][T16491] RSP: 002b:00007ffa3b62d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.696225][T16491] RAX: ffffffffffffffda RBX: 00007ffa3aa15fa0 RCX: 00007ffa3a79c819 [ 368.696241][T16491] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 368.696264][T16491] RBP: 00007ffa3b62d090 R08: 0000000000000000 R09: 0000000000000000 [ 368.696278][T16491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.696291][T16491] R13: 00007ffa3aa16038 R14: 00007ffa3aa15fa0 R15: 00007ffccd590608 [ 368.696334][T16491] [ 369.194270][T16504] veth1_to_team: mtu less than device minimum [ 369.296702][T16508] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.495163][T16517] netlink: 'syz.2.3249': attribute type 3 has an invalid length. [ 369.744008][T16536] tipc: Started in network mode [ 369.749151][T16536] tipc: Node identity 66dba40ac64e, cluster identity 4711 [ 369.756550][T16536] tipc: Enabled bearer , priority 0 [ 369.808562][T16536] syzkaller0: MTU too low for tipc bearer [ 369.815740][T16536] tipc: Disabling bearer [ 369.861587][T16540] FAULT_INJECTION: forcing a failure. [ 369.861587][T16540] name failslab, interval 1, probability 0, space 0, times 0 [ 369.874391][T16540] CPU: 1 UID: 0 PID: 16540 Comm: syz.2.3256 Not tainted syzkaller #0 PREEMPT(full) [ 369.874420][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 369.874433][T16540] Call Trace: [ 369.874442][T16540] [ 369.874451][T16540] dump_stack_lvl+0xe8/0x150 [ 369.874507][T16540] should_fail_ex+0x412/0x560 [ 369.874546][T16540] should_failslab+0xa8/0x100 [ 369.874578][T16540] __kvmalloc_node_noprof+0x178/0x8a0 [ 369.874606][T16540] ? page_pool_create_percpu+0x2dd/0xb80 [ 369.874639][T16540] ? page_pool_create_percpu+0xaf/0xb80 [ 369.874676][T16540] page_pool_create_percpu+0x2dd/0xb80 [ 369.874709][T16540] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 369.874741][T16540] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 369.874775][T16540] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 369.874820][T16540] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 369.874855][T16540] ? __pfx_autoremove_wake_function+0x10/0x10 [ 369.874883][T16540] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 369.874929][T16540] ? 0xffffffffa020164c [ 369.874948][T16540] ? 0xffffffffa0201698 [ 369.874965][T16540] ? 0xffffffffa020178c [ 369.875010][T16540] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 369.875048][T16540] ? _copy_from_user+0x94/0xb0 [ 369.875074][T16540] ? bpf_test_init+0x113/0x150 [ 369.875094][T16540] ? xdp_convert_md_to_buff+0x5b/0x330 [ 369.875120][T16540] bpf_prog_test_run_xdp+0x81c/0x1160 [ 369.875160][T16540] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.875191][T16540] ? __fget_files+0x2a/0x420 [ 369.875217][T16540] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.875244][T16540] bpf_prog_test_run+0x2c7/0x340 [ 369.875272][T16540] __sys_bpf+0x643/0x950 [ 369.875296][T16540] ? __pfx___sys_bpf+0x10/0x10 [ 369.875334][T16540] ? ksys_write+0x242/0x270 [ 369.875363][T16540] ? __pfx_ksys_write+0x10/0x10 [ 369.875397][T16540] __x64_sys_bpf+0x7c/0x90 [ 369.875429][T16540] do_syscall_64+0x14d/0xf80 [ 369.875460][T16540] ? trace_irq_disable+0x3b/0x150 [ 369.875488][T16540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.875512][T16540] ? clear_bhb_loop+0x40/0x90 [ 369.875539][T16540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.875561][T16540] RIP: 0033:0x7f9cb079c819 [ 369.875582][T16540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.875602][T16540] RSP: 002b:00007f9cb160d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.875626][T16540] RAX: ffffffffffffffda RBX: 00007f9cb0a15fa0 RCX: 00007f9cb079c819 [ 369.875642][T16540] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 369.875657][T16540] RBP: 00007f9cb160d090 R08: 0000000000000000 R09: 0000000000000000 [ 369.875671][T16540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.875684][T16540] R13: 00007f9cb0a16038 R14: 00007f9cb0a15fa0 R15: 00007ffe8514d8b8 [ 369.875719][T16540] [ 369.875728][T16540] page_pool_create_percpu() gave up with errno -12 [ 370.317392][T16551] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.331381][T16553] netlink: 'syz.2.3261': attribute type 10 has an invalid length. [ 370.332714][T16551] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.354711][T16551] .` (unregistering): Released all slaves [ 370.387739][T16556] netlink: 'syz.1.3262': attribute type 3 has an invalid length. [ 370.874141][T16584] __nla_validate_parse: 30 callbacks suppressed [ 370.874164][T16584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3274'. [ 370.895246][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3276'. [ 370.932708][T16588] netlink: 'syz.2.3276': attribute type 3 has an invalid length. [ 371.011805][T16596] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3276'. [ 371.400783][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3286'. [ 371.458228][T16618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3286'. [ 371.541517][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3287'. [ 371.552632][T16625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3289'. [ 371.616222][T16630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3290'. [ 371.627218][T16630] netlink: 'syz.2.3290': attribute type 3 has an invalid length. [ 371.636150][T16629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3287'. [ 371.718936][T16635] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3290'. [ 372.739227][T16625] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 373.000917][T16651] lo: entered allmulticast mode [ 373.044982][T16651] tunl0: entered allmulticast mode [ 373.053559][T16651] gre0: entered allmulticast mode [ 373.077692][T16651] gretap0: entered allmulticast mode [ 373.083279][T16651] erspan0: entered allmulticast mode [ 373.100139][T16651] ip_vti0: entered allmulticast mode [ 373.112513][T16651] macvlan0: entered allmulticast mode [ 373.125463][T16651] macsec0: entered allmulticast mode [ 373.131317][T16651] ipvlan2: entered allmulticast mode [ 373.136861][T16651] sit1: entered allmulticast mode [ 373.142314][T16660] FAULT_INJECTION: forcing a failure. [ 373.142314][T16660] name failslab, interval 1, probability 0, space 0, times 0 [ 373.155869][T16660] CPU: 1 UID: 0 PID: 16660 Comm: syz.2.3299 Not tainted syzkaller #0 PREEMPT(full) [ 373.155899][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 373.155912][T16660] Call Trace: [ 373.155921][T16660] [ 373.155930][T16660] dump_stack_lvl+0xe8/0x150 [ 373.155967][T16660] should_fail_ex+0x412/0x560 [ 373.156007][T16660] should_failslab+0xa8/0x100 [ 373.156038][T16660] __kmalloc_cache_noprof+0x88/0x660 [ 373.156063][T16660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 373.156097][T16660] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 373.156151][T16660] __xdp_reg_mem_model+0x1e3/0x5d0 [ 373.156196][T16660] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 373.156229][T16660] ? page_pool_create_percpu+0x7f9/0xb80 [ 373.156267][T16660] xdp_reg_mem_model+0x22/0x40 [ 373.156297][T16660] bpf_test_run_xdp_live+0x295/0x1cf0 [ 373.156331][T16660] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 373.156377][T16660] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 373.156412][T16660] ? __pfx_autoremove_wake_function+0x10/0x10 [ 373.156440][T16660] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 373.156489][T16660] ? 0xffffffffa0201698 [ 373.156508][T16660] ? 0xffffffffa02016dc [ 373.156526][T16660] ? 0xffffffffa020178c [ 373.156572][T16660] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 373.156610][T16660] ? _copy_from_user+0x94/0xb0 [ 373.156637][T16660] ? bpf_test_init+0x113/0x150 [ 373.156660][T16660] ? xdp_convert_md_to_buff+0x5b/0x330 [ 373.156688][T16660] bpf_prog_test_run_xdp+0x81c/0x1160 [ 373.156731][T16660] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 373.156763][T16660] ? __fget_files+0x2a/0x420 [ 373.156789][T16660] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 373.156816][T16660] bpf_prog_test_run+0x2c7/0x340 [ 373.156844][T16660] __sys_bpf+0x643/0x950 [ 373.156868][T16660] ? __pfx___sys_bpf+0x10/0x10 [ 373.156907][T16660] ? ksys_write+0x242/0x270 [ 373.156935][T16660] ? __pfx_ksys_write+0x10/0x10 [ 373.156968][T16660] __x64_sys_bpf+0x7c/0x90 [ 373.157001][T16660] do_syscall_64+0x14d/0xf80 [ 373.157032][T16660] ? trace_irq_disable+0x3b/0x150 [ 373.157051][T16660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.157073][T16660] ? clear_bhb_loop+0x40/0x90 [ 373.157101][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.157123][T16660] RIP: 0033:0x7f9cb079c819 [ 373.157142][T16660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.157170][T16660] RSP: 002b:00007f9cb160d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.157194][T16660] RAX: ffffffffffffffda RBX: 00007f9cb0a15fa0 RCX: 00007f9cb079c819 [ 373.157211][T16660] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 373.157225][T16660] RBP: 00007f9cb160d090 R08: 0000000000000000 R09: 0000000000000000 [ 373.157239][T16660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.157252][T16660] R13: 00007f9cb0a16038 R14: 00007f9cb0a15fa0 R15: 00007ffe8514d8b8 [ 373.157287][T16660] [ 373.209007][T16651] vxcan2: entered allmulticast mode [ 373.252217][T16666] netlink: 'syz.4.3295': attribute type 10 has an invalid length. [ 373.447546][ C0] hrtimer: interrupt took 199062 ns [ 373.454945][T16651] bridge3: entered allmulticast mode [ 373.480613][T16651] ip6erspan0: entered allmulticast mode [ 373.486391][T16651] geneve2: entered allmulticast mode [ 373.508066][T16651] syztnl2: entered allmulticast mode [ 373.513641][T16651] macvlan2: entered allmulticast mode [ 373.543080][T16651] bond0: entered allmulticast mode [ 373.562722][T16651] nicvf0: entered allmulticast mode [ 373.569357][T16651] veth1_macvtap.0: entered allmulticast mode [ 373.575943][T16651] bridge0: entered allmulticast mode [ 373.582629][T16651] bridge4: entered allmulticast mode [ 373.589333][T16651] bond1: entered allmulticast mode [ 373.595456][T16651] syztnl0: entered allmulticast mode [ 373.601651][T16651] bond2: entered allmulticast mode [ 373.607188][T16651] bond3: entered allmulticast mode [ 373.613012][T16651] ip6gre1: entered allmulticast mode [ 373.620091][T16651] mac80211_hwsim hwsim21 wlan3: entered allmulticast mode [ 373.628138][T16651] mac80211_hwsim hwsim24 wlan4: entered allmulticast mode [ 373.635722][T16651] h: entered allmulticast mode [ 373.641515][T16651] bond4: entered allmulticast mode [ 373.647922][T16651] bond5: entered allmulticast mode [ 373.653244][T16651] bridge5: entered allmulticast mode [ 373.659408][T16651] gtp1: entered allmulticast mode [ 373.664888][T16651] mac80211_hwsim hwsim6 dvmrp0: entered allmulticast mode [ 373.672857][T16651] vxcan4: entered allmulticast mode [ 373.686744][T16651] bridge6: entered allmulticast mode [ 373.692475][T16651] netdevsim netdevsim1 eth0: entered allmulticast mode [ 373.700414][T16651] netdevsim netdevsim1 eth1: entered allmulticast mode [ 373.707651][T16651] netdevsim netdevsim1 eth2: entered allmulticast mode [ 373.714809][T16651] netdevsim netdevsim1 eth3: entered allmulticast mode [ 373.722944][T16651] macvlan3: entered allmulticast mode [ 373.729612][T16651] bridge7: entered allmulticast mode [ 373.738375][T16675] netlink: 'syz.3.3303': attribute type 3 has an invalid length. [ 374.115896][T16696] netlink: 'syz.0.3306': attribute type 1 has an invalid length. [ 374.128303][T16696] netlink: 'syz.0.3306': attribute type 1 has an invalid length. [ 374.140969][T16696] netlink: 'syz.0.3306': attribute type 8 has an invalid length. [ 375.312031][T16698] netlink: 'syz.4.3310': attribute type 4 has an invalid length. [ 375.427578][T16704] netlink: 'syz.4.3312': attribute type 4 has an invalid length. [ 375.555986][T16710] geneve2: entered allmulticast mode [ 375.585222][T16710] gre1: entered allmulticast mode [ 375.593926][T16710] macsec1: entered allmulticast mode [ 375.600865][T16710] bond6: entered allmulticast mode [ 375.606452][T16710] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 375.627563][T14295] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 375.636632][T14295] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 375.688998][T14295] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 375.720759][T14295] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 375.900630][T16728] __nla_validate_parse: 16 callbacks suppressed [ 375.900652][T16728] netlink: 284 bytes leftover after parsing attributes in process `syz.3.3322'. [ 376.010884][T16730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3323'. [ 376.072595][T16742] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3327'. [ 376.119324][T16744] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3328'. [ 376.179077][T16747] netlink: 'syz.0.3329': attribute type 10 has an invalid length. [ 376.211187][T16747] netlink: 396 bytes leftover after parsing attributes in process `syz.0.3329'. [ 376.220665][T16749] netlink: 'syz.1.3331': attribute type 10 has an invalid length. [ 376.245705][T16749] netlink: 396 bytes leftover after parsing attributes in process `syz.1.3331'. [ 377.813810][T16779] netlink: 'syz.4.3342': attribute type 4 has an invalid length. [ 377.839992][T16777] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3340'. [ 377.962113][T16783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3345'. [ 378.091997][T16793] netlink: 'syz.0.3349': attribute type 10 has an invalid length. [ 378.107855][T16793] netlink: 396 bytes leftover after parsing attributes in process `syz.0.3349'. [ 378.400384][T16809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3353'. [ 378.602699][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.787696][T16829] netlink: 'syz.1.3361': attribute type 10 has an invalid length. [ 380.115241][T16824] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 380.326274][T16850] wg1 speed is unknown, defaulting to 1000 [ 380.371017][T16850] lo speed is unknown, defaulting to 1000 [ 380.627273][T16878] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 380.642831][T16880] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 381.051390][T16902] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 381.087540][T16902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.151734][T16905] netlink: 'syz.3.3391': attribute type 4 has an invalid length. [ 381.194082][T16902] syzkaller0: entered promiscuous mode [ 381.207705][T16902] syzkaller0: entered allmulticast mode [ 381.247529][T16913] __nla_validate_parse: 11 callbacks suppressed [ 381.247550][T16913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3394'. [ 381.496108][T16924] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3398'. [ 381.904541][T16945] sit2: entered allmulticast mode [ 382.056807][T16951] [ 382.059204][T16951] ====================================================== [ 382.066251][T16951] WARNING: possible circular locking dependency detected [ 382.073315][T16951] syzkaller #0 Not tainted [ 382.077761][T16951] ------------------------------------------------------ [ 382.084803][T16951] syz.1.3407/16951 is trying to acquire lock: [ 382.090897][T16951] ffffffff8fd4e138 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 382.100451][T16951] [ 382.100451][T16951] but task is already holding lock: [ 382.107831][T16951] ffffffff8fd4e0d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 382.117447][T16951] [ 382.117447][T16951] which lock already depends on the new lock. [ 382.117447][T16951] [ 382.127866][T16951] [ 382.127866][T16951] the existing dependency chain (in reverse order) is: [ 382.136894][T16951] [ 382.136894][T16951] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 382.144822][T16951] _raw_spin_lock_bh+0x36/0x50 [ 382.150138][T16951] nr_rt_ioctl+0x40c/0xf90 [ 382.155106][T16951] sock_do_ioctl+0x101/0x320 [ 382.160233][T16951] sock_ioctl+0x5c6/0x7f0 [ 382.165123][T16951] __se_sys_ioctl+0xfc/0x170 [ 382.170263][T16951] do_syscall_64+0x14d/0xf80 [ 382.175406][T16951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.181845][T16951] [ 382.181845][T16951] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 382.189875][T16951] _raw_spin_lock_bh+0x36/0x50 [ 382.195188][T16951] nr_rt_ioctl+0x215/0xf90 [ 382.200679][T16951] sock_do_ioctl+0x101/0x320 [ 382.205808][T16951] sock_ioctl+0x5c6/0x7f0 [ 382.210722][T16951] __se_sys_ioctl+0xfc/0x170 [ 382.215872][T16951] do_syscall_64+0x14d/0xf80 [ 382.221012][T16951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.227445][T16951] [ 382.227445][T16951] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 382.235290][T16951] __lock_acquire+0x15a5/0x2cf0 [ 382.240710][T16951] lock_acquire+0xf0/0x2e0 [ 382.245667][T16951] _raw_spin_lock_bh+0x36/0x50 [ 382.250968][T16951] nr_rt_device_down+0xbe/0x860 [ 382.256364][T16951] nr_device_event+0x137/0x150 [ 382.261671][T16951] notifier_call_chain+0x1be/0x400 [ 382.267334][T16951] netif_close_many+0x2ae/0x420 [ 382.272720][T16951] netif_close+0x160/0x220 [ 382.277679][T16951] dev_close+0x10a/0x220 [ 382.282466][T16951] bpq_device_event+0x377/0x6a0 [ 382.287870][T16951] notifier_call_chain+0x1be/0x400 [ 382.293533][T16951] __dev_notify_flags+0x16d/0x310 [ 382.299149][T16951] netif_change_flags+0xe8/0x1a0 [ 382.304636][T16951] dev_change_flags+0x130/0x260 [ 382.310052][T16951] dev_ioctl+0x7b4/0x1150 [ 382.314935][T16951] sock_do_ioctl+0x23e/0x320 [ 382.320069][T16951] sock_ioctl+0x5c6/0x7f0 [ 382.324957][T16951] __se_sys_ioctl+0xfc/0x170 [ 382.330101][T16951] do_syscall_64+0x14d/0xf80 [ 382.335236][T16951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.341672][T16951] [ 382.341672][T16951] other info that might help us debug this: [ 382.341672][T16951] [ 382.351908][T16951] Chain exists of: [ 382.351908][T16951] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 382.351908][T16951] [ 382.365836][T16951] Possible unsafe locking scenario: [ 382.365836][T16951] [ 382.373308][T16951] CPU0 CPU1 [ 382.378796][T16951] ---- ---- [ 382.384175][T16951] lock(nr_neigh_list_lock); [ 382.388873][T16951] lock(&nr_node->node_lock); [ 382.396175][T16951] lock(nr_neigh_list_lock); [ 382.403395][T16951] lock(nr_node_list_lock); [ 382.408006][T16951] [ 382.408006][T16951] *** DEADLOCK *** [ 382.408006][T16951] [ 382.416166][T16951] 2 locks held by syz.1.3407/16951: [ 382.421384][T16951] #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 382.430211][T16951] #1: ffffffff8fd4e0d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 382.440412][T16951] [ 382.440412][T16951] stack backtrace: [ 382.446364][T16951] CPU: 1 UID: 0 PID: 16951 Comm: syz.1.3407 Not tainted syzkaller #0 PREEMPT(full) [ 382.446389][T16951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 382.446401][T16951] Call Trace: [ 382.446410][T16951] [ 382.446419][T16951] dump_stack_lvl+0xe8/0x150 [ 382.446456][T16951] print_circular_bug+0x2e1/0x300 [ 382.446487][T16951] check_noncircular+0x12e/0x150 [ 382.446518][T16951] __lock_acquire+0x15a5/0x2cf0 [ 382.446546][T16951] ? __lock_acquire+0x6b5/0x2cf0 [ 382.446574][T16951] lock_acquire+0xf0/0x2e0 [ 382.446597][T16951] ? nr_rt_device_down+0xbe/0x860 [ 382.446625][T16951] ? nr_rt_device_down+0xbe/0x860 [ 382.446649][T16951] _raw_spin_lock_bh+0x36/0x50 [ 382.446671][T16951] ? nr_rt_device_down+0xbe/0x860 [ 382.446696][T16951] nr_rt_device_down+0xbe/0x860 [ 382.446720][T16951] ? nr_device_event+0x12f/0x150 [ 382.446746][T16951] nr_device_event+0x137/0x150 [ 382.446770][T16951] notifier_call_chain+0x1be/0x400 [ 382.446801][T16951] netif_close_many+0x2ae/0x420 [ 382.446821][T16951] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.446846][T16951] ? __pfx_netif_close_many+0x10/0x10 [ 382.446865][T16951] ? bond_netdev_event+0x231/0xfc0 [ 382.446886][T16951] ? __neigh_ifdown+0x7fd/0x8c0 [ 382.446904][T16951] netif_close+0x160/0x220 [ 382.446922][T16951] ? __pfx_netif_close+0x10/0x10 [ 382.446939][T16951] ? __asan_memset+0x22/0x50 [ 382.446956][T16951] ? macvtap_device_event+0xd1/0x400 [ 382.446985][T16951] dev_close+0x10a/0x220 [ 382.447012][T16951] bpq_device_event+0x377/0x6a0 [ 382.447043][T16951] notifier_call_chain+0x1be/0x400 [ 382.447074][T16951] __dev_notify_flags+0x16d/0x310 [ 382.447098][T16951] ? __pfx___dev_notify_flags+0x10/0x10 [ 382.447120][T16951] ? __dev_change_flags+0x4c6/0x690 [ 382.447145][T16951] ? kasan_quarantine_put+0xbb/0x1f0 [ 382.447164][T16951] ? __pfx___dev_change_flags+0x10/0x10 [ 382.447188][T16951] ? full_name_hash+0x92/0xe0 [ 382.447216][T16951] netif_change_flags+0xe8/0x1a0 [ 382.447242][T16951] dev_change_flags+0x130/0x260 [ 382.447265][T16951] dev_ioctl+0x7b4/0x1150 [ 382.447286][T16951] sock_do_ioctl+0x23e/0x320 [ 382.447304][T16951] ? __pfx_sock_do_ioctl+0x10/0x10 [ 382.447319][T16951] ? do_futex+0x395/0x420 [ 382.447354][T16951] sock_ioctl+0x5c6/0x7f0 [ 382.447383][T16951] ? __pfx_sock_ioctl+0x10/0x10 [ 382.447412][T16951] ? __fget_files+0x2a/0x420 [ 382.447428][T16951] ? __fget_files+0x3a0/0x420 [ 382.447445][T16951] ? __fget_files+0x2a/0x420 [ 382.447462][T16951] ? bpf_lsm_file_ioctl+0x9/0x20 [ 382.447485][T16951] ? __pfx_sock_ioctl+0x10/0x10 [ 382.447512][T16951] __se_sys_ioctl+0xfc/0x170 [ 382.447534][T16951] do_syscall_64+0x14d/0xf80 [ 382.447559][T16951] ? trace_irq_disable+0x3b/0x150 [ 382.447575][T16951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.447593][T16951] ? clear_bhb_loop+0x40/0x90 [ 382.447613][T16951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.447631][T16951] RIP: 0033:0x7f0db5f9c819 [ 382.447649][T16951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.447665][T16951] RSP: 002b:00007f0db6ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.447686][T16951] RAX: ffffffffffffffda RBX: 00007f0db6215fa0 RCX: 00007f0db5f9c819 [ 382.447700][T16951] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 382.447712][T16951] RBP: 00007f0db6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 382.447724][T16951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.447735][T16951] R13: 00007f0db6216038 R14: 00007f0db6215fa0 R15: 00007ffcdfbd91f8 [ 382.447756][T16951] [ 382.856208][T16962] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3410'.