last executing test programs: 6.711630718s ago: executing program 1 (id=6261): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @remote}}, 0xb6b4, 0x9, 0x4, 0xffff, 0x10000}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r1, 0x9, 0x10, 0x0, 0xa}, &(0x7f0000000240)=0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) unshare(0x8000200) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5, 0x6, 0x0, 0x0, 0x5, 0x8602008e, r3}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={r1, 0xff, 0x91, "ec70959c06cdb0cb6dc8870d5ad2f5d223358b94129fc215b71e0da5ec12cdeee547cc477869841077449b1b340920d8dd0c0fc091a827a70dd79860d96f6f7783f7e324ddfae0a7b7eca8c3dbb99571c1e1db72c103ec1970215734c0074babeba97f6314d3d88a636767993720c1e5da8354fc05c8534efa905f412e94c59eaf30a537483bb7e66f69eba51a30e29417"}, 0x99) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x4008800) 6.445653143s ago: executing program 4 (id=6263): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0xe3, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x80087601, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20004844) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000ca00000003"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000440)={&(0x7f0000000000), &(0x7f0000000200)=""/193, &(0x7f0000000300)="bf3966c3f04b8e22648ae5107892f38328f75ed9007368c810d5dcccb7060dea91c5c252d2f1213cc84d0f4c82066f5d11cb18b8", &(0x7f0000000340)="47daf8b1ea869ecd07a58883478ef75912d5c11b031a88cab50f5827f92da447333d9ac715de86edbe62f4d6fe69a0eedf7ee08cabb01959a58052fb33c5191bb2cb22dafcbe50f0baaeb0ffacdabf87fd1785390d930d4bc33ec0dbf91fb02ad5c019056c50832b6c8377456861264e6adcef5be83cdf64cb42a9e6929d137ea27e100029e8c1aa3b661aa6c934a031eb2228dc7e1412e7b08f56188e62a41b02b533856ed341a1a8dc8d2b442386ba88ab5d5861ab4a6a4c24381bfdb0c48c31ecae88f2191af4b3611646b04b1ea84f78059a5ba15cb479159a7bc6c30cbef77e", 0x7, r5, 0x4}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r6 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000000)={r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000020018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000a702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x25}, 0x94) 6.322047245s ago: executing program 1 (id=6264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x200, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x400c080) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="400402b2"], 0x7) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8d80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000007c8000000000000018000000fdffffff0000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) read$nci(r1, &(0x7f0000000240)=""/76, 0x4c) 6.07381417s ago: executing program 4 (id=6267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031612d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.805546655s ago: executing program 1 (id=6268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) syz_emit_ethernet(0x10e, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="5c26c65ab3fe", @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@generic={0xf5, "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"}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7121c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa01a0f1779e6bee1957bf6917eac9c4a95afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x8a}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000015c0)="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", 0xe0a}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 5.631919711s ago: executing program 3 (id=6269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 5.464775747s ago: executing program 2 (id=6270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f086dd2de0ffff20000000ff02000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x50) 5.063290782s ago: executing program 4 (id=6272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @in=@dev, {@in6=@remote, @in=@remote}, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x7e6bb0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 5.001964733s ago: executing program 2 (id=6273): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="740000080500000000000000fddbdf250000000025160c29bc51b61e0c075d08f0fd0e4a074283e88c901045981f8cd74b705bd5528d3ea53ab7d65a1a7138c5950ff958b026b974deb9e4137ca26e5903f86e60a37cf39510659cfe8511798fb4860202f05bb44c7904dbf6b68147b184f22b8f2086ae8e2c9fa65c22b4016095cd4ab636b251ca0551cde86bc894c2d8", @ANYRES32=0x0, @ANYBLOB="0a04040000000000540012800800010067747000480002800800030009000000080004000200000014000800fc02000000000000000000000000000108000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="05000500000000000500050000000000"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.568684808s ago: executing program 3 (id=6275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000500)={{0x6, @loopback, 0x15, 0x0, 'dh\x00', 0x12, 0x0, 0x76}, {@loopback, 0x15, 0x2, 0x1, 0x8}}, 0x44) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000060000007f000001001500"/68, 0x44) 4.473112329s ago: executing program 2 (id=6276): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5}]}, 0x24}}, 0x0) 4.249611765s ago: executing program 4 (id=6277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000000)='\x02\x02\x02\x02\x02\x02', 0x80000, &(0x7f0000000040)={@align=0x8000100000000000, {0x8, 0x5, 0xfffffffc, 0x1}}, 0x10, &(0x7f0000000140), &(0x7f0000000180)=0x6}, {[0x80000001, 0x3, 0x549, 0x80]}, 0x6, 0xc3, &(0x7f0000000300)=""/195}) bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r2}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1500f01c53c7db", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500000000000800260076090000"], 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) syz_genetlink_get_family_id$nl80211(0x0, r4) 4.057257873s ago: executing program 3 (id=6278): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80000, 0xf227) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newlink={0x60, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200410c1}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 4.049386339s ago: executing program 0 (id=6279): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0xcbc, 0xffffffffffffffff, 0x1c14f3c7, 0x7f, 0x4, 0x7, 0x3, 0x8e6, 0xf69f, 0x1, 0x2, 0x3, 0x8, 0x4}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x8c0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000200)={{r1, 0x4, 0x400, 0x101, 0x800, 0x2, 0x0, 0x0, 0x8, 0x3, 0x8, 0x4, 0x3ff, 0x3ff, 0x9}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32, @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="f10013007f"], 0x38}, 0x1, 0x0, 0x0, 0x48001}, 0x44000) 3.972042365s ago: executing program 2 (id=6280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x140f, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x40810) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030073797a30000000000c000240000000000000000114000000000000000a8bc536"], 0x60}}, 0x0) 3.846387117s ago: executing program 0 (id=6281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd0, &(0x7f0000000340)=""/208}, 0x90) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4) 3.678863351s ago: executing program 3 (id=6282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031612d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.551602126s ago: executing program 1 (id=6283): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f086dd2de0ffff20000000ff02000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 3.3897895s ago: executing program 2 (id=6284): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket(0x3, 0xd, 0x0) sendmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x100}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x290000, 0x0) (async, rerun: 64) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r2, 0x0) (async, rerun: 32) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000051f0af73192de2ce14000200776c616e3100000000000000000000000800070001000000df500f1d2296781478b6fe8735edd47838397fc00b61503940a37240b33bb56a6e456c7186228a39f6879dbe7d456c3b054263be6df371c1e0293f87af6b7348fa97c16ab95fee12b273f41d0917c8a553756959c76d7e99a598440c9496ff6a5a0100008000000000ca55b84a8a47c6f5ef484d4a863b465b9c2c5623e455b6e4cae4c55a9c1ae4e5c057e8b48149b81234420c1d47e777468400"/234], 0x34}}, 0x0) (async) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@gettfilter={0x5c, 0x2e, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0xffe0, 0xc}, {0x5, 0xfff1}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x4051) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000001ac0), 0x6) (async, rerun: 64) ioctl$sock_bt_hci(r7, 0x400448dc, 0x0) (async, rerun: 64) r8 = socket$packet(0x11, 0x2, 0x300) (async) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0xffff, 0x3}, {0xffff, 0xffe0}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000000001}]}}]}, 0x48}}, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000200)="7f", 0x0}, 0x50) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r13, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) socket(0x8, 0x6, 0x7) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e000000000000810020f7ff0b040000c002000000f70dc66ff40fc597"], 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x38}, 0x94) (rerun: 64) 2.912429921s ago: executing program 4 (id=6285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 2.869874037s ago: executing program 0 (id=6286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0xffff0002, 0x77, 0x0, &(0x7f0000000140)="2b206d99a509fa97737ea49da2aa982f5c37730d21435ebc460b94561ffceca4121b3249642aa421fb42e1067ee2023f10e087c6008c3736a1eccdff836d86e9f11a29e88483c474648a940700bb8f6e946bd369ff7db7c89d1e2a33963bc9ce5ba7ad972eb2ebbec3cf017de8299f92a472041669a000", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) 2.641309439s ago: executing program 1 (id=6287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e34, @local}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002380)=@raw={'raw\x00', 0x701, 0x3, 0x270, 0x108, 0xb, 0x108, 0x108, 0x0, 0x1d8, 0x1c8, 0x1c8, 0x1d8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'geneve0\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0xe1, 0x1, 0x3, 0x0, 0xbcd0b1becc9a5e43}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0xfff, 0x1, [0x23, 0x9, 0x31, 0x1a, 0x36, 0x4, 0x31, 0x6, 0xd, 0x2f, 0x2a, 0x1f, 0x3b, 0x37, 0x2b, 0x20], 0x2, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000040)=@in6={0xa, 0x4e28, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xb}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@int=0x1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001240)={r4, 0x2ba}, &(0x7f0000001280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000012c0)={0x200, 0x1, 0x0, 0x1, 0x3, 0x8, 0x80000001, 0x1, r8}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r7, 0x1}, &(0x7f00000000c0)=0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x24044804) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x1d, 0x0, &(0x7f0000000240)) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$packet(0x11, 0x3, 0x300) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r12, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x84) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 2.515815218s ago: executing program 0 (id=6288): r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x3c}, {&(0x7f00000000c0)={0xc0, 0x31, 0x3, 0x70bd27, 0x25dfdbff, "", [@generic="ea3174f754b4d0f7ba3fb396ad58a78c40d4cb5546d7d38d35340280c37671ddbb6b9c7a637f1445e36fb3635a26088634606af9f91a51f55d8859434f01fc3051f8470bda95c88918c072f13a6938900056c68789079c7f4549a40681619e06b1f217ba9ad9da812af10c6deecd4c5d1ff208bdf88b32c037cb0c58727ef5e65832420480d58445f806ee43ce0f1e7e79981c41d5c5098d1e5a17bcedd1e19d067ee2a4ad731b9acf5e660e16be"]}, 0xc0}], 0x2, 0x0, 0x0, 0xb305e06d8ab482b3}, 0x48800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001f40)={0x520, r2, 0x10, 0x70bd26, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_FRAME={0x4ee, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7ffb}, @broadcast, @device_a, @from_mac, {0x3, 0x3}, @value=@ver_80211n={0x0, 0x6e2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x9e4e, @broadcast, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0xe5, "ce5c357623237319157740d51e475e83a219e19792d19bbfb4cec20f77ff6d4ac6aefe843f5006bab4e3377287de203744c63c04bd4d1b94613804e7ff36176ec841a24f9114fd1c5b135c8c71d1357db8a6b2ee94af3349460ec35173537e2ab478f14d050ec99bc896d44f4747d2487fd1f15a32d673a1814fb966fa4a151e1c7012ce4d20d49dcee3874803717fc3c776a5732f3ed07f3221b54b797043f1dc025d162c260690368508ed1528c36d42e78f18210aa5b391be71ebf75aa5279235844ae85d3e407b63be750c8ffacbe73fb7e27ead65aa033fd425a455665f62c5ab3bf6"}, {0xdd, 0x4d, "6cd1c363a14b51819a786091f1ed3540cd24d139dd80714dad4a014b17339424da03f25324855c9b6af393995aa129fb2562be20bc20151db0bb478237bc55f3b7adcfa9da61056c221e5c1286"}, {0xdd, 0x21, "e7042e56f0eba7084b2789eca3802a591f870000310172639d1e1bd86f7141d8ef"}, {0xdd, 0x23, "cd69d581894d56a22f80a86f027b7a8490a1d4bb841ffeceaaa429daf0b4a7af4901e8"}, {0xdd, 0xeb, "7bfdfd6d8c9ec2889d967416964fd373208ccbd5f9f8310bacc94f672a86bc2983a686a27954915221614cbec02f885f4604b64dc71648b37484475c77eb771088f3f9506eb96607361c7f3a50b3bd8568ec2bc9d50be61f2adeaeacc5ccde27826663a8a5b373434e8a9fd83ecc4fa67732ab703c78fe698399af7a269b96660815cd4acc6f66daa776400acc26c1d3c089e2691c50050d3e029c5ab3008d6ab7229d607fd88244c7ae92d9dd1a246d70bfccc30e0df182671eeadf66c100e62c763a59ccb5bc5ccf64f0f89a50b6512b1660af386eed539e8aba94be40bfd3953ffbe28b57502f68d9b8"}, {0xdd, 0xbf, "9b6ae4e974cb405c3dc58bf183feec9b6a83a43d1fb05fddbe28272f8e69392da40785394b1801edd6c7709ccd8b845f9075c3b1a0c9f1550b8e971d9b84e4e22d6e171855b9ebbf6255a495b5cae975a77aad4b1280e990ac1c02bccb1aa4f7bc696abac96cf1f0081f6d306695596d23d054b60c0066a3ee6d682e502e6f8c43849ab1a43328d7d5288ec7fbe3ca1acfacbda359b10073fe075698c172e76883267e2a2073fe5e2dd7c69ed0e5315e5c451da9e621aa98b3c3824b929626"}, {0xdd, 0xb7, "4d36d0020a821756696c03f83840e0d0a8664c0f397adeb4e608693b61003960771e6370999ada8d96ace46246479bb89d434af4d41271dfa6c20f172f2834536cefe025ddb0ba0f5024face499d33e2ed1ca5cabef70a0c6e6652886a0fbac6952ac228bd47e2ed7e181a357285542ef428b975722075d7c8a19e3fef227dac4e3323e2a1e1e8c7ff658770066e3083114798fe28ee3bddd9343789866d94a54957f03b5bda4454cc4cbdb4f86f7938676727560ab479"}, {0xdd, 0xd5, "05c3c2abb0de75b57ec565e0094441c587e6570353d7898738e3614e958290d7f866427644692fdf00758103d6b7b189071a5b4180ad6644d920afe2421dc317bd93ec750a5060fd5ff481bee2fdd8e96e0aa3a2b9e0b3d7af7a722a5845b84a6bf5e63ccf848fde79a4b1516f10b48629d6804454d8f1e36074136282355d80aff512eb4a15ae3af21050a1b89174e7a1d9156d8512d95b65b3c7ce5c322325f0f138e36807501919026c845ab6f6e19c77ff71b2802943e07be943836ecb5c75a3a4f5fde97d5b042746b8d23c795de19acddf80"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0x520}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @fwd={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4096, 0x35, 0x1000, 0xa}, 0x20) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r6, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2401000041000100fcff07000400000002000000040048800c0101800801108004010f"], 0x124}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1000, 0x3}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 2.213427883s ago: executing program 3 (id=6289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000500)={{0x6, @loopback, 0x15, 0x0, 'dh\x00', 0x12, 0x0, 0x76}, {@loopback, 0x15, 0x2, 0x1, 0x8}}, 0x44) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000001007f000001001500"/68, 0x44) 1.974054699s ago: executing program 0 (id=6290): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1, &(0x7f00000010c0)=@raw=[@generic={0x15, 0x0, 0x0, 0x2}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x300, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.934956919s ago: executing program 3 (id=6291): socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r0], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) 1.878491922s ago: executing program 2 (id=6292): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x135, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e23, 0x11d, 0x0, @wg=@data={0x4, 0x202, 0x10001, "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"}}}}, 0x143) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000009400000095e424518e67f36e1ff3"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) r8 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r8, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x40000a0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x401}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x31dd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xb8}}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) writev(r10, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xfffffe08, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 1.660740441s ago: executing program 4 (id=6293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) syz_emit_ethernet(0x10e, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="5c26c65ab3fe", @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@generic={0xf5, "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"}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7121c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa01a0f1779e6bee1957bf6917eac9c4a95afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x8a}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000015c0)="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", 0xe0a}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.17732709s ago: executing program 0 (id=6294): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047bd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f700004e236ee2ffca1b1f000000fe04c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 0s ago: executing program 1 (id=6295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb53}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x23}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0x7fff, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.054209][T22765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5442'. [ 774.109848][T22767] ip_tables: iptables: counters copy to user failed while replacing table [ 774.343054][T22773] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5446'. [ 774.568533][T22775] syzkaller0: entered promiscuous mode [ 774.568566][T22775] syzkaller0: entered allmulticast mode [ 774.599498][T22778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5449'. [ 774.752570][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5450'. [ 774.783534][T22789] netlink: 'syz.3.5450': attribute type 2 has an invalid length. [ 774.948916][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.949150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.995352][T22797] tipc: Enabling not permitted [ 774.995390][T22797] tipc: Enabling of bearer rejected, failed to enable media [ 774.999193][T22794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5452'. [ 775.041948][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.042257][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.068949][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.089956][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.193894][T22801] syzkaller0: entered promiscuous mode [ 775.193921][T22801] syzkaller0: entered allmulticast mode [ 775.516020][T22811] netlink: 'syz.2.5461': attribute type 8 has an invalid length. [ 775.548306][T22815] FAULT_INJECTION: forcing a failure. [ 775.548306][T22815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.548343][T22815] CPU: 0 UID: 0 PID: 22815 Comm: syz.3.5459 Not tainted syzkaller #0 PREEMPT(full) [ 775.548369][T22815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.548384][T22815] Call Trace: [ 775.548394][T22815] [ 775.548405][T22815] dump_stack_lvl+0xe8/0x150 [ 775.548444][T22815] should_fail_ex+0x410/0x560 [ 775.548477][T22815] _copy_to_user+0x31/0xb0 [ 775.548511][T22815] simple_read_from_buffer+0xe1/0x170 [ 775.548551][T22815] proc_fail_nth_read+0x1bb/0x230 [ 775.548586][T22815] ? common_file_perm+0x20e/0x2b0 [ 775.548619][T22815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 775.548659][T22815] ? rw_verify_area+0x24a/0x4c0 [ 775.548695][T22815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 775.548731][T22815] vfs_read+0x213/0xa80 [ 775.548772][T22815] ? __pfx___mutex_lock+0x10/0x10 [ 775.548804][T22815] ? __pfx_vfs_read+0x10/0x10 [ 775.548840][T22815] ? __fget_files+0x2a/0x420 [ 775.548874][T22815] ? __fget_files+0x3a2/0x420 [ 775.548904][T22815] ? __fget_files+0x2a/0x420 [ 775.548945][T22815] ksys_read+0x150/0x270 [ 775.548981][T22815] ? __pfx_ksys_read+0x10/0x10 [ 775.549011][T22815] ? fput+0xa0/0xd0 [ 775.549050][T22815] do_syscall_64+0x166/0x520 [ 775.549077][T22815] ? trace_irq_disable+0x3b/0x140 [ 775.549100][T22815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.549120][T22815] ? clear_bhb_loop+0x70/0xc0 [ 775.549149][T22815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.549172][T22815] RIP: 0033:0x7f9a6c15e98e [ 775.549193][T22815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 775.549213][T22815] RSP: 002b:00007f9a6a3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 775.549238][T22815] RAX: ffffffffffffffda RBX: 00007f9a6a3f66c0 RCX: 00007f9a6c15e98e [ 775.549256][T22815] RDX: 000000000000000f RSI: 00007f9a6a3f60a0 RDI: 0000000000000004 [ 775.549279][T22815] RBP: 00007f9a6a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 775.549295][T22815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.549309][T22815] R13: 00007f9a6c426038 R14: 00007f9a6c425fa0 R15: 00007ffd47ea81b8 [ 775.549348][T22815] [ 775.890604][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.934020][T22822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5465'. [ 775.934048][T22822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5465'. [ 775.935068][T22822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5465'. [ 775.994245][T22822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5465'. [ 776.123557][T22829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5467'. [ 776.923589][T22855] sctp: [Deprecated]: syz.2.5476 (pid 22855) Use of int in maxseg socket option. [ 776.923589][T22855] Use struct sctp_assoc_value instead [ 777.148481][T22868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5480'. [ 777.359571][T22879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5481'. [ 778.059185][T22908] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 778.168232][T22917] FAULT_INJECTION: forcing a failure. [ 778.168232][T22917] name failslab, interval 1, probability 0, space 0, times 0 [ 778.168275][T22917] CPU: 0 UID: 0 PID: 22917 Comm: syz.0.5492 Not tainted syzkaller #0 PREEMPT(full) [ 778.168296][T22917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.168307][T22917] Call Trace: [ 778.168314][T22917] [ 778.168321][T22917] dump_stack_lvl+0xe8/0x150 [ 778.168350][T22917] should_fail_ex+0x410/0x560 [ 778.168373][T22917] should_failslab+0xa8/0x100 [ 778.168394][T22917] ? skb_clone+0x212/0x3a0 [ 778.168417][T22917] kmem_cache_alloc_noprof+0xa1/0x600 [ 778.168445][T22917] ? skb_clone+0x212/0x3a0 [ 778.168521][T22917] skb_clone+0x212/0x3a0 [ 778.168554][T22917] ? nfnetlink_rcv+0x4b0/0x28c0 [ 778.168579][T22917] nfnetlink_rcv+0x4de/0x28c0 [ 778.168604][T22917] ? kernel_text_address+0xa5/0xe0 [ 778.168624][T22917] ? __kernel_text_address+0xd/0x30 [ 778.168643][T22917] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 778.168660][T22917] ? arch_stack_walk+0xfb/0x150 [ 778.168688][T22917] ? stack_trace_save+0xa9/0x100 [ 778.168706][T22917] ? __lock_acquire+0x747/0x2de0 [ 778.168724][T22917] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 778.168761][T22917] ? __lock_acquire+0x747/0x2de0 [ 778.168787][T22917] ? __netlink_lookup+0xc6/0x8b0 [ 778.168811][T22917] ? lock_acquire+0x115/0x350 [ 778.168827][T22917] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.168858][T22917] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.168883][T22917] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.168912][T22917] netlink_unicast+0x7bd/0x940 [ 778.168943][T22917] netlink_sendmsg+0x813/0xb40 [ 778.168976][T22917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.169010][T22917] ? apparmor_socket_sendmsg+0x98/0x360 [ 778.169031][T22917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.169056][T22917] sock_sendmsg_nosec+0x13a/0x180 [ 778.169075][T22917] ____sys_sendmsg+0x54e/0x850 [ 778.169102][T22917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.169131][T22917] ? import_iovec+0x73/0xa0 [ 778.169155][T22917] ___sys_sendmsg+0x2a5/0x360 [ 778.169176][T22917] ? __lock_acquire+0x747/0x2de0 [ 778.169195][T22917] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.169244][T22917] ? __fget_files+0x2a/0x420 [ 778.169266][T22917] ? __fget_files+0x3a2/0x420 [ 778.169297][T22917] __x64_sys_sendmsg+0x1b1/0x290 [ 778.169322][T22917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 778.169360][T22917] do_syscall_64+0x166/0x520 [ 778.169381][T22917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.169397][T22917] ? clear_bhb_loop+0x70/0xc0 [ 778.169417][T22917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.169433][T22917] RIP: 0033:0x7f23b899e159 [ 778.169449][T22917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.169463][T22917] RSP: 002b:00007f23b990d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.169481][T22917] RAX: ffffffffffffffda RBX: 00007f23b8c25fa0 RCX: 00007f23b899e159 [ 778.169493][T22917] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000003 [ 778.169509][T22917] RBP: 00007f23b990d090 R08: 0000000000000000 R09: 0000000000000000 [ 778.169520][T22917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.169530][T22917] R13: 00007f23b8c26038 R14: 00007f23b8c25fa0 R15: 00007ffe20072b18 [ 778.169556][T22917] [ 778.926972][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.688564][T10551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.688787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.775877][T22900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 781.092149][T22936] __nla_validate_parse: 3 callbacks suppressed [ 781.092224][T22936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5499'. [ 781.092252][T22936] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5499'. [ 781.151325][T22933] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5494'. [ 781.215181][T22942] FAULT_INJECTION: forcing a failure. [ 781.215181][T22942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.215217][T22942] CPU: 1 UID: 0 PID: 22942 Comm: syz.0.5500 Not tainted syzkaller #0 PREEMPT(full) [ 781.215243][T22942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.215258][T22942] Call Trace: [ 781.215267][T22942] [ 781.215276][T22942] dump_stack_lvl+0xe8/0x150 [ 781.215322][T22942] should_fail_ex+0x410/0x560 [ 781.215359][T22942] _copy_to_user+0x31/0xb0 [ 781.215392][T22942] bpf_log_attr_finalize+0x124/0x1e0 [ 781.215418][T22942] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 781.215445][T22942] ? ktime_get+0x45/0x220 [ 781.215469][T22942] ? ktime_get+0x1f5/0x220 [ 781.215494][T22942] bpf_check+0x1c55/0x2e10 [ 781.215535][T22942] ? ktime_get_with_offset+0x93/0x2d0 [ 781.215563][T22942] ? __pfx_bpf_check+0x10/0x10 [ 781.215592][T22942] ? bpf_obj_name_cpy+0x194/0x1e0 [ 781.215629][T22942] bpf_prog_load+0x14d6/0x1c20 [ 781.215675][T22942] ? __pfx_bpf_prog_load+0x10/0x10 [ 781.215730][T22942] __sys_bpf+0xd0d/0xd90 [ 781.215767][T22942] ? __pfx___sys_bpf+0x10/0x10 [ 781.215806][T22942] ? __fget_files+0x2a/0x420 [ 781.215859][T22942] ? ksys_write+0x242/0x270 [ 781.215898][T22942] ? __pfx_ksys_write+0x10/0x10 [ 781.215939][T22942] __x64_sys_bpf+0xba/0xd0 [ 781.215967][T22942] do_syscall_64+0x166/0x520 [ 781.215996][T22942] ? trace_irq_disable+0x3b/0x140 [ 781.216020][T22942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.216045][T22942] ? clear_bhb_loop+0x70/0xc0 [ 781.216073][T22942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.216097][T22942] RIP: 0033:0x7f23b899e159 [ 781.216119][T22942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.216140][T22942] RSP: 002b:00007f23b990d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 781.216166][T22942] RAX: ffffffffffffffda RBX: 00007f23b8c25fa0 RCX: 00007f23b899e159 [ 781.216184][T22942] RDX: 0000000000000094 RSI: 0000200000001000 RDI: 0000000000000005 [ 781.216199][T22942] RBP: 00007f23b990d090 R08: 0000000000000000 R09: 0000000000000000 [ 781.216214][T22942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 781.216229][T22942] R13: 00007f23b8c26038 R14: 00007f23b8c25fa0 R15: 00007ffe20072b18 [ 781.216266][T22942] [ 781.521985][T22946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 781.522023][T22946] IPv6: NLM_F_CREATE should be set when creating new route [ 781.569703][T22951] wireguard: wg2: Could not create IPv4 socket [ 781.814367][T22959] netlink: 'syz.3.5504': attribute type 1 has an invalid length. [ 781.871782][T22964] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 781.891744][T22959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 781.894665][T22963] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 781.927730][T22959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5504'. [ 781.967936][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.974535][T22967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5506'. [ 782.009741][T22963] bond2: entered allmulticast mode [ 782.301307][T22982] netlink: 'syz.4.5508': attribute type 3 has an invalid length. [ 782.301531][T22982] netlink: 'syz.4.5508': attribute type 3 has an invalid length. [ 782.864016][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5513'. [ 782.864039][T23010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5513'. [ 783.116951][T22981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.215063][T23018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5514'. [ 783.404686][T23024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5517'. [ 783.523353][T23031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5521'. [ 783.549772][T23024] vlan2: entered promiscuous mode [ 783.549803][T23024] bridge0: entered promiscuous mode [ 784.067659][T23052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.691103][T23077] sctp: [Deprecated]: syz.4.5535 (pid 23077) Use of int in maxseg socket option. [ 784.691103][T23077] Use struct sctp_assoc_value instead [ 784.740052][T23081] FAULT_INJECTION: forcing a failure. [ 784.740052][T23081] name failslab, interval 1, probability 0, space 0, times 0 [ 784.740080][T23081] CPU: 0 UID: 0 PID: 23081 Comm: syz.3.5536 Not tainted syzkaller #0 PREEMPT(full) [ 784.740104][T23081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.740114][T23081] Call Trace: [ 784.740121][T23081] [ 784.740129][T23081] dump_stack_lvl+0xe8/0x150 [ 784.740157][T23081] should_fail_ex+0x410/0x560 [ 784.740180][T23081] should_failslab+0xa8/0x100 [ 784.740204][T23081] __kvmalloc_node_noprof+0x176/0x820 [ 784.740225][T23081] ? __kvmalloc_node_noprof+0x345/0x820 [ 784.740243][T23081] ? bpf_check_cfg+0x1ad/0x3840 [ 784.740258][T23081] ? bpf_check_cfg+0x1ad/0x3840 [ 784.740278][T23081] bpf_check_cfg+0x1ad/0x3840 [ 784.740310][T23081] ? kasan_quarantine_put+0xbb/0x1f0 [ 784.740326][T23081] ? lockdep_hardirqs_on+0x7b/0x110 [ 784.740350][T23081] ? __pfx_bpf_check_cfg+0x10/0x10 [ 784.740365][T23081] ? bpf_prog_calc_tag+0x310/0x370 [ 784.740384][T23081] ? vfree+0x42b/0x490 [ 784.740410][T23081] ? bpf_prog_calc_tag+0x310/0x370 [ 784.740433][T23081] ? check_and_resolve_insns+0x1d54/0x21d0 [ 784.740459][T23081] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 784.740481][T23081] ? add_kfuncs+0x251/0x2e0 [ 784.740534][T23081] bpf_check+0x24b6/0x2e10 [ 784.740576][T23081] ? ktime_get_with_offset+0x93/0x2d0 [ 784.740597][T23081] ? __pfx_bpf_check+0x10/0x10 [ 784.740633][T23081] ? bpf_obj_name_cpy+0x194/0x1e0 [ 784.740669][T23081] bpf_prog_load+0x14d6/0x1c20 [ 784.740717][T23081] ? __pfx_bpf_prog_load+0x10/0x10 [ 784.740765][T23081] __sys_bpf+0xd0d/0xd90 [ 784.740796][T23081] ? __pfx___sys_bpf+0x10/0x10 [ 784.740823][T23081] ? __fget_files+0x2a/0x420 [ 784.740859][T23081] ? ksys_write+0x242/0x270 [ 784.740886][T23081] ? __pfx_ksys_write+0x10/0x10 [ 784.740915][T23081] __x64_sys_bpf+0xba/0xd0 [ 784.740934][T23081] do_syscall_64+0x166/0x520 [ 784.740954][T23081] ? trace_irq_disable+0x3b/0x140 [ 784.740970][T23081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.740988][T23081] ? clear_bhb_loop+0x70/0xc0 [ 784.741007][T23081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.741024][T23081] RIP: 0033:0x7f9a6c19e159 [ 784.741039][T23081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.741054][T23081] RSP: 002b:00007f9a6a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 784.741072][T23081] RAX: ffffffffffffffda RBX: 00007f9a6c425fa0 RCX: 00007f9a6c19e159 [ 784.741084][T23081] RDX: 0000000000000094 RSI: 0000200000001000 RDI: 0000000000000005 [ 784.741095][T23081] RBP: 00007f9a6a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 784.741105][T23081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 784.741115][T23081] R13: 00007f9a6c426038 R14: 00007f9a6c425fa0 R15: 00007ffd47ea81b8 [ 784.741140][T23081] [ 784.867430][T23072] syzkaller0: entered promiscuous mode [ 784.867505][T23072] syzkaller0: entered allmulticast mode [ 784.937356][T23078] netlink: 'syz.0.5533': attribute type 1 has an invalid length. [ 784.937380][T23078] netlink: 'syz.0.5533': attribute type 1 has an invalid length. [ 785.014907][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.176799][T23085] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 785.515375][T23097] ip_tables: iptables: counters copy to user failed while replacing table [ 785.880516][T23108] syzkaller0: entered promiscuous mode [ 785.880588][T23108] syzkaller0: entered allmulticast mode [ 786.291613][T23118] __nla_validate_parse: 5 callbacks suppressed [ 786.291671][T23118] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5549'. [ 786.447844][T17590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.448035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.652374][T23128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5552'. [ 786.964296][T23115] infiniband syz1: set down [ 786.964358][T23115] infiniband syz1: added team0 [ 787.019659][T23115] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 787.019705][T23115] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 787.019750][T23115] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 787.078726][T23115] RDS/IB: syz1: added [ 787.078782][T23115] smc: adding ib device syz1 with port count 1 [ 787.078803][T23115] smc: ib device syz1 port 1 has no pnetid [ 787.593508][T23159] syzkaller0: entered promiscuous mode [ 787.593535][T23159] syzkaller0: entered allmulticast mode [ 787.621733][T23160] syzkaller0: entered promiscuous mode [ 787.621759][T23160] syzkaller0: entered allmulticast mode [ 788.007961][T23169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5564'. [ 788.058640][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.266006][T23173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5566'. [ 788.266041][T23173] block nbd2: Unsupported socket: should be TCP or UNIX. [ 788.513234][T23192] FAULT_INJECTION: forcing a failure. [ 788.513234][T23192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.513272][T23192] CPU: 1 UID: 0 PID: 23192 Comm: syz.0.5570 Not tainted syzkaller #0 PREEMPT(full) [ 788.513304][T23192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 788.513320][T23192] Call Trace: [ 788.513330][T23192] [ 788.513341][T23192] dump_stack_lvl+0xe8/0x150 [ 788.513380][T23192] should_fail_ex+0x410/0x560 [ 788.513417][T23192] _copy_to_user+0x31/0xb0 [ 788.513451][T23192] simple_read_from_buffer+0xe1/0x170 [ 788.513492][T23192] proc_fail_nth_read+0x1bb/0x230 [ 788.513528][T23192] ? common_file_perm+0x20e/0x2b0 [ 788.513561][T23192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.513602][T23192] ? rw_verify_area+0x24a/0x4c0 [ 788.513639][T23192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.513676][T23192] vfs_read+0x213/0xa80 [ 788.513724][T23192] ? __pfx___mutex_lock+0x10/0x10 [ 788.513754][T23192] ? __pfx_vfs_read+0x10/0x10 [ 788.513792][T23192] ? __fget_files+0x2a/0x420 [ 788.513831][T23192] ? __fget_files+0x3a2/0x420 [ 788.513863][T23192] ? __fget_files+0x2a/0x420 [ 788.513905][T23192] ksys_read+0x150/0x270 [ 788.513943][T23192] ? __pfx_ksys_read+0x10/0x10 [ 788.513992][T23192] do_syscall_64+0x166/0x520 [ 788.514027][T23192] ? trace_irq_disable+0x3b/0x140 [ 788.514061][T23192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.514086][T23192] ? clear_bhb_loop+0x70/0xc0 [ 788.514116][T23192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.514140][T23192] RIP: 0033:0x7f23b895e98e [ 788.514162][T23192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 788.514183][T23192] RSP: 002b:00007f23b990cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 788.514209][T23192] RAX: ffffffffffffffda RBX: 00007f23b990d6c0 RCX: 00007f23b895e98e [ 788.514228][T23192] RDX: 000000000000000f RSI: 00007f23b990d0a0 RDI: 0000000000000004 [ 788.514244][T23192] RBP: 00007f23b990d090 R08: 0000000000000000 R09: 0000000000000000 [ 788.514259][T23192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.514274][T23192] R13: 00007f23b8c26038 R14: 00007f23b8c25fa0 R15: 00007ffe20072b18 [ 788.514312][T23192] [ 789.030741][T23201] sock: sock_set_timeout: `syz.1.5572' (pid 23201) tries to set negative timeout [ 789.160926][T23203] netlink: 'syz.1.5572': attribute type 49 has an invalid length. [ 789.539109][T23217] netlink: 'syz.2.5577': attribute type 1 has an invalid length. [ 789.539135][T23217] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5577'. [ 789.702810][T23222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5578'. [ 790.024764][T23230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5582'. [ 790.137152][T17589] syzkaller0: tun_net_xmit 76 [ 790.137645][T17589] syzkaller0: tun_net_xmit 48 [ 790.138478][T23232] syzkaller0: create flow: hash 911077765 index 1 [ 790.171124][ T8509] syzkaller0: tun_net_xmit 76 [ 790.266031][T23231] syzkaller0: delete flow: hash 911077765 index 1 [ 790.373481][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5586'. [ 791.100192][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.520186][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.520503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.144800][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.146252][T10551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.154734][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.200238][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.261616][T23240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5586'. [ 794.261654][T23240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5586'. [ 794.261713][T23240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5586'. [ 794.313300][T23256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5589'. [ 794.578557][T23275] FAULT_INJECTION: forcing a failure. [ 794.578557][T23275] name failslab, interval 1, probability 0, space 0, times 0 [ 794.578638][T23275] CPU: 0 UID: 0 PID: 23275 Comm: syz.1.5591 Not tainted syzkaller #0 PREEMPT(full) [ 794.578669][T23275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.578685][T23275] Call Trace: [ 794.578695][T23275] [ 794.578706][T23275] dump_stack_lvl+0xe8/0x150 [ 794.578745][T23275] should_fail_ex+0x410/0x560 [ 794.578778][T23275] should_failslab+0xa8/0x100 [ 794.578807][T23275] ? skb_clone+0x212/0x3a0 [ 794.578841][T23275] kmem_cache_alloc_noprof+0xa1/0x600 [ 794.578881][T23275] ? skb_clone+0x212/0x3a0 [ 794.578922][T23275] skb_clone+0x212/0x3a0 [ 794.578959][T23275] __netlink_deliver_tap+0x413/0x860 [ 794.579008][T23275] ? netlink_deliver_tap+0x2e/0x1b0 [ 794.579047][T23275] netlink_deliver_tap+0x19c/0x1b0 [ 794.579084][T23275] netlink_unicast+0x781/0x940 [ 794.579130][T23275] netlink_sendmsg+0x813/0xb40 [ 794.579177][T23275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.579222][T23275] ? apparmor_socket_sendmsg+0x98/0x360 [ 794.579252][T23275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.579287][T23275] sock_sendmsg_nosec+0x13a/0x180 [ 794.579315][T23275] ____sys_sendmsg+0x54e/0x850 [ 794.579354][T23275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.579398][T23275] ? import_iovec+0x73/0xa0 [ 794.579433][T23275] ___sys_sendmsg+0x2a5/0x360 [ 794.579471][T23275] ? __lock_acquire+0x747/0x2de0 [ 794.579501][T23275] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.579573][T23275] ? __fget_files+0x2a/0x420 [ 794.579610][T23275] ? __fget_files+0x3a2/0x420 [ 794.579659][T23275] __x64_sys_sendmsg+0x1b1/0x290 [ 794.579696][T23275] ? net_tx_action+0x5bb/0xc30 [ 794.579725][T23275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.579768][T23275] ? handle_softirqs+0x720/0x860 [ 794.579811][T23275] do_syscall_64+0x166/0x520 [ 794.579840][T23275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.579865][T23275] ? clear_bhb_loop+0x70/0xc0 [ 794.579894][T23275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.579918][T23275] RIP: 0033:0x7f3ff1d9e159 [ 794.579939][T23275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.579960][T23275] RSP: 002b:00007f3ff2c9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.579985][T23275] RAX: ffffffffffffffda RBX: 00007f3ff2026090 RCX: 00007f3ff1d9e159 [ 794.580003][T23275] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 794.580018][T23275] RBP: 00007f3ff2c9c090 R08: 0000000000000000 R09: 0000000000000000 [ 794.580032][T23275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.580047][T23275] R13: 00007f3ff2026128 R14: 00007f3ff2026090 R15: 00007ffddb5f70e8 [ 794.580084][T23275] [ 794.957333][T23274] bond3: Unable to set down delay as MII monitoring is disabled [ 794.963866][T23274] bond3 (unregistering): Released all slaves [ 794.992460][T23279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5593'. [ 795.305408][T23287] IPv6: sit2: Disabled Multicast RS [ 795.332825][T23287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5597'. [ 795.332863][T23287] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 795.577343][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5598'. [ 795.622175][T23296] netlink: 'syz.0.5599': attribute type 4 has an invalid length. [ 795.622202][T23296] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5599'. [ 795.755013][T23298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.796978][T23301] syzkaller0: create flow: hash 911077765 index 1 [ 795.830652][T23302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5603'. [ 795.832863][T23306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5604'. [ 795.962648][T23306] vlan2: entered promiscuous mode [ 796.258822][T23321] netlink: 'syz.2.5606': attribute type 27 has an invalid length. [ 796.348528][T10547] syzkaller0: tun_net_xmit 76 [ 796.348726][T10547] syzkaller0: tun_net_xmit 48 [ 796.351828][T23297] syzkaller0: delete flow: hash 911077765 index 1 [ 796.352702][T23328] x_tables: duplicate underflow at hook 2 [ 796.728668][ T7968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.728829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.260548][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.606912][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 799.996090][T23337] syzkaller0: entered promiscuous mode [ 799.996120][T23337] syzkaller0: entered allmulticast mode [ 800.167213][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5609'. [ 800.172737][T23351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5609'. [ 800.293998][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.713867][T23374] lo speed is unknown, defaulting to 1000 [ 800.714266][T23374] lo speed is unknown, defaulting to 1000 [ 800.747516][T23374] lo speed is unknown, defaulting to 1000 [ 800.748874][T23374] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 800.748918][T23374] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 800.748974][T23374] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 800.760507][T23376] netlink: 'syz.3.5616': attribute type 20 has an invalid length. [ 800.760572][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5616'. [ 800.853350][T23376] netlink: 'syz.3.5616': attribute type 20 has an invalid length. [ 800.853374][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5616'. [ 800.853739][T10547] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.854003][T10547] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.854074][T10547] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.854119][T10547] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.858149][T23374] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 800.859626][T23379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5615'. [ 800.859647][T23379] tipc: Invalid UDP bearer configuration [ 800.859689][T23379] tipc: Enabling of bearer rejected, failed to enable media [ 800.869237][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5615'. [ 800.996667][T23378] syzkaller0: entered promiscuous mode [ 800.996694][T23378] syzkaller0: entered allmulticast mode [ 801.019590][T23374] lo speed is unknown, defaulting to 1000 [ 801.021733][T23374] lo speed is unknown, defaulting to 1000 [ 801.023753][T23374] lo speed is unknown, defaulting to 1000 [ 801.050186][T23374] lo speed is unknown, defaulting to 1000 [ 801.051861][T23374] lo speed is unknown, defaulting to 1000 [ 801.053844][T23374] lo speed is unknown, defaulting to 1000 [ 801.384708][T23392] nbd: must specify a device to reconfigure [ 801.729458][T23409] syzkaller0: create flow: hash 911077765 index 1 [ 802.011884][T23396] syzkaller0: delete flow: hash 911077765 index 1 [ 802.034419][T23420] x_tables: duplicate underflow at hook 2 [ 802.453230][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.453395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.328004][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.755826][T23428] tipc: MTU too low for tipc bearer [ 805.946761][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5632'. [ 805.998689][T23448] FAULT_INJECTION: forcing a failure. [ 805.998689][T23448] name failslab, interval 1, probability 0, space 0, times 0 [ 805.998726][T23448] CPU: 0 UID: 0 PID: 23448 Comm: syz.2.5634 Not tainted syzkaller #0 PREEMPT(full) [ 805.998752][T23448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 805.998767][T23448] Call Trace: [ 805.998776][T23448] [ 805.998786][T23448] dump_stack_lvl+0xe8/0x150 [ 805.998824][T23448] should_fail_ex+0x410/0x560 [ 805.998857][T23448] should_failslab+0xa8/0x100 [ 805.998887][T23448] ? skb_clone+0x212/0x3a0 [ 805.998920][T23448] kmem_cache_alloc_noprof+0xa1/0x600 [ 805.998959][T23448] ? skb_clone+0x212/0x3a0 [ 805.998998][T23448] skb_clone+0x212/0x3a0 [ 805.999034][T23448] bpf_clone_redirect+0x170/0x4b0 [ 805.999069][T23448] ? bpf_test_run+0x1d1/0x830 [ 805.999111][T23448] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 805.999138][T23448] ? __kernel_text_address+0xd/0x30 [ 805.999168][T23448] ? arch_stack_walk+0xfb/0x150 [ 805.999202][T23448] ? __pfx___schedule+0x10/0x10 [ 805.999253][T23448] ? preempt_schedule_thunk+0x16/0x40 [ 805.999287][T23448] ? preempt_schedule_common+0x7f/0xd0 [ 805.999313][T23448] ? bpf_test_run+0x1d1/0x830 [ 805.999352][T23448] ? bpf_test_timer_continue+0x10c/0x320 [ 805.999379][T23448] bpf_test_run+0x354/0x830 [ 805.999435][T23448] ? __pfx_bpf_test_run+0x10/0x10 [ 805.999487][T23448] ? __kasan_krealloc+0xec/0x110 [ 805.999524][T23448] ? bpf_prog_test_run_skb+0x903/0x2230 [ 805.999558][T23448] ? convert___skb_to_skb+0x3d/0x5b0 [ 805.999595][T23448] bpf_prog_test_run_skb+0xe35/0x2230 [ 805.999652][T23448] ? __fget_files+0x3a2/0x420 [ 805.999684][T23448] ? __fget_files+0x2a/0x420 [ 805.999726][T23448] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 805.999762][T23448] bpf_prog_test_run+0x2c5/0x340 [ 805.999795][T23448] __sys_bpf+0xa22/0xd90 [ 805.999830][T23448] ? __pfx___sys_bpf+0x10/0x10 [ 805.999869][T23448] ? __fget_files+0x2a/0x420 [ 805.999919][T23448] ? ksys_write+0x242/0x270 [ 805.999955][T23448] ? __pfx_ksys_write+0x10/0x10 [ 805.999994][T23448] __x64_sys_bpf+0xba/0xd0 [ 806.000020][T23448] do_syscall_64+0x166/0x520 [ 806.000048][T23448] ? trace_irq_disable+0x3b/0x140 [ 806.000071][T23448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.000095][T23448] ? clear_bhb_loop+0x70/0xc0 [ 806.000133][T23448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.000156][T23448] RIP: 0033:0x7f7bd519e159 [ 806.000177][T23448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.000197][T23448] RSP: 002b:00007f7bd5fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 806.000223][T23448] RAX: ffffffffffffffda RBX: 00007f7bd5425fa0 RCX: 00007f7bd519e159 [ 806.000241][T23448] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 806.000256][T23448] RBP: 00007f7bd5fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 806.000272][T23448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 806.000286][T23448] R13: 00007f7bd5426038 R14: 00007f7bd5425fa0 R15: 00007ffe339e1a48 [ 806.000323][T23448] [ 806.314502][T23458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5636'. [ 806.379619][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.864558][T23474] sctp: [Deprecated]: syz.2.5637 (pid 23474) Use of int in max_burst socket option deprecated. [ 806.864558][T23474] Use struct sctp_assoc_value instead [ 807.064722][T23478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5640'. [ 807.170290][T23487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5641'. [ 807.241778][T23476] syzkaller1: entered promiscuous mode [ 807.241804][T23476] syzkaller1: entered allmulticast mode [ 807.290925][T23487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.291292][T23487] bond_slave_0: left promiscuous mode [ 807.302550][T23487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.313769][T23487] bond_slave_1: left promiscuous mode [ 807.327723][T23484] netlink: 'syz.0.5640': attribute type 1 has an invalid length. [ 807.327751][T23484] netlink: 'syz.0.5640': attribute type 2 has an invalid length. [ 807.327768][T23484] netlink: 'syz.0.5640': attribute type 3 has an invalid length. [ 807.327791][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5640'. [ 807.358871][T23487] bond0 (unregistering): Released all slaves [ 807.425264][T23489] bond3: entered allmulticast mode [ 807.462446][T23478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 807.469638][T23478] bond4: entered allmulticast mode [ 807.470045][T23478] bond3: (slave bond4): Enslaving as an active interface with an up link [ 807.635624][T23506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.727370][ T7968] nci: nci_rx_work: unknown MT 0x7 [ 807.855235][T23515] syzkaller0: entered promiscuous mode [ 807.855301][T23515] syzkaller0: entered allmulticast mode [ 807.894416][T23515] bond1: entered allmulticast mode [ 807.894441][T23515] wireguard0: entered allmulticast mode [ 807.914125][T23514] bond1: left allmulticast mode [ 807.914152][T23514] wireguard0: left allmulticast mode [ 808.103247][T23497] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 808.224517][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.224747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.316167][T23543] ip_tables: iptables: counters copy to user failed while replacing table [ 808.535864][T23548] FAULT_INJECTION: forcing a failure. [ 808.535864][T23548] name failslab, interval 1, probability 0, space 0, times 0 [ 808.535903][T23548] CPU: 1 UID: 0 PID: 23548 Comm: syz.4.5654 Not tainted syzkaller #0 PREEMPT(full) [ 808.535930][T23548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.535945][T23548] Call Trace: [ 808.535954][T23548] [ 808.535965][T23548] dump_stack_lvl+0xe8/0x150 [ 808.536005][T23548] should_fail_ex+0x410/0x560 [ 808.536046][T23548] ? __alloc_skb+0x1db/0x7a0 [ 808.536075][T23548] should_failslab+0xa8/0x100 [ 808.536106][T23548] ? __alloc_skb+0x1db/0x7a0 [ 808.536131][T23548] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 808.536169][T23548] ? __alloc_skb+0x18d/0x7a0 [ 808.536198][T23548] ? __alloc_skb+0x1db/0x7a0 [ 808.536234][T23548] __alloc_skb+0x1db/0x7a0 [ 808.536268][T23548] sctp_packet_transmit+0x2f2/0x2bb0 [ 808.536304][T23548] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 808.536340][T23548] ? sctp_outq_flush+0x2be4/0x3380 [ 808.536377][T23548] ? sctp_outq_flush+0x2be4/0x3380 [ 808.536406][T23548] ? sctp_outq_flush+0x2be4/0x3380 [ 808.536439][T23548] sctp_outq_flush+0x2ec6/0x3380 [ 808.536467][T23548] ? sctp_chunkify+0x5a/0x260 [ 808.536488][T23548] ? kmem_cache_alloc_noprof+0xb1/0x600 [ 808.536529][T23548] ? sctp_chunkify+0x5a/0x260 [ 808.536549][T23548] ? kmem_cache_alloc_noprof+0x156/0x600 [ 808.536585][T23548] ? kasan_save_track+0x4f/0x80 [ 808.536609][T23548] ? kasan_save_track+0x3e/0x80 [ 808.536637][T23548] ? __kasan_slab_alloc+0x6c/0x80 [ 808.536667][T23548] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 808.536701][T23548] ? sctp_chunkify+0x5a/0x260 [ 808.536722][T23548] ? _sctp_make_chunk+0x122/0x290 [ 808.536743][T23548] ? sctp_make_strreset_req+0xfc/0x620 [ 808.536768][T23548] ? sctp_send_reset_streams+0x714/0xdc0 [ 808.536803][T23548] ? __pfx_sctp_outq_flush+0x10/0x10 [ 808.536832][T23548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.536869][T23548] ? sctp_outq_uncork+0x4d/0xa0 [ 808.536903][T23548] sctp_do_sm+0x55a1/0x5dd0 [ 808.536955][T23548] ? __pfx_sctp_do_sm+0x10/0x10 [ 808.537036][T23548] ? sctp_make_strreset_req+0x4f4/0x620 [ 808.537081][T23548] sctp_primitive_RECONF+0x98/0xc0 [ 808.537117][T23548] sctp_send_reconf+0x3e/0x70 [ 808.537151][T23548] sctp_send_reset_streams+0x9b6/0xdc0 [ 808.537198][T23548] sctp_setsockopt+0x9db/0x12c0 [ 808.537224][T23548] ? sock_common_setsockopt+0x36/0xc0 [ 808.537251][T23548] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 808.537280][T23548] do_sock_setsockopt+0x17c/0x1b0 [ 808.537318][T23548] __x64_sys_setsockopt+0x13d/0x1b0 [ 808.537355][T23548] do_syscall_64+0x166/0x520 [ 808.537383][T23548] ? trace_irq_disable+0x3b/0x140 [ 808.537406][T23548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.537431][T23548] ? clear_bhb_loop+0x70/0xc0 [ 808.537461][T23548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.537484][T23548] RIP: 0033:0x7fdfc759e159 [ 808.537506][T23548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.537527][T23548] RSP: 002b:00007fdfc8460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 808.537553][T23548] RAX: ffffffffffffffda RBX: 00007fdfc7825fa0 RCX: 00007fdfc759e159 [ 808.537571][T23548] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 808.537586][T23548] RBP: 00007fdfc8460090 R08: 000000000000000a R09: 0000000000000000 [ 808.537601][T23548] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 808.537617][T23548] R13: 00007fdfc7826038 R14: 00007fdfc7825fa0 R15: 00007ffffad7d9e8 [ 808.537655][T23548] [ 808.933032][T23550] FAULT_INJECTION: forcing a failure. [ 808.933032][T23550] name failslab, interval 1, probability 0, space 0, times 0 [ 808.933069][T23550] CPU: 1 UID: 0 PID: 23550 Comm: syz.4.5655 Not tainted syzkaller #0 PREEMPT(full) [ 808.933096][T23550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.933111][T23550] Call Trace: [ 808.933121][T23550] [ 808.933131][T23550] dump_stack_lvl+0xe8/0x150 [ 808.933171][T23550] should_fail_ex+0x410/0x560 [ 808.933202][T23550] should_failslab+0xa8/0x100 [ 808.933230][T23550] ? skb_clone+0x212/0x3a0 [ 808.933263][T23550] kmem_cache_alloc_noprof+0xa1/0x600 [ 808.933302][T23550] ? skb_clone+0x212/0x3a0 [ 808.933341][T23550] skb_clone+0x212/0x3a0 [ 808.933376][T23550] bpf_clone_redirect+0x170/0x4b0 [ 808.933410][T23550] ? bpf_test_run+0x1d1/0x830 [ 808.933446][T23550] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 808.933473][T23550] ? __kernel_text_address+0xd/0x30 [ 808.933500][T23550] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 808.933525][T23550] ? arch_stack_walk+0xfb/0x150 [ 808.933558][T23550] ? lock_acquire+0x115/0x350 [ 808.933588][T23550] ? ktime_get+0x45/0x220 [ 808.933615][T23550] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 808.933640][T23550] ? lockdep_hardirqs_on+0x7b/0x110 [ 808.933668][T23550] ? ktime_get+0x45/0x220 [ 808.933687][T23550] ? seqcount_lockdep_reader_access+0xea/0x100 [ 808.933710][T23550] ? bpf_test_run+0x1d1/0x830 [ 808.933748][T23550] ? bpf_test_timer_continue+0x10c/0x320 [ 808.933780][T23550] bpf_test_run+0x354/0x830 [ 808.933838][T23550] ? __pfx_bpf_test_run+0x10/0x10 [ 808.933900][T23550] ? __kasan_krealloc+0xec/0x110 [ 808.933936][T23550] ? bpf_prog_test_run_skb+0x903/0x2230 [ 808.933971][T23550] ? convert___skb_to_skb+0x3d/0x5b0 [ 808.934009][T23550] bpf_prog_test_run_skb+0xe35/0x2230 [ 808.934162][T23550] ? __fget_files+0x3a2/0x420 [ 808.934248][T23550] ? __fget_files+0x2a/0x420 [ 808.934345][T23550] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 808.934435][T23550] bpf_prog_test_run+0x2c5/0x340 [ 808.934558][T23550] __sys_bpf+0xa22/0xd90 [ 808.934647][T23550] ? __pfx___sys_bpf+0x10/0x10 [ 808.934743][T23550] ? __fget_files+0x2a/0x420 [ 808.934876][T23550] ? ksys_write+0x242/0x270 [ 808.934965][T23550] ? __pfx_ksys_write+0x10/0x10 [ 808.935076][T23550] __x64_sys_bpf+0xba/0xd0 [ 808.935143][T23550] do_syscall_64+0x166/0x520 [ 808.935218][T23550] ? trace_irq_disable+0x3b/0x140 [ 808.935286][T23550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.935349][T23550] ? clear_bhb_loop+0x70/0xc0 [ 808.935410][T23550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.935472][T23550] RIP: 0033:0x7fdfc759e159 [ 808.935537][T23550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.935597][T23550] RSP: 002b:00007fdfc8460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 808.935670][T23550] RAX: ffffffffffffffda RBX: 00007fdfc7825fa0 RCX: 00007fdfc759e159 [ 808.935712][T23550] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 808.935753][T23550] RBP: 00007fdfc8460090 R08: 0000000000000000 R09: 0000000000000000 [ 808.935794][T23550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 808.935834][T23550] R13: 00007fdfc7826038 R14: 00007fdfc7825fa0 R15: 00007ffffad7d9e8 [ 808.935929][T23550] [ 809.435061][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.612541][T23506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 810.873690][T23560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5659'. [ 810.873729][T23560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5659'. [ 810.878751][T23561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5659'. [ 810.878873][T23561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5659'. [ 811.021637][T23560] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5659'. [ 811.047450][T23562] netlink: 'syz.0.5659': attribute type 7 has an invalid length. [ 811.179239][T23567] syzkaller0: entered promiscuous mode [ 811.179265][T23567] syzkaller0: entered allmulticast mode [ 811.429704][T23590] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 811.568529][T23593] Cannot find set identified by id 0 to match [ 811.569156][T23593] x_tables: duplicate underflow at hook 3 [ 811.602612][T23590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5664'. [ 812.108905][T23612] Cannot find add_set index 0 as target [ 812.243109][T23619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5675'. [ 812.243206][T23619] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5675'. [ 812.335604][T23625] FAULT_INJECTION: forcing a failure. [ 812.335604][T23625] name failslab, interval 1, probability 0, space 0, times 0 [ 812.335642][T23625] CPU: 1 UID: 0 PID: 23625 Comm: syz.0.5678 Not tainted syzkaller #0 PREEMPT(full) [ 812.335669][T23625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.335688][T23625] Call Trace: [ 812.335698][T23625] [ 812.335708][T23625] dump_stack_lvl+0xe8/0x150 [ 812.335747][T23625] should_fail_ex+0x410/0x560 [ 812.335786][T23625] should_failslab+0xa8/0x100 [ 812.335816][T23625] ? skb_clone+0x212/0x3a0 [ 812.335848][T23625] kmem_cache_alloc_noprof+0xa1/0x600 [ 812.335893][T23625] ? skb_clone+0x212/0x3a0 [ 812.335932][T23625] skb_clone+0x212/0x3a0 [ 812.335969][T23625] bpf_clone_redirect+0x170/0x4b0 [ 812.336005][T23625] ? bpf_test_run+0x1d1/0x830 [ 812.336041][T23625] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 812.336067][T23625] ? __kernel_text_address+0xd/0x30 [ 812.336095][T23625] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 812.336119][T23625] ? arch_stack_walk+0xfb/0x150 [ 812.336154][T23625] ? lock_acquire+0x115/0x350 [ 812.336195][T23625] ? ktime_get+0x45/0x220 [ 812.336222][T23625] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 812.336247][T23625] ? lockdep_hardirqs_on+0x7b/0x110 [ 812.336275][T23625] ? ktime_get+0x45/0x220 [ 812.336294][T23625] ? seqcount_lockdep_reader_access+0xea/0x100 [ 812.336316][T23625] ? bpf_test_run+0x1d1/0x830 [ 812.336354][T23625] ? bpf_test_timer_continue+0x10c/0x320 [ 812.336380][T23625] bpf_test_run+0x354/0x830 [ 812.336438][T23625] ? __pfx_bpf_test_run+0x10/0x10 [ 812.336490][T23625] ? __kasan_krealloc+0xec/0x110 [ 812.336527][T23625] ? bpf_prog_test_run_skb+0x903/0x2230 [ 812.336562][T23625] ? convert___skb_to_skb+0x3d/0x5b0 [ 812.336601][T23625] bpf_prog_test_run_skb+0xe35/0x2230 [ 812.336659][T23625] ? __fget_files+0x3a2/0x420 [ 812.336691][T23625] ? __fget_files+0x2a/0x420 [ 812.336729][T23625] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 812.336765][T23625] bpf_prog_test_run+0x2c5/0x340 [ 812.336800][T23625] __sys_bpf+0xa22/0xd90 [ 812.336836][T23625] ? __pfx___sys_bpf+0x10/0x10 [ 812.336876][T23625] ? __fget_files+0x2a/0x420 [ 812.336928][T23625] ? ksys_write+0x242/0x270 [ 812.336966][T23625] ? __pfx_ksys_write+0x10/0x10 [ 812.337008][T23625] __x64_sys_bpf+0xba/0xd0 [ 812.337041][T23625] do_syscall_64+0x166/0x520 [ 812.337069][T23625] ? trace_irq_disable+0x3b/0x140 [ 812.337093][T23625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.337118][T23625] ? clear_bhb_loop+0x70/0xc0 [ 812.337148][T23625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.337172][T23625] RIP: 0033:0x7f23b899e159 [ 812.337207][T23625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.337228][T23625] RSP: 002b:00007f23b990d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 812.337255][T23625] RAX: ffffffffffffffda RBX: 00007f23b8c25fa0 RCX: 00007f23b899e159 [ 812.337273][T23625] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 812.337289][T23625] RBP: 00007f23b990d090 R08: 0000000000000000 R09: 0000000000000000 [ 812.337304][T23625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.337319][T23625] R13: 00007f23b8c26038 R14: 00007f23b8c25fa0 R15: 00007ffe20072b18 [ 812.337357][T23625] [ 812.462457][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.117510][T23641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5682'. [ 813.967753][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.967923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.486941][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.527121][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.727644][ T7968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.728097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.571411][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.616800][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.487968][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.488334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.656870][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.687026][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.249050][T17596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.249289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.739555][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.767741][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.007153][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.007366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.808664][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.126944][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.127175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.847599][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.888521][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.167553][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.167799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.927427][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.969442][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.367530][ T7968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.367739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.008391][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.048178][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.127484][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.127871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.093541][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.887245][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.887471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.137196][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.183986][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.007468][T17600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.007687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.206851][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.287565][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 870.287649][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 873.247589][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.766998][T17600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.767238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.287363][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.023569][T23655] syzkaller0: entered promiscuous mode [ 879.023597][T23655] syzkaller0: entered allmulticast mode [ 879.151703][T23662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5691'. [ 879.221314][T23665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5691'. [ 879.315720][T23669] netlink: 'syz.2.5694': attribute type 30 has an invalid length. [ 879.334675][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.401858][T23665] macvtap1: entered promiscuous mode [ 879.401888][T23665] vlan0: entered promiscuous mode [ 879.402501][T23665] macvtap1: entered allmulticast mode [ 879.402521][T23665] vlan0: entered allmulticast mode [ 879.402535][T23665] veth0_vlan: entered allmulticast mode [ 879.733452][T23689] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5698'. [ 880.138675][T23704] IPv6: Can't replace route, no match found [ 880.138916][T23706] netlink: 'syz.3.5703': attribute type 4 has an invalid length. [ 880.138937][T23706] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5703'. [ 880.143949][T23707] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 880.146004][T23706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5703'. [ 880.218641][T23707] Dead loop on virtual device ip6_vti0 (net 220), fix it urgently! [ 880.274713][T23711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5706'. [ 880.349990][T23713] FAULT_INJECTION: forcing a failure. [ 880.349990][T23713] name failslab, interval 1, probability 0, space 0, times 0 [ 880.350034][T23713] CPU: 0 UID: 0 PID: 23713 Comm: syz.4.5705 Not tainted syzkaller #0 PREEMPT(full) [ 880.350060][T23713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.350077][T23713] Call Trace: [ 880.350087][T23713] [ 880.350098][T23713] dump_stack_lvl+0xe8/0x150 [ 880.350138][T23713] should_fail_ex+0x410/0x560 [ 880.350179][T23713] should_failslab+0xa8/0x100 [ 880.350218][T23713] ? dst_alloc+0x105/0x170 [ 880.350255][T23713] kmem_cache_alloc_noprof+0xa1/0x600 [ 880.350295][T23713] ? ip_tunnel_xmit+0xaf2/0x2040 [ 880.350415][T23713] ? ipgre_xmit+0x8d2/0xcb0 [ 880.350472][T23713] ? dev_hard_start_xmit+0x2cd/0x830 [ 880.350506][T23713] ? __bpf_redirect+0xa76/0x1250 [ 880.350531][T23713] ? dst_alloc+0x105/0x170 [ 880.350574][T23713] dst_alloc+0x105/0x170 [ 880.350606][T23713] ? ip_check_mc_rcu+0x49f/0x7c0 [ 880.350672][T23713] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 880.350708][T23713] ? ip_route_output_key_hash+0xd8/0x2a0 [ 880.350734][T23713] ip_route_output_key_hash+0x18d/0x2a0 [ 880.350761][T23713] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 880.350795][T23713] ? __asan_memset+0x22/0x50 [ 880.350836][T23713] ip_route_output_flow+0x2a/0x150 [ 880.350876][T23713] ip_tunnel_xmit+0x6ce/0x2040 [ 880.350915][T23713] ? ip_tunnel_xmit+0xa0/0x2040 [ 880.350966][T23713] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 880.351010][T23713] ? __pfx_gre_build_header+0x10/0x10 [ 880.351047][T23713] ? skb_network_protocol+0x23d/0x400 [ 880.351080][T23713] ? iptunnel_handle_offloads+0x2fd/0x630 [ 880.351117][T23713] ipgre_xmit+0x8d2/0xcb0 [ 880.351149][T23713] ? unwind_get_return_address+0x4d/0x90 [ 880.351192][T23713] ? __pfx_ipgre_xmit+0x10/0x10 [ 880.351237][T23713] dev_hard_start_xmit+0x2cd/0x830 [ 880.351291][T23713] __dev_queue_xmit+0x14c0/0x3820 [ 880.351324][T23713] ? bpf_prog_test_run+0x2c5/0x340 [ 880.351351][T23713] ? __sys_bpf+0xa22/0xd90 [ 880.351388][T23713] ? __dev_queue_xmit+0x29b/0x3820 [ 880.351435][T23713] ? __pfx___dev_queue_xmit+0x10/0x10 [ 880.351526][T23713] __bpf_redirect+0xa76/0x1250 [ 880.351569][T23713] bpf_clone_redirect+0x319/0x4b0 [ 880.351608][T23713] ? bpf_test_run+0x1d1/0x830 [ 880.351644][T23713] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 880.351671][T23713] ? __kernel_text_address+0xd/0x30 [ 880.351700][T23713] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 880.351723][T23713] ? arch_stack_walk+0xfb/0x150 [ 880.351757][T23713] ? lock_acquire+0x115/0x350 [ 880.351798][T23713] ? ktime_get+0x45/0x220 [ 880.351824][T23713] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 880.351850][T23713] ? lockdep_hardirqs_on+0x7b/0x110 [ 880.351878][T23713] ? ktime_get+0x45/0x220 [ 880.351898][T23713] ? seqcount_lockdep_reader_access+0xea/0x100 [ 880.351923][T23713] ? bpf_test_run+0x1d1/0x830 [ 880.351961][T23713] ? bpf_test_timer_continue+0x10c/0x320 [ 880.351989][T23713] bpf_test_run+0x354/0x830 [ 880.352049][T23713] ? __pfx_bpf_test_run+0x10/0x10 [ 880.352101][T23713] ? __kasan_krealloc+0xec/0x110 [ 880.352139][T23713] ? bpf_prog_test_run_skb+0x903/0x2230 [ 880.352180][T23713] ? convert___skb_to_skb+0x3d/0x5b0 [ 880.352218][T23713] bpf_prog_test_run_skb+0xe35/0x2230 [ 880.352277][T23713] ? __fget_files+0x3a2/0x420 [ 880.352309][T23713] ? __fget_files+0x2a/0x420 [ 880.352346][T23713] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 880.352383][T23713] bpf_prog_test_run+0x2c5/0x340 [ 880.352416][T23713] __sys_bpf+0xa22/0xd90 [ 880.352457][T23713] ? __pfx___sys_bpf+0x10/0x10 [ 880.352497][T23713] ? __fget_files+0x2a/0x420 [ 880.352549][T23713] ? ksys_write+0x242/0x270 [ 880.352587][T23713] ? __pfx_ksys_write+0x10/0x10 [ 880.352629][T23713] __x64_sys_bpf+0xba/0xd0 [ 880.352656][T23713] do_syscall_64+0x166/0x520 [ 880.352685][T23713] ? trace_irq_disable+0x3b/0x140 [ 880.352709][T23713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.352733][T23713] ? clear_bhb_loop+0x70/0xc0 [ 880.352763][T23713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.352787][T23713] RIP: 0033:0x7fdfc759e159 [ 880.352809][T23713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.352830][T23713] RSP: 002b:00007fdfc8460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.352856][T23713] RAX: ffffffffffffffda RBX: 00007fdfc7825fa0 RCX: 00007fdfc759e159 [ 880.352880][T23713] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 880.352895][T23713] RBP: 00007fdfc8460090 R08: 0000000000000000 R09: 0000000000000000 [ 880.352911][T23713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 880.352925][T23713] R13: 00007fdfc7826038 R14: 00007fdfc7825fa0 R15: 00007ffffad7d9e8 [ 880.352964][T23713] [ 880.543060][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 880.545755][T17590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.546324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.571569][T23747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5719'. [ 881.600802][T23747] vlan2: entered promiscuous mode [ 881.870559][T23756] IPv6: Can't replace route, no match found [ 881.870787][T23756] IPv6: Can't replace route, no match found [ 881.873775][T23756] IPv6: Can't replace route, no match found [ 881.874025][T23756] IPv6: Can't replace route, no match found [ 882.253022][T18102] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 882.265265][T23780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5731'. [ 882.265295][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5731'. [ 882.413372][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.422349][T23773] netlink: 'syz.0.5726': attribute type 1 has an invalid length. [ 882.422372][T23773] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5726'. [ 882.433854][T23773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 882.557110][T23793] syzkaller0: entered promiscuous mode [ 882.557142][T23793] syzkaller0: entered allmulticast mode [ 882.660638][T23794] C: renamed from lo (while UP) [ 882.675545][T23794] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 882.958001][T23809] xt_hashlimit: size too large, truncated to 1048576 [ 883.054890][T23815] netlink: 'syz.2.5745': attribute type 1 has an invalid length. [ 883.117571][T23815] bond2: (slave gretap1): making interface the new active one [ 883.118629][T23815] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 883.270221][T23824] batman_adv: batadv0: Adding interface: syzkaller0 [ 883.270244][T23824] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.270281][T23824] batman_adv: batadv0: Interface activated: syzkaller0 [ 884.177318][T23850] __nla_validate_parse: 7 callbacks suppressed [ 884.177339][T23850] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5751'. [ 884.185558][T23845] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 884.462353][T23824] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 884.554946][T23824] batman_adv: batadv0: Removing interface: syzkaller0 [ 884.594196][T23859] openvswitch: netlink: Multiple metadata blocks provided [ 884.664079][T23857] FAULT_INJECTION: forcing a failure. [ 884.664079][T23857] name failslab, interval 1, probability 0, space 0, times 0 [ 884.664117][T23857] CPU: 0 UID: 0 PID: 23857 Comm: syz.1.5754 Not tainted syzkaller #0 PREEMPT(full) [ 884.664143][T23857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.664159][T23857] Call Trace: [ 884.664168][T23857] [ 884.664179][T23857] dump_stack_lvl+0xe8/0x150 [ 884.664218][T23857] should_fail_ex+0x410/0x560 [ 884.664251][T23857] should_failslab+0xa8/0x100 [ 884.664281][T23857] ? skb_clone+0x212/0x3a0 [ 884.664315][T23857] kmem_cache_alloc_noprof+0xa1/0x600 [ 884.664353][T23857] ? skb_clone+0x212/0x3a0 [ 884.664393][T23857] skb_clone+0x212/0x3a0 [ 884.664430][T23857] __netlink_deliver_tap+0x413/0x860 [ 884.664479][T23857] ? netlink_deliver_tap+0x2e/0x1b0 [ 884.664516][T23857] netlink_deliver_tap+0x19c/0x1b0 [ 884.664554][T23857] netlink_unicast+0x781/0x940 [ 884.664599][T23857] netlink_sendmsg+0x813/0xb40 [ 884.664646][T23857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.664692][T23857] ? apparmor_socket_sendmsg+0x98/0x360 [ 884.664721][T23857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.664756][T23857] sock_sendmsg_nosec+0x13a/0x180 [ 884.664783][T23857] __sys_sendto+0x408/0x5a0 [ 884.664819][T23857] ? __pfx___sys_sendto+0x10/0x10 [ 884.664882][T23857] ? do_user_addr_fault+0xc4c/0x1340 [ 884.664911][T23857] __x64_sys_sendto+0xde/0x100 [ 884.664953][T23857] do_syscall_64+0x166/0x520 [ 884.664981][T23857] ? trace_irq_disable+0x3b/0x140 [ 884.665005][T23857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.665030][T23857] ? clear_bhb_loop+0x70/0xc0 [ 884.665060][T23857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.665084][T23857] RIP: 0033:0x7f3ff1d5e98e [ 884.665106][T23857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 884.665125][T23857] RSP: 002b:00007f3ff2cbbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 884.665151][T23857] RAX: ffffffffffffffda RBX: 00007f3ff2cbd6c0 RCX: 00007f3ff1d5e98e [ 884.665169][T23857] RDX: 0000000000000020 RSI: 00007f3ff2cbc000 RDI: 0000000000000006 [ 884.665186][T23857] RBP: 0000000000000000 R08: 00007f3ff2cbbf04 R09: 000000000000000c [ 884.665201][T23857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 884.665216][T23857] R13: 00007f3ff2cbbf58 R14: 00007f3ff2cbc000 R15: 0000000000000000 [ 884.665258][T23857] [ 885.170622][T23873] syzkaller0: entered promiscuous mode [ 885.170681][T23873] syzkaller0: entered allmulticast mode [ 885.251997][T23880] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5758'. [ 885.317103][T23886] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5759'. [ 885.317366][T23887] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5759'. [ 885.427235][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.428388][T23884] tc action pedit offset must be on 32 bit boundaries [ 885.502839][T23891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5763'. [ 885.502931][T23895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5763'. [ 885.572394][T23897] batman_adv: batadv0: Adding interface: syzkaller0 [ 885.572415][T23897] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.572453][T23897] batman_adv: batadv0: Interface activated: syzkaller0 [ 886.125267][T23904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5766'. [ 886.125298][T23904] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5766'. [ 886.125316][T23904] netlink: 'syz.0.5766': attribute type 5 has an invalid length. [ 886.125331][T23904] netlink: 'syz.0.5766': attribute type 6 has an invalid length. [ 886.125347][T23904] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5766'. [ 886.288752][ T7968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.288943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.292451][T23907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5767'. [ 886.292541][T23907] bridge_slave_1: left allmulticast mode [ 886.292563][T23907] bridge_slave_1: left promiscuous mode [ 886.292820][T23907] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.698604][T23907] bridge_slave_0: left allmulticast mode [ 886.698637][T23907] bridge_slave_0: left promiscuous mode [ 886.699179][T23907] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.828695][T23897] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 886.880936][T23897] batman_adv: batadv0: Removing interface: syzkaller0 [ 886.985125][T23917] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20002 [ 887.221570][T23925] netlink: 'syz.0.5773': attribute type 1 has an invalid length. [ 887.295557][T23934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.333653][T23925] 8021q: adding VLAN 0 to HW filter on device bond5 [ 887.441285][T23940] syzkaller0: entered promiscuous mode [ 887.441315][T23940] syzkaller0: entered allmulticast mode [ 887.860896][T23961] Bluetooth: hci0: unsupported parameter 5135 [ 887.860925][T23961] Bluetooth: hci0: unsupported parameter 8192 [ 887.860941][T23961] Bluetooth: hci0: unsupported parameter 5135 [ 887.860956][T23961] Bluetooth: hci0: unsupported parameter 8192 [ 887.939088][T23965] batman_adv: batadv0: Adding interface: syzkaller0 [ 887.939110][T23965] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.939147][T23965] batman_adv: batadv0: Interface activated: syzkaller0 [ 889.107561][T23993] xt_ecn: cannot match TCP bits for non-tcp packets [ 889.288690][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.478158][T23965] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 889.663612][T23965] batman_adv: batadv0: Removing interface: syzkaller0 [ 889.667253][T24011] __nla_validate_parse: 7 callbacks suppressed [ 889.667272][T24011] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5796'. [ 889.945185][T24022] netlink: 'syz.1.5798': attribute type 1 has an invalid length. [ 890.043904][T24022] 8021q: adding VLAN 0 to HW filter on device bond4 [ 890.207278][T24022] bond4: (slave bridge2): making interface the new active one [ 890.215435][T24022] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 890.325050][T24040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5803'. [ 890.346883][T24040] netlink: 'syz.0.5803': attribute type 1 has an invalid length. [ 890.402021][T24045] netlink: 'syz.3.5805': attribute type 27 has an invalid length. [ 890.540963][T24052] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5808'. [ 890.561164][T24052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5808'. [ 890.562136][T24052] team0: entered promiscuous mode [ 890.562159][T24052] team_slave_0: entered promiscuous mode [ 890.562368][T24052] team_slave_1: entered promiscuous mode [ 890.857213][T24061] netlink: 'syz.2.5812': attribute type 1 has an invalid length. [ 890.857247][T24061] netlink: 'syz.2.5812': attribute type 1 has an invalid length. [ 890.862525][T24063] netlink: 'syz.3.5813': attribute type 1 has an invalid length. [ 890.994917][T24061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 891.084899][T24072] netlink: 'syz.4.5814': attribute type 1 has an invalid length. [ 891.202730][T24072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5814'. [ 891.217245][T24080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5816'. [ 891.244943][T24075] 8021q: adding VLAN 0 to HW filter on device bond3 [ 891.248768][T24075] bond2: (slave bond3): making interface the new active one [ 891.249362][T24075] bond2: (slave bond3): Enslaving as an active interface with an up link [ 891.284376][T24072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 891.407875][T24071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5815'. [ 891.407907][T24071] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5815'. [ 891.477590][T24080] team0: Port device team_slave_0 removed [ 891.484960][T24078] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5815'. [ 891.484991][T24078] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5815'. [ 892.064691][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.065144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.087256][T24111] syzkaller0: entered promiscuous mode [ 892.087283][T24111] syzkaller0: entered allmulticast mode [ 892.388865][ T8508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.690835][T24150] pim6reg: entered allmulticast mode [ 893.104396][T24161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 893.148334][T24154] vlan3: entered promiscuous mode [ 893.148360][T24154] bond3: entered promiscuous mode [ 893.148566][T24154] vlan3: entered allmulticast mode [ 893.148590][T24154] bond3: entered allmulticast mode [ 893.195968][T24166] bond3: (slave gtp0): refused to change device type [ 893.260281][T24168] syzkaller0: entered promiscuous mode [ 893.260306][T24168] syzkaller0: entered allmulticast mode [ 893.571303][T24188] x_tables: duplicate entry at hook 4 [ 893.914856][T24197] syzkaller1: entered promiscuous mode [ 893.914886][T24197] syzkaller1: entered allmulticast mode [ 894.045259][T24210] xt_hashlimit: size too large, truncated to 1048576 [ 894.360463][T24228] v: renamed from veth0_vlan (while UP) [ 894.410654][T24226] syzkaller0: entered promiscuous mode [ 894.410692][T24226] syzkaller0: entered allmulticast mode [ 895.275852][T24274] __nla_validate_parse: 75 callbacks suppressed [ 895.275916][T24274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5871'. [ 895.371412][T24276] syzkaller0: entered promiscuous mode [ 895.371440][T24276] syzkaller0: entered allmulticast mode [ 895.460978][ T8508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.586764][T24278] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 895.650054][T24286] x_tables: duplicate underflow at hook 2 [ 895.921214][T24292] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5880'. [ 896.128434][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5885'. [ 896.129336][T24311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5885'. [ 896.359152][T24317] syzkaller0: entered promiscuous mode [ 896.360124][T24317] syzkaller0: entered allmulticast mode [ 896.545411][T24324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.572416][T24322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5884'. [ 896.769614][T24322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5884'. [ 897.148072][T24352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5895'. [ 897.246047][T24358] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5898'. [ 897.257072][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5898'. [ 897.257099][T24358] openvswitch: netlink: Flow actions attr not present in new flow. [ 897.450853][T24363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 897.487669][T24369] syzkaller0: entered promiscuous mode [ 897.487696][T24369] syzkaller0: entered allmulticast mode [ 897.627841][T24377] netlink: 'syz.0.5905': attribute type 1 has an invalid length. [ 897.722167][T24380] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5907'. [ 897.722299][T24380] macvlan0: entered promiscuous mode [ 897.812743][T17600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.812961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.884368][T24391] xt_hashlimit: size too large, truncated to 1048576 [ 898.402212][T24416] netlink: 'syz.2.5919': attribute type 6 has an invalid length. [ 898.441695][T24418] syzkaller0: entered promiscuous mode [ 898.441722][T24418] syzkaller0: entered allmulticast mode [ 898.541535][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.576874][T24425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.114870][T23882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 899.126590][T23882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 899.156791][T23882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 899.158041][T23882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 899.160009][T23882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 900.227952][T24471] syzkaller0: entered promiscuous mode [ 900.227987][T24471] syzkaller0: entered allmulticast mode [ 900.430899][T10548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 54099 - 0 [ 900.572725][T24487] __nla_validate_parse: 28 callbacks suppressed [ 900.572749][T24487] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5936'. [ 900.627902][T10548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 54099 - 0 [ 900.917269][T10548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 54099 - 0 [ 901.112908][T10548] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 54099 - 0 [ 901.148535][T24438] C speed is unknown, defaulting to 1000 [ 901.266538][T23882] Bluetooth: hci3: command tx timeout [ 901.444294][T24520] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 901.582290][ T8508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.609297][T10548] pim6reg: left allmulticast mode [ 901.611559][T10548] batman_adv: batadv0: Interface deactivated: gretap1 [ 901.974075][T10548] batman_adv: batadv0: Removing interface: gretap1 [ 902.051283][T10548] bond0 (unregistering): left promiscuous mode [ 902.051313][T10548] bond_slave_0: left promiscuous mode [ 902.051543][T10548] bond_slave_1: left promiscuous mode [ 902.054957][T10548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.088197][T10548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.089159][T10548] bond0 (unregistering): Released all slaves [ 902.113640][T10548] bond1 (unregistering): Released all slaves [ 902.134349][T10548] bond2 (unregistering): Released all slaves [ 902.171013][T10548] bond3 (unregistering): (slave bond4): Releasing backup interface [ 902.171990][T10548] bond4 (unregistering): left allmulticast mode [ 902.172295][T10548] bond3 (unregistering): Released all slaves [ 902.208390][T10548] bond4 (unregistering): Released all slaves [ 902.235498][T10548] bond5 (unregistering): Released all slaves [ 902.269408][T10548] bond6 (unregistering): Released all slaves [ 902.303118][T24532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5947'. [ 902.461244][T10548] tipc: Disabling bearer [ 902.465370][T10548] tipc: Left network mode [ 902.548892][T10548] IPVS: stopping backup sync thread 23845 ... [ 902.821197][T24562] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5952'. [ 902.823474][T24562] 8021q: VLANs not supported on gre0 [ 902.825649][T24562] xt_ecn: cannot match TCP bits for non-tcp packets [ 902.906636][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 903.054534][T24555] syzkaller0: entered promiscuous mode [ 903.054562][T24555] syzkaller0: entered allmulticast mode [ 903.126757][T24570] netlink: 542 bytes leftover after parsing attributes in process `syz.2.5954'. [ 903.131343][T24570] netlink: 'syz.2.5954': attribute type 64 has an invalid length. [ 903.343745][T23882] Bluetooth: hci3: command tx timeout [ 903.567538][T17596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.567775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.607140][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.413900][T23882] Bluetooth: hci3: command tx timeout [ 907.496578][ T9] C speed is unknown, defaulting to 1000 [ 907.499980][T23882] Bluetooth: hci3: command tx timeout [ 907.503542][ T9] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 907.546953][T24602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5960'. [ 907.658360][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.706510][T24605] batman_adv: batadv0: Adding interface: syzkaller0 [ 907.706533][T24605] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.706570][T24605] batman_adv: batadv0: Interface activated: syzkaller0 [ 907.788575][T24597] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 907.872438][T24597] batman_adv: batadv0: Removing interface: syzkaller0 [ 908.137575][T10548] batadv0: left promiscuous mode [ 908.143929][T10548] hsr_slave_0: left promiscuous mode [ 908.144918][T10548] hsr_slave_1: left promiscuous mode [ 908.146028][T10548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.623766][T10548] team0 (unregistering): Port device team_slave_1 removed [ 908.662303][T10548] team0 (unregistering): Port device team_slave_0 removed [ 908.852282][T10548] team0 (unregistering): Port device dummy0 removed [ 908.942695][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 909.093108][T24652] Cannot find add_set index 0 as target [ 909.260006][T24438] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.263594][T24438] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.263775][T24438] bridge_slave_0: entered allmulticast mode [ 909.278257][T24438] bridge_slave_0: entered promiscuous mode [ 909.285859][T24438] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.285976][T24438] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.286134][T24438] bridge_slave_1: entered allmulticast mode [ 909.313884][T24438] bridge_slave_1: entered promiscuous mode [ 909.339818][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.340030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.588803][T24663] team0 (unregistering): Port device team_slave_0 removed [ 909.669676][T24663] team0 (unregistering): Port device team_slave_1 removed [ 909.714955][T24669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5973'. [ 909.745238][T24438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.847354][T24674] netlink: 'syz.1.5974': attribute type 1 has an invalid length. [ 909.847383][T24674] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5974'. [ 909.848119][T24674] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5974'. [ 909.898290][T24671] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 909.922693][T24671] bond5 (unregistering): Released all slaves [ 909.924596][T24680] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.5976'. [ 910.076187][T24438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.153560][T24669] batman_adv: batadv0: Adding interface: syzkaller0 [ 910.153585][T24669] batman_adv: batadv0: Interface activated: syzkaller0 [ 910.161905][T24680] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 910.193608][T24680] 0ªX¹¦Dö»: entered allmulticast mode [ 910.223951][T24438] team0: Port device team_slave_0 added [ 910.226920][T24438] team0: Port device team_slave_1 added [ 910.387433][T24668] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 910.468382][T24668] batman_adv: batadv0: Removing interface: syzkaller0 [ 910.567760][T24438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.567780][T24438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.567811][T24438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.570131][T24438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.570157][T24438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.570186][T24438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.696256][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.708044][T10548] IPVS: stop unused estimator thread 0... [ 910.749392][T24708] batman_adv: batadv0: Adding interface: syzkaller0 [ 910.749413][T24708] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.749450][T24708] batman_adv: batadv0: Interface activated: syzkaller0 [ 910.749470][T24708] batadv0: mtu less than device minimum [ 910.750841][T24708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.752245][T24708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.753649][T24708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.755030][T24708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.756461][T24708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.767087][T24708] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 911.011154][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 911.013392][T24700] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 911.179410][T24700] batman_adv: batadv0: Removing interface: syzkaller0 [ 911.232396][T24438] hsr_slave_0: entered promiscuous mode [ 911.233474][T24438] hsr_slave_1: entered promiscuous mode [ 911.234407][T24438] debugfs: 'hsr0' already exists in 'hsr' [ 911.234430][T24438] Cannot create hsr debugfs directory [ 911.264635][T24718] netlink: 18 bytes leftover after parsing attributes in process `syz.4.5984'. [ 911.380763][T24725] netlink: 18 bytes leftover after parsing attributes in process `syz.4.5984'. [ 912.670490][T24773] syzkaller0: entered promiscuous mode [ 912.670705][T24773] syzkaller0: entered allmulticast mode [ 913.121986][T24790] batman_adv: batadv0: Adding interface: syzkaller0 [ 913.122021][T24790] batman_adv: batadv0: Interface activated: syzkaller0 [ 914.369383][ T7968] net_ratelimit: 35 callbacks suppressed [ 914.369405][ T7968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.369729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.428182][T24786] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 914.700839][T24786] batman_adv: batadv0: Removing interface: syzkaller0 [ 915.035819][T24841] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6005'. [ 915.090352][T24841] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6005'. [ 915.248974][T24852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6005'. [ 915.328162][T24858] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6008'. [ 915.603801][T24871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6003'. [ 915.642813][T24438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 915.650316][T24438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 915.651532][T24438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 915.655677][T24438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 915.687131][T24438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 915.714434][T24438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 915.726534][T24438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 915.756385][T24438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 915.950349][T24438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.990940][T24438] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.997548][T17590] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.997661][T17590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.045130][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.045246][ T7968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.146225][T24438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 916.312217][T24900] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6016'. [ 916.553491][T24905] syzkaller0: entered promiscuous mode [ 916.553520][T24905] syzkaller0: entered allmulticast mode [ 916.759935][T24911] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6018'. [ 917.101976][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.102820][T17590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.105269][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.106409][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.664220][T24438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.962980][T24952] syzkaller0: entered promiscuous mode [ 917.963008][T24952] syzkaller0: entered allmulticast mode [ 918.064334][T24438] veth0_vlan: entered promiscuous mode [ 918.189537][T24438] veth1_vlan: entered promiscuous mode [ 918.262854][T24972] bridge0: port 3(syz_tun) entered blocking state [ 918.262980][T24972] bridge0: port 3(syz_tun) entered disabled state [ 918.263268][T24972] syz_tun: entered allmulticast mode [ 918.273033][T24972] syz_tun: entered promiscuous mode [ 918.335814][T24438] veth0_macvtap: entered promiscuous mode [ 918.375997][T24438] veth1_macvtap: entered promiscuous mode [ 918.480559][T24438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.512101][T24438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.569256][ T7968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.573231][T10548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.573294][T10548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.573335][T10548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.870360][T24994] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6035'. [ 918.870392][T24994] openvswitch: netlink: IPv4 frag type 120 is out of range max 2 [ 918.976681][T10547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.976738][T10547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.053821][T17590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.053844][T17590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.458537][T25013] syzkaller0: entered promiscuous mode [ 919.458563][T25013] syzkaller0: entered allmulticast mode [ 919.589107][T17596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.589324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.109578][T18102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 920.114901][T18102] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 920.127484][ T8508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.128440][T18102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 920.152514][T18102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 920.160462][T18102] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 920.414939][T25046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6042'. [ 922.207477][T23882] Bluetooth: hci5: command tx timeout [ 922.257256][T25034] C speed is unknown, defaulting to 1000 [ 922.623192][T25026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.951780][T25034] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.952049][T25034] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.952498][T25034] bridge_slave_0: entered allmulticast mode [ 922.964091][T25034] bridge_slave_0: entered promiscuous mode [ 923.029822][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6049'. [ 923.042109][T25034] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.042219][T25034] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.042692][T25034] bridge_slave_1: entered allmulticast mode [ 923.044667][T25034] bridge_slave_1: entered promiscuous mode [ 923.175507][ T8508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.177700][T25034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.210604][T25034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.210734][T25127] syzkaller0: entered promiscuous mode [ 923.210754][T25127] syzkaller0: entered allmulticast mode [ 923.255898][T25135] syzkaller0: entered promiscuous mode [ 923.255923][T25135] syzkaller0: entered allmulticast mode [ 923.413639][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6055'. [ 923.413665][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6055'. [ 923.442680][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6055'. [ 923.442705][T25145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6055'. [ 923.444929][T25034] team0: Port device team_slave_0 added [ 923.448469][T25034] team0: Port device team_slave_1 added [ 923.507484][T25145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.508832][T25141] netlink: 'syz.1.6055': attribute type 4 has an invalid length. [ 923.508853][T25141] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6055'. [ 923.518340][T25145] bond5: (slave bond0): making interface the new active one [ 923.519434][T25145] bond5: (slave bond0): Enslaving as an active interface with an up link [ 923.590229][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6055'. [ 923.618709][T25141] .`: renamed from bond0 [ 923.625380][T25034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.625400][T25034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.625431][T25034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.680976][T25034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.680998][T25034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.681028][T25034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.839816][T25034] hsr_slave_0: entered promiscuous mode [ 923.840894][T25034] hsr_slave_1: entered promiscuous mode [ 923.841717][T25034] debugfs: 'hsr0' already exists in 'hsr' [ 923.841739][T25034] Cannot create hsr debugfs directory [ 923.989701][T25164] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6060'. [ 924.275354][T25034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.275451][T25034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.307054][T23882] Bluetooth: hci5: command tx timeout [ 924.312298][T25170] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6063'. [ 924.490221][T25034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.490263][T25034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.645499][T25175] syzkaller0: entered promiscuous mode [ 924.645527][T25175] syzkaller0: entered allmulticast mode [ 924.692153][T17596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.694236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.998854][T25034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.998899][T25034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.236750][T25034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.236818][T25034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.309414][T25187] sctp: [Deprecated]: syz.0.6067 (pid 25187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 925.309414][T25187] Use struct sctp_sack_info instead [ 925.311017][T25187] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 925.312633][T24831] IPVS: starting estimator thread 0... [ 925.359798][T25186] syzkaller0: entered promiscuous mode [ 925.359826][T25186] syzkaller0: entered allmulticast mode [ 925.361392][T25185] netlink: 'syz.0.6067': attribute type 2 has an invalid length. [ 925.366178][T25190] netlink: 'syz.0.6067': attribute type 2 has an invalid length. [ 925.419707][T25196] sctp: [Deprecated]: syz.0.6067 (pid 25196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 925.419707][T25196] Use struct sctp_sack_info instead [ 925.422850][T25190] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 925.436161][T25188] IPVS: using max 26 ests per chain, 62400 per kthread [ 925.623867][T25199] __nla_validate_parse: 5 callbacks suppressed [ 925.623889][T25199] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6068'. [ 926.014073][T25034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 926.064118][T25034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 926.065551][T25034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 926.069399][T25034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 926.071817][T25034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 926.115233][T25034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 926.116192][T25034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 926.166318][T25034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 926.226535][T24082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.386538][T23882] Bluetooth: hci5: command tx timeout [ 926.623938][T25034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.700296][T25034] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.703669][T25221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6075'. [ 926.722649][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.722936][T10548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.767715][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.767833][T10548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.087595][T25234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6079'. [ 927.427600][T25245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6081'. [ 927.797303][T25256] ipt_rpfilter: unknown options [ 928.449661][T23882] Bluetooth: hci5: command tx timeout [ 929.063433][T25265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6085'. [ 929.147326][T25274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6087'. [ 929.228432][T25265] team0 (unregistering): Port device team_slave_0 removed [ 929.247610][T25265] team0 (unregistering): Port device team_slave_1 removed [ 929.307635][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.092011][T25034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.247431][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6091'. [ 930.275212][T25034] veth0_vlan: entered promiscuous mode [ 930.333964][T25298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6092'. [ 930.369482][T25034] veth1_vlan: entered promiscuous mode [ 930.455159][T17590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.455392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.546419][T25034] veth0_macvtap: entered promiscuous mode [ 930.571172][T25034] veth1_macvtap: entered promiscuous mode [ 930.622735][T25034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.684956][T25034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.755287][T25309] netlink: 'syz.4.6096': attribute type 1 has an invalid length. [ 930.760479][T25309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6096'. [ 930.785802][T24831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.786076][T24831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.786359][T24831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.787032][T24831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.036523][T25313] tc_dump_action: action bad kind [ 931.110222][ T7968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.110247][ T7968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.263125][ T7968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.263150][ T7968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.482863][T25320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6100'. [ 931.566645][ T7968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.566988][ T7968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.611515][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.635584][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.768593][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.768953][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.007333][T25335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6105'. [ 932.007367][T25335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6105'. [ 932.007396][T25335] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6105'. [ 932.248453][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 932.253542][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 932.254609][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 932.255522][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 932.294884][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 932.379750][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.472577][T25359] netlink: 'syz.3.6108': attribute type 1 has an invalid length. [ 932.799045][T25363] bond4: (slave geneve2): making interface the new active one [ 932.799744][T25363] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 932.983614][T25376] syzkaller0: entered promiscuous mode [ 932.983817][T25376] syzkaller0: entered allmulticast mode [ 933.043531][T24829] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 933.044338][T24829] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 933.044384][T24829] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 933.044424][T24829] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 933.367783][T23882] Bluetooth: hci4: unexpected cc 0x2003 length: 0 < 9 [ 933.383381][T23882] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 933.745293][T25405] netlink: 'syz.2.6116': attribute type 4 has an invalid length. [ 935.424091][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.972346][T25452] syz_tun (unregistering): left allmulticast mode [ 935.972381][T25452] syz_tun (unregistering): left promiscuous mode [ 935.972495][T25452] bridge0: port 3(syz_tun) entered disabled state [ 936.229372][T24831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.229582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.301599][T25455] __nla_validate_parse: 43 callbacks suppressed [ 936.301621][T25455] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6126'. [ 936.301643][T25455] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6126'. [ 936.557253][T25467] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 936.764047][T25473] syzkaller0: entered promiscuous mode [ 936.764081][T25473] syzkaller0: entered allmulticast mode [ 937.287055][T25495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6133'. [ 937.412739][T23882] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 937.414089][T23882] Bluetooth: hci4: Injecting HCI hardware error event [ 937.436710][T23882] Bluetooth: hci4: hardware error 0x00 [ 937.441621][T25488] FAULT_INJECTION: forcing a failure. [ 937.441621][T25488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.441659][T25488] CPU: 1 UID: 0 PID: 25488 Comm: syz.2.6132 Not tainted syzkaller #0 PREEMPT(full) [ 937.441680][T25488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.441692][T25488] Call Trace: [ 937.441700][T25488] [ 937.441708][T25488] dump_stack_lvl+0xe8/0x150 [ 937.441740][T25488] should_fail_ex+0x410/0x560 [ 937.441768][T25488] _copy_from_user+0x2d/0xb0 [ 937.441794][T25488] __sys_sendto+0x2a9/0x5a0 [ 937.441819][T25488] ? ksys_write+0x1e6/0x270 [ 937.441852][T25488] ? __pfx___sys_sendto+0x10/0x10 [ 937.441872][T25488] ? __mutex_unlock_slowpath+0x731/0x900 [ 937.441919][T25488] ? rcu_is_watching+0x16/0xb0 [ 937.441949][T25488] __x64_sys_sendto+0xde/0x100 [ 937.441977][T25488] do_syscall_64+0x166/0x520 [ 937.442001][T25488] ? trace_irq_disable+0x3b/0x140 [ 937.442021][T25488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.442047][T25488] ? clear_bhb_loop+0x70/0xc0 [ 937.442078][T25488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.442099][T25488] RIP: 0033:0x7f2d60d9e159 [ 937.442117][T25488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.442134][T25488] RSP: 002b:00007f2d5eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 937.442155][T25488] RAX: ffffffffffffffda RBX: 00007f2d61026180 RCX: 00007f2d60d9e159 [ 937.442171][T25488] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000006 [ 937.442185][T25488] RBP: 00007f2d5eff6090 R08: 0000200000000140 R09: 0000000000000014 [ 937.442200][T25488] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 937.442213][T25488] R13: 00007f2d61026218 R14: 00007f2d61026180 R15: 00007ffc70ea72c8 [ 937.442244][T25488] [ 937.571421][T25481] syzkaller0: entered promiscuous mode [ 937.571487][T25481] syzkaller0: entered allmulticast mode [ 937.631339][T25484] syzkaller0: entered promiscuous mode [ 937.631405][T25484] syzkaller0: entered allmulticast mode [ 938.453975][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.656418][T25518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6139'. [ 939.861538][T25557] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6150'. [ 939.888438][T23882] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 940.171335][T25560] syzkaller0: entered promiscuous mode [ 940.171361][T25560] syzkaller0: entered allmulticast mode [ 940.178100][T25560] FAULT_INJECTION: forcing a failure. [ 940.178100][T25560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.178137][T25560] CPU: 0 UID: 0 PID: 25560 Comm: syz.1.6148 Not tainted syzkaller #0 PREEMPT(full) [ 940.178163][T25560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 940.178178][T25560] Call Trace: [ 940.178195][T25560] [ 940.178206][T25560] dump_stack_lvl+0xe8/0x150 [ 940.178245][T25560] should_fail_ex+0x410/0x560 [ 940.178276][T25560] _copy_from_iter+0x1d3/0x1660 [ 940.178306][T25560] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 940.178343][T25560] ? __pfx__copy_from_iter+0x10/0x10 [ 940.178373][T25560] ? dev_get_by_index+0x22/0x2d0 [ 940.178413][T25560] ? dev_get_by_index+0x22/0x2d0 [ 940.178454][T25560] packet_sendmsg+0x2eb0/0x4f80 [ 940.178485][T25560] ? lock_acquire+0x115/0x350 [ 940.178517][T25560] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 940.178553][T25560] ? __lock_acquire+0x747/0x2de0 [ 940.178590][T25560] ? __lock_acquire+0x747/0x2de0 [ 940.178621][T25560] ? kstrtouint+0x6e/0xe0 [ 940.178662][T25560] ? __pfx_packet_sendmsg+0x10/0x10 [ 940.178686][T25560] ? aa_sk_perm+0x713/0x900 [ 940.178719][T25560] ? debug_mutex_wake_waiter+0x50/0x230 [ 940.178755][T25560] ? __pfx_aa_sk_perm+0x10/0x10 [ 940.178787][T25560] ? aa_sock_msg_perm+0x144/0x210 [ 940.178821][T25560] ? apparmor_socket_sendmsg+0x98/0x360 [ 940.178848][T25560] ? __pfx_packet_sendmsg+0x10/0x10 [ 940.178872][T25560] sock_sendmsg_nosec+0x13a/0x180 [ 940.178898][T25560] __sys_sendto+0x408/0x5a0 [ 940.178924][T25560] ? ksys_write+0x1e6/0x270 [ 940.178961][T25560] ? __pfx___sys_sendto+0x10/0x10 [ 940.178986][T25560] ? __mutex_unlock_slowpath+0x731/0x900 [ 940.179047][T25560] ? __pfx_ksys_write+0x10/0x10 [ 940.179089][T25560] __x64_sys_sendto+0xde/0x100 [ 940.179121][T25560] do_syscall_64+0x166/0x520 [ 940.179150][T25560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.179174][T25560] ? clear_bhb_loop+0x70/0xc0 [ 940.179212][T25560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.179236][T25560] RIP: 0033:0x7f3ff1d9e159 [ 940.179259][T25560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.179280][T25560] RSP: 002b:00007f3ff2cbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 940.179306][T25560] RAX: ffffffffffffffda RBX: 00007f3ff2025fa0 RCX: 00007f3ff1d9e159 [ 940.179325][T25560] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000006 [ 940.179341][T25560] RBP: 00007f3ff2cbd090 R08: 0000200000000140 R09: 0000000000000014 [ 940.179358][T25560] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 940.179374][T25560] R13: 00007f3ff2026038 R14: 00007f3ff2025fa0 R15: 00007ffddb5f70e8 [ 940.179412][T25560] [ 941.059607][T25585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6155'. [ 941.356206][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.356543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.485426][T25590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6156'. [ 941.485469][T25590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6156'. [ 941.510542][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.545295][T25578] 8021q: adding VLAN 0 to HW filter on device bond5 [ 941.983718][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 942.336625][T25616] syzkaller0: entered promiscuous mode [ 942.336654][T25616] syzkaller0: entered allmulticast mode [ 944.532784][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.458485][T24829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.458981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.569125][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.607403][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.489044][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.489570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.647446][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.701595][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.703669][T24829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.703871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.729367][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.458303][T17590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.460890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.767476][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.807488][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.955690][T25644] wlan0 speed is unknown, defaulting to 1000 [ 966.955819][T25644] wlan0 speed is unknown, defaulting to 1000 [ 966.956795][T25644] wlan0 speed is unknown, defaulting to 1000 [ 966.958019][T25644] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 966.958058][T25644] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 966.958105][T25644] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 966.961753][T25644] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 967.054867][T25644] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 967.310025][T25644] wlan0 speed is unknown, defaulting to 1000 [ 967.313417][T25644] wlan0 speed is unknown, defaulting to 1000 [ 967.315403][T25644] wlan0 speed is unknown, defaulting to 1000 [ 967.317400][T25644] wlan0 speed is unknown, defaulting to 1000 [ 967.319415][T25644] wlan0 speed is unknown, defaulting to 1000 [ 967.426951][T25644] wlan0 speed is unknown, defaulting to 1000 [ 967.515399][T25644] wlan0 speed is unknown, defaulting to 1000 [ 967.831672][T25665] syzkaller0: entered promiscuous mode [ 967.831908][T25665] syzkaller0: entered allmulticast mode [ 967.928366][T25665] FAULT_INJECTION: forcing a failure. [ 967.928366][T25665] name failslab, interval 1, probability 0, space 0, times 0 [ 967.928405][T25665] CPU: 1 UID: 0 PID: 25665 Comm: syz.4.6168 Not tainted syzkaller #0 PREEMPT(full) [ 967.928432][T25665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 967.928448][T25665] Call Trace: [ 967.928459][T25665] [ 967.928469][T25665] dump_stack_lvl+0xe8/0x150 [ 967.928509][T25665] should_fail_ex+0x410/0x560 [ 967.928540][T25665] ? __alloc_skb+0x1db/0x7a0 [ 967.928569][T25665] should_failslab+0xa8/0x100 [ 967.928601][T25665] ? __alloc_skb+0x1db/0x7a0 [ 967.928627][T25665] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 967.928664][T25665] ? __alloc_skb+0x18d/0x7a0 [ 967.928692][T25665] ? __alloc_skb+0x1db/0x7a0 [ 967.928734][T25665] __alloc_skb+0x1db/0x7a0 [ 967.928769][T25665] alloc_skb_with_frags+0xc6/0x760 [ 967.928822][T25665] sock_alloc_send_pskb+0x878/0x990 [ 967.928864][T25665] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 967.928905][T25665] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 967.928946][T25665] ? dev_get_by_index+0x22/0x2d0 [ 967.928983][T25665] ? dev_get_by_index+0x22/0x2d0 [ 967.929025][T25665] packet_sendmsg+0x31bb/0x4f80 [ 967.929064][T25665] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 967.929099][T25665] ? __lock_acquire+0x747/0x2de0 [ 967.929137][T25665] ? __lock_acquire+0x747/0x2de0 [ 967.929167][T25665] ? kstrtouint+0x6e/0xe0 [ 967.929212][T25665] ? __pfx_packet_sendmsg+0x10/0x10 [ 967.929235][T25665] ? aa_sk_perm+0x713/0x900 [ 967.929270][T25665] ? debug_mutex_wake_waiter+0x50/0x230 [ 967.929305][T25665] ? __pfx_aa_sk_perm+0x10/0x10 [ 967.929336][T25665] ? aa_sock_msg_perm+0x144/0x210 [ 967.929371][T25665] ? apparmor_socket_sendmsg+0x98/0x360 [ 967.929400][T25665] ? __pfx_packet_sendmsg+0x10/0x10 [ 967.929424][T25665] sock_sendmsg_nosec+0x13a/0x180 [ 967.929453][T25665] __sys_sendto+0x408/0x5a0 [ 967.929482][T25665] ? ksys_write+0x1e6/0x270 [ 967.929521][T25665] ? __pfx___sys_sendto+0x10/0x10 [ 967.929548][T25665] ? __mutex_unlock_slowpath+0x731/0x900 [ 967.929610][T25665] ? __pfx_ksys_write+0x10/0x10 [ 967.929657][T25665] __x64_sys_sendto+0xde/0x100 [ 967.929691][T25665] do_syscall_64+0x166/0x520 [ 967.929720][T25665] ? trace_irq_disable+0x3b/0x140 [ 967.929749][T25665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.929774][T25665] ? clear_bhb_loop+0x70/0xc0 [ 967.929818][T25665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.929842][T25665] RIP: 0033:0x7fdfc759e159 [ 967.929864][T25665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.929885][T25665] RSP: 002b:00007fdfc8460028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 967.929912][T25665] RAX: ffffffffffffffda RBX: 00007fdfc7825fa0 RCX: 00007fdfc759e159 [ 967.929930][T25665] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000006 [ 967.929946][T25665] RBP: 00007fdfc8460090 R08: 0000200000000140 R09: 0000000000000014 [ 967.929962][T25665] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 967.929976][T25665] R13: 00007fdfc7826038 R14: 00007fdfc7825fa0 R15: 00007ffffad7d9e8 [ 967.930013][T25665] [ 968.326586][T17596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.326823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.606874][T25672] netlink: 'syz.2.6170': attribute type 1 has an invalid length. [ 968.618118][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 968.717453][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 968.720232][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 968.722952][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 968.725848][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 968.783538][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 968.859162][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.895445][T25676] syzkaller0: entered promiscuous mode [ 968.895472][T25676] syzkaller0: entered allmulticast mode [ 968.899907][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 968.902789][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 968.951719][T25672] netlink: 'syz.2.6170': attribute type 1 has an invalid length. [ 969.073018][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6170'. [ 969.265638][T25688] xt_bpf: check failed: parse error [ 970.863526][T25711] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6179'. [ 971.316085][T25728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.316114][T25728] batadv0: mtu less than device minimum [ 971.317615][T25728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.319041][T25728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.320447][T25728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.321848][T25728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.323281][T25728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.324736][T25728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 971.624441][T25728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.643578][T25728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.802548][T25728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.816357][T25728] batman_adv: batadv0: Interface deactivated: dummy0 [ 971.816383][T25728] batman_adv: batadv0: Removing interface: dummy0 [ 972.347265][T25740] syzkaller0: entered promiscuous mode [ 972.347293][T25740] syzkaller0: entered allmulticast mode [ 973.437310][T10548] net_ratelimit: 34 callbacks suppressed [ 973.437336][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.437543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.805186][T25794] netlink: 'syz.3.6197': attribute type 24 has an invalid length. [ 975.037946][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.074377][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.092067][ T7968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.092598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.088417][ T8509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.320430][T25864] netlink: 'syz.1.6213': attribute type 3 has an invalid length. [ 981.376718][T25864] syzkaller0: entered promiscuous mode [ 981.376746][T25864] syzkaller0: entered allmulticast mode [ 982.440944][T25896] __nla_validate_parse: 2 callbacks suppressed [ 982.440967][T25896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6219'. [ 982.781725][T25914] netlink: 'syz.3.6219': attribute type 1 has an invalid length. [ 983.665665][T25905] syzkaller0: entered promiscuous mode [ 983.665732][T25905] syzkaller0: entered allmulticast mode [ 984.135310][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.219495][T25938] syzkaller0: entered promiscuous mode [ 984.219563][T25938] syzkaller0: entered allmulticast mode [ 984.519908][T25946] syzkaller1: entered allmulticast mode [ 984.739289][T25890] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 984.739629][T25890] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 984.739946][T25890] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 984.740290][T25890] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 984.740615][T25890] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 984.740936][T25890] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 984.741258][T25890] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 984.741578][T25890] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 984.741894][T25890] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 985.272473][T25964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6234'. [ 985.274347][T25965] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 985.416763][T25970] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6233'. [ 985.417203][T25970] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6233'. [ 985.417224][T25970] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6233'. [ 985.419120][T25970] netlink: 'syz.2.6233': attribute type 8 has an invalid length. [ 986.094388][T25984] syzkaller0: entered promiscuous mode [ 986.094414][T25984] syzkaller0: entered allmulticast mode [ 986.644121][T25990] syzkaller0: entered promiscuous mode [ 986.644151][T25990] syzkaller0: entered allmulticast mode [ 986.811704][T26005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6244'. [ 986.811738][T26005] block nbd2: Unsupported socket: should be TCP or UNIX. [ 987.539599][T17596] IPVS: starting estimator thread 0... [ 987.637013][T26030] IPVS: using max 30 ests per chain, 72000 per kthread [ 987.897661][T26004] netlink: 'syz.1.6243': attribute type 10 has an invalid length. [ 988.017871][T26040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6252'. [ 988.018266][T26041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6252'. [ 988.569418][T26032] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6250'. [ 988.690056][T26050] syzkaller0: entered promiscuous mode [ 988.690082][T26050] syzkaller0: entered allmulticast mode [ 989.086987][T26060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6254'. [ 989.977300][T26075] sctp: [Deprecated]: syz.0.6259 (pid 26075) Use of int in maxseg socket option. [ 989.977300][T26075] Use struct sctp_assoc_value instead [ 990.219513][T25277] net_ratelimit: 26 callbacks suppressed [ 990.219538][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.311945][T26085] syzkaller0: entered promiscuous mode [ 990.312164][T26085] syzkaller0: entered allmulticast mode [ 990.610537][T17596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.610998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.580667][T26120] syzkaller0: entered promiscuous mode [ 991.580696][T26120] syzkaller0: entered allmulticast mode [ 992.884694][T26149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6279'. [ 993.296075][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.174612][T26172] macvlan0: entered promiscuous mode [ 994.408590][T26180] syzkaller0: entered promiscuous mode [ 994.408652][T26180] syzkaller0: entered allmulticast mode [ 994.636667][T26191] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 994.717918][T26194] xt_l2tp: unknown flags: 43 [ 994.761776][T26194] sctp: [Deprecated]: syz.1.6287 (pid 26194) Use of int in max_burst socket option deprecated. [ 994.761776][T26194] Use struct sctp_assoc_value instead [ 995.114987][T26198] veth0_macvtap: entered allmulticast mode [ 995.115387][T26198] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 996.039287][T10548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.039552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.434630][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.536143][ T7968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.536417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.546233][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1101.577518][ C1] rcu: 0-...!: (2 ticks this GP) idle=974c/1/0x4000000000000000 softirq=131884/131884 fqs=9 [ 1101.587912][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26206/1:b.el [ 1101.595946][ C1] rcu: (detected by 1, t=10502 jiffies, g=164209, q=475 ncpus=2) [ 1101.603799][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1101.609062][ C0] NMI backtrace for cpu 0 [ 1101.609084][ C0] CPU: 0 UID: 0 PID: 25277 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 1101.609107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1101.609121][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 1101.609152][ C0] RIP: 0010:check_preemption_disabled+0x15/0xd0 [ 1101.609197][ C0] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 db 4d af 07 65 48 8b 0d ab 4d af 07 <85> c9 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 9c 59 f7 c1 00 02 [ 1101.609214][ C0] RSP: 0018:ffffc90000007d60 EFLAGS: 00000046 [ 1101.609230][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000001000403 [ 1101.609243][ C0] RDX: 0000000001000401 RSI: ffffffff8e69c835 RDI: ffffffff8c6da080 [ 1101.609257][ C0] RBP: 00000000ffffffff R08: 0000000001000001 R09: 0000000000000000 [ 1101.609270][ C0] R10: ffff888026819308 R11: ffffed1004d03263 R12: 0000000000000046 [ 1101.609284][ C0] R13: ffff888034965dc0 R14: ffff8880b8628298 R15: 0000000000000006 [ 1101.609299][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 1101.609320][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1101.609333][ C0] CR2: 00007fab2ba13809 CR3: 000000007be1c000 CR4: 00000000003526f0 [ 1101.609351][ C0] Call Trace: [ 1101.609363][ C0] [ 1101.609374][ C0] lock_is_held_type+0xdf/0x150 [ 1101.609400][ C0] __hrtimer_run_queues+0x20b/0xa10 [ 1101.609437][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 1101.609478][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1101.609503][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1101.609525][ C0] [ 1101.609532][ C0] [ 1101.609540][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1101.609562][ C0] RIP: 0010:unwind_next_frame+0x1a3c/0x2550 [ 1101.609585][ C0] Code: 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 ed ce bf 00 4d 8b 66 08 49 8d 5e 10 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 c6 ce bf 00 48 8b 03 4d 39 fc 0f 96 [ 1101.609602][ C0] RSP: 0018:ffffc900039bf420 EFLAGS: 00000a02 [ 1101.609618][ C0] RAX: 1ffff92000737e9b RBX: ffffc900039bf4d8 RCX: dffffc0000000000 [ 1101.609633][ C0] RDX: ffffc900039bf508 RSI: dffffc0000000000 RDI: ffffc900039bf4d0 [ 1101.609648][ C0] RBP: 1ffffffff2240e01 R08: ffffc900039bf870 R09: 0000000000000000 [ 1101.609662][ C0] R10: ffffc900039bf518 R11: fffff52000737ea5 R12: ffffc900039b8000 [ 1101.609677][ C0] R13: ffffffff8177f1df R14: ffffc900039bf4c8 R15: ffffc900039bf880 [ 1101.609694][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1101.609725][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1101.609747][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1101.609770][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1101.609789][ C0] arch_stack_walk+0x11b/0x150 [ 1101.609814][ C0] ? kmem_cache_free+0x182/0x650 [ 1101.609837][ C0] stack_trace_save+0xa9/0x100 [ 1101.609855][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1101.609872][ C0] ? kfree+0x1c5/0x650 [ 1101.609901][ C0] ? __lock_acquire+0x747/0x2de0 [ 1101.609922][ C0] kasan_save_track+0x3e/0x80 [ 1101.609942][ C0] ? kasan_save_track+0x3e/0x80 [ 1101.609961][ C0] ? kasan_save_free_info+0x40/0x50 [ 1101.609988][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1101.610033][ C0] ? netlink_broadcast_filtered+0xd9d/0xea0 [ 1101.610061][ C0] kasan_save_free_info+0x40/0x50 [ 1101.610088][ C0] __kasan_slab_free+0x5c/0x80 [ 1101.610109][ C0] kmem_cache_free+0x182/0x650 [ 1101.610132][ C0] netlink_broadcast_filtered+0xd9d/0xea0 [ 1101.610174][ C0] nlmsg_notify+0xe3/0x1a0 [ 1101.610202][ C0] ? __neigh_notify+0x29/0x310 [ 1101.610228][ C0] __neigh_notify+0x1ae/0x310 [ 1101.610260][ C0] neigh_cleanup_and_release+0xae/0x2b0 [ 1101.610283][ C0] neigh_periodic_work+0xb4a/0xe40 [ 1101.610319][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1101.610346][ C0] process_scheduled_works+0xc3d/0x1630 [ 1101.610386][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1101.610414][ C0] ? assign_work+0x3cf/0x5d0 [ 1101.610441][ C0] worker_thread+0xa47/0xfb0 [ 1101.610480][ C0] kthread+0x38b/0x480 [ 1101.610499][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1101.610523][ C0] ? __pfx_kthread+0x10/0x10 [ 1101.610542][ C0] ret_from_fork+0x514/0xb70 [ 1101.610562][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1101.610579][ C0] ? __switch_to+0xc89/0x1420 [ 1101.610607][ C0] ? __pfx_kthread+0x10/0x10 [ 1101.610626][ C0] ret_from_fork_asm+0x1a/0x30 [ 1101.610664][ C0] [ 1102.042151][ C1] task:syz.4.6293 state:R running task stack:25624 pid:26206 tgid:26205 ppid:16364 task_flags:0x400140 flags:0x00080003 [ 1102.055707][ C1] Call Trace: [ 1102.059019][ C1] [ 1102.061985][ C1] __schedule+0x17db/0x58f0 [ 1102.066566][ C1] ? __lock_acquire+0x747/0x2de0 [ 1102.071538][ C1] ? __pfx___schedule+0x10/0x10 [ 1102.076599][ C1] ? __lock_acquire+0x747/0x2de0 [ 1102.081587][ C1] preempt_schedule_irq+0x4b/0x90 [ 1102.086652][ C1] irqentry_exit+0x14f/0x910 [ 1102.091285][ C1] ? trace_irq_disable+0x3b/0x140 [ 1102.096382][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1102.102421][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 1102.107762][ C1] Code: ff ff ff e8 50 85 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 f0 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 89 45 0a cc 48 8d 3d 97 4b da [ 1102.127672][ C1] RSP: 0018:ffffc9000eaded00 EFLAGS: 00000296 [ 1102.133790][ C1] RAX: 5c8f05e33085a500 RBX: 0000000000000000 RCX: 0000000000000046 [ 1102.141804][ C1] RDX: 000000007a964b5e RSI: ffffffff8e69c835 RDI: ffffffff8c6da080 [ 1102.149817][ C1] RBP: ffff888055601f40 R08: ffffffff8177f1df R09: 0000000000000000 [ 1102.157832][ C1] R10: ffffc9000eadee38 R11: ffffffff81b28ab0 R12: ffffffff8ed5c8e0 [ 1102.165850][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1102.173872][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1102.180157][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1102.185338][ C1] ? shmem_fault+0x179/0x390 [ 1102.189983][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1102.195142][ C1] unwind_next_frame+0xac/0x2550 [ 1102.200647][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1102.205802][ C1] ? shmem_get_folio_gfp+0x5da/0x16d0 [ 1102.211223][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1102.216482][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1102.222717][ C1] arch_stack_walk+0x11b/0x150 [ 1102.227548][ C1] ? shmem_fault+0x179/0x390 [ 1102.232210][ C1] stack_trace_save+0xa9/0x100 [ 1102.237011][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1102.242434][ C1] save_stack+0x122/0x230 [ 1102.246810][ C1] ? __pfx_save_stack+0x10/0x10 [ 1102.251713][ C1] ? __lock_acquire+0x747/0x2de0 [ 1102.256700][ C1] ? post_alloc_hook+0x1f9/0x250 [ 1102.261691][ C1] ? get_page_from_freelist+0x2209/0x2280 [ 1102.267444][ C1] ? __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1102.273456][ C1] ? alloc_pages_mpol+0x21e/0x390 [ 1102.278526][ C1] ? folio_alloc_mpol_noprof+0x39/0x160 [ 1102.284134][ C1] ? shmem_alloc_and_add_folio+0x43e/0xf60 [ 1102.289985][ C1] ? shmem_get_folio_gfp+0x5da/0x16d0 [ 1102.295400][ C1] ? shmem_fault+0x179/0x390 [ 1102.300051][ C1] __set_page_owner+0x8d/0x4c0 [ 1102.304867][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1102.310271][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 1102.316384][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1102.321635][ C1] post_alloc_hook+0x1f9/0x250 [ 1102.326464][ C1] get_page_from_freelist+0x2209/0x2280 [ 1102.332086][ C1] ? lock_acquire+0x115/0x350 [ 1102.336836][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1102.342694][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1102.349071][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 1102.354415][ C1] alloc_pages_mpol+0x21e/0x390 [ 1102.359316][ C1] folio_alloc_mpol_noprof+0x39/0x160 [ 1102.364727][ C1] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1102.370581][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 1102.375678][ C1] ? filemap_map_pages+0x1d1/0x2170 [ 1102.380936][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 1102.386454][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1102.392667][ C1] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 1102.398704][ C1] shmem_get_folio_gfp+0x5da/0x16d0 [ 1102.403985][ C1] shmem_fault+0x179/0x390 [ 1102.408462][ C1] __do_fault+0x138/0x2a0 [ 1102.412828][ C1] ? do_pte_missing+0x140c/0x34b0 [ 1102.417897][ C1] do_pte_missing+0x2215/0x34b0 [ 1102.422795][ C1] ? handle_mm_fault+0xf1/0x3750 [ 1102.427785][ C1] handle_mm_fault+0x1a53/0x3750 [ 1102.432775][ C1] ? handle_mm_fault+0xf1/0x3750 [ 1102.437776][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1102.443105][ C1] ? follow_page_pte+0x748/0xf10 [ 1102.448121][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 1102.453463][ C1] __get_user_pages+0x1675/0x2750 [ 1102.458566][ C1] populate_vma_page_range+0x2be/0x3c0 [ 1102.464093][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1102.470115][ C1] ? down_read+0x2be/0x330 [ 1102.474581][ C1] __mm_populate+0x25f/0x390 [ 1102.479229][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1102.484397][ C1] vm_mmap_pgoff+0x353/0x4e0 [ 1102.489037][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1102.494213][ C1] ? rcu_is_watching+0x16/0xb0 [ 1102.499025][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 1102.503923][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1102.508728][ C1] do_syscall_64+0x166/0x520 [ 1102.513367][ C1] ? trace_irq_disable+0x3b/0x140 [ 1102.518449][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.524551][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1102.529269][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.535201][ C1] RIP: 0033:0x7fdfc759e159 [ 1102.539658][ C1] RSP: 002b:00007fdfc8460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1102.548105][ C1] RAX: ffffffffffffffda RBX: 00007fdfc7825fa0 RCX: 00007fdfc759e159 [ 1102.556200][ C1] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1102.564203][ C1] RBP: 00007fdfc763506b R08: ffffffffffffffff R09: 0000000000000000 [ 1102.572206][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1102.580204][ C1] R13: 00007fdfc7826038 R14: 00007fdfc7825fa0 R15: 00007ffffad7d9e8 [ 1102.588318][ C1] [ 1102.591363][ C1] rcu: rcu_preempt kthread starved for 8717 jiffies! g164209 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 1102.602407][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1102.612401][ C1] rcu: RCU grace-period kthread stack dump: [ 1102.618315][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1102.631859][ C1] Call Trace: [ 1102.635170][ C1] [ 1102.638245][ C1] __schedule+0x17db/0x58f0 [ 1102.642793][ C1] ? __lock_acquire+0x747/0x2de0 [ 1102.647781][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1102.652947][ C1] ? __pfx___schedule+0x10/0x10 [ 1102.658012][ C1] ? lock_acquire+0x115/0x350 [ 1102.662776][ C1] ? schedule+0x90/0x2b0 [ 1102.667074][ C1] schedule+0x164/0x2b0 [ 1102.671272][ C1] schedule_timeout+0x152/0x2c0 [ 1102.676173][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1102.681593][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1102.686940][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1102.692879][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1102.698479][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1102.703391][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1102.709586][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1102.714909][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1102.720147][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1102.725993][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1102.730636][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1102.735878][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1102.740863][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1102.745940][ C1] kthread+0x38b/0x480 [ 1102.750063][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1102.755299][ C1] ? __pfx_kthread+0x10/0x10 [ 1102.759928][ C1] ret_from_fork+0x514/0xb70 [ 1102.764575][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1102.769746][ C1] ? __switch_to+0xc89/0x1420 [ 1102.774475][ C1] ? __pfx_kthread+0x10/0x10 [ 1102.779110][ C1] ret_from_fork_asm+0x1a/0x30 [ 1102.783946][ C1] [ 1102.786988][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1102.793339][ C1] CPU: 1 UID: 0 PID: 7968 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 1102.802927][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1102.813041][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 1102.820126][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1102.825804][ C1] Code: bc 88 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 d1 23 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1102.845446][ C1] RSP: 0018:ffffc90003b5f2c8 EFLAGS: 000002d3 [ 1102.851561][ C1] RAX: ffffffff81771e2c RBX: 0000000000000003 RCX: ffff88807acb5dc0 [ 1102.859568][ C1] RDX: 0000000000000000 RSI: ffffffff8e413ed7 RDI: ffffffff8c6da080 [ 1102.867576][ C1] RBP: 0000000000000003 R08: ffffffff907a417f R09: 1ffffffff20f482f [ 1102.875579][ C1] R10: dffffc0000000000 R11: fffffbfff20f4830 R12: 0000000000000200 [ 1102.883592][ C1] R13: 0000000000000000 R14: ffffffff90383bc0 R15: dffffc0000000000 [ 1102.891602][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 1102.900568][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1102.907183][ C1] CR2: 00007f3ff2b556c8 CR3: 00000000663c2000 CR4: 00000000003526f0 [ 1102.915195][ C1] Call Trace: [ 1102.918529][ C1] [ 1102.921532][ C1] kvm_wait+0x111/0x160 [ 1102.925748][ C1] __pv_queued_spin_lock_slowpath+0x74a/0xbc0 [ 1102.931876][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1102.938516][ C1] ? in6_dev_get+0x366/0x420 [ 1102.943179][ C1] do_raw_spin_lock+0x26c/0x2f0 [ 1102.948081][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1102.953505][ C1] ? ___neigh_create+0xf00/0x22b0 [ 1102.958575][ C1] ___neigh_create+0xf00/0x22b0 [ 1102.963598][ C1] ip6_finish_output2+0xe0f/0x1460 [ 1102.968769][ C1] ? ip6_finish_output+0x268/0x480 [ 1102.973922][ C1] ? ip6_output+0x11e/0x540 [ 1102.978469][ C1] ip6_output+0x337/0x540 [ 1102.982860][ C1] udp_tunnel6_xmit_skb+0x6d9/0xd60 [ 1102.988127][ C1] send6+0x5ce/0x920 [ 1102.992171][ C1] ? send6+0x255/0x920 [ 1102.996277][ C1] ? __pfx_send6+0x10/0x10 [ 1103.000738][ C1] ? lock_acquire+0x115/0x350 [ 1103.005481][ C1] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 1103.011685][ C1] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 1103.017455][ C1] wg_packet_handshake_send_worker+0x204/0x370 [ 1103.023650][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1103.028720][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1103.035473][ C1] ? rcu_is_watching+0x16/0xb0 [ 1103.040282][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1103.046043][ C1] process_scheduled_works+0xc3d/0x1630 [ 1103.051693][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1103.057733][ C1] ? assign_work+0x3cf/0x5d0 [ 1103.062419][ C1] worker_thread+0xa47/0xfb0 [ 1103.067080][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1103.072070][ C1] kthread+0x38b/0x480 [ 1103.076184][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1103.081333][ C1] ? __pfx_kthread+0x10/0x10 [ 1103.086145][ C1] ret_from_fork+0x514/0xb70 [ 1103.090790][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1103.095940][ C1] ? __switch_to+0xc89/0x1420 [ 1103.100695][ C1] ? __pfx_kthread+0x10/0x10 [ 1103.105334][ C1] ret_from_fork_asm+0x1a/0x30 [ 1103.110176][ C1]