last executing test programs: 2m36.148338685s ago: executing program 0 (id=14343): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff02baad0000014305000f32000000000102baad00000102baad00000100ff0000", 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000300)="ffffffffffff02baad0000014305010f32000000000102baad000001ffffffffffff02baad0000010800", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2m35.931159401s ago: executing program 1 (id=14345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000500)="1122", 0x2, 0x0, &(0x7f0000000600)={0x2, 0x4d2, @remote}, 0x10) close(r1) 2m35.930224005s ago: executing program 0 (id=14355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x4d2, 0x32}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x184}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x32, 0x40, @remote, @local, {[], "000004d200000001000000000000003b"}}}}}, 0x0) 2m35.859356361s ago: executing program 1 (id=14346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000f0000000c0007800800020001000101"], 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000017000000400006803c00040067636d2861657329000000000000000000000000000000000000000000000000140000000123456789abcdef0123456789abcdef01020304"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000003000000400001800d0001007564703a73797a30000000002c0004801400010002004e207f00000100000000000000001400020002004e207f0000010000000000000000"], 0x54}}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 2m35.794502526s ago: executing program 0 (id=14347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xb4}}, 0x0) 2m35.532094407s ago: executing program 0 (id=14350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xdc}}, 0x0) 2m35.360435644s ago: executing program 0 (id=14354): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'ip_vti0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x6c}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x40, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x500, {0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x6c, 0x0, @remote, @local}, "000004d200000000"}}}}}, 0x0) 2m35.208906214s ago: executing program 0 (id=14357): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4) 2m35.139954648s ago: executing program 1 (id=14359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c000000000105040000000000000000020000003400018014000180080001007f000001080002007f0000011c00028005000100110000000600020013c4000006000300303900003400028014000180080001007f000001080002007f0000011c000280050001001100000006000200303900000600030013c4000008000700000000780c0005800800010073697000"], 0x8c}}, 0x0) 2m35.033013043s ago: executing program 1 (id=14360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x78b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1007fff}}]}, 0x38}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m34.785254262s ago: executing program 1 (id=14366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@deltfilter={0x48, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) nanosleep(&(0x7f0000000800)={0x1}, 0x0) 2m34.782077188s ago: executing program 2 (id=14367): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000"], 0x18}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 2m34.739001354s ago: executing program 3 (id=14368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1002}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}]}, 0x2c}}, 0x0) write(r0, &(0x7f00000003c0)="ffffffffffff11223344556688ca4f400038400000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r2, &(0x7f0000000500)="ffffffffffff11223344556688ca5b500028003a00000000000001000001000012670000000000000000000000001122334411223344", 0x36) 2m34.608562255s ago: executing program 3 (id=14369): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 2m34.536066364s ago: executing program 3 (id=14370): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m34.487520278s ago: executing program 3 (id=14371): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="0102030405060708", 0x8}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2m33.957171329s ago: executing program 3 (id=14372): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400050601000000000000002d00000001000000050002000a000000"], 0x20}}, 0x0) r1 = socket(0x2d, 0x2, 0x0) setsockopt(r1, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "0000000000000800010000000600"}, 0x34, 0x0}, 0x0) 2m33.88443581s ago: executing program 3 (id=14373): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000000080002000200000004000300", 0x2c) write(r0, &(0x7f0000000100)="54000000270001000200000000000000060100002000018008000200746370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) 2m33.884234728s ago: executing program 1 (id=14374): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x18}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x1, 0x0, 0x0}, 0x6) 2m33.884095315s ago: executing program 2 (id=14375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="2c000680"], 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="2c000680"], 0x78}}, 0x0) 2m33.842904586s ago: executing program 2 (id=14376): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) connect$bt_sco(r0, &(0x7f0000000020)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 2m33.811919619s ago: executing program 2 (id=14377): sendto(0xffffffffffffffff, &(0x7f0000000000)="64000000420001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) 2m33.746615526s ago: executing program 2 (id=14378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x0) 2m33.746471686s ago: executing program 2 (id=14379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1002}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}]}, 0x2c}}, 0x0) write(r0, &(0x7f00000003c0)="ffffffffffff11223344556688ca4f400038400000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r2, &(0x7f0000000500)="ffffffffffff11223344556688ca5b500028003a00000000000001000001000012670000000000000000000000001122334411223344", 0x36) 2m27.228236361s ago: executing program 32 (id=14281): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="54000000270001000000000000000000060100002000018008000200746370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) 2m19.716259651s ago: executing program 33 (id=14357): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4) 2m18.713225078s ago: executing program 34 (id=14374): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x18}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x1, 0x0, 0x0}, 0x6) 2m18.685317705s ago: executing program 35 (id=14379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1002}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}]}, 0x2c}}, 0x0) write(r0, &(0x7f00000003c0)="ffffffffffff11223344556688ca4f400038400000000000000001000001010010020000126700000000000005dc000003e80000000a00"/70, 0x46) write(r2, &(0x7f0000000500)="ffffffffffff11223344556688ca5b500028003a00000000000001000001000012670000000000000000000000001122334411223344", 0x36) 2m18.637546973s ago: executing program 36 (id=14373): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000000080002000200000004000300", 0x2c) write(r0, &(0x7f0000000100)="54000000270001000200000000000000060100002000018008000200746370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) 1m33.360199857s ago: executing program 9 (id=14503): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000001201"], 0xffe) 1m33.152053176s ago: executing program 9 (id=14508): socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r0}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r0}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m33.044225947s ago: executing program 9 (id=14511): sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000) write(0xffffffffffffffff, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fe100f000ee1000c", 0x1c) 1m32.89241762s ago: executing program 9 (id=14515): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x70, 0x0, 0x40f00}, 0x80) 1m32.86138889s ago: executing program 9 (id=14518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7fb0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x6000000}}, [], {{0x6, 0x1, 0x6, 0x8, 0x9, 0xffff}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m32.743184734s ago: executing program 9 (id=14520): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0xc040480) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000000), &(0x7f0000000500)=r3}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) socketpair(0x3, 0x2, 0x81, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(r8, &(0x7f0000000f00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000700)=@newchain={0x7ac, 0x64, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0x10, 0x10}, {0x10, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x774, 0x2, [@TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xfffffffb, 0x7, 0x3, 0x5, 0x1, 0xfffffffc, 0x5, 0x10000, 0xf, 0x8, 0x537, 0xfffffffa, 0x80, 0x7fffffff, 0x1, 0x0, 0xb, 0x800, 0x5c, 0x5, 0x8, 0x2, 0x7f, 0x6370, 0x100, 0x7, 0x9, 0x3, 0x1ff, 0x4, 0x6, 0xff, 0x6, 0x2, 0x9c, 0xc7, 0x8, 0xac, 0x29f8a306, 0x7, 0x401, 0xb0, 0x343, 0x40, 0x8, 0x8, 0x4, 0x8, 0xf8000000, 0x40, 0x6, 0x6, 0x5, 0x2, 0x6, 0x7fff, 0x7, 0xc, 0x5, 0x3ff, 0x6, 0xa9dc, 0x5, 0x1ff, 0x9, 0x8001, 0x1, 0x2, 0x1, 0xb, 0xffff, 0x8, 0x80000001, 0x2, 0xe, 0xfffffffd, 0x8, 0x1, 0x6, 0xffff18b9, 0x4, 0x2, 0x0, 0x80000001, 0x10, 0x6, 0x9, 0x585964dd, 0x4, 0x1000, 0x0, 0x7, 0x7, 0x80, 0x46, 0x1, 0x401, 0x8000, 0x8494, 0xa4, 0x6, 0x7fffffff, 0xffff, 0x1, 0x6, 0x9, 0x5, 0x100, 0x1, 0x400, 0x6, 0xfff, 0x800, 0x5, 0x3, 0xf8a, 0x0, 0x6, 0x7d24, 0x0, 0x9, 0x4, 0x1, 0x80000000, 0x9, 0x3, 0xf, 0x5, 0x10001, 0xfffffffc, 0x9, 0x401, 0x9, 0x10, 0x3, 0x3, 0x8, 0x3, 0xfffffffb, 0x1, 0x3ff, 0xffff, 0x6, 0x6, 0x0, 0x8, 0x0, 0x5, 0x3, 0x7, 0x3, 0x72, 0x4, 0x2, 0x9, 0x800, 0x0, 0x6, 0xfff, 0x7, 0x3, 0x4, 0x6, 0xfffffff7, 0x3ff, 0x9, 0xff, 0xc3ab, 0x7ff, 0x2, 0x0, 0x10, 0xfff, 0x8c9, 0xffffff2d, 0x1, 0x9, 0x8, 0x9, 0x4, 0xbf85, 0x4, 0x1, 0x9, 0xe070, 0xfffffff8, 0x1, 0x1, 0x1f44, 0x0, 0x3, 0x7a, 0x2, 0xc, 0x5, 0x400, 0x2, 0x7fffffff, 0x8, 0x8cc, 0x5, 0x7f, 0xb9, 0x40, 0x5, 0x9, 0x1, 0x2, 0x2, 0xffffffff, 0x6, 0x2, 0xb, 0x5, 0x7f, 0x7, 0x9, 0x7, 0x1, 0x2, 0x3, 0x9, 0xdec, 0x7, 0x6, 0x400, 0x2, 0x6, 0x1ff, 0x8, 0x4, 0x7, 0x5, 0xe, 0xf0, 0x969c, 0x0, 0x9, 0xfff, 0x3, 0x7, 0x30000000, 0x2, 0x1ff, 0x0, 0x6, 0x0, 0x9, 0x101, 0xcc5, 0x8, 0x9, 0x9, 0x5, 0xfffffff8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}]}, @TCA_BASIC_EMATCHES={0x2e4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2e0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0xddfc}, {0x2, 0x3}}}, @TCF_EM_IPT={0x234, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0xed, 0x5, "e904e5b3e2ee36cdafd25b204bb2d895c537752fa5adb7186bb54ec6c4c67fff3b475b8fda218ecd0866fd84c01a315f82afcdd0de7096998b15be23149289241daa9f7cb36256a907fe35396675cdbfe6ec36685cd095f19deaf4a66545164cc6639445614a91ac6fe187e964b025b7e8ed9aa09873ee4d8773ada00afb7faa10475b70e2a5f9ada6401ec11d6f03f964b63548c45369da7f6a170b7d960f936e5c7e502c216376392bd6e7fb93229b461fa7c6b4c1afe53dab52663814d90fdf9ad5666bdc919e4ad9565b72f0ce2415b1f308b9cac01cedb89165053710a37bd8eeea30201bbbc3"}, @TCA_EM_IPT_MATCH_DATA={0x9d, 0x5, "f2b00b8bb2017ef6d704706de3a4d2b1bf589aecd96bfb64c137d28d8b94a5e042db2bcbfe157d3611cefbd7e228d26adab3ce61bf57cd036f9230f37facc8c8e15c5bcd7151a93768045d1d256399f78120cde8db09fc768b396bd84df78e7a6ddcf6b33c6d3b5f0d5f69194823424a21cbb6ed430d510d6a91fa6a9d57c9077eca49334b43d793cbc60fd06cc4ec77b758951410c75f6773"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x74, 0x5, "a2bd352d8953074e9df29294dcc583c801046fee59f07c69e682713d0f5aa5ca405a2c492fefc7da3f23c2531965185becdc776e7059a275a011da5118e0d8931e8af404be16de48dd89801097c5b1a51ba797ed12add018da59356249a3b039b852db5ea2dcd63459e56f020c710d6c"}]}}, @TCF_EM_CONTAINER={0x98, 0x1, 0x0, 0x0, {{0x0, 0x0, 0xfff8}, "0888c51c79818dad408522ef2eca040dc25910eb50c60470d88e2cd82d6953838e7c8a390c0b6d65776471c1a9962ba4080edfbb8a65fbfcd7105941e593f0c5697920e0c02f63d7c842c625d90d6dd2a59b32c3949187f64bf9662665f3805df9f288fe84b767a1df80ad8c6d938ad66550a418d08f33c9cb0c094d291972accca143577cd5e8d481f4ed"}}]}]}, @TCA_BASIC_EMATCHES={0x64, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x427, 0x8, 0x8}, {0x2, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x77e}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x3}, {0x4, 0x6, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc, 0x8, 0x9}, {0x0, 0x6, 0x2}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xd42e, 0x2, 0x3}, {0x0, 0x0, 0x1}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x7ac}}, 0x20000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r7}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x4000080) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x5, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x4, 0x0, 0x82000045, [0x2, 0x9]}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1m17.71584683s ago: executing program 37 (id=14520): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0xc040480) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000000), &(0x7f0000000500)=r3}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) socketpair(0x3, 0x2, 0x81, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(r8, &(0x7f0000000f00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000700)=@newchain={0x7ac, 0x64, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0x10, 0x10}, {0x10, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x774, 0x2, [@TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xfffffffb, 0x7, 0x3, 0x5, 0x1, 0xfffffffc, 0x5, 0x10000, 0xf, 0x8, 0x537, 0xfffffffa, 0x80, 0x7fffffff, 0x1, 0x0, 0xb, 0x800, 0x5c, 0x5, 0x8, 0x2, 0x7f, 0x6370, 0x100, 0x7, 0x9, 0x3, 0x1ff, 0x4, 0x6, 0xff, 0x6, 0x2, 0x9c, 0xc7, 0x8, 0xac, 0x29f8a306, 0x7, 0x401, 0xb0, 0x343, 0x40, 0x8, 0x8, 0x4, 0x8, 0xf8000000, 0x40, 0x6, 0x6, 0x5, 0x2, 0x6, 0x7fff, 0x7, 0xc, 0x5, 0x3ff, 0x6, 0xa9dc, 0x5, 0x1ff, 0x9, 0x8001, 0x1, 0x2, 0x1, 0xb, 0xffff, 0x8, 0x80000001, 0x2, 0xe, 0xfffffffd, 0x8, 0x1, 0x6, 0xffff18b9, 0x4, 0x2, 0x0, 0x80000001, 0x10, 0x6, 0x9, 0x585964dd, 0x4, 0x1000, 0x0, 0x7, 0x7, 0x80, 0x46, 0x1, 0x401, 0x8000, 0x8494, 0xa4, 0x6, 0x7fffffff, 0xffff, 0x1, 0x6, 0x9, 0x5, 0x100, 0x1, 0x400, 0x6, 0xfff, 0x800, 0x5, 0x3, 0xf8a, 0x0, 0x6, 0x7d24, 0x0, 0x9, 0x4, 0x1, 0x80000000, 0x9, 0x3, 0xf, 0x5, 0x10001, 0xfffffffc, 0x9, 0x401, 0x9, 0x10, 0x3, 0x3, 0x8, 0x3, 0xfffffffb, 0x1, 0x3ff, 0xffff, 0x6, 0x6, 0x0, 0x8, 0x0, 0x5, 0x3, 0x7, 0x3, 0x72, 0x4, 0x2, 0x9, 0x800, 0x0, 0x6, 0xfff, 0x7, 0x3, 0x4, 0x6, 0xfffffff7, 0x3ff, 0x9, 0xff, 0xc3ab, 0x7ff, 0x2, 0x0, 0x10, 0xfff, 0x8c9, 0xffffff2d, 0x1, 0x9, 0x8, 0x9, 0x4, 0xbf85, 0x4, 0x1, 0x9, 0xe070, 0xfffffff8, 0x1, 0x1, 0x1f44, 0x0, 0x3, 0x7a, 0x2, 0xc, 0x5, 0x400, 0x2, 0x7fffffff, 0x8, 0x8cc, 0x5, 0x7f, 0xb9, 0x40, 0x5, 0x9, 0x1, 0x2, 0x2, 0xffffffff, 0x6, 0x2, 0xb, 0x5, 0x7f, 0x7, 0x9, 0x7, 0x1, 0x2, 0x3, 0x9, 0xdec, 0x7, 0x6, 0x400, 0x2, 0x6, 0x1ff, 0x8, 0x4, 0x7, 0x5, 0xe, 0xf0, 0x969c, 0x0, 0x9, 0xfff, 0x3, 0x7, 0x30000000, 0x2, 0x1ff, 0x0, 0x6, 0x0, 0x9, 0x101, 0xcc5, 0x8, 0x9, 0x9, 0x5, 0xfffffff8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}]}, @TCA_BASIC_EMATCHES={0x2e4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2e0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0xddfc}, {0x2, 0x3}}}, @TCF_EM_IPT={0x234, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0xed, 0x5, "e904e5b3e2ee36cdafd25b204bb2d895c537752fa5adb7186bb54ec6c4c67fff3b475b8fda218ecd0866fd84c01a315f82afcdd0de7096998b15be23149289241daa9f7cb36256a907fe35396675cdbfe6ec36685cd095f19deaf4a66545164cc6639445614a91ac6fe187e964b025b7e8ed9aa09873ee4d8773ada00afb7faa10475b70e2a5f9ada6401ec11d6f03f964b63548c45369da7f6a170b7d960f936e5c7e502c216376392bd6e7fb93229b461fa7c6b4c1afe53dab52663814d90fdf9ad5666bdc919e4ad9565b72f0ce2415b1f308b9cac01cedb89165053710a37bd8eeea30201bbbc3"}, @TCA_EM_IPT_MATCH_DATA={0x9d, 0x5, "f2b00b8bb2017ef6d704706de3a4d2b1bf589aecd96bfb64c137d28d8b94a5e042db2bcbfe157d3611cefbd7e228d26adab3ce61bf57cd036f9230f37facc8c8e15c5bcd7151a93768045d1d256399f78120cde8db09fc768b396bd84df78e7a6ddcf6b33c6d3b5f0d5f69194823424a21cbb6ed430d510d6a91fa6a9d57c9077eca49334b43d793cbc60fd06cc4ec77b758951410c75f6773"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x74, 0x5, "a2bd352d8953074e9df29294dcc583c801046fee59f07c69e682713d0f5aa5ca405a2c492fefc7da3f23c2531965185becdc776e7059a275a011da5118e0d8931e8af404be16de48dd89801097c5b1a51ba797ed12add018da59356249a3b039b852db5ea2dcd63459e56f020c710d6c"}]}}, @TCF_EM_CONTAINER={0x98, 0x1, 0x0, 0x0, {{0x0, 0x0, 0xfff8}, "0888c51c79818dad408522ef2eca040dc25910eb50c60470d88e2cd82d6953838e7c8a390c0b6d65776471c1a9962ba4080edfbb8a65fbfcd7105941e593f0c5697920e0c02f63d7c842c625d90d6dd2a59b32c3949187f64bf9662665f3805df9f288fe84b767a1df80ad8c6d938ad66550a418d08f33c9cb0c094d291972accca143577cd5e8d481f4ed"}}]}]}, @TCA_BASIC_EMATCHES={0x64, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x427, 0x8, 0x8}, {0x2, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x77e}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x3}, {0x4, 0x6, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc, 0x8, 0x9}, {0x0, 0x6, 0x2}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xd42e, 0x2, 0x3}, {0x0, 0x0, 0x1}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x7ac}}, 0x20000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r7}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x4000080) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x5, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x4, 0x0, 0x82000045, [0x2, 0x9]}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2.975236265s ago: executing program 8 (id=15809): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008844) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4840) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000108000000000000000000c3ffff", @ANYRES32=0x0, @ANYBLOB="6fc00801d778822a080004000005000008001b00000000"], 0x30}}, 0x0) 2.783542837s ago: executing program 7 (id=15812): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400f50060ec97000fc82c00fe8000000000000000000000000000aaff020000000000400000000000000001"], 0xffe) 2.751126875s ago: executing program 4 (id=15813): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000) 2.522194488s ago: executing program 6 (id=15816): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in=@broadcast, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd28, 0x3504, 0x2, 0x2, 0x1, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x20004000) sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x14, 0x1, 0x5, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x6}, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x400c011, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.509768839s ago: executing program 8 (id=15817): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.465729858s ago: executing program 4 (id=15819): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) write$nci(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="4000fa01016e3a92d0c43b0d46b08be1f2d4efa29bb10ab2a14d65d9fd57d59c1da5531a01a218cf43c1bed6413a8035532136453087b02ff75542af403031934e8f11db65fc06e1166835c813ea99c3106aa6e4e9452bdb04779fb94c5d264ada401bbeda806b8b648c5a4b42040d12d33de6989c88ea3387bfd7bfff44d959b3a46404b48582843b268b20b97fdb1e5d361b73d170e29c0b398e36a3d029"], 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="04dc015bbe6aabd84e148b948e028c52784cc5d11f303f3610d23717a6a494e62ab110f86bdd07e782acbc14963715c52d41f0b20f35708e2d12bc1ff2596fdae8a7a22b81e972d5f883883ff7789896f77840b73b742b7e5b8ce1a511e8136ba984d0bae12c8be6ad119c3ad394f505c3a3ff926e59edfa827ec9acd8822f1c1a94dba03a4cdd9361406e0f2dfe1ad3de3c92dc5ba97dbf6c4ac53810d91fca", @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2000000000000232, &(0x7f0000000400)=ANY=[@ANYRES8=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x10, 0x70bd2d, 0x2, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x90) syz_emit_ethernet(0x9a, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e2200649078020000000000000000000000eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b96"], 0x0) socket(0x10, 0x3, 0x2) close(r7) r8 = socket(0x2a, 0x3, 0xff) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000300)={0x0, &(0x7f0000000100)}) ioctl$TUNGETVNETLE(r7, 0x40107447, &(0x7f0000000140)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000040000000f"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000c80)=ANY=[@ANYRES32=0x0, @ANYRES8=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYRES16=0x0, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', r3, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x3, &(0x7f0000000980)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', r3, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000480)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r12, &(0x7f0000001300)='-', 0x1) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYRES16=r13, @ANYRESDEC=r11], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.164369338s ago: executing program 4 (id=15821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000083db"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.06593651s ago: executing program 8 (id=15822): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x60fd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c041}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x110, 0x0, 0x328, 0x110, 0x328, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x0, 0x0, 0xf, {@mac=@remote, {[0x0, 0xff, 0x0, 0x181, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x18, 0x3ff, 0x1, 0x4, 0x1, 0x8, 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x37c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f06cc6001e11", @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x93bf}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="1b00be002004", @local, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e00, @private=0xa010102}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000240)={0x40, 0x1, 0x5, 0x7, 0x1, 0x1, 0x10001, 0x1, r10}, 0x20) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="0000bbbbbbbbaa9aaaaaaabb810038000800450000300000000000019078ac1e0001ac1414aa03019000002f0009ac141410ac141426"], 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="004001000000000000000002000060551678bdd31adb793adba02200"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000440)}, 0x20) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xe, &(0x7f0000000300)=ANY=[@ANYRESDEC=r9], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffff7fd, 0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=0xffffffffffffffff, 0x16, 0x5cc557bb823aaaa9, 0xb2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x20, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0xd, 0xd, 0xffff, 0xfffffffe}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @exit]}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001080)=""/4096, 0x41000, 0x1, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000002080)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000020c0)=[r13, r14, r16, r13, r13, 0xffffffffffffffff], &(0x7f0000002100)=[{0x2, 0x1, 0x5, 0x4}, {0x0, 0x3, 0x2, 0xb}, {0x5, 0x4, 0x7}, {0x2, 0x1, 0xb, 0xb}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r15, 0x0, 0x25, 0x1, @val=@netkit={@void, @value=r18, @void, @void, r17}}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) 1.911864692s ago: executing program 4 (id=15823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000500)="6a40c5", 0x3, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) shutdown(r0, 0x1) 1.911586202s ago: executing program 5 (id=15824): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 1.84841515s ago: executing program 7 (id=15825): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000083db0e57386aa3ba9fecc334a11bfccb522a49f04fead140d0b20966c80cc371d9bda4530cbdbb1675b73c737aec57913591595bfdef625450f02da8835a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.793693604s ago: executing program 4 (id=15826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x3f47133b, @mcast1, 0xd958}]}, &(0x7f0000000140)=0x10) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000002a80)={r0, &(0x7f0000002980)='TIPCv2\x00', 0x109000, &(0x7f00000029c0)={@align=0x6, {0x3, 0x9, 0x0, 0x1}}, 0xffff7fff, &(0x7f0000002a00)={@_ha_fsid}, &(0x7f0000002a40)=0x800}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000002b40)={'filter\x00', 0x5a, "e2fde073f37f7ef751501f6ac990ae0f3453130d44bd343cc674b5f7aeea3a8b988f52debd3515507423dc555d14c3affefac6e3c4da327ef64effa3065268029562ea81c0ed0e17e52e19aa47b160a82e86d44cdaa79e304660"}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f0000002c80), r2) (async, rerun: 64) socket(0x2b, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r4, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x38}}, 0x0) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000300)={r10, 0x4}, 0x8) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r10], 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x14, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000600000000000000400000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000042b50000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x160, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0xdc, 0x3, "5c91f47ef5186f5f7b05b3b4e897c4a453b02ac5573f3319efb808ada7e8744e7ae8dbff6a243706ed2b3b170a2ffa3e5d8bb9df89e9325ddba8b9ebf2c83bce327b7504ebe2b934e3c4eb0c3bc9f4fea7c6673e124ec8685194a78c94ca5e7897dc8e6b4832468791a0bb047c754eb3f1c6e3890507de19385bdf18105e780128780b56a54ea0d8bd3c808614360718e9243585ba118cd53b5d4c0f626a92e539c9f2bd70ca886e3416c43e39e5bfd214749f379e3441a47db021245cda7a534f512d715888a4c02c822758c24ddf1b3dbf045828bda0ab"}, @ETHTOOL_A_WOL_SOPASS={0xa, 0x3, "03fccff0f23c"}, @ETHTOOL_A_WOL_SOPASS={0x64, 0x3, "6d4bb84592439cfb5d4cd44d8c61dc46a50a63dd5b36aa36db8507e7ed583db83e8741bbb3e95acb14313c083084a96001c7843cbb92f2e78447db341964af203963e627ed827d7f37aaa51bb08c5952b2d7375af024886305d8d28359e10f10"}]}, 0x160}, 0x1, 0x0, 0x0, 0x4a23996275f58c0c}, 0x4004) (async, rerun: 32) r13 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x16, 0x1, 0x0, 0x0, @binary="985ba356d98f896d129c982b2b2f8a539a39"}]}]}, 0x3c}], 0x1}, 0x240400c0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003340)={0x44, 0x0, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa7b}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x44}}, 0x810) (async) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=@delqdisc={0x434, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x81ca, 0x1, 0x100, 0x2, 0x5, 0x10001, 0x8, 0x1, 0xffff4846, 0x2, 0x81, 0x80000001, 0x3, 0x7, 0x2, 0x0, 0x7, 0x7, 0x7, 0x6, 0x2, 0x4a, 0x5, 0xfffffff8, 0x6, 0x6, 0x0, 0x1ff, 0x4, 0x4, 0x2, 0x80000000, 0x0, 0x200, 0x200, 0xb, 0x80000001, 0x80, 0x3, 0x2, 0x0, 0xf6, 0x6, 0xd, 0x9, 0xb630, 0xc8, 0x8874, 0x2, 0x4, 0x8, 0x1, 0x0, 0x13, 0x5, 0xfff, 0xfffffffe, 0x63b4, 0x7891fba7, 0x8, 0x10001, 0x8000, 0x3f574112, 0x1e33, 0xfffffff7, 0x2f92, 0x0, 0x9, 0x1, 0x6, 0x8, 0x10000, 0x6caf, 0x8, 0x7, 0x2fa0, 0x3, 0x5, 0x5, 0xfffffff7, 0x20be9dc1, 0x2, 0x23a, 0x1, 0xff, 0x287, 0x8e, 0x7f, 0x6, 0x6, 0x7, 0x3, 0xffff8001, 0x4, 0x80, 0x7ff, 0x9, 0x7, 0x6, 0xfffffff9, 0x10000, 0x3, 0x2, 0x3, 0x3, 0xc6, 0x3, 0x5, 0x6, 0xc0be, 0xac, 0x5e1, 0x8, 0xdb, 0x8, 0x2, 0x9, 0x8001, 0x7ff, 0x96d7, 0x8, 0x8, 0x8, 0x800, 0x7, 0x1, 0x9, 0xd, 0xd, 0x8, 0x8, 0x5, 0x7, 0x5, 0x0, 0x8001, 0xe, 0x10, 0x7, 0x10001, 0x6, 0xaa1, 0x42, 0x7, 0x6, 0x4, 0x8001, 0x7, 0x8, 0xa737, 0x9, 0x6, 0x1, 0x0, 0x4, 0xf, 0x19, 0x9, 0x3, 0x961, 0x0, 0x3, 0x0, 0x2bed, 0xd68, 0xfffffffa, 0x9, 0x800, 0x9, 0x101, 0x81, 0xe16, 0x9, 0x8, 0x8, 0x519, 0x0, 0x7, 0x327b, 0x3a7, 0x8, 0x3, 0x1, 0x2, 0x8, 0x401, 0x6, 0x8, 0x6, 0xe, 0x2, 0x5, 0xb25, 0xfff, 0x8000, 0x3cc2762c, 0xd, 0x4, 0xe9aa, 0x5, 0x10000, 0x5, 0x9, 0xf000000, 0x100, 0x7fffffff, 0x0, 0x6, 0xaa, 0x400, 0x2, 0x40, 0x2, 0xfffffff7, 0x7ff, 0xffff8001, 0x5, 0x5, 0x7, 0x8, 0x9, 0x800, 0x6, 0x5, 0x6d, 0x8, 0x3, 0x310ff0dd, 0x289, 0xb8, 0x5, 0x6, 0x8, 0x8001, 0x0, 0xe2d, 0x5, 0x6, 0x7, 0x5, 0x4, 0x10000, 0xc441, 0xecf, 0x7, 0x7, 0x8, 0x4, 0x1000, 0x28, 0x1, 0x6e46, 0x7fff, 0x9, 0xd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) (async) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.630363304s ago: executing program 7 (id=15827): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x301) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0xf4, 0x50, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x164}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000001300)=@newtfilter={0x33dc, 0x2c, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x5, 0x5}, {0xd, 0x1}, {0xf, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x400}, @TCA_CHAIN={0x8, 0xb, 0x38000}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0x337c, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}]}, @TCA_BASIC_ACT={0x2648, 0x3, [@m_police={0x2520, 0x4, 0x0, 0x0, {{0xb}, {0x24b0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x5, 0x1, 0x5, 0x6, 0x7, 0xc, 0x8, 0xffffffff, 0x7, 0x8, 0x6, 0xf490, 0x9, 0x4681, 0x14, 0x9, 0x5, 0x6, 0x6, 0x2, 0x2, 0x9, 0xa23, 0x7, 0x8, 0xe221, 0x55, 0x3, 0x0, 0xfffffffa, 0xfa, 0x4, 0x9, 0x3, 0x2, 0x9, 0xffff, 0x80, 0x0, 0x8, 0xfff, 0x6, 0x5, 0x7, 0x272, 0x7fffffff, 0x10000, 0xeec9, 0x2, 0xfffffffe, 0xfffff07c, 0xe7, 0x80000000, 0x4, 0x3, 0x3f2, 0x1000, 0x1000, 0x4, 0x6, 0x59, 0x8, 0xf0, 0xe3, 0x1, 0x0, 0x2, 0x0, 0x7, 0x80, 0x8, 0x101, 0x5, 0x6f0a, 0x1, 0x8, 0x9, 0xe, 0x2, 0x79a0, 0x0, 0x7fff, 0xf6c3, 0x1, 0x8, 0x2, 0x4, 0x8, 0x0, 0x1, 0x5, 0x4, 0xfae, 0x7, 0xef, 0x1, 0x80, 0x8, 0x7, 0x401, 0x7, 0x5, 0x5, 0x2, 0xffffffff, 0x7, 0xfffffffe, 0x9, 0xfff, 0x3, 0x5, 0x2, 0x6, 0xb, 0x4a9, 0x3, 0x5, 0x7, 0x8, 0x1, 0x800, 0x2eda, 0x4, 0xfffffff4, 0x4, 0x7, 0x8, 0xa, 0x6, 0x5a, 0x6, 0x6, 0x7ff, 0x3, 0xf, 0x13c6fe16, 0x1, 0xa71, 0x9, 0x9, 0x5, 0x5, 0x0, 0xfff, 0x0, 0x200, 0x0, 0x9, 0x61a5, 0x6, 0xffff0000, 0x0, 0xffff, 0x5, 0x16b0, 0xbfb, 0x5, 0x0, 0x5, 0x1, 0x6, 0x1, 0x1c1ca67d, 0x8, 0xfffffffa, 0x1aa, 0x2, 0x1, 0x0, 0x9, 0x3ff, 0xb, 0x322800, 0x3, 0x200, 0x0, 0x3, 0x7, 0x6, 0x5, 0x80, 0x1, 0x6, 0x4, 0x3ff, 0x7, 0x3c9, 0x3, 0x5, 0x0, 0x4, 0x910, 0x9, 0x10001, 0x3, 0x81, 0x10001, 0x5, 0x6, 0x6, 0x1, 0x5, 0x6e, 0x8, 0x3ff, 0xa0, 0x1, 0x3ff, 0xc00, 0xfffffff8, 0x40, 0x0, 0x7, 0x4a, 0x9b, 0x1, 0x4, 0x101, 0x4, 0x9, 0x4, 0x10000, 0x2, 0x2, 0x200, 0x8, 0x7, 0x3ff, 0x8, 0x40, 0x4, 0xffffffff, 0x8, 0x7, 0x1, 0x7, 0x0, 0x1, 0x6, 0x5, 0x7, 0x9, 0x8e5, 0x2189, 0x7f, 0x1, 0xb0a, 0x101, 0x50, 0x7, 0x9, 0x7182, 0x7, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x20000000, 0x401, 0x1, 0x7, {0x9f, 0x0, 0x6, 0x200, 0x8, 0x1a47c00}, {0x8, 0x2, 0x54, 0x9ce1, 0x0, 0x4}, 0x2000000, 0x9, 0xc4f}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x5, 0x8, 0x6, 0x5, 0x8, 0xf, 0x4, 0x2, 0x2, 0x7, 0x200, 0x6, 0x4, 0x7, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x8, 0x10001, 0x2, 0x6, 0xb89, 0x9, 0x7fff, 0x1ff, 0xfffffff9, 0xe, 0x8, 0x736, 0x80, 0x4, 0xf, 0x1000, 0x10, 0x80000000, 0x6, 0x6, 0x1, 0x401, 0x5, 0x800, 0x6, 0x63ed2fd6, 0xb7, 0xd2, 0x5, 0xffffffff, 0x4, 0x7, 0x8, 0x28, 0xffffffff, 0x0, 0x7fffffff, 0x6, 0x5, 0x85a9, 0x7, 0xad, 0xecd, 0x5, 0x5, 0xfff, 0x3, 0xfffffff1, 0x8, 0x7, 0x4, 0x6, 0x0, 0x5, 0x4, 0x0, 0x3ff, 0x3, 0x4a, 0x0, 0x2, 0x1, 0xffffffff, 0x40, 0xffff, 0x51, 0x1, 0xfffffff8, 0x3, 0x629, 0x6, 0x2, 0x1, 0x10, 0x4bb7, 0x2, 0xf6, 0x1, 0x4, 0x20, 0xfffffff8, 0x4, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x4, 0x3, 0xff66, 0xfffffffe, 0x0, 0x3ff, 0x10000, 0xfb, 0x5, 0x8, 0x1, 0x1ff, 0x1ff, 0x2e3d5c94, 0x3, 0x2, 0x40, 0x8001, 0x8, 0x40, 0x4, 0x8, 0x9, 0x9, 0x2, 0xd9f, 0xffffffff, 0xffffffff, 0x0, 0x9, 0x5e, 0x0, 0x2, 0x10001, 0x7, 0xc763, 0x9602, 0x3, 0x6, 0x401, 0xffff, 0x3, 0x4, 0x0, 0x7, 0x2, 0x3, 0x7, 0xb, 0x1, 0x6043, 0x1, 0x1, 0xff4, 0xb08, 0x2, 0x2, 0x1, 0x4, 0x0, 0x800, 0x2, 0x1, 0x5, 0x7ff, 0x7, 0x27e, 0x7, 0x9, 0x9, 0x8f, 0x6, 0x81, 0x7, 0x5, 0xc2, 0x7, 0x4, 0xf40, 0x5, 0x5, 0x5, 0x6, 0x9, 0x40, 0x4, 0x9, 0xd33d, 0x9, 0x2, 0x0, 0x5, 0x9, 0x0, 0x10000, 0x10000, 0x0, 0xd, 0x3, 0x2, 0xe, 0x7ff, 0x5, 0xb, 0x7d, 0x1, 0x7f, 0x5, 0x2, 0x200, 0xc8fe, 0x9, 0xffffffff, 0x25c3, 0x6, 0x80, 0x1000, 0x8, 0x8e, 0x8, 0x3, 0x8, 0xb2, 0x64, 0x17, 0x7, 0x4, 0x4, 0x81, 0x200, 0x200, 0x6, 0x8000, 0x8, 0x0, 0x8, 0x1, 0x400, 0x7b0e, 0x3d10cc78, 0x8, 0x5, 0x6, 0x80000001, 0x3ecd, 0x7ff, 0x9, 0xffffffff, 0x0, 0x0, 0x75]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x3, 0x0, 0x1f, 0x2, 0x3, 0x80000000, 0x0, 0x4, 0xf, 0x1, 0x64, 0x0, 0x2, 0x2, 0x705, 0x2, 0x0, 0x2, 0x40, 0x7f, 0xfffff82c, 0x3, 0xd, 0xa3f, 0xfffffffe, 0x56e, 0x2, 0x10001, 0x1, 0x1, 0x4, 0x3, 0x8, 0x5, 0x8, 0x5f, 0x7, 0x9, 0xc, 0x3, 0xfffffff8, 0x5, 0x1, 0x6, 0x3, 0x9f17, 0x4, 0x6, 0x8bb2, 0x7f, 0x400, 0x2, 0x2, 0x1, 0x20f6, 0x7, 0x8, 0x2, 0xfffffff7, 0x5, 0x6, 0x1, 0x80000000, 0x2, 0x2a, 0x3ff, 0xa84, 0x8001, 0x40, 0x80, 0x5, 0x4, 0x2, 0xfffff001, 0x6, 0xfff, 0x1, 0x81, 0x3, 0x0, 0x4, 0x1, 0x2, 0x6b64, 0x2, 0x2, 0x6, 0xc000000, 0xb, 0x4, 0x4, 0xeb, 0x40, 0x0, 0xfffffff7, 0x1, 0xc2ab, 0xfffffe00, 0xb81, 0x2, 0x9, 0x4, 0x101, 0x0, 0x5, 0x2, 0x8, 0x0, 0x6, 0x80000001, 0xffff3844, 0x467fbe8c, 0x3, 0xf, 0x72964991, 0x7fffffff, 0xfff, 0xffffff59, 0xf3f8, 0x5, 0xb7, 0x9, 0x2, 0x7ff, 0xfffffbff, 0x74b, 0x2b8, 0x2, 0x8, 0x2, 0x2, 0x6, 0x4, 0x6, 0x931, 0x39, 0x7, 0x10000, 0x1, 0xfffffffd, 0x8, 0x8, 0x3, 0x5, 0x0, 0xd, 0x80000000, 0x9, 0x2, 0x23b, 0xfd, 0xfc7, 0x2, 0xfffffffa, 0x468ef4fc, 0x800, 0x9, 0x7a6, 0x2, 0x1, 0x8, 0x0, 0x2c, 0x0, 0xfff, 0x6, 0x80000001, 0x4, 0x0, 0x4, 0x5, 0x3, 0x401, 0x3, 0x5, 0x8, 0x200, 0x7, 0xfff, 0x0, 0x100, 0x9, 0x4, 0x5, 0x6, 0x8, 0xfffffffb, 0x8000, 0x8, 0x10001, 0x3, 0x0, 0x4, 0x2, 0x5, 0x3, 0x80, 0x8, 0x7, 0x5, 0x80, 0x7, 0x40, 0x4, 0x2, 0x0, 0xbd4a, 0x200, 0xf, 0x4, 0x7, 0x7, 0x2, 0x7f, 0x800, 0x8001, 0x2, 0x4, 0xad51, 0x3, 0xfffffe15, 0x5, 0x9, 0xfc, 0x9, 0x3, 0x8, 0x7f, 0x91, 0x401, 0x100, 0xfffffffb, 0x6, 0x0, 0x3, 0x75, 0x0, 0x6, 0x8, 0x85e8, 0x400, 0x2, 0xfffffff9, 0x9, 0x1ff, 0x7fff, 0x400, 0x80000000, 0x0, 0xb, 0xf, 0x428b619d, 0x3ff, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0xb9b, 0x7, 0x1, 0x400, 0x5, 0x37, 0x401, 0x9f, 0x80000000, 0xb8, 0x20ef, 0x5, 0x8, 0x1, 0x1, 0xc, 0x3, 0x6, 0x5, 0xf, 0x8, 0x96, 0xffffffff, 0xe, 0x70, 0x7144ae76, 0x401, 0xd56, 0xfffffff0, 0xfff, 0x8, 0x1, 0x2, 0x8, 0xce9, 0xbc97, 0x6, 0xc2, 0x8001, 0x1, 0x8, 0x38ae, 0x6, 0x47, 0x2, 0x2, 0x2, 0x9, 0x9, 0x8, 0x10001, 0x80000001, 0x1, 0xf82, 0x2, 0x8, 0x1, 0x80000000, 0x1ff, 0x81, 0xf, 0x0, 0xbaa, 0x4, 0x200, 0xf28, 0x7, 0x8, 0x7, 0x10000, 0x8, 0x1800000, 0x1ff, 0x2, 0xfffffff7, 0x200, 0x5, 0x6, 0x0, 0x3, 0x5, 0x3, 0x4, 0x10, 0x3, 0x0, 0x6, 0x7, 0x6, 0x9, 0xef, 0x26d1, 0x5, 0x10001, 0x3, 0x5, 0x2, 0x7, 0x5, 0x7fff, 0x0, 0xc187, 0xfffffffd, 0x5, 0x7f, 0x4, 0xb8, 0x5, 0x0, 0x4, 0x3a23c000, 0x10000, 0x7, 0x3, 0x5, 0x3, 0x9, 0xe33, 0xfffffffd, 0x7fff, 0x3f80000, 0x6, 0xa, 0x2, 0x3, 0x400, 0x401, 0x7fffffff, 0xf0f9, 0x0, 0x10001, 0x3, 0xed, 0x6b33bdd4, 0xaf1d, 0x1, 0x4, 0x81, 0x80000001, 0x7, 0x4, 0x9, 0x9, 0x8, 0x401, 0x48, 0x6, 0x9, 0x1800000, 0x9, 0x9, 0xe0b4, 0xfff, 0x3ff, 0xffffffff, 0xf51e, 0x5, 0x1af6, 0x2, 0x10000, 0x7, 0x8, 0x9, 0x5, 0xcd, 0xcc, 0x3, 0x7, 0xfffffff9, 0x5, 0x9aec, 0x5, 0x3, 0xfff, 0x2, 0x5, 0xd, 0x3, 0x2, 0x9, 0x1ff, 0x3, 0x2, 0x5, 0x1, 0x10001, 0x0, 0x2072, 0x5, 0x6, 0x1, 0x8001, 0x1, 0x9, 0x6, 0xeaa, 0xa91a02a2, 0x3, 0x4, 0x2b, 0x6, 0x8, 0x400, 0xc42, 0xe9, 0x0, 0x3, 0x2, 0xb9, 0x8962, 0x5, 0x10001, 0x7ff, 0x9, 0x6, 0x0, 0x6, 0x3, 0xac, 0x52bd, 0x7, 0x7fff, 0x0, 0x21, 0x7, 0x0, 0xc612, 0x3f0d, 0x81, 0x1, 0x7fff, 0x2, 0x41e3, 0x6, 0x8, 0x18000, 0x2000000, 0x4, 0x1, 0x1, 0xed, 0xfffff6e9, 0x40, 0x8, 0x6, 0x3, 0x80000000, 0x3, 0x44ef92de, 0x8, 0xd543, 0xfffffffa, 0x6, 0x8, 0x4, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x466, 0xf56d, 0x7, 0x4, 0x2, 0x7f, 0x2d000000, 0xa, 0x80000001, 0x2, 0x9, 0x1, 0x7, 0x6, 0xf6ad, 0x70b, 0x8, 0x3, 0x80000001, 0x80000001, 0x43, 0x5, 0x8fe, 0x6, 0x153, 0x6b9, 0x6, 0x97, 0x8, 0x7, 0x7, 0x1000, 0x7, 0x0, 0x7f, 0x10, 0xffffffff, 0xb, 0x9, 0x7f, 0x3, 0x1, 0x3, 0x9c4, 0x1175, 0x81, 0x0, 0x35c5, 0x7, 0x3, 0xb51, 0x8, 0x5, 0xfffffff9, 0x3, 0xfffffff9, 0x100, 0x8, 0x3, 0xfffffff8, 0xf, 0xfc, 0x0, 0xfffffe00, 0x4, 0xb49, 0x7fff, 0x8, 0xd97, 0x9, 0x0, 0x3ff, 0x6, 0x0, 0x7, 0x192e83ab, 0x5, 0xaa02, 0x0, 0xa9b4, 0x5, 0xe, 0x3, 0x6, 0x6, 0x1, 0x9, 0x4, 0x9, 0x5, 0x8, 0x1ff, 0xfffffffb, 0x5, 0xffffa3f5, 0x81, 0xfffffff0, 0x8dc, 0x8, 0x4, 0x6, 0x101, 0x3, 0x0, 0x80000000, 0xb, 0x49, 0x3, 0x7, 0x10000, 0x5, 0xfffffffb, 0x5, 0x81, 0x47, 0xffffff80, 0x7, 0x9, 0xc, 0x5, 0x1ff, 0x0, 0x80000001, 0xb, 0x3, 0xf, 0x6, 0x70e3, 0x2, 0xfffffff8, 0x6, 0x4, 0xdc, 0x5, 0x1, 0x80000001, 0x2, 0xcbe, 0xe, 0xffffff7e, 0x1, 0x5, 0x2, 0xcc, 0x7821, 0x6, 0x7f, 0x8, 0x6, 0x5, 0x7, 0x3, 0x2, 0x2, 0xa8, 0x80000000, 0xe, 0x6, 0x7ff, 0x18, 0x1, 0x7, 0x5, 0x3, 0x5, 0xfffffdbc, 0xfff, 0xfff, 0x6, 0x1, 0x2, 0x3, 0x6, 0x3, 0x4, 0x9, 0x9, 0xfb7, 0x4, 0x8000, 0x6, 0x81, 0x4, 0x9, 0x3, 0x8, 0x40, 0x401, 0x3ff, 0x80200, 0x80000000, 0xfffeffff, 0x0, 0xd, 0x2, 0xffff5ca2, 0x46e, 0x1282, 0x8, 0xf97, 0x8e7, 0xe91, 0x4, 0xf, 0x4, 0x1, 0x9, 0xfffffff8, 0x1, 0x200, 0x7, 0x5, 0x2, 0x8001, 0x2, 0xea22, 0x6, 0xc, 0x80, 0xf280, 0x7, 0x451, 0xffffffff, 0x4010000, 0x0, 0x8001, 0x9, 0x6, 0x100000, 0x9, 0x1, 0x4, 0x7, 0xffffc72c, 0x3cc1, 0xfffffff2, 0x3, 0x0, 0x1c00, 0xfffff5bd, 0x0, 0x3, 0x480, 0x0, 0x8001, 0x0, 0x1, 0x8, 0x3, 0xfff, 0xc460, 0xd8b4bd9, 0x9, 0x7ff, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x7000, 0xc1, 0x6, 0xa, 0x1, 0xfffffffb, 0x7, 0x9, 0x400, 0x10, 0x1, 0x7, 0x7f, 0xa, 0x8, 0x4, 0x6, 0xd, 0x3, 0x4, 0xfffffffc, 0x40, 0x6, 0x7f, 0x7f, 0x9, 0x7, 0x6, 0xd, 0xc2c2, 0x1, 0x0, 0x5, 0x8, 0x4, 0x5, 0x2, 0x400, 0x5, 0x6, 0x1, 0x1ff, 0x79, 0x2, 0x6, 0x7ff, 0x2, 0x0, 0x400, 0xf, 0x7, 0x5, 0x9c, 0xffffffe1, 0x14f2, 0x5, 0xc01, 0x6, 0x81, 0x7fffffff, 0x73, 0x401, 0x7ff, 0x7f, 0x1, 0x1, 0x8001, 0x4c77, 0x9, 0x87, 0xa, 0x9, 0x1, 0x1, 0xfffffffa, 0x2, 0x6, 0x5, 0x80000001, 0x7, 0x2, 0x4, 0x0, 0x1ff, 0x4, 0x4, 0x4, 0xffff, 0x401, 0x0, 0x3, 0x70, 0xe7e, 0x3, 0x0, 0xfff, 0x0, 0x40000000, 0x6, 0xf, 0x3, 0x2, 0x1000, 0x5, 0x0, 0x5, 0x9e, 0x10ae, 0x0, 0xf49, 0x9, 0x7, 0x9, 0x9, 0x4, 0x2, 0x101, 0x9, 0x6, 0xf, 0x7, 0x2, 0x0, 0xa57, 0x8, 0xa, 0xdd7, 0x7, 0x1000, 0x2, 0x3, 0x7, 0x80000000, 0x6, 0x5, 0x5, 0x78, 0x5, 0x1, 0x6, 0x1, 0x5, 0xffff, 0x6, 0x2, 0x8, 0x101, 0x200, 0x200, 0x3, 0x5, 0x0, 0x7, 0x4, 0x81, 0x4, 0xbd53, 0x4, 0x2, 0x3, 0x6, 0x8, 0xfbdd, 0x8001, 0xc, 0x5, 0x2, 0x7fffffff, 0x6e, 0x8, 0x0, 0x9, 0x6, 0xffff, 0x1, 0x3, 0x2, 0x5, 0x101, 0x2, 0x0, 0x9, 0x10, 0x7fff, 0x7, 0x100, 0x5, 0x5, 0x5, 0x3, 0xa16, 0x80, 0x800, 0x2, 0x4, 0x9, 0x740b, 0x8, 0x1, 0x6, 0x80, 0x2, 0x2, 0xb20c5ac, 0x80000001, 0x3, 0xa8, 0x7, 0x0, 0x7, 0x1, 0xb, 0x0, 0x8, 0x3f7, 0x0, 0x4, 0x259, 0x6, 0x4, 0x1, 0x10, 0x400, 0x2, 0x9, 0x9, 0x7, 0xf8c0, 0x9, 0x6, 0x6, 0x6, 0x800, 0x0, 0x2, 0x10000, 0x1, 0x2, 0x3, 0xfffffffc, 0xe, 0x1, 0xfffffff7, 0xf189d7b, 0x7, 0x2, 0x88, 0x2, 0x8, 0x401, 0x5, 0x0, 0x80]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0x7, 0x273, 0xfffffffc, 0x4, 0x8, 0xb5, 0x5, 0x7, 0x0, 0x6, 0x7, 0xffff0001, 0x1, 0x4, 0x800, 0x0, 0xc8000000, 0x1, 0x48e7, 0x2, 0x2, 0x0, 0xd, 0x7, 0x5, 0x2, 0x3, 0x5c4, 0x6, 0x0, 0x5, 0xdd5, 0xe, 0x2, 0x4, 0x5, 0x9, 0x4e72, 0x81, 0x4, 0x9, 0x2, 0xffffffff, 0x7, 0xf481, 0x40, 0x4, 0x4, 0x5ce, 0x5, 0xfffffffe, 0x3b15021, 0x0, 0x100, 0x5, 0x4, 0x1, 0x7ff, 0x7, 0x3, 0xbf500, 0x10000, 0x2, 0x80000001, 0x9, 0x200, 0x8, 0xee, 0x5b, 0xf, 0x0, 0x8, 0x5, 0x8, 0xfffffff7, 0x3, 0x1, 0xef, 0x6, 0x101, 0x9, 0x84, 0x0, 0x1, 0x7ff, 0x80, 0x157e, 0xb, 0x3, 0x5, 0xfffffffa, 0x84, 0x8, 0x5, 0x7, 0x0, 0x4b5d, 0x401, 0x5, 0x5, 0x10001, 0x401, 0x4, 0xfffffffb, 0x8, 0x1000, 0x69, 0x1, 0x5, 0x4d9c, 0x6, 0x4, 0x43, 0xf03e, 0x401, 0x20000000, 0x9, 0x2, 0x5, 0xffffff8d, 0x3, 0x6, 0x5, 0xfffffffc, 0x3, 0x1, 0x7, 0x7, 0x7, 0x6, 0x5, 0x5, 0x8, 0x10000, 0x8, 0x3d, 0x81, 0xa, 0x6, 0xffff, 0x7, 0x7f, 0x4, 0x8001, 0x4, 0x697, 0x5, 0x2, 0x4, 0x1, 0x321, 0xf3c, 0x40, 0x6e46, 0x4, 0x800, 0x4, 0x1, 0x506d, 0x79a, 0x80, 0xd220, 0x6, 0x3, 0x1, 0x6, 0x9, 0x3be, 0x1, 0x7fff, 0x7f, 0x8000, 0xab08, 0xbbe, 0xe00, 0x2b, 0x5, 0x7fffffff, 0x5, 0x5, 0x1000, 0xec, 0x9, 0xfffffffd, 0x8, 0x80, 0x101, 0x0, 0x3ff, 0x9, 0x4, 0x5, 0xd, 0x5, 0xb84, 0x5, 0x101, 0xfffffffd, 0x1, 0x6, 0x5, 0xb, 0x5, 0x5, 0xc, 0x1, 0x5, 0x0, 0x3, 0x9de, 0x0, 0x8, 0x8a7, 0x59d, 0x6, 0xffffffff, 0x8, 0x3, 0x86, 0xc, 0x10000, 0xfffff000, 0x3, 0x0, 0x0, 0xa, 0x200, 0x10000, 0x4, 0x3, 0x8, 0xa, 0x5, 0x93, 0xffffff2d, 0x2, 0x63, 0xcce, 0x400, 0x401, 0x2, 0x6, 0xe, 0xa, 0x90, 0x0, 0x5, 0x5, 0x4, 0x2, 0x1, 0x0, 0x9, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0xfff, 0x61c536f5, 0x41, 0x4, 0x7, 0x100, 0x6, 0x5, 0x306fb731, 0x6, 0x2, 0x10001, 0x0, 0x0, 0x43, 0x8, 0xfffffeff, 0x27, 0x800, 0x14b38876, 0x2b705b6d, 0x5, 0x497e1c37, 0x0, 0x7, 0x0, 0x7, 0x3, 0x7fff, 0xc31c, 0x0, 0x324c, 0x8, 0x5, 0x2, 0x4, 0x6, 0x1, 0x7, 0x9, 0x4, 0x4, 0x10, 0x800, 0xfc, 0x3ff, 0x0, 0x952, 0x5, 0x2, 0x5, 0x81, 0xf8f, 0xaddce45f, 0x6, 0x4, 0x6, 0x2, 0x2, 0x80, 0x1, 0x3, 0x7fff, 0x9, 0x2, 0x8, 0x4, 0x9, 0x4, 0xfffffff8, 0x8, 0x401, 0x6, 0x2fba, 0x1, 0x7, 0x401, 0x2, 0x7fff, 0x5, 0x5, 0x3, 0x4, 0x9, 0xc, 0xc, 0x0, 0x3, 0x9, 0x2, 0xf, 0x4b8552fb, 0x2, 0x1, 0x1, 0xf99, 0x7ff, 0x1, 0x7, 0x9, 0x872c, 0x7, 0x1, 0x8, 0x8, 0x1, 0x7, 0x7, 0x8, 0xb, 0x5, 0x5, 0x4, 0x5, 0x4, 0x1a0, 0xfffffffa, 0x5, 0x0, 0xffffffff, 0x8, 0x8, 0x2, 0x9be4, 0xfffffffc, 0x477f, 0x1, 0x121, 0x2, 0x6, 0x7, 0x4, 0x0, 0xf78, 0xffffffff, 0x5, 0x71, 0x7f, 0x140000, 0x2, 0x7, 0x6, 0x7, 0x7dca, 0xffffffff, 0xa000000, 0x4, 0x8, 0x1, 0x9, 0x8, 0x4, 0x5, 0x1, 0x1, 0xb6ae, 0x7f, 0xfffffffb, 0x3, 0x3ff, 0x10000, 0x1, 0xff, 0x20, 0x5, 0xffffffe3, 0x9, 0x5, 0x4f, 0xa, 0x148, 0x8, 0x3, 0x9, 0xfffffff9, 0xa64f, 0x1, 0x3, 0x9, 0x3, 0xffffd52d, 0x5, 0x0, 0xefd3, 0x0, 0x3b7c, 0x0, 0x4, 0x6, 0x3, 0x4, 0x4, 0x2, 0xfffff1e3, 0x6, 0x7, 0x0, 0xfffffffe, 0xbfb, 0x6, 0x0, 0x4, 0x1, 0xffffff81, 0x0, 0x4, 0x7fff, 0x8, 0x1ff, 0x71, 0x400, 0x1, 0x4a36, 0x1f3, 0x9, 0x3, 0x24, 0x10000, 0x24f, 0x10, 0x9, 0x5, 0x1, 0x80000001, 0x7fffffff, 0x6, 0x0, 0x1, 0x4, 0x7ff, 0x2e2, 0x0, 0x4, 0x5, 0x401, 0x5f, 0xf, 0x1, 0x8001, 0x8, 0x8000000, 0x9, 0x1, 0x1, 0x7, 0x3, 0x5, 0xf3e, 0x1000, 0xc, 0xf4, 0x3, 0x9, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RATE={0x404, 0x2, [0x3d7, 0xb, 0x0, 0xa2, 0x8, 0x1, 0xc16, 0x6, 0xd5, 0x6f, 0x9, 0x3, 0x65, 0x0, 0x0, 0x8, 0x6, 0x1, 0x6, 0x4, 0x7ff, 0x5da, 0x3ff, 0x1000, 0x6, 0x8, 0x0, 0x8, 0x4, 0x4, 0xd142, 0x5, 0xfffffffa, 0x1, 0x6, 0x890, 0x36f52e5, 0x4, 0x4, 0x400, 0xf3db, 0xc, 0x6, 0x9, 0x80000000, 0x2, 0x81, 0x9, 0x0, 0x7, 0x25a6, 0x200, 0x3, 0x0, 0x7, 0x0, 0xfffffffb, 0x76, 0xffff, 0x6, 0xb72, 0x0, 0x1, 0x59a060fd, 0x0, 0x7009, 0xbc2, 0x6, 0x8, 0x0, 0x7, 0x7, 0x3, 0x2, 0x4, 0x9, 0x4, 0x7, 0x5, 0x4, 0x0, 0x5de, 0x3, 0x0, 0x3, 0xfffffe01, 0x9, 0x7, 0x4, 0x401, 0x10000, 0x5, 0x8, 0x2, 0x5, 0xffffffa3, 0x1, 0x7f, 0x4, 0x8, 0x928a, 0x5, 0x5, 0x800, 0x380, 0x0, 0x8, 0x2, 0x99, 0x8, 0x5, 0x735848e, 0x4b8acb1a, 0x3, 0x2, 0x1000, 0x8, 0x10000, 0x1, 0x5, 0x1, 0x6, 0x10, 0x8, 0x1000, 0x8000, 0x9, 0x9, 0x3, 0x3, 0x8, 0x80000001, 0x159, 0x0, 0x200, 0x5, 0x7fff, 0x5, 0x4718, 0x9, 0x5, 0x2, 0x1000, 0xf79, 0x5, 0x8, 0x9, 0x603, 0xfffffbff, 0x1ff, 0x2f99, 0x4, 0x200, 0x0, 0x3, 0xe, 0x8, 0x5, 0x5, 0x3, 0x800, 0xffff, 0xbf14, 0x800, 0x1200000, 0x4, 0x5, 0x83, 0x6, 0x4, 0x5, 0x3, 0x0, 0x6, 0x6, 0x4, 0x3f33, 0x1000, 0x6, 0x7, 0x1000, 0xfffffffa, 0x0, 0x7fffffff, 0x80000000, 0x7, 0x6, 0x8, 0x40f5c33b, 0x1ff, 0x2, 0x800, 0x8073, 0x7f, 0x4, 0x4, 0x7, 0xfffffffa, 0x3c, 0xffffff2b, 0x80000001, 0xe4a, 0xaf, 0x4, 0x2, 0x1a1, 0x6, 0x7, 0x1, 0x4, 0x3, 0x41a, 0x7fff, 0x1, 0xe8da, 0xfff, 0x247b6c73, 0x1c0f, 0x2, 0x8, 0x1, 0x6, 0x5de3, 0x2, 0x4, 0xb, 0x1, 0x6, 0x1000, 0x7, 0x1, 0x10, 0x1, 0x8, 0x3, 0x0, 0x6, 0x1, 0xf, 0x8, 0x4, 0x200, 0x5, 0xfffffffb, 0x1, 0xbb, 0x9, 0x6, 0x4, 0x6, 0x80000000, 0x3, 0x8001, 0xff, 0x9, 0xa]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfc4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]]}, {0x48, 0x6, "ed9158d2c25fb459f348b91a7e79fd99a2194111a371be6341bba6feb27f47915a3675db413a1d34b187565624ed323de9d9150dc7d49656a5a94ad462c3b44fde336e50"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x124, 0x1a, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xcad}]}, {0xed, 0x6, "9a8fc0e1dc0c4d9878f29b579234df515252876473edfa73e0eb4bb90116f7cbda08854a598f998d1dfaf28b7ac56470096dc21a4b95cd908e69b64916b7d97c630dc347a19fb824af8c3d8a2525f6c65aa3b41f5b69e28ebc015a48f4a0e133a54bc08d8f54d73c493af38735b8777ffc1d1e0949ccec6c367f50a64943f15f959f269971ab22088edd686733145db2e6bba82bec6a2532118e30f9c57ab49039e7d8fad4d0cc3fa84fb484e561c847ff3dfe849c63aba80b5b519a8c859dde917b7e7a68d3eff3e115bb0913a4a416700cfe89671ffbf78aa9bc257c24fae148d76de21a21a3c432"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_POLICE={0xc70, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x5, 0x40, 0x72, 0x81, 0x1, 0xffff, 0x1, 0x0, 0x2, 0x4, 0x5, 0x3, 0xee, 0xe, 0x847, 0x2, 0x2, 0x0, 0x1, 0x9, 0x40, 0x10001, 0x10, 0x2, 0x9, 0x1, 0x0, 0x8, 0x9, 0x9, 0x48, 0x6, 0xfffffffd, 0x81, 0x6, 0x7fffffff, 0x80, 0x6, 0x6, 0x2, 0x6, 0x3, 0x9, 0x7, 0x8, 0x10000, 0x6, 0x2, 0x1, 0x0, 0x3, 0x80, 0x77, 0x23, 0x4000000, 0x3, 0xffffffff, 0x6, 0x7, 0xffff973c, 0x93c0, 0x400000, 0xf420, 0xe, 0x1, 0x600d892e, 0x0, 0x487, 0x1000, 0xe5, 0x4, 0x2, 0x0, 0x5, 0x10, 0xb, 0x4, 0x5, 0x10, 0x7, 0x1, 0x4, 0x9, 0x0, 0xf, 0x1, 0x8bd, 0x0, 0x6, 0x6, 0x7a1fbde5, 0xf9, 0x0, 0x7, 0x8302, 0x9, 0xfffffffc, 0x1, 0x0, 0x4, 0x3, 0x1680, 0x8a4, 0x8000, 0x81, 0x29d, 0x5, 0x40, 0x1d0, 0x6, 0xfffffffb, 0x1d, 0x9, 0x100, 0x5, 0x81, 0x1, 0xc, 0x3ff, 0x2, 0xbf8, 0x8, 0x1, 0x80000001, 0x9, 0x8, 0x9, 0x3, 0x8, 0x3, 0x0, 0x3, 0x35, 0x7, 0x1, 0x40, 0x2, 0xb, 0x1, 0xfffffffd, 0xfc3, 0x7, 0xa, 0xffffe681, 0x9, 0x9, 0x4e1, 0x80000001, 0x8, 0x10, 0x6, 0x80000000, 0x401, 0x4, 0x2, 0x40, 0x1, 0x8000, 0x7, 0x9, 0x4, 0xfffffff7, 0x1000, 0x8, 0xfffffff6, 0x1ff, 0x4, 0x6000000, 0x3ff, 0x14, 0x8, 0xe950a78, 0x7, 0x3, 0x0, 0xd, 0x4, 0x8, 0x9, 0x6b, 0x3ff, 0x9, 0x5, 0x2, 0x5b89, 0xfffffffe, 0xcc2, 0x80, 0xb, 0xb24c, 0xb, 0x200, 0x6, 0x60e, 0x3, 0x8e5c, 0x5, 0x2008000, 0x5, 0x53, 0x4, 0x677, 0x1, 0x7fff, 0xff, 0x10, 0x6, 0x0, 0x3, 0xfff, 0x9, 0x7f, 0x1, 0x5, 0x604861ab, 0x1ff, 0x7ff, 0xed, 0x1ff, 0x1, 0x6, 0x101, 0x40, 0x8, 0x9, 0x8, 0xac, 0x8, 0x9, 0xfff, 0x1, 0x8, 0x1ff, 0xfb, 0x20, 0x80000001, 0x7, 0x57f, 0x6, 0x1ff, 0x6, 0xfff, 0x80000001, 0x9, 0x99e, 0x1, 0x5, 0x2, 0x9, 0x4, 0x8, 0x2, 0x1, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xd6, 0x6bb, 0xd, 0x7d, 0x7, 0x2, 0xa4, 0x9, 0x7f, 0x547f6e6b, 0x2, 0x7fb, 0x7f, 0x9, 0x3ff, 0x6, 0x1, 0xd0c8, 0x0, 0x4, 0x7, 0x8, 0x3, 0x6, 0x80000001, 0x48, 0x8, 0x1, 0x5, 0xd, 0xffffffff, 0x98, 0x200, 0x5f, 0x6, 0x4, 0x3, 0x0, 0x8, 0x9, 0x10001, 0x4, 0x3c6, 0x4, 0x4, 0x2, 0x1, 0xe, 0x8, 0x5, 0x4, 0x9, 0x8, 0x7, 0x5, 0x10001, 0x9, 0x0, 0x1, 0xfffff000, 0x3f5b, 0x7ff, 0x8000, 0x6, 0x10001, 0x3, 0x5, 0x4044, 0x5bd, 0x3ff, 0x10000, 0x10, 0x4, 0x0, 0x1, 0xe, 0x5, 0x0, 0x1, 0x300, 0xffffffc0, 0x7, 0xd, 0xa30, 0x3825, 0x5, 0x10000, 0x3ff, 0x6e, 0x2, 0x1, 0x0, 0x9, 0x4, 0x1, 0x9, 0x8, 0xfff, 0xffff, 0x0, 0x9, 0x6, 0x4, 0x6, 0x22, 0x1, 0x2, 0xfffffff7, 0x5, 0x200, 0x4, 0x5, 0x1, 0x7, 0x2, 0x7fffffff, 0x1, 0x0, 0x0, 0x9, 0x3, 0xfffffffd, 0x6, 0xfffffffa, 0x7ff, 0x40, 0x10001, 0x4, 0x4, 0x86c, 0xa, 0x7, 0x7fff, 0x7, 0x1ff, 0x1, 0x8, 0x9, 0xeda1, 0xe18, 0xfffff186, 0x6, 0x6, 0x0, 0x1, 0x101, 0x8, 0xa6d, 0x2, 0x9, 0x2000000, 0x0, 0xa4e, 0x7, 0x2, 0xfff, 0x5, 0x80, 0x9, 0xfffffffe, 0x8, 0x32ad, 0x9, 0x3, 0x9, 0x1000, 0x3, 0x9, 0x7, 0xc, 0x179, 0xa5b, 0x791, 0x10001, 0xf348, 0x5, 0x4, 0x1, 0x401, 0xc6a, 0x0, 0x4, 0x80000000, 0x6, 0x4, 0x80000001, 0x3, 0x9, 0x8, 0x7, 0x4, 0x10000, 0xf, 0xd09, 0x2, 0x6, 0x1, 0xb, 0xffffffff, 0xffffff80, 0xffffffe6, 0xd, 0x7, 0x2, 0x2, 0x3a, 0x4, 0x7, 0x4, 0x7fffffff, 0x9, 0x7, 0x0, 0x3, 0x0, 0x8000, 0x70b, 0xa0, 0x2, 0xe0, 0x225b, 0x4, 0x10, 0x76, 0xc2, 0x1b, 0x8b4, 0xa0c2, 0x9, 0x7, 0x7, 0x3, 0x400, 0x9, 0x7, 0x7ff, 0xfffff801, 0xb64, 0xc, 0x99, 0x1, 0x6, 0x1, 0x5, 0x7, 0x6, 0x9b29, 0x6, 0x8d, 0xf45, 0x40, 0x6, 0x9, 0xc2f5, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x5, 0xfffffffe, 0x8, 0x1, {0x60, 0x3, 0x9, 0x0, 0x6, 0x5}, {0x9, 0x2, 0xe, 0x2, 0x5, 0x4}, 0x7ff, 0x3ff, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0x2, 0x537, 0x4, 0x8, 0x7fff, 0x3, 0x3, 0x1, 0x101, 0x6, 0x9, 0x6, 0x5, 0x0, 0x0, 0x7, 0x100, 0x7d1, 0x69, 0x2, 0x5, 0xa314, 0x7fffffff, 0x1ff, 0x7, 0xfffffff9, 0xf, 0x8, 0x9, 0x3, 0x97, 0x3ff, 0x401, 0x5, 0x40, 0x2, 0x5, 0x6, 0x0, 0x9694, 0xa, 0x9, 0x0, 0x4, 0xed2, 0x5, 0x8, 0xffff0000, 0xacd, 0x3, 0x2, 0x8, 0xb0c, 0x7, 0xf1, 0x0, 0x287, 0x6, 0x9, 0x769d, 0x1ff, 0x2, 0xffffffff, 0x40, 0x7, 0x8, 0x3, 0x9, 0x101, 0x1, 0x1, 0x3, 0x3, 0x2, 0x23f, 0x8, 0x5, 0xc, 0xb6b0, 0x7, 0x1, 0x4, 0x9, 0xb5, 0x3, 0x101, 0xa, 0xb, 0x9, 0x2, 0x1, 0x5ce0000, 0xffffffff, 0x3, 0x51f, 0x6, 0x5, 0x5, 0x3, 0x559, 0x7fffffff, 0x80, 0x1, 0x4, 0x3, 0x101, 0x9, 0x3, 0x7, 0x0, 0x1, 0x2, 0xfffffffc, 0x3, 0x8, 0xe38, 0x7, 0x4, 0x6, 0x2856, 0x8, 0x3c1c, 0x6, 0x5, 0x80, 0x4, 0x1, 0xf05, 0x4, 0x9, 0xd8b3, 0xfc, 0x6, 0x7, 0x4, 0x44c7, 0x6, 0x8, 0x7, 0x4, 0x4448, 0x6, 0x80000000, 0xb, 0x742, 0x4, 0x4, 0x1, 0x2, 0x5, 0xd72, 0x40000000, 0x8d6, 0x9, 0x0, 0x8, 0x9, 0x9ba, 0x5, 0x6, 0x3, 0x3, 0xeac, 0x0, 0x8, 0x3, 0x10, 0x6, 0xfffc0000, 0xad4c, 0x8, 0x5, 0x3, 0xff03, 0x2, 0x8, 0x6, 0xb, 0x7, 0x800, 0x7fff, 0xd8, 0x6, 0x0, 0x1, 0x4, 0x5, 0xfffffffd, 0x6, 0xfffffffa, 0x1, 0xffff, 0x1c000, 0x7fffffff, 0x4, 0x4, 0xc9, 0x2, 0x3, 0x9, 0xffffff80, 0x6, 0xf, 0x1, 0xffff611a, 0x3, 0x1, 0x3, 0x5, 0x0, 0xdb, 0x7f, 0x0, 0x6c, 0x9, 0x10000, 0x6, 0x61, 0x214, 0x8, 0xc, 0x7, 0x2, 0x8001, 0x80000001, 0xbde6, 0x5, 0x4, 0x609, 0x80000000, 0x9, 0x40, 0x8, 0x9, 0x3, 0x80000000, 0x1, 0x1, 0xad7, 0x7, 0x8, 0x4, 0xfffffffe, 0x228, 0x2, 0x5, 0x7, 0x8, 0x5, 0x6, 0xc, 0x9, 0x6, 0x5]}]}, @TCA_BASIC_EMATCHES={0xa0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x54, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x3}, "358bd80a64039318bbc4c3416ce494d38c4efb4bda5d61f0c0a5406aeb0114507fd50f3b67f5062e49c10391d15b1c08e9f6ff12cbede5cd2c57158c4aaf31187758c33f2e"}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0xfa4}, {0x1, 0x3eb91cec, 0x81, 0xfffffff8}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x86fe}, {0x6cd4, 0x1, 0x200, 0x80000001}}}]}]}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x7}}, @TCA_RATE={0x6, 0x5, {0x80, 0xff}}]}, 0x33dc}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040010) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff3, 0xffff}, {0xf, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c4}, 0x4804) 1.606657146s ago: executing program 5 (id=15828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.439009432s ago: executing program 6 (id=15829): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000) 1.352314359s ago: executing program 5 (id=15830): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000201000000000000180100002020642100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000750000008500000006000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b704000000000000b705000000000000850000001c00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.256780545s ago: executing program 4 (id=15831): r0 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000540)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @local}, 0x1c, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 'syzkaller0\x00'}) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @rand_addr, 0xfffffffe}, 0x1c) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)='a', 0x1}], 0x1}, 0x4000) (async, rerun: 64) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f00000003c0)="f5", 0x1}, {&(0x7f0000000640)="c79dfe28ff45898352038fbe68425f69cc2cffc0dd2402c829b0604c24accff12ac4d75b6699342d716940a78c41fd01e5643386d9d1b1a38a76eb317de9db8e480189dd5fe6122a2c104455591696851f0325a3aa1b87fa5dbc5d4f599eb6d26f231571f457ea966646c407bada8ca26865453f6e54acf0573170390de9e551f055a832d995911645da743af6977037ff0f36d8899bd3e971c71ba716cff74b7d1a780eb7742de30fd8b640b188763dd752aac4efe7750b5c1858fbca5a5aa62b3a71e8246357af2e77919b7d30122d374a19b11a25af065efb4ec85b7482392ffb", 0xe2}, {&(0x7f00000000c0)="8fc65bf58a387d416c24dc6deddf066c682c5f82eb647801f4293e0ca765bbf9271525daa1f33ffe628879a57259eb931840b8f26c999d9784f497ea75a6c2b83405ea1c9976224487abb9e5b07bd0ab72f2bbfe", 0x54}, {&(0x7f0000000dc0)="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", 0x1000}], 0x4}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x400c1) (async, rerun: 64) shutdown(r3, 0x1) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 32) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000280), &(0x7f0000000440)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000003c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000300)={r5, 0x1}, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x84) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xffe0, 0x7}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1.168767534s ago: executing program 5 (id=15832): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.090612603s ago: executing program 7 (id=15833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000083db"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.018987677s ago: executing program 6 (id=15834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (fail_nth: 4) 1.008793582s ago: executing program 7 (id=15835): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x7, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x3, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0xb}, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r3, 0x20, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509", @ANYRES8=r0, @ANYBLOB="c0bdccb1129fe8bf48567712a992b29fdac74ccdd1dc865aa076fb86b85284a9eb8176118dbb06d382fb94593adbbe0267be2e39e3e7204086cc8ec8b837ed1297f85940916d86bc065887b0c8ac3516dc9cf6322b31638f70b67b99db9a234e96bc86946bfa1cc9a5c4c05d25e39c37209cfaab38dc9cefe001df"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') openat$cgroup(r6, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x3ffff, 0x0, 0x90, [0x200000000100, 0x200000000130, 0x200000000160, 0x200000000100, 0x200000000100, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000ea80b5f67dfef067aa90a2224e0b7c0000000000fcffffff00"/144]}, 0x108) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x32}, 0x0, @in=@multicast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8b68ff7f7d9704537b5cbf881fc77a063d32b278d066f65f060537bce7dbacbf6a20b35da0b8701b791a835986275b3908047fde2f767bd553ed90a211d2bf283f5e5af15a73135a03ebc0a517c77b96a54dbfada4650cd41a41230b6b9c4493bee2b972d72a6a75f5afb147c0499f700c84cfe085284e150607716047", @ANYRES16=0x0, @ANYBLOB="040025bd7000fddbdf253b0000000c009900070000000300000008005700aa06000004006c00080057002e0c0000"], 0x34}}, 0x100) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000006c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x4e24, @local}, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, 0x101}) recvmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x6}], 0x1, 0x0, 0x0) 956.683415ms ago: executing program 5 (id=15836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000500)="6a40c53f", 0x4, 0x2404c081, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) shutdown(r0, 0x1) 875.368441ms ago: executing program 8 (id=15837): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000083db0e57386aa3ba9fecc334a11bfccb522a49f04fead140d0b20966c80cc371d9bda4530cbdbb1675b73c737aec57913591595bfdef625450f02da8835a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 765.605463ms ago: executing program 5 (id=15838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 707.649706ms ago: executing program 6 (id=15839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd29, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}]}, 0x40}, 0x1, 0x9000000, 0x0, 0x4048091}, 0x40) 631.74401ms ago: executing program 8 (id=15840): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x400c011, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 466.07838ms ago: executing program 8 (id=15841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x2f}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @random="a52732eda9fc"}]}, 0x28}, 0x1, 0x0, 0x0, 0x44881}, 0x840) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={r4, 0xffff}, &(0x7f00000002c0)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc0c4) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000003000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f00000001c0)=0x10000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2001c004) 359.666057ms ago: executing program 6 (id=15842): socket$inet(0x2b, 0x801, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x100000000000000}, 0x0, 0x0) 216.271739ms ago: executing program 6 (id=15843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x2e, 0x800, 0x40000000, 0x25dfdbfc, "", [@typed={0x9, 0x154, 0x0, 0x0, @str='@.$^\x00'}]}, 0x1c}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000010000002500000008000300", @ANYRES32=r3, @ANYBLOB="08003500000001000a00060008021100000100000a0034000202020202020000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 0s ago: executing program 7 (id=15844): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000360007462abd700000000000017c00000c00018008000600", @ANYRES32=0x0, @ANYBLOB="af26b9bd07928a359f7e0cce25a40b22c5823e8ce3ed227405798008d765fa255c"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4840) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000140), 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f00000000c0)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000223bd700002f9df252c3e30db845d88a7380001000c0058004000000800000000080000de0000000014010058003d00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="6fc00801d778822a080004000005000008001b0000000000"], 0x30}}, 0x0) unshare(0x8040480) openat$nci(0xffffffffffffff9c, &(0x7f0000001a40), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000004e40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004e00)={&(0x7f0000001680)={0x1100, r8, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x23, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @rann={0x7e, 0x15, {{0x1, 0x5a}, 0x4, 0x38, @device_b, 0x1, 0x10, 0x9}}]}, @NL80211_ATTR_FTM_RESPONDER={0x10c4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1001, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xb2, 0x2, "f8be0d3dfcaaf1cfdc37ed660ef687d0dcc89682de1254ce1a40d9aaae30c90bec193319f7b52a7f136ee70adeafefe953e842d9d543c08da0ec5da3de8072ee4a342c400ad2662d469177e34e72d07d25821f8958eb86439ba824d9c99a03263510c0f05118f1a1f50ba07d3aaf6635d49a56ebe48a4fb8f838a23f6c292cc9ad012723f6c0c781d9ead23f6ecb73c46e65dc01a3963c6c947e8856134acfcd38b25fa836540447315913b08081"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]}, 0x1100}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) kernel console output (not intermixed with test programs): GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.999224][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880333a0400: abort rx timeout. Force session deactivation [ 1495.999368][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880333a0000: rx timeout, send abort [ 1496.031000][T21794] netlink: 'syz.7.15028': attribute type 4 has an invalid length. [ 1496.031022][T21794] netlink: 17 bytes leftover after parsing attributes in process `syz.7.15028'. [ 1496.112802][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.193224][T21799] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1496.488736][T21820] netlink: 'syz.7.15041': attribute type 4 has an invalid length. [ 1496.488758][T21820] netlink: 17 bytes leftover after parsing attributes in process `syz.7.15041'. [ 1496.499409][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880333a0000: abort rx timeout. Force session deactivation [ 1496.543414][T21822] syz_tun: entered allmulticast mode [ 1496.546450][T21821] syz_tun: left allmulticast mode [ 1496.935980][T21851] netlink: 'syz.8.15055': attribute type 4 has an invalid length. [ 1496.936002][T21851] netlink: 17 bytes leftover after parsing attributes in process `syz.8.15055'. [ 1497.149062][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.150435][T21862] dummy0 speed is unknown, defaulting to 1000 [ 1497.244381][T21871] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1497.259697][T21869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1497.452252][T21880] dummy0 speed is unknown, defaulting to 1000 [ 1497.579988][T21884] netlink: 'syz.5.15069': attribute type 4 has an invalid length. [ 1497.580012][T21884] netlink: 17 bytes leftover after parsing attributes in process `syz.5.15069'. [ 1498.109494][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.189099][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.317153][T21911] netlink: 'syz.8.15080': attribute type 4 has an invalid length. [ 1498.317174][T21911] netlink: 17 bytes leftover after parsing attributes in process `syz.8.15080'. [ 1498.341216][T21912] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1498.742852][T21929] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15085'. [ 1499.230611][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.230664][T21957] netlink: 'syz.4.15094': attribute type 4 has an invalid length. [ 1499.230680][T21957] netlink: 17 bytes leftover after parsing attributes in process `syz.4.15094'. [ 1499.529349][T21967] FAULT_INJECTION: forcing a failure. [ 1499.529349][T21967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.529389][T21967] CPU: 1 UID: 0 PID: 21967 Comm: syz.4.15096 Not tainted syzkaller #0 PREEMPT(full) [ 1499.529410][T21967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1499.529421][T21967] Call Trace: [ 1499.529429][T21967] [ 1499.529438][T21967] dump_stack_lvl+0xe8/0x150 [ 1499.529472][T21967] should_fail_ex+0x410/0x560 [ 1499.529499][T21967] _copy_from_iter+0x1d3/0x1660 [ 1499.529521][T21967] ? __alloc_skb+0x27a/0x7a0 [ 1499.529545][T21967] ? __alloc_skb+0x27a/0x7a0 [ 1499.529568][T21967] ? __alloc_skb+0x27a/0x7a0 [ 1499.529590][T21967] ? __pfx__copy_from_iter+0x10/0x10 [ 1499.529609][T21967] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1499.529636][T21967] ? __alloc_skb+0x27a/0x7a0 [ 1499.529655][T21967] ? __alloc_skb+0x27a/0x7a0 [ 1499.529682][T21967] ? tipc_msg_build+0x439/0xf50 [ 1499.529710][T21967] tipc_msg_build+0x493/0xf50 [ 1499.529741][T21967] ? net_generic+0x1e/0x240 [ 1499.529761][T21967] ? __pfx_tipc_msg_build+0x10/0x10 [ 1499.529788][T21967] ? net_generic+0x1e/0x240 [ 1499.529805][T21967] ? net_generic+0x1e/0x240 [ 1499.529825][T21967] ? tipc_group_bc_cong+0x15f/0x210 [ 1499.529853][T21967] tipc_send_group_bcast+0x7db/0xad0 [ 1499.529893][T21967] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1499.529923][T21967] ? unwind_get_return_address+0x4d/0x90 [ 1499.529945][T21967] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1499.529962][T21967] ? __pfx_woken_wake_function+0x10/0x10 [ 1499.529987][T21967] ? look_up_lock_class+0x57/0x110 [ 1499.530009][T21967] ? register_lock_class+0x31/0x2e0 [ 1499.530026][T21967] ? lock_acquire+0x115/0x350 [ 1499.530050][T21967] __tipc_sendmsg+0x313/0x2b60 [ 1499.530086][T21967] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1499.530106][T21967] ? lock_acquire+0x115/0x350 [ 1499.530122][T21967] ? aa_label_sk_perm+0x532/0x6e0 [ 1499.530153][T21967] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1499.530178][T21967] ? process_measurement+0x7b2/0x1c10 [ 1499.530210][T21967] ? __lock_acquire+0x747/0x2de0 [ 1499.530263][T21967] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1499.530293][T21967] ? tipc_sendmsg+0x47/0x70 [ 1499.530315][T21967] ? __local_bh_enable_ip+0xd6/0x140 [ 1499.530344][T21967] tipc_sendmsg+0x55/0x70 [ 1499.530365][T21967] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1499.530390][T21967] sock_sendmsg_nosec+0x14e/0x190 [ 1499.530413][T21967] ____sys_sendmsg+0x54e/0x850 [ 1499.530443][T21967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1499.530477][T21967] ? import_iovec+0x73/0xa0 [ 1499.530504][T21967] ___sys_sendmsg+0x2a5/0x360 [ 1499.530528][T21967] ? __lock_acquire+0x747/0x2de0 [ 1499.530550][T21967] ? __pfx____sys_sendmsg+0x10/0x10 [ 1499.530580][T21967] ? kstrtouint+0x6e/0xe0 [ 1499.530628][T21967] ? __fget_files+0x2a/0x420 [ 1499.530652][T21967] ? __fget_files+0x3a2/0x420 [ 1499.530687][T21967] __sys_sendmmsg+0x273/0x4d0 [ 1499.530718][T21967] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1499.530752][T21967] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1499.530791][T21967] ? ksys_write+0x242/0x270 [ 1499.530819][T21967] ? __pfx_ksys_write+0x10/0x10 [ 1499.530849][T21967] __x64_sys_sendmmsg+0xa0/0xc0 [ 1499.530874][T21967] do_syscall_64+0x166/0x520 [ 1499.530895][T21967] ? trace_irq_disable+0x3b/0x140 [ 1499.530912][T21967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.530929][T21967] ? clear_bhb_loop+0x70/0xc0 [ 1499.530950][T21967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.530967][T21967] RIP: 0033:0x7fdbbb39e159 [ 1499.530986][T21967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.531002][T21967] RSP: 002b:00007fdbbc19b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1499.531021][T21967] RAX: ffffffffffffffda RBX: 00007fdbbb626090 RCX: 00007fdbbb39e159 [ 1499.531035][T21967] RDX: 00000000040001f7 RSI: 00002000000030c0 RDI: 0000000000000003 [ 1499.531047][T21967] RBP: 00007fdbbc19b090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.531059][T21967] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1499.531071][T21967] R13: 00007fdbbb626128 R14: 00007fdbbb626090 R15: 00007ffc748cbcc8 [ 1499.531102][T21967] [ 1500.086141][T21980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1500.104590][T21988] netlink: 'syz.8.15106': attribute type 4 has an invalid length. [ 1500.104613][T21988] netlink: 17 bytes leftover after parsing attributes in process `syz.8.15106'. [ 1500.118897][T21980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15105'. [ 1500.160793][T21980] bond2: (slave bond0): making interface the new active one [ 1500.164215][T21980] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1500.269064][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.380867][T21995] 8021q: VLANs not supported on ip6gre0 [ 1500.381370][T21995] __nla_validate_parse: 2 callbacks suppressed [ 1500.381385][T21995] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15110'. [ 1500.538746][T22014] netlink: 'syz.8.15119': attribute type 4 has an invalid length. [ 1500.538769][T22014] netlink: 17 bytes leftover after parsing attributes in process `syz.8.15119'. [ 1500.576795][T22007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.577389][T22007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.711533][T22007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.719103][T22007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.919635][ T7784] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.920140][ T7784] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.920177][ T7784] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.920208][ T7784] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.126611][T22041] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15127'. [ 1501.150762][ T8017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.183367][T22046] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1501.265693][T22053] netlink: 'syz.7.15132': attribute type 4 has an invalid length. [ 1501.265715][T22053] netlink: 17 bytes leftover after parsing attributes in process `syz.7.15132'. [ 1501.308863][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.798893][T22080] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1501.908720][T22085] netlink: 'syz.8.15144': attribute type 4 has an invalid length. [ 1501.908745][T22085] netlink: 17 bytes leftover after parsing attributes in process `syz.8.15144'. [ 1502.028198][T22095] netlink: 'syz.4.15149': attribute type 10 has an invalid length. [ 1502.043017][T22095] team0: Port device bond0 added [ 1502.178916][T22107] FAULT_INJECTION: forcing a failure. [ 1502.178916][T22107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1502.178946][T22107] CPU: 0 UID: 0 PID: 22107 Comm: syz.4.15154 Not tainted syzkaller #0 PREEMPT(full) [ 1502.178966][T22107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1502.178975][T22107] Call Trace: [ 1502.178982][T22107] [ 1502.178990][T22107] dump_stack_lvl+0xe8/0x150 [ 1502.179021][T22107] should_fail_ex+0x410/0x560 [ 1502.179048][T22107] prepare_alloc_pages+0x223/0x600 [ 1502.179075][T22107] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1502.179099][T22107] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1502.179123][T22107] ? __pfx_policy_nodemask+0x10/0x10 [ 1502.179152][T22107] ? __lock_acquire+0x747/0x2de0 [ 1502.179175][T22107] alloc_pages_mpol+0x21e/0x390 [ 1502.179205][T22107] folio_alloc_mpol_noprof+0x39/0x160 [ 1502.179231][T22107] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1502.179255][T22107] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1502.179279][T22107] ? lock_acquire+0x115/0x350 [ 1502.179304][T22107] do_pte_missing+0x173a/0x34b0 [ 1502.179341][T22107] handle_mm_fault+0x1a53/0x3750 [ 1502.179376][T22107] ? handle_mm_fault+0xf1/0x3750 [ 1502.179410][T22107] ? __pfx_handle_mm_fault+0x10/0x10 [ 1502.179455][T22107] ? lock_mm_and_find_vma+0xa7/0x340 [ 1502.179485][T22107] do_user_addr_fault+0x746/0x1340 [ 1502.179522][T22107] exc_page_fault+0x6a/0xc0 [ 1502.179546][T22107] asm_exc_page_fault+0x26/0x30 [ 1502.179565][T22107] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 1502.179583][T22107] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f [ 1502.179599][T22107] RSP: 0018:ffffc90005fb7a68 EFLAGS: 00050202 [ 1502.179616][T22107] RAX: ffffffff84df4c00 RBX: 0000000000000004 RCX: 0000000000000004 [ 1502.179629][T22107] RDX: 0000000000000000 RSI: ffff88805448c000 RDI: 00002000000025c0 [ 1502.179642][T22107] RBP: ffffc90005fb7be0 R08: ffff88805448c003 R09: 1ffff1100a891800 [ 1502.179656][T22107] R10: dffffc0000000000 R11: ffffed100a891801 R12: 00002000000025c4 [ 1502.179669][T22107] R13: 00007ffffffff000 R14: ffff88805448c000 R15: 00002000000025c0 [ 1502.179691][T22107] ? __pfx__copy_to_user+0x10/0x10 [ 1502.179735][T22107] _copy_to_user+0x8a/0xb0 [ 1502.179761][T22107] generic_map_lookup_batch+0xab2/0xf20 [ 1502.179805][T22107] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1502.179833][T22107] ? __fget_files+0x2a/0x420 [ 1502.179864][T22107] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1502.179894][T22107] bpf_map_do_batch+0x27f/0x630 [ 1502.179916][T22107] ? bpf_lsm_bpf+0x9/0x20 [ 1502.179941][T22107] ? security_bpf+0x7e/0x2d0 [ 1502.179964][T22107] __sys_bpf+0xa9f/0xd90 [ 1502.179995][T22107] ? __pfx___sys_bpf+0x10/0x10 [ 1502.180025][T22107] ? __fget_files+0x2a/0x420 [ 1502.180070][T22107] ? ksys_write+0x242/0x270 [ 1502.180099][T22107] ? __pfx_ksys_write+0x10/0x10 [ 1502.180131][T22107] __x64_sys_bpf+0xba/0xd0 [ 1502.180154][T22107] do_syscall_64+0x166/0x520 [ 1502.180176][T22107] ? trace_irq_disable+0x3b/0x140 [ 1502.180195][T22107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.180214][T22107] ? clear_bhb_loop+0x70/0xc0 [ 1502.180238][T22107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.180257][T22107] RIP: 0033:0x7fdbbb39e159 [ 1502.180274][T22107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.180288][T22107] RSP: 002b:00007fdbbc1bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1502.180307][T22107] RAX: ffffffffffffffda RBX: 00007fdbbb625fa0 RCX: 00007fdbbb39e159 [ 1502.180321][T22107] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 0000000000000018 [ 1502.180332][T22107] RBP: 00007fdbbc1bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.180343][T22107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.180354][T22107] R13: 00007fdbbb626038 R14: 00007fdbbb625fa0 R15: 00007ffc748cbcc8 [ 1502.180384][T22107] [ 1502.367099][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.525647][T22121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1502.645214][T22125] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1502.794818][T22133] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1502.837679][T22135] netlink: 'syz.8.15161': attribute type 4 has an invalid length. [ 1502.837704][T22135] netlink: 17 bytes leftover after parsing attributes in process `syz.8.15161'. [ 1502.913243][ T7785] IPVS: starting estimator thread 0... [ 1503.009648][T22142] IPVS: using max 34 ests per chain, 81600 per kthread [ 1503.355227][T22174] netlink: 'syz.7.15179': attribute type 4 has an invalid length. [ 1503.355250][T22174] netlink: 17 bytes leftover after parsing attributes in process `syz.7.15179'. [ 1503.389138][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.399786][T22176] FAULT_INJECTION: forcing a failure. [ 1503.399786][T22176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.399815][T22176] CPU: 1 UID: 0 PID: 22176 Comm: syz.8.15181 Not tainted syzkaller #0 PREEMPT(full) [ 1503.399834][T22176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1503.399845][T22176] Call Trace: [ 1503.399853][T22176] [ 1503.399860][T22176] dump_stack_lvl+0xe8/0x150 [ 1503.399889][T22176] should_fail_ex+0x410/0x560 [ 1503.399908][T22176] _copy_from_user+0x2d/0xb0 [ 1503.399923][T22176] ___sys_sendmsg+0x1c6/0x360 [ 1503.399938][T22176] ? __lock_acquire+0x747/0x2de0 [ 1503.399952][T22176] ? __pfx____sys_sendmsg+0x10/0x10 [ 1503.399986][T22176] ? __fget_files+0x2a/0x420 [ 1503.400008][T22176] ? __fget_files+0x3a2/0x420 [ 1503.400026][T22176] __x64_sys_sendmsg+0x1b1/0x290 [ 1503.400041][T22176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1503.400066][T22176] do_syscall_64+0x166/0x520 [ 1503.400078][T22176] ? trace_irq_disable+0x3b/0x140 [ 1503.400089][T22176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.400100][T22176] ? clear_bhb_loop+0x70/0xc0 [ 1503.400112][T22176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.400122][T22176] RIP: 0033:0x7f297959e159 [ 1503.400133][T22176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.400142][T22176] RSP: 002b:00007f297a3cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1503.400154][T22176] RAX: ffffffffffffffda RBX: 00007f2979825fa0 RCX: 00007f297959e159 [ 1503.400161][T22176] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1503.400168][T22176] RBP: 00007f297a3cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.400174][T22176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.400180][T22176] R13: 00007f2979826038 R14: 00007f2979825fa0 R15: 00007ffe14e39178 [ 1503.400197][T22176] [ 1503.873063][T22198] macsec0: entered promiscuous mode [ 1503.875851][T22198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15188'. [ 1503.876929][T22198] veth1_macvtap: left promiscuous mode [ 1503.903177][T22198] macsec0 (unregistering): left promiscuous mode [ 1503.940628][T22205] netlink: 'syz.5.15192': attribute type 4 has an invalid length. [ 1503.940652][T22205] netlink: 17 bytes leftover after parsing attributes in process `syz.5.15192'. [ 1504.017101][T22207] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15194'. [ 1504.186787][T22217] FAULT_INJECTION: forcing a failure. [ 1504.186787][T22217] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.186818][T22217] CPU: 0 UID: 0 PID: 22217 Comm: syz.8.15196 Not tainted syzkaller #0 PREEMPT(full) [ 1504.186839][T22217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1504.186851][T22217] Call Trace: [ 1504.186859][T22217] [ 1504.186868][T22217] dump_stack_lvl+0xe8/0x150 [ 1504.186898][T22217] should_fail_ex+0x410/0x560 [ 1504.186921][T22217] ? __alloc_skb+0x1db/0x7a0 [ 1504.186939][T22217] should_failslab+0xa8/0x100 [ 1504.186958][T22217] ? __alloc_skb+0x1db/0x7a0 [ 1504.186973][T22217] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1504.186996][T22217] ? __alloc_skb+0x18d/0x7a0 [ 1504.187013][T22217] ? __alloc_skb+0x1db/0x7a0 [ 1504.187034][T22217] __alloc_skb+0x1db/0x7a0 [ 1504.187054][T22217] netlink_sendmsg+0x5d4/0xb40 [ 1504.187077][T22217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1504.187097][T22217] ? apparmor_socket_sendmsg+0x98/0x360 [ 1504.187117][T22217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1504.187130][T22217] sock_sendmsg_nosec+0x14e/0x190 [ 1504.187148][T22217] ____sys_sendmsg+0x54e/0x850 [ 1504.187173][T22217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1504.187199][T22217] ? import_iovec+0x73/0xa0 [ 1504.187220][T22217] ___sys_sendmsg+0x2a5/0x360 [ 1504.187239][T22217] ? __lock_acquire+0x747/0x2de0 [ 1504.187260][T22217] ? __pfx____sys_sendmsg+0x10/0x10 [ 1504.187312][T22217] ? __fget_files+0x2a/0x420 [ 1504.187335][T22217] ? __fget_files+0x3a2/0x420 [ 1504.187366][T22217] __x64_sys_sendmsg+0x1b1/0x290 [ 1504.187402][T22217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1504.187447][T22217] do_syscall_64+0x166/0x520 [ 1504.187470][T22217] ? trace_irq_disable+0x3b/0x140 [ 1504.187488][T22217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.187506][T22217] ? clear_bhb_loop+0x70/0xc0 [ 1504.187527][T22217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.187544][T22217] RIP: 0033:0x7f297959e159 [ 1504.187562][T22217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.187575][T22217] RSP: 002b:00007f297a3cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1504.187595][T22217] RAX: ffffffffffffffda RBX: 00007f2979825fa0 RCX: 00007f297959e159 [ 1504.187610][T22217] RDX: 0000000000000040 RSI: 0000200000002540 RDI: 0000000000000003 [ 1504.187622][T22217] RBP: 00007f297a3cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1504.187634][T22217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.187645][T22217] R13: 00007f2979826038 R14: 00007f2979825fa0 R15: 00007ffe14e39178 [ 1504.187678][T22217] [ 1504.428872][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.476507][ T8013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.042088][T22260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1505.052829][T22264] netlink: 'syz.4.15214': attribute type 2 has an invalid length. [ 1505.255415][T22278] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 1505.379843][T22286] vlan2: entered allmulticast mode [ 1505.380133][T22286] bridge0: port 3(vlan2) entered blocking state [ 1505.381847][T22286] bridge0: port 3(vlan2) entered disabled state [ 1505.385920][T22286] vlan2: entered promiscuous mode [ 1505.423605][T22289] __nla_validate_parse: 3 callbacks suppressed [ 1505.423624][T22289] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.15226'. [ 1505.456988][T22286] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15224'. [ 1505.470464][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.550567][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.831462][T22310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1505.835440][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15235'. [ 1505.835459][T22310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15235'. [ 1505.853711][T22310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.859512][T22308] netlink: 'syz.5.15234': attribute type 10 has an invalid length. [ 1505.859599][T22314] netlink: 'syz.5.15234': attribute type 10 has an invalid length. [ 1505.864125][T22310] bond2: (slave bond0): making interface the new active one [ 1505.870953][T22310] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1505.875702][T22315] FAULT_INJECTION: forcing a failure. [ 1505.875702][T22315] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.875731][T22315] CPU: 1 UID: 0 PID: 22315 Comm: syz.7.15236 Not tainted syzkaller #0 PREEMPT(full) [ 1505.875752][T22315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1505.875762][T22315] Call Trace: [ 1505.875770][T22315] [ 1505.875778][T22315] dump_stack_lvl+0xe8/0x150 [ 1505.875812][T22315] should_fail_ex+0x410/0x560 [ 1505.875838][T22315] ? __alloc_skb+0x1db/0x7a0 [ 1505.875860][T22315] should_failslab+0xa8/0x100 [ 1505.875884][T22315] ? __alloc_skb+0x1db/0x7a0 [ 1505.875903][T22315] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1505.875931][T22315] ? __alloc_skb+0x18d/0x7a0 [ 1505.875952][T22315] ? __alloc_skb+0x1db/0x7a0 [ 1505.875979][T22315] __alloc_skb+0x1db/0x7a0 [ 1505.876005][T22315] __pskb_copy_fclone+0xab/0x1200 [ 1505.876030][T22315] ? tipc_msg_build+0x15f/0xf50 [ 1505.876052][T22315] ? tipc_sendmsg+0x55/0x70 [ 1505.876071][T22315] ? sock_sendmsg_nosec+0x14e/0x190 [ 1505.876088][T22315] ? ___sys_sendmsg+0x2a5/0x360 [ 1505.876110][T22315] ? __sys_sendmmsg+0x273/0x4d0 [ 1505.876132][T22315] ? do_syscall_64+0x166/0x520 [ 1505.876154][T22315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.876179][T22315] tipc_msg_reassemble+0x10b/0x3b0 [ 1505.876208][T22315] tipc_mcast_xmit+0x254/0x19e0 [ 1505.876240][T22315] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 1505.876260][T22315] ? _copy_from_iter+0x21b/0x1660 [ 1505.876281][T22315] ? __alloc_skb+0x27a/0x7a0 [ 1505.876303][T22315] ? __alloc_skb+0x27a/0x7a0 [ 1505.876333][T22315] ? __alloc_skb+0x27a/0x7a0 [ 1505.876354][T22315] ? __pfx__copy_from_iter+0x10/0x10 [ 1505.876373][T22315] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1505.876398][T22315] ? __alloc_skb+0x27a/0x7a0 [ 1505.876417][T22315] ? __alloc_skb+0x27a/0x7a0 [ 1505.876444][T22315] ? tipc_msg_build+0x439/0xf50 [ 1505.876470][T22315] ? tipc_msg_build+0x4af/0xf50 [ 1505.876499][T22315] ? net_generic+0x1e/0x240 [ 1505.876526][T22315] ? net_generic+0x1e/0x240 [ 1505.876542][T22315] ? net_generic+0x1e/0x240 [ 1505.876562][T22315] ? tipc_group_bc_cong+0x15f/0x210 [ 1505.876589][T22315] tipc_send_group_bcast+0x80d/0xad0 [ 1505.876629][T22315] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1505.876658][T22315] ? unwind_get_return_address+0x4d/0x90 [ 1505.876680][T22315] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1505.876700][T22315] ? __pfx_woken_wake_function+0x10/0x10 [ 1505.876726][T22315] ? look_up_lock_class+0x57/0x110 [ 1505.876750][T22315] ? register_lock_class+0x31/0x2e0 [ 1505.876767][T22315] ? lock_acquire+0x115/0x350 [ 1505.876793][T22315] __tipc_sendmsg+0x313/0x2b60 [ 1505.876831][T22315] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1505.876851][T22315] ? lock_acquire+0x115/0x350 [ 1505.876868][T22315] ? aa_label_sk_perm+0x532/0x6e0 [ 1505.876899][T22315] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1505.876925][T22315] ? process_measurement+0x7b2/0x1c10 [ 1505.876957][T22315] ? __lock_acquire+0x747/0x2de0 [ 1505.877009][T22315] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1505.877038][T22315] ? tipc_sendmsg+0x47/0x70 [ 1505.877062][T22315] ? __local_bh_enable_ip+0xd6/0x140 [ 1505.877090][T22315] tipc_sendmsg+0x55/0x70 [ 1505.877111][T22315] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1505.877130][T22315] sock_sendmsg_nosec+0x14e/0x190 [ 1505.877152][T22315] ____sys_sendmsg+0x54e/0x850 [ 1505.877181][T22315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.877214][T22315] ? import_iovec+0x73/0xa0 [ 1505.877241][T22315] ___sys_sendmsg+0x2a5/0x360 [ 1505.877263][T22315] ? __lock_acquire+0x747/0x2de0 [ 1505.877285][T22315] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.877321][T22315] ? kstrtouint+0x6e/0xe0 [ 1505.877367][T22315] ? __fget_files+0x2a/0x420 [ 1505.877390][T22315] ? __fget_files+0x3a2/0x420 [ 1505.877425][T22315] __sys_sendmmsg+0x273/0x4d0 [ 1505.877455][T22315] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1505.877488][T22315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1505.877527][T22315] ? ksys_write+0x242/0x270 [ 1505.877556][T22315] ? __pfx_ksys_write+0x10/0x10 [ 1505.877589][T22315] __x64_sys_sendmmsg+0xa0/0xc0 [ 1505.877616][T22315] do_syscall_64+0x166/0x520 [ 1505.877637][T22315] ? trace_irq_disable+0x3b/0x140 [ 1505.877656][T22315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.877674][T22315] ? clear_bhb_loop+0x70/0xc0 [ 1505.877697][T22315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.877715][T22315] RIP: 0033:0x7fe26219e159 [ 1505.877732][T22315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.877748][T22315] RSP: 002b:00007fe263032028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1505.877767][T22315] RAX: ffffffffffffffda RBX: 00007fe262426090 RCX: 00007fe26219e159 [ 1505.877780][T22315] RDX: 00000000040001f7 RSI: 00002000000030c0 RDI: 0000000000000003 [ 1505.877792][T22315] RBP: 00007fe263032090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.877804][T22315] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.877815][T22315] R13: 00007fe262426128 R14: 00007fe262426090 R15: 00007ffea4878588 [ 1505.877846][T22315] [ 1505.884120][T22308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.892367][T22308] bond0: (slave team0): Enslaving as an active interface with an up link [ 1506.267257][T22325] netlink: 1224 bytes leftover after parsing attributes in process `syz.8.15239'. [ 1506.510590][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.787228][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15251'. [ 1507.082789][T22376] FAULT_INJECTION: forcing a failure. [ 1507.082789][T22376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.082819][T22376] CPU: 0 UID: 0 PID: 22376 Comm: syz.6.15260 Not tainted syzkaller #0 PREEMPT(full) [ 1507.082840][T22376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1507.082851][T22376] Call Trace: [ 1507.082859][T22376] [ 1507.082868][T22376] dump_stack_lvl+0xe8/0x150 [ 1507.082899][T22376] should_fail_ex+0x410/0x560 [ 1507.082926][T22376] _copy_from_user+0x2d/0xb0 [ 1507.082951][T22376] __sys_sendto+0x2a9/0x5a0 [ 1507.082975][T22376] ? ksys_write+0x1e6/0x270 [ 1507.083006][T22376] ? __pfx___sys_sendto+0x10/0x10 [ 1507.083026][T22376] ? __mutex_unlock_slowpath+0x731/0x900 [ 1507.083081][T22376] ? __pfx_ksys_write+0x10/0x10 [ 1507.083123][T22376] __x64_sys_sendto+0xde/0x100 [ 1507.083150][T22376] do_syscall_64+0x166/0x520 [ 1507.083172][T22376] ? trace_irq_disable+0x3b/0x140 [ 1507.083192][T22376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.083211][T22376] ? clear_bhb_loop+0x70/0xc0 [ 1507.083235][T22376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.083254][T22376] RIP: 0033:0x7fbb7079e159 [ 1507.083271][T22376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.083287][T22376] RSP: 002b:00007fbb7164e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1507.083307][T22376] RAX: ffffffffffffffda RBX: 00007fbb70a25fa0 RCX: 00007fbb7079e159 [ 1507.083321][T22376] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1507.083333][T22376] RBP: 00007fbb7164e090 R08: 0000200000000100 R09: 000000000000001c [ 1507.083345][T22376] R10: 000000000400c011 R11: 0000000000000246 R12: 0000000000000001 [ 1507.083356][T22376] R13: 00007fbb70a26038 R14: 00007fbb70a25fa0 R15: 00007fff03c4edd8 [ 1507.083387][T22376] [ 1507.418756][T22393] FAULT_INJECTION: forcing a failure. [ 1507.418756][T22393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.418787][T22393] CPU: 0 UID: 0 PID: 22393 Comm: syz.8.15268 Not tainted syzkaller #0 PREEMPT(full) [ 1507.418808][T22393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1507.418820][T22393] Call Trace: [ 1507.418828][T22393] [ 1507.418837][T22393] dump_stack_lvl+0xe8/0x150 [ 1507.418868][T22393] should_fail_ex+0x410/0x560 [ 1507.418896][T22393] _copy_to_user+0x31/0xb0 [ 1507.418924][T22393] generic_map_lookup_batch+0xb08/0xf20 [ 1507.418969][T22393] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1507.418998][T22393] ? __fget_files+0x2a/0x420 [ 1507.419028][T22393] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1507.419068][T22393] bpf_map_do_batch+0x27f/0x630 [ 1507.419091][T22393] ? bpf_lsm_bpf+0x9/0x20 [ 1507.419117][T22393] ? security_bpf+0x7e/0x2d0 [ 1507.419142][T22393] __sys_bpf+0xa9f/0xd90 [ 1507.419172][T22393] ? __pfx___sys_bpf+0x10/0x10 [ 1507.419205][T22393] ? __fget_files+0x2a/0x420 [ 1507.419249][T22393] ? ksys_write+0x242/0x270 [ 1507.419279][T22393] ? __pfx_ksys_write+0x10/0x10 [ 1507.419313][T22393] __x64_sys_bpf+0xba/0xd0 [ 1507.419335][T22393] do_syscall_64+0x166/0x520 [ 1507.419359][T22393] ? trace_irq_disable+0x3b/0x140 [ 1507.419378][T22393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.419397][T22393] ? clear_bhb_loop+0x70/0xc0 [ 1507.419420][T22393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.419439][T22393] RIP: 0033:0x7f297959e159 [ 1507.419457][T22393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.419472][T22393] RSP: 002b:00007f297a3cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1507.419493][T22393] RAX: ffffffffffffffda RBX: 00007f2979825fa0 RCX: 00007f297959e159 [ 1507.419508][T22393] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 0000000000000018 [ 1507.419521][T22393] RBP: 00007f297a3cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.419533][T22393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.419545][T22393] R13: 00007f2979826038 R14: 00007f2979825fa0 R15: 00007ffe14e39178 [ 1507.419576][T22393] [ 1507.550002][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.550307][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.683485][T22399] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15271'. [ 1507.753386][T22405] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1508.267075][T22436] FAULT_INJECTION: forcing a failure. [ 1508.267075][T22436] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.267106][T22436] CPU: 1 UID: 0 PID: 22436 Comm: syz.8.15287 Not tainted syzkaller #0 PREEMPT(full) [ 1508.267128][T22436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1508.267139][T22436] Call Trace: [ 1508.267147][T22436] [ 1508.267156][T22436] dump_stack_lvl+0xe8/0x150 [ 1508.267188][T22436] should_fail_ex+0x410/0x560 [ 1508.267214][T22436] ? __alloc_skb+0x1db/0x7a0 [ 1508.267236][T22436] should_failslab+0xa8/0x100 [ 1508.267261][T22436] ? __alloc_skb+0x1db/0x7a0 [ 1508.267281][T22436] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1508.267309][T22436] ? __alloc_skb+0x18d/0x7a0 [ 1508.267331][T22436] ? __alloc_skb+0x1db/0x7a0 [ 1508.267360][T22436] __alloc_skb+0x1db/0x7a0 [ 1508.267387][T22436] netlink_sendmsg+0x5d4/0xb40 [ 1508.267416][T22436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1508.267443][T22436] ? apparmor_socket_sendmsg+0x98/0x360 [ 1508.267468][T22436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1508.267486][T22436] sock_sendmsg_nosec+0x14e/0x190 [ 1508.267507][T22436] ____sys_sendmsg+0x54e/0x850 [ 1508.267539][T22436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1508.267572][T22436] ? import_iovec+0x73/0xa0 [ 1508.267600][T22436] ___sys_sendmsg+0x2a5/0x360 [ 1508.267623][T22436] ? __lock_acquire+0x747/0x2de0 [ 1508.267647][T22436] ? __pfx____sys_sendmsg+0x10/0x10 [ 1508.267709][T22436] ? __fget_files+0x2a/0x420 [ 1508.267733][T22436] ? __fget_files+0x3a2/0x420 [ 1508.267765][T22436] __x64_sys_sendmsg+0x1b1/0x290 [ 1508.267792][T22436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1508.267838][T22436] do_syscall_64+0x166/0x520 [ 1508.267861][T22436] ? trace_irq_disable+0x3b/0x140 [ 1508.267880][T22436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.267896][T22436] ? clear_bhb_loop+0x70/0xc0 [ 1508.267922][T22436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.267941][T22436] RIP: 0033:0x7f297959e159 [ 1508.267958][T22436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.267973][T22436] RSP: 002b:00007f297a3cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1508.268001][T22436] RAX: ffffffffffffffda RBX: 00007f2979825fa0 RCX: 00007f297959e159 [ 1508.268015][T22436] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1508.268027][T22436] RBP: 00007f297a3cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.268039][T22436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.268049][T22436] R13: 00007f2979826038 R14: 00007f2979825fa0 R15: 00007ffe14e39178 [ 1508.268082][T22436] [ 1508.409786][T22441] 8021q: VLANs not supported on ipvlan1 [ 1508.456940][T22444] netlink: 'syz.8.15291': attribute type 4 has an invalid length. [ 1508.456963][T22444] netlink: 17 bytes leftover after parsing attributes in process `syz.8.15291'. [ 1508.585923][T22447] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15292'. [ 1508.597773][T23197] net_ratelimit: 1 callbacks suppressed [ 1508.597794][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.703316][T22450] netlink: 'syz.8.15293': attribute type 4 has an invalid length. [ 1508.703338][T22450] netlink: 17 bytes leftover after parsing attributes in process `syz.8.15293'. [ 1508.755472][T22457] FAULT_INJECTION: forcing a failure. [ 1508.755472][T22457] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.755504][T22457] CPU: 1 UID: 0 PID: 22457 Comm: syz.8.15293 Not tainted syzkaller #0 PREEMPT(full) [ 1508.755516][T22457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1508.755523][T22457] Call Trace: [ 1508.755528][T22457] [ 1508.755533][T22457] dump_stack_lvl+0xe8/0x150 [ 1508.755553][T22457] should_fail_ex+0x410/0x560 [ 1508.755575][T22457] ? __alloc_skb+0x1db/0x7a0 [ 1508.755596][T22457] should_failslab+0xa8/0x100 [ 1508.755618][T22457] ? __alloc_skb+0x1db/0x7a0 [ 1508.755637][T22457] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1508.755659][T22457] ? __alloc_skb+0x18d/0x7a0 [ 1508.755671][T22457] ? __alloc_skb+0x1db/0x7a0 [ 1508.755686][T22457] __alloc_skb+0x1db/0x7a0 [ 1508.755700][T22457] netlink_sendmsg+0x5d4/0xb40 [ 1508.755720][T22457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1508.755750][T22457] ? apparmor_socket_sendmsg+0x98/0x360 [ 1508.755769][T22457] ? lock_acquire+0x115/0x350 [ 1508.755787][T22457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1508.755803][T22457] sock_sendmsg_nosec+0x14e/0x190 [ 1508.755821][T22457] sock_write_iter+0x2de/0x3e0 [ 1508.755852][T22457] ? __pfx_sock_write_iter+0x10/0x10 [ 1508.755883][T22457] ? bpf_lsm_file_permission+0x9/0x20 [ 1508.755905][T22457] ? security_file_permission+0x75/0x260 [ 1508.755930][T22457] vfs_write+0x612/0xba0 [ 1508.755966][T22457] ? __pfx_vfs_write+0x10/0x10 [ 1508.755998][T22457] ? __fget_files+0x2a/0x420 [ 1508.756039][T22457] ksys_write+0x150/0x270 [ 1508.756067][T22457] ? __pfx_ksys_write+0x10/0x10 [ 1508.756101][T22457] do_syscall_64+0x166/0x520 [ 1508.756122][T22457] ? trace_irq_disable+0x3b/0x140 [ 1508.756140][T22457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.756160][T22457] ? clear_bhb_loop+0x70/0xc0 [ 1508.756182][T22457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.756200][T22457] RIP: 0033:0x7f297959e159 [ 1508.756217][T22457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.756231][T22457] RSP: 002b:00007f297a3aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1508.756250][T22457] RAX: ffffffffffffffda RBX: 00007f2979826090 RCX: 00007f297959e159 [ 1508.756264][T22457] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 1508.756277][T22457] RBP: 00007f297a3aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.756286][T22457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.756292][T22457] R13: 00007f2979826128 R14: 00007f2979826090 R15: 00007ffe14e39178 [ 1508.756309][T22457] [ 1509.630988][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.184895][T22511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1510.389470][T22511] bond1: (slave bond0): making interface the new active one [ 1510.390635][T22511] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1510.411127][T22521] ipvlan2: entered promiscuous mode [ 1510.414094][T22521] team0: Device ipvlan2 failed to register rx_handler [ 1510.541123][T22537] __nla_validate_parse: 4 callbacks suppressed [ 1510.541144][T22537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15324'. [ 1510.590080][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.678846][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.080851][T22566] netlink: 40 bytes leftover after parsing attributes in process `syz.8.15333'. [ 1511.444181][T22588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1511.615998][T22600] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15348'. [ 1511.644752][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15347'. [ 1511.647657][T22605] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1511.712281][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.741211][T22596] IPv6: NLM_F_CREATE should be specified when creating new route [ 1511.741336][T22596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1511.741347][T22596] IPv6: NLM_F_CREATE should be set when creating new route [ 1511.741387][T22596] IPv6: NLM_F_CREATE should be set when creating new route [ 1511.741410][T22596] IPv6: NLM_F_CREATE should be set when creating new route [ 1511.742201][T22596] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.15347'. [ 1512.253294][T22633] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15361'. [ 1512.273895][T22637] netlink: 'syz.8.15363': attribute type 4 has an invalid length. [ 1512.273919][T22637] netlink: 17 bytes leftover after parsing attributes in process `syz.8.15363'. [ 1512.338351][T22642] netlink: 'syz.5.15366': attribute type 4 has an invalid length. [ 1512.338372][T22642] netlink: 17 bytes leftover after parsing attributes in process `syz.5.15366'. [ 1512.492697][T22651] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1512.678669][T22660] netlink: 40 bytes leftover after parsing attributes in process `syz.7.15376'. [ 1512.714595][T22661] ip_tables: iptables: counters copy to user failed while replacing table [ 1512.729006][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15375'. [ 1512.729041][T22661] netlink: 'syz.5.15375': attribute type 11 has an invalid length. [ 1512.729054][T22661] netlink: 'syz.5.15375': attribute type 13 has an invalid length. [ 1512.759252][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.800207][T22666] FAULT_INJECTION: forcing a failure. [ 1512.800207][T22666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.800239][T22666] CPU: 0 UID: 0 PID: 22666 Comm: syz.8.15377 Not tainted syzkaller #0 PREEMPT(full) [ 1512.800260][T22666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1512.800271][T22666] Call Trace: [ 1512.800279][T22666] [ 1512.800287][T22666] dump_stack_lvl+0xe8/0x150 [ 1512.800319][T22666] should_fail_ex+0x410/0x560 [ 1512.800346][T22666] _copy_from_iter+0x1d3/0x1660 [ 1512.800368][T22666] ? __alloc_skb+0x27a/0x7a0 [ 1512.800390][T22666] ? __alloc_skb+0x27a/0x7a0 [ 1512.800412][T22666] ? __alloc_skb+0x27a/0x7a0 [ 1512.800430][T22666] ? __pfx__copy_from_iter+0x10/0x10 [ 1512.800448][T22666] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1512.800479][T22666] ? __alloc_skb+0x27a/0x7a0 [ 1512.800499][T22666] ? __alloc_skb+0x27a/0x7a0 [ 1512.800524][T22666] ? netlink_sendmsg+0x650/0xb40 [ 1512.800540][T22666] ? skb_put+0x112/0x210 [ 1512.800564][T22666] netlink_sendmsg+0x6c0/0xb40 [ 1512.800589][T22666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.800614][T22666] ? apparmor_socket_sendmsg+0x98/0x360 [ 1512.800639][T22666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.800656][T22666] sock_sendmsg_nosec+0x14e/0x190 [ 1512.800679][T22666] ____sys_sendmsg+0x54e/0x850 [ 1512.800710][T22666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1512.800745][T22666] ? import_iovec+0x73/0xa0 [ 1512.800773][T22666] ___sys_sendmsg+0x2a5/0x360 [ 1512.800797][T22666] ? __lock_acquire+0x747/0x2de0 [ 1512.800822][T22666] ? __pfx____sys_sendmsg+0x10/0x10 [ 1512.800884][T22666] ? __fget_files+0x2a/0x420 [ 1512.800909][T22666] ? __fget_files+0x3a2/0x420 [ 1512.800945][T22666] __x64_sys_sendmsg+0x1b1/0x290 [ 1512.800992][T22666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1512.801046][T22666] do_syscall_64+0x166/0x520 [ 1512.801069][T22666] ? trace_irq_disable+0x3b/0x140 [ 1512.801088][T22666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.801108][T22666] ? clear_bhb_loop+0x70/0xc0 [ 1512.801131][T22666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.801150][T22666] RIP: 0033:0x7f297959e159 [ 1512.801168][T22666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.801184][T22666] RSP: 002b:00007f297a3cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1512.801204][T22666] RAX: ffffffffffffffda RBX: 00007f2979825fa0 RCX: 00007f297959e159 [ 1512.801218][T22666] RDX: 0000000000000040 RSI: 0000200000002540 RDI: 0000000000000003 [ 1512.801230][T22666] RBP: 00007f297a3cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.801243][T22666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.801254][T22666] R13: 00007f2979826038 R14: 00007f2979825fa0 R15: 00007ffe14e39178 [ 1512.801286][T22666] [ 1513.205713][T22679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.297545][T22679] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1513.327387][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.327505][ T7784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.338956][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.339058][ T7784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1513.510995][T22702] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1513.643697][ T8017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.791182][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.798106][T22711] veth1_vlan: left promiscuous mode [ 1513.803927][T22711] veth0_vlan: left promiscuous mode [ 1513.805727][T22711] veth0_vlan: entered promiscuous mode [ 1513.808304][T22711] veth1_vlan: entered promiscuous mode [ 1513.822337][T22711] veth1_macvtap: left promiscuous mode [ 1513.824278][T22711] veth0_macvtap: left promiscuous mode [ 1513.825498][T22711] veth0_macvtap: entered promiscuous mode [ 1513.826747][T22711] veth1_macvtap: entered promiscuous mode [ 1513.834809][T22711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1513.835947][T22711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1513.837096][T22711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1513.838227][T22711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1513.905633][T22720] bond2: option mode: unable to set because the bond device has slaves [ 1513.970015][ T7784] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.970058][ T7784] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.970088][ T7784] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.970117][ T7784] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.112658][ T7783] bond2: (slave bond0): link status definitely down, disabling slave [ 1514.150920][ T7783] bond2: now running without any active interface! [ 1514.209924][T22728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.210334][T22728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.388835][ T7784] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.486391][T22729] bond0: (slave bond_slave_1): Releasing backup interface [ 1514.528786][ T7785] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.528829][ T7785] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.528861][ T7785] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.592340][T22740] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1514.831275][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.908016][T22759] FAULT_INJECTION: forcing a failure. [ 1514.908016][T22759] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.908047][T22759] CPU: 1 UID: 0 PID: 22759 Comm: syz.8.15409 Not tainted syzkaller #0 PREEMPT(full) [ 1514.908068][T22759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1514.908079][T22759] Call Trace: [ 1514.908087][T22759] [ 1514.908098][T22759] dump_stack_lvl+0xe8/0x150 [ 1514.908131][T22759] should_fail_ex+0x410/0x560 [ 1514.908160][T22759] should_failslab+0xa8/0x100 [ 1514.908185][T22759] __kmalloc_cache_noprof+0xa3/0x600 [ 1514.908207][T22759] ? tipc_nametbl_lookup_mcast_sockets+0x6bf/0xd50 [ 1514.908234][T22759] ? tipc_nametbl_lookup_mcast_sockets+0x6bf/0xd50 [ 1514.908269][T22759] tipc_nametbl_lookup_mcast_sockets+0x6bf/0xd50 [ 1514.908295][T22759] ? tipc_nametbl_lookup_mcast_sockets+0x5b/0xd50 [ 1514.908335][T22759] tipc_sk_mcast_rcv+0x58b/0xf20 [ 1514.908370][T22759] ? __lock_acquire+0x747/0x2de0 [ 1514.908404][T22759] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 1514.908438][T22759] ? lock_acquire+0x115/0x350 [ 1514.908464][T22759] ? tipc_mcast_xmit+0x11f3/0x19e0 [ 1514.908487][T22759] tipc_mcast_xmit+0x1384/0x19e0 [ 1514.908518][T22759] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 1514.908539][T22759] ? _copy_from_iter+0x21b/0x1660 [ 1514.908560][T22759] ? __alloc_skb+0x27a/0x7a0 [ 1514.908585][T22759] ? __alloc_skb+0x27a/0x7a0 [ 1514.908609][T22759] ? __alloc_skb+0x27a/0x7a0 [ 1514.908631][T22759] ? __pfx__copy_from_iter+0x10/0x10 [ 1514.908650][T22759] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1514.908678][T22759] ? __alloc_skb+0x27a/0x7a0 [ 1514.908697][T22759] ? __alloc_skb+0x27a/0x7a0 [ 1514.908724][T22759] ? tipc_msg_build+0x439/0xf50 [ 1514.908750][T22759] ? tipc_msg_build+0x4af/0xf50 [ 1514.908780][T22759] ? net_generic+0x1e/0x240 [ 1514.908808][T22759] ? net_generic+0x1e/0x240 [ 1514.908824][T22759] ? net_generic+0x1e/0x240 [ 1514.908844][T22759] ? tipc_group_bc_cong+0x15f/0x210 [ 1514.908873][T22759] tipc_send_group_bcast+0x80d/0xad0 [ 1514.908915][T22759] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1514.908945][T22759] ? unwind_get_return_address+0x4d/0x90 [ 1514.908968][T22759] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1514.908988][T22759] ? __pfx_woken_wake_function+0x10/0x10 [ 1514.909014][T22759] ? look_up_lock_class+0x57/0x110 [ 1514.909039][T22759] ? register_lock_class+0x31/0x2e0 [ 1514.909056][T22759] ? lock_acquire+0x115/0x350 [ 1514.909083][T22759] __tipc_sendmsg+0x313/0x2b60 [ 1514.909123][T22759] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1514.909144][T22759] ? lock_acquire+0x115/0x350 [ 1514.909161][T22759] ? aa_label_sk_perm+0x532/0x6e0 [ 1514.909194][T22759] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1514.909221][T22759] ? process_measurement+0x7b2/0x1c10 [ 1514.909255][T22759] ? __lock_acquire+0x747/0x2de0 [ 1514.909310][T22759] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1514.909347][T22759] ? tipc_sendmsg+0x47/0x70 [ 1514.909372][T22759] ? __local_bh_enable_ip+0xd6/0x140 [ 1514.909401][T22759] tipc_sendmsg+0x55/0x70 [ 1514.909422][T22759] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1514.909441][T22759] sock_sendmsg_nosec+0x14e/0x190 [ 1514.909464][T22759] ____sys_sendmsg+0x54e/0x850 [ 1514.909495][T22759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1514.909530][T22759] ? import_iovec+0x73/0xa0 [ 1514.909558][T22759] ___sys_sendmsg+0x2a5/0x360 [ 1514.909582][T22759] ? __lock_acquire+0x747/0x2de0 [ 1514.909606][T22759] ? __pfx____sys_sendmsg+0x10/0x10 [ 1514.909635][T22759] ? kstrtouint+0x6e/0xe0 [ 1514.909679][T22759] ? __fget_files+0x2a/0x420 [ 1514.909702][T22759] ? __fget_files+0x3a2/0x420 [ 1514.909736][T22759] __sys_sendmmsg+0x273/0x4d0 [ 1514.909768][T22759] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1514.909804][T22759] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1514.909844][T22759] ? ksys_write+0x242/0x270 [ 1514.909875][T22759] ? __pfx_ksys_write+0x10/0x10 [ 1514.909910][T22759] __x64_sys_sendmmsg+0xa0/0xc0 [ 1514.909937][T22759] do_syscall_64+0x166/0x520 [ 1514.909959][T22759] ? trace_irq_disable+0x3b/0x140 [ 1514.909979][T22759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.909998][T22759] ? clear_bhb_loop+0x70/0xc0 [ 1514.910021][T22759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.910040][T22759] RIP: 0033:0x7f297959e159 [ 1514.910058][T22759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1514.910074][T22759] RSP: 002b:00007f297a3aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1514.910094][T22759] RAX: ffffffffffffffda RBX: 00007f2979826090 RCX: 00007f297959e159 [ 1514.910109][T22759] RDX: 00000000040001f7 RSI: 00002000000030c0 RDI: 0000000000000003 [ 1514.910121][T22759] RBP: 00007f297a3aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.910133][T22759] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.910146][T22759] R13: 00007f2979826128 R14: 00007f2979826090 R15: 00007ffe14e39178 [ 1514.910179][T22759] [ 1514.970671][T22752] openvswitch: netlink: Message has 8 unknown bytes. [ 1514.970704][T22752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1515.000415][T22762] netlink: 'syz.7.15410': attribute type 4 has an invalid length. [ 1515.163744][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.507970][T22771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1515.508366][T22754] syzkaller1: entered promiscuous mode [ 1515.508384][T22754] syzkaller1: entered allmulticast mode [ 1515.786629][T22776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1515.813407][T22779] __nla_validate_parse: 9 callbacks suppressed [ 1515.813428][T22779] netlink: 40 bytes leftover after parsing attributes in process `syz.8.15418'. [ 1515.868966][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.026444][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15420'. [ 1516.084577][T22795] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1516.111472][T22787] netlink: 5088 bytes leftover after parsing attributes in process `syz.8.15421'. [ 1516.131492][T22786] team0: Port device team_slave_0 removed [ 1516.152180][T22799] Cannot find add_set index 0 as target [ 1516.173844][T22801] netlink: 'syz.6.15420': attribute type 1 has an invalid length. [ 1516.187803][T22795] xt_CT: No such helper "netbios-ns" [ 1516.307066][T22810] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1516.389291][T22816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15433'. [ 1516.446059][T22818] ip_tables: iptables: counters copy to user failed while replacing table [ 1516.567405][T22828] FAULT_INJECTION: forcing a failure. [ 1516.567405][T22828] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.567436][T22828] CPU: 0 UID: 0 PID: 22828 Comm: syz.8.15439 Not tainted syzkaller #0 PREEMPT(full) [ 1516.567456][T22828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1516.567468][T22828] Call Trace: [ 1516.567476][T22828] [ 1516.567485][T22828] dump_stack_lvl+0xe8/0x150 [ 1516.567516][T22828] should_fail_ex+0x410/0x560 [ 1516.567545][T22828] should_failslab+0xa8/0x100 [ 1516.567571][T22828] __kmalloc_cache_noprof+0xa3/0x600 [ 1516.567593][T22828] ? sctp_add_bind_addr+0x8c/0x370 [ 1516.567620][T22828] ? sctp_add_bind_addr+0x8c/0x370 [ 1516.567648][T22828] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1516.567676][T22828] sctp_add_bind_addr+0x8c/0x370 [ 1516.567704][T22828] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 1516.567731][T22828] sctp_do_bind+0x597/0x9a0 [ 1516.567773][T22828] sctp_connect_new_asoc+0x270/0x6b0 [ 1516.567799][T22828] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1516.567828][T22828] ? __local_bh_enable_ip+0xd6/0x140 [ 1516.567851][T22828] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1516.567877][T22828] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1516.567902][T22828] sctp_sendmsg+0x159b/0x2d00 [ 1516.567936][T22828] ? kstrtouint+0x6e/0xe0 [ 1516.567957][T22828] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1516.567977][T22828] ? lock_acquire+0x115/0x350 [ 1516.567998][T22828] ? get_pid_task+0x20/0x1f0 [ 1516.568035][T22828] ? aa_sock_msg_perm+0xf5/0x210 [ 1516.568058][T22828] ? sock_rps_record_flow+0x19/0x350 [ 1516.568081][T22828] ? inet_sendmsg+0x298/0x320 [ 1516.568103][T22828] ? __pfx_inet_sendmsg+0x10/0x10 [ 1516.568123][T22828] sock_sendmsg_nosec+0x10f/0x190 [ 1516.568146][T22828] __sys_sendto+0x408/0x5a0 [ 1516.568168][T22828] ? ksys_write+0x1e6/0x270 [ 1516.568199][T22828] ? __pfx___sys_sendto+0x10/0x10 [ 1516.568220][T22828] ? __mutex_unlock_slowpath+0x731/0x900 [ 1516.568275][T22828] ? __pfx_ksys_write+0x10/0x10 [ 1516.568308][T22828] __x64_sys_sendto+0xde/0x100 [ 1516.568336][T22828] do_syscall_64+0x166/0x520 [ 1516.568358][T22828] ? trace_irq_disable+0x3b/0x140 [ 1516.568377][T22828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.568397][T22828] ? clear_bhb_loop+0x70/0xc0 [ 1516.568421][T22828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.568438][T22828] RIP: 0033:0x7f297959e159 [ 1516.568455][T22828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.568469][T22828] RSP: 002b:00007f297a3cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1516.568487][T22828] RAX: ffffffffffffffda RBX: 00007f2979825fa0 RCX: 00007f297959e159 [ 1516.568501][T22828] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1516.568512][T22828] RBP: 00007f297a3cb090 R08: 0000200000000100 R09: 000000000000001c [ 1516.568524][T22828] R10: 000000000400c011 R11: 0000000000000246 R12: 0000000000000001 [ 1516.568535][T22828] R13: 00007f2979826038 R14: 00007f2979825fa0 R15: 00007ffe14e39178 [ 1516.568568][T22828] [ 1517.264969][T22855] Œ: renamed from veth1_to_batadv (while UP) [ 1517.337378][T22860] netlink: 40 bytes leftover after parsing attributes in process `syz.7.15447'. [ 1517.509722][T22872] FAULT_INJECTION: forcing a failure. [ 1517.509722][T22872] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.509754][T22872] CPU: 0 UID: 0 PID: 22872 Comm: syz.7.15451 Not tainted syzkaller #0 PREEMPT(full) [ 1517.509775][T22872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1517.509785][T22872] Call Trace: [ 1517.509793][T22872] [ 1517.509801][T22872] dump_stack_lvl+0xe8/0x150 [ 1517.509831][T22872] should_fail_ex+0x410/0x560 [ 1517.509858][T22872] should_failslab+0xa8/0x100 [ 1517.509882][T22872] __kmalloc_noprof+0xfe/0x720 [ 1517.509903][T22872] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1517.509925][T22872] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1517.509955][T22872] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1517.509979][T22872] ? __dev_queue_xmit+0x29b/0x3820 [ 1517.510009][T22872] genl_family_rcv_msg_doit+0xda/0x340 [ 1517.510038][T22872] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1517.510069][T22872] ? apparmor_capable+0x126/0x170 [ 1517.510099][T22872] ? bpf_lsm_capable+0x9/0x20 [ 1517.510116][T22872] ? security_capable+0x7e/0x2c0 [ 1517.510152][T22872] genl_rcv_msg+0x614/0x7a0 [ 1517.510181][T22872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1517.510203][T22872] ? __pfx_ethnl_set_features+0x10/0x10 [ 1517.510245][T22872] netlink_rcv_skb+0x226/0x4a0 [ 1517.510274][T22872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1517.510298][T22872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1517.510342][T22872] ? down_read+0x2be/0x330 [ 1517.510370][T22872] genl_rcv+0x28/0x40 [ 1517.510390][T22872] netlink_unicast+0x7bd/0x940 [ 1517.510428][T22872] netlink_sendmsg+0x813/0xb40 [ 1517.510456][T22872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.510484][T22872] ? apparmor_socket_sendmsg+0x98/0x360 [ 1517.510507][T22872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.510524][T22872] sock_sendmsg_nosec+0x14e/0x190 [ 1517.510545][T22872] ____sys_sendmsg+0x54e/0x850 [ 1517.510576][T22872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1517.510610][T22872] ? import_iovec+0x73/0xa0 [ 1517.510637][T22872] ___sys_sendmsg+0x2a5/0x360 [ 1517.510660][T22872] ? __lock_acquire+0x747/0x2de0 [ 1517.510684][T22872] ? __pfx____sys_sendmsg+0x10/0x10 [ 1517.510745][T22872] ? __fget_files+0x2a/0x420 [ 1517.510773][T22872] ? __fget_files+0x3a2/0x420 [ 1517.510807][T22872] __x64_sys_sendmsg+0x1b1/0x290 [ 1517.510835][T22872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1517.510882][T22872] do_syscall_64+0x166/0x520 [ 1517.510903][T22872] ? trace_irq_disable+0x3b/0x140 [ 1517.510921][T22872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.510940][T22872] ? clear_bhb_loop+0x70/0xc0 [ 1517.510962][T22872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.510981][T22872] RIP: 0033:0x7fe26219e159 [ 1517.510999][T22872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.511015][T22872] RSP: 002b:00007fe263053028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1517.511036][T22872] RAX: ffffffffffffffda RBX: 00007fe262425fa0 RCX: 00007fe26219e159 [ 1517.511050][T22872] RDX: 0000000000000040 RSI: 0000200000002540 RDI: 0000000000000003 [ 1517.511063][T22872] RBP: 00007fe263053090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.511075][T22872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1517.511086][T22872] R13: 00007fe262426038 R14: 00007fe262425fa0 R15: 00007ffea4878588 [ 1517.511120][T22872] [ 1517.820336][T22878] netlink: 'syz.7.15454': attribute type 1 has an invalid length. [ 1517.886323][T22882] FAULT_INJECTION: forcing a failure. [ 1517.886323][T22882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1517.886354][T22882] CPU: 0 UID: 0 PID: 22882 Comm: syz.5.15456 Not tainted syzkaller #0 PREEMPT(full) [ 1517.886375][T22882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1517.886386][T22882] Call Trace: [ 1517.886393][T22882] [ 1517.886402][T22882] dump_stack_lvl+0xe8/0x150 [ 1517.886433][T22882] should_fail_ex+0x410/0x560 [ 1517.886461][T22882] _copy_from_iter+0x1d3/0x1660 [ 1517.886492][T22882] ? __alloc_skb+0x27a/0x7a0 [ 1517.886517][T22882] ? __alloc_skb+0x27a/0x7a0 [ 1517.886540][T22882] ? __alloc_skb+0x27a/0x7a0 [ 1517.886561][T22882] ? __pfx__copy_from_iter+0x10/0x10 [ 1517.886581][T22882] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1517.886608][T22882] ? __alloc_skb+0x27a/0x7a0 [ 1517.886627][T22882] ? __alloc_skb+0x27a/0x7a0 [ 1517.886655][T22882] ? netlink_sendmsg+0x650/0xb40 [ 1517.886673][T22882] ? skb_put+0x112/0x210 [ 1517.886698][T22882] netlink_sendmsg+0x6c0/0xb40 [ 1517.886726][T22882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.886754][T22882] ? apparmor_socket_sendmsg+0x98/0x360 [ 1517.886778][T22882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.886795][T22882] sock_sendmsg_nosec+0x14e/0x190 [ 1517.886818][T22882] ____sys_sendmsg+0x54e/0x850 [ 1517.886850][T22882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1517.886884][T22882] ? import_iovec+0x73/0xa0 [ 1517.886911][T22882] ___sys_sendmsg+0x2a5/0x360 [ 1517.886935][T22882] ? __lock_acquire+0x747/0x2de0 [ 1517.886959][T22882] ? __pfx____sys_sendmsg+0x10/0x10 [ 1517.887021][T22882] ? __fget_files+0x2a/0x420 [ 1517.887046][T22882] ? __fget_files+0x3a2/0x420 [ 1517.887082][T22882] __x64_sys_sendmsg+0x1b1/0x290 [ 1517.887110][T22882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1517.887158][T22882] do_syscall_64+0x166/0x520 [ 1517.887180][T22882] ? trace_irq_disable+0x3b/0x140 [ 1517.887198][T22882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.887218][T22882] ? clear_bhb_loop+0x70/0xc0 [ 1517.887241][T22882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.887260][T22882] RIP: 0033:0x7f5a2839e159 [ 1517.887278][T22882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.887294][T22882] RSP: 002b:00007f5a29269028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1517.887315][T22882] RAX: ffffffffffffffda RBX: 00007f5a28625fa0 RCX: 00007f5a2839e159 [ 1517.887329][T22882] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1517.887341][T22882] RBP: 00007f5a29269090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.887353][T22882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1517.887367][T22882] R13: 00007f5a28626038 R14: 00007f5a28625fa0 R15: 00007ffd82589f78 [ 1517.887398][T22882] [ 1517.901095][T22885] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15454'. [ 1517.932577][T22878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1517.985838][T22878] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15454'. [ 1518.046839][T22878] macvlan2: entered promiscuous mode [ 1518.046861][T22878] macvlan2: entered allmulticast mode [ 1518.057963][T22878] bond4: entered promiscuous mode [ 1518.064512][T22878] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1518.086170][T22878] bond4: left promiscuous mode [ 1518.313092][T22898] netlink: 'syz.6.15461': attribute type 4 has an invalid length. [ 1518.381401][T22901] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15462'. [ 1518.538189][T22905] syzkaller0: entered promiscuous mode [ 1518.538212][T22905] syzkaller0: entered allmulticast mode [ 1518.744751][T22922] nbd: must specify a size in bytes for the device [ 1518.755901][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15468'. [ 1518.755933][T22922] netlink: 'syz.8.15468': attribute type 30 has an invalid length. [ 1518.791127][T22916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.813541][T22925] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15468'. [ 1518.813582][T22925] netlink: 'syz.8.15468': attribute type 30 has an invalid length. [ 1518.891129][T22916] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1518.924711][T22922] vxlan0: entered promiscuous mode [ 1518.924732][T22922] vxlan0: entered allmulticast mode [ 1518.932698][ T7778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.932799][ T7778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.951338][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.951438][ T7778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.989294][ T30] net_ratelimit: 7 callbacks suppressed [ 1518.989311][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.102119][T22925] vxlan1: entered promiscuous mode [ 1519.102133][T22925] vxlan1: entered allmulticast mode [ 1519.123906][T22936] bond1: option mode: unable to set because the bond device has slaves [ 1519.170073][ T7785] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1519.222020][ T7785] bond1: (slave bond0): link status definitely down, disabling slave [ 1519.237851][ T7785] bond1: now running without any active interface! [ 1519.244191][ T7780] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1519.246954][ T7758] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1519.247067][ T7758] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1519.332843][T22945] ip_tables: iptables: counters copy to user failed while replacing table [ 1519.333687][T22945] netlink: 'syz.4.15474': attribute type 4 has an invalid length. [ 1519.652606][T22964] ip_tables: iptables: counters copy to user failed while replacing table [ 1519.709841][ T8017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.740123][T22959] syzkaller0: entered promiscuous mode [ 1519.740144][T22959] syzkaller0: entered allmulticast mode [ 1519.988551][T22984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1520.029946][T23201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.817109][T23034] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1520.839003][T23035] FAULT_INJECTION: forcing a failure. [ 1520.839003][T23035] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.839034][T23035] CPU: 0 UID: 0 PID: 23035 Comm: syz.8.15504 Not tainted syzkaller #0 PREEMPT(full) [ 1520.839054][T23035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1520.839065][T23035] Call Trace: [ 1520.839072][T23035] [ 1520.839080][T23035] dump_stack_lvl+0xe8/0x150 [ 1520.839110][T23035] should_fail_ex+0x410/0x560 [ 1520.839136][T23035] should_failslab+0xa8/0x100 [ 1520.839160][T23035] __kmalloc_cache_noprof+0xa3/0x600 [ 1520.839188][T23035] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 1520.839208][T23035] ? sctp_association_new+0x89/0x25d0 [ 1520.839229][T23035] ? sctp_association_new+0x89/0x25d0 [ 1520.839258][T23035] sctp_association_new+0x89/0x25d0 [ 1520.839284][T23035] ? __ipv6_addr_type+0x23d/0x2f0 [ 1520.839313][T23035] sctp_connect_new_asoc+0x2e4/0x6b0 [ 1520.839341][T23035] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1520.839372][T23035] ? __local_bh_enable_ip+0xd6/0x140 [ 1520.839396][T23035] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1520.839422][T23035] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1520.839446][T23035] sctp_sendmsg+0x159b/0x2d00 [ 1520.839480][T23035] ? kstrtouint+0x6e/0xe0 [ 1520.839500][T23035] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1520.839521][T23035] ? lock_acquire+0x115/0x350 [ 1520.839541][T23035] ? get_pid_task+0x20/0x1f0 [ 1520.839579][T23035] ? aa_sock_msg_perm+0xf5/0x210 [ 1520.839604][T23035] ? sock_rps_record_flow+0x19/0x350 [ 1520.839629][T23035] ? inet_sendmsg+0x298/0x320 [ 1520.839652][T23035] ? __pfx_inet_sendmsg+0x10/0x10 [ 1520.839670][T23035] sock_sendmsg_nosec+0x10f/0x190 [ 1520.839693][T23035] __sys_sendto+0x408/0x5a0 [ 1520.839716][T23035] ? ksys_write+0x1e6/0x270 [ 1520.839746][T23035] ? __pfx___sys_sendto+0x10/0x10 [ 1520.839766][T23035] ? __mutex_unlock_slowpath+0x731/0x900 [ 1520.839822][T23035] ? __pfx_ksys_write+0x10/0x10 [ 1520.839855][T23035] __x64_sys_sendto+0xde/0x100 [ 1520.839882][T23035] do_syscall_64+0x166/0x520 [ 1520.839905][T23035] ? trace_irq_disable+0x3b/0x140 [ 1520.839924][T23035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.839941][T23035] ? clear_bhb_loop+0x70/0xc0 [ 1520.839963][T23035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.839982][T23035] RIP: 0033:0x7f297959e159 [ 1520.840000][T23035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.840015][T23035] RSP: 002b:00007f297a3cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1520.840034][T23035] RAX: ffffffffffffffda RBX: 00007f2979825fa0 RCX: 00007f297959e159 [ 1520.840048][T23035] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1520.840060][T23035] RBP: 00007f297a3cb090 R08: 0000200000000100 R09: 000000000000001c [ 1520.840072][T23035] R10: 000000000400c011 R11: 0000000000000246 R12: 0000000000000001 [ 1520.840084][T23035] R13: 00007f2979826038 R14: 00007f2979825fa0 R15: 00007ffe14e39178 [ 1520.840118][T23035] [ 1521.077886][T23201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.494600][T23056] ip_tables: iptables: counters copy to user failed while replacing table [ 1521.517804][ T7758] IPVS: starting estimator thread 0... [ 1521.609583][T23058] IPVS: using max 28 ests per chain, 67200 per kthread [ 1521.711000][T23066] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1521.715898][T23066] __nla_validate_parse: 10 callbacks suppressed [ 1521.715917][T23066] netlink: 68 bytes leftover after parsing attributes in process `syz.5.15512'. [ 1521.788034][T23069] ip_tables: iptables: counters copy to user failed while replacing table [ 1521.798619][T23069] netlink: 'syz.8.15514': attribute type 4 has an invalid length. [ 1521.877698][T23074] netlink: 'syz.5.15515': attribute type 4 has an invalid length. [ 1521.877720][T23074] netlink: 17 bytes leftover after parsing attributes in process `syz.5.15515'. [ 1521.889382][T23074] FAULT_INJECTION: forcing a failure. [ 1521.889382][T23074] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.889412][T23074] CPU: 0 UID: 0 PID: 23074 Comm: syz.5.15515 Not tainted syzkaller #0 PREEMPT(full) [ 1521.889433][T23074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1521.889445][T23074] Call Trace: [ 1521.889453][T23074] [ 1521.889461][T23074] dump_stack_lvl+0xe8/0x150 [ 1521.889492][T23074] should_fail_ex+0x410/0x560 [ 1521.889518][T23074] should_failslab+0xa8/0x100 [ 1521.889543][T23074] __kmalloc_noprof+0xfe/0x720 [ 1521.889560][T23074] ? __lock_acquire+0x747/0x2de0 [ 1521.889581][T23074] ? fib_nl2rule+0x346/0x1a40 [ 1521.889605][T23074] ? fib_nl2rule+0x346/0x1a40 [ 1521.889637][T23074] fib_nl2rule+0x346/0x1a40 [ 1521.889669][T23074] ? __pfx_fib_nl2rule+0x10/0x10 [ 1521.889698][T23074] ? __nla_parse+0x40/0x60 [ 1521.889725][T23074] fib_delrule+0x329/0x1c00 [ 1521.889753][T23074] ? lock_acquire+0x115/0x350 [ 1521.889782][T23074] ? is_bpf_text_address+0x26/0x2b0 [ 1521.889810][T23074] ? __lock_acquire+0x747/0x2de0 [ 1521.889832][T23074] ? __pfx_fib_delrule+0x10/0x10 [ 1521.889894][T23074] ? __pfx_fib_nl_delrule+0x10/0x10 [ 1521.889911][T23074] rtnetlink_rcv_msg+0x802/0xc00 [ 1521.889932][T23074] ? netlink_sendmsg+0x5d4/0xb40 [ 1521.889953][T23074] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1521.889975][T23074] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1521.890002][T23074] ? __lock_acquire+0x747/0x2de0 [ 1521.890032][T23074] netlink_rcv_skb+0x226/0x4a0 [ 1521.890061][T23074] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1521.890085][T23074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1521.890131][T23074] ? netlink_deliver_tap+0x2e/0x1b0 [ 1521.890157][T23074] ? netlink_deliver_tap+0x2e/0x1b0 [ 1521.890189][T23074] netlink_unicast+0x7bd/0x940 [ 1521.890225][T23074] netlink_sendmsg+0x813/0xb40 [ 1521.890252][T23074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1521.890278][T23074] ? apparmor_socket_sendmsg+0x98/0x360 [ 1521.890298][T23074] ? lock_acquire+0x115/0x350 [ 1521.890317][T23074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1521.890333][T23074] sock_sendmsg_nosec+0x14e/0x190 [ 1521.890355][T23074] sock_write_iter+0x2de/0x3e0 [ 1521.890384][T23074] ? __pfx_sock_write_iter+0x10/0x10 [ 1521.890419][T23074] ? bpf_lsm_file_permission+0x9/0x20 [ 1521.890443][T23074] ? security_file_permission+0x75/0x260 [ 1521.890470][T23074] vfs_write+0x612/0xba0 [ 1521.890506][T23074] ? __pfx_vfs_write+0x10/0x10 [ 1521.890541][T23074] ? __fget_files+0x2a/0x420 [ 1521.890575][T23074] ksys_write+0x150/0x270 [ 1521.890603][T23074] ? __pfx_ksys_write+0x10/0x10 [ 1521.890640][T23074] do_syscall_64+0x166/0x520 [ 1521.890663][T23074] ? trace_irq_disable+0x3b/0x140 [ 1521.890681][T23074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.890700][T23074] ? clear_bhb_loop+0x70/0xc0 [ 1521.890722][T23074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.890740][T23074] RIP: 0033:0x7f5a2839e159 [ 1521.890757][T23074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.890772][T23074] RSP: 002b:00007f5a29269028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1521.890792][T23074] RAX: ffffffffffffffda RBX: 00007f5a28625fa0 RCX: 00007f5a2839e159 [ 1521.890807][T23074] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 1521.890819][T23074] RBP: 00007f5a29269090 R08: 0000000000000000 R09: 0000000000000000 [ 1521.890830][T23074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.890841][T23074] R13: 00007f5a28626038 R14: 00007f5a28625fa0 R15: 00007ffd82589f78 [ 1521.890871][T23074] [ 1522.541829][T23105] netlink: 'syz.8.15529': attribute type 4 has an invalid length. [ 1522.682938][T23201] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1522.685027][T23106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.837279][T23106] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1522.849964][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.850073][ T7784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.855723][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.855823][ T7784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.885999][T23197] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1522.931195][ T30] bridge0: port 3(vlan2) entered blocking state [ 1522.932331][ T30] bridge0: port 3(vlan2) entered forwarding state [ 1523.050720][T23111] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1523.158932][T23119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1523.189714][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15534'. [ 1523.189736][T23119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15534'. [ 1523.262145][T23119] bond1: (slave bond0): making interface the new active one [ 1523.267083][T23119] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1523.558719][T23139] sit0: entered promiscuous mode [ 1523.586400][T23139] netlink: 1 bytes leftover after parsing attributes in process `syz.7.15539'. [ 1523.743672][T23151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15546'. [ 1523.744324][T23147] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15544'. [ 1524.086685][T23147] syzkaller0: entered promiscuous mode [ 1524.086727][T23147] syzkaller0: entered allmulticast mode [ 1524.190532][T23201] net_ratelimit: 4 callbacks suppressed [ 1524.190563][T23201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.268083][T23174] netlink: 88 bytes leftover after parsing attributes in process `syz.5.15556'. [ 1524.268105][T23174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15556'. [ 1524.518412][T23183] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15558'. [ 1524.624828][T23186] FAULT_INJECTION: forcing a failure. [ 1524.624828][T23186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1524.624894][T23186] CPU: 1 UID: 0 PID: 23186 Comm: syz.4.15558 Not tainted syzkaller #0 PREEMPT(full) [ 1524.624919][T23186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1524.624932][T23186] Call Trace: [ 1524.624940][T23186] [ 1524.624949][T23186] dump_stack_lvl+0xe8/0x150 [ 1524.624982][T23186] should_fail_ex+0x410/0x560 [ 1524.625011][T23186] _copy_from_user+0x2d/0xb0 [ 1524.625037][T23186] ___sys_sendmsg+0x1c6/0x360 [ 1524.625063][T23186] ? __lock_acquire+0x747/0x2de0 [ 1524.625089][T23186] ? __pfx____sys_sendmsg+0x10/0x10 [ 1524.625152][T23186] ? __fget_files+0x2a/0x420 [ 1524.625177][T23186] ? __fget_files+0x3a2/0x420 [ 1524.625213][T23186] __x64_sys_sendmsg+0x1b1/0x290 [ 1524.625244][T23186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1524.625291][T23186] do_syscall_64+0x166/0x520 [ 1524.625315][T23186] ? trace_irq_disable+0x3b/0x140 [ 1524.625334][T23186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.625354][T23186] ? clear_bhb_loop+0x70/0xc0 [ 1524.625378][T23186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.625398][T23186] RIP: 0033:0x7fdbbb39e159 [ 1524.625417][T23186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.625433][T23186] RSP: 002b:00007fdbb95d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1524.625455][T23186] RAX: ffffffffffffffda RBX: 00007fdbbb626270 RCX: 00007fdbbb39e159 [ 1524.625469][T23186] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 1524.625483][T23186] RBP: 00007fdbb95d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.625496][T23186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.625508][T23186] R13: 00007fdbbb626308 R14: 00007fdbbb626270 R15: 00007ffc748cbcc8 [ 1524.625542][T23186] [ 1524.751927][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.247554][T23201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.806117][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.270708][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.319329][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.349608][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.694988][ T7784] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1528.831399][ T8017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.844287][T23167] dummy0 speed is unknown, defaulting to 1000 [ 1529.171632][T23216] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1529.173513][T23217] __nla_validate_parse: 2 callbacks suppressed [ 1529.173530][T23217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15570'. [ 1529.289797][T23223] ip_tables: iptables: counters copy to user failed while replacing table [ 1529.291097][T23223] netlink: 'syz.5.15573': attribute type 4 has an invalid length. [ 1529.393994][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.579108][T23228] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15574'. [ 1529.931628][T23234] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15575'. [ 1529.963519][ T7782] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1529.963981][ T7782] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1530.259002][T23201] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1530.439786][T23201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.470484][T23263] ip_tables: iptables: counters copy to user failed while replacing table [ 1530.475373][T23263] netlink: 'syz.6.15586': attribute type 4 has an invalid length. [ 1530.698251][T23275] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15591'. [ 1530.883885][T23282] netlink: 1224 bytes leftover after parsing attributes in process `syz.5.15592'. [ 1530.978263][T23288] ip_tables: iptables: counters copy to user failed while replacing table [ 1530.995784][T23288] netlink: 'syz.5.15596': attribute type 4 has an invalid length. [ 1530.998276][T23286] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1530.998308][T23286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1531.024818][T23285] FAULT_INJECTION: forcing a failure. [ 1531.024818][T23285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.024876][T23285] CPU: 1 UID: 0 PID: 23285 Comm: syz.6.15594 Not tainted syzkaller #0 PREEMPT(full) [ 1531.024899][T23285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.024910][T23285] Call Trace: [ 1531.024918][T23285] [ 1531.024926][T23285] dump_stack_lvl+0xe8/0x150 [ 1531.024957][T23285] should_fail_ex+0x410/0x560 [ 1531.024984][T23285] _copy_from_iter+0x1d3/0x1660 [ 1531.025014][T23285] ? __lock_acquire+0x747/0x2de0 [ 1531.025034][T23285] ? __pfx__copy_from_iter+0x10/0x10 [ 1531.025071][T23285] tun_get_user+0x26b/0x44d0 [ 1531.025102][T23285] ? aa_file_perm+0x18b/0x15f0 [ 1531.025129][T23285] ? aa_file_perm+0x4ed/0x15f0 [ 1531.025151][T23285] ? __pfx_tun_get_user+0x10/0x10 [ 1531.025173][T23285] ? __lock_acquire+0x747/0x2de0 [ 1531.025193][T23285] ? kstrtoull+0x137/0x1d0 [ 1531.025228][T23285] ? ref_tracker_alloc+0x341/0x4b0 [ 1531.025250][T23285] ? lock_acquire+0x115/0x350 [ 1531.025268][T23285] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1531.025293][T23285] ? lock_acquire+0x115/0x350 [ 1531.025312][T23285] ? tun_get+0x1c/0x2f0 [ 1531.025336][T23285] ? tun_get+0x1c/0x2f0 [ 1531.025355][T23285] ? tun_get+0x1c/0x2f0 [ 1531.025378][T23285] tun_chr_write_iter+0x113/0x200 [ 1531.025401][T23285] vfs_write+0x612/0xba0 [ 1531.025436][T23285] ? __pfx_vfs_write+0x10/0x10 [ 1531.025473][T23285] ? __fget_files+0x2a/0x420 [ 1531.025507][T23285] ksys_write+0x150/0x270 [ 1531.025535][T23285] ? __pfx_ksys_write+0x10/0x10 [ 1531.025573][T23285] do_syscall_64+0x166/0x520 [ 1531.025596][T23285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.025615][T23285] ? clear_bhb_loop+0x70/0xc0 [ 1531.025634][T23285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.025650][T23285] RIP: 0033:0x7fbb7079e159 [ 1531.025668][T23285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.025683][T23285] RSP: 002b:00007fbb7164e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1531.025703][T23285] RAX: ffffffffffffffda RBX: 00007fbb70a25fa0 RCX: 00007fbb7079e159 [ 1531.025716][T23285] RDX: 000000000000004a RSI: 0000200000000140 RDI: 0000000000000003 [ 1531.025729][T23285] RBP: 00007fbb7164e090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.025740][T23285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.025751][T23285] R13: 00007fbb70a26038 R14: 00007fbb70a25fa0 R15: 00007fff03c4edd8 [ 1531.025783][T23285] [ 1531.421962][T23295] netlink: 3596 bytes leftover after parsing attributes in process `syz.8.15597'. [ 1531.471022][T23201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.736788][T23305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1531.868783][ T8017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.893614][T23315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15605'. [ 1531.974998][T23319] FAULT_INJECTION: forcing a failure. [ 1531.974998][T23319] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.975021][T23319] CPU: 1 UID: 0 PID: 23319 Comm: syz.6.15607 Not tainted syzkaller #0 PREEMPT(full) [ 1531.975036][T23319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.975047][T23319] Call Trace: [ 1531.975054][T23319] [ 1531.975062][T23319] dump_stack_lvl+0xe8/0x150 [ 1531.975093][T23319] should_fail_ex+0x410/0x560 [ 1531.975119][T23319] should_failslab+0xa8/0x100 [ 1531.975135][T23319] __kmalloc_noprof+0xfe/0x720 [ 1531.975146][T23319] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1531.975160][T23319] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1531.975177][T23319] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1531.975194][T23319] genl_family_rcv_msg_doit+0xda/0x340 [ 1531.975210][T23319] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1531.975232][T23319] ? apparmor_capable+0x126/0x170 [ 1531.975250][T23319] ? bpf_lsm_capable+0x9/0x20 [ 1531.975260][T23319] ? security_capable+0x7e/0x2c0 [ 1531.975276][T23319] genl_rcv_msg+0x614/0x7a0 [ 1531.975292][T23319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1531.975304][T23319] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1531.975319][T23319] ? __pfx_nl80211_authenticate+0x10/0x10 [ 1531.975330][T23319] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1531.975351][T23319] netlink_rcv_skb+0x226/0x4a0 [ 1531.975367][T23319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1531.975380][T23319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1531.975403][T23319] ? down_read+0x2be/0x330 [ 1531.975419][T23319] genl_rcv+0x28/0x40 [ 1531.975430][T23319] netlink_unicast+0x7bd/0x940 [ 1531.975450][T23319] netlink_sendmsg+0x813/0xb40 [ 1531.975465][T23319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1531.975479][T23319] ? apparmor_socket_sendmsg+0x98/0x360 [ 1531.975492][T23319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1531.975501][T23319] sock_sendmsg_nosec+0x14e/0x190 [ 1531.975513][T23319] ____sys_sendmsg+0x54e/0x850 [ 1531.975530][T23319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1531.975555][T23319] ? import_iovec+0x73/0xa0 [ 1531.975570][T23319] ___sys_sendmsg+0x2a5/0x360 [ 1531.975583][T23319] ? __lock_acquire+0x747/0x2de0 [ 1531.975596][T23319] ? __pfx____sys_sendmsg+0x10/0x10 [ 1531.975629][T23319] ? __fget_files+0x2a/0x420 [ 1531.975643][T23319] ? __fget_files+0x3a2/0x420 [ 1531.975661][T23319] __x64_sys_sendmsg+0x1b1/0x290 [ 1531.975676][T23319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1531.975701][T23319] do_syscall_64+0x166/0x520 [ 1531.975714][T23319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.975725][T23319] ? clear_bhb_loop+0x70/0xc0 [ 1531.975738][T23319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.975748][T23319] RIP: 0033:0x7fbb7079e159 [ 1531.975758][T23319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.975767][T23319] RSP: 002b:00007fbb7164e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1531.975784][T23319] RAX: ffffffffffffffda RBX: 00007fbb70a25fa0 RCX: 00007fbb7079e159 [ 1531.975796][T23319] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1531.975807][T23319] RBP: 00007fbb7164e090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.975819][T23319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.975829][T23319] R13: 00007fbb70a26038 R14: 00007fbb70a25fa0 R15: 00007fff03c4edd8 [ 1531.975858][T23319] [ 1532.038251][T23321] netlink: 'syz.7.15608': attribute type 4 has an invalid length. [ 1532.038316][T23321] netlink: 17 bytes leftover after parsing attributes in process `syz.7.15608'. [ 1532.365808][ T7782] IPVS: starting estimator thread 0... [ 1532.440337][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15611'. [ 1532.459130][T23326] IPVS: using max 36 ests per chain, 86400 per kthread [ 1532.494582][T23332] netlink: 1012 bytes leftover after parsing attributes in process `syz.8.15611'. [ 1532.874613][T23344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1532.961222][T23350] xt_CONNSECMARK: invalid mode: 254 [ 1533.060499][T23344] team0: Port device bond0 removed [ 1533.081362][T23344] bond1: (slave bond0): making interface the new active one [ 1533.082753][T23344] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1533.176106][T23342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1533.286757][T23342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1534.351620][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1534.352381][ T8017] net_ratelimit: 2 callbacks suppressed [ 1534.352397][ T8017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.547144][T23408] __nla_validate_parse: 7 callbacks suppressed [ 1534.547190][T23408] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15642'. [ 1534.555201][T23409] veth0: entered promiscuous mode [ 1534.566118][T23409] ªªªªªª: renamed from vlan0 (while UP) [ 1534.590504][T23201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.747892][T23422] tipc: Resetting bearer [ 1534.768273][T23422] bridge0: port 3(vlan2) entered disabled state [ 1534.768530][T23422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.769204][T23422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.805307][T23424] netlink: 'syz.4.15643': attribute type 4 has an invalid length. [ 1534.805371][T23424] netlink: 17 bytes leftover after parsing attributes in process `syz.4.15643'. [ 1534.886568][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15641'. [ 1534.911103][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.942327][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15641'. [ 1535.244967][T23409] veth0: left promiscuous mode [ 1535.361459][T23425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1535.455341][T23446] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15651'. [ 1535.500537][T23431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1535.517922][T23448] netlink: 'syz.4.15652': attribute type 4 has an invalid length. [ 1535.544375][T23450] netlink: 'syz.4.15652': attribute type 4 has an invalid length. [ 1535.639893][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.800260][T23462] netlink: 40 bytes leftover after parsing attributes in process `syz.8.15654'. [ 1535.933393][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15660'. [ 1536.013296][T23476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1536.173512][T23483] FAULT_INJECTION: forcing a failure. [ 1536.173512][T23483] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.173544][T23483] CPU: 0 UID: 0 PID: 23483 Comm: syz.5.15663 Not tainted syzkaller #0 PREEMPT(full) [ 1536.173565][T23483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1536.173577][T23483] Call Trace: [ 1536.173585][T23483] [ 1536.173594][T23483] dump_stack_lvl+0xe8/0x150 [ 1536.173635][T23483] should_fail_ex+0x410/0x560 [ 1536.173663][T23483] should_failslab+0xa8/0x100 [ 1536.173690][T23483] __kmalloc_cache_noprof+0xa3/0x600 [ 1536.173711][T23483] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1536.173740][T23483] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1536.173776][T23483] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1536.173805][T23483] ? sctp_stream_interleave_init+0x55/0x90 [ 1536.173838][T23483] sctp_association_new+0x15be/0x25d0 [ 1536.173874][T23483] sctp_connect_new_asoc+0x2e4/0x6b0 [ 1536.173901][T23483] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1536.173931][T23483] ? __local_bh_enable_ip+0xd6/0x140 [ 1536.173954][T23483] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1536.173980][T23483] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1536.174004][T23483] sctp_sendmsg+0x159b/0x2d00 [ 1536.174037][T23483] ? kstrtouint+0x6e/0xe0 [ 1536.174058][T23483] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1536.174079][T23483] ? lock_acquire+0x115/0x350 [ 1536.174099][T23483] ? get_pid_task+0x20/0x1f0 [ 1536.174135][T23483] ? aa_sock_msg_perm+0xf5/0x210 [ 1536.174158][T23483] ? sock_rps_record_flow+0x19/0x350 [ 1536.174181][T23483] ? inet_sendmsg+0x298/0x320 [ 1536.174202][T23483] ? __pfx_inet_sendmsg+0x10/0x10 [ 1536.174221][T23483] sock_sendmsg_nosec+0x10f/0x190 [ 1536.174245][T23483] __sys_sendto+0x408/0x5a0 [ 1536.174267][T23483] ? ksys_write+0x1e6/0x270 [ 1536.174299][T23483] ? __pfx___sys_sendto+0x10/0x10 [ 1536.174319][T23483] ? __mutex_unlock_slowpath+0x731/0x900 [ 1536.174374][T23483] ? __pfx_ksys_write+0x10/0x10 [ 1536.174407][T23483] __x64_sys_sendto+0xde/0x100 [ 1536.174434][T23483] do_syscall_64+0x166/0x520 [ 1536.174457][T23483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.174477][T23483] ? clear_bhb_loop+0x70/0xc0 [ 1536.174500][T23483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.174520][T23483] RIP: 0033:0x7f5a2839e159 [ 1536.174538][T23483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.174553][T23483] RSP: 002b:00007f5a29269028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1536.174573][T23483] RAX: ffffffffffffffda RBX: 00007f5a28625fa0 RCX: 00007f5a2839e159 [ 1536.174587][T23483] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1536.174599][T23483] RBP: 00007f5a29269090 R08: 0000200000000100 R09: 000000000000001c [ 1536.174618][T23483] R10: 000000000400c011 R11: 0000000000000246 R12: 0000000000000001 [ 1536.174630][T23483] R13: 00007f5a28626038 R14: 00007f5a28625fa0 R15: 00007ffd82589f78 [ 1536.174661][T23483] [ 1536.586006][T23492] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15667'. [ 1536.596616][T23492] FAULT_INJECTION: forcing a failure. [ 1536.596616][T23492] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.596684][T23492] CPU: 1 UID: 0 PID: 23492 Comm: syz.5.15667 Not tainted syzkaller #0 PREEMPT(full) [ 1536.596706][T23492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1536.596718][T23492] Call Trace: [ 1536.596726][T23492] [ 1536.596734][T23492] dump_stack_lvl+0xe8/0x150 [ 1536.596766][T23492] should_fail_ex+0x410/0x560 [ 1536.596799][T23492] ? __alloc_skb+0x1db/0x7a0 [ 1536.596820][T23492] should_failslab+0xa8/0x100 [ 1536.596844][T23492] ? __alloc_skb+0x1db/0x7a0 [ 1536.596863][T23492] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1536.596891][T23492] ? __alloc_skb+0x18d/0x7a0 [ 1536.596912][T23492] ? __alloc_skb+0x1db/0x7a0 [ 1536.596939][T23492] __alloc_skb+0x1db/0x7a0 [ 1536.596964][T23492] netlink_sendmsg+0x5d4/0xb40 [ 1536.596992][T23492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.597017][T23492] ? apparmor_socket_sendmsg+0x98/0x360 [ 1536.597041][T23492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.597058][T23492] sock_sendmsg_nosec+0x14e/0x190 [ 1536.597080][T23492] ____sys_sendmsg+0x54e/0x850 [ 1536.597110][T23492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1536.597142][T23492] ? import_iovec+0x73/0xa0 [ 1536.597168][T23492] ___sys_sendmsg+0x2a5/0x360 [ 1536.597191][T23492] ? __lock_acquire+0x747/0x2de0 [ 1536.597214][T23492] ? __pfx____sys_sendmsg+0x10/0x10 [ 1536.597273][T23492] ? __fget_files+0x2a/0x420 [ 1536.597297][T23492] ? __fget_files+0x3a2/0x420 [ 1536.597330][T23492] __x64_sys_sendmsg+0x1b1/0x290 [ 1536.597358][T23492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1536.597403][T23492] do_syscall_64+0x166/0x520 [ 1536.597426][T23492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.597445][T23492] ? clear_bhb_loop+0x70/0xc0 [ 1536.597468][T23492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.597486][T23492] RIP: 0033:0x7f5a2839e159 [ 1536.597503][T23492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.597518][T23492] RSP: 002b:00007f5a29269028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.597538][T23492] RAX: ffffffffffffffda RBX: 00007f5a28625fa0 RCX: 00007f5a2839e159 [ 1536.597552][T23492] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 1536.597564][T23492] RBP: 00007f5a29269090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.597576][T23492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.597587][T23492] R13: 00007f5a28626038 R14: 00007f5a28625fa0 R15: 00007ffd82589f78 [ 1536.597616][T23492] [ 1536.683652][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.120842][T23501] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15671'. [ 1537.221904][T23501] tipc: Resetting bearer [ 1537.259972][ T8016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1537.302403][ T7785] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1537.302888][ T7785] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1537.310917][T23509] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15672'. [ 1537.412197][T23505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1537.500609][T23512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1537.555122][T23517] netlink: 'syz.5.15675': attribute type 1 has an invalid length. [ 1537.569797][ T8016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1537.674820][T23521] FAULT_INJECTION: forcing a failure. [ 1537.674820][T23521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1537.674853][T23521] CPU: 0 UID: 0 PID: 23521 Comm: syz.5.15677 Not tainted syzkaller #0 PREEMPT(full) [ 1537.674874][T23521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1537.674886][T23521] Call Trace: [ 1537.674894][T23521] [ 1537.674902][T23521] dump_stack_lvl+0xe8/0x150 [ 1537.674934][T23521] should_fail_ex+0x410/0x560 [ 1537.674962][T23521] _copy_from_user+0x2d/0xb0 [ 1537.674988][T23521] __sys_bpf+0x2e7/0xd90 [ 1537.675019][T23521] ? __pfx___sys_bpf+0x10/0x10 [ 1537.675050][T23521] ? __fget_files+0x2a/0x420 [ 1537.675093][T23521] ? ksys_write+0x242/0x270 [ 1537.675124][T23521] ? __pfx_ksys_write+0x10/0x10 [ 1537.675157][T23521] __x64_sys_bpf+0xba/0xd0 [ 1537.675180][T23521] do_syscall_64+0x166/0x520 [ 1537.675203][T23521] ? trace_irq_disable+0x3b/0x140 [ 1537.675222][T23521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.675241][T23521] ? clear_bhb_loop+0x70/0xc0 [ 1537.675265][T23521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.675284][T23521] RIP: 0033:0x7f5a2839e159 [ 1537.675302][T23521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.675318][T23521] RSP: 002b:00007f5a29269028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1537.675338][T23521] RAX: ffffffffffffffda RBX: 00007f5a28625fa0 RCX: 00007f5a2839e159 [ 1537.675352][T23521] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1537.675365][T23521] RBP: 00007f5a29269090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.675376][T23521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1537.675388][T23521] R13: 00007f5a28626038 R14: 00007f5a28625fa0 R15: 00007ffd82589f78 [ 1537.675419][T23521] [ 1537.712277][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.839505][ T30] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1537.955630][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.176436][T23527] dummy0 speed is unknown, defaulting to 1000 [ 1538.502532][T23543] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1538.603942][T23549] ip_tables: iptables: counters copy to user failed while replacing table [ 1538.606335][T23549] netlink: 'syz.8.15690': attribute type 4 has an invalid length. [ 1538.756004][T23201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.834786][T23561] netlink: 'syz.8.15693': attribute type 3 has an invalid length. [ 1538.921038][T23545] syzkaller0: entered promiscuous mode [ 1538.921062][T23545] syzkaller0: entered allmulticast mode [ 1539.801985][T23201] net_ratelimit: 1 callbacks suppressed [ 1539.802010][T23201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.831620][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.990239][ T8017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.232303][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1541.881343][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.916043][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.951069][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.956243][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.030408][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.394769][T23610] __nla_validate_parse: 4 callbacks suppressed [ 1544.394817][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15715'. [ 1544.638385][T23625] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1544.652822][T23626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15719'. [ 1544.656739][T23626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.706651][T23629] netlink: 1012 bytes leftover after parsing attributes in process `syz.4.15719'. [ 1544.859884][T23626] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15719'. [ 1544.863182][T23626] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15719'. [ 1544.989674][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.244326][T23657] FAULT_INJECTION: forcing a failure. [ 1545.244326][T23657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1545.244389][T23657] CPU: 1 UID: 0 PID: 23657 Comm: syz.4.15727 Not tainted syzkaller #0 PREEMPT(full) [ 1545.244413][T23657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1545.244424][T23657] Call Trace: [ 1545.244432][T23657] [ 1545.244441][T23657] dump_stack_lvl+0xe8/0x150 [ 1545.244473][T23657] should_fail_ex+0x410/0x560 [ 1545.244501][T23657] _copy_to_user+0x31/0xb0 [ 1545.244527][T23657] simple_read_from_buffer+0xe1/0x170 [ 1545.244559][T23657] proc_fail_nth_read+0x1bb/0x230 [ 1545.244582][T23657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1545.244604][T23657] ? rw_verify_area+0x24a/0x4c0 [ 1545.244632][T23657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1545.244649][T23657] vfs_read+0x213/0xa80 [ 1545.244687][T23657] ? __pfx___mutex_lock+0x10/0x10 [ 1545.244713][T23657] ? __pfx_vfs_read+0x10/0x10 [ 1545.244741][T23657] ? __fget_files+0x2a/0x420 [ 1545.244771][T23657] ? __fget_files+0x3a2/0x420 [ 1545.244794][T23657] ? __fget_files+0x2a/0x420 [ 1545.244827][T23657] ksys_read+0x150/0x270 [ 1545.244855][T23657] ? __pfx_ksys_read+0x10/0x10 [ 1545.244893][T23657] do_syscall_64+0x166/0x520 [ 1545.244915][T23657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.244934][T23657] ? clear_bhb_loop+0x70/0xc0 [ 1545.244958][T23657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.244976][T23657] RIP: 0033:0x7fdbbb35e98e [ 1545.244992][T23657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1545.245007][T23657] RSP: 002b:00007fdbbc1bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1545.245027][T23657] RAX: ffffffffffffffda RBX: 00007fdbbc1bc6c0 RCX: 00007fdbbb35e98e [ 1545.245039][T23657] RDX: 000000000000000f RSI: 00007fdbbc1bc0a0 RDI: 0000000000000004 [ 1545.245051][T23657] RBP: 00007fdbbc1bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.245063][T23657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.245073][T23657] R13: 00007fdbbb626038 R14: 00007fdbbb625fa0 R15: 00007ffc748cbcc8 [ 1545.245105][T23657] [ 1545.973045][T23681] FAULT_INJECTION: forcing a failure. [ 1545.973045][T23681] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.973115][T23681] CPU: 1 UID: 0 PID: 23681 Comm: syz.7.15738 Not tainted syzkaller #0 PREEMPT(full) [ 1545.973139][T23681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1545.973149][T23681] Call Trace: [ 1545.973157][T23681] [ 1545.973165][T23681] dump_stack_lvl+0xe8/0x150 [ 1545.973196][T23681] should_fail_ex+0x410/0x560 [ 1545.973222][T23681] ? __alloc_skb+0x1db/0x7a0 [ 1545.973243][T23681] should_failslab+0xa8/0x100 [ 1545.973267][T23681] ? __alloc_skb+0x1db/0x7a0 [ 1545.973286][T23681] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1545.973314][T23681] ? __alloc_skb+0x18d/0x7a0 [ 1545.973336][T23681] ? __alloc_skb+0x1db/0x7a0 [ 1545.973359][T23681] __alloc_skb+0x1db/0x7a0 [ 1545.973386][T23681] netlink_ack+0x136/0xb30 [ 1545.973412][T23681] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1545.973432][T23681] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1545.973473][T23681] netlink_rcv_skb+0x2a4/0x4a0 [ 1545.973503][T23681] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1545.973527][T23681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1545.973570][T23681] ? down_read+0x2be/0x330 [ 1545.973600][T23681] genl_rcv+0x28/0x40 [ 1545.973619][T23681] netlink_unicast+0x7bd/0x940 [ 1545.973657][T23681] netlink_sendmsg+0x813/0xb40 [ 1545.973685][T23681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1545.973712][T23681] ? apparmor_socket_sendmsg+0x98/0x360 [ 1545.973734][T23681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1545.973750][T23681] sock_sendmsg_nosec+0x14e/0x190 [ 1545.973774][T23681] ____sys_sendmsg+0x54e/0x850 [ 1545.973804][T23681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1545.973838][T23681] ? import_iovec+0x73/0xa0 [ 1545.973867][T23681] ___sys_sendmsg+0x2a5/0x360 [ 1545.973889][T23681] ? __lock_acquire+0x747/0x2de0 [ 1545.973913][T23681] ? __pfx____sys_sendmsg+0x10/0x10 [ 1545.973973][T23681] ? __fget_files+0x2a/0x420 [ 1545.973998][T23681] ? __fget_files+0x3a2/0x420 [ 1545.974031][T23681] __x64_sys_sendmsg+0x1b1/0x290 [ 1545.974055][T23681] ? net_tx_action+0x5bb/0xc30 [ 1545.974077][T23681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1545.974120][T23681] ? handle_softirqs+0x720/0x860 [ 1545.974156][T23681] do_syscall_64+0x166/0x520 [ 1545.974179][T23681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.974199][T23681] ? clear_bhb_loop+0x70/0xc0 [ 1545.974222][T23681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.974240][T23681] RIP: 0033:0x7fe26219e159 [ 1545.974257][T23681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.974273][T23681] RSP: 002b:00007fe263053028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1545.974293][T23681] RAX: ffffffffffffffda RBX: 00007fe262425fa0 RCX: 00007fe26219e159 [ 1545.974308][T23681] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1545.974319][T23681] RBP: 00007fe263053090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.974330][T23681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.974341][T23681] R13: 00007fe262426038 R14: 00007fe262425fa0 R15: 00007ffea4878588 [ 1545.974371][T23681] [ 1546.029838][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.320566][T23686] ip_tables: iptables: counters copy to user failed while replacing table [ 1546.634188][T23699] netlink: 'syz.7.15742': attribute type 4 has an invalid length. [ 1546.634228][T23699] netlink: 17 bytes leftover after parsing attributes in process `syz.7.15742'. [ 1546.636326][T23699] FAULT_INJECTION: forcing a failure. [ 1546.636326][T23699] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.636383][T23699] CPU: 1 UID: 0 PID: 23699 Comm: syz.7.15742 Not tainted syzkaller #0 PREEMPT(full) [ 1546.636406][T23699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1546.636417][T23699] Call Trace: [ 1546.636425][T23699] [ 1546.636435][T23699] dump_stack_lvl+0xe8/0x150 [ 1546.636465][T23699] should_fail_ex+0x410/0x560 [ 1546.636491][T23699] ? __alloc_skb+0x1db/0x7a0 [ 1546.636514][T23699] should_failslab+0xa8/0x100 [ 1546.636538][T23699] ? __alloc_skb+0x1db/0x7a0 [ 1546.636557][T23699] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1546.636585][T23699] ? __alloc_skb+0x18d/0x7a0 [ 1546.636607][T23699] ? __alloc_skb+0x1db/0x7a0 [ 1546.636636][T23699] __alloc_skb+0x1db/0x7a0 [ 1546.636669][T23699] netlink_ack+0x136/0xb30 [ 1546.636695][T23699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1546.636722][T23699] ? __copy_skb_header+0xa3/0x4a0 [ 1546.636758][T23699] netlink_rcv_skb+0x2a4/0x4a0 [ 1546.636787][T23699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1546.636812][T23699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1546.636854][T23699] ? netlink_deliver_tap+0x2e/0x1b0 [ 1546.636881][T23699] ? netlink_deliver_tap+0x2e/0x1b0 [ 1546.636915][T23699] netlink_unicast+0x7bd/0x940 [ 1546.636952][T23699] netlink_sendmsg+0x813/0xb40 [ 1546.636981][T23699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1546.637008][T23699] ? apparmor_socket_sendmsg+0x98/0x360 [ 1546.637028][T23699] ? lock_acquire+0x115/0x350 [ 1546.637049][T23699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1546.637067][T23699] sock_sendmsg_nosec+0x14e/0x190 [ 1546.637090][T23699] sock_write_iter+0x2de/0x3e0 [ 1546.637120][T23699] ? __pfx_sock_write_iter+0x10/0x10 [ 1546.637156][T23699] ? bpf_lsm_file_permission+0x9/0x20 [ 1546.637180][T23699] ? security_file_permission+0x75/0x260 [ 1546.637207][T23699] vfs_write+0x612/0xba0 [ 1546.637245][T23699] ? __pfx_vfs_write+0x10/0x10 [ 1546.637283][T23699] ? __fget_files+0x2a/0x420 [ 1546.637317][T23699] ksys_write+0x150/0x270 [ 1546.637347][T23699] ? __pfx_ksys_write+0x10/0x10 [ 1546.637387][T23699] do_syscall_64+0x166/0x520 [ 1546.637410][T23699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.637430][T23699] ? clear_bhb_loop+0x70/0xc0 [ 1546.637454][T23699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.637501][T23699] RIP: 0033:0x7fe26219e159 [ 1546.637518][T23699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.637533][T23699] RSP: 002b:00007fe263053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1546.637552][T23699] RAX: ffffffffffffffda RBX: 00007fe262425fa0 RCX: 00007fe26219e159 [ 1546.637566][T23699] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 1546.637578][T23699] RBP: 00007fe263053090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.637590][T23699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.637601][T23699] R13: 00007fe262426038 R14: 00007fe262425fa0 R15: 00007ffea4878588 [ 1546.637633][T23699] [ 1546.985886][T23703] netlink: 'syz.6.15741': attribute type 4 has an invalid length. [ 1546.985909][T23703] netlink: 17 bytes leftover after parsing attributes in process `syz.6.15741'. [ 1547.068901][ T8017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.072433][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.077131][ T7784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.084404][T23200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.087506][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.400425][T23722] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15744'. [ 1547.401065][T23723] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15744'. [ 1547.404095][T23721] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15744'. [ 1547.610960][T23715] bond4: entered allmulticast mode [ 1547.618169][T23715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1547.781541][T23718] bond5: entered allmulticast mode [ 1547.803111][T23718] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1548.114784][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.251031][T23749] netlink: 'syz.7.15761': attribute type 4 has an invalid length. [ 1548.432918][T23756] bond2: option mode: unable to set because the bond device has slaves [ 1548.506880][T23760] netlink: 'syz.6.15764': attribute type 4 has an invalid length. [ 1548.507925][T23760] netlink: 'syz.6.15764': attribute type 4 has an invalid length. [ 1548.631762][ T7785] bond2: (slave bond0): link status definitely down, disabling slave [ 1548.691751][ T7785] bond2: now running without any active interface! [ 1549.124082][T23784] dummy0 speed is unknown, defaulting to 1000 [ 1549.154816][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.524029][T23792] syzkaller0: entered promiscuous mode [ 1549.524055][T23792] syzkaller0: entered allmulticast mode [ 1549.545171][T23803] __nla_validate_parse: 6 callbacks suppressed [ 1549.545217][T23803] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.15779'. [ 1549.778458][T23807] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15782'. [ 1550.108978][ T8013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.199135][T23200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.234680][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.275278][ T7783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.275698][T23200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.345421][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.364669][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.168301][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.240023][ T7782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.315619][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.869066][T23807] ipvlan2: entered allmulticast mode [ 1553.869088][T23807] syz_tun: entered allmulticast mode [ 1554.414011][T23832] syzkaller0: renamed from gre1 [ 1554.908898][T23857] netlink: 'syz.5.15799': attribute type 4 has an invalid length. [ 1554.908921][T23857] netlink: 17 bytes leftover after parsing attributes in process `syz.5.15799'. [ 1555.148132][T23868] FAULT_INJECTION: forcing a failure. [ 1555.148132][T23868] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.148199][T23868] CPU: 1 UID: 0 PID: 23868 Comm: syz.6.15803 Not tainted syzkaller #0 PREEMPT(full) [ 1555.148226][T23868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1555.148238][T23868] Call Trace: [ 1555.148247][T23868] [ 1555.148255][T23868] dump_stack_lvl+0xe8/0x150 [ 1555.148287][T23868] should_fail_ex+0x410/0x560 [ 1555.148314][T23868] should_failslab+0xa8/0x100 [ 1555.148339][T23868] __kmalloc_cache_noprof+0xa3/0x600 [ 1555.148357][T23868] ? lock_acquire+0x115/0x350 [ 1555.148376][T23868] ? sctp_add_bind_addr+0x8c/0x370 [ 1555.148401][T23868] ? sctp_add_bind_addr+0x8c/0x370 [ 1555.148432][T23868] sctp_add_bind_addr+0x8c/0x370 [ 1555.148462][T23868] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1555.148492][T23868] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1555.148521][T23868] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1555.148551][T23868] ? sctp_v6_is_any+0x64/0x80 [ 1555.148572][T23868] ? sctp_copy_one_addr+0x93/0x360 [ 1555.148603][T23868] sctp_bind_addr_copy+0xb3/0x3c0 [ 1555.148633][T23868] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1555.148671][T23868] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1555.148698][T23868] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1555.148729][T23868] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1555.148754][T23868] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1555.148777][T23868] sctp_sendmsg+0x159b/0x2d00 [ 1555.148810][T23868] ? kstrtouint+0x6e/0xe0 [ 1555.148830][T23868] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1555.148851][T23868] ? lock_acquire+0x115/0x350 [ 1555.148891][T23868] ? aa_sock_msg_perm+0xf5/0x210 [ 1555.148914][T23868] ? sock_rps_record_flow+0x19/0x350 [ 1555.148938][T23868] ? inet_sendmsg+0x298/0x320 [ 1555.148960][T23868] ? __pfx_inet_sendmsg+0x10/0x10 [ 1555.148979][T23868] sock_sendmsg_nosec+0x10f/0x190 [ 1555.149002][T23868] __sys_sendto+0x408/0x5a0 [ 1555.149025][T23868] ? ksys_write+0x1e6/0x270 [ 1555.149057][T23868] ? __pfx___sys_sendto+0x10/0x10 [ 1555.149076][T23868] ? __mutex_unlock_slowpath+0x731/0x900 [ 1555.149131][T23868] ? __pfx_ksys_write+0x10/0x10 [ 1555.149164][T23868] __x64_sys_sendto+0xde/0x100 [ 1555.149185][T23868] do_syscall_64+0x166/0x520 [ 1555.149208][T23868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.149228][T23868] ? clear_bhb_loop+0x70/0xc0 [ 1555.149252][T23868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.149271][T23868] RIP: 0033:0x7fbb7079e159 [ 1555.149289][T23868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.149305][T23868] RSP: 002b:00007fbb7164e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1555.149326][T23868] RAX: ffffffffffffffda RBX: 00007fbb70a25fa0 RCX: 00007fbb7079e159 [ 1555.149340][T23868] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1555.149352][T23868] RBP: 00007fbb7164e090 R08: 0000200000000100 R09: 000000000000001c [ 1555.149364][T23868] R10: 000000000400c011 R11: 0000000000000246 R12: 0000000000000001 [ 1555.149377][T23868] R13: 00007fbb70a26038 R14: 00007fbb70a25fa0 R15: 00007fff03c4edd8 [ 1555.149408][T23868] [ 1555.213364][T23872] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15805'. [ 1555.482914][T23200] net_ratelimit: 4 callbacks suppressed [ 1555.482957][T23200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.704133][T23889] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1555.828849][T23893] netlink: 'syz.4.15813': attribute type 4 has an invalid length. [ 1555.828872][T23893] netlink: 17 bytes leftover after parsing attributes in process `syz.4.15813'. [ 1556.026453][T23903] FAULT_INJECTION: forcing a failure. [ 1556.026453][T23903] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.026483][T23903] CPU: 0 UID: 0 PID: 23903 Comm: syz.5.15818 Not tainted syzkaller #0 PREEMPT(full) [ 1556.026504][T23903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1556.026515][T23903] Call Trace: [ 1556.026523][T23903] [ 1556.026540][T23903] dump_stack_lvl+0xe8/0x150 [ 1556.026571][T23903] should_fail_ex+0x410/0x560 [ 1556.026601][T23903] should_failslab+0xa8/0x100 [ 1556.026626][T23903] __kmalloc_noprof+0xfe/0x720 [ 1556.026646][T23903] ? bpf_test_init+0x9f/0x150 [ 1556.026672][T23903] ? bpf_test_init+0x9f/0x150 [ 1556.026703][T23903] bpf_test_init+0x9f/0x150 [ 1556.026735][T23903] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1556.026771][T23903] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1556.026795][T23903] ? __fget_files+0x2a/0x420 [ 1556.026826][T23903] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1556.026847][T23903] bpf_prog_test_run+0x2c5/0x340 [ 1556.026875][T23903] __sys_bpf+0xa22/0xd90 [ 1556.026903][T23903] ? __pfx___sys_bpf+0x10/0x10 [ 1556.026934][T23903] ? __fget_files+0x2a/0x420 [ 1556.026975][T23903] ? ksys_write+0x242/0x270 [ 1556.027005][T23903] ? __pfx_ksys_write+0x10/0x10 [ 1556.027037][T23903] __x64_sys_bpf+0xba/0xd0 [ 1556.027060][T23903] do_syscall_64+0x166/0x520 [ 1556.027083][T23903] ? trace_irq_disable+0x3b/0x140 [ 1556.027101][T23903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.027120][T23903] ? clear_bhb_loop+0x70/0xc0 [ 1556.027144][T23903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.027163][T23903] RIP: 0033:0x7f5a2839e159 [ 1556.027181][T23903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.027197][T23903] RSP: 002b:00007f5a29269028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1556.027218][T23903] RAX: ffffffffffffffda RBX: 00007f5a28625fa0 RCX: 00007f5a2839e159 [ 1556.027232][T23903] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1556.027245][T23903] RBP: 00007f5a29269090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.027257][T23903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.027268][T23903] R13: 00007f5a28626038 R14: 00007f5a28625fa0 R15: 00007ffd82589f78 [ 1556.027299][T23903] [ 1556.373928][ T8016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.509132][T23200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.532846][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15822'. [ 1556.819969][T23925] netlink: 198796 bytes leftover after parsing attributes in process `syz.4.15826'. [ 1556.819993][T23925] netlink: 'syz.4.15826': attribute type 2 has an invalid length. [ 1556.944163][T23933] netlink: 40 bytes leftover after parsing attributes in process `syz.7.15827'. [ 1557.142199][T23938] netlink: 'syz.6.15829': attribute type 4 has an invalid length. [ 1557.142223][T23938] netlink: 17 bytes leftover after parsing attributes in process `syz.6.15829'. [ 1557.535090][T23953] FAULT_INJECTION: forcing a failure. [ 1557.535090][T23953] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.535156][T23953] CPU: 1 UID: 0 PID: 23953 Comm: syz.6.15834 Not tainted syzkaller #0 PREEMPT(full) [ 1557.535178][T23953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1557.535190][T23953] Call Trace: [ 1557.535199][T23953] [ 1557.535207][T23953] dump_stack_lvl+0xe8/0x150 [ 1557.535237][T23953] should_fail_ex+0x410/0x560 [ 1557.535263][T23953] should_failslab+0xa8/0x100 [ 1557.535288][T23953] __kmalloc_noprof+0xfe/0x720 [ 1557.535308][T23953] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1557.535333][T23953] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1557.535362][T23953] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1557.535394][T23953] genl_start+0x180/0x6d0 [ 1557.535424][T23953] __netlink_dump_start+0x442/0x7b0 [ 1557.535459][T23953] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1557.535484][T23953] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1557.535515][T23953] ? __pfx_genl_start+0x10/0x10 [ 1557.535534][T23953] ? __pfx_genl_dumpit+0x10/0x10 [ 1557.535555][T23953] ? __pfx_genl_done+0x10/0x10 [ 1557.535581][T23953] ? bpf_lsm_capable+0x9/0x20 [ 1557.535597][T23953] ? security_capable+0x7e/0x2c0 [ 1557.535625][T23953] genl_rcv_msg+0x5e1/0x7a0 [ 1557.535651][T23953] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1557.535672][T23953] ? __pfx_nl802154_dump_llsec_devkey+0x10/0x10 [ 1557.535715][T23953] netlink_rcv_skb+0x226/0x4a0 [ 1557.535745][T23953] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1557.535770][T23953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1557.535816][T23953] ? down_read+0x2be/0x330 [ 1557.535855][T23953] genl_rcv+0x28/0x40 [ 1557.535877][T23953] netlink_unicast+0x7bd/0x940 [ 1557.535916][T23953] netlink_sendmsg+0x813/0xb40 [ 1557.535945][T23953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.535974][T23953] ? apparmor_socket_sendmsg+0x98/0x360 [ 1557.535999][T23953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.536017][T23953] sock_sendmsg_nosec+0x14e/0x190 [ 1557.536041][T23953] ____sys_sendmsg+0x54e/0x850 [ 1557.536073][T23953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1557.536108][T23953] ? import_iovec+0x73/0xa0 [ 1557.536137][T23953] ___sys_sendmsg+0x2a5/0x360 [ 1557.536161][T23953] ? __lock_acquire+0x747/0x2de0 [ 1557.536187][T23953] ? __pfx____sys_sendmsg+0x10/0x10 [ 1557.536219][T23953] ? irqentry_exit+0x218/0x910 [ 1557.536273][T23953] ? __fget_files+0x2a/0x420 [ 1557.536298][T23953] ? __fget_files+0x3a2/0x420 [ 1557.536352][T23953] __x64_sys_sendmsg+0x1b1/0x290 [ 1557.536382][T23953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1557.536431][T23953] do_syscall_64+0x166/0x520 [ 1557.536456][T23953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.536475][T23953] ? clear_bhb_loop+0x70/0xc0 [ 1557.536500][T23953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.536518][T23953] RIP: 0033:0x7fbb7079e159 [ 1557.536535][T23953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.536551][T23953] RSP: 002b:00007fbb7164e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1557.536572][T23953] RAX: ffffffffffffffda RBX: 00007fbb70a25fa0 RCX: 00007fbb7079e159 [ 1557.536585][T23953] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 1557.536597][T23953] RBP: 00007fbb7164e090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.536608][T23953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.536620][T23953] R13: 00007fbb70a26038 R14: 00007fbb70a25fa0 R15: 00007fff03c4edd8 [ 1557.536654][T23953] [ 1557.554288][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.585782][T23941] syzkaller0: entered promiscuous mode [ 1557.585804][T23941] syzkaller0: entered allmulticast mode [ 1557.823332][T23961] ip_tables: iptables: counters copy to user failed while replacing table [ 1557.834098][T23961] netlink: 'syz.5.15838': attribute type 4 has an invalid length. [ 1558.204171][ T5627] Bluetooth: hci9: command 0x0406 tx timeout [ 1558.204275][ T5627] Bluetooth: hci6: command 0x0406 tx timeout [ 1558.204333][ T5627] Bluetooth: hci8: command 0x0406 tx timeout [ 1558.204394][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 1558.458394][T23981] netlink: 'syz.7.15844': attribute type 1 has an invalid length. [ 1558.589505][T23200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.405822][ T8013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.638922][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.672560][T23200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.712410][T23200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.869289][ T32] INFO: task syz.3.14373:19528 blocked for more than 143 seconds. [ 1561.869349][ T32] Not tainted syzkaller #0 [ 1561.869376][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1561.869386][ T32] task:syz.3.14373 state:D stack:27584 pid:19528 tgid:19527 ppid:10714 task_flags:0x400140 flags:0x00080002 [ 1561.869508][ T32] Call Trace: [ 1561.869515][ T32] [ 1561.869545][ T32] __schedule+0x17db/0x58f0 [ 1561.869648][ T32] ? __pfx___schedule+0x10/0x10 [ 1561.869711][ T32] ? schedule+0x90/0x2b0 [ 1561.869770][ T32] schedule+0x164/0x2b0 [ 1561.869810][ T32] schedule_preempt_disabled+0x13/0x30 [ 1561.869865][ T32] __mutex_lock+0x7c1/0x1550 [ 1561.869908][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1561.869966][ T32] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1561.870007][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1561.870069][ T32] ? rcu_is_watching+0x16/0xb0 [ 1561.870111][ T32] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1561.870163][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1561.870201][ T32] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1561.870261][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1561.870301][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1561.870364][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1561.870432][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1561.870498][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1561.870532][ T32] ? security_capable+0x7e/0x2c0 [ 1561.872139][ T32] genl_rcv_msg+0x614/0x7a0 [ 1561.872208][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1561.872262][ T32] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1561.872338][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1561.872392][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1561.872461][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1561.872556][ T32] ? down_read+0x2be/0x330 [ 1561.872620][ T32] genl_rcv+0x28/0x40 [ 1561.872656][ T32] netlink_unicast+0x7bd/0x940 [ 1561.872723][ T32] netlink_sendmsg+0x813/0xb40 [ 1561.872753][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.872779][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1561.872794][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.872815][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1561.872828][ T32] sock_write_iter+0x2de/0x3e0 [ 1561.872856][ T32] ? __pfx_sock_write_iter+0x10/0x10 [ 1561.872887][ T32] ? bpf_lsm_file_permission+0x9/0x20 [ 1561.872913][ T32] ? security_file_permission+0x75/0x260 [ 1561.872943][ T32] vfs_write+0x612/0xba0 [ 1561.872976][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1561.873009][ T32] ? __fget_files+0x2a/0x420 [ 1561.873039][ T32] ksys_write+0x150/0x270 [ 1561.873056][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1561.873088][ T32] do_syscall_64+0x166/0x520 [ 1561.873114][ T32] ? trace_irq_disable+0x3b/0x140 [ 1561.873127][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.873147][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1561.873171][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.873182][ T32] RIP: 0033:0x7f129af9e159 [ 1561.873204][ T32] RSP: 002b:00007f129bf1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1561.873217][ T32] RAX: ffffffffffffffda RBX: 00007f129b225fa0 RCX: 00007f129af9e159 [ 1561.873235][ T32] RDX: 000000000000002c RSI: 0000200000000000 RDI: 0000000000000003 [ 1561.873243][ T32] RBP: 00007f129b03506b R08: 0000000000000000 R09: 0000000000000000 [ 1561.873250][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1561.873256][ T32] R13: 00007f129b226038 R14: 00007f129b225fa0 R15: 00007ffd2cc06598 [ 1561.873285][ T32] [ 1561.873302][ T32] INFO: task syz.3.14373:19536 blocked for more than 143 seconds. [ 1561.873312][ T32] Not tainted syzkaller #0 [ 1561.873317][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1561.873322][ T32] task:syz.3.14373 state:D stack:27584 pid:19536 tgid:19527 ppid:10714 task_flags:0x400140 flags:0x00080002 [ 1561.873372][ T32] Call Trace: [ 1561.873377][ T32] [ 1561.873383][ T32] __schedule+0x17db/0x58f0 [ 1561.873436][ T32] ? __pfx___schedule+0x10/0x10 [ 1561.873465][ T32] ? schedule+0x90/0x2b0 [ 1561.873479][ T32] schedule+0x164/0x2b0 [ 1561.873503][ T32] schedule_preempt_disabled+0x13/0x30 [ 1561.873516][ T32] __mutex_lock+0x7c1/0x1550 [ 1561.873543][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1561.873569][ T32] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1561.873584][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1561.873607][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 1561.873636][ T32] ? __nla_parse+0x40/0x60 [ 1561.873663][ T32] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1561.873702][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1561.873729][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1561.873743][ T32] ? __nla_parse+0x40/0x60 [ 1561.873768][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1561.873793][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1561.873811][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1561.873838][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1561.873869][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1561.873879][ T32] ? security_capable+0x7e/0x2c0 [ 1561.873906][ T32] genl_rcv_msg+0x614/0x7a0 [ 1561.873960][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1561.873973][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1561.874005][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1561.874032][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1561.874057][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1561.874091][ T32] ? down_read+0x2be/0x330 [ 1561.874107][ T32] genl_rcv+0x28/0x40 [ 1561.874129][ T32] netlink_unicast+0x7bd/0x940 [ 1561.874160][ T32] netlink_sendmsg+0x813/0xb40 [ 1561.874200][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.874237][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1561.874262][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.874272][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1561.874296][ T32] sock_write_iter+0x2de/0x3e0 [ 1561.874323][ T32] ? __pfx_sock_write_iter+0x10/0x10 [ 1561.874354][ T32] ? bpf_lsm_file_permission+0x9/0x20 [ 1561.874368][ T32] ? security_file_permission+0x75/0x260 [ 1561.874394][ T32] vfs_write+0x612/0xba0 [ 1561.874428][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1561.874461][ T32] ? __fget_files+0x2a/0x420 [ 1561.874490][ T32] ksys_write+0x150/0x270 [ 1561.874518][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1561.874551][ T32] do_syscall_64+0x166/0x520 [ 1561.874564][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.874585][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1561.874598][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.874619][ T32] RIP: 0033:0x7f129af9e159 [ 1561.874628][ T32] RSP: 002b:00007f129befd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1561.874650][ T32] RAX: ffffffffffffffda RBX: 00007f129b226090 RCX: 00007f129af9e159 [ 1561.874657][ T32] RDX: 0000000000000054 RSI: 0000200000000100 RDI: 0000000000000003 [ 1561.874664][ T32] RBP: 00007f129b03506b R08: 0000000000000000 R09: 0000000000000000 [ 1561.874681][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1561.874687][ T32] R13: 00007f129b226128 R14: 00007f129b226090 R15: 00007ffd2cc06598 [ 1561.874715][ T32] [ 1561.874821][ T32] [ 1561.874821][ T32] Showing all locks held in the system: [ 1561.874847][ T32] locks held by rcu_exp_gp_kthr/19: 4, last CPU#0: [ 1561.874861][ T32] #0: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1561.874977][ T32] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1561.875052][ T32] #2: ffff88805fa86858 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x14d0 [ 1561.875143][ T32] #3: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1561.875246][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1561.875275][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1561.875406][ T32] locks held by getty/5369: 2, on CPU#1: [ 1561.875419][ T32] #0: ffff88802924c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1561.875544][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1561.875648][ T32] locks held by kworker/u8:29/7784: 3, on CPU#0: [ 1561.875675][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1561.875746][ T32] #1: ffffc90004fdfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1561.875832][ T32] #2: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1561.875940][ T32] locks held by syz.4.14281/19246: 2, on CPU#1: [ 1561.875966][ T32] #0: ffffffff902c5ca8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.876033][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1561.876122][ T32] locks held by syz.3.14373/19528: 2, on CPU#0: [ 1561.876134][ T32] #0: ffffffff902c5ca8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.876201][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1561.876269][ T32] locks held by syz.3.14373/19536: 2, on CPU#0: [ 1561.876295][ T32] #0: ffffffff902c5ca8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.876363][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1561.876461][ T32] locks held by syz.9.14520/20400: 2, on CPU#0: [ 1561.876487][ T32] #0: ffffffff902c5ca8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.876554][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 1561.876629][ T32] locks held by syz.4.15831/23948: 1, last CPU#0: [ 1561.876656][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1561.876723][ T32] locks held by syz.5.15838/23961: 1, on CPU#0: [ 1561.876748][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4b3/0x820 [ 1561.876817][ T32] locks held by syz.8.15841/23968: 1, on CPU#1: [ 1561.876831][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1561.876912][ T32] locks held by syz.8.15841/23973: 2, on CPU#0: [ 1561.876924][ T32] #0: ffffffff907a9dd0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1561.877013][ T32] #1: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1561.877083][ T32] locks held by syz.6.15843/23979: 2, on CPU#0: [ 1561.877109][ T32] #0: ffffffff902c5ca8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.877177][ T32] #1: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 1561.877252][ T32] locks held by syz.7.15844/23981: 1, on CPU#1: [ 1561.877277][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1561.877346][ T32] locks held by syz.7.15844/23983: 1, on CPU#1: [ 1561.877373][ T32] #0: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 1561.877450][ T32] [ 1561.877470][ T32] ============================================= [ 1561.877470][ T32] [ 1561.877503][ T32] NMI backtrace for cpu 1 [ 1561.877514][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1561.877534][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1561.877544][ T32] Call Trace: [ 1561.877553][ T32] [ 1561.877561][ T32] dump_stack_lvl+0xe8/0x150 [ 1561.877584][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1561.877601][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1561.877628][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1561.877648][ T32] sys_info+0x135/0x170 [ 1561.877669][ T32] watchdog+0xfd7/0x1030 [ 1561.877693][ T32] ? watchdog+0x1c7/0x1030 [ 1561.877715][ T32] kthread+0x38b/0x480 [ 1561.877732][ T32] ? __pfx_watchdog+0x10/0x10 [ 1561.877746][ T32] ? __pfx_kthread+0x10/0x10 [ 1561.877763][ T32] ret_from_fork+0x514/0xb70 [ 1561.877781][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1561.877797][ T32] ? __switch_to+0xc89/0x1420 [ 1561.877821][ T32] ? __pfx_kthread+0x10/0x10 [ 1561.877838][ T32] ret_from_fork_asm+0x1a/0x30 [ 1561.877875][ T32] [ 1561.877933][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1561.877984][ C0] NMI backtrace for cpu 0 [ 1561.878001][ C0] CPU: 0 UID: 0 PID: 23948 Comm: syz.4.15831 Not tainted syzkaller #0 PREEMPT(full) [ 1561.878023][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1561.878036][ C0] RIP: 0010:zap_class+0xf7/0x330 [ 1561.878063][ C0] Code: 48 29 e8 48 c1 f8 05 48 8b 0c 24 48 0f ab 41 10 48 ff 05 7c b8 f7 14 4d 8b 6d 08 4d 85 ed 74 b5 49 83 c5 f8 74 af 45 8b 75 00 <41> f6 c6 fc 74 e7 41 c1 ee 08 4a 8d 1c 75 d0 64 9c 93 49 81 fe 00 [ 1561.878081][ C0] RSP: 0018:ffffc90003b1f580 EFLAGS: 00000093 [ 1561.878099][ C0] RAX: 0000000000012a02 RBX: ffffffff939eb8d4 RCX: 00000000000129ff [ 1561.878114][ C0] RDX: ffffffff94976518 RSI: ffffffff94976518 RDI: ffffffff9447e4a0 [ 1561.878130][ C0] RBP: ffffffff949b6970 R08: ffffffff81b0d2c8 R09: 0000000000000000 [ 1561.878144][ C0] R10: dffffc0000000000 R11: fffffbfff20f4bd0 R12: 000000000000d613 [ 1561.878159][ C0] R13: ffffffff94b0b370 R14: 000000000306b214 R15: 0000000000000eb8 [ 1561.878173][ C0] FS: 0000000000000000(0000) GS:ffff888124cc5000(0000) knlGS:0000000000000000 [ 1561.878191][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1561.878205][ C0] CR2: 0000555566b514e8 CR3: 000000001b17c000 CR4: 00000000003526f0 [ 1561.878223][ C0] Call Trace: [ 1561.878230][ C0] [ 1561.878241][ C0] lockdep_unregister_key+0x1c3/0x350 [ 1561.878266][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 1561.878294][ C0] __qdisc_destroy+0x1ab/0x470 [ 1561.878323][ C0] dev_shutdown+0x92/0x450 [ 1561.878352][ C0] unregister_netdevice_many_notify+0x11f4/0x2140 [ 1561.878382][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1561.878406][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1561.878438][ C0] unregister_netdevice_queue+0x2f5/0x340 [ 1561.878463][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1561.878488][ C0] ? queue_delayed_work_on+0x12f/0x1e0 [ 1561.878515][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1561.878537][ C0] ? queue_delayed_work_on+0x171/0x1e0 [ 1561.878567][ C0] __tun_detach+0x1074/0x1900 [ 1561.878599][ C0] tun_chr_close+0x10a/0x1c0 [ 1561.878619][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 1561.878638][ C0] __fput+0x418/0xa50 [ 1561.878667][ C0] task_work_run+0x1d9/0x270 [ 1561.878688][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1561.878708][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1561.878738][ C0] do_exit+0x73a/0x2360 [ 1561.878760][ C0] ? __pfx_do_exit+0x10/0x10 [ 1561.878780][ C0] ? cgroup1_freezing+0x20/0x350 [ 1561.878807][ C0] ? cgroup1_freezing+0x20/0x350 [ 1561.878840][ C0] do_group_exit+0x22d/0x2f0 [ 1561.878858][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1561.878881][ C0] get_signal+0x121b/0x12c0 [ 1561.878916][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1561.878957][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1561.878996][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1561.879018][ C0] ? rcu_is_watching+0x16/0xb0 [ 1561.879043][ C0] do_syscall_64+0x328/0x520 [ 1561.879068][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.879089][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1561.879112][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.879132][ C0] RIP: 0033:0x7fdbbb39e159 [ 1561.879149][ C0] Code: Unable to access opcode bytes at 0x7fdbbb39e12f. [ 1561.879160][ C0] RSP: 002b:00007fdbb95930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1561.879179][ C0] RAX: fffffffffffffe00 RBX: 00007fdbbb626458 RCX: 00007fdbbb39e159 [ 1561.879194][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdbbb626458 [ 1561.879207][ C0] RBP: 00007fdbbb626450 R08: 0000000000000000 R09: 0000000000000000 [ 1561.879220][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1561.879232][ C0] R13: 00007fdbbb6264e8 R14: 00007ffc748cbbe0 R15: 00007ffc748cbcc8 [ 1561.879256][ C0] [ 1561.891516][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1563.407204][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1563.416319][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1563.426376][ T32] Call Trace: [ 1563.429652][ T32] [ 1563.432575][ T32] vpanic+0x56d/0xa60 [ 1563.436583][ T32] ? __pfx___schedule+0x10/0x10 [ 1563.441435][ T32] ? __pfx_vpanic+0x10/0x10 [ 1563.445958][ T32] panic+0xc5/0xd0 [ 1563.449682][ T32] ? __pfx_panic+0x10/0x10 [ 1563.454090][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1563.459544][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1563.464908][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1563.471052][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1563.477213][ T32] watchdog+0x1030/0x1030 [ 1563.481549][ T32] ? watchdog+0x1c7/0x1030 [ 1563.485971][ T32] kthread+0x38b/0x480 [ 1563.490050][ T32] ? __pfx_watchdog+0x10/0x10 [ 1563.494743][ T32] ? __pfx_kthread+0x10/0x10 [ 1563.499344][ T32] ret_from_fork+0x514/0xb70 [ 1563.503933][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1563.509035][ T32] ? __switch_to+0xc89/0x1420 [ 1563.513709][ T32] ? __pfx_kthread+0x10/0x10 [ 1563.518289][ T32] ret_from_fork_asm+0x1a/0x30 [ 1563.523073][ T32] [ 1563.526365][ T32] Kernel Offset: disabled [ 1563.530698][ T32] Rebooting in 86400 seconds..