last executing test programs: 54.521811145s ago: executing program 0 (id=2281): unshare(0x22020400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000005000000000000000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000002001852000006000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b43b50000400000054b6020014000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xf, 0x7, &(0x7f00000001c0)=""/7, 0x41000, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x7, 0xb}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000280)=[{0x3, 0x1, 0xc, 0x4}, {0x5, 0x5, 0x8, 0x8}, {0x3, 0x3, 0xa, 0x5}, {0x1, 0x4, 0xb}, {0x5, 0x2, 0x0, 0xa}, {0x0, 0x3, 0x9, 0x8}], 0x10, 0x2}, 0x37) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002500)={r0, 0x0, 0xaa, 0xde, &(0x7f0000000440)="b75192a3f44118d1ecf6cabf43c15afc0baf27e1875affab93edfb9f2137e77a50f021d22fcd77a4b40c3de239167219623a303320ffcff6984ad98b0f77e0ffa4e8cb067d6a22dbfb2f2f25ce7a7e8515110ca8fcce1c6f6a95e4296f8b1b16a798b54721ae30f32845d383b65bdadd926e7cd3f20333a72ddb4a6d58c104834ed043886f20de1162d4f1143fadb6a0dc2271b61230b77ec6ea5e36f25c13d4da08fb5bcc7a6b97cfbe", &(0x7f0000000500)=""/222, 0xe0, 0x0, 0x1000, 0xbc, &(0x7f0000001440)="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", &(0x7f0000002440)="7af8964e0976fe3b2669194ae4ab3a02eb8303b68c2e1d51385790aaea9ac5a13d6cc0845b5dfdf91c88948bf3797d41e35d6fc9430d8d26b45885775d8b071d2d226e9711fd7c8529471bcc13f6c16e17c0550698df576dddb9c3e4b2ce2b2bf00f138bc7175f0aac0810ec69a4fcbb131f363b87d452d8dfa9979a503e001c582c7994a88ffde66aca33e1d09a450d182bc33181795f91f9965548ca3e54434c1c776e9e5a9c6901ddb4562f81e516aec1c4982a065d72af5307dc", 0x0, 0x0, 0x9}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r1, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300003e851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff30500180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) close(0x3) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0x2, 0x2}, 0x6) write(r2, &(0x7f0000000040)="05000000010000", 0x7) 53.937768757s ago: executing program 1 (id=2287): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100), 0x10) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000dc0)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="000400005a6dfaf43497c09d7800000200"/29, @ANYRES32, @ANYRES32=r3, @ANYBLOB="010000000100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r3, r1, 0x36, 0x14}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000500), &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x800, 0x1, 0x3, 0x7}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) 53.935326732s ago: executing program 2 (id=2288): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffff9c6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000004c000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761051ce540c772e201b2de17dfdb5b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e015064716897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03440eafe1c8660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340089855307b207ea6ae2f6d1c0c729275a00000e0000000100000001000004070000000a000000030000000000000000010500000022000000070000000000000802000000006100302e612e612e002e305f00000000000000"], 0x0, 0x5a}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet(0x23, 0x2, 0x1) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) 53.631708603s ago: executing program 1 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000006c0)="691dd99ae6985ce299b4eea47ca18eb53621ee48ae5c865cdb20ca2f16b2fa91e084e443961ae410655c92e81313f7b0c4c11b5cac16fda458100023aa0bc91f1b17d10d17b5e5169b6f479321251e371dc1d21a763804150822e4b55690df22539efb753d16c8e7a0103cbc84867e5365c3adb79fa5998fe4496af13b9d64e0", 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16=r2, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20044010) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, 0x0, &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x204, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x73}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20004059) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x4c, r8, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r10, &(0x7f0000000040)="fefdad8fd38c2772ac6e08179995f3bd2d737041b428b89073e888b3429846fc981e6680d135001997e7515dc30fd73dadf57a443af801554ac03638531d31a6a036bc05fefb8e320e6f180452a003", &(0x7f0000001200)=@tcp=r11}, 0x20) 53.393108031s ago: executing program 1 (id=2290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f0000000400)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000880)={&(0x7f0000000200), 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2d8, r9, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x1cd}, {0x5}, {0x6, 0x11, 0x8}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x10001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x100}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xd9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff8}, {0x8, 0xb, 0x10}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0xc4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x100}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xffff8001}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x24004040}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r11 = socket(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockopt$sock_buf(r11, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) 53.144728097s ago: executing program 0 (id=2293): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x11c, 0x4) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="f77d2b5dd5f7d74f0748cf3d2cf2fbd644566aea48c78d151d61ed3a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb104600190d8bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0af490958ba3211eb99dfc8dbbc0f9c941aaa1495893d0b000000000000005afd7476413f322c8f79de769deb0200000000000000e3ed6641e50fe5", 0xbd}], 0x1}}], 0x1, 0x240068c0) 53.133358859s ago: executing program 2 (id=2294): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf25000074", @ANYRES32, @ANYBLOB="0898050007500500080013"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x0) 52.746986611s ago: executing program 2 (id=2295): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20004801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x50}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0xffffffff, 0xfffffffe, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xfffffffffffff813, 0xfffffffc, 0x7, 0x4, 0x55}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=@newtfilter={0x43c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x7f, 0x1000, 0x80, 0xfffffff7, 0x3, 0x401, 0x1, 0x931, 0x6, 0xe, 0x5, 0x7fff, 0x4, 0x3, 0x10, 0x3, 0xf, 0x40000008, 0x4, 0x3, 0xc, 0x5, 0x9, 0x8001, 0x8, 0x658, 0xf3, 0x4, 0x3, 0x4, 0x8, 0x2, 0xc000000, 0x3, 0x9, 0x8, 0x200, 0x7, 0x249d, 0x9db, 0xfffffe01, 0x9, 0xfffffd49, 0x5, 0x90000, 0xffff8001, 0x800, 0xffffff5e, 0x7fffffff, 0xb5d, 0x5, 0x7ff, 0x9, 0x6, 0x3, 0x7, 0x9, 0x9, 0xfffffff9, 0xff, 0xceb, 0x7, 0xa6, 0x8, 0x5, 0xffffffff, 0x7, 0x80000, 0xfffffff8, 0x9, 0x0, 0x9, 0x1, 0x200, 0xfe1, 0xd1, 0x3, 0x2, 0x10, 0x0, 0x1, 0xfffffffd, 0x2, 0x7, 0x951, 0x19c, 0x38de, 0x6, 0x10001, 0x8, 0x8, 0x3, 0x8, 0x3, 0x9, 0xa60, 0x0, 0x100, 0x2, 0x0, 0x2c, 0x80000000, 0x3ff, 0x2, 0x5, 0x10000, 0x6, 0x4, 0xffffffff, 0x1, 0x1, 0xf915, 0x6, 0x2, 0x80, 0x3ff, 0x9, 0x3, 0x10000, 0x7f, 0x7, 0x81, 0x2, 0x4, 0x4, 0x8000, 0x2, 0xfff, 0x0, 0xf, 0x4, 0x90c, 0x1, 0x4, 0x6, 0x6, 0xc7, 0x5, 0x9, 0x3650, 0x2, 0x6, 0xa27d, 0x686e8f84, 0x3ff, 0x7fffffff, 0x6, 0x7, 0x3, 0x4, 0x37735ae5, 0x7fff, 0x6, 0x7, 0x9, 0xd6, 0x5, 0x401, 0x9, 0x7, 0x1, 0x4, 0x4, 0x5, 0x8000, 0x2, 0x1, 0x6, 0x0, 0x80000001, 0x80, 0x2, 0xe, 0xfffffffe, 0x7, 0x9, 0x4, 0xf59, 0x8, 0x100, 0x6, 0x0, 0x3, 0x0, 0x1, 0x6, 0x8, 0xfff, 0x1, 0x6, 0xd0ed, 0x6, 0x1, 0xf24c, 0x1000, 0x9, 0x0, 0x1, 0x7, 0x6, 0x7f, 0x2, 0x8001, 0x3, 0x800, 0xde, 0x2, 0x3ff, 0x9, 0x3, 0x5, 0x3, 0x1d68, 0x8, 0x16, 0x5, 0x400, 0xc0f, 0x5, 0x400, 0x9, 0x7, 0x1, 0x9, 0xf, 0x8, 0x1, 0x421, 0xa, 0x7b, 0x73, 0x4, 0x7, 0x1, 0xf6e7, 0x5, 0x6, 0x5, 0x1bf3, 0xb, 0xac9, 0x401, 0x6, 0x6c, 0x1, 0x3, 0xab2, 0x1, 0xffff, 0x4, 0x296, 0x5, 0x3ff, 0x6]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r8}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}, r8}, 0x14) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000001de9cb53ed00000000000000", @ANYRES32=r8], 0x28}, 0x28000000}], 0x1, 0x0) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r10, @ANYBLOB="800072"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) 52.63420007s ago: executing program 1 (id=2296): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) accept(r1, &(0x7f0000000080)=@ax25={{0x3, @null}, [@default, @default, @null, @null, @remote, @bcast, @rose, @default]}, &(0x7f0000000100)=0x80) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000009c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 52.63298729s ago: executing program 0 (id=2297): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0xffffffff}, &(0x7f0000000100)=0x8) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000000)=0x200, 0x4) setsockopt(r3, 0x11b, 0x9, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000200)) socket$nl_rdma(0x10, 0x3, 0x14) 52.611559715s ago: executing program 4 (id=2298): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, &(0x7f0000000300)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x5c, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5f, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 52.383682983s ago: executing program 3 (id=2300): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000480)=0x7, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x60}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250300000050000180040002800e0001006574683a776c616e3100000038000400200001000a004e200000000300000000000000000000ffff640101000400007d7e001400020002004e20ac1e01010000000000000000"], 0x64}}, 0x810) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x2008081) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 52.361648634s ago: executing program 1 (id=2301): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000001680)=@ethtool_rxnfc={0x30, 0x2, 0xfffffffffffffff2, {0xc, @tcp_ip6_spec={@empty, @private1, 0x4e22, 0x4e22, 0x7}, {0x0, @random="578e12cef2ce", 0x1b9, 0x8, [0x9, 0xe]}, @usr_ip4_spec={@remote, @loopback, 0x5, 0x3, 0x1, 0x2}, {0x0, @random="d7e35862e0b3", 0x5e93, 0x3}, 0x8, 0x1}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3000000}}, {0x28}}}}, 0x310) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) 52.31396028s ago: executing program 4 (id=2302): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@deltfilter={0x34, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xb}, {0x0, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x83}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x28, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r4, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0xcc29782442129130) 51.938785415s ago: executing program 3 (id=2303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x2, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x4, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x7}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0xfffffffd, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x200, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r6, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e12", 0x6}], 0x1}, 0x20000885) 51.726547281s ago: executing program 4 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x11, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) 51.637949162s ago: executing program 2 (id=2305): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf25000074", @ANYRES32, @ANYBLOB="0898050007500500080013"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x0) 51.449653507s ago: executing program 0 (id=2306): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3b"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r4, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r6, r7+60000000}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r9 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r9, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) write$cgroup_pressure(r2, &(0x7f0000000180)={'some', 0x20, 0x7fffffffffffffff, 0x20, 0xffffffffffffffff}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 51.338283908s ago: executing program 3 (id=2307): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="180000fe000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.219265019s ago: executing program 4 (id=2308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0xff7f0000, 0x1}, 0x20040044) 50.970830393s ago: executing program 2 (id=2309): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, &(0x7f0000000000)=0x35) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x50, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @beacon={{{}, {0xde1}, @device_b, @device_a, @initial, {0x0, 0x1}}, 0x0, @random=0x3b, 0x4803, @void, @val={0x1, 0x1, [{0x24, 0x1}]}, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @void, @void, @void, @void, @void, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 50.876240749s ago: executing program 3 (id=2310): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r2, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000dc0)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="000400005a6dfaf43497c09d7800000200"/29, @ANYRES32, @ANYRES32=r3, @ANYBLOB="010000000100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r3, r1, 0x36, 0x14}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000500), &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x800, 0x1, 0x3, 0x7}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) 50.753582188s ago: executing program 0 (id=2311): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000680)="adc8bb717b328e707cd6e190d99e8a0ff2eef0dab92e8800b30d0f5e7fc6943a934647e68dc82d9dfb18911c0b1ffd98c77cf16fa23e9a3463f5a82c105de31cd20d42a9470833d13c34e626ceafb30dc08b3226269c759c9447ed7eccbc2c4f49cd75da62ebe1543819b4bba18223b53e51845a2efade1378fd9374ec3c7efac902333c85826662913cede8d8aa5d248321536e25", 0x95) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000206010200000000481d5e324b49e3000000000000000000000700000505008aaccb790015000400000010000df22540aaf3576d3a706f7274000900020073797a300000000016000300686173683a6e65749f5bbce36daf228783392a375faf57ccf247ebc4543374bc0f79904b4ada48f47f6d990cd963c06469052ed7ec57436c8d34b87fc41a3a8842d1000000000000000000000000000000b992dd7627127fadc0ad7ad62f903a56955475a2b8a35e33887948116bcdae9f406ad3f69a4e74d1689697a5967ca30fa1b0abeab1fbc79dd60341db1f6c3217e6d79eed19cf064db82c749088cc1d3514e008887119d54d4eb0aefe83c7583aadfb62f61ee882b39e565100"/277], 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, &(0x7f0000000040)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000200000002c00128009000100626f6e64000000001c000280050001"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x5e}}, 0x40) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYRESDEC], 0x3c}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r1], 0x20}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRESHEX=r10, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=r10, @ANYBLOB="d417d7739758d8fb0fdfe370e446eb2328a003541abdc4bbc8831406005e9bb7245bb92b5b9de984b07719692df70f76cbe9dcaa338a09f033d2b3c118dc95dbf5400996e516278bb2d0e644f677d3fdfa11e8e36c54e8a4457295c451ae956c845b452e08afe568159bbaf79f4ee1f3e33cf07d74e9056f4efe37a9d6015d612a799a67e9715d5bb91c57f96d15a5cd35158a818f74483f4ec38c5bf528b90047046882b122a02d5da523190348d69e00"/191], 0x90}}, 0x200088bc) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, r13, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x8}}]}, 0x54}}, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="04002cbd7000fbdbdf25130000000800010070636900115e0200303030303a30303a3130080000000000080003000300000008000b00ec0000000600110007000000"], 0x48}, 0x1, 0x0, 0x0, 0x8048}, 0x8800) r15 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r15, 0x89f9, &(0x7f0000000840)={'sit0\x00', &(0x7f0000000800)={@private2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x16}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000002000010027bd7000000000000a000040000000ffffffff000000000081af104412ec67068f300fddcbcef4b0c5ccfc51368a8f746d50", @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24040884}, 0x4008000) 50.482363052s ago: executing program 4 (id=2312): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, &(0x7f0000000300)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x5c, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5f, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 50.062585965s ago: executing program 2 (id=2313): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000480)=0x7, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x60}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250300000050000180040002800e0001006574683a776c616e3100000038000400200001000a004e200000000300000000000000000000ffff640101000400007d7e001400020002004e20ac1e01010000000000000000"], 0x64}}, 0x810) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 50.062284057s ago: executing program 1 (id=2314): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@deltfilter={0x34, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xb}, {0x0, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x83}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x28, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r4, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0xcc29782442129130) 50.051353101s ago: executing program 3 (id=2315): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (fail_nth: 6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100000000000000000000000000ac1e", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x44000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x8041) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x13, r0, 0x0) 49.759837141s ago: executing program 0 (id=2316): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a300000000009000300000000300000000014000480080003400000000308000240000000006c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a300000000040000480200001800700010063740000140002800800014000000001"], 0xf4}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000100000100003c"], 0x6a) 48.039944531s ago: executing program 4 (id=2317): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 45.910804787s ago: executing program 3 (id=2318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) pwritev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="5734aa", 0x3}, {&(0x7f0000002e80)="e73304d6c6dcb9744d407b414f2b6f76909b21dd865ea678a0b6e1bc3311ed7ccaf9a5b01722ca693ce9d5dd630425d56391ed1af3a8e47a54e259c90940205b2da811c747d4318bceeb535392029281942968add30693b58946511caa182594be83d3d0568b225a04a1a1b25a8735369687b305dd26f45a4b8dd64937aac6cd175b99201e4d8c266b3e2adef12e29b7ed407b4c6ca1700f965bed896e2d831c01488c4335dec898ec6c41cfc6d15ccba7b59eb8a36701390be0b65ceddb49711d19114bc1ef8459370ec3ba9cf9bf3e2bee935dd054571225b8022936bb4bb846c81d03254cdb3a6b8167f3ff185679f59f1ef189d051c757dd23c3555e00507619613ef771f2adfebfd1172806e2e5b83a98f9d34949a16e242dafdbca65a139478371a8523119d4895e33372f2d79fd29c77abcbfca643f183edf033a913cde13e003cb0f49c9c1840650395918bc91f883f2f047b134eb4d8d2dc433c2b290843ad664392a79f98c9168013f5ad0816710131a86f6da803e26687f2d97e511", 0x181}], 0x2, 0x0, 0x7) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000000)={r0, 0x0, 0xf92, 0x401, 0x1000, 0x1, [0x4, 0xc5e, 0x9, 0xfff, 0x1, 0x9]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async) pwritev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="5734aa", 0x3}, {&(0x7f0000002e80)="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", 0x181}], 0x2, 0x0, 0x7) (async) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000000)={r0, 0x0, 0xf92, 0x401, 0x1000, 0x1, [0x4, 0xc5e, 0x9, 0xfff, 0x1, 0x9]}) (async) 31.552514743s ago: executing program 32 (id=2314): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@deltfilter={0x34, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xb}, {0x0, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x83}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x28, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r4, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0xcc29782442129130) 24.956498564s ago: executing program 33 (id=2313): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000480)=0x7, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x60}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250300000050000180040002800e0001006574683a776c616e3100000038000400200001000a004e200000000300000000000000000000ffff640101000400007d7e001400020002004e20ac1e01010000000000000000"], 0x64}}, 0x810) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 13.301093684s ago: executing program 34 (id=2316): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a300000000009000300000000300000000014000480080003400000000308000240000000006c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a300000000040000480200001800700010063740000140002800800014000000001"], 0xf4}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000100000100003c"], 0x6a) 5.486586601s ago: executing program 35 (id=2318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) pwritev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="5734aa", 0x3}, {&(0x7f0000002e80)="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", 0x181}], 0x2, 0x0, 0x7) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000000)={r0, 0x0, 0xf92, 0x401, 0x1000, 0x1, [0x4, 0xc5e, 0x9, 0xfff, 0x1, 0x9]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async) pwritev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="5734aa", 0x3}, {&(0x7f0000002e80)="e73304d6c6dcb9744d407b414f2b6f76909b21dd865ea678a0b6e1bc3311ed7ccaf9a5b01722ca693ce9d5dd630425d56391ed1af3a8e47a54e259c90940205b2da811c747d4318bceeb535392029281942968add30693b58946511caa182594be83d3d0568b225a04a1a1b25a8735369687b305dd26f45a4b8dd64937aac6cd175b99201e4d8c266b3e2adef12e29b7ed407b4c6ca1700f965bed896e2d831c01488c4335dec898ec6c41cfc6d15ccba7b59eb8a36701390be0b65ceddb49711d19114bc1ef8459370ec3ba9cf9bf3e2bee935dd054571225b8022936bb4bb846c81d03254cdb3a6b8167f3ff185679f59f1ef189d051c757dd23c3555e00507619613ef771f2adfebfd1172806e2e5b83a98f9d34949a16e242dafdbca65a139478371a8523119d4895e33372f2d79fd29c77abcbfca643f183edf033a913cde13e003cb0f49c9c1840650395918bc91f883f2f047b134eb4d8d2dc433c2b290843ad664392a79f98c9168013f5ad0816710131a86f6da803e26687f2d97e511", 0x181}], 0x2, 0x0, 0x7) (async) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000000)={r0, 0x0, 0xf92, 0x401, 0x1000, 0x1, [0x4, 0xc5e, 0x9, 0xfff, 0x1, 0x9]}) (async) 0s ago: executing program 36 (id=2317): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) kernel console output (not intermixed with test programs): 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.859594][T10968] RSP: 002b:00007f9638892028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 286.859620][T10968] RAX: ffffffffffffffda RBX: 00007f9637c26090 RCX: 00007f963799e159 [ 286.859638][T10968] RDX: 0000000000000003 RSI: 0000200000005200 RDI: 0000000000000004 [ 286.859658][T10968] RBP: 00007f9638892090 R08: 0000000000000000 R09: 0000000000000000 [ 286.859672][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.859686][T10968] R13: 00007f9637c26128 R14: 00007f9637c26090 R15: 00007ffc20771038 [ 286.859723][T10968] [ 287.985796][T11000] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1471'. [ 287.986021][T11000] nbd: illegal input index 65508 [ 288.063409][T11001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1470'. [ 289.033383][T11032] __nla_validate_parse: 1 callbacks suppressed [ 289.033448][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1478'. [ 289.127794][T11040] netlink: 'syz.3.1482': attribute type 2 has an invalid length. [ 289.503807][T11044] lo speed is unknown, defaulting to 1000 [ 290.504015][T11092] FAULT_INJECTION: forcing a failure. [ 290.504015][T11092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.517679][T11092] CPU: 1 UID: 0 PID: 11092 Comm: syz.2.1494 Not tainted syzkaller #0 PREEMPT(full) [ 290.517712][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.517727][T11092] Call Trace: [ 290.517738][T11092] [ 290.517749][T11092] dump_stack_lvl+0xe8/0x150 [ 290.517789][T11092] should_fail_ex+0x410/0x560 [ 290.517830][T11092] _copy_from_user+0x2d/0xb0 [ 290.517857][T11092] ___sys_recvmsg+0x173/0x5a0 [ 290.517890][T11092] ? __pfx____sys_recvmsg+0x10/0x10 [ 290.517928][T11092] ? lock_acquire+0x115/0x350 [ 290.517991][T11092] do_recvmmsg+0x31a/0x7f0 [ 290.518032][T11092] ? __pfx_do_recvmmsg+0x10/0x10 [ 290.518072][T11092] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 290.518115][T11092] ? __fget_files+0x3a2/0x420 [ 290.518165][T11092] __x64_sys_recvmmsg+0x198/0x250 [ 290.518196][T11092] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 290.518236][T11092] do_syscall_64+0x166/0x520 [ 290.518268][T11092] ? trace_irq_disable+0x3b/0x140 [ 290.518291][T11092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.518315][T11092] ? clear_bhb_loop+0x70/0xc0 [ 290.518343][T11092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.518368][T11092] RIP: 0033:0x7fc0f6d9e159 [ 290.518389][T11092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.518409][T11092] RSP: 002b:00007fc0f7c6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 290.518435][T11092] RAX: ffffffffffffffda RBX: 00007fc0f7026090 RCX: 00007fc0f6d9e159 [ 290.518452][T11092] RDX: 0000000000000003 RSI: 0000200000005200 RDI: 0000000000000004 [ 290.518467][T11092] RBP: 00007fc0f7c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 290.518482][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.518496][T11092] R13: 00007fc0f7026128 R14: 00007fc0f7026090 R15: 00007ffee667fc78 [ 290.518535][T11092] [ 290.739632][T11093] netlink: 'syz.4.1495': attribute type 10 has an invalid length. [ 291.792684][T11107] FAULT_INJECTION: forcing a failure. [ 291.792684][T11107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.792743][T11107] CPU: 1 UID: 0 PID: 11107 Comm: syz.3.1499 Not tainted syzkaller #0 PREEMPT(full) [ 291.792771][T11107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.792786][T11107] Call Trace: [ 291.792795][T11107] [ 291.792806][T11107] dump_stack_lvl+0xe8/0x150 [ 291.792847][T11107] should_fail_ex+0x410/0x560 [ 291.792890][T11107] _copy_to_user+0x31/0xb0 [ 291.792918][T11107] simple_read_from_buffer+0xe1/0x170 [ 291.792956][T11107] proc_fail_nth_read+0x1bb/0x230 [ 291.792990][T11107] ? common_file_perm+0x20e/0x2b0 [ 291.793018][T11107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.793056][T11107] ? rw_verify_area+0x24a/0x4c0 [ 291.793088][T11107] ? tun_chr_write_iter+0x18a/0x200 [ 291.793123][T11107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.793156][T11107] vfs_read+0x213/0xa80 [ 291.793196][T11107] ? __pfx___mutex_lock+0x10/0x10 [ 291.793231][T11107] ? __pfx_vfs_read+0x10/0x10 [ 291.793267][T11107] ? __fget_files+0x2a/0x420 [ 291.793302][T11107] ? __fget_files+0x3a2/0x420 [ 291.793331][T11107] ? __fget_files+0x2a/0x420 [ 291.793372][T11107] ksys_read+0x150/0x270 [ 291.793407][T11107] ? __pfx_ksys_read+0x10/0x10 [ 291.793453][T11107] do_syscall_64+0x166/0x520 [ 291.793487][T11107] ? trace_irq_disable+0x3b/0x140 [ 291.793509][T11107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.793533][T11107] ? clear_bhb_loop+0x70/0xc0 [ 291.793565][T11107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.793589][T11107] RIP: 0033:0x7f79a715e98e [ 291.793619][T11107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.793639][T11107] RSP: 002b:00007f79a80c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.793670][T11107] RAX: ffffffffffffffda RBX: 00007f79a80c76c0 RCX: 00007f79a715e98e [ 291.793688][T11107] RDX: 000000000000000f RSI: 00007f79a80c70a0 RDI: 0000000000000003 [ 291.793702][T11107] RBP: 00007f79a80c7090 R08: 0000000000000000 R09: 0000000000000000 [ 291.793717][T11107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.793731][T11107] R13: 00007f79a7426038 R14: 00007f79a7425fa0 R15: 00007ffd30fa6e98 [ 291.793769][T11107] [ 292.064613][T11111] netlink: 'syz.1.1501': attribute type 1 has an invalid length. [ 292.312167][T11119] netlink: 728 bytes leftover after parsing attributes in process `syz.0.1500'. [ 292.472702][T11111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.586741][T11117] bond1: (slave geneve2): making interface the new active one [ 292.600652][T11117] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 294.213396][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.213483][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.213545][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.213590][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.674299][T11173] FAULT_INJECTION: forcing a failure. [ 294.674299][T11173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.674790][T11173] CPU: 0 UID: 0 PID: 11173 Comm: syz.2.1515 Not tainted syzkaller #0 PREEMPT(full) [ 294.674851][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.674885][T11173] Call Trace: [ 294.674914][T11173] [ 294.674936][T11173] dump_stack_lvl+0xe8/0x150 [ 294.675033][T11173] should_fail_ex+0x410/0x560 [ 294.675132][T11173] _copy_to_user+0x31/0xb0 [ 294.675200][T11173] bpf_test_finish+0x52e/0x690 [ 294.675303][T11173] ? __pfx_bpf_test_finish+0x10/0x10 [ 294.675422][T11173] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 294.675550][T11173] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 294.675636][T11173] ? __fget_files+0x2a/0x420 [ 294.675723][T11173] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 294.675797][T11173] bpf_prog_test_run+0x2c5/0x340 [ 294.675889][T11173] __sys_bpf+0xa22/0xd90 [ 294.675994][T11173] ? __pfx___sys_bpf+0x10/0x10 [ 294.676093][T11173] ? __fget_files+0x2a/0x420 [ 294.676208][T11173] ? ksys_write+0x242/0x270 [ 294.676298][T11173] ? __pfx_ksys_write+0x10/0x10 [ 294.676394][T11173] __x64_sys_bpf+0xba/0xd0 [ 294.676467][T11173] do_syscall_64+0x166/0x520 [ 294.676552][T11173] ? trace_irq_disable+0x3b/0x140 [ 294.676608][T11173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.676668][T11173] ? clear_bhb_loop+0x70/0xc0 [ 294.676743][T11173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.676800][T11173] RIP: 0033:0x7fc0f6d9e159 [ 294.676863][T11173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.676907][T11173] RSP: 002b:00007fc0f7c8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.676969][T11173] RAX: ffffffffffffffda RBX: 00007fc0f7025fa0 RCX: 00007fc0f6d9e159 [ 294.677028][T11173] RDX: 000000000000003a RSI: 0000200000000280 RDI: 000000000000000a [ 294.677069][T11173] RBP: 00007fc0f7c8d090 R08: 0000000000000000 R09: 0000000000000000 [ 294.677101][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.677142][T11173] R13: 00007fc0f7026038 R14: 00007fc0f7025fa0 R15: 00007ffee667fc78 [ 294.677230][T11173] [ 294.949388][T11175] ip6erspan0: entered allmulticast mode [ 295.097047][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 295.907790][T11193] FAULT_INJECTION: forcing a failure. [ 295.907790][T11193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.908278][T11193] CPU: 0 UID: 0 PID: 11193 Comm: syz.0.1522 Not tainted syzkaller #0 PREEMPT(full) [ 295.908353][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.908388][T11193] Call Trace: [ 295.908419][T11193] [ 295.908441][T11193] dump_stack_lvl+0xe8/0x150 [ 295.908577][T11193] should_fail_ex+0x410/0x560 [ 295.908690][T11193] _copy_to_user+0x31/0xb0 [ 295.908774][T11193] simple_read_from_buffer+0xe1/0x170 [ 295.908872][T11193] proc_fail_nth_read+0x1bb/0x230 [ 295.908961][T11193] ? common_file_perm+0x20e/0x2b0 [ 295.909030][T11193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.909129][T11193] ? rw_verify_area+0x24a/0x4c0 [ 295.909217][T11193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.909309][T11193] vfs_read+0x213/0xa80 [ 295.909415][T11193] ? __pfx___mutex_lock+0x10/0x10 [ 295.909527][T11193] ? __pfx_vfs_read+0x10/0x10 [ 295.909613][T11193] ? __fget_files+0x2a/0x420 [ 295.909701][T11193] ? __fget_files+0x3a2/0x420 [ 295.909787][T11193] ? __fget_files+0x2a/0x420 [ 295.909885][T11193] ksys_read+0x150/0x270 [ 295.909974][T11193] ? __pfx_ksys_read+0x10/0x10 [ 295.910090][T11193] do_syscall_64+0x166/0x520 [ 295.910169][T11193] ? trace_irq_disable+0x3b/0x140 [ 295.910223][T11193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.910280][T11193] ? clear_bhb_loop+0x70/0xc0 [ 295.910345][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.910408][T11193] RIP: 0033:0x7fe82a35e98e [ 295.910464][T11193] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.910521][T11193] RSP: 002b:00007fe82b1a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.910584][T11193] RAX: ffffffffffffffda RBX: 00007fe82b1aa6c0 RCX: 00007fe82a35e98e [ 295.910627][T11193] RDX: 000000000000000f RSI: 00007fe82b1aa0a0 RDI: 0000000000000007 [ 295.910661][T11193] RBP: 00007fe82b1aa090 R08: 0000000000000000 R09: 0000000000000000 [ 295.910695][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.910744][T11193] R13: 00007fe82a626128 R14: 00007fe82a626090 R15: 00007ffd8f4c00d8 [ 295.910848][T11193] [ 296.150923][T11195] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1520'. [ 296.276056][T11189] sctp: [Deprecated]: syz.2.1521 (pid 11189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.276056][T11189] Use struct sctp_sack_info instead [ 297.016158][T11201] lo speed is unknown, defaulting to 1000 [ 298.630504][T11229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.735896][T11234] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1533'. [ 298.791722][T11231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.248074][T11243] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1537'. [ 299.248118][T11243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1537'. [ 299.248155][T11243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1537'. [ 299.414461][T11249] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1539'. [ 299.423964][T11249] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1539'. [ 299.437629][T11242] syzkaller0: entered promiscuous mode [ 299.438497][T11242] syzkaller0: entered allmulticast mode [ 299.465606][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 299.698623][T11252] netlink: 'syz.2.1540': attribute type 9 has an invalid length. [ 299.770251][T11253] lo speed is unknown, defaulting to 1000 [ 300.063704][T11264] FAULT_INJECTION: forcing a failure. [ 300.063704][T11264] name failslab, interval 1, probability 0, space 0, times 0 [ 300.077822][T11264] CPU: 1 UID: 0 PID: 11264 Comm: syz.2.1544 Not tainted syzkaller #0 PREEMPT(full) [ 300.077855][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.077875][T11264] Call Trace: [ 300.077889][T11264] [ 300.077900][T11264] dump_stack_lvl+0xe8/0x150 [ 300.077944][T11264] should_fail_ex+0x410/0x560 [ 300.077987][T11264] should_failslab+0xa8/0x100 [ 300.078016][T11264] ? skb_clone+0x212/0x3a0 [ 300.078043][T11264] kmem_cache_alloc_noprof+0xa1/0x600 [ 300.078081][T11264] ? skb_clone+0x212/0x3a0 [ 300.078114][T11264] skb_clone+0x212/0x3a0 [ 300.078150][T11264] __netlink_deliver_tap+0x413/0x860 [ 300.078191][T11264] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.078222][T11264] netlink_deliver_tap+0x19c/0x1b0 [ 300.078252][T11264] netlink_sendskb+0x68/0x140 [ 300.078288][T11264] netlink_rcv_skb+0x2a4/0x4a0 [ 300.078317][T11264] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.078362][T11264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.078404][T11264] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.078432][T11264] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.078467][T11264] netlink_unicast+0x7bd/0x940 [ 300.078504][T11264] netlink_sendmsg+0x813/0xb40 [ 300.078543][T11264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.078581][T11264] ? apparmor_socket_sendmsg+0x98/0x360 [ 300.078619][T11264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.078645][T11264] sock_sendmsg_nosec+0x13a/0x180 [ 300.078680][T11264] ____sys_sendmsg+0x54e/0x850 [ 300.078711][T11264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.078747][T11264] ? import_iovec+0x73/0xa0 [ 300.078776][T11264] ___sys_sendmsg+0x2a5/0x360 [ 300.078800][T11264] ? __lock_acquire+0x6df/0x2e50 [ 300.078828][T11264] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.078892][T11264] ? __fget_files+0x2a/0x420 [ 300.078922][T11264] ? __fget_files+0x3a2/0x420 [ 300.078960][T11264] __x64_sys_sendmsg+0x1b1/0x290 [ 300.078988][T11264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.079036][T11264] do_syscall_64+0x166/0x520 [ 300.079069][T11264] ? trace_irq_disable+0x3b/0x140 [ 300.079091][T11264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.079115][T11264] ? clear_bhb_loop+0x70/0xc0 [ 300.079152][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.079176][T11264] RIP: 0033:0x7fc0f6d9e159 [ 300.079198][T11264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.079220][T11264] RSP: 002b:00007fc0f7c8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.079244][T11264] RAX: ffffffffffffffda RBX: 00007fc0f7025fa0 RCX: 00007fc0f6d9e159 [ 300.079261][T11264] RDX: 0000000000009080 RSI: 0000200000000200 RDI: 0000000000000003 [ 300.079276][T11264] RBP: 00007fc0f7c8d090 R08: 0000000000000000 R09: 0000000000000000 [ 300.079291][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.079304][T11264] R13: 00007fc0f7026038 R14: 00007fc0f7025fa0 R15: 00007ffee667fc78 [ 300.079341][T11264] [ 301.583932][T11293] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1552'. [ 301.594409][T11293] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1552'. [ 301.611841][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 301.698521][T11300] FAULT_INJECTION: forcing a failure. [ 301.698521][T11300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.715370][T11300] CPU: 1 UID: 0 PID: 11300 Comm: syz.2.1555 Not tainted syzkaller #0 PREEMPT(full) [ 301.715404][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.715420][T11300] Call Trace: [ 301.715430][T11300] [ 301.715441][T11300] dump_stack_lvl+0xe8/0x150 [ 301.715481][T11300] should_fail_ex+0x410/0x560 [ 301.715524][T11300] _copy_from_user+0x2d/0xb0 [ 301.715551][T11300] kstrtouint_from_user+0xd6/0x180 [ 301.715589][T11300] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 301.715633][T11300] ? lock_acquire+0x115/0x350 [ 301.715672][T11300] proc_fail_nth_write+0x8e/0x210 [ 301.715709][T11300] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 301.715754][T11300] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 301.715789][T11300] vfs_write+0x296/0xba0 [ 301.715834][T11300] ? __pfx_vfs_write+0x10/0x10 [ 301.715872][T11300] ? __fget_files+0x2a/0x420 [ 301.715909][T11300] ? __fget_files+0x3a2/0x420 [ 301.715940][T11300] ? __fget_files+0x2a/0x420 [ 301.715981][T11300] ksys_write+0x150/0x270 [ 301.716020][T11300] ? __pfx_ksys_write+0x10/0x10 [ 301.716068][T11300] do_syscall_64+0x166/0x520 [ 301.716102][T11300] ? trace_irq_disable+0x3b/0x140 [ 301.716125][T11300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.716161][T11300] ? clear_bhb_loop+0x70/0xc0 [ 301.716187][T11300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.716210][T11300] RIP: 0033:0x7fc0f6d5e98e [ 301.716232][T11300] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.716253][T11300] RSP: 002b:00007fc0f7c8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 301.716278][T11300] RAX: ffffffffffffffda RBX: 00007fc0f7c8d6c0 RCX: 00007fc0f6d5e98e [ 301.716296][T11300] RDX: 0000000000000001 RSI: 00007fc0f7c8d0a0 RDI: 0000000000000004 [ 301.716310][T11300] RBP: 00007fc0f7c8d090 R08: 0000000000000000 R09: 0000000000000000 [ 301.716325][T11300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.716339][T11300] R13: 00007fc0f7026038 R14: 00007fc0f7025fa0 R15: 00007ffee667fc78 [ 301.716376][T11300] [ 301.965928][T11296] siw: device registration error -23 [ 302.027757][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 302.227096][T11296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1554'. [ 302.535360][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.536327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.597670][T11325] tipc: Enabled bearer , priority 10 [ 303.553893][T11360] siw: device registration error -23 [ 303.723268][ T25] tipc: Node number set to 4288128587 [ 303.827044][T11362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1570'. [ 304.448875][T11370] FAULT_INJECTION: forcing a failure. [ 304.448875][T11370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.448933][T11370] CPU: 1 UID: 0 PID: 11370 Comm: syz.1.1573 Not tainted syzkaller #0 PREEMPT(full) [ 304.448963][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.448976][T11370] Call Trace: [ 304.448984][T11370] [ 304.448994][T11370] dump_stack_lvl+0xe8/0x150 [ 304.449036][T11370] should_fail_ex+0x410/0x560 [ 304.449078][T11370] _copy_to_user+0x31/0xb0 [ 304.449105][T11370] simple_read_from_buffer+0xe1/0x170 [ 304.449141][T11370] proc_fail_nth_read+0x1bb/0x230 [ 304.449177][T11370] ? common_file_perm+0x20e/0x2b0 [ 304.449203][T11370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.449239][T11370] ? rw_verify_area+0x24a/0x4c0 [ 304.449272][T11370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.449303][T11370] vfs_read+0x213/0xa80 [ 304.449339][T11370] ? __pfx___mutex_lock+0x10/0x10 [ 304.449375][T11370] ? __pfx_vfs_read+0x10/0x10 [ 304.449409][T11370] ? __fget_files+0x2a/0x420 [ 304.449445][T11370] ? __fget_files+0x3a2/0x420 [ 304.449474][T11370] ? __fget_files+0x2a/0x420 [ 304.449514][T11370] ksys_read+0x150/0x270 [ 304.449549][T11370] ? __pfx_ksys_read+0x10/0x10 [ 304.449605][T11370] do_syscall_64+0x166/0x520 [ 304.449642][T11370] ? trace_irq_disable+0x3b/0x140 [ 304.449665][T11370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.449689][T11370] ? clear_bhb_loop+0x70/0xc0 [ 304.449724][T11370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.449748][T11370] RIP: 0033:0x7f0f1d95e98e [ 304.449778][T11370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 304.449799][T11370] RSP: 002b:00007f0f1e792fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.449823][T11370] RAX: ffffffffffffffda RBX: 00007f0f1e7936c0 RCX: 00007f0f1d95e98e [ 304.449842][T11370] RDX: 000000000000000f RSI: 00007f0f1e7930a0 RDI: 0000000000000005 [ 304.449857][T11370] RBP: 00007f0f1e793090 R08: 0000000000000000 R09: 0000000000000000 [ 304.449872][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.449886][T11370] R13: 00007f0f1dc26038 R14: 00007f0f1dc25fa0 R15: 00007ffedfe0b158 [ 304.449922][T11370] [ 304.806859][T11374] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1574'. [ 304.929078][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 304.929351][ T5618] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 304.979588][T11376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.982525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.100111][T11371] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 305.215418][T11383] netlink: 'syz.3.1579': attribute type 11 has an invalid length. [ 305.353370][T11390] FAULT_INJECTION: forcing a failure. [ 305.353370][T11390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.353454][T11390] CPU: 1 UID: 0 PID: 11390 Comm: syz.4.1578 Not tainted syzkaller #0 PREEMPT(full) [ 305.353482][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.353497][T11390] Call Trace: [ 305.353506][T11390] [ 305.353516][T11390] dump_stack_lvl+0xe8/0x150 [ 305.353554][T11390] should_fail_ex+0x410/0x560 [ 305.353595][T11390] _copy_from_user+0x2d/0xb0 [ 305.353621][T11390] generic_map_update_batch+0x651/0x9a0 [ 305.353673][T11390] ? __pfx_generic_map_update_batch+0x10/0x10 [ 305.353708][T11390] ? __fget_files+0x2a/0x420 [ 305.353746][T11390] ? __pfx_generic_map_update_batch+0x10/0x10 [ 305.353779][T11390] bpf_map_do_batch+0x391/0x630 [ 305.353813][T11390] __sys_bpf+0xbe5/0xd90 [ 305.353848][T11390] ? __pfx___sys_bpf+0x10/0x10 [ 305.353886][T11390] ? __fget_files+0x2a/0x420 [ 305.353935][T11390] ? ksys_write+0x242/0x270 [ 305.353971][T11390] ? __pfx_ksys_write+0x10/0x10 [ 305.354010][T11390] __x64_sys_bpf+0xba/0xd0 [ 305.354035][T11390] do_syscall_64+0x166/0x520 [ 305.354068][T11390] ? trace_irq_disable+0x3b/0x140 [ 305.354090][T11390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.354114][T11390] ? clear_bhb_loop+0x70/0xc0 [ 305.354144][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.354167][T11390] RIP: 0033:0x7f963799e159 [ 305.354189][T11390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.354210][T11390] RSP: 002b:00007f96388b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.354242][T11390] RAX: ffffffffffffffda RBX: 00007f9637c25fa0 RCX: 00007f963799e159 [ 305.354260][T11390] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 305.354275][T11390] RBP: 00007f96388b3090 R08: 0000000000000000 R09: 0000000000000000 [ 305.354293][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.354308][T11390] R13: 00007f9637c26038 R14: 00007f9637c25fa0 R15: 00007ffc20771038 [ 305.354345][T11390] [ 306.051165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.052347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.062619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.518583][T11388] Cannot find set identified by id 65534 to match [ 307.011475][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 307.017780][ T5618] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 307.112220][T11425] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1586'. [ 307.172502][T11424] Cannot find set identified by id 65534 to match [ 307.496513][T11433] netlink: 'syz.1.1592': attribute type 1 has an invalid length. [ 308.151397][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1594'. [ 308.160412][T11444] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1596'. [ 308.851199][T11461] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 308.909512][T11462] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 309.085298][T11461] erspan0: entered promiscuous mode [ 309.091338][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 309.161097][T11464] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1602'. [ 309.255028][T11464] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1602'. [ 309.275893][T11471] syzkaller0: entered promiscuous mode [ 309.275936][T11471] syzkaller0: entered allmulticast mode [ 309.561851][T11477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'. [ 309.954943][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1611'. [ 310.409131][T11494] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 310.435232][T11494] bond2 (unregistering): Released all slaves [ 310.800444][T11512] netlink: 'syz.3.1616': attribute type 10 has an invalid length. [ 311.437514][T11525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.669503][T11534] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1624'. [ 311.869639][T11503] Cannot find set identified by id 65534 to match [ 312.025863][T11545] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 312.344126][T11555] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1634'. [ 312.492712][T11565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.492972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.517101][T11566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.517355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.819655][T11550] xt_LOG: prefix is not null-terminated [ 313.912731][T11608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1644'. [ 313.929483][T11608] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1644'. [ 314.279452][T11615] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1647'. [ 314.694028][T11623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.694233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.095272][T11626] xt_LOG: prefix is not null-terminated [ 315.147786][T11623] batman_adv: batadv0: Adding interface: macvtap1 [ 315.156294][T11623] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.175985][T11623] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 316.264358][T11660] Cannot find set identified by id 65534 to match [ 316.842137][T11679] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 316.885299][T11679] netlink: 'syz.4.1664': attribute type 11 has an invalid length. [ 316.885343][T11679] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.1664'. [ 316.925983][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1664'. [ 316.926031][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1664'. [ 316.951677][T11679] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1664'. [ 316.951740][T11679] nbd: illegal input index -1721480071 [ 317.261403][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.611777][T11692] batman_adv: batadv0: Adding interface: macvtap1 [ 317.612003][T11692] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.614504][T11692] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 317.990302][T11697] xt_LOG: prefix is not null-terminated [ 318.163976][T11713] syzkaller0: entered promiscuous mode [ 318.164383][T11713] syzkaller0: entered allmulticast mode [ 318.268319][T11718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1675'. [ 319.711849][T11674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.122952][T11742] ipip0: entered promiscuous mode [ 320.375551][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 320.391293][T11744] dvmrp0: entered allmulticast mode [ 320.406319][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 320.587959][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 320.641585][T11754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1685'. [ 320.745387][T11742] lo speed is unknown, defaulting to 1000 [ 321.737939][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.738034][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.738178][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.738327][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.739811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.192691][T11790] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 322.193139][T11790] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 322.193263][T11790] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 322.365613][T11790] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 324.965147][T11312] smbdirect: ib_dev[syz2] removed [ 325.233085][T11816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1702'. [ 325.245823][T11813] sctp: [Deprecated]: syz.3.1700 (pid 11813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.245823][T11813] Use struct sctp_sack_info instead [ 325.272410][T11813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1700'. [ 325.284242][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 325.904005][T11839] netlink: 'syz.3.1709': attribute type 29 has an invalid length. [ 325.912672][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 326.853013][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.853103][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.853190][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.853251][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.853818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.114379][T11862] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1717'. [ 327.754483][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 328.609786][T11908] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1728'. [ 328.882524][T11920] netlink: 'syz.2.1730': attribute type 2 has an invalid length. [ 328.926750][T11920] : entered promiscuous mode [ 329.395113][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 329.542930][T11938] netlink: 'syz.1.1738': attribute type 210 has an invalid length. [ 329.586515][T11938] netlink: 'syz.1.1738': attribute type 1 has an invalid length. [ 329.734633][T11938] bond2: entered promiscuous mode [ 329.744361][T11938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.899914][T11948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.907509][T11948] bond2: (slave ipip1): The slave device specified does not support setting the MAC address [ 329.918812][T11948] bond2: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 329.937884][T11948] bond2: (slave ipip1): making interface the new active one [ 329.946935][T11948] ipip1: entered promiscuous mode [ 329.956518][T11948] bond2: (slave ipip1): Enslaving as an active interface with an up link [ 330.376093][T11964] wg2 speed is unknown, defaulting to 1000 [ 330.376180][T11964] wg2 speed is unknown, defaulting to 1000 [ 330.377020][T11964] wg2 speed is unknown, defaulting to 1000 [ 330.419680][T11964] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 330.419946][T11964] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 330.424068][T11964] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 330.497693][T11964] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 330.541511][T11972] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1748'. [ 330.554297][T11964] wg2 speed is unknown, defaulting to 1000 [ 330.564027][T11964] wg2 speed is unknown, defaulting to 1000 [ 330.591522][T11964] wg2 speed is unknown, defaulting to 1000 [ 330.615198][T11964] wg2 speed is unknown, defaulting to 1000 [ 330.623374][T11964] wg2 speed is unknown, defaulting to 1000 [ 330.653379][T11970] netlink: 'syz.1.1747': attribute type 10 has an invalid length. [ 331.068329][T11982] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1752'. [ 332.065819][T12012] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 332.079441][T12012] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 332.520884][T12015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1761'. [ 332.619606][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.619694][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.619763][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.619817][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.620363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.180394][T12038] siw: device registration error -23 [ 333.266634][T12039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1766'. [ 333.328107][T12043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.328352][T12043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.328633][T12043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.401808][T12043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.403472][T12043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.613281][T12049] ip6erspan1: entered allmulticast mode [ 335.572531][T12086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.807003][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'. [ 335.807472][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1781'. [ 335.807566][T12099] netlink: 'syz.3.1781': attribute type 19 has an invalid length. [ 335.807610][T12099] netlink: 'syz.3.1781': attribute type 20 has an invalid length. [ 335.965654][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'. [ 335.977991][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1781'. [ 335.987940][T12102] netlink: 'syz.3.1781': attribute type 19 has an invalid length. [ 335.997364][T12102] netlink: 'syz.3.1781': attribute type 20 has an invalid length. [ 336.006067][ T80] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.023246][ T80] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.040941][ T80] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.126947][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1783'. [ 336.307161][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1782'. [ 337.034844][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1790'. [ 337.734427][T11312] net_ratelimit: 13 callbacks suppressed [ 337.734483][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.734551][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.734609][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.734666][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.735156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.115493][T12131] Cannot find set identified by id 65534 to match [ 338.146377][T12147] syzkaller0: entered promiscuous mode [ 338.147264][T12147] syzkaller0: entered allmulticast mode [ 338.311378][T12153] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1800'. [ 338.458851][T12152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1798'. [ 339.258229][T12180] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1807'. [ 339.302663][T12180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 339.782656][T12198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.852559][T12195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.867382][T12190] openvswitch: netlink: Message has 8 unknown bytes. [ 339.867923][T12190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.596941][T12207] syzkaller0: entered promiscuous mode [ 340.603351][T12207] syzkaller0: entered allmulticast mode [ 340.623025][T11311] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 340.623519][T11311] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.832008][T12214] __nla_validate_parse: 2 callbacks suppressed [ 340.832244][T12214] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1817'. [ 340.889499][T12219] geneve0: entered promiscuous mode [ 340.899767][T12219] batman_adv: batadv0: Adding interface: macvlan4 [ 340.906377][T12219] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.940547][T12219] batman_adv: batadv0: Interface activated: macvlan4 [ 340.983191][T12217] netlink: 'syz.0.1818': attribute type 10 has an invalid length. [ 341.171249][T12224] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1820'. [ 341.187628][T12224] Unknown options in mask 6 [ 341.312872][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1822'. [ 341.313331][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1822'. [ 341.628188][T12247] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1827'. [ 341.677845][T12242] bond6: option packets_per_slave: invalid value (600641588) [ 341.685814][T12242] bond6: option packets_per_slave: allowed values 0 - 65535 [ 341.697552][T12242] bond6 (unregistering): Released all slaves [ 341.704582][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1826'. [ 342.012403][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b5ec400: rx timeout, send abort [ 342.156918][T12259] FAULT_INJECTION: forcing a failure. [ 342.156918][T12259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.173181][T12259] CPU: 1 UID: 0 PID: 12259 Comm: syz.4.1830 Not tainted syzkaller #0 PREEMPT(full) [ 342.173218][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.173234][T12259] Call Trace: [ 342.173244][T12259] [ 342.173254][T12259] dump_stack_lvl+0xe8/0x150 [ 342.173295][T12259] should_fail_ex+0x410/0x560 [ 342.173337][T12259] _copy_from_user+0x2d/0xb0 [ 342.173380][T12259] generic_map_update_batch+0x651/0x9a0 [ 342.173424][T12259] ? __pfx_generic_map_update_batch+0x10/0x10 [ 342.173457][T12259] ? __fget_files+0x2a/0x420 [ 342.173494][T12259] ? __pfx_generic_map_update_batch+0x10/0x10 [ 342.173528][T12259] bpf_map_do_batch+0x391/0x630 [ 342.173560][T12259] __sys_bpf+0xbe5/0xd90 [ 342.173595][T12259] ? __pfx___sys_bpf+0x10/0x10 [ 342.173632][T12259] ? __fget_files+0x2a/0x420 [ 342.173685][T12259] ? ksys_write+0x242/0x270 [ 342.173721][T12259] ? __pfx_ksys_write+0x10/0x10 [ 342.173759][T12259] __x64_sys_bpf+0xba/0xd0 [ 342.173785][T12259] do_syscall_64+0x166/0x520 [ 342.173828][T12259] ? trace_irq_disable+0x3b/0x140 [ 342.173849][T12259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.173893][T12259] ? clear_bhb_loop+0x70/0xc0 [ 342.173922][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.173954][T12259] RIP: 0033:0x7f963799e159 [ 342.173976][T12259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.173995][T12259] RSP: 002b:00007f96388b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.174020][T12259] RAX: ffffffffffffffda RBX: 00007f9637c25fa0 RCX: 00007f963799e159 [ 342.174038][T12259] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 342.174053][T12259] RBP: 00007f96388b3090 R08: 0000000000000000 R09: 0000000000000000 [ 342.174075][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.174089][T12259] R13: 00007f9637c26038 R14: 00007f9637c25fa0 R15: 00007ffc20771038 [ 342.174124][T12259] [ 342.399947][T12254] ip6gretap0: entered promiscuous mode [ 342.399999][T12254] ip6gretap0: entered allmulticast mode [ 342.512927][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b5ee000: rx timeout, send abort [ 342.521310][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b5ec400: abort rx timeout. Force session deactivation [ 342.532212][T12263] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1832'. [ 342.854951][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.855043][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.855722][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.855798][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.856297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.013002][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b5ee000: abort rx timeout. Force session deactivation [ 343.399584][T12273] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 343.447265][T12273] bond3: (slave lo): Enslaving as an active interface with an up link [ 343.482792][T12273] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 343.676263][T12294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.796854][T12301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1844'. [ 344.494382][T12318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1848'. [ 344.494911][T12318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1848'. [ 344.764568][T12339] batadv_slave_1: entered promiscuous mode [ 344.879893][T12319] batadv_slave_1: left promiscuous mode [ 345.299863][T12358] netlink: 'syz.4.1856': attribute type 12 has an invalid length. [ 346.110867][T12383] siw: device registration error -23 [ 346.239386][T12383] __nla_validate_parse: 4 callbacks suppressed [ 346.239815][T12383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1865'. [ 346.907893][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1871'. [ 348.624044][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.624161][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.624330][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.624479][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.625773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.581971][T12403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1872'. [ 350.301733][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 350.318403][T12417] TC_ACT_REPEAT abuse ? [ 350.561317][T12423] lo speed is unknown, defaulting to 1000 [ 350.573138][T12423] wg2 speed is unknown, defaulting to 1000 [ 350.765066][T12430] siw: device registration error -23 [ 351.050732][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1882'. [ 351.145391][T12441] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1886'. [ 351.294898][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 351.458715][ T5618] block nbd0: Receive control failed (result -32) [ 351.800766][T12464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1894'. [ 351.835892][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1894'. [ 352.466463][T12456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.586958][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 352.776768][T12491] FAULT_INJECTION: forcing a failure. [ 352.776768][T12491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.776827][T12491] CPU: 1 UID: 0 PID: 12491 Comm: syz.1.1903 Not tainted syzkaller #0 PREEMPT(full) [ 352.776854][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.776870][T12491] Call Trace: [ 352.776970][T12491] [ 352.777043][T12491] dump_stack_lvl+0xe8/0x150 [ 352.777211][T12491] should_fail_ex+0x410/0x560 [ 352.777321][T12491] _copy_from_user+0x2d/0xb0 [ 352.777379][T12491] generic_map_update_batch+0x651/0x9a0 [ 352.777451][T12491] ? __pfx_generic_map_update_batch+0x10/0x10 [ 352.777513][T12491] ? __fget_files+0x2a/0x420 [ 352.777576][T12491] ? __pfx_generic_map_update_batch+0x10/0x10 [ 352.777607][T12491] bpf_map_do_batch+0x391/0x630 [ 352.777640][T12491] __sys_bpf+0xbe5/0xd90 [ 352.777673][T12491] ? __pfx___sys_bpf+0x10/0x10 [ 352.777708][T12491] ? __fget_files+0x2a/0x420 [ 352.777754][T12491] ? ksys_write+0x242/0x270 [ 352.777795][T12491] ? __pfx_ksys_write+0x10/0x10 [ 352.777832][T12491] __x64_sys_bpf+0xba/0xd0 [ 352.777857][T12491] do_syscall_64+0x166/0x520 [ 352.777993][T12491] ? trace_irq_disable+0x3b/0x140 [ 352.778020][T12491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.778063][T12491] ? clear_bhb_loop+0x70/0xc0 [ 352.778091][T12491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.778113][T12491] RIP: 0033:0x7f0f1d99e159 [ 352.778164][T12491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.778184][T12491] RSP: 002b:00007f0f1e793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.778215][T12491] RAX: ffffffffffffffda RBX: 00007f0f1dc25fa0 RCX: 00007f0f1d99e159 [ 352.778232][T12491] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 352.778246][T12491] RBP: 00007f0f1e793090 R08: 0000000000000000 R09: 0000000000000000 [ 352.778261][T12491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.778274][T12491] R13: 00007f0f1dc26038 R14: 00007f0f1dc25fa0 R15: 00007ffedfe0b158 [ 352.778308][T12491] [ 353.005600][T12494] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1901'. [ 353.015007][T12494] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1901'. [ 353.059159][T12495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1902'. [ 353.415907][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'. [ 353.738861][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.738999][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.739064][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.739120][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.739633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.268774][T12497] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 356.280161][T12499] veth1_to_bond: entered allmulticast mode [ 356.451254][T12503] bond0: (slave bond_slave_1): Releasing backup interface [ 356.524044][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 357.041174][T12542] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 357.052106][T12542] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 357.178892][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1919'. [ 357.192935][T12552] syzkaller0: entered promiscuous mode [ 357.198709][T12552] syzkaller0: entered allmulticast mode [ 357.227075][T12550] syzkaller1: entered promiscuous mode [ 357.241299][T12550] syzkaller1: entered allmulticast mode [ 357.260865][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 357.853258][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1923'. [ 358.721198][T12569] Cannot find set identified by id 65534 to match [ 359.049232][T12578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1928'. [ 359.096426][T12578] Bluetooth: MGMT ver 1.23 [ 359.216401][T12571] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.216733][T12571] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.372948][T12589] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 359.425587][T12594] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 359.436132][T12571] tipc: Resetting bearer [ 359.508600][T12571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.518825][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.518963][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.519023][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.519073][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.519676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.570848][T12571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.263181][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'. [ 360.274364][ T80] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.274422][ T80] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.274464][ T80] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.274506][ T80] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.896384][T12627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1940'. [ 361.405830][T12655] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 361.440156][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.694876][T12671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1948'. [ 361.818639][T12655] bond5: entered promiscuous mode [ 361.824696][T12655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.841972][T12657] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 361.859844][T12657] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 361.871688][T12657] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 362.055690][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1947'. [ 362.158331][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.158452][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.219991][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.220095][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.406520][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1949'. [ 362.474592][T12690] syzkaller0: left promiscuous mode [ 362.475497][T12690] syzkaller0: left allmulticast mode [ 362.488345][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1949'. [ 362.888050][T12707] netlink: 'syz.4.1953': attribute type 2 has an invalid length. [ 362.900496][T12707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.427393][T12715] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1956'. [ 364.619687][ T1518] net_ratelimit: 8 callbacks suppressed [ 364.619858][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.619925][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.619970][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.620011][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.620808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.352148][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.352254][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.354422][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.354493][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.597388][T12708] syzkaller0: entered promiscuous mode [ 365.604130][T12708] syzkaller0: entered allmulticast mode [ 365.918092][T12722] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1958'. [ 366.164223][T12720] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 366.201997][T12720] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.371462][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.418148][T12722] macvtap1: entered allmulticast mode [ 366.423936][T12722] veth0_to_bridge: entered allmulticast mode [ 366.484785][T12722] veth0_to_bridge: left allmulticast mode [ 366.945983][T12753] FAULT_INJECTION: forcing a failure. [ 366.945983][T12753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.961081][T12753] CPU: 1 UID: 0 PID: 12753 Comm: syz.0.1963 Not tainted syzkaller #0 PREEMPT(full) [ 366.961114][T12753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.961141][T12753] Call Trace: [ 366.961151][T12753] [ 366.961162][T12753] dump_stack_lvl+0xe8/0x150 [ 366.961205][T12753] should_fail_ex+0x410/0x560 [ 366.961247][T12753] _copy_from_user+0x2d/0xb0 [ 366.961275][T12753] generic_map_update_batch+0x6a3/0x9a0 [ 366.961320][T12753] ? __pfx_generic_map_update_batch+0x10/0x10 [ 366.961354][T12753] ? __fget_files+0x2a/0x420 [ 366.961392][T12753] ? __pfx_generic_map_update_batch+0x10/0x10 [ 366.961426][T12753] bpf_map_do_batch+0x391/0x630 [ 366.961459][T12753] __sys_bpf+0xbe5/0xd90 [ 366.961516][T12753] ? __pfx___sys_bpf+0x10/0x10 [ 366.961552][T12753] ? __fget_files+0x2a/0x420 [ 366.961609][T12753] ? ksys_write+0x242/0x270 [ 366.961644][T12753] ? __pfx_ksys_write+0x10/0x10 [ 366.961684][T12753] __x64_sys_bpf+0xba/0xd0 [ 366.961710][T12753] do_syscall_64+0x166/0x520 [ 366.961744][T12753] ? trace_irq_disable+0x3b/0x140 [ 366.961765][T12753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.961789][T12753] ? clear_bhb_loop+0x70/0xc0 [ 366.961817][T12753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.961842][T12753] RIP: 0033:0x7fe82a39e159 [ 366.961863][T12753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.961884][T12753] RSP: 002b:00007fe82b1cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.961909][T12753] RAX: ffffffffffffffda RBX: 00007fe82a625fa0 RCX: 00007fe82a39e159 [ 366.961927][T12753] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 366.961942][T12753] RBP: 00007fe82b1cb090 R08: 0000000000000000 R09: 0000000000000000 [ 366.961956][T12753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.961970][T12753] R13: 00007fe82a626038 R14: 00007fe82a625fa0 R15: 00007ffd8f4c00d8 [ 366.962006][T12753] [ 367.497085][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 367.793264][T12776] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1969'. [ 367.814112][T12776] bond0: option arp_validate: invalid value (18446744072172240385) [ 367.889012][T12779] netlink: 'syz.1.1968': attribute type 10 has an invalid length. [ 368.188476][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 368.390811][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 369.455850][T12835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1984'. [ 369.858744][T12854] netlink: 'syz.1.1991': attribute type 10 has an invalid length. [ 369.916554][T12858] netlink: 'syz.1.1991': attribute type 10 has an invalid length. [ 369.940443][T12854] team0: Port device dummy0 added [ 370.021028][T12858] team0: Port device dummy0 removed [ 370.172559][T12867] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 370.261641][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.375924][T11312] net_ratelimit: 8 callbacks suppressed [ 370.375994][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.376111][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.376613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.225849][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2002'. [ 371.325105][T12906] xt_LOG: prefix is not null-terminated [ 371.342048][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'. [ 371.544041][T12881] syzkaller0: entered promiscuous mode [ 371.545035][T12881] syzkaller0: entered allmulticast mode [ 371.568992][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2002'. [ 371.582401][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2002'. [ 371.584295][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2002'. [ 376.020154][T12954] netlink: 'syz.3.2013': attribute type 46 has an invalid length. [ 376.067582][T12958] __nla_validate_parse: 20 callbacks suppressed [ 376.067781][T12958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2011'. [ 376.136670][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.136823][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.137941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.691428][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.892256][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.892351][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.892767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.652675][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.652769][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.653180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.412452][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.412565][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.412987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.169807][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.169882][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.170221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.929689][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.929791][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.930242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.691463][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.691572][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.691993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.449905][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.449998][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.450433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.209725][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.209827][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.210261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.894512][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 424.785515][T13018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2031'. [ 425.397511][T13034] tipc: Enabled bearer , priority 10 [ 425.473713][T13034] ip_tables: iptables: counters copy to user failed while replacing table [ 425.689744][T13044] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2044'. [ 425.876043][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2041'. [ 425.958162][T13042] netlink: 'syz.2.2041': attribute type 15 has an invalid length. [ 426.077198][T13063] netlink: 'syz.1.2047': attribute type 10 has an invalid length. [ 426.077241][T13063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2047'. [ 426.163055][T13051] ovs-s: entered promiscuous mode [ 426.217355][T13057] openvswitch: ovs-s: Dropping previously announced user features [ 426.481884][T13067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2048'. [ 426.509690][ T989] tipc: Node number set to 1508501322 [ 427.075243][T13088] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2052'. [ 427.147526][T13092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2056'. [ 427.293453][T13090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2055'. [ 427.337877][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.362113][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.375358][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.962412][T13110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2062'. [ 427.972843][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.972911][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.973316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.346103][T13123] No such timeout policy "syz1" [ 428.362013][T13125] No such timeout policy "syz1" [ 428.527552][T13130] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 428.548366][T13130] bond6 (unregistering): Released all slaves [ 428.978003][T13145] __nla_validate_parse: 3 callbacks suppressed [ 428.985274][T13145] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2072'. [ 429.111754][T13147] macsec2: entered promiscuous mode [ 429.111798][T13147] hsr0: entered promiscuous mode [ 429.135398][T13147] hsr0: left promiscuous mode [ 429.324825][T13155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2076'. [ 429.489281][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2078'. [ 429.665847][T13165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2080'. [ 429.909338][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.934691][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.993523][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.007375][T13169] FAULT_INJECTION: forcing a failure. [ 430.007375][T13169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.026410][T13169] CPU: 1 UID: 0 PID: 13169 Comm: syz.0.2081 Not tainted syzkaller #0 PREEMPT(full) [ 430.026451][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.026466][T13169] Call Trace: [ 430.026478][T13169] [ 430.026493][T13169] dump_stack_lvl+0xe8/0x150 [ 430.026533][T13169] should_fail_ex+0x410/0x560 [ 430.026574][T13169] _copy_from_user+0x2d/0xb0 [ 430.026600][T13169] generic_map_update_batch+0x6a3/0x9a0 [ 430.026644][T13169] ? __pfx_generic_map_update_batch+0x10/0x10 [ 430.026677][T13169] ? __fget_files+0x2a/0x420 [ 430.026713][T13169] ? __pfx_generic_map_update_batch+0x10/0x10 [ 430.026744][T13169] bpf_map_do_batch+0x391/0x630 [ 430.026794][T13169] __sys_bpf+0xbe5/0xd90 [ 430.026827][T13169] ? __pfx___sys_bpf+0x10/0x10 [ 430.026863][T13169] ? __fget_files+0x2a/0x420 [ 430.026909][T13169] ? ksys_write+0x242/0x270 [ 430.026945][T13169] ? __pfx_ksys_write+0x10/0x10 [ 430.026982][T13169] __x64_sys_bpf+0xba/0xd0 [ 430.027006][T13169] do_syscall_64+0x166/0x520 [ 430.027041][T13169] ? trace_irq_disable+0x3b/0x140 [ 430.027062][T13169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.027087][T13169] ? clear_bhb_loop+0x70/0xc0 [ 430.027112][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.027133][T13169] RIP: 0033:0x7fe82a39e159 [ 430.027155][T13169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.027175][T13169] RSP: 002b:00007fe82b1cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.027198][T13169] RAX: ffffffffffffffda RBX: 00007fe82a625fa0 RCX: 00007fe82a39e159 [ 430.027214][T13169] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 430.027227][T13169] RBP: 00007fe82b1cb090 R08: 0000000000000000 R09: 0000000000000000 [ 430.027241][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.027254][T13169] R13: 00007fe82a626038 R14: 00007fe82a625fa0 R15: 00007ffd8f4c00d8 [ 430.027289][T13169] [ 430.380115][T13173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2084'. [ 430.460557][T13176] ip_tables: iptables: counters copy to user failed while replacing table [ 430.617462][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'. [ 430.894801][T13195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2090'. [ 431.477838][T13207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2094'. [ 431.501184][T13207] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.2094'. [ 431.720932][T13215] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 431.735534][T13215] bond4 (unregistering): Released all slaves [ 432.103181][T13221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2099'. [ 432.217942][T13223] netlink: 'syz.2.2099': attribute type 2 has an invalid length. [ 432.226293][T13223] netlink: 'syz.2.2099': attribute type 11 has an invalid length. [ 433.009937][ T10] net_ratelimit: 3 callbacks suppressed [ 433.010001][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.089581][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.098840][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.110851][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.119400][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.323458][T13180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.692250][T13230] 8021q: adding VLAN 0 to HW filter on device bond4 [ 433.741916][T13235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 433.765806][T13235] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 433.766910][T13235] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 433.862627][T13230] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 433.882808][T13230] bond4: (slave wlan1): Enslaving as an active interface with an up link [ 434.369847][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.711168][T13268] __nla_validate_parse: 5 callbacks suppressed [ 434.711229][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2111'. [ 434.797879][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'. [ 435.011069][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.023160][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.076923][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.094454][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.154395][T13285] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2117'. [ 435.280415][T13288] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.399847][T13294] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 435.655890][T13305] netlink: 'syz.0.2120': attribute type 2 has an invalid length. [ 435.684992][T13309] syzkaller0: left promiscuous mode [ 435.690523][T13309] syzkaller0: left allmulticast mode [ 436.137961][T13325] netlink: 'syz.4.2126': attribute type 1 has an invalid length. [ 436.175617][T13321] tipc: New replicast peer: 255.255.255.255 [ 436.190075][T13321] tipc: Enabled bearer , priority 10 [ 436.205727][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2126'. [ 436.357389][T13325] bond2: entered promiscuous mode [ 436.357920][T13325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.431930][T13321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2126'. [ 436.472130][T13321] bond2: entered allmulticast mode [ 436.528962][T13321] bond2: (slave bridge3): making interface the new active one [ 436.529006][T13321] bridge3: entered promiscuous mode [ 436.529213][T13321] bridge3: entered allmulticast mode [ 436.553594][T13321] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 436.640781][T13334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2130'. [ 437.079281][T13345] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 437.178267][T13345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.417191][T13345] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 437.861295][T13355] syzkaller0: entered promiscuous mode [ 437.868607][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2137'. [ 437.879153][T13355] syzkaller0: entered allmulticast mode [ 437.910197][T13386] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2140'. [ 438.051672][ T9] net_ratelimit: 1 callbacks suppressed [ 438.051721][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.150698][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.285600][T13397] xt_TPROXY: Can be used only with -p tcp or -p udp [ 438.295926][T13397] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 438.726650][T13411] netlink: 'syz.4.2146': attribute type 1 has an invalid length. [ 438.838066][T13412] ip_tables: iptables: counters copy to user failed while replacing table [ 440.140647][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.144706][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.773754][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.089764][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.683490][T13394] ovs-s!: entered promiscuous mode [ 441.696557][T13403] netlink: 'syz.4.2146': attribute type 9 has an invalid length. [ 441.701376][T13410] tipc: Enabled bearer , priority 10 [ 441.702165][T13411] žÿ: renamed from team_slave_1 (while UP) [ 442.004668][T13419] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 442.051462][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.155431][T13419] 8021q: adding VLAN 0 to HW filter on device bond6 [ 442.245230][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2149'. [ 442.347261][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'. [ 442.356494][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2155'. [ 442.381975][T13432] geneve3: entered promiscuous mode [ 442.396064][T13432] geneve3: entered allmulticast mode [ 442.445984][T13436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2156'. [ 442.701751][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.088621][T13457] siw: device registration error -23 [ 443.133573][T13452] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2159'. [ 443.133621][T13452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2159'. [ 443.281145][T13457] FAULT_INJECTION: forcing a failure. [ 443.281145][T13457] name failslab, interval 1, probability 0, space 0, times 0 [ 443.281570][T13457] CPU: 0 UID: 0 PID: 13457 Comm: syz.2.2161 Not tainted syzkaller #0 PREEMPT(full) [ 443.281643][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.281683][T13457] Call Trace: [ 443.281709][T13457] [ 443.281731][T13457] dump_stack_lvl+0xe8/0x150 [ 443.281826][T13457] should_fail_ex+0x410/0x560 [ 443.281933][T13457] ? __alloc_skb+0x1db/0x7a0 [ 443.282196][T13457] should_failslab+0xa8/0x100 [ 443.282308][T13457] ? __alloc_skb+0x1db/0x7a0 [ 443.282392][T13457] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 443.282492][T13457] ? __alloc_skb+0x18d/0x7a0 [ 443.282579][T13457] ? __alloc_skb+0x1db/0x7a0 [ 443.282677][T13457] __alloc_skb+0x1db/0x7a0 [ 443.282781][T13457] netlink_sendmsg+0x5d4/0xb40 [ 443.282968][T13457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.283082][T13457] ? apparmor_socket_sendmsg+0x18b/0x360 [ 443.283235][T13457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.283301][T13457] sock_sendmsg_nosec+0x13a/0x180 [ 443.283423][T13457] ____sys_sendmsg+0x54e/0x850 [ 443.283503][T13457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.283580][T13457] ? import_iovec+0x73/0xa0 [ 443.283690][T13457] ___sys_sendmsg+0x2a5/0x360 [ 443.283738][T13457] ? __lock_acquire+0x6df/0x2e50 [ 443.283838][T13457] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.283993][T13457] ? __fget_files+0x2a/0x420 [ 443.284066][T13457] ? __fget_files+0x3a2/0x420 [ 443.284170][T13457] __x64_sys_sendmsg+0x1b1/0x290 [ 443.284251][T13457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.284385][T13457] do_syscall_64+0x166/0x520 [ 443.284469][T13457] ? trace_irq_disable+0x3b/0x140 [ 443.284522][T13457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.284589][T13457] ? clear_bhb_loop+0x70/0xc0 [ 443.284661][T13457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.284722][T13457] RIP: 0033:0x7fc0f6d9e159 [ 443.284777][T13457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.284828][T13457] RSP: 002b:00007fc0f7c8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.284892][T13457] RAX: ffffffffffffffda RBX: 00007fc0f7025fa0 RCX: 00007fc0f6d9e159 [ 443.284935][T13457] RDX: 000000003000c000 RSI: 0000200000000180 RDI: 0000000000000006 [ 443.284976][T13457] RBP: 00007fc0f7c8d090 R08: 0000000000000000 R09: 0000000000000000 [ 443.285009][T13457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.285059][T13457] R13: 00007fc0f7026038 R14: 00007fc0f7025fa0 R15: 00007ffee667fc78 [ 443.285144][T13457] [ 443.301420][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'. [ 443.609908][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.611587][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.704486][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.707591][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.722028][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.724388][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.733111][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.758141][T13465] bond4: option broadcast_neighbor: invalid value (3) [ 443.765486][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.787091][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.793859][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.817021][T13465] bond4 (unregistering): Released all slaves [ 443.826227][T13477] netlink: 'syz.4.2166': attribute type 1 has an invalid length. [ 443.910661][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2165'. [ 444.067961][T13477] 8021q: adding VLAN 0 to HW filter on device bond4 [ 444.086101][T13488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2167'. [ 444.467413][T13497] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2169'. [ 444.612263][T13506] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 444.625800][T13506] siw: device registration error -23 [ 444.723127][T13510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.887296][T13510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.937328][T13510] batman_adv: batadv0: Removing interface: vlan2 [ 444.951817][T13510] batman_adv: batadv0: Removing interface: macvtap1 [ 445.261989][T13527] syzkaller0: entered promiscuous mode [ 445.268876][T13527] syzkaller0: entered allmulticast mode [ 445.559629][T13539] netlink: 'syz.2.2182': attribute type 1 has an invalid length. [ 445.778782][T13539] 8021q: adding VLAN 0 to HW filter on device bond7 [ 446.142881][T13544] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 446.166745][T13544] bond7 (unregistering): Released all slaves [ 446.624558][T13570] netlink: 'syz.3.2191': attribute type 2 has an invalid length. [ 446.624769][T13570] netlink: 'syz.3.2191': attribute type 2 has an invalid length. [ 446.624950][T13570] netlink: 'syz.3.2191': attribute type 2 has an invalid length. [ 446.625108][T13570] netlink: 'syz.3.2191': attribute type 2 has an invalid length. [ 446.625330][T13570] netlink: 'syz.3.2191': attribute type 2 has an invalid length. [ 446.625483][T13570] netlink: 'syz.3.2191': attribute type 2 has an invalid length. [ 446.625701][T13570] netlink: 'syz.3.2191': attribute type 2 has an invalid length. [ 446.625863][T13570] netlink: 'syz.3.2191': attribute type 2 has an invalid length. [ 446.634171][T13561] syzkaller0: entered promiscuous mode [ 446.634382][T13561] syzkaller0: entered allmulticast mode [ 447.256308][T13588] siw: device registration error -23 [ 447.514333][T13594] tipc: New replicast peer: 255.255.255.255 [ 447.522931][T13594] tipc: Enabled bearer , priority 10 [ 447.537624][T13597] __nla_validate_parse: 18 callbacks suppressed [ 447.537676][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2198'. [ 447.616886][T13595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 447.760356][T13607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2198'. [ 447.857970][T13610] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 447.881285][T13594] bond4: entered promiscuous mode [ 447.888460][T13594] 8021q: adding VLAN 0 to HW filter on device bond4 [ 447.928156][T13607] bond4: entered allmulticast mode [ 447.992108][T13597] bond4: (slave bridge2): making interface the new active one [ 447.999954][T13597] bridge2: entered promiscuous mode [ 448.006136][T13597] bridge2: entered allmulticast mode [ 448.015660][T13597] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 448.433275][T13623] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2208'. [ 448.434385][T13623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2208'. [ 448.693082][ T10] tipc: Node number set to 1383280521 [ 448.708046][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'. [ 448.737597][T13628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2210'. [ 448.852871][T13630] xt_LOG: prefix is not null-terminated [ 449.075748][T13647] validate_nla: 60 callbacks suppressed [ 449.081876][T13647] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 449.091174][ T989] net_ratelimit: 349 callbacks suppressed [ 449.091194][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.302510][T13647] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.479771][T13662] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2216'. [ 449.880878][T13670] netlink: 'syz.0.2219': attribute type 30 has an invalid length. [ 449.960787][T13672] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2219'. [ 450.034458][T13670] bond5: option arp_missed_max: invalid value (0) [ 450.041510][T13670] bond5: option arp_missed_max: allowed values 1 - 255 [ 450.099723][T13670] bond5 (unregistering): Released all slaves [ 450.250569][T13687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.251752][T13687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.252901][T13687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.253747][T13687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.254810][T13687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.258998][T13687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.262236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.416747][T13696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2223'. [ 450.657854][T13701] tipc: Resetting bearer [ 450.775632][T13701] tipc: Disabling bearer [ 450.851523][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.650075][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.802397][T13675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.895052][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 453.025443][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 453.196992][T13717] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2228'. [ 453.208695][T13716] tipc: Enabling of bearer rejected, already enabled [ 453.219284][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2231'. [ 453.232418][T13716] netlink: 'syz.4.2231': attribute type 1 has an invalid length. [ 453.289297][T13716] bond7: entered promiscuous mode [ 453.295327][T13716] 8021q: adding VLAN 0 to HW filter on device bond7 [ 453.350245][T13716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2231'. [ 453.392415][T13716] bond7: entered allmulticast mode [ 453.414915][T13716] bond7: (slave bridge4): making interface the new active one [ 453.422858][T13716] bridge4: entered promiscuous mode [ 453.428420][T13716] bridge4: entered allmulticast mode [ 453.436481][T13716] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 453.722776][T13725] syzkaller0: entered promiscuous mode [ 453.723198][T13725] syzkaller0: entered allmulticast mode [ 453.873405][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'. [ 454.047763][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'. [ 454.060695][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2235'. [ 454.135686][T13749] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2237'. [ 454.136148][T13749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2237'. [ 454.223079][T11312] net_ratelimit: 7 callbacks suppressed [ 454.223150][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.702697][T13764] netlink: 'syz.3.2241': attribute type 10 has an invalid length. [ 454.869695][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.920961][T13775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.921505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.042763][T13764] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.063427][T13764] bond0: (slave team0): Enslaving as an active interface with an up link [ 455.175880][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.656653][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.409998][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.779337][T13840] netlink: 'syz.3.2263': attribute type 1 has an invalid length. [ 457.890048][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.049801][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.049930][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.305224][T13832] tipc: Started in network mode [ 458.310530][T13832] tipc: Node identity 1af5d04c48d3, cluster identity 4711 [ 458.323611][T13832] tipc: Enabled bearer , priority 0 [ 458.714447][T13853] __nla_validate_parse: 12 callbacks suppressed [ 458.714509][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2268'. [ 458.734929][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 458.735214][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 458.763178][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'. [ 458.814617][T13859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2271'. [ 459.439058][ T5712] tipc: Node number set to 1378275404 [ 459.703817][T13885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2282'. [ 459.729924][ T5712] net_ratelimit: 2 callbacks suppressed [ 459.729996][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.971250][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.210916][T13899] tipc: New replicast peer: 255.255.255.255 [ 460.213293][T13899] tipc: Enabled bearer , priority 10 [ 460.228323][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'. [ 460.268108][T13899] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 460.421954][T13901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2288'. [ 460.470177][T13899] bond8: entered promiscuous mode [ 460.477325][T13899] 8021q: adding VLAN 0 to HW filter on device bond8 [ 460.490248][T13901] bond8: entered allmulticast mode [ 460.525878][T13906] bond8: (slave bridge3): making interface the new active one [ 460.535881][T13906] bridge3: entered promiscuous mode [ 460.542040][T13906] bridge3: entered allmulticast mode [ 460.552158][T13906] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 460.689977][T13910] syzkaller0: entered promiscuous mode [ 460.695700][T13910] syzkaller0: entered allmulticast mode [ 460.707395][T13910] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2290'. [ 461.049941][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.117264][T13918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2294'. [ 461.130316][T13917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.134465][T13917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.136120][T13917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.167458][T13917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.168752][T13917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.171810][T13917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.179427][T13917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.338235][ T5712] tipc: Node number set to 3752425678 [ 461.815367][T13937] tipc: Enabled bearer , priority 10 [ 462.379603][T13943] syzkaller0: left promiscuous mode [ 462.386728][T13943] syzkaller0: left allmulticast mode [ 463.779875][T13960] __nla_validate_parse: 4 callbacks suppressed [ 463.784617][T13960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2311'. [ 464.121691][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2311'. [ 464.440394][T13972] FAULT_INJECTION: forcing a failure. [ 464.440394][T13972] name failslab, interval 1, probability 0, space 0, times 0 [ 464.440643][T13972] CPU: 0 UID: 0 PID: 13972 Comm: syz.3.2315 Not tainted syzkaller #0 PREEMPT(full) [ 464.440671][T13972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.440686][T13972] Call Trace: [ 464.440695][T13972] [ 464.440705][T13972] dump_stack_lvl+0xe8/0x150 [ 464.440744][T13972] should_fail_ex+0x410/0x560 [ 464.440783][T13972] ? __alloc_skb+0x1db/0x7a0 [ 464.440817][T13972] should_failslab+0xa8/0x100 [ 464.440845][T13972] ? __alloc_skb+0x1db/0x7a0 [ 464.440876][T13972] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 464.440911][T13972] ? __alloc_skb+0x18d/0x7a0 [ 464.440944][T13972] ? __alloc_skb+0x1db/0x7a0 [ 464.440985][T13972] __alloc_skb+0x1db/0x7a0 [ 464.441025][T13972] sock_wmalloc+0xb2/0x130 [ 464.441053][T13972] pppol2tp_sendmsg+0x17d/0x610 [ 464.441208][T13972] ? apparmor_socket_sendmsg+0x98/0x360 [ 464.441246][T13972] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 464.441279][T13972] sock_sendmsg_nosec+0x13a/0x180 [ 464.441313][T13972] ____sys_sendmsg+0x54e/0x850 [ 464.441343][T13972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.441378][T13972] ? import_iovec+0x73/0xa0 [ 464.441406][T13972] ___sys_sendmsg+0x2a5/0x360 [ 464.441428][T13972] ? __lock_acquire+0x6df/0x2e50 [ 464.441457][T13972] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.441479][T13972] ? __lock_acquire+0x6df/0x2e50 [ 464.441514][T13972] ? kstrtouint+0x6e/0xe0 [ 464.441623][T13972] __sys_sendmmsg+0x273/0x4d0 [ 464.441655][T13972] ? __pfx___sys_sendmmsg+0x10/0x10 [ 464.441690][T13972] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 464.441773][T13972] ? ksys_write+0x242/0x270 [ 464.441808][T13972] ? __pfx_ksys_write+0x10/0x10 [ 464.441848][T13972] __x64_sys_sendmmsg+0xa0/0xc0 [ 464.441875][T13972] do_syscall_64+0x166/0x520 [ 464.441907][T13972] ? trace_irq_disable+0x3b/0x140 [ 464.441929][T13972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.441952][T13972] ? clear_bhb_loop+0x70/0xc0 [ 464.441980][T13972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.442003][T13972] RIP: 0033:0x7f79a719e159 [ 464.442024][T13972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.442045][T13972] RSP: 002b:00007f79a80c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 464.442069][T13972] RAX: ffffffffffffffda RBX: 00007f79a7425fa0 RCX: 00007f79a719e159 [ 464.442092][T13972] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000005 [ 464.442108][T13972] RBP: 00007f79a80c7090 R08: 0000000000000000 R09: 0000000000000000 [ 464.442122][T13972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.442136][T13972] R13: 00007f79a7426038 R14: 00007f79a7425fa0 R15: 00007ffd30fa6e98 [ 464.442172][T13972] [ 465.202318][ T5712] net_ratelimit: 16 callbacks suppressed [ 465.202373][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.751674][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.409980][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.182824][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.199265][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.862632][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.992820][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.992900][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.993947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.249037][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.139693][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.667012][ C0] sched: DL replenish lagged too much [ 474.330485][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.652663][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.697385][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.870043][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.371778][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.291300][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.089753][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.601412][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.601503][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.602405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.529699][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.321199][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.013936][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.111057][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.111107][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.383780][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.901990][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.902095][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.903143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.265941][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.532213][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.000273][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.019619][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.222163][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.009175][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.324074][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.023005][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.023111][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.024192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.051333][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.101461][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.352713][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.722128][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.049697][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.080231][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.971509][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.160185][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.211199][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.211299][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.212492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.701100][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.941306][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.319527][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.359643][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.602705][T13995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.709692][T13995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.719142][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.181390][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.930592][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.291922][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.554446][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.581335][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.609298][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.309667][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.309761][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.117512][ T5629] net_ratelimit: 1 callbacks suppressed [ 516.117565][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.232438][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.374883][T13995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.820843][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.489258][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.489353][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.491607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.966416][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.012396][T13995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.602032][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.608773][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 523.894659][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.260460][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.280742][T14010] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.392754][T14010] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.551245][T14010] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.639355][T14010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 525.424249][T14009] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 525.682316][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.971892][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.889301][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.889390][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.890799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.801121][T14009] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 529.949182][T14009] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 530.461197][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.121438][T14013] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 531.262054][T14013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 531.847327][T14013] Bluetooth: hci5: command tx timeout [ 531.909315][T14013] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 532.783118][T14013] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 533.490714][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.057783][T14013] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 534.063671][T14013] Bluetooth: hci5: command tx timeout [ 534.381146][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 534.854369][T14013] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 535.363239][T14013] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 535.790432][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.549802][T14009] Bluetooth: hci5: command tx timeout [ 537.800192][T14009] Bluetooth: hci7: command tx timeout [ 538.978831][T14013] Bluetooth: hci6: command tx timeout [ 538.993461][T14013] Bluetooth: hci5: command tx timeout [ 539.478309][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.478383][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.480909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.242237][T14013] Bluetooth: hci7: command tx timeout [ 540.834755][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.839241][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.407691][T14013] Bluetooth: hci7: command tx timeout [ 543.420314][T14013] Bluetooth: hci6: command tx timeout [ 544.122244][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.507021][T14013] Bluetooth: hci7: command tx timeout [ 544.639625][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.090646][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.592507][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.592595][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.594194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.656121][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.659810][T14013] Bluetooth: hci6: command tx timeout [ 545.680283][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.710396][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.880419][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.939538][ T5627] syz_tun (unregistering): left allmulticast mode [ 549.763947][T14013] Bluetooth: hci6: command tx timeout [ 550.159526][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.389595][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.389688][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.392541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.829543][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.069366][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.615563][T14013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 552.809135][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.835127][T14013] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 553.170676][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.352457][T14013] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 554.289891][T14013] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 555.509281][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 556.510747][T14009] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 557.090055][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.151845][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.214071][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 558.232722][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.232788][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.234429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.808249][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 558.878504][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 558.912482][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 560.321383][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.348254][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.865083][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.221397][T14009] Bluetooth: hci1: command tx timeout [ 561.311848][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.090464][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.324344][T14009] Bluetooth: hci4: command tx timeout [ 563.324975][T14009] Bluetooth: hci1: command tx timeout [ 563.529766][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.591476][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.041444][T14009] Bluetooth: hci1: command tx timeout [ 566.050711][T14009] Bluetooth: hci4: command tx timeout [ 566.192432][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.389962][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.572067][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.080977][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.752149][ T5631] Bluetooth: hci4: command tx timeout [ 568.761145][ T5631] Bluetooth: hci1: command tx timeout [ 569.011711][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.011817][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.013549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.039278][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.069199][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.442269][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.669076][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.913640][T14009] Bluetooth: hci4: command tx timeout [ 574.691173][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.152112][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.660880][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.660952][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.664769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.763038][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.049356][ T7874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.059114][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.761171][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.799287][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.135937][ T10] net_ratelimit: 4 callbacks suppressed [ 580.136003][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.151166][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.862681][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.031923][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.035238][T14009] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 582.160137][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.847033][T14009] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 583.931019][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.931122][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.933450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.506239][T14009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 585.029940][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.359888][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.307127][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.760354][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.760435][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.762527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.780402][T14009] Bluetooth: hci0: command 0x1001 tx timeout [ 589.883871][T14046] Bluetooth: hci0: Opcode 0x1001 failed: -110 [ 590.501306][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.011810][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.009808][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.961376][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.040754][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.511140][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.541737][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.171296][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.310093][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.139116][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.352358][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.794076][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.260492][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.980780][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.351891][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.460700][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.621606][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.632787][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.249547][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.249652][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.254053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.589694][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.989771][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.519311][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.546111][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.799274][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.799341][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.801638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.422026][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.679273][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.061801][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.581159][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.291394][ T49] net_ratelimit: 5 callbacks suppressed [ 622.291464][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.291528][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.294106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.338997][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.039163][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.601319][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.311417][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.549258][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.519014][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.242123][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.451026][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.852789][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.852888][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.860948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.911780][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.220349][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.542521][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.762328][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.150803][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.459697][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.120829][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.391745][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.559845][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.621208][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.621310][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.626457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.171247][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.451060][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.821283][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.839136][ T1518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.351651][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.650338][T13995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.832126][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.862793][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.472095][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.343313][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 650.680988][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.681102][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.684080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.112456][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.232230][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.667993][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.832751][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.041451][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.489622][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.959222][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.660561][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.660641][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.663511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.367801][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.282620][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.409790][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.121968][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.000049][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.451614][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.925885][ T5631] Bluetooth: hci7: command 0x0406 tx timeout [ 665.840998][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.481398][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.481501][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.484300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.940995][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.008965][T14013] Bluetooth: hci6: command 0x0406 tx timeout [ 670.401404][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.631887][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 671.610899][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.359487][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.756290][ T5618] Bluetooth: hci0: command 0x1003 tx timeout [ 672.761319][T14061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 673.992267][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.992376][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.006506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.662267][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.111471][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.529347][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.639670][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.689244][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.929539][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.929634][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.932615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.079328][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.110322][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.679486][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.711050][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.761868][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.909755][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 683.526792][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.791666][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.751107][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.751200][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.754204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.999179][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.472259][ T7874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.001125][ T7874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.379293][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.769937][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.289187][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 689.801174][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.836331][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.000090][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.600961][T11312] net_ratelimit: 4 callbacks suppressed [ 691.601008][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.062717][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.062817][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.065824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.882041][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.391758][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.850124][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.692290][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.100293][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.159799][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.311898][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.960746][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.282334][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.399816][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.669401][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.669495][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.672734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.740237][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.782060][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.339226][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.490560][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.041228][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.041335][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.047805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.280008][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.151001][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.719817][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.328636][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.254916][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 716.279066][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.510028][ T7867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.069329][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.069396][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.072810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.719876][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.681923][ T1942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.112300][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.604446][ T31] INFO: task kworker/u8:5:80 blocked for more than 146 seconds. [ 721.612736][ T31] Not tainted syzkaller #0 [ 721.617037][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.621224][ T31] task:kworker/u8:5 state:D stack:22576 pid:80 tgid:80 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 721.629790][ T31] Workqueue: netns cleanup_net [ 721.646428][ T31] Call Trace: [ 721.646459][ T31] [ 721.646502][ T31] __schedule+0x17db/0x58f0 [ 721.646693][ T31] ? __pfx___schedule+0x10/0x10 [ 721.646799][ T31] ? schedule+0x90/0x2b0 [ 721.646892][ T31] schedule+0x164/0x2b0 [ 721.646976][ T31] schedule_preempt_disabled+0x13/0x30 [ 721.647053][ T31] __mutex_lock+0x7c1/0x1550 [ 721.647159][ T31] ? __mutex_lock+0x5d4/0x1550 [ 721.647251][ T31] ? rtnl_net_dev_lock+0x257/0x2f0 [ 721.647436][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 721.647563][ T31] ? rtnl_net_dev_lock+0x36/0x2f0 [ 721.647657][ T31] ? rtnl_net_dev_lock+0x36/0x2f0 [ 721.647743][ T31] rtnl_net_dev_lock+0x257/0x2f0 [ 721.647838][ T31] unregister_netdevice_notifier_dev_net+0x2f/0x1a0 [ 721.647927][ T31] ? nsim_destroy+0xe4/0x800 [ 721.648119][ T31] nsim_destroy+0x105/0x800 [ 721.648221][ T31] __nsim_dev_port_del+0x14e/0x200 [ 721.648316][ T31] nsim_dev_reload_destroy+0x288/0x490 [ 721.648392][ T31] nsim_dev_reload_down+0x8a/0xc0 [ 721.648459][ T31] devlink_reload+0x1c5/0x890 [ 721.648614][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 721.648709][ T31] devlink_pernet_pre_exit+0x1ff/0x420 [ 722.632552][ T1043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.820174][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.820241][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.827138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.031127][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.240538][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 723.244981][ T31] ? _raw_spin_unlock+0x28/0x50 [ 723.249571][ T31] ? iput+0xb84/0xf00 [ 723.262836][ T31] ops_undo_list+0x17d/0x8d0 [ 723.302933][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 723.311656][ T31] ? idr_destroy+0x227/0x290 [ 723.320626][ T31] cleanup_net+0x572/0x810 [ 723.449076][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.482239][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.512286][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.912283][T14009] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 723.941041][T14009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 723.971547][T14009] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 724.493849][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 724.502685][ T31] ? rcu_is_watching+0x16/0xb0 [ 724.511587][ T31] ? process_scheduled_works+0x97a/0x1630 [ 724.516061][ T31] process_scheduled_works+0xc3d/0x1630 [ 724.520531][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 724.730533][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.940119][T14065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.872986][ T5631] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 725.902762][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 726.041720][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 726.073080][ T31] ? assign_work+0x3cf/0x5d0 [ 726.081942][ T31] worker_thread+0xa47/0xfb0 [ 726.090828][ T31] ? __kthread_parkme+0x71/0x1f0 [ 726.099673][ T31] kthread+0x38b/0x480 [ 726.112719][ T31] ? __pfx_worker_thread+0x10/0x10 [ 726.121464][ T31] ? __pfx_kthread+0x10/0x10 [ 726.937254][ T31] ret_from_fork+0x514/0xb70 [ 726.941779][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 726.946326][ T31] ? __switch_to+0xc89/0x1420 [ 726.950760][ T31] ? __pfx_kthread+0x10/0x10 [ 727.700357][ T31] ret_from_fork_asm+0x1a/0x30 [ 727.709717][ T31] [ 727.784099][ T31] INFO: task syz-executor:14006 blocked for more than 153 seconds. [ 727.788369][ T31] Not tainted syzkaller #0 [ 727.792527][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.800861][ T31] task:syz-executor state:D stack:26592 pid:14006 tgid:14006 ppid:1 task_flags:0x400140 flags:0x00080002 [ 727.809748][ T31] Call Trace: [ 727.818845][ T31] [ 727.832027][ T31] __schedule+0x17db/0x58f0 [ 727.841018][ T31] ? __lock_acquire+0x6df/0x2e50 [ 727.850085][ T31] ? __lock_acquire+0x6df/0x2e50 [ 727.858826][ T31] ? __pfx___schedule+0x10/0x10 [ 727.871994][ T31] ? schedule+0x90/0x2b0 [ 728.791592][T11310] net_ratelimit: 4 callbacks suppressed [ 728.791642][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.791713][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.795198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.845464][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.240913][T11312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.621283][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.815122][ T5631] Bluetooth: hci0: command 0x0c16 tx timeout [ 730.791572][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.252430][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.283865][T14073] Bluetooth: hci0: Opcode 0x0c16 failed: -110