last executing test programs: 4.572724231s ago: executing program 2 (id=2913): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x5, 0x0, 0x9f}) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x8, 0x70bd26, 0x25dfdbfb, "", [""]}, 0x10}}, 0x8000) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r2) close(r3) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000008c0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7da208", 0x28, 0x3a, 0xff, @private2, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @remote}}}}}}, 0x0) 4.488866321s ago: executing program 4 (id=2914): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='-[\x00', 0x200, &(0x7f0000000040)={@align=0x2, {0x2, 0x6, 0x4, 0x3}}, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x7fffffff}) (async) r1 = socket(0x1, 0x803, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) (async) write$bt_hci(r4, 0x0, 0x6) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0xffffffdf, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xfff1, 0xffff}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$phonet(0x23, 0x2, 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf8, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x60000000}}, @NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4080}, 0x1) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) (async) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2c, r13, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r11) 4.013730133s ago: executing program 2 (id=2917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0xf8, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 3.83404528s ago: executing program 2 (id=2919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x6, 0x3, ' \x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0xfff5}}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.732181614s ago: executing program 4 (id=2921): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1) 3.466536076s ago: executing program 4 (id=2923): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000200)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @random}, 0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) write(r1, &(0x7f0000000000)="010000000000000020", 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000240)={0x73}) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffe, 0xfffffff9, 0x6, 0x4}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_eee={0x44, 0x68f, 0x6d, 0x7, 0x3ff, 0x80000000, 0x2, 0x38, [0x9, 0x3]}}) 3.329387037s ago: executing program 2 (id=2925): getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0x7, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x2a060400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00'/28], 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r7, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r9, @ANYBLOB="0b062dbd70000000000030000000050035000700000005003300030000000a0001007770616e30000000050034000e0000000500360001000000c4a49edfb4ce96ed132a38a4b2626aff5da8d1d4310e8efffa0916bc3039827c9721b4abe95af5ece976ab23086bed"], 0x40}}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 2.973898079s ago: executing program 1 (id=2930): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x28008004) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x810) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x54}}, 0x4040000) 2.914288652s ago: executing program 4 (id=2931): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) (fail_nth: 4) 2.884582722s ago: executing program 1 (id=2933): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1) 2.629701789s ago: executing program 3 (id=2934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000140)={0x0, r0, r0, 0xa0, 0x4, '\x00', {0x1, 0x938, 0x7, 0x2, 0x17, 0xd9, 0xff, 0x100, {0x2}, {0x100000001, 0x6}, {0xac, 0x5}, 0x4, 0x50, 0x1, 0x1d7, 0x0, 0x5, 0x8001, 0x3, 0x0, 0x3, '\x00', 0x7f, 0x1, 0xfff8, 0x1000}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x8, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="995699a1", @ANYRES16=0x0, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000080)) (async) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r6, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 2.629587849s ago: executing program 0 (id=2935): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r1, 0xb, 0x10, 0x7, 0xffff}, &(0x7f00000000c0)=0x18) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) 2.543436401s ago: executing program 4 (id=2936): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x28008004) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x810) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xa1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x54}}, 0x4040000) 2.474349293s ago: executing program 1 (id=2937): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000092f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="880100001900010000000000fbdbdf251d01090054000f805000f8804c00738008008400", @ANYRES32=0x0, @ANYBLOB='\b\x00F\x00', @ANYRES32, @ANYBLOB="0c00a10009000000000000002c002b800800d200ffffffff1e0017004cb42ee3a03b5668ab4b3911ae4e379e45f284e4d167041a229e0000200106801cfb"], 0x188}, 0x1, 0x0, 0x0, 0x40081}, 0x0) listen(r2, 0x5) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000280)={0x23, 0x2, 0xac, 0x1}, 0x10) connect$phonet_pipe(r4, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd6067060000000600000000", 0x1d}, {&(0x7f0000000100)="a1c6757dfaadb021e548300000006a61a823efff3b4653473c82c035f5340400006cf0c0a85f932dcb0e5b5564dd8dccb9", 0x31}, {&(0x7f0000000440)="cb", 0x1}], 0x3) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="38000000180001000000000000000000020080000003c809001b0000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) 2.313834109s ago: executing program 4 (id=2938): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) r4 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x1, 0x4) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x1, 0x12001, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="1ca10000", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf250600000006000b0009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x804) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r6, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f00000000c0)=0x5) close(0x3) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x240088d0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008054) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="74100000fc61211eda60bf8fdf10a16cd7265450e5dfe9428833958d2e198e8560e2434991afbf042c2e60b5dc911dd5210db9ad927c4b64a1befcf2e4363997d0924438feaa3f1bfc6eb5892779036cef7c78c4234a17d4438874e66828a68cbdd51c135c550bb47ca1807f1aa0cdf973857016591a5bb802aff20b69d651bc7de65d0627495cb425a236bc8aa0e28a32564d46ea5703c93681c7c88cefdd74fbb7b90480193081ce9cae09633ae07c12ab5a9794c4cacff47b259183b1fdbe845fb7cf987eb07a14ea99559453884f8bb7f17f355cb85b28bb5d64b5a1467812d7270505f5078b2e000000000000", @ANYRES16=r7, @ANYBLOB="000125bd7000fcdbdf251b00000008000100", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="08001500c0000000080015000200000029001900ce4c873d1c50441c7d643bad70c02c24c35958d3ccf71d596b5926fb14a2ae203890bd6e33000000041019001b8e152b164645585399cb9b2de9acdc05e19e86b87766161fe8117ddafc94f8f41833b8f69c9d6334c507e0d984378b237c908c51a3cbaae65c47c8a11971201aa2af4526241ceda76e69b7b23d5261f6bff81c85a15f2bb97041a5414d33f1184c1618fb78813bb6e30eeb44cd4dc2b48fead047a6e801fc6c39b1f9f73940ce6adcbe5db9d4a5e28166afe469416759ec07c581fc53adf86b849361fbb476f90eac95c385d5f087005c3b6439d00d804ff26cdfaecb62fcdcfb655520cee3d8fb5160b9d6c630008400625bec02d956a0842fc88799d01ffd57f6e3df43254d0f55c8f667ae62d4b735c7bc069eb2ae0b1968fd66c0d73ce079ad762ecb7207b162d1ab762a579d54febdd48f7394b1138c5e48d882ab590e73633ad5176e72f799a0deec68ae386d97769f2dc961928490a5e97705ecd6b65cc92f05907fc3e0c7d7aed2319b108e9bb5d7fa9dca310cab32e31e80c15e2670df85d99df81fd25b53bc71254e8f5195854b75ad86ce3fd452674f6ff1f4f652fc87ab4d0ccd65a090225549de380f6c2d5c2ee662780c3b727e6d7130c0188cc84127fce677adedaff404297309cadea25f63d777f8708628a189718c9d1c4ba98401069f4b6bae47bde788f9eb904c38af7ec6916376a5be2c59994e25160f731c86f673ea50125a19e273671e8571908d5968e3267bfb1aeb861f4391a4f0949bd182236007b72c45cdba442260a0e7c66113256968f3c1650e0d798cd9706017bb1bdec649e66bc6c01de32e0c02f1d9b4c46cb0e3b4bf6f2b74a6ca89b1b4f4036976d153b0b56943cfd8b8cdd3b634892b8c94668fe8103e90a0ce5f2f14fcfa8fb9584637c2792877d35a2ac19dc832b6a3dabe5913cb23874436a0ce7081df6ea19f02f7cbee05b3a3b6fcd62c80be3671895ef2f234eeff2f3b7fd80e47ce4f0105285261969b5b199f29d03f059488f2a56fca73515330e2e44a7020f09355efc30e8882a022c42870ab089076d2c4ba2f363bf6eda6e9846524424530e8be94fb3f34027801fe7bcf8cc5f3dd5ded4f5ff21594576d906bd2a218d38b41d061f1d210be9fc177a644eee054cd6cde0373527496db112fb7211ec6f5089445eb20bac8ac972b3f0efd8c3bcb4d1a94727e4a79aef260903de08602e5d01dda117c05abab261d8d485e00506dbb93b61782ebbbae1b2a1a0cb8327b49e400fb323df6373a5e3b952df5cc1d04a4708f40cce5a4809afbd4d1e2cd8dfc72e0a0289b735f380033d2c0b1ce176d9d4a41012530a8e142f3f18a5913c50632103efa515136a0c565890fbdd635af09e498800eb05b3580175cb9400f085518a38ca8c501c387e476a1bf3379cfbb969d19232e9860f0d20f14b81ec3a88f3bc4df911fd0c75e4b37842293d2519f74174b37a137b1b36fea31bf935c54071ad94465fd4da10a9980e09a36b145783663b9c8d278fbb148114e14c38f976456d30c2a6e2199317e630b1b486d577573ce25a862c579f505317a64240c005752438d7ec291a5929165c7afc252168f3f3900008d7720973145611fec4e94ec3f3db6161f3918017bd66e3c6c581a41abf725659b30b79d496cb52207652d35bfc04e568ab2516b40b8df03dde4be67b0374d500c5032ce6374da9c4963820c7106c11254d6e5112412ccaa582dc9fa905d9cd260e03946de5506586fedea32aa989df1c64673d45ef8ebb7e402add188ce4766661e148eab6cbbd86002e9519b043fb92626634ff586b3cab5f5f0294e723569ef11c2fb4c4a66bfa26ce1986ec419505ff399484ecb04d0e8649c599ba3cce9d4c7c0f25ec963c5e4a6d1350b8b527cd65bfa9cd40c39bec0cc1f0e371a8e3b60aa1887d867e7703f8ab3875e326321e896c8f1f604ac4af1ea00deb54093ed70d725fcff21d19a51db25a2d10f9af2d39e36bf59a9eca50dcca362581d412a6994d0f312aa8d8f5a334d22d6f1e3461f63dc4fc9887bb2af42317a4f5432cda1036143cbd1f5bf89e0ca8f848b49c956b8fb59ecf0bc389d99d03e9f271e43fe1084013b3e1e85ddd477adfa8b90dac8981a98827483fb258cf28fa339d869d66bc70dd032c9cd8571fe20b228f7e2dac65615c27d2c6da7786f879bdc0564eace08a643e7100ddd7bfb223a8c6d87ba26b28861d5592495d81bea7d06442801bb281a5fab8444e0f1b9b4fc274b91eb984fa4690089973eb46267d325af8115374cccace8c55782695b5bd317abad0c270863be5c8a7b439029289fa96904589a4a38db27c440a645f11bb7f9a5903a12e1bf7ce0bb084c97535c068ad76d6bce4f7fd1a7bdb034a431f9366447b04c03c64f561dc5d6fdb1a8c1f0fb9a450c9859e28043eda0bfaf9a83bdddd3f45e4695f2a99380b812a06f0ac8858bd64176502d9e4d10a9863186107b563e3e7d1611ffd7aa7b8adef71523a520f02b0a8035640537968a6052c2b24ff190621c27d608c6af35a7b244d9af57ff7804330d95b9899c1a75d02a85e18e5cef5a3bd0df2db80f92693ba6758b80d75fcd67f36c90dd672dc912800ac6831af80b6e749087124a6268468dc34183438eb2af0026fa1125d8ea992805fd6c12ded6a8798742525fb37a4c7292aacd08809bbfcf2255ae251c2ce8252997ecb8f9c9f8f1e29903dff8aca4429e8cbe84e37958fa054088e0a5a0af1dcc5ee85907aec9666a248b0b667e7c54b36913c4a0a85b648a9eb73e8e0561b13907f3541c82dcd48a4fe72d8dde8ac08d4fc350ca43cb844295147b2dd2943743411963785f747836a9d68bf21d752a93de2ebd80a7d24d0a24aa653ad6be2c19ec148967108fe7cfffec80ea45cd91cc120681be31667d6ba1d9bc6fbf877dd35e3aa1c9cebc2f6681aa46d5b70fa1682408aca0ed6ac0d11b6cd6956f3db254701710b12766828bee0561625256040fad005c83ce76358160b9dc18e7da45ad756a7b2668780515e9783d92806209afa1d97177c8a4b11fca29636d90f64895cc363a8f3ac17157842b0849b204030fa69e31e0fa84210c42448723d89e5ef79bb40a15ce12a89f6f401277e4551185a08398db1ce51532160c5062e8e7d7af8680bf72adcf63c849fb41bad2968ad9d9b05c59751c260c6577ab6d34237cdb454969e10456ad43bf76cf837969e79349ccf1d1e32dc4f70750943b27c1a723ca43766dcdaa989c6042703b378767ed0ae7aecf73a9e8c94f42d921a9f5681589efd9751d78fc7014345a748160f6879ce4c6770a440c5d05cfbaef5be895b1e47b47ea1d047cc0a8c6e761736653d5fa91083cbba79ce691269bebc2a518b65e9f90bfa0f64c3d4810ef83cb2bb4f50475e27f5a750dbe9e8692b363aae8eb3dfec8cbb29884ded7dabbcca9376cd415a39608f72d2e0234eb59d15b330fc993c1963d4f6e14a81e8da6f06a6661a07bdf42bcc4ce38a2b09419fc110c5b0ff1b2626e83956c578576bfcbaf5b7a817d8f005b327cf2b9766e176da2f7bf22c592aa265167ffc00f4470581277c2089aca2ce33aff5ceecc9f1b70339736467ca3d39f9a4a97e98212b613b77b7510378fe31ec8313436539fd1759ce9c16ee15e0431ab483338b17ccfb7ab6a83b8d9daba1d41a2bb918490622c09b9a438a1ff5c25ec837ab53490c2d765867c73dfa1fbeebd6b0ea16a0e00bd1f9f803fea84f819cca2769bd31110e1b954712abce05dc2251d61ee17047faf0a48ff122fa53eb13c8adc8f69e45b4ac205120cf3ea9fb636736aa04aad6f2b0a5b8cdceb2654bd6f7ab91d08964dac276042bcc9ef4565b385f07562fba58ecbb013d70bf706ab35cae3221bee27995f1bbcfde963292b1234b53781e9e450c1f8f046b8b81f3b1ca4d376e47eb8ca71a60766c1f772a4aa72734104976848f6716e5dbca4dffbf5e29fcb2ede1700c6441dd6c9147ef085af7daef5d3759ffb8f2afb91f70191ee2cf97e319459a40c27c29a1e3eb7794dd25598af5cea04db2745c90143bcbf74efe67a085413db96f04dee0492d04053b17a8206c9cbe9990ca947b7550fc89855076fe4db4a3845868d8a2798536cc2b56cc6ddac32bad7216afb1a96557b3a218d76227179011001d09bf7f61d49f648e7e15e23d4b73358b6f6873bd5bcbab2331366310ee3925e31876ef46310650b614a43a38210513f16a15c5aaee55b00c33885517e70b97fa5184ced766120428982a8aea28a434706fafbb22fdcc396128c123db68d882dcc05ea4fc016694ba708623d4f14fd80709a275834c213bf1a92ceab88d3af5812ea3dff61a4ca2e854f6047da280c21540f892c820186f2070224b59e25fa7510a88a9152340de1e670ec4902fc9ccc4a882cc86408e14d9264dd1fb5fd7b9d30e0932e26f6bed0ddb21a23c44673cd36c991d8326a8aeb9afd95bcdd82640e1de1d69b74d8facd8c5b0fb551e72106f46ee92bcaffb4f6ed1d42ad64de245ada44d6d4b3971df6b31206849e82bab439719a531c0acc71fe1c7221fb393db0cc969783299227c9549e2166ef2d82129d1c0b670d2fb3dca6345c53853b65c26ad381b91cd303bdeeda3c050088b9b892d5be8a9fb2ebfdd2f26704f865905554fae49a6865502e375d398268c0e9140ab82b3f0d2f912368af9eafe976743f3d3a8a6cbee84704357c8d74395383c22f1de143aa966eae50a03e87e03a43c91e3d73b35795363b2a89ec0806601debbcc960aacd6fd8e058caeea51373a2a4320c7f9f6d0f7b548e97fc4668ab6eeafaed85722a1bd85d9b0b9131238b8b91a300dd0fc9b81a079990d00a5cd8118f0aaed8d82c6205f44cbdf0685a5d0fe4a113aca0a517d2098f9d7a2cb13f066a23db87929427860371bb661a60357207a23e046b946fbc47f304e53d0a9446e7f783eca74cc2e72f38387a6b9f34b4109dc5b55ed3cfe520a284e18f0d5c5dcfbd8569d73557f59133114cb606118a895389cbdcd495fbd3de31163cbb2bbd474bdb35b957231883419d8f4865fa1e1a9b78ac8e4f723bf26eab5320c03bb68ae19994385219e80a3cbbce0ce5f2d328da7c0b58a4cbd8f730f94ee01223814ac31aefa28f1b2c49c83cc7a2968e8ee9f1a71821c136ba7fe9ba083eb910f4123e5a65b46281cf96e75d428419170481d438ece616f44a5eadfb536b5a30acdfa02d2d60114faa220abe466f2f574e223795402a0c3943eb653907f265f629596ccedc11a98665656e6cbd2f2a2cdc364ab70aad8952f764b68bdf2b60d402a9d1341637d61e5a574489c1c3c06fa363c8cd1e617f4790738a47eecb52c03ba97e86f07f5d88c6d23de531456d31b73714935a1d6f524da8a33995ea38c1c5c4fbeedde7e7a006f9ef50521175f9db89dde35f5e4c7fec6c2162047e76e80dbc36a6dfb9be034fe127caffd85c25fd215e6353b10c55d7d7e579c0cf959eab66fd9907aa0b8fc8abe998fe4745a279d544a8b55808df4963a602be2f637fa398a21ce625505259222e8869f2b52e50314dc9c7239ca985041374d17bd89cda349fb67b977c84a29afeec8333a69ef9cb1d13e084f5478bd4acf6c74dd04c420bec973f0d99e51a9bb653de1a66079a5c66ec6d4a2025dbf3fc6ab226db9917d723cf2934c961b0936f47bd03b6ec65a6aaae43dfeff126f3e715931d9bd2ffad12a1a64ac4843cdc317bb0482961a4dcbc2b27969730925570b812e384749cdb139b26ee44f556be640953f620abc96802ff5a7156a3e7fafdd58e5ca6bbe1d20dca8bab2133ae080015000000000008000100", @ANYRES32=r15, @ANYBLOB], 0x1074}, 0x1, 0x0, 0x0, 0x20008002}, 0x5) 2.296846779s ago: executing program 2 (id=2939): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x200000000000000, 0x40040c0}, 0x8000) 2.274873673s ago: executing program 0 (id=2940): syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x380, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa, 0x6, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcd1876deaf8e9264e6fa3ce2dff9281c9fe68a3000000006f0000044e43e740e077e1d16212fb0000000000000000000000000007ffff"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 2.002314442s ago: executing program 0 (id=2941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xfffffff5, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2.001853795s ago: executing program 2 (id=2942): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0xaf, &(0x7f0000000100)="c3941108a8000000009e08e086dd3ddd5e4cf73d9da674ebca0ce0510e656d14ccecebc51c669fa2c8c63d9b60879b1691088a165b47b112d55312223baba55ec5e6a8a10196a0a7ba01d00edaa257e6dd385979ceb51787dab408dfc44e08449ec766cb0d0cb70a59b2bb6cb0b0ca626cb1b190586da7bb", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 1.817758096s ago: executing program 0 (id=2944): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616ef314000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000040) 1.810296954s ago: executing program 1 (id=2945): r0 = epoll_create1(0x0) r1 = socket$kcm(0x11, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x5}, {0xf, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xfffd, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0x2, 0x9, 0x2, 0x8}, {0x10001, 0xfffffeff, 0x108, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24004805}, 0x20000000) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) close(r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r8 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) r12 = getpid() r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10) sendmsg$netlink(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r15}, @nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x48}]}]}, 0x24}], 0x10000000000002d7, 0x0, 0x0, 0x20080c5}, 0x0) (async) sendmmsg$unix(r11, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000500)="e85e", 0x2}, {&(0x7f00000006c0)="640caeebe90cdd357d7e9aafb8f4b1e18ed89c54fc61bfc68ef52391942baa3a44bd02a15c543685db1a6253610c1ee5678033aec0b382f1d0601115b604707ade940fc09336157419eb7850dbfe5d2e76ef851d8789949f15808bb918e8ac98728b421af239441a793ef5e3f4e23e050567c4f8d908e2be9543a38e87bef954c17bff2f91ebf3f7187d48eb20b319f83147a9f5219b60e4f7a2", 0x9a}], 0x3, &(0x7f0000000900)=[@rights={{0x1c, 0x1, 0x1, [r6, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r12, r15}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r2, r3, r8]}}, @cred={{0x1c}}], 0xa0, 0x200008d0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000009c0)}], 0x1}}, {{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="bd3e9ce76613c074677d43d9e4a6cc454d1346dcea7a15bc4a047bdedf3f25b97b8a82dcae967a010c422cbfe97ddcf6aa22102c480ae3dc63c74a2890e918862e081da261da56792260f01c419156d55b45954844fb43981c87a6b3acf0f3d6bd137bb306be24226c1f530ba4f420e18fb666de8d83cda91a9277e7223205f8823e7a508807e01de3f6797b46d44865d0695869203eaabe3a77ebae5dda72a763fd79359442630f359c8d9b60a9f1961c7bc2a7fd4ef99c57fcd861093ac42a0daa1b073d33b6a4366e9792215a596a6688fb13fee959a1678d5821d7a092c3f467d9dfef406903b07ef328f692177c0c", 0xf1}, {&(0x7f0000000c00)="f66d62fa0767f24e7cecd21b1535876559f7a23e7c2e1808b21166f1d0814328eae1ef656fb1878e74690a5ac057fdade2b5363628103cf1f3a3c6abc2866ae4ffda2209a8d4ee8772862cff8034020d0b10dc9f5d21b12abaeb422511528f737399999f58fcca19895f99e001d70a7671952384745090fe4c28a0a178d9cd15a1ab5f96ec5d0ee1c7c9bc9e7ec89403fa842e070dc35b2e12e8944d7f3f6dd522086a509f9ea13c329ba7b6e80edef705c59d93a80245a741500793fa4ab025f9836e2068c3ec484dac9d56024082b6b4976f27a18b08b5df81d8ba2b0e2e7e76d67fe1d0f842ee5b3775182b025a3a1a0b869b3783", 0xf6}, {&(0x7f0000000d00)="ffe16b3f5fc1cdd85b8fa23ba7cd8fbf3aabf714eb3eb3d61ddfd82d636c0b6aee5d4be84dfcc30eea04c0ce5d5fcd78b328bf407f40c81275f93cea777e56817d99feb0ed68f728650186b6f8436f9b531c6bd84b3a6a62b8db09b9637e2308d04459", 0x63}], 0x3, &(0x7f0000000f00)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15}}}, @rights={{0x18, 0x1, 0x1, [r2, r11]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r12, r15}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r16}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r16}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r7, r6, r0, 0xffffffffffffffff, r4, r4, r8, r10, r7]}}], 0x120, 0x800}}, {{&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000011c0)="1c48042899d2199136", 0x9}, {&(0x7f0000000dc0)="f02ae499a6d911a2a5ec97afe3a219a4d8b7b80a66d396e444cb2ea56428268f14734d280a9306b6a1f815859c1dbd5009f86de8919c6ecda91f318afbbce52de41996101bfbc0c85ac333f92ada9a567911eefa36755284e69245fce4f9ee65fbb9efd7145c31b45cd62cf29d32f2558e8686067f89c330c1d79f66de378d525c", 0x81}, {&(0x7f0000001380)="643d565838805dc9c32504b884eb90cfb8f8978ce77290f8f2ee0a6dd31fcf1a175408f49a846540de48ef0e9c98dd78a02e7bf993070345be0751b0246c78aebdf7cba924069b9090df5bb219697c9e8b0a9edd9d4037f9830cf2c1795c3c2d8a686e6d0f60dc946607845e83541988c6364252ea104d107072d34843307c6686dfa347347e804ad691352803071dfaf53df261feba8f7242c1c91df26c953ebf2d09afb0e8201ef408093e866cc35c35a3682499dd19c71cf31bda4e8e434dcdb448a2a4501c50b0ff892e97a1e3281ab8c5", 0xd3}], 0x3, &(0x7f0000001500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x14}}, {{&(0x7f0000001540)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f00000015c0)="49e825c48873b21cbd6cf06dced1a68fb19bb61d880e8cd9bd08587df02e05fe512e05d57401558eda314aa7a9970b44558ed82e13ebbbb66999c46843ba752f589dac54e2cb095ae18a99e44ea491ff35e0d39415ff9e0ebd45f30ffbeb5932c5d99c4c8434912bbcc3d219f4b917edef04fc049544fc7d04feb72316f197623ee46b0f1f6042f30841ee350f201cb4ac671f7ab4007f044ca6674914c78179597b3a8a012c5b6aaf75450e04e0dded976f62", 0xb3}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r10, @ANYRES16=r16, @ANYRES32, @ANYBLOB="000000001c000000000000000000001000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x1}}, {{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000018c0)='VR_', 0x3}, {0xfffffffffffffffe}, {&(0x7f0000001900)="29cea65a5847b482ccf03edb4aef848077762fc8f48e59243ee887d0cdfdcf592dad21a670868099ea862a1d5abd20cb834fc058f7d4432b44f4dde6373beafda675b0e798db2bf77af70dcecf28d0c527b6c2dd23c59636b3cb9e7ebe20426e3d7d0b95109fce28c9c05b9fdd0c5aca1467c54d25dd19bf59f52775fdb3c859dc82b85e4a8a1847c7e7e7dbe4851d9a90ffb00aa1a39ca374ea78503f0de15a5d114cd08091e144b105fb8b02658123aa40203da948a9e8c735315b82e611f9eef99ec0367a8309", 0xc8}, {&(0x7f0000001a00)="60b69b66ec312ad01f2259467228ba1ba6a249d5d99fcaa8b863ac4ffd50bd94b79d3aa0033ae29f3fb8bee3a6f96605f975dceb2a347db55d1dc3fb63591f4a1cf658dc40e7bbecd455324366a3ed8b7e500e9c1cb5bdfb0536936f209aeadd841a7a04fe02ece8511d212ab1669c27d15fc30cd54f48814cffb1b8ee388e740b7bc2cf7f5babb7b1d0b6e4e265c169355fdf11d9393ccd4d55c9f675f7730846804c1187106d16f03c0fd2f1e5f0e7c0a4962de11408c8ac42b55db2c2422c067bba93b9dc5539cb2507b6ec6618a979484598bb3f6bcfee4004b9cb3f2d4b9f6df1cd7b69e221e1e89247", 0xec}], 0x4, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r10, r1, 0xffffffffffffffff, r10, r11, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8, 0x81}}], 0x6, 0x0) (async) r17 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r11, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r17, 0x1, r0, &(0x7f0000000000)={0xa0000001}) (async) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000000)={{0x88, @multicast2, 0x4e21, 0x4, 'lblcr\x00', 0x12, 0x1, 0xd}, {@multicast1, 0x4e20, 0x10000, 0x8, 0x6, 0x2}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) (async) syz_init_net_socket$nfc_llcp(0x27, 0x5, 0x1) 1.809966553s ago: executing program 3 (id=2946): unshare(0x2c060000) unshare(0x24020400) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6, 0x0, 0x0, 0xb100}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.601569466s ago: executing program 0 (id=2947): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1) 1.601163842s ago: executing program 3 (id=2948): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) select(0x40, &(0x7f0000000000)={0x3}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) socket(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x3}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(r4, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write(r6, &(0x7f0000000380)="000039a4c1f86906dd2b97a2f8da4bdee791b65640710b41a1d6b6ee63cbc004218ee8c071310218aef5cd86f437e78e30ec98664f3862eb3958dbd068a9ffc3e33735786b463b3ff1275cc11bbaf63cb20ba144fb1d57c358e030b044cf113707786b054208251cfc1b", 0x6a) splice(r6, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0xb7, 0x60, &(0x7f00000004c0)="8649faf5b0018536418fad4a3c24f80a266235b7c272383ee3109b499baa4219963680009d416cee01978a39d5eb6c1aa171cdad89b240a4c6e1bbf8bc700311cbbb721668f1fab9376605337a2353ae80ce091785d221d5348d34739108d811aa9b8a2c5553daf15b12770d644293afcc800c3b75c2753eb38c4a40558ff8322a7756b844ad0322ed670ee130383448ead30119cbeb46a5973de84b905294f7e7ff81826469b83e63fd4d4e80acd9b71db78fd8c4748a", &(0x7f0000000580)=""/96, 0xffffffff, 0x0, 0xb5, 0x23, &(0x7f0000000600)="fb4f162c258750057c2349d7de9f032326c34dd42e0f138b4c2c498155d02e7f9783555ae7bda75b62d311bcf02e9f327fb42df494e2465b62cf4341b0267a99014b1a1d6d73ca39199f54a19e6c638d1d6bf16f1a432b1107042ef682e459c6a2c0eb7fc785340c5bd340b50280d9e06a1aed4ad61ff5fb5c8501023cc7666ed85aeca41211d4f7bf1b31b5658a3cc2a9c9e3d079e642d4ec48c8cfc7f3706925fbadded186485efe34307971d75d155835bd145a", &(0x7f00000006c0)="a00368cb5c9ceca2d0e83d74a775cd9e51cb4385387e71219ede262c1be30f9a5cb77e", 0x2, 0x0, 0x8}, 0x50) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000480)='\x00\x00\x00', 0x3}], 0x1, 0x8) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r4) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r10, @ANYBLOB="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"/294], 0x12c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$FITHAW(r0, 0xc0045878) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000004000000e0000002000000000000000000000000ff02000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4080) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FSGROWFSLOG(r7, 0x4008586f, &(0x7f0000000a00)={0x7, 0x7c1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0xffff0000, 0xe, 0x0, &(0x7f0000000400)="aa000000000001000061127e9740", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.403529908s ago: executing program 0 (id=2949): getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0x7, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x2a060400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00'/28], 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r7, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0b062dbd70000000000030000000050035000700000005003300030000000a0001007770616e30000000050034000e0000000500360001000000c4a49edfb4ce96ed132a38a4b2626aff5da8d1d4310e8efffa0916bc3039827c9721b4abe95af5ece976ab23086bed"], 0x40}}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1.023226365s ago: executing program 1 (id=2950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd7000000000000a0000400000000001"], 0x24}, 0x1, 0x0, 0x0, 0x20040814}, 0x4008000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x600}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 881.96755ms ago: executing program 1 (id=2951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600d0000000406", @ANYBLOB], 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0400fcffffff0400f2ff1e000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x24040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001000)={'bridge_slave_0\x00', @random="e4a8b032869c"}) getsockopt$inet6_mptcp_buf(r12, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB], 0x7c}}, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000001080)=r11, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r10, 0x5452, &(0x7f0000000140)=0x8000) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff1083}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 539.255501ms ago: executing program 3 (id=2952): socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet(0x2, 0xa, 0x400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 13) 375.500797ms ago: executing program 3 (id=2953): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000200020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018cd0000000000000c0000000c0000000b000000090000000000000700000000002e0061000000005f2e00"], 0x0, 0x2f, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000580)="c2d8c76bbd1047715c9b08ab01066640b569f4f70b114630471224396d571b02e62ec7a06e880ab9b1dc39d71b9cb3877ac9ca99578371f043eee313e09bc0b922c0757f", 0x44) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 0s ago: executing program 3 (id=2954): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000001200), 0x0, 0x200000000000, 0x20000000000001bc}}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty=0xf4, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): ink socket, switching to perfect channel medium [ 333.118274][T12333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.140388][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 333.345565][T12347] syz_tun: entered allmulticast mode [ 333.428250][T12354] ip6t_srh: unknown srh match flags 4000 [ 333.792148][T12363] syz_tun: entered allmulticast mode [ 333.813714][T12362] syz_tun: left allmulticast mode [ 334.851838][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 335.251684][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 335.261344][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.812650][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.360774][T12387] syzkaller0: entered promiscuous mode [ 336.369079][T12387] syzkaller0: entered allmulticast mode [ 336.551797][T12399] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 336.558043][T12400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.587145][T12394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.649181][T12399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.697205][T12403] bond5: (slave veth11): Enslaving as an active interface with a down link [ 336.708117][T12399] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 336.715169][T12399] bond5: (slave batadv2): making interface the new active one [ 336.717825][T12399] batadv2: entered promiscuous mode [ 336.723089][T12399] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 336.873663][T12403] bond5 (unregistering): (slave veth11): Releasing active interface [ 336.910399][T12403] bond5 (unregistering): (slave batadv2): Releasing active interface [ 336.910455][T12403] batadv2: left promiscuous mode [ 336.937324][T12403] bond5 (unregistering): Released all slaves [ 336.995391][T12419] __nla_validate_parse: 2 callbacks suppressed [ 337.003983][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2001'. [ 337.045156][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2008'. [ 337.678337][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 338.115936][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 338.286539][T12465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.286889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.287110][T12465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.288375][T12465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.834846][ T1141] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 340.245655][T12521] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2053'. [ 340.361159][T12523] netlink: 'syz.3.2052': attribute type 39 has an invalid length. [ 341.013318][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.678846][T12547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.685115][T12474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.893617][T12551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2067'. [ 341.901469][T12555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.901677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.919771][T12551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2067'. [ 341.983893][T12560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.984102][T12560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.984309][T12560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.985409][T12560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.985569][T12560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.986262][T12560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.986452][T12560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.123781][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 342.598907][T12585] netlink: 'syz.4.2076': attribute type 2 has an invalid length. [ 342.599302][T12585] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2076'. [ 342.934135][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 344.314457][T12607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2081'. [ 344.323990][T12607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2081'. [ 345.222610][T12572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.661332][T12625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2087'. [ 345.748130][T12628] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 346.024683][T12625] net_ratelimit: 1606 callbacks suppressed [ 346.024800][T12625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.024990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.025748][T12625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.025918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.026164][T12625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.026331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.027708][T12625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.027851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.028040][T12625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.028163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.338431][T12638] ip6t_rt: unknown flags 1F [ 346.351798][T12638] netlink: 'syz.0.2091': attribute type 1 has an invalid length. [ 346.969832][T12653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2094'. [ 346.969882][T12653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2094'. [ 348.106769][T12689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2106'. [ 348.106815][T12689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2106'. [ 348.699586][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 349.083452][T12733] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2116'. [ 349.111992][T12736] syzkaller0: entered promiscuous mode [ 349.112047][T12736] syzkaller0: entered allmulticast mode [ 349.269620][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2119'. [ 349.269691][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2119'. [ 350.040817][T12761] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2127'. [ 350.246047][T12768] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 350.259560][T12768] bond8 (unregistering): Released all slaves [ 351.252057][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 351.915777][ T12] net_ratelimit: 251 callbacks suppressed [ 351.915833][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.339133][T12807] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 352.339188][T12807] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 352.646985][T12822] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 352.749184][T12829] netlink: 'syz.3.2146': attribute type 11 has an invalid length. [ 352.788179][T12824] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.788792][T12824] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.824884][T12824] batman_adv: batadv0: Interface deactivated: veth0 [ 352.836303][T12824] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 352.946117][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 352.980520][T12836] syzkaller0: entered promiscuous mode [ 352.980569][T12836] syzkaller0: entered allmulticast mode [ 353.411336][T12857] x_tables: duplicate underflow at hook 3 [ 353.585810][T12859] syzkaller0: entered promiscuous mode [ 353.585856][T12859] syzkaller0: entered allmulticast mode [ 353.647549][T12867] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 355.026432][T12894] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2169'. [ 355.026623][T12894] 0·: renamed from hsr0 (while UP) [ 355.060264][T12894] 0·: entered allmulticast mode [ 355.066379][T12894] hsr_slave_0: entered allmulticast mode [ 355.066432][T12894] hsr_slave_1: entered allmulticast mode [ 355.066974][T12894] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 355.255129][T12902] tipc: Enabled bearer , priority 10 [ 355.471812][T12909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.487003][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 355.538351][T12911] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.538472][T12911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.538484][T12911] IPv6: NLM_F_CREATE should be set when creating new route [ 355.538533][T12911] IPv6: NLM_F_CREATE should be set when creating new route [ 355.538558][T12911] IPv6: NLM_F_CREATE should be set when creating new route [ 356.243133][T12939] netlink: 'syz.0.2180': attribute type 1 has an invalid length. [ 356.526588][T12939] 8021q: adding VLAN 0 to HW filter on device bond6 [ 357.512649][T12988] lo speed is unknown, defaulting to 1000 [ 357.512840][T12988] lo speed is unknown, defaulting to 1000 [ 357.545098][T12988] lo speed is unknown, defaulting to 1000 [ 357.576539][T12988] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 357.576628][T12988] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 357.576671][T12988] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 357.629861][T12988] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 357.782243][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2195'. [ 358.152761][T12988] lo speed is unknown, defaulting to 1000 [ 358.155415][T12988] lo speed is unknown, defaulting to 1000 [ 358.157745][T12988] lo speed is unknown, defaulting to 1000 [ 358.161328][T12988] lo speed is unknown, defaulting to 1000 [ 358.164322][T12988] lo speed is unknown, defaulting to 1000 [ 358.210939][ T5726] team_slave_0: entered promiscuous mode [ 358.211012][ T5726] team_slave_1: entered promiscuous mode [ 358.240837][ T5726] team_slave_0: left promiscuous mode [ 358.241803][ T5726] team_slave_1: left promiscuous mode [ 358.294985][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 358.759005][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2204'. [ 359.008842][T13039] netlink: 'syz.1.2208': attribute type 2 has an invalid length. [ 359.008889][T13039] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2208'. [ 359.103590][T13044] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 359.128235][T13044] netlink: 'syz.1.2208': attribute type 10 has an invalid length. [ 359.149851][T13044] team0: Port device dummy0 added [ 359.725983][T13060] ip6t_rt: unknown flags 1F [ 359.738346][T13060] netlink: 'syz.2.2217': attribute type 1 has an invalid length. [ 360.331248][T13083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.478057][T13090] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 361.013008][T13111] FAULT_INJECTION: forcing a failure. [ 361.013008][T13111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.028155][T13111] CPU: 1 UID: 0 PID: 13111 Comm: syz.2.2236 Not tainted syzkaller #0 PREEMPT(full) [ 361.028186][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.028199][T13111] Call Trace: [ 361.028278][T13111] [ 361.028335][T13111] dump_stack_lvl+0xe8/0x150 [ 361.028510][T13111] should_fail_ex+0x410/0x560 [ 361.028645][T13111] _copy_from_user+0x2d/0xb0 [ 361.028721][T13111] __sys_sendto+0x2a9/0x5a0 [ 361.028841][T13111] ? ksys_write+0x1e6/0x270 [ 361.028939][T13111] ? __pfx___sys_sendto+0x10/0x10 [ 361.028968][T13111] ? __mutex_unlock_slowpath+0x731/0x900 [ 361.029111][T13111] ? __pfx_ksys_write+0x10/0x10 [ 361.029146][T13111] __x64_sys_sendto+0xde/0x100 [ 361.029182][T13111] do_syscall_64+0x166/0x520 [ 361.029249][T13111] ? trace_irq_disable+0x3b/0x140 [ 361.029292][T13111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.029331][T13111] ? clear_bhb_loop+0x70/0xc0 [ 361.029358][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.029379][T13111] RIP: 0033:0x7f059c39e159 [ 361.029407][T13111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.029426][T13111] RSP: 002b:00007f059d301028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 361.029458][T13111] RAX: ffffffffffffffda RBX: 00007f059c625fa0 RCX: 00007f059c39e159 [ 361.029474][T13111] RDX: 0000000000000028 RSI: 00002000000006c0 RDI: 0000000000000003 [ 361.029488][T13111] RBP: 00007f059d301090 R08: 0000200000000200 R09: 000000000000001c [ 361.029502][T13111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.029523][T13111] R13: 00007f059c626038 R14: 00007f059c625fa0 R15: 00007ffd804bf7b8 [ 361.029557][T13111] [ 361.272118][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'. [ 362.038755][T13138] netlink: Failed to add helper -22 [ 362.038838][T13138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.184320][T13151] syz_tun: entered allmulticast mode [ 362.189912][T13149] syz_tun: left allmulticast mode [ 362.636895][T13171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2261'. [ 362.680338][T13174] syzkaller0: entered promiscuous mode [ 362.680387][T13174] syzkaller0: entered allmulticast mode [ 362.849239][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2264'. [ 362.849291][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2264'. [ 362.849317][T13181] netlink: 'syz.3.2264': attribute type 6 has an invalid length. [ 362.849329][T13181] netlink: 'syz.3.2264': attribute type 5 has an invalid length. [ 362.901666][ T134] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.901743][ T134] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.914061][ T61] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.914106][ T61] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.069611][T13191] xt_policy: output policy not valid in PREROUTING and INPUT [ 363.195107][T13194] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2270'. [ 363.205771][T13194] 1·: renamed from c0· (while UP) [ 363.232316][T13194] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 363.259920][T13199] FAULT_INJECTION: forcing a failure. [ 363.259920][T13199] name failslab, interval 1, probability 0, space 0, times 0 [ 363.259975][T13199] CPU: 1 UID: 0 PID: 13199 Comm: syz.3.2268 Not tainted syzkaller #0 PREEMPT(full) [ 363.259998][T13199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.260010][T13199] Call Trace: [ 363.260017][T13199] [ 363.260026][T13199] dump_stack_lvl+0xe8/0x150 [ 363.260070][T13199] should_fail_ex+0x410/0x560 [ 363.260106][T13199] should_failslab+0xa8/0x100 [ 363.260166][T13199] __kvmalloc_node_noprof+0x176/0x820 [ 363.260199][T13199] ? __kvmalloc_node_noprof+0x345/0x820 [ 363.260222][T13199] ? bpf_compute_scc+0xd2/0xb10 [ 363.260265][T13199] ? bpf_compute_scc+0xd2/0xb10 [ 363.260304][T13199] bpf_compute_scc+0xd2/0xb10 [ 363.260356][T13199] bpf_check+0x25c9/0x2e10 [ 363.260400][T13199] ? ktime_get_with_offset+0x93/0x2d0 [ 363.260453][T13199] ? __pfx_bpf_check+0x10/0x10 [ 363.260477][T13199] ? bpf_obj_name_cpy+0x194/0x1e0 [ 363.260508][T13199] bpf_prog_load+0x14d6/0x1c20 [ 363.260542][T13199] ? __pfx_bpf_prog_load+0x10/0x10 [ 363.260588][T13199] __sys_bpf+0xd0d/0xd90 [ 363.260619][T13199] ? __pfx___sys_bpf+0x10/0x10 [ 363.260652][T13199] ? __fget_files+0x2a/0x420 [ 363.260706][T13199] ? ksys_write+0x242/0x270 [ 363.260737][T13199] ? __pfx_ksys_write+0x10/0x10 [ 363.260769][T13199] __x64_sys_bpf+0xba/0xd0 [ 363.260792][T13199] do_syscall_64+0x166/0x520 [ 363.260820][T13199] ? trace_irq_disable+0x3b/0x140 [ 363.260838][T13199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.260859][T13199] ? clear_bhb_loop+0x70/0xc0 [ 363.260885][T13199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.260905][T13199] RIP: 0033:0x7fb776f9e159 [ 363.260926][T13199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.260944][T13199] RSP: 002b:00007fb777dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.260969][T13199] RAX: ffffffffffffffda RBX: 00007fb777225fa0 RCX: 00007fb776f9e159 [ 363.260985][T13199] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 363.260998][T13199] RBP: 00007fb777dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 363.261012][T13199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.261023][T13199] R13: 00007fb777226038 R14: 00007fb777225fa0 R15: 00007fff4a762c48 [ 363.261056][T13199] [ 363.607941][T13203] tipc: Cannot configure node identity twice [ 364.042964][T13213] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.043161][T13213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.043656][T13213] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.043804][T13213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.128174][T13213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.153921][T13213] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.230389][T13213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.260183][T13213] batman_adv: batadv0: Interface activated: veth0 [ 364.350468][T13213] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 364.350581][ T5785] lo speed is unknown, defaulting to 1000 [ 364.350610][ T5785] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 364.666922][T13240] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2282'. [ 364.688644][T13242] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2282'. [ 364.823447][T13244] syzkaller0: entered promiscuous mode [ 364.823862][T13244] syzkaller0: entered allmulticast mode [ 365.481053][T13265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2288'. [ 366.285050][T13257] bridge1: left promiscuous mode [ 366.352611][ T61] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.354155][ T148] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.354196][ T148] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.753539][T13288] syzkaller0: entered promiscuous mode [ 366.759334][T13288] syzkaller0: entered allmulticast mode [ 366.881265][T13293] netlink: 'syz.0.2297': attribute type 1 has an invalid length. [ 366.925376][T13293] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.948563][T13293] bond7: (slave geneve2): making interface the new active one [ 366.957019][T13293] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 367.001746][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.003295][ T6652] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.007213][ T6652] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.068028][T13297] tipc: Enabling of bearer rejected, failed to enable media [ 367.192326][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.875582][T13329] syz_tun: entered allmulticast mode [ 367.909617][T13328] syz_tun: left allmulticast mode [ 368.424887][T13351] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 368.559605][T13359] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 368.709722][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'. [ 368.709789][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'. [ 369.044538][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2322'. [ 369.172256][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.483762][T13388] FAULT_INJECTION: forcing a failure. [ 369.483762][T13388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.483817][T13388] CPU: 0 UID: 0 PID: 13388 Comm: syz.2.2329 Not tainted syzkaller #0 PREEMPT(full) [ 369.483841][T13388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.483853][T13388] Call Trace: [ 369.483862][T13388] [ 369.483870][T13388] dump_stack_lvl+0xe8/0x150 [ 369.483906][T13388] should_fail_ex+0x410/0x560 [ 369.483944][T13388] _copy_from_iter+0x1d3/0x1660 [ 369.484045][T13388] ? __alloc_skb+0x27a/0x7a0 [ 369.484124][T13388] ? __alloc_skb+0x27a/0x7a0 [ 369.484156][T13388] ? __alloc_skb+0x27a/0x7a0 [ 369.484185][T13388] ? __pfx__copy_from_iter+0x10/0x10 [ 369.484214][T13388] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 369.484242][T13388] ? __alloc_skb+0x27a/0x7a0 [ 369.484269][T13388] ? __alloc_skb+0x27a/0x7a0 [ 369.484303][T13388] ? netlink_sendmsg+0x650/0xb40 [ 369.484372][T13388] ? skb_put+0x112/0x210 [ 369.484395][T13388] netlink_sendmsg+0x6c0/0xb40 [ 369.484430][T13388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.484463][T13388] ? apparmor_socket_sendmsg+0x18b/0x360 [ 369.484575][T13388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.484600][T13388] sock_sendmsg_nosec+0x13a/0x180 [ 369.484630][T13388] ____sys_sendmsg+0x54e/0x850 [ 369.484663][T13388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.484695][T13388] ? import_iovec+0x73/0xa0 [ 369.484722][T13388] ___sys_sendmsg+0x2a5/0x360 [ 369.484743][T13388] ? __lock_acquire+0x6df/0x2e50 [ 369.484778][T13388] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.484836][T13388] ? __fget_files+0x2a/0x420 [ 369.484862][T13388] ? __fget_files+0x3a2/0x420 [ 369.484899][T13388] __x64_sys_sendmsg+0x1b1/0x290 [ 369.484925][T13388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.484970][T13388] do_syscall_64+0x166/0x520 [ 369.484998][T13388] ? trace_irq_disable+0x3b/0x140 [ 369.485018][T13388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.485038][T13388] ? clear_bhb_loop+0x70/0xc0 [ 369.485060][T13388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.485080][T13388] RIP: 0033:0x7f059c39e159 [ 369.485100][T13388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.485119][T13388] RSP: 002b:00007f059d301028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.485142][T13388] RAX: ffffffffffffffda RBX: 00007f059c625fa0 RCX: 00007f059c39e159 [ 369.485157][T13388] RDX: 0000000020008000 RSI: 0000200000000440 RDI: 0000000000000003 [ 369.485171][T13388] RBP: 00007f059d301090 R08: 0000000000000000 R09: 0000000000000000 [ 369.485184][T13388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.485197][T13388] R13: 00007f059c626038 R14: 00007f059c625fa0 R15: 00007ffd804bf7b8 [ 369.485231][T13388] [ 371.743295][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2332'. [ 371.801379][T13395] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 372.314039][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2340'. [ 372.349427][T13417] xt_hashlimit: size too large, truncated to 1048576 [ 372.418049][T13414] syz_tun: entered allmulticast mode [ 372.579985][T13425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.599115][T13425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.680267][T13426] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2344'. [ 372.845516][T13435] syzkaller1: entered promiscuous mode [ 372.845572][T13435] syzkaller1: entered allmulticast mode [ 372.848728][T13409] syz_tun: left allmulticast mode [ 373.013265][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.176675][T13446] SET target dimension over the limit! [ 373.262036][T13450] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.436694][T13456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2352'. [ 373.452728][T13456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2352'. [ 373.491927][T13460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.613747][T13465] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 373.613802][T13465] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 374.189786][T13489] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 374.295551][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.474097][T13495] erspan0: left promiscuous mode [ 374.572655][T13495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.586213][T13495] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.696594][T13495] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 374.714154][T13276] lo speed is unknown, defaulting to 1000 [ 374.714195][T13276] syz0: Port: 1 Link ACTIVE [ 374.749891][ T61] bridge0: port 3(veth0) entered blocking state [ 374.750023][ T61] bridge0: port 3(veth0) entered forwarding state [ 374.759897][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.760017][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.771039][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.771155][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.820669][T13507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.956562][T13275] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 375.106054][T13516] syzkaller0: entered promiscuous mode [ 375.112195][T13516] syzkaller0: entered allmulticast mode [ 375.378886][T13523] FAULT_INJECTION: forcing a failure. [ 375.378886][T13523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.378945][T13523] CPU: 0 UID: 0 PID: 13523 Comm: syz.0.2382 Not tainted syzkaller #0 PREEMPT(full) [ 375.378969][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.378988][T13523] Call Trace: [ 375.378994][T13523] [ 375.379002][T13523] dump_stack_lvl+0xe8/0x150 [ 375.379034][T13523] should_fail_ex+0x410/0x560 [ 375.379066][T13523] _copy_from_user+0x2d/0xb0 [ 375.379088][T13523] ___sys_sendmsg+0x1c6/0x360 [ 375.379108][T13523] ? __lock_acquire+0x6df/0x2e50 [ 375.379131][T13523] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.379185][T13523] ? __fget_files+0x2a/0x420 [ 375.379207][T13523] ? __fget_files+0x3a2/0x420 [ 375.379239][T13523] __x64_sys_sendmsg+0x1b1/0x290 [ 375.379262][T13523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.379301][T13523] do_syscall_64+0x166/0x520 [ 375.379325][T13523] ? trace_irq_disable+0x3b/0x140 [ 375.379342][T13523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.379360][T13523] ? clear_bhb_loop+0x70/0xc0 [ 375.379383][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.379400][T13523] RIP: 0033:0x7f57cef9e159 [ 375.379418][T13523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.379434][T13523] RSP: 002b:00007f57cff16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.379454][T13523] RAX: ffffffffffffffda RBX: 00007f57cf225fa0 RCX: 00007f57cef9e159 [ 375.379468][T13523] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000006 [ 375.379481][T13523] RBP: 00007f57cff16090 R08: 0000000000000000 R09: 0000000000000000 [ 375.379493][T13523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.379504][T13523] R13: 00007f57cf226038 R14: 00007f57cf225fa0 R15: 00007ffdf06f6068 [ 375.379534][T13523] [ 375.616579][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2386'. [ 375.616629][T13531] block nbd2: Unsupported socket: should be TCP or UNIX. [ 375.685723][ T134] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 375.813093][T13539] netlink: 'syz.1.2387': attribute type 11 has an invalid length. [ 375.830580][T13275] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 376.399271][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'. [ 376.451278][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'. [ 376.723078][ T144] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 376.733207][ T144] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 376.920814][T13575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2403'. [ 377.391739][T13593] netlink: 'syz.3.2406': attribute type 9 has an invalid length. [ 377.498688][ T5739] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 377.647717][T13593] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 377.658412][T13593] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 378.161197][T13613] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2414'. [ 378.170769][T13613] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2414'. [ 378.184218][T13613] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2414'. [ 378.286066][ T5739] hid-generic 0005:0008:0009.001E: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 378.308568][T13616] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 378.332559][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 378.401002][T13618] fido_id[13618]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 378.750501][T13628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.777233][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.785694][T13275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.804412][T13628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.804588][T13622] netlink: Unknown conntrack attr (0) [ 379.100054][T13640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2423'. [ 379.112841][T13640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2423'. [ 379.125401][T13635] ip_vti0: entered promiscuous mode [ 379.235126][T13274] hid-generic 0005:0008:0009.001F: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 379.557341][T13655] fido_id[13655]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 380.058424][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.092039][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 381.482026][T13703] __nla_validate_parse: 4 callbacks suppressed [ 381.482150][T13703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2436'. [ 381.693178][T13702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2438'. [ 381.693309][T13702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2438'. [ 381.693395][T13702] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2438'. [ 382.022554][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'. [ 382.058344][ T9513] hid-generic 0005:0008:0009.0020: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 382.541790][T13710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.556878][T13714] fido_id[13714]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 382.619608][T13710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.634519][T13710] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 382.745048][T13728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2442'. [ 382.745100][T13728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2442'. [ 383.524136][T13780] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2451'. [ 383.607260][T13784] syzkaller0: entered promiscuous mode [ 383.613107][T13784] syzkaller0: entered allmulticast mode [ 383.860476][T13791] netlink: 'syz.4.2456': attribute type 2 has an invalid length. [ 383.892703][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.929385][T13791] D†'|o: entered promiscuous mode [ 384.060616][T13797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2458'. [ 384.070825][T13797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2458'. [ 384.418148][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.474257][T13807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.535677][T13761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.828056][T13810] veth13: entered promiscuous mode [ 384.836490][T13810] veth13: entered allmulticast mode [ 384.845080][T13810] team0: Device veth13 is up. Set it down before adding it as a team port [ 384.872430][T13818] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.973783][T13821] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 384.982740][T13821] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 385.220236][T13835] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 385.220296][T13835] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 385.558934][T13843] FAULT_INJECTION: forcing a failure. [ 385.558934][T13843] name failslab, interval 1, probability 0, space 0, times 0 [ 385.558976][T13843] CPU: 0 UID: 0 PID: 13843 Comm: syz.3.2476 Not tainted syzkaller #0 PREEMPT(full) [ 385.559001][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.559012][T13843] Call Trace: [ 385.559020][T13843] [ 385.559028][T13843] dump_stack_lvl+0xe8/0x150 [ 385.559058][T13843] should_fail_ex+0x410/0x560 [ 385.559091][T13843] should_failslab+0xa8/0x100 [ 385.559114][T13843] __kvmalloc_node_noprof+0x176/0x820 [ 385.559132][T13843] ? rcu_is_watching+0x16/0xb0 [ 385.559178][T13843] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 385.559198][T13843] ? trace_kmalloc+0x2a/0xf0 [ 385.559226][T13843] ? call_instance+0x263/0x560 [ 385.559244][T13843] ? call_instance+0x263/0x560 [ 385.559268][T13843] call_instance+0x263/0x560 [ 385.559295][T13843] bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 385.559336][T13843] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 385.559357][T13843] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 385.559376][T13843] ? trace_kmalloc+0x2a/0xf0 [ 385.559400][T13843] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 385.559425][T13843] ? __kvmalloc_node_noprof+0x345/0x820 [ 385.559443][T13843] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 385.559462][T13843] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 385.559488][T13843] bpf_compute_live_registers+0x8d3/0x1ff0 [ 385.559526][T13843] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 385.559556][T13843] bpf_check+0x25ed/0x2e10 [ 385.559586][T13843] ? ktime_get_with_offset+0x93/0x2d0 [ 385.559609][T13843] ? __pfx_bpf_check+0x10/0x10 [ 385.559630][T13843] ? bpf_obj_name_cpy+0x194/0x1e0 [ 385.559658][T13843] bpf_prog_load+0x14d6/0x1c20 [ 385.559689][T13843] ? __pfx_bpf_prog_load+0x10/0x10 [ 385.559733][T13843] __sys_bpf+0xd0d/0xd90 [ 385.559761][T13843] ? __pfx___sys_bpf+0x10/0x10 [ 385.559791][T13843] ? __fget_files+0x2a/0x420 [ 385.559831][T13843] ? ksys_write+0x242/0x270 [ 385.559857][T13843] ? __pfx_ksys_write+0x10/0x10 [ 385.559895][T13843] __x64_sys_bpf+0xba/0xd0 [ 385.559917][T13843] do_syscall_64+0x166/0x520 [ 385.559941][T13843] ? trace_irq_disable+0x3b/0x140 [ 385.559958][T13843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.559976][T13843] ? clear_bhb_loop+0x70/0xc0 [ 385.559998][T13843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.560016][T13843] RIP: 0033:0x7fb776f9e159 [ 385.560034][T13843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.560050][T13843] RSP: 002b:00007fb777dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.560072][T13843] RAX: ffffffffffffffda RBX: 00007fb777225fa0 RCX: 00007fb776f9e159 [ 385.560085][T13843] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 385.560096][T13843] RBP: 00007fb777dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 385.560108][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.560119][T13843] R13: 00007fb777226038 R14: 00007fb777225fa0 R15: 00007fff4a762c48 [ 385.560149][T13843] [ 385.837790][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.025587][T13853] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 386.035378][T13853] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 386.102827][T13855] syzkaller0: entered promiscuous mode [ 386.102887][T13855] syzkaller0: entered allmulticast mode [ 386.565458][T13882] FAULT_INJECTION: forcing a failure. [ 386.565458][T13882] name failslab, interval 1, probability 0, space 0, times 0 [ 386.565511][T13882] CPU: 1 UID: 0 PID: 13882 Comm: syz.1.2489 Not tainted syzkaller #0 PREEMPT(full) [ 386.565535][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.565548][T13882] Call Trace: [ 386.565556][T13882] [ 386.565565][T13882] dump_stack_lvl+0xe8/0x150 [ 386.565600][T13882] should_fail_ex+0x410/0x560 [ 386.565635][T13882] should_failslab+0xa8/0x100 [ 386.565659][T13882] ? skb_clone+0x212/0x3a0 [ 386.565682][T13882] kmem_cache_alloc_noprof+0xa1/0x600 [ 386.565713][T13882] ? skb_clone+0x212/0x3a0 [ 386.565741][T13882] skb_clone+0x212/0x3a0 [ 386.565768][T13882] bpf_clone_redirect+0x170/0x4b0 [ 386.565892][T13882] ? bpf_test_run+0x1d1/0x830 [ 386.565945][T13882] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 386.565969][T13882] ? __kernel_text_address+0xd/0x30 [ 386.566009][T13882] ? arch_stack_walk+0xfb/0x150 [ 386.566055][T13882] ? __pfx___schedule+0x10/0x10 [ 386.566095][T13882] ? preempt_schedule_thunk+0x16/0x40 [ 386.566121][T13882] ? preempt_schedule_common+0x7f/0xd0 [ 386.566145][T13882] ? bpf_test_run+0x1d1/0x830 [ 386.566172][T13882] ? bpf_test_timer_continue+0x10c/0x320 [ 386.566199][T13882] bpf_test_run+0x354/0x830 [ 386.566241][T13882] ? __pfx_bpf_test_run+0x10/0x10 [ 386.566278][T13882] ? __kasan_krealloc+0xec/0x110 [ 386.566309][T13882] ? skb_dst_set+0x72/0x140 [ 386.566336][T13882] bpf_prog_test_run_skb+0xe35/0x2230 [ 386.566404][T13882] ? __fget_files+0x3a2/0x420 [ 386.566431][T13882] ? __fget_files+0x2a/0x420 [ 386.566461][T13882] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 386.566486][T13882] bpf_prog_test_run+0x2c5/0x340 [ 386.566515][T13882] __sys_bpf+0xa22/0xd90 [ 386.566546][T13882] ? __pfx___sys_bpf+0x10/0x10 [ 386.566580][T13882] ? __fget_files+0x2a/0x420 [ 386.566625][T13882] ? ksys_write+0x242/0x270 [ 386.566657][T13882] ? __pfx_ksys_write+0x10/0x10 [ 386.566691][T13882] __x64_sys_bpf+0xba/0xd0 [ 386.566715][T13882] do_syscall_64+0x166/0x520 [ 386.566743][T13882] ? trace_irq_disable+0x3b/0x140 [ 386.566761][T13882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.566783][T13882] ? clear_bhb_loop+0x70/0xc0 [ 386.566808][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.566827][T13882] RIP: 0033:0x7f288b79e159 [ 386.566847][T13882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.566865][T13882] RSP: 002b:00007f288c687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.566888][T13882] RAX: ffffffffffffffda RBX: 00007f288ba26090 RCX: 00007f288b79e159 [ 386.566909][T13882] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 386.566920][T13882] RBP: 00007f288c687090 R08: 0000000000000000 R09: 0000000000000000 [ 386.566931][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.566942][T13882] R13: 00007f288ba26128 R14: 00007f288ba26090 R15: 00007ffe6c74fec8 [ 386.566973][T13882] [ 389.014591][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 389.652895][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 389.811674][T13274] page_pool_release_retry() stalled pool shutdown: id 103, 1 inflight 60 sec [ 389.816625][T13903] tipc: Enabled bearer , priority 0 [ 389.820425][T13903] syzkaller0: entered promiscuous mode [ 389.820447][T13903] syzkaller0: entered allmulticast mode [ 389.986310][T13919] tipc: Resetting bearer [ 390.029122][T13919] tipc: Disabling bearer [ 390.080654][T13920] __nla_validate_parse: 2 callbacks suppressed [ 390.080711][T13920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2496'. [ 390.080732][T13920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2496'. [ 390.291643][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 390.296389][T13764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.586036][T13942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.425847][T13951] xt_hashlimit: size too large, truncated to 1048576 [ 391.479430][T13953] syz_tun: entered allmulticast mode [ 391.524990][T13950] syz_tun: left allmulticast mode [ 391.572228][T13758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.991837][T13970] xt_hashlimit: size too large, truncated to 1048576 [ 392.185384][T13974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.349122][T13979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.349358][T13979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.349516][T13979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.349667][T13979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.349817][T13979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.349973][T13979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.548690][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2518'. [ 392.625037][T13983] veth7: entered promiscuous mode [ 392.630167][T13983] veth7: entered allmulticast mode [ 392.656045][T13981] veth9: entered promiscuous mode [ 392.656077][T13981] veth9: entered allmulticast mode [ 392.744151][T13903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.973054][T13992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2520'. [ 393.505158][T14011] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 393.762698][T14028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2530'. [ 393.762753][T14028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2530'. [ 394.098015][T14044] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 394.114403][T14044] bond4 (unregistering): Released all slaves [ 394.364264][T14056] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2539'. [ 395.117098][T14093] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2550'. [ 395.644841][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 395.705983][T14107] bond6: option broadcast_neighbor: invalid value (3) [ 395.726025][T14107] bond6 (unregistering): Released all slaves [ 396.054705][T13759] net_ratelimit: 1020 callbacks suppressed [ 396.054759][T13759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.103667][T14127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.382507][T14138] xt_hashlimit: size too large, truncated to 1048576 [ 396.492606][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 396.492699][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 396.585354][T14145] tipc: Enabled bearer , priority 10 [ 397.437518][T14178] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 397.439113][T14178] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 397.537215][T14174] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2579'. [ 397.544345][T14174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2579'. [ 398.198067][T14209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.214824][T14209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.215058][T14209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.215271][T14209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.719607][T14226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2592'. [ 398.719657][T14226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2592'. [ 398.910360][T14235] netlink: 'syz.1.2597': attribute type 3 has an invalid length. [ 399.751690][T14274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2610'. [ 399.774366][T14276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2611'. [ 400.116731][T14284] syz_tun: entered allmulticast mode [ 400.134487][T14282] syz_tun: left allmulticast mode [ 400.197425][T14254] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 400.329986][T14283] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 400.470947][T14290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2617'. [ 400.785929][T14300] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2621'. [ 400.789645][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2622'. [ 400.789784][T14304] FAULT_INJECTION: forcing a failure. [ 400.789784][T14304] name failslab, interval 1, probability 0, space 0, times 0 [ 400.789810][T14304] CPU: 1 UID: 0 PID: 14304 Comm: syz.4.2622 Not tainted syzkaller #0 PREEMPT(full) [ 400.789830][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.789840][T14304] Call Trace: [ 400.789848][T14304] [ 400.789856][T14304] dump_stack_lvl+0xe8/0x150 [ 400.789888][T14304] should_fail_ex+0x410/0x560 [ 400.789921][T14304] should_failslab+0xa8/0x100 [ 400.789942][T14304] ? security_inode_alloc+0x39/0x310 [ 400.790038][T14304] kmem_cache_alloc_noprof+0xa1/0x600 [ 400.790067][T14304] ? security_inode_alloc+0x39/0x310 [ 400.790094][T14304] security_inode_alloc+0x39/0x310 [ 400.790117][T14304] inode_init_always_gfp+0x97e/0xd30 [ 400.790145][T14304] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 400.790242][T14304] alloc_inode+0x82/0x1b0 [ 400.790266][T14304] new_inode+0x1f/0x170 [ 400.790291][T14304] __debugfs_create_file+0xb8/0x400 [ 400.790320][T14304] debugfs_create_file_full+0x3f/0x60 [ 400.790348][T14304] ref_tracker_dir_debugfs+0x197/0x360 [ 400.790390][T14304] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 400.790436][T14304] ? __kvmalloc_node_noprof+0x52f/0x820 [ 400.790457][T14304] ? __kvmalloc_node_noprof+0x345/0x820 [ 400.790480][T14304] ? __raw_spin_lock_init+0x45/0x100 [ 400.790511][T14304] alloc_netdev_mqs+0x275/0x12a0 [ 400.790571][T14304] ? __pfx_snprintf+0x10/0x10 [ 400.790592][T14304] ? __pfx_macvtap_setup+0x10/0x10 [ 400.790674][T14304] rtnl_create_link+0x321/0xd70 [ 400.790722][T14304] rtnl_newlink_create+0x258/0x7b0 [ 400.790749][T14304] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 400.790773][T14304] ? __pfx___mutex_lock+0x10/0x10 [ 400.790809][T14304] ? ns_capable+0x89/0xe0 [ 400.790844][T14304] rtnl_newlink+0x166d/0x1c30 [ 400.790887][T14304] ? __pfx_rtnl_newlink+0x10/0x10 [ 400.790911][T14304] ? do_syscall_64+0x166/0x520 [ 400.790935][T14304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.790991][T14304] ? kasan_quarantine_put+0xbb/0x1f0 [ 400.791018][T14304] ? lockdep_hardirqs_on+0x7b/0x110 [ 400.791047][T14304] ? nlmon_xmit+0xb0/0x100 [ 400.791119][T14304] ? kmem_cache_free+0x182/0x650 [ 400.791149][T14304] ? __lock_acquire+0x6df/0x2e50 [ 400.791172][T14304] ? __dev_queue_xmit+0x29b/0x3820 [ 400.791220][T14304] ? __local_bh_enable_ip+0xd6/0x140 [ 400.791243][T14304] ? lockdep_hardirqs_on+0x7b/0x110 [ 400.791267][T14304] ? __dev_queue_xmit+0x29b/0x3820 [ 400.791286][T14304] ? __local_bh_enable_ip+0xd6/0x140 [ 400.791307][T14304] ? __dev_queue_xmit+0x29b/0x3820 [ 400.791335][T14304] ? lock_acquire+0x115/0x350 [ 400.791369][T14304] ? __pfx_rtnl_newlink+0x10/0x10 [ 400.791394][T14304] rtnetlink_rcv_msg+0x802/0xc00 [ 400.791424][T14304] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 400.791449][T14304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 400.791473][T14304] ? ref_tracker_free+0x689/0x830 [ 400.791495][T14304] ? __pfx_ref_tracker_free+0x10/0x10 [ 400.791526][T14304] netlink_rcv_skb+0x226/0x4a0 [ 400.791549][T14304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 400.791577][T14304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.791613][T14304] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.791634][T14304] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.791661][T14304] netlink_unicast+0x7bd/0x940 [ 400.791692][T14304] netlink_sendmsg+0x813/0xb40 [ 400.791725][T14304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.791755][T14304] ? apparmor_socket_sendmsg+0x98/0x360 [ 400.791784][T14304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.791804][T14304] sock_sendmsg_nosec+0x13a/0x180 [ 400.791832][T14304] ____sys_sendmsg+0x54e/0x850 [ 400.791859][T14304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.791888][T14304] ? import_iovec+0x73/0xa0 [ 400.791912][T14304] ___sys_sendmsg+0x2a5/0x360 [ 400.791930][T14304] ? __lock_acquire+0x6df/0x2e50 [ 400.791954][T14304] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.792011][T14304] ? __fget_files+0x2a/0x420 [ 400.792033][T14304] ? __fget_files+0x3a2/0x420 [ 400.792067][T14304] __x64_sys_sendmsg+0x1b1/0x290 [ 400.792090][T14304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.792133][T14304] do_syscall_64+0x166/0x520 [ 400.792156][T14304] ? trace_irq_disable+0x3b/0x140 [ 400.792174][T14304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.792199][T14304] ? clear_bhb_loop+0x70/0xc0 [ 400.792222][T14304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.792240][T14304] RIP: 0033:0x7f684a19e159 [ 400.792258][T14304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.792275][T14304] RSP: 002b:00007f684b002028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.792296][T14304] RAX: ffffffffffffffda RBX: 00007f684a425fa0 RCX: 00007f684a19e159 [ 400.792309][T14304] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 400.792321][T14304] RBP: 00007f684b002090 R08: 0000000000000000 R09: 0000000000000000 [ 400.792332][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.792343][T14304] R13: 00007f684a426038 R14: 00007f684a425fa0 R15: 00007ffd1b05e2f8 [ 400.792374][T14304] [ 400.795426][T14304] debugfs: out of free dentries, can not create file 'netdev@ffff888027480700' [ 400.831044][T14300] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2621'. [ 400.831148][T14300] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2621'. [ 400.884669][T14308] x_tables: duplicate underflow at hook 2 [ 401.066646][ T9513] hid-generic 0005:0008:0009.0021: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 401.155873][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 401.580273][T14312] fido_id[14312]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 401.815848][T13764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.033801][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 402.280590][T14348] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2637'. [ 402.300707][T14348] 0·: renamed from c1· (while UP) [ 402.328054][T14348] 0·: entered allmulticast mode [ 402.333409][T14348] hsr_slave_0: entered allmulticast mode [ 402.339650][T14348] hsr_slave_1: entered allmulticast mode [ 402.346889][T14348] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 402.376466][T13757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.832333][T14367] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 402.834078][T14369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.965822][T14375] netlink: 'syz.1.2644': attribute type 2 has an invalid length. [ 402.976756][T14375] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2644'. [ 403.423977][T14391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2649'. [ 404.166952][T14425] netlink: Unknown conntrack attr (0) [ 404.589254][T14439] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 404.723310][T14444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.775274][T14441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.838703][T14449] FAULT_INJECTION: forcing a failure. [ 404.838703][T14449] name failslab, interval 1, probability 0, space 0, times 0 [ 404.838756][T14449] CPU: 0 UID: 0 PID: 14449 Comm: syz.0.2671 Not tainted syzkaller #0 PREEMPT(full) [ 404.838782][T14449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.838795][T14449] Call Trace: [ 404.838804][T14449] [ 404.838814][T14449] dump_stack_lvl+0xe8/0x150 [ 404.838849][T14449] should_fail_ex+0x410/0x560 [ 404.838883][T14449] should_failslab+0xa8/0x100 [ 404.838907][T14449] ? skb_clone+0x212/0x3a0 [ 404.838928][T14449] kmem_cache_alloc_noprof+0xa1/0x600 [ 404.838955][T14449] ? skb_clone+0x212/0x3a0 [ 404.838980][T14449] skb_clone+0x212/0x3a0 [ 404.839004][T14449] bpf_clone_redirect+0x170/0x4b0 [ 404.839036][T14449] ? bpf_test_run+0x1d1/0x830 [ 404.839058][T14449] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 404.839081][T14449] ? __kernel_text_address+0xd/0x30 [ 404.839105][T14449] ? arch_stack_walk+0xfb/0x150 [ 404.839130][T14449] ? __pfx___schedule+0x10/0x10 [ 404.839168][T14449] ? preempt_schedule_thunk+0x16/0x40 [ 404.839190][T14449] ? preempt_schedule_common+0x7f/0xd0 [ 404.839213][T14449] ? bpf_test_run+0x1d1/0x830 [ 404.839237][T14449] ? bpf_test_timer_continue+0x10c/0x320 [ 404.839263][T14449] bpf_test_run+0x354/0x830 [ 404.839305][T14449] ? __pfx_bpf_test_run+0x10/0x10 [ 404.839341][T14449] ? __kasan_krealloc+0xec/0x110 [ 404.839370][T14449] ? skb_dst_set+0x72/0x140 [ 404.839394][T14449] bpf_prog_test_run_skb+0xe35/0x2230 [ 404.839435][T14449] ? __fget_files+0x3a2/0x420 [ 404.839462][T14449] ? __fget_files+0x2a/0x420 [ 404.839488][T14449] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 404.839511][T14449] bpf_prog_test_run+0x2c5/0x340 [ 404.839536][T14449] __sys_bpf+0xa22/0xd90 [ 404.839564][T14449] ? __pfx___sys_bpf+0x10/0x10 [ 404.839603][T14449] ? __fget_files+0x2a/0x420 [ 404.839643][T14449] ? ksys_write+0x242/0x270 [ 404.839669][T14449] ? __pfx_ksys_write+0x10/0x10 [ 404.839699][T14449] __x64_sys_bpf+0xba/0xd0 [ 404.839720][T14449] do_syscall_64+0x166/0x520 [ 404.839744][T14449] ? trace_irq_disable+0x3b/0x140 [ 404.839761][T14449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.839780][T14449] ? clear_bhb_loop+0x70/0xc0 [ 404.839802][T14449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.839820][T14449] RIP: 0033:0x7f57cef9e159 [ 404.839838][T14449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.839853][T14449] RSP: 002b:00007f57cff16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.839874][T14449] RAX: ffffffffffffffda RBX: 00007f57cf225fa0 RCX: 00007f57cef9e159 [ 404.839887][T14449] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 404.839899][T14449] RBP: 00007f57cff16090 R08: 0000000000000000 R09: 0000000000000000 [ 404.839910][T14449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.839922][T14449] R13: 00007f57cf226038 R14: 00007f57cf225fa0 R15: 00007ffdf06f6068 [ 404.839952][T14449] [ 404.857361][ T9513] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.023010][ T9513] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 405.365562][T14465] ip6t_srh: unknown srh match flags 4000 [ 405.551679][ T9513] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 405.734117][ T9513] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.890872][T14484] __nla_validate_parse: 2 callbacks suppressed [ 405.899761][T14484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2681'. [ 405.909231][T14484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2681'. [ 405.915796][T14484] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2681'. [ 405.937994][T14482] gtp2: entered promiscuous mode [ 405.938055][T14482] gtp2: entered allmulticast mode [ 405.963530][T14482] team0: Device gtp2 is of different type [ 406.054489][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 406.423404][T14502] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2683'. [ 406.668536][T14510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.837281][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2685'. [ 406.884556][T14515] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2688'. [ 406.900782][T14515] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 407.220115][T14523] lo speed is unknown, defaulting to 1000 [ 407.277526][T14535] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2694'. [ 407.277647][T14535] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2694'. [ 407.277709][T14535] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2694'. [ 407.336213][T14523] lo speed is unknown, defaulting to 1000 [ 407.353568][T14537] tipc: New replicast peer: 172.20.20.187 [ 407.376866][T14537] tipc: Enabled bearer , priority 10 [ 407.389048][T14523] lo speed is unknown, defaulting to 1000 [ 407.463663][T13274] hid-generic 0005:0008:0009.0022: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 407.582462][T13758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.655057][T13274] page_pool_release_retry() stalled pool shutdown: id 108, 1 inflight 60 sec [ 407.757598][T14547] fido_id[14547]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 408.096053][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.198850][T14579] FAULT_INJECTION: forcing a failure. [ 408.198850][T14579] name failslab, interval 1, probability 0, space 0, times 0 [ 408.213164][T14579] CPU: 1 UID: 0 PID: 14579 Comm: syz.4.2705 Not tainted syzkaller #0 PREEMPT(full) [ 408.213191][T14579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.213202][T14579] Call Trace: [ 408.213210][T14579] [ 408.213218][T14579] dump_stack_lvl+0xe8/0x150 [ 408.213251][T14579] should_fail_ex+0x410/0x560 [ 408.213283][T14579] should_failslab+0xa8/0x100 [ 408.213304][T14579] __kvmalloc_node_noprof+0x176/0x820 [ 408.213323][T14579] ? __kvmalloc_node_noprof+0x345/0x820 [ 408.213340][T14579] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 408.213358][T14579] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 408.213385][T14579] bpf_compute_subprog_arg_access+0x187/0x14d0 [ 408.213404][T14579] ? bpf_tracing_func_proto+0x72/0x180 [ 408.213448][T14579] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 408.213473][T14579] ? __kvmalloc_node_noprof+0x345/0x820 [ 408.213490][T14579] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 408.213506][T14579] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 408.213533][T14579] bpf_compute_live_registers+0x8d3/0x1ff0 [ 408.213570][T14579] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 408.213600][T14579] bpf_check+0x25ed/0x2e10 [ 408.213628][T14579] ? ktime_get_with_offset+0x93/0x2d0 [ 408.213650][T14579] ? __pfx_bpf_check+0x10/0x10 [ 408.213671][T14579] ? bpf_obj_name_cpy+0x194/0x1e0 [ 408.213698][T14579] bpf_prog_load+0x14d6/0x1c20 [ 408.213728][T14579] ? __pfx_bpf_prog_load+0x10/0x10 [ 408.213771][T14579] __sys_bpf+0xd0d/0xd90 [ 408.213814][T14579] ? __pfx___sys_bpf+0x10/0x10 [ 408.213845][T14579] ? __fget_files+0x2a/0x420 [ 408.213883][T14579] ? ksys_write+0x242/0x270 [ 408.213909][T14579] ? __pfx_ksys_write+0x10/0x10 [ 408.213939][T14579] __x64_sys_bpf+0xba/0xd0 [ 408.213960][T14579] do_syscall_64+0x166/0x520 [ 408.213984][T14579] ? trace_irq_disable+0x3b/0x140 [ 408.213999][T14579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.214017][T14579] ? clear_bhb_loop+0x70/0xc0 [ 408.214038][T14579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.214053][T14579] RIP: 0033:0x7f684a19e159 [ 408.214071][T14579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.214087][T14579] RSP: 002b:00007f684b002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.214107][T14579] RAX: ffffffffffffffda RBX: 00007f684a425fa0 RCX: 00007f684a19e159 [ 408.214119][T14579] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 408.214131][T14579] RBP: 00007f684b002090 R08: 0000000000000000 R09: 0000000000000000 [ 408.214142][T14579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.214152][T14579] R13: 00007f684a426038 R14: 00007f684a425fa0 R15: 00007ffd1b05e2f8 [ 408.214181][T14579] [ 408.225628][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.309234][T13274] page_pool_release_retry() stalled pool shutdown: id 109, 1 inflight 60 sec [ 408.851676][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 408.919768][T14593] FAULT_INJECTION: forcing a failure. [ 408.919768][T14593] name failslab, interval 1, probability 0, space 0, times 0 [ 408.935281][T14593] CPU: 1 UID: 0 PID: 14593 Comm: syz.4.2708 Not tainted syzkaller #0 PREEMPT(full) [ 408.935314][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.935326][T14593] Call Trace: [ 408.935336][T14593] [ 408.935345][T14593] dump_stack_lvl+0xe8/0x150 [ 408.935382][T14593] should_fail_ex+0x410/0x560 [ 408.935419][T14593] should_failslab+0xa8/0x100 [ 408.935450][T14593] ? security_inode_alloc+0x39/0x310 [ 408.935474][T14593] kmem_cache_alloc_noprof+0xa1/0x600 [ 408.935509][T14593] ? security_inode_alloc+0x39/0x310 [ 408.935540][T14593] security_inode_alloc+0x39/0x310 [ 408.935566][T14593] inode_init_always_gfp+0x97e/0xd30 [ 408.935610][T14593] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 408.935640][T14593] alloc_inode+0x82/0x1b0 [ 408.935668][T14593] new_inode+0x1f/0x170 [ 408.935699][T14593] __debugfs_create_file+0xb8/0x400 [ 408.935734][T14593] debugfs_create_file_full+0x3f/0x60 [ 408.935767][T14593] ref_tracker_dir_debugfs+0x197/0x360 [ 408.935790][T14593] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 408.935843][T14593] ? __kvmalloc_node_noprof+0x52f/0x820 [ 408.935868][T14593] ? __kvmalloc_node_noprof+0x345/0x820 [ 408.935895][T14593] ? __raw_spin_lock_init+0x45/0x100 [ 408.935927][T14593] alloc_netdev_mqs+0x275/0x12a0 [ 408.935952][T14593] ? __pfx_snprintf+0x10/0x10 [ 408.935976][T14593] ? __pfx_macvtap_setup+0x10/0x10 [ 408.936012][T14593] rtnl_create_link+0x321/0xd70 [ 408.936047][T14593] rtnl_newlink_create+0x258/0x7b0 [ 408.936078][T14593] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 408.936105][T14593] ? __pfx___mutex_lock+0x10/0x10 [ 408.936145][T14593] ? ns_capable+0x89/0xe0 [ 408.936176][T14593] rtnl_newlink+0x166d/0x1c30 [ 408.936223][T14593] ? __pfx_rtnl_newlink+0x10/0x10 [ 408.936252][T14593] ? do_syscall_64+0x166/0x520 [ 408.936280][T14593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.936345][T14593] ? kasan_quarantine_put+0xbb/0x1f0 [ 408.936377][T14593] ? lockdep_hardirqs_on+0x7b/0x110 [ 408.936411][T14593] ? nlmon_xmit+0xb0/0x100 [ 408.936439][T14593] ? kmem_cache_free+0x182/0x650 [ 408.936474][T14593] ? __lock_acquire+0x6df/0x2e50 [ 408.936501][T14593] ? __dev_queue_xmit+0x29b/0x3820 [ 408.936530][T14593] ? __local_bh_enable_ip+0xd6/0x140 [ 408.936557][T14593] ? lockdep_hardirqs_on+0x7b/0x110 [ 408.936585][T14593] ? __dev_queue_xmit+0x29b/0x3820 [ 408.936615][T14593] ? __local_bh_enable_ip+0xd6/0x140 [ 408.936638][T14593] ? __dev_queue_xmit+0x29b/0x3820 [ 408.936671][T14593] ? lock_acquire+0x115/0x350 [ 408.936711][T14593] ? __pfx_rtnl_newlink+0x10/0x10 [ 408.936740][T14593] rtnetlink_rcv_msg+0x802/0xc00 [ 408.936776][T14593] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 408.936807][T14593] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 408.936835][T14593] ? ref_tracker_free+0x689/0x830 [ 408.936859][T14593] ? __pfx_ref_tracker_free+0x10/0x10 [ 408.936894][T14593] netlink_rcv_skb+0x226/0x4a0 [ 408.936921][T14593] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 408.936955][T14593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.936996][T14593] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.937021][T14593] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.937053][T14593] netlink_unicast+0x7bd/0x940 [ 408.937090][T14593] netlink_sendmsg+0x813/0xb40 [ 408.937126][T14593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.937163][T14593] ? apparmor_socket_sendmsg+0x98/0x360 [ 408.937197][T14593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.937221][T14593] sock_sendmsg_nosec+0x13a/0x180 [ 408.937253][T14593] ____sys_sendmsg+0x54e/0x850 [ 408.937283][T14593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.937317][T14593] ? import_iovec+0x73/0xa0 [ 408.937346][T14593] ___sys_sendmsg+0x2a5/0x360 [ 408.937367][T14593] ? __lock_acquire+0x6df/0x2e50 [ 408.937394][T14593] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.937460][T14593] ? __fget_files+0x2a/0x420 [ 408.937487][T14593] ? __fget_files+0x3a2/0x420 [ 408.937526][T14593] __x64_sys_sendmsg+0x1b1/0x290 [ 408.937553][T14593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.937611][T14593] do_syscall_64+0x166/0x520 [ 408.937638][T14593] ? trace_irq_disable+0x3b/0x140 [ 408.937659][T14593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.937680][T14593] ? clear_bhb_loop+0x70/0xc0 [ 408.937707][T14593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.937728][T14593] RIP: 0033:0x7f684a19e159 [ 408.937755][T14593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.937773][T14593] RSP: 002b:00007f684b002028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.937797][T14593] RAX: ffffffffffffffda RBX: 00007f684a425fa0 RCX: 00007f684a19e159 [ 408.937813][T14593] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 408.937826][T14593] RBP: 00007f684b002090 R08: 0000000000000000 R09: 0000000000000000 [ 408.937839][T14593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.937852][T14593] R13: 00007f684a426038 R14: 00007f684a425fa0 R15: 00007ffd1b05e2f8 [ 408.937889][T14593] [ 409.077962][T14593] debugfs: out of free dentries, can not create file 'netdev@ffff888031d74700' [ 409.529338][T13274] hid-generic 0005:0008:0009.0023: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 409.827112][T14613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.832921][T14619] FAULT_INJECTION: forcing a failure. [ 409.832921][T14619] name failslab, interval 1, probability 0, space 0, times 0 [ 409.832961][T14619] CPU: 0 UID: 0 PID: 14619 Comm: syz.4.2718 Not tainted syzkaller #0 PREEMPT(full) [ 409.832984][T14619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.832995][T14619] Call Trace: [ 409.833003][T14619] [ 409.833012][T14619] dump_stack_lvl+0xe8/0x150 [ 409.833045][T14619] should_fail_ex+0x410/0x560 [ 409.833078][T14619] should_failslab+0xa8/0x100 [ 409.833101][T14619] ? skb_clone+0x212/0x3a0 [ 409.833121][T14619] kmem_cache_alloc_noprof+0xa1/0x600 [ 409.833164][T14619] ? skb_clone+0x212/0x3a0 [ 409.833192][T14619] skb_clone+0x212/0x3a0 [ 409.833216][T14619] __netlink_deliver_tap+0x413/0x860 [ 409.833255][T14619] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.833279][T14619] netlink_deliver_tap+0x19c/0x1b0 [ 409.833303][T14619] netlink_sendskb+0x68/0x140 [ 409.833327][T14619] netlink_rcv_skb+0x2a4/0x4a0 [ 409.833350][T14619] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 409.833462][T14619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.833499][T14619] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.833520][T14619] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.833548][T14619] netlink_unicast+0x7bd/0x940 [ 409.833581][T14619] netlink_sendmsg+0x813/0xb40 [ 409.833614][T14619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.833644][T14619] ? apparmor_socket_sendmsg+0x18b/0x360 [ 409.833674][T14619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.833695][T14619] sock_sendmsg_nosec+0x13a/0x180 [ 409.833724][T14619] ____sys_sendmsg+0x54e/0x850 [ 409.833751][T14619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.833782][T14619] ? import_iovec+0x73/0xa0 [ 409.833807][T14619] ___sys_sendmsg+0x2a5/0x360 [ 409.833825][T14619] ? __lock_acquire+0x6df/0x2e50 [ 409.833850][T14619] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.833910][T14619] ? __fget_files+0x2a/0x420 [ 409.833946][T14619] ? __fget_files+0x3a2/0x420 [ 409.833980][T14619] __x64_sys_sendmsg+0x1b1/0x290 [ 409.834004][T14619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.834048][T14619] do_syscall_64+0x166/0x520 [ 409.834073][T14619] ? trace_irq_disable+0x3b/0x140 [ 409.834091][T14619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.834110][T14619] ? clear_bhb_loop+0x70/0xc0 [ 409.834134][T14619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.834160][T14619] RIP: 0033:0x7f684a19e159 [ 409.834181][T14619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.834198][T14619] RSP: 002b:00007f684b002028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.834221][T14619] RAX: ffffffffffffffda RBX: 00007f684a425fa0 RCX: 00007f684a19e159 [ 409.834235][T14619] RDX: 0000000020000014 RSI: 00002000000042c0 RDI: 0000000000000003 [ 409.834266][T14619] RBP: 00007f684b002090 R08: 0000000000000000 R09: 0000000000000000 [ 409.834279][T14619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.834292][T14619] R13: 00007f684a426038 R14: 00007f684a425fa0 R15: 00007ffd1b05e2f8 [ 409.834334][T14619] [ 410.096127][T14614] fido_id[14614]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 410.772562][ T9513] hid-generic 0005:0008:0009.0024: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 411.001319][T14650] fido_id[14650]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 411.103872][T14659] __nla_validate_parse: 18 callbacks suppressed [ 411.110426][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2731'. [ 411.335031][T14663] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 411.385192][T14669] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2732'. [ 411.883039][T14686] syzkaller0: entered promiscuous mode [ 411.883083][T14686] syzkaller0: entered allmulticast mode [ 412.041732][T14690] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2740'. [ 412.050969][T14690] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2740'. [ 412.060438][T14690] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2740'. [ 412.209548][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 412.668148][T14716] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2748'. [ 412.695075][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.786003][T14703] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 413.117769][ T5618] syz_tun (unregistering): left allmulticast mode [ 413.324371][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.332584][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.344318][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.357009][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.364859][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.365452][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.550657][T14738] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2755'. [ 413.550779][T14738] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2755'. [ 413.550838][T14738] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2755'. [ 413.660199][T14742] netlink: 'syz.2.2756': attribute type 1 has an invalid length. [ 413.724255][T13275] hid-generic 0005:0008:0009.0025: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 413.849429][T14742] 8021q: adding VLAN 0 to HW filter on device bond8 [ 413.992527][T14743] bond8: (slave veth7): Enslaving as an active interface with a down link [ 414.031058][T14752] fido_id[14752]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 414.322750][T14759] netlink: Unknown conntrack attr (0) [ 414.679888][T14729] lo speed is unknown, defaulting to 1000 [ 414.685203][T14729] lo speed is unknown, defaulting to 1000 [ 414.687095][T14729] lo speed is unknown, defaulting to 1000 [ 415.350560][T14793] FAULT_INJECTION: forcing a failure. [ 415.350560][T14793] name failslab, interval 1, probability 0, space 0, times 0 [ 415.350620][T14793] CPU: 0 UID: 0 PID: 14793 Comm: syz.3.2769 Not tainted syzkaller #0 PREEMPT(full) [ 415.350643][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.350654][T14793] Call Trace: [ 415.350666][T14793] [ 415.350674][T14793] dump_stack_lvl+0xe8/0x150 [ 415.350706][T14793] should_fail_ex+0x410/0x560 [ 415.350738][T14793] ? __alloc_skb+0x1db/0x7a0 [ 415.350764][T14793] should_failslab+0xa8/0x100 [ 415.350789][T14793] ? __alloc_skb+0x1db/0x7a0 [ 415.350812][T14793] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 415.350838][T14793] ? __alloc_skb+0x18d/0x7a0 [ 415.350863][T14793] ? __alloc_skb+0x1db/0x7a0 [ 415.350895][T14793] __alloc_skb+0x1db/0x7a0 [ 415.350925][T14793] netlink_ack+0x136/0xb30 [ 415.350945][T14793] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.350971][T14793] ? __pfx_nl80211_post_doit+0x10/0x10 [ 415.351088][T14793] ? __pfx_ref_tracker_free+0x10/0x10 [ 415.351118][T14793] netlink_rcv_skb+0x2a4/0x4a0 [ 415.351141][T14793] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.351168][T14793] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.351206][T14793] ? down_read+0x2be/0x330 [ 415.351229][T14793] genl_rcv+0x28/0x40 [ 415.351252][T14793] netlink_unicast+0x7bd/0x940 [ 415.351283][T14793] netlink_sendmsg+0x813/0xb40 [ 415.351315][T14793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.351345][T14793] ? apparmor_socket_sendmsg+0x18b/0x360 [ 415.351374][T14793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.351395][T14793] sock_sendmsg_nosec+0x13a/0x180 [ 415.351422][T14793] ____sys_sendmsg+0x54e/0x850 [ 415.351448][T14793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.351477][T14793] ? import_iovec+0x73/0xa0 [ 415.351501][T14793] ___sys_sendmsg+0x2a5/0x360 [ 415.351519][T14793] ? __lock_acquire+0x6df/0x2e50 [ 415.351543][T14793] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.351598][T14793] ? __fget_files+0x2a/0x420 [ 415.351620][T14793] ? __fget_files+0x3a2/0x420 [ 415.351653][T14793] __x64_sys_sendmsg+0x1b1/0x290 [ 415.351676][T14793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.351717][T14793] do_syscall_64+0x166/0x520 [ 415.351742][T14793] ? trace_irq_disable+0x3b/0x140 [ 415.351760][T14793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.351778][T14793] ? clear_bhb_loop+0x70/0xc0 [ 415.351800][T14793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.351818][T14793] RIP: 0033:0x7fb776f9e159 [ 415.351836][T14793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.351852][T14793] RSP: 002b:00007fb777dcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.351873][T14793] RAX: ffffffffffffffda RBX: 00007fb777225fa0 RCX: 00007fb776f9e159 [ 415.351886][T14793] RDX: 0000000020008000 RSI: 0000200000000440 RDI: 0000000000000003 [ 415.351899][T14793] RBP: 00007fb777dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 415.351910][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.351922][T14793] R13: 00007fb777226038 R14: 00007fb777225fa0 R15: 00007fff4a762c48 [ 415.351952][T14793] [ 415.422592][ T5622] Bluetooth: hci0: command tx timeout [ 415.597378][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.597578][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.597737][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.597966][T14797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.886120][T14729] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.886301][T14729] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.886726][T14729] bridge_slave_0: entered allmulticast mode [ 415.892424][T14729] bridge_slave_0: entered promiscuous mode [ 415.897024][T14729] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.897196][T14729] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.897317][T14729] bridge_slave_1: entered allmulticast mode [ 415.899226][T14729] bridge_slave_1: entered promiscuous mode [ 415.987387][T14729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.995936][T14729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.088790][T14788] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 416.140167][T14729] team0: Port device team_slave_0 added [ 416.151865][T14729] team0: Port device team_slave_1 added [ 416.358475][T14729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.358526][T14729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.358585][T14729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.423451][T14729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.430723][T14729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.457214][T14729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.689741][T14824] __nla_validate_parse: 4 callbacks suppressed [ 416.689795][T14824] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2778'. [ 416.713032][T14729] hsr_slave_0: entered promiscuous mode [ 416.723882][T14729] hsr_slave_1: entered promiscuous mode [ 416.733130][T14830] syz_tun: entered allmulticast mode [ 416.985129][T14827] syz_tun: left allmulticast mode [ 417.236205][T14847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2782'. [ 417.318769][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2785'. [ 417.491623][ T5622] Bluetooth: hci0: command 0x041b tx timeout [ 417.812662][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.836958][T14729] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.837024][T14729] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.889598][T14884] netlink: 'syz.3.2794': attribute type 2 has an invalid length. [ 419.093061][T13760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.113149][T14905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.113402][T14905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.113525][T14905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.113635][T14905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.157549][T14729] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.157619][T14729] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.220412][T14902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.234777][T14902] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.258259][T14902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.278086][T14902] tipc: Resetting bearer [ 419.312248][T14902] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 419.571757][ T5622] Bluetooth: hci0: command 0x041b tx timeout [ 420.539239][T14729] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.584087][T14927] ip6t_rt: unknown flags 1F [ 420.596337][T14729] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.705341][T14924] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 420.710822][T14927] netlink: 'syz.2.2807': attribute type 1 has an invalid length. [ 420.826707][T14729] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.826783][T14729] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.866849][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2808'. [ 421.161172][T14942] Bluetooth: MGMT ver 1.23 [ 421.325950][T13274] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 421.393827][T14944] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 421.403738][T13274] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 421.420090][T14944] veth1_macvtap: left promiscuous mode [ 421.426987][T14944] veth0_macvtap: left promiscuous mode [ 421.433519][T14944] veth0_macvtap: entered promiscuous mode [ 421.446012][T14944] veth1_macvtap: entered promiscuous mode [ 421.485667][T14944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.489130][T14944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.490870][T14944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.499928][T14944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.500739][T14944] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 421.510326][T14944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.519772][T14944] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 421.524767][T14944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.526933][T14944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.535771][T14944] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.538259][T14944] erspan0: entered promiscuous mode [ 421.540095][T14944] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 421.578791][T14944] 8021q: adding VLAN 0 to HW filter on device bond5 [ 421.585703][T14944] 8021q: adding VLAN 0 to HW filter on device bond6 [ 421.588513][T14944] 8021q: adding VLAN 0 to HW filter on device bond7 [ 421.594652][T14944] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 421.614053][ T5739] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 421.652224][ T5622] Bluetooth: hci0: command 0x041b tx timeout [ 421.671576][T13758] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.671631][T13758] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.690391][T13757] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.690429][T13757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.690484][T13757] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.690509][T13757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.690552][T13757] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.690577][T13757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.929767][T14963] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2816'. [ 422.266526][T14965] FAULT_INJECTION: forcing a failure. [ 422.266526][T14965] name failslab, interval 1, probability 0, space 0, times 0 [ 422.266591][T14965] CPU: 1 UID: 0 PID: 14965 Comm: syz.3.2817 Not tainted syzkaller #0 PREEMPT(full) [ 422.266614][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.266625][T14965] Call Trace: [ 422.266632][T14965] [ 422.266640][T14965] dump_stack_lvl+0xe8/0x150 [ 422.266672][T14965] should_fail_ex+0x410/0x560 [ 422.266710][T14965] should_failslab+0xa8/0x100 [ 422.266732][T14965] ? skb_clone+0x212/0x3a0 [ 422.266754][T14965] kmem_cache_alloc_noprof+0xa1/0x600 [ 422.266782][T14965] ? skb_clone+0x212/0x3a0 [ 422.266810][T14965] skb_clone+0x212/0x3a0 [ 422.266834][T14965] __netlink_deliver_tap+0x413/0x860 [ 422.266869][T14965] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.266893][T14965] netlink_deliver_tap+0x19c/0x1b0 [ 422.266917][T14965] netlink_sendskb+0x68/0x140 [ 422.266949][T14965] ctrl_getfamily+0x4c8/0x5c0 [ 422.266978][T14965] ? __pfx_ctrl_getfamily+0x10/0x10 [ 422.267004][T14965] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 422.267039][T14965] genl_family_rcv_msg_doit+0x233/0x340 [ 422.267072][T14965] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 422.267110][T14965] ? __dev_queue_xmit+0x29b/0x3820 [ 422.267143][T14965] genl_rcv_msg+0x614/0x7a0 [ 422.267176][T14965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.267201][T14965] ? __pfx_ctrl_getfamily+0x10/0x10 [ 422.267227][T14965] ? __pfx_ref_tracker_free+0x10/0x10 [ 422.267258][T14965] netlink_rcv_skb+0x226/0x4a0 [ 422.267281][T14965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.267309][T14965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.267347][T14965] ? down_read+0x2be/0x330 [ 422.267370][T14965] genl_rcv+0x28/0x40 [ 422.267394][T14965] netlink_unicast+0x7bd/0x940 [ 422.267427][T14965] netlink_sendmsg+0x813/0xb40 [ 422.267459][T14965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.267490][T14965] ? apparmor_socket_sendmsg+0x98/0x360 [ 422.267520][T14965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.267540][T14965] sock_sendmsg_nosec+0x13a/0x180 [ 422.267568][T14965] __sys_sendto+0x408/0x5a0 [ 422.267601][T14965] ? __pfx___sys_sendto+0x10/0x10 [ 422.267659][T14965] ? do_user_addr_fault+0xc4c/0x1340 [ 422.267714][T14965] __x64_sys_sendto+0xde/0x100 [ 422.267745][T14965] do_syscall_64+0x166/0x520 [ 422.267776][T14965] ? trace_irq_disable+0x3b/0x140 [ 422.267794][T14965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.267813][T14965] ? clear_bhb_loop+0x70/0xc0 [ 422.267837][T14965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.267854][T14965] RIP: 0033:0x7fb776f5e98e [ 422.267872][T14965] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 422.267887][T14965] RSP: 002b:00007fb777dcbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 422.267909][T14965] RAX: ffffffffffffffda RBX: 00007fb777dcd6c0 RCX: 00007fb776f5e98e [ 422.267922][T14965] RDX: 0000000000000020 RSI: 00007fb777dcc000 RDI: 0000000000000007 [ 422.267941][T14965] RBP: 0000000000000000 R08: 00007fb777dcbf04 R09: 000000000000000c [ 422.267953][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 422.267965][T14965] R13: 00007fb777dcbf58 R14: 00007fb777dcc000 R15: 0000000000000000 [ 422.267998][T14965] [ 422.455143][ T5739] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 422.537519][T14959] tunl0: entered promiscuous mode [ 422.549876][T14959] netlink: 'syz.4.2816': attribute type 4 has an invalid length. [ 422.549897][T14959] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2816'. [ 422.785556][T14967] FAULT_INJECTION: forcing a failure. [ 422.785556][T14967] name failslab, interval 1, probability 0, space 0, times 0 [ 422.798489][T14967] CPU: 0 UID: 0 PID: 14967 Comm: syz.0.2818 Not tainted syzkaller #0 PREEMPT(full) [ 422.798518][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.798531][T14967] Call Trace: [ 422.798540][T14967] [ 422.798549][T14967] dump_stack_lvl+0xe8/0x150 [ 422.798587][T14967] should_fail_ex+0x410/0x560 [ 422.798625][T14967] should_failslab+0xa8/0x100 [ 422.798651][T14967] __kmalloc_noprof+0xfe/0x720 [ 422.798684][T14967] ? bpf_test_init+0x9f/0x150 [ 422.798706][T14967] ? bpf_test_init+0x9f/0x150 [ 422.798737][T14967] bpf_test_init+0x9f/0x150 [ 422.798765][T14967] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 422.798799][T14967] ? lock_acquire+0x115/0x350 [ 422.798825][T14967] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 422.798856][T14967] ? __fget_files+0x2a/0x420 [ 422.798885][T14967] ? __fget_files+0x2a/0x420 [ 422.798910][T14967] ? __fget_files+0x3a2/0x420 [ 422.798933][T14967] ? __fget_files+0x2a/0x420 [ 422.798964][T14967] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 422.798992][T14967] bpf_prog_test_run+0x2c5/0x340 [ 422.799021][T14967] __sys_bpf+0xa22/0xd90 [ 422.799051][T14967] ? __pfx___sys_bpf+0x10/0x10 [ 422.799087][T14967] ? __fget_files+0x2a/0x420 [ 422.799132][T14967] ? ksys_write+0x242/0x270 [ 422.799163][T14967] ? __pfx_ksys_write+0x10/0x10 [ 422.799197][T14967] __x64_sys_bpf+0xba/0xd0 [ 422.799223][T14967] do_syscall_64+0x166/0x520 [ 422.799252][T14967] ? trace_irq_disable+0x3b/0x140 [ 422.799272][T14967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.799294][T14967] ? clear_bhb_loop+0x70/0xc0 [ 422.799320][T14967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.799341][T14967] RIP: 0033:0x7f57cef9e159 [ 422.799361][T14967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.799379][T14967] RSP: 002b:00007f57cff16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.799402][T14967] RAX: ffffffffffffffda RBX: 00007f57cf225fa0 RCX: 00007f57cef9e159 [ 422.799426][T14967] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 422.799438][T14967] RBP: 00007f57cff16090 R08: 0000000000000000 R09: 0000000000000000 [ 422.799450][T14967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.799462][T14967] R13: 00007f57cf226038 R14: 00007f57cf225fa0 R15: 00007ffdf06f6068 [ 422.799494][T14967] [ 423.204429][T14974] FAULT_INJECTION: forcing a failure. [ 423.204429][T14974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.217898][T14974] CPU: 0 UID: 0 PID: 14974 Comm: syz.0.2822 Not tainted syzkaller #0 PREEMPT(full) [ 423.217938][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.217951][T14974] Call Trace: [ 423.217960][T14974] [ 423.217971][T14974] dump_stack_lvl+0xe8/0x150 [ 423.218008][T14974] should_fail_ex+0x410/0x560 [ 423.218044][T14974] _copy_from_user+0x2d/0xb0 [ 423.218066][T14974] __sys_sendto+0x2a9/0x5a0 [ 423.218096][T14974] ? ksys_write+0x1e6/0x270 [ 423.218127][T14974] ? __pfx___sys_sendto+0x10/0x10 [ 423.218154][T14974] ? __mutex_unlock_slowpath+0x731/0x900 [ 423.218213][T14974] ? __pfx_ksys_write+0x10/0x10 [ 423.218247][T14974] __x64_sys_sendto+0xde/0x100 [ 423.218281][T14974] do_syscall_64+0x166/0x520 [ 423.218309][T14974] ? trace_irq_disable+0x3b/0x140 [ 423.218328][T14974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.218349][T14974] ? clear_bhb_loop+0x70/0xc0 [ 423.218373][T14974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.218394][T14974] RIP: 0033:0x7f57cef5e98e [ 423.218414][T14974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 423.218431][T14974] RSP: 002b:00007f57cff14e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.218453][T14974] RAX: ffffffffffffffda RBX: 00007f57cff166c0 RCX: 00007f57cef5e98e [ 423.218469][T14974] RDX: 0000000000000024 RSI: 00007f57cff15000 RDI: 0000000000000004 [ 423.218482][T14974] RBP: 0000000000000000 R08: 00007f57cff14f04 R09: 000000000000000c [ 423.218495][T14974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 423.218508][T14974] R13: 00007f57cff14f58 R14: 00007f57cff15000 R15: 0000000000000000 [ 423.218541][T14974] [ 423.381256][T14729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 423.462527][T14729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.472285][T14729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 423.503053][T14729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.521797][T14729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 423.550712][T14729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.561318][T14729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 423.575519][T13759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.601051][T14729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.733224][ T5622] Bluetooth: hci0: command 0x041b tx timeout [ 423.817663][T14729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.875437][T14729] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.904964][T13757] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.905096][T13757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.928188][T15004] FAULT_INJECTION: forcing a failure. [ 423.928188][T15004] name failslab, interval 1, probability 0, space 0, times 0 [ 423.928244][T15004] CPU: 1 UID: 0 PID: 15004 Comm: syz.4.2830 Not tainted syzkaller #0 PREEMPT(full) [ 423.928268][T15004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.928281][T15004] Call Trace: [ 423.928290][T15004] [ 423.928299][T15004] dump_stack_lvl+0xe8/0x150 [ 423.928336][T15004] should_fail_ex+0x410/0x560 [ 423.928374][T15004] should_failslab+0xa8/0x100 [ 423.928398][T15004] ? skb_clone+0x212/0x3a0 [ 423.928422][T15004] kmem_cache_alloc_noprof+0xa1/0x600 [ 423.928451][T15004] ? ktime_get_with_offset+0x27f/0x2d0 [ 423.928475][T15004] ? skb_clone+0x212/0x3a0 [ 423.928505][T15004] skb_clone+0x212/0x3a0 [ 423.928526][T15004] ? __hci_send_to_channel+0x118/0x2f0 [ 423.928661][T15004] __hci_send_to_channel+0x13e/0x2f0 [ 423.928693][T15004] hci_sock_ioctl+0x31c/0x940 [ 423.928722][T15004] sock_do_ioctl+0x101/0x320 [ 423.928752][T15004] ? __pfx_sock_do_ioctl+0x10/0x10 [ 423.928775][T15004] ? hook_file_ioctl+0x1f2/0x600 [ 423.928844][T15004] sock_ioctl+0x57a/0x7e0 [ 423.928872][T15004] ? __pfx_sock_ioctl+0x10/0x10 [ 423.928899][T15004] ? __fget_files+0x2a/0x420 [ 423.928924][T15004] ? __fget_files+0x3a2/0x420 [ 423.928949][T15004] ? __fget_files+0x2a/0x420 [ 423.928979][T15004] ? bpf_lsm_file_ioctl+0x9/0x20 [ 423.929022][T15004] ? __pfx_sock_ioctl+0x10/0x10 [ 423.929049][T15004] __se_sys_ioctl+0xfc/0x170 [ 423.929074][T15004] do_syscall_64+0x166/0x520 [ 423.929105][T15004] ? trace_irq_disable+0x3b/0x140 [ 423.929126][T15004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.929147][T15004] ? clear_bhb_loop+0x70/0xc0 [ 423.929176][T15004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.929197][T15004] RIP: 0033:0x7f684a19e159 [ 423.929219][T15004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.929237][T15004] RSP: 002b:00007f684b002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.929262][T15004] RAX: ffffffffffffffda RBX: 00007f684a425fa0 RCX: 00007f684a19e159 [ 423.929278][T15004] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 423.929292][T15004] RBP: 00007f684b002090 R08: 0000000000000000 R09: 0000000000000000 [ 423.929306][T15004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.929319][T15004] R13: 00007f684a426038 R14: 00007f684a425fa0 R15: 00007ffd1b05e2f8 [ 423.929356][T15004] [ 424.012730][T13767] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.012840][T13767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.857367][T13759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.970862][T14729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.984067][T15008] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 425.120756][T15024] ip6t_rt: unknown flags 1F [ 425.157336][T14729] veth0_vlan: entered promiscuous mode [ 425.233835][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.242471][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.242683][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.242864][T15025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.262722][T15024] netlink: 'syz.4.2834': attribute type 1 has an invalid length. [ 425.264057][T15021] lo speed is unknown, defaulting to 1000 [ 425.286253][T14729] veth1_vlan: entered promiscuous mode [ 425.297765][T15021] lo speed is unknown, defaulting to 1000 [ 425.327525][T15021] lo speed is unknown, defaulting to 1000 [ 425.451743][T14729] veth0_macvtap: entered promiscuous mode [ 425.576375][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2832'. [ 425.587055][T14729] veth1_macvtap: entered promiscuous mode [ 425.820420][T14729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.985896][T14729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.072464][T13760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.072539][T13760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.072596][T13760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.072638][T13760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.370799][T13757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.370845][T13757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.605200][T15063] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 426.605436][T15063] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 426.605620][T15063] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 426.605842][T15063] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 426.606027][T15063] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 426.606212][T15063] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 426.606390][T15063] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 426.609215][T15063] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 426.609414][T15063] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 426.836145][T15071] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 427.075789][T13759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.075834][T13759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.421341][T15086] macvtap1: entered allmulticast mode [ 427.506358][T15080] macvtap2: entered allmulticast mode [ 427.634827][T15086] bond8: (slave bridge2): making interface the new active one [ 427.648448][T15086] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 428.519714][T15136] syz_tun: entered allmulticast mode [ 428.613580][T15135] xt_hashlimit: size too large, truncated to 1048576 [ 428.693571][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.707982][T15142] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2858'. [ 428.778228][T15140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 428.796412][T15155] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2858'. [ 429.018582][T15164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2859'. [ 429.148133][T15149] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 429.153418][T15133] syz_tun: left allmulticast mode [ 429.346567][T15170] FAULT_INJECTION: forcing a failure. [ 429.346567][T15170] name failslab, interval 1, probability 0, space 0, times 0 [ 429.346629][T15170] CPU: 1 UID: 0 PID: 15170 Comm: syz.1.2864 Not tainted syzkaller #0 PREEMPT(full) [ 429.346654][T15170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.346665][T15170] Call Trace: [ 429.346672][T15170] [ 429.346680][T15170] dump_stack_lvl+0xe8/0x150 [ 429.346712][T15170] should_fail_ex+0x410/0x560 [ 429.346746][T15170] should_failslab+0xa8/0x100 [ 429.346768][T15170] ? skb_clone+0x212/0x3a0 [ 429.346789][T15170] kmem_cache_alloc_noprof+0xa1/0x600 [ 429.346819][T15170] ? skb_clone+0x212/0x3a0 [ 429.346846][T15170] skb_clone+0x212/0x3a0 [ 429.346869][T15170] __netlink_deliver_tap+0x413/0x860 [ 429.346903][T15170] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.346927][T15170] netlink_deliver_tap+0x19c/0x1b0 [ 429.346951][T15170] netlink_unicast+0x781/0x940 [ 429.346982][T15170] netlink_sendmsg+0x813/0xb40 [ 429.347015][T15170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.347045][T15170] ? apparmor_socket_sendmsg+0x98/0x360 [ 429.347079][T15170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.347100][T15170] sock_sendmsg_nosec+0x13a/0x180 [ 429.347127][T15170] ____sys_sendmsg+0x54e/0x850 [ 429.347153][T15170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.347182][T15170] ? import_iovec+0x73/0xa0 [ 429.347207][T15170] ___sys_sendmsg+0x2a5/0x360 [ 429.347225][T15170] ? __lock_acquire+0x6df/0x2e50 [ 429.347249][T15170] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.347275][T15170] ? kstrtouint+0x6e/0xe0 [ 429.347325][T15170] ? __fget_files+0x2a/0x420 [ 429.347348][T15170] ? __fget_files+0x3a2/0x420 [ 429.347381][T15170] __sys_sendmmsg+0x273/0x4d0 [ 429.347407][T15170] ? __pfx___sys_sendmmsg+0x10/0x10 [ 429.347437][T15170] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.347478][T15170] ? ksys_write+0x242/0x270 [ 429.347514][T15170] ? __pfx_ksys_write+0x10/0x10 [ 429.347546][T15170] __x64_sys_sendmmsg+0xa0/0xc0 [ 429.347569][T15170] do_syscall_64+0x166/0x520 [ 429.347593][T15170] ? trace_irq_disable+0x3b/0x140 [ 429.347611][T15170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.347630][T15170] ? clear_bhb_loop+0x70/0xc0 [ 429.347653][T15170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.347671][T15170] RIP: 0033:0x7f47c6d9e159 [ 429.347689][T15170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.347705][T15170] RSP: 002b:00007f47c7c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 429.347727][T15170] RAX: ffffffffffffffda RBX: 00007f47c7025fa0 RCX: 00007f47c6d9e159 [ 429.347741][T15170] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 429.347754][T15170] RBP: 00007f47c7c55090 R08: 0000000000000000 R09: 0000000000000000 [ 429.347772][T15170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.347785][T15170] R13: 00007f47c7026038 R14: 00007f47c7025fa0 R15: 00007ffd5e4b5508 [ 429.347816][T15170] [ 429.370173][T15169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2865'. [ 429.370197][T15169] openvswitch: netlink: Flow key attr not present in new flow. [ 429.511976][T15169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2865'. [ 429.511999][T15169] openvswitch: netlink: Flow key attr not present in new flow. [ 429.856252][T15182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.900944][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2870'. [ 429.936643][T15196] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 430.017923][T15200] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2870'. [ 430.030129][T15200] syzkaller0: entered promiscuous mode [ 430.035868][T15200] syzkaller0: entered allmulticast mode [ 430.378741][T15203] bond1: entered promiscuous mode [ 430.378786][T15203] bond1: entered allmulticast mode [ 430.680288][T15220] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2874'. [ 434.452007][T13766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.935491][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.964680][T13767] dvmrp6: left allmulticast mode [ 439.172719][T13767] erspan0 (unregistering): left allmulticast mode [ 439.285174][T13767] bond4 (unregistering): (slave geneve2): Releasing active interface [ 439.344908][T13767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.354199][T13767] bond_slave_0: left allmulticast mode [ 439.357968][T13767] bond0 (unregistering): Released all slaves [ 439.365517][T13767] bond1 (unregistering): Released all slaves [ 439.377914][T13767] bond2 (unregistering): Released all slaves [ 439.390311][T13767] bond3 (unregistering): (slave veth5): Releasing active interface [ 439.404388][T13767] bond3 (unregistering): Released all slaves [ 439.418476][T13767] bond4 (unregistering): Released all slaves [ 439.435997][T13767] bond5 (unregistering): Released all slaves [ 439.574158][ T134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.603343][T13767] tipc: Left network mode [ 440.106743][T13767] hsr_slave_0: left promiscuous mode [ 440.119346][T13767] hsr_slave_1: left promiscuous mode [ 440.120241][T13767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.120275][T13767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.135056][T13767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.135078][T13767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.141965][T13767] batman_adv: batadv0: Removing interface: macvtap1 [ 440.166771][T13767] veth1_vlan: left promiscuous mode [ 440.166880][T13767] veth0_vlan: left promiscuous mode [ 440.435670][T13767] team0 (unregistering): Port device team_slave_1 removed [ 440.456745][T13767] team0 (unregistering): Port device team_slave_0 removed [ 440.560008][T13767] team0 (unregistering): Port device dummy0 removed [ 440.933338][T13767] IPVS: stop unused estimator thread 0... [ 444.705428][T13759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.331815][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.333848][T13757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.451666][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 450.454819][T13757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.092077][T13757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.571755][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 455.574115][T13758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.855001][T13763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.332665][T13758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.972450][T13763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.167034][T15237] FAULT_INJECTION: forcing a failure. [ 462.167034][T15237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.167096][T15237] CPU: 0 UID: 0 PID: 15237 Comm: syz.4.2881 Not tainted syzkaller #0 PREEMPT(full) [ 462.167120][T15237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.167131][T15237] Call Trace: [ 462.167138][T15237] [ 462.167146][T15237] dump_stack_lvl+0xe8/0x150 [ 462.167182][T15237] should_fail_ex+0x410/0x560 [ 462.167227][T15237] _copy_from_iter+0x1d3/0x1660 [ 462.167257][T15237] ? __alloc_skb+0x27a/0x7a0 [ 462.167291][T15237] ? __alloc_skb+0x27a/0x7a0 [ 462.167320][T15237] ? __alloc_skb+0x27a/0x7a0 [ 462.167349][T15237] ? __pfx__copy_from_iter+0x10/0x10 [ 462.167375][T15237] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 462.167404][T15237] ? __alloc_skb+0x27a/0x7a0 [ 462.167428][T15237] ? __alloc_skb+0x27a/0x7a0 [ 462.167459][T15237] ? netlink_sendmsg+0x650/0xb40 [ 462.167483][T15237] ? skb_put+0x112/0x210 [ 462.167503][T15237] netlink_sendmsg+0x6c0/0xb40 [ 462.167534][T15237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.167564][T15237] ? apparmor_socket_sendmsg+0x98/0x360 [ 462.167595][T15237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.167616][T15237] sock_sendmsg_nosec+0x13a/0x180 [ 462.167643][T15237] ____sys_sendmsg+0x54e/0x850 [ 462.167668][T15237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.167696][T15237] ? import_iovec+0x73/0xa0 [ 462.167719][T15237] ___sys_sendmsg+0x2a5/0x360 [ 462.167738][T15237] ? __lock_acquire+0x6df/0x2e50 [ 462.167763][T15237] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.167794][T15237] ? kstrtouint+0x6e/0xe0 [ 462.167843][T15237] ? __fget_files+0x2a/0x420 [ 462.167866][T15237] ? __fget_files+0x3a2/0x420 [ 462.167899][T15237] __sys_sendmmsg+0x273/0x4d0 [ 462.167924][T15237] ? __pfx___sys_sendmmsg+0x10/0x10 [ 462.167957][T15237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 462.167999][T15237] ? ksys_write+0x242/0x270 [ 462.168027][T15237] ? __pfx_ksys_write+0x10/0x10 [ 462.168059][T15237] __x64_sys_sendmmsg+0xa0/0xc0 [ 462.168081][T15237] do_syscall_64+0x166/0x520 [ 462.168105][T15237] ? trace_irq_disable+0x3b/0x140 [ 462.168123][T15237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.168143][T15237] ? clear_bhb_loop+0x70/0xc0 [ 462.168166][T15237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.168191][T15237] RIP: 0033:0x7f684a19e159 [ 462.168216][T15237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.168232][T15237] RSP: 002b:00007f684b002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 462.168254][T15237] RAX: ffffffffffffffda RBX: 00007f684a425fa0 RCX: 00007f684a19e159 [ 462.168268][T15237] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 462.168282][T15237] RBP: 00007f684b002090 R08: 0000000000000000 R09: 0000000000000000 [ 462.168295][T15237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.168307][T15237] R13: 00007f684a426038 R14: 00007f684a425fa0 R15: 00007ffd1b05e2f8 [ 462.168337][T15237] [ 462.500056][T15243] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2882'. [ 463.579637][T15284] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 463.629103][T15295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2894'. [ 463.629221][T15295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2894'. [ 463.629308][T15295] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2894'. [ 463.688702][T13276] hid-generic 0005:0008:0009.0026: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 463.756460][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'. [ 463.851067][T15300] fido_id[15300]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 463.946649][T15308] ipt_REJECT: TCP_RESET invalid for non-tcp [ 463.981075][T15307] IPv6: addrconf: prefix option has invalid lifetime [ 464.296345][T15324] xt_hashlimit: size too large, truncated to 1048576 [ 464.376204][T15321] syz_tun: entered allmulticast mode [ 464.437462][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 464.820453][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2901'. [ 464.939805][T15316] syz_tun: left allmulticast mode [ 464.963724][T15346] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2901'. [ 465.240818][T13276] hid-generic 0005:0008:0009.0027: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 465.287473][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2906'. [ 465.369937][T15363] fido_id[15363]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 465.646018][T15355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2906'. [ 465.945478][T15375] validate_nla: 60 callbacks suppressed [ 465.945538][T15375] netlink: 'syz.3.2910': attribute type 21 has an invalid length. [ 465.945652][T15375] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 466.116754][T15382] syzkaller0: entered promiscuous mode [ 466.116811][T15382] syzkaller0: entered allmulticast mode [ 466.281148][T15389] 0·: renamed from hsr0 [ 466.302427][T15389] 0·: entered allmulticast mode [ 466.302473][T15389] hsr_slave_0: entered allmulticast mode [ 466.302718][T15389] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 466.374400][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.611217][T15408] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 466.795644][T15400] hsr_slave_1 (unregistering): left promiscuous mode [ 467.174739][T15421] FAULT_INJECTION: forcing a failure. [ 467.174739][T15421] name failslab, interval 1, probability 0, space 0, times 0 [ 467.189289][T15421] CPU: 1 UID: 0 PID: 15421 Comm: syz.0.2920 Not tainted syzkaller #0 PREEMPT(full) [ 467.189320][T15421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.189333][T15421] Call Trace: [ 467.189343][T15421] [ 467.189353][T15421] dump_stack_lvl+0xe8/0x150 [ 467.189386][T15421] should_fail_ex+0x410/0x560 [ 467.189424][T15421] should_failslab+0xa8/0x100 [ 467.189450][T15421] ? skb_clone+0x212/0x3a0 [ 467.189474][T15421] kmem_cache_alloc_noprof+0xa1/0x600 [ 467.189508][T15421] ? skb_clone+0x212/0x3a0 [ 467.189538][T15421] skb_clone+0x212/0x3a0 [ 467.189566][T15421] __netlink_deliver_tap+0x413/0x860 [ 467.189605][T15421] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.189634][T15421] netlink_deliver_tap+0x19c/0x1b0 [ 467.189659][T15421] netlink_unicast+0x781/0x940 [ 467.189705][T15421] netlink_sendmsg+0x813/0xb40 [ 467.189740][T15421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.189775][T15421] ? apparmor_socket_sendmsg+0x98/0x360 [ 467.189808][T15421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.189832][T15421] sock_sendmsg_nosec+0x13a/0x180 [ 467.189863][T15421] ____sys_sendmsg+0x54e/0x850 [ 467.189890][T15421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.189925][T15421] ? import_iovec+0x73/0xa0 [ 467.189952][T15421] ___sys_sendmsg+0x2a5/0x360 [ 467.189979][T15421] ? __lock_acquire+0x6df/0x2e50 [ 467.190007][T15421] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.190069][T15421] ? __fget_files+0x2a/0x420 [ 467.190096][T15421] ? __fget_files+0x3a2/0x420 [ 467.190134][T15421] __x64_sys_sendmsg+0x1b1/0x290 [ 467.190160][T15421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.190202][T15421] do_syscall_64+0x166/0x520 [ 467.190231][T15421] ? trace_irq_disable+0x3b/0x140 [ 467.190252][T15421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.190273][T15421] ? clear_bhb_loop+0x70/0xc0 [ 467.190298][T15421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.190319][T15421] RIP: 0033:0x7f57cef9e159 [ 467.190341][T15421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.190359][T15421] RSP: 002b:00007f57cff16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.190384][T15421] RAX: ffffffffffffffda RBX: 00007f57cf225fa0 RCX: 00007f57cef9e159 [ 467.190400][T15421] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 467.190414][T15421] RBP: 00007f57cff16090 R08: 0000000000000000 R09: 0000000000000000 [ 467.190426][T15421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.190439][T15421] R13: 00007f57cf226038 R14: 00007f57cf225fa0 R15: 00007ffdf06f6068 [ 467.190474][T15421] [ 467.255302][T15426] Dead loop on virtual device lo (net 556), fix it urgently! [ 467.255526][T15426] Dead loop on virtual device lo (net 556), fix it urgently! [ 467.255747][T15426] Dead loop on virtual device lo (net 556), fix it urgently! [ 467.260719][T15426] Dead loop on virtual device lo (net 556), fix it urgently! [ 467.260914][T15426] Dead loop on virtual device lo (net 556), fix it urgently! [ 467.261092][T15426] Dead loop on virtual device lo (net 556), fix it urgently! [ 467.263039][T15426] Dead loop on virtual device lo (net 556), fix it urgently! [ 467.263232][T15426] Dead loop on virtual device lo (net 556), fix it urgently! [ 467.263439][T15426] Dead loop on virtual device lo (net 556), fix it urgently! [ 467.642366][T15436] __nla_validate_parse: 10 callbacks suppressed [ 467.642419][T15436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2924'. [ 467.642525][T15436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2924'. [ 467.642594][T15436] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2924'. [ 467.645794][T15433] syzkaller0: entered promiscuous mode [ 467.645815][T15433] syzkaller0: entered allmulticast mode [ 467.668066][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'. [ 468.036160][T15447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2929'. [ 468.055782][T15449] FAULT_INJECTION: forcing a failure. [ 468.055782][T15449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.064349][T15449] CPU: 0 UID: 0 PID: 15449 Comm: syz.4.2931 Not tainted syzkaller #0 PREEMPT(full) [ 468.064377][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.064389][T15449] Call Trace: [ 468.064397][T15449] [ 468.064406][T15449] dump_stack_lvl+0xe8/0x150 [ 468.064439][T15449] should_fail_ex+0x410/0x560 [ 468.064471][T15449] _copy_from_iter+0x1d3/0x1660 [ 468.064500][T15449] ? __alloc_skb+0x27a/0x7a0 [ 468.064529][T15449] ? __alloc_skb+0x27a/0x7a0 [ 468.064556][T15449] ? __alloc_skb+0x27a/0x7a0 [ 468.064582][T15449] ? __pfx__copy_from_iter+0x10/0x10 [ 468.064607][T15449] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 468.064632][T15449] ? __alloc_skb+0x27a/0x7a0 [ 468.064656][T15449] ? __alloc_skb+0x27a/0x7a0 [ 468.064687][T15449] ? netlink_sendmsg+0x650/0xb40 [ 468.064709][T15449] ? skb_put+0x112/0x210 [ 468.064730][T15449] netlink_sendmsg+0x6c0/0xb40 [ 468.064762][T15449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.064792][T15449] ? apparmor_socket_sendmsg+0x18b/0x360 [ 468.064822][T15449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.064842][T15449] sock_sendmsg_nosec+0x13a/0x180 [ 468.064870][T15449] ____sys_sendmsg+0x54e/0x850 [ 468.064895][T15449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.064925][T15449] ? import_iovec+0x73/0xa0 [ 468.064948][T15449] ___sys_sendmsg+0x2a5/0x360 [ 468.064967][T15449] ? __lock_acquire+0x6df/0x2e50 [ 468.064990][T15449] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.065045][T15449] ? __fget_files+0x2a/0x420 [ 468.065068][T15449] ? __fget_files+0x3a2/0x420 [ 468.065101][T15449] __x64_sys_sendmsg+0x1b1/0x290 [ 468.065123][T15449] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.065164][T15449] do_syscall_64+0x166/0x520 [ 468.065197][T15449] ? trace_irq_disable+0x3b/0x140 [ 468.065215][T15449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.065234][T15449] ? clear_bhb_loop+0x70/0xc0 [ 468.065258][T15449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.065276][T15449] RIP: 0033:0x7f684a19e159 [ 468.065294][T15449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.065310][T15449] RSP: 002b:00007f684b002028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.065332][T15449] RAX: ffffffffffffffda RBX: 00007f684a425fa0 RCX: 00007f684a19e159 [ 468.065346][T15449] RDX: 0000000020000014 RSI: 00002000000042c0 RDI: 0000000000000009 [ 468.065359][T15449] RBP: 00007f684b002090 R08: 0000000000000000 R09: 0000000000000000 [ 468.065371][T15449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.065383][T15449] R13: 00007f684a426038 R14: 00007f684a425fa0 R15: 00007ffd1b05e2f8 [ 468.065413][T15449] [ 469.413753][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.421171][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.430692][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.440742][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.442592][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.662283][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 469.674920][T15513] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2948'. [ 469.752633][T15510] syzkaller0: entered promiscuous mode [ 469.752679][T15510] syzkaller0: entered allmulticast mode [ 469.815883][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 469.834329][T15517] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2950'. [ 469.910026][T15520] xt_hashlimit: size too large, truncated to 1048576 [ 470.006762][T13759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.007607][T13759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.158205][T13759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.158248][T13759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.283270][T13759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.283329][T13759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.394020][T15505] lo speed is unknown, defaulting to 1000 [ 470.463819][T13759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.476746][T13759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.502737][T15505] lo speed is unknown, defaulting to 1000 [ 470.517657][T15505] lo speed is unknown, defaulting to 1000 [ 470.994247][T15544] xt_hashlimit: size too large, truncated to 1048576 [ 471.075059][T13759] veth0: left allmulticast mode [ 471.080302][T13759] veth0: left promiscuous mode [ 471.088821][T13759] bridge0: port 3(veth0) entered disabled state [ 471.105738][T13759] bridge_slave_1: left allmulticast mode [ 471.113466][T13759] bridge_slave_1: left promiscuous mode [ 471.121739][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.134635][T13759] bridge_slave_0: left allm ** replaying previous printk message ** [ 471.134635][T13759] bridge_slave_0: left allmulticast mode [ 471.134694][T13759] bridge_slave_0: left promiscuous mode [ 471.136058][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.138321][T13759] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN PTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 471.172699][T13759] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 471.182040][T13759] CPU: 0 UID: 0 PID: 13759 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 471.191686][T13759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.201874][T13759] Workqueue: netns cleanup_net [ 471.206726][T13759] RIP: 0010:br_del_frame+0xd1/0x160 [ 471.212002][T13759] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 f9 1e 84 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d0 1f 84 f7 4d 89 37 4d 85 f6 74 [ 471.231635][T13759] RSP: 0018:ffffc900037f77c0 EFLAGS: 00010a06 [ 471.237739][T13759] RAX: 1bd5a00000000024 RBX: ffffffff907bda58 RCX: ffff888076115dc0 [ 471.245715][T13759] RDX: 0000000000000000 RSI: ffffffff907bda40 RDI: ffffffff907bda50 [ 471.253692][T13759] RBP: 000000000000001c R08: 6b00000000000000 R09: 0000000000000000 [ 471.261673][T13759] R10: 0000000000008000 R11: ffff8880b863ff28 R12: dffffc0000000000 [ 471.269658][T13759] R13: 1ffffffff20f7b4b R14: 0000000000000000 R15: dead000000000122 [ 471.277672][T13759] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 471.286603][T13759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.293190][T13759] CR2: 00007fb777d8aff8 CR3: 0000000074734000 CR4: 00000000003526f0 [ 471.301173][T13759] Call Trace: [ 471.304459][T13759] [ 471.307394][T13759] br_cfm_port_del+0x106/0x1a0 [ 471.312251][T13759] del_nbp+0x178/0x9f0 [ 471.316331][T13759] br_dev_delete+0x6e/0x130 [ 471.320835][T13759] br_net_exit_rtnl+0xb1/0x120 [ 471.325646][T13759] ? __pfx_br_net_exit_rtnl+0x10/0x10 [ 471.331022][T13759] ops_undo_list+0x319/0x8d0 [ 471.335625][T13759] ? __pfx_ops_undo_list+0x10/0x10 [ 471.340789][T13759] ? idr_destroy+0x218/0x290 [ 471.345420][T13759] ? do_raw_spin_unlock+0xf5/0x200 [ 471.350540][T13759] cleanup_net+0x572/0x810 [ 471.354970][T13759] ? __pfx_cleanup_net+0x10/0x10 [ 471.359918][T13759] ? rcu_is_watching+0x16/0xb0 [ 471.364688][T13759] ? process_scheduled_works+0x97a/0x1630 [ 471.370428][T13759] process_scheduled_works+0xc3d/0x1630 [ 471.376006][T13759] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.381997][T13759] ? assign_work+0x3cf/0x5d0 [ 471.386596][T13759] worker_thread+0xa47/0xfb0 [ 471.391204][T13759] kthread+0x38b/0x480 [ 471.395282][T13759] ? __pfx_worker_thread+0x10/0x10 [ 471.400401][T13759] ? __pfx_kthread+0x10/0x10 [ 471.405008][T13759] ret_from_fork+0x514/0xb70 [ 471.409634][T13759] ? __pfx_ret_from_fork+0x10/0x10 [ 471.414776][T13759] ? __switch_to+0xc89/0x1420 [ 471.419471][T13759] ? __pfx_kthread+0x10/0x10 [ 471.424065][T13759] ret_from_fork_asm+0x1a/0x30 [ 471.428857][T13759] [ 471.431904][T13759] Modules linked in: [ 471.437439][T13759] ---[ end trace 0000000000000000 ]--- [ 471.487698][T13759] RIP: 0010:br_del_frame+0xd1/0x160 [ 471.493362][T13759] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 f9 1e 84 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d0 1f 84 f7 4d 89 37 4d 85 f6 74 [ 471.507359][ T5629] Bluetooth: hci5: command tx timeout [ 471.518544][T13759] RSP: 0018:ffffc900037f77c0 EFLAGS: 00010a06 [ 471.524854][T13759] RAX: 1bd5a00000000024 RBX: ffffffff907bda58 RCX: ffff888076115dc0 [ 471.533027][T13759] RDX: 0000000000000000 RSI: ffffffff907bda40 RDI: ffffffff907bda50 [ 471.541117][T13759] RBP: 000000000000001c R08: 6b00000000000000 R09: 0000000000000000 [ 471.549592][T13759] R10: 0000000000008000 R11: ffff8880b863ff28 R12: dffffc0000000000 [ 471.573633][T13761] net_ratelimit: 44 callbacks suppressed [ 471.573690][T13761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing u ** replaying previous printk message ** [ 471.573690][T13761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.585919][T13759] R13: 1ffffffff20f7b4b R14: 0000000000000000 R15: dead000000000122 [ 471.585942][T13759] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 471.585958][T13759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.585972][T13759] CR2: 000055af65b7cee8 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 471.586048][T13759] Kernel panic - not syncing: Fatal exception [ 471.636571][T13759] Kernel Offset: disabled [ 471.640893][T13759] Rebooting in 86400 seconds..