last executing test programs: 4m56.544996251s ago: executing program 0 (id=6364): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000019000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m56.312161376s ago: executing program 0 (id=6367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x4000400) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvmsg$unix(r4, 0x0, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x8000, 0x0, 0xf, 0x7, 0xc0e}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4008814) (async, rerun: 32) unshare(0x10000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0x6ef, 0xfff7, 0x8632, 0x80000}, {0x6, 0x3, 0x6, 0xfeff, 0x6c, 0x6}, 0x6aba0e4b, 0x1, 0xd04}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9b3bc4fd75e29128}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb91e316295c500f1}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x4890) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000008c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x16, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m56.110448827s ago: executing program 0 (id=6369): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2500}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 4m55.911838543s ago: executing program 0 (id=6371): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)=0x2) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000002540)=0x1) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="50010101"], 0xe4) close(0x3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa3, 0x2) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000f336, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200)=0x10001, 0x12) sendfile(r7, r6, 0x0, 0xf03a0005) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r9, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 4m54.143549159s ago: executing program 0 (id=6382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7fff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x48004}, 0x40) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080) (fail_nth: 3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3036}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 4m53.898323266s ago: executing program 0 (id=6386): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001884}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 4m38.767174337s ago: executing program 32 (id=6386): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001884}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 4.086624689s ago: executing program 3 (id=8431): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={r3, 0xda0, 0x3, 0x3, 0x0, 0x2f33, 0x1, 0x1ff, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x101, 0x4005, 0x7fc, 0xf, 0xfffffffd}}, &(0x7f0000000280)=0xb0) accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000400)="06", 0x1}, {0x0}], 0x10000000000000d6}}], 0x2a0, 0x20004840) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.819357557s ago: executing program 2 (id=8434): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = socket(0x23, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(r6) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001180)={0x0, 0x1ff}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r9, 0x58, &(0x7f0000001100)}, 0x10) sendto(r8, 0x0, 0x0, 0x4004010, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYRES64=r3, @ANYRESOCT=r5, @ANYRES32=r1, @ANYRES8=r2, @ANYRES32=r6], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r5, @ANYBLOB="0800020096a68e15670b000000"], 0x20}}, 0x40000c0) r10 = socket$inet6(0xa, 0x3, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000100)="146d7d1fe23f2a38ae8e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x80810, r11, 0x0) ioctl$sock_ifreq(r10, 0x89b1, &(0x7f00000000c0)={'bridge_slave_1\x00', @ifru_mtu=0x4}) 3.657057944s ago: executing program 2 (id=8436): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e000000100000000000000000000000003000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) 3.539303659s ago: executing program 2 (id=8438): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3d00}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 3.337004557s ago: executing program 4 (id=8440): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r4, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x194, 0x24, 0xd0f, 0x8000000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1c, 0x7, 0x5, 0x5, 0x1, 0x2, 0x4, 0x6}}, {0xfffffffffffffe12, 0x2, [0x9, 0xf9c0, 0xfbff, 0x10, 0xa, 0xd]}}, {{0x1c, 0x1, {0xf, 0xf9, 0x101, 0x8, 0x0, 0x4000000, 0x5, 0x7}}, {0x12, 0x2, [0x101, 0xb, 0x9, 0x0, 0xb, 0x81, 0xf8]}}, {{0x1c, 0x1, {0x4, 0x0, 0x2, 0x7, 0x2, 0x4, 0x12, 0x1}}, {0x6, 0x2, [0x82]}}, {{0x1c, 0x1, {0x6, 0x5, 0x7, 0x3, 0x0, 0xff, 0x7, 0x1}}, {0x6, 0x2, [0xe]}}, {{0x1c, 0x1, {0x4, 0x25, 0x6, 0x9, 0x3, 0x8, 0x7b3c, 0x5}}, {0xe, 0x2, [0x9, 0x800, 0xfff2, 0x76, 0x9]}}, {{0x1c, 0x1, {0x7, 0x8, 0x4, 0x8, 0x1, 0xfff, 0xaa, 0x6}}, {0x10, 0x2, [0x2, 0x95e, 0x5597, 0x7, 0x0, 0xfff]}}, {{0x1c, 0x1, {0x0, 0x5, 0x5, 0x101, 0x1, 0x12, 0x100, 0x4}}, {0xc, 0x2, [0x5, 0x77c0, 0x1, 0x6]}}, {{0x1c, 0x1, {0x6, 0x0, 0x9, 0x629, 0x2, 0x200, 0x8, 0x3}}, {0xa}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0xfd, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x194}}, 0x0) socket$unix(0x1, 0x2, 0x0) 3.336711871s ago: executing program 2 (id=8441): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r2 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="5af1", 0x2, 0x3b00, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x31, r2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f00000001c0)) getsockopt$MRT(r6, 0x0, 0xd0, 0x0, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000001020300000000000000000002000000240002801400018008000100ac1e000108000200e00000020c000280040001"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x4010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r8, 0x1, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) 3.30694135s ago: executing program 1 (id=8442): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) socket$inet(0x2, 0x2, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket(0x2, 0x2, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r9 = socket(0x2, 0x3, 0xffffffff) setsockopt(r9, 0xff, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r6, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r12, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r13, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 3.108980341s ago: executing program 4 (id=8444): getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8001, 0x20, 0x9, 0x4}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r0, 0x52}, &(0x7f00000000c0)=0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x15}, @private0, 0x6a7a, 0x31, 0x0, 0x500, 0xb, 0x40000}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'team0\x00', {0x3}, 0xc}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8c00, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x11) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000240)={r1, 0x1}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x40, 0x20, 0x1, 0x5, {{0x4b, 0x4, 0x2, 0x13, 0x12c, 0x65, 0x0, 0xac, 0x29, 0x0, @multicast1, @broadcast, {[@noop, @lsrr={0x83, 0xb, 0x8f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x31}]}, @generic={0x82, 0x11, "55599e9aa914ae223950e75e8581f7"}, @generic={0x44, 0x11, "2acf99b0158b8bf9393bc046df9c31"}, @rr={0x7, 0x23, 0xc0, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, @local, @loopback, @broadcast, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x3c, 0x7e, 0x3, 0x3, [{@rand_addr=0x64010100, 0x4}, {@loopback, 0x80000001}, {@remote, 0x8}, {@multicast2, 0x50}, {@empty, 0xe}, {@multicast2, 0x2}, {@local, 0x10}]}, @cipso={0x86, 0x1f, 0xfffffffffffffffd, [{0x0, 0xd, "29d2c603b28691983bfd77"}, {0x0, 0xc, "2d6c3638e8b0fd27b4a8"}]}, @rr={0x7, 0x1f, 0xec, [@multicast1, @private=0xa010101, @empty, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp={0x44, 0x8, 0xcb, 0x0, 0x1, [0x9]}, @timestamp_prespec={0x44, 0x44, 0xf4, 0x3, 0x1, [{@remote, 0x40}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x400}, {@multicast1, 0x1c25}, {@private=0xa010100, 0x7}, {@empty, 0x5}, {@loopback, 0x2}, {@remote, 0x6}]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8, 0x6, 0x8000, 0x100, 0x6, 0x4020110, r7}) (async, rerun: 64) openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000500)={'macsec0\x00', 0x5}) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000540)={r0, 0xff, 0xffffffff, 0xfffffffc}, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000580)) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@local, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x67f, 0x89fe, 0x2, 0x400, 0x0, 0x20000, r7}) (async, rerun: 64) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000640)={0x7, 0x4, 0x0, 0x6, 0x2}) (async) listen(r3, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000680)={0x2, [0x0, 0x0]}, &(0x7f00000006c0)=0xc) (async) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000700), &(0x7f0000000740)=0x4) (async) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r10, 0x29, 0xcf, &(0x7f0000000780), 0x4) (async) epoll_create1(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x1d, r11}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{0x0, 0x0, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "35c5cf820962e9a9"}, 0x10}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000880) ioctl$SIOCGETVIFCNT(r9, 0x89e0, &(0x7f0000000900)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000009c0)=0x1da4) 3.0607207s ago: executing program 3 (id=8445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x84, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 3.040821017s ago: executing program 1 (id=8446): write$nci(0xffffffffffffffff, 0x0, 0xe4) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 3) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x0) 2.844474563s ago: executing program 3 (id=8447): write$nci(0xffffffffffffffff, 0x0, 0xe4) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x0) 2.844109074s ago: executing program 1 (id=8448): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00003f0000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) mmap(&(0x7f0000336000/0x4000)=nil, 0x4000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 2.843935374s ago: executing program 4 (id=8449): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0xd, 0x32, 0xffffffffffffffff, 0x852a9000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000040), &(0x7f0000000240)=@tcp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff180000000000000000000000000800009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2.68872476s ago: executing program 3 (id=8450): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000400)="06", 0x1}, {0x0}], 0x2}}], 0x2a0, 0x20004840) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xa00000000000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.668422816s ago: executing program 1 (id=8451): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x2, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close(r3) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x21, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0x1000, 0x0, 0x1a, 0x64, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010300000000000000002b000000490fdbe912649b358b92d4b783b5f81808ce7003b5e19cc4d1da519f4cfd3c5edd144d9084a4d0f0caded0679020d79ebc6bab1574b1cb7b84b9a55dcdff8fe591ad9b54bf00d70c8b29cf4718061ccef9dddb32dde58f5d47ad087ea05006814a6899db0edb853c14673d25848fbee02d00d1c2be3eb0235ffb4e7a0f96d597afc4f88e9002452583f97c698ccdbe"], 0x14}, 0x1, 0x0, 0x0, 0x20002041}, 0x0) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r10, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4040080) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 2.38364295s ago: executing program 1 (id=8453): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x338, 0x1000000, 0xffffffff, 0x280, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x1c8}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0xdab9f66e79d89cfe}, {0x1, [0x0, 0x4, 0x2, 0x0, 0x5, 0x2], 0x1}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'netbios-ns\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x280) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x8040480) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040081}, 0x20000000) 2.213082216s ago: executing program 2 (id=8454): unshare(0x20040600) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000000)) unshare(0x20000400) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) close(0x3) sendfile(r7, r8, 0x0, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r10, 0x28, 0x2, 0xfffffffffffffffc, &(0x7f0000000040)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), r9) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x298, 0x130, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1f0, 0x1f0, 0x200, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x3, 0x0, [0x4e24, 0x0, 0x4e24, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x7}, {0x3, 0x2, 0x1}, {0x1, 0x5}, 0x10001, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xc, 0x0, 0x20000000, 0x7ee6, 0x2}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0) 2.196095835s ago: executing program 4 (id=8455): syz_open_procfs$namespace(0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, r0, 0xfffff000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) (async) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x50, r0, 0x100000000) (async) socket(0x10, 0x3, 0x0) (async) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0006000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) (async) unshare(0x2a020400) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) preadv(r6, 0x0, 0x0, 0x7, 0x10000008) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000002c0)={0xa002a014}) (async) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x2, 0xd) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344, 0x41424344}, 0xfffffffa, 0x1) syz_emit_ethernet(0x1fe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6993a03e01c806000000000000000000000000000000000100000000000000000000ffff0a010102320a240504500300fe8000000000000000000000000000bb00000000000000000000ffffac1e000100000000000000000000000000000001fc020000000000000000000000000000000000000000000000000000000000003c003710670000006200a0306700000073000105000000000802000100000000ff0200000000000000000000000000014e234e21", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"], 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.110941531s ago: executing program 1 (id=8457): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) close(0xffffffffffffffff) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.088565089s ago: executing program 4 (id=8458): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000003e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 1.986560799s ago: executing program 2 (id=8460): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @call={0x85, 0x0, 0x0, 0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x90}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket(0x40000000015, 0x805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000340)='J', 0x1}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fffffffedbdf2500070000", @ANYRES32=r0, @ANYBLOB="089805000750050008001300", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 1.916531935s ago: executing program 4 (id=8461): write$nci(0xffffffffffffffff, 0x0, 0xe4) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x0) 1.620524987s ago: executing program 3 (id=8462): r0 = socket$unix(0x1, 0x5, 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0xa}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x4, 0xfd}]}, &(0x7f0000000240)='GPL\x00', 0x8}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = epoll_create1(0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x4, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0xc], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x7, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8002, 0x3, 0x2, 0x7, 0x8, 0xce]}}}}]}, 0x88}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002008}) 1.446413786s ago: executing program 3 (id=8465): unshare(0x22020600) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x50) recvmmsg(r0, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2100, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000000002010400000000000000000a00000504000180440003800c00028005000100000000002c00018014000300fe80000000000000000000000000001c14000400fe88000000000000000000000000000106000340000000003c0002800c00028005000100000000002c00018014000300ff"], 0x98}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001540)=ANY=[@ANYBLOB="2400000002010104000000000000c2aec08c00050c0019800800020081000000040002"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf250b0000000c00058008000100"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x5a}, 0x404c8c0) 445.938988ms ago: executing program 5 (id=8468): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r2, @ANYBLOB="46000600000000002400128009000100626f6e640000000014000280050001000200"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x600000000000000}, 0x0) 332.344902ms ago: executing program 5 (id=8469): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000003e80029000000040000002b0110000000010004"], 0x28}, 0x4004004) 332.087679ms ago: executing program 5 (id=8470): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$sock(r0, &(0x7f0000000480)={&(0x7f0000000000)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="e6e605a4f0a210b19cf47884afe01e29b656df5a79b29d9f3dfce010df57e4ecba05b74833411ac82973f02ec3182c3f8df31aa6c75af9f62cedbf98c06939", 0x3f}, {&(0x7f0000000240)="825d80e345cbab1604b96d128a4bd34c19420ad80dcac3cffb13373ff92e68c55fca8a725840c50cb0274d9e7bf5902d6c91c8cd6babbb06c8063e4c52522e914cd0bd7740e211970111a1a0828f29d25a85ea62dca8546108fbff96be5caa8c3f2b021807651e190917df32ca6d13015cd39ba16ca94e2749122d2de68615d60fdd5ec49fd750a61970e1c314e753cede6f588209dd1c42f107e5c80b23414b1910e68efd75a2d9fe42e0a8b2a5c7e3ca1bc27d1876d275b2ee7f5d148e72cd6577dc36", 0xc4}], 0x2, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x35}}, @timestamping={{0x14, 0x1, 0x25, 0x7c8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xd8}, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020643a00000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b7030000010000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 161.40094ms ago: executing program 5 (id=8471): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4d00}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 111.843403ms ago: executing program 5 (id=8472): write$nci(0xffffffffffffffff, 0x0, 0xe4) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="d800000019008111e0020f060d8107040a600000ffffe000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x8000080) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000200)=[{0x15, 0x0, 0x2, 0x80000024}, {0x6, 0x2, 0x9, 0xfffffff6}, {0x4, 0xd, 0x1, 0xfffffff7}, {0x6, 0xff, 0x6, 0x100005e}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x48, 0x31, 0x3f, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x3}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x13}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0xb0}}, 0x20000800) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r8) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 5 (id=8473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x29, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1d}}, @tail_call, @ldst={0x2, 0x3, 0x6, 0x3, 0xa, 0x18, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x51}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xc9, &(0x7f00000001c0)=""/201, 0x41000, 0x1, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x4, 0x1, 0x6, 0xb}, {0x4, 0x5, 0x8, 0x2}, {0x0, 0x4, 0x4, 0xc}], 0x10, 0xf4}, 0x94) writev(r0, &(0x7f0000001940)=[{&(0x7f0000000440)="191d515d295157dc0278c3", 0xb}, {&(0x7f0000000480)="2ce027a5d761ac5845f06044709df9f41c9d3165", 0x14}, {&(0x7f00000004c0)="7623052c5b7df23e381f60c418b2be38b40edd13c5339bff8d163253a06ea846ab7de5a4f5a0f9827bae9a5e3e549c31ac5e9c99ec45da7f68d91607a74348370c80d45fbd0c72baca9c23c639f21441bde3d96ac121e76757be78d56a591455e830e343b36a4545852815de91c37084f9a4551d5acd76c3275a45eb54f85aeb1ec8a03dc9cc5bd2b5ee6374acc0c94ff33f", 0x92}, {&(0x7f0000000580)="ec891091b71202ecdde85e18cae90e547e7ec88326818963d2cec60a4d5e000a4a0c952adf2a1d8a4c907c8855b1ee246e353d630b1f6e564b44106ae20fbe81e41eac231f268664469f17f32c0cf23c4611e05b8a800195e9e6241dd257fb5b88e781fa1a7ccfff39e0983efe468bd446b428ebe0b3b1fd04131ed5d13e7b9f77899526f8ad5c93335558932105bec239721a916c9c7da9ac97ee756cbd8a7e63ddbe9dbe1e0853dd93bef1cdaea38c69f5fde32ac57876431a47fe864fccddfb1ba7", 0xc3}, {&(0x7f0000000680)="35bb216c48f45052857d93d66a9e6cae4877592a0082058462d9110069d564c95cbef6a6e0d70d2fe7a7cf17ecefcab06cb3", 0x32}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="2d7323ea0440204dc2c565ecbd31cbb0fa3c90791b48f0b6a8cdf116da689ee3f7bb584b4982360a695bb2117e080c0f116a002929d32c3d74ea951998f7d04987496e746de5580797e3725ed615b421bbb4b5423d104b7adc66c4e0b6cd41af91754b3f7f0daada6754781fb61a1384e72a886eec672b39cd18207903ef165bff905ff82f719767873c260f7749e927d5307b6a5997623a30e8eccd6410593189af2ab3b82cef2f3973d38d9c21", 0xae}, {&(0x7f0000001780)="3493c4dae496be51dd77f48b9d2f4dba48c98f8f9206ef15d331462a170c8bd3be25bca2b45d33d0fa547e0bc31c8b3c62a0b0226c01914c3dc352bf1fe6c4aeb248e8d3d9140d00c1be888913e9c0a9c792c3add29190d87cfa63f375e776deb91db4ab1543b410d7bc1a415fa28b0969b88cb54d141a612d5e43d4e64c6f88eb", 0x81}, {&(0x7f0000001840)="be0ee77667e3bae25e602e5ea2", 0xd}, {&(0x7f0000001880)="6891da262529cdbfd84cbe149cf30d93696c975dd46eb587ab834c2d44bb3733c86a90674f59aa37177b2217509946b57b066bbcb8ec338d19985a06b7090809068e2ead720c70d16934ed08d1982f78a3483c9d5fa681d9482b684334c586a289bad4cfc094e5fe4a816a279cac584ed0fc397e2b06482bf980deaf123f1c17e9ba806c00a2bb7ad16d23f5f15228cedfc57d78987fd70cde890c77a2faad399d1f1b0cf252caa3013730516d3228d84a55f7ff99867d5c60c48c3edfd286", 0xbf}], 0xa) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000001a00)={0x1, 0xb98, 0x7fffffffffffffff}) (async) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001a40), &(0x7f0000001a80)=0x10, 0x80800) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000001ac0)={0x4, 0xca79}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000001c00)={r0, &(0x7f0000001b00)='\x00', 0x1, &(0x7f0000001b40)={@align=0x8335, {0x6, 0x1, 0x0, 0x1}}, 0x1, &(0x7f0000001b80)={@_ha_fsid}, &(0x7f0000001bc0)=0x7ff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x1bc, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "829a65464cba9ea7f721f5065f3df30d53449bd84f04f8c0"}}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "7c20eb54c7798f6bd226229f9dd045c1d1a3ac6b389d23f91a0c766dec96ec8ac788c9f0dcdf11e9cc66e9c584258d460faee89b3c3c0f5d599db2276635cba343bcf43d5cfa19ec0cb5c0888300fe7cd97a0e601498997c99a1f8b8719508284df3a3a0f22bd2a94763de9aa7ee65334fec320e9167c70619dc028a89df65e8424a7324943ee041bc9c3a1a5f46835e2979a9a0d7d3fcd7aa29abc99cc8874da268a09b6e0f6a2842104b7db560c6592a84d96f816908b48dc545291adb972bd730aaca007f6be6953ed9622d63116378b892a76d63671c7a2ad8d7fb99841f"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3e4d846325e2a2e4ab6020813f4d5e4a940279b0ddff70a80f98debe01"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40d}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8044}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f0000001f00)=[{r5, 0xa4}, {r4, 0x11}], 0x2, &(0x7f0000001f40), &(0x7f0000001f80)={[0x7fff]}, 0x8) (async) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000022c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002280)={&(0x7f0000002000)={0x258, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x140}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x795}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x140}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x31c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf8000000}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc646}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @remote, 0x5}}}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000002300)={0x1, 0x0, 0x7f, 0x2, 0x7}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002340)={r2, 0x816, 0x3, 0x5}) recvfrom$rxrpc(r6, &(0x7f0000002380)=""/13, 0xd, 0x1, &(0x7f00000023c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) (async) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000002400)) (async) sendmmsg$inet_sctp(r2, &(0x7f0000002600)=[{&(0x7f0000002440)=@in6={0xa, 0x4e24, 0x5, @mcast1, 0x5}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000002480)="4554866055c81704bfb4191aed5ab5c1b3fc530b08361972c53beabfc4dbaa295ac4015906446fc18aea0e4612ccba28649a6f5973b9838085442b02a809f949f6382bd4270a2490eb1e807a44e068cf194237684635adc474e83469e0", 0x5d}, {&(0x7f0000002500)="49644b9bc179ebf937a6d269934379967351f07e30835f0f8879155f9db93cc9a4489f828d8f12899f4ac19eeeb6d4c8befd0817239ef32d896a2818ff2ca96f81c75c9f", 0x44}], 0x2, &(0x7f00000025c0)=[@sndinfo={0x20, 0x84, 0x2, {0x7fff, 0x8000, 0x4, 0x3de8}}, @authinfo={0x18, 0x84, 0x6, {0xda4}}], 0x38, 0x40840}], 0x1, 0x80) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000002640)={'lo\x00', 0xfdc8}) ioctl$BTRFS_IOC_ENCODED_WRITE(r4, 0x40809440, &(0x7f00000027c0)={&(0x7f0000002780)=[{&(0x7f0000002680)="10b811b1898b7b38bcb87d334fa18a6b1bb8b310f880165cfd4347ce17b122761f843bab151fd8047b7063b5f54dd8f39be3885f456dbe6b2728007a9232db6ec2b09070fa0ab71cacd03eac0d5f992d3e723b1468c4ac8d0cd0f588dd2b36b3c242afe6a11688aa9cbcd626b57ce094f327af10560e4d405aff78fa2afd554b4b9ff936ed555977814ccf4af95d2739c31a0124fdaf92d5620427c9308d5512e363cf9777e710ea0a1f22f094f28dbf4ca5b1dfee8a90c1ce87fc6ec299d1ab48f05a4fe739126dfc70182025354435", 0xd0}], 0x1, 0x95f, 0x0, 0x2, 0x80000001, 0x3, 0x7, 0x2c42}) r7 = accept4(r5, &(0x7f0000002840)=@alg, &(0x7f00000028c0)=0x80, 0x80800) setsockopt$inet_tcp_TLS_RX(r7, 0x11a, 0x2, &(0x7f0000002900)=@ccm_128={{0x304}, "c030795dc9f6b6fe", "9417be21660cdc855d13ff21d32715df", "6c7efaaf", "8c24d3fac8eec96d"}, 0x28) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000002940)={r5}) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)=@getneightbl={0x14, 0x42, 0x400, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004000) (rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000002a80), r6) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000002ac0)={{r5}, "c89bb165f736ec65a718fbc382d163f5185996665c2003c63b2530df08c1442e9685e7d8f96f6584bafe9786bb9ffc0ffab76be6d333ec606f2e70a1d6f710017127f8c0be0a7f1f8ee2e03a432f2d00d32c530e176fad54e54ad1a93f07a2ad3adbe277206f226661b0880bc665a9d8d6d25fd329eea6b5c7a8251747e25eb30fa4a6ac6a3fe7c2bb50da2308b3001050e4ced26684b1bc8ea501e345c80fc9b3282044f0e9d6def307df881b055b733cb3d0f24244b7185e986040b927c563f7249feb92963f3b052c6f2718cdf80bf4596ce53e0a7fca19812884a6ebff52c073ade8b75ed6ea0d968069318fe9fa5711301bc5c2aee5b5e2fa2635d652c052ea1a02a716df554052df13c225a80097a6c6e718b9789b4b492e846d1e8e391cced676fb4f48b2d692337e1f62c0bd29c1823d23440e5fbba853f1fd3ceccc59f315931f964ded856cde027639fc37cba2b54ed3a26e4eb606caf0244d4f4ff0671ee0ce64145f34d4d5616a0d8e9f1cfd74b423695f7db648e99a78c3d6c1f9fb07a309b59517276066f9885526fd41a84ab200e05e48db9af53ac561f35d5bb8d294dfa5883e3718752517565a58250d8894b1bf53cda598f05ec47c950cafb0e912c4b1b59d3f19d04b57eb03c05fa54be03a53c7b898ce2326262d8c07a00c178d4c4be604282c804a58ce01de307e5d1a67b20d5808a722a53d2c58d7c4c483651acc6fbdba796365341b9b27beb31195882f0b1244510eafc8864bebbb5b6eb1e3a727e5a4f7eb9e135b2a0c9a2d9299685cfd98c581589b3f19403fbc6817823c7989f64e2ac17d727fe2c987c26eedff39c23708eca1f6da8149c5d37c07ac84bf071667b2c94cc2884368a987cd7b01d12a508464b3dd22af3b242504d56d2388ed1a7c4dcea53a75d2d07964e1dad6f515044597013df199579825396809bd7fffed2bbbd5396af361c689aec7e9038dfa6e8909c2b42db90494330785a903d426b47e2da3b7c46d546bde0e8312006a677d466430172eb69e13640652b61f2215820872f22bda263ddceb6ede7e11fe0774aa2a10c6136798b40750c24e033e91015fe8303eab989f948b94b7c5a9d1e4cd551bba1c8cf97e924c5d9fa42bc76a103fb478277dc09240442741acbb62724066cd7b928a13aeeb7f48164af83e460a2e46eb8a2b28149751ec83dd45eb5e3ed94951f754c53f35b3a1c41503df8e0289e8ff641b8381e06b99642066fd5b535f9637376b50c15f3680fdc9ca4a8400e3b8e3d340e36d65e6a842f8b132e7a9c3d03fcce126422cc48ef8017024e29a70249a7776edd0223ada873cab2bceb6f3f5acf987b942522da88f964d18ed2e425e6a2dc2bb592091a7bba8136352dcfd68c81c7b9a2f4e66e5b28dc795818fddad5eb96d54b3dfbbafb852967d6bf01dfeadb88ccd839995be03bd239a3d3f8d1f50281c6ebfbdc190e5740d560c379a5046f4ba41a44e4474a67b775f6f23e62567110790badd37973dd9f7f28003df62da9e540ac7324c5cb48ef8a2679b6ce718d4608bf2de69dc627efc06974fb251ec28b68300d95cd4519da9b4a819b83caf8512efecfee9c5364d450ff1d3539898c7ea676f3d3cd94b47c88de2ff4a4b344a92965c5c8dc91a6625c7e34a823b5422ed802229cdfd2a7e723b2936d3844db24bc4f0c9ef327bf83b325beb87121b75f8bfb2a39f42870bfcb3423668bd426e82ca21ecd9fb23916878697193f53c8ddcfee07e246715df31007ece2acb0d02914e6ba8b348c08982dd9ac727deea5052c5ecd81924b975d2966b96acf23717abed930c485da7074b1e08c6484fd47de22002f2c44739e949330b8b653e080a620eac825dc886a7e6dfddb588173d95c7a6a41fe38a4d5dfc0c758976d18db4c492e6b3a12adbc68cff1711c57dad2c3bf83ff92e2c2a66bc8e08f638e38f98c055178c6d139afb6f8e81fd3472583c7f9082385b88696214b0203087cbc015887da7b4647d8607aa3bcd48cdc6ddbe5e4181dca4a31312a56cd212906dc57f4b0117741651db6f69d07a0280257ba2778bfaa46bb3487fd7ca35e5d3877637f97aa01e3d0463ed095706a2cc9ff4aebe442a576cd7c4eddcec794c2a76c87c704a63c626665fc71219aa419e6998ef29d47a3036ab4931ad65780becc156613d23e827b2a06164a1a04c5e8c58ecbed0ee3fc0b5d7f3f51f384d4b25b37c97393b41949a80ef4d4d9b1008f32d5a83a5915d136810554e3d686eba62e7d0abe97b8560ce9cdce4da67fd9287238a1981482b7c71a4e8ff61c93fa43116a5ca9afbb6018914a138bdc8c5a2477ed74ad965a45c00148f125bdfb168239c8460cc396ebad09962615494b30092616a151f4faff410190c7ea912d63a2fe59a3d4a501febb9072110193cbc85637d967b034cda744968ee842411e9323f2fab8e926489e369a1008d8ec99d887e6b4e619e68b8ddf7884c2b7aeb5751ed01ea87441ba0b721863deab5bf36fb877e99b5fc937431c451e5d1023b507dc5ec1be4b41a9d6963b1a384640951ff1d07364f21f0c7876939ac5d18e3d6b41bcfc66e89f1da18bcd8695b6e88aae1406140599519ba66fbaf5f214dcb693ad40130ecd11139105c2899d82bd73096994d372270d6539f858711ae7b45fea984be3a3506145573d919ab341d699087f4069387eb9dee7a48c3fdeb6cc8532be14f893a5986e8022487bb76f138953a7f60314c06715852441ef65e6dc91e29d220152fa70603511febe0987ec0239cb7dd12d6368a494e18e46ddd9f2133f469f31557d11ad84888e3645e12a60f1ea5986b2a1e159de56cd304153daffa24543e81d6df461c1d5a7e90f76647342417cac048c8c5f7455b3498e25788d2c7694dfee4b714078a829fc14ea27d3ed0a3418f926faebe081dab307b4f99ee2486943e2fc9c20e048ccc27b5b51e86a354107d85b2b44946ef80c64648e7d5d45809deb1a4f9e0e1cd5b76713af70d08a46cf05ac04c4170bba559473ea3e21c57efae754658fd0640e6ecb24fc7a48a01717d0b2346d50a4bcc0fcb6c6bb4b63a719dccc32c3188fb38104b867cd147593cd32ecbb69950127ad6f9df60f3f7214f0c1bc78cd126ee2103d1c66a5ca54d5c399777d38274f608eb4262bd6554b25da8acd2ec8bd362b91c2ba665c47a73403deebc7577d95d17f6bf3dc40e33ba2af838638dcf6d7ecf3458aaf1af8d86be53a1268e3a2d3767fd39093d82640ab2080a99e7b1b04c7c45b11f130e354400c80130928950f27024e6608cb07e004ecf21f7f99228aa1d39bf44ec216c90d5f6dd97829f068dd8f8a1a10c6f74a43e97c1a0526b6acd2d6a7c057fe35d53f1bfdb44182aa433b22d79ad8a75d3f4bf50a4745eb5a4225f2abd5090a300248e3ed0650de06740ec440496267cc05ac7df06fdfe5e92e2b5287d54174cf5187bcb33e67d922d385a595e17f0b6a6488928a43f05c6f579ac5301d00ff68c4559727cf11a2b56ae00cf7e17c414e164889140accc465c8ea23c08abf3445a5a45e59349c067d49660a488f4fa90a5c9fc7b9674a4789b60188ee8f7d2fe8d94ec76ffa9bcdf148c742ea222c81b81ad9cedfba729e0591917ff7bfa2cd93a411c893f94e235c994ba5ae4d3520777295a579a1c09db113456cf368c6fab55166b78ee3794dffffcae33776e3e1176ab11abd523b49ffa841dcf5ee9d530873f648760879798c69f6510c104d7464daa52d677ef4ca2ac44f400cff6ec5b19158352c0533367d34f52da79573eb5299563be089273116d3367a2f9221dc9d1d1d74c91ba47444e12a9fb716529eba5fff62c6f2cc65f5f88afcc945624f85b1238e4e9f18175829bd3f392a5b32c4e7bf4ceb8d5ef216b3d9ab21f46bb4f1552e193b58682d692289e6da87460a97fccf812a9c07b49620da7ac2b04c541e9e19c2b464c0ef58b1636126d48eaca20dda0073d8b7ae3ce358f45f40d7f6e68dde63365ce2a9ed6610459623960818b97e9c95c2b20b69882b1e6004997cc7bb86649130f93e238282b160cfb9aa3657f0fa4dc7b06015ece3007de681ecb9734ffb3d2645ee1d6618257d99b6b393b3a476f20483848e443e5172fd5130d8b4d73540609799d951c68da615ca66a5b67e4a549bae65b11f189121f6678ab45ff8b41568a317a9f452b09430692916e106898ede426b2117b7d2501f048863f96bed17188566b9212b6287a1eccf8ed1a63dd5948a72597e2c691442249b351dcbac433c5b6566158819f4945c27ca9dd31e891b3e514b947511bc2bfc056c1fa982bf82753a882bd6705c31bbb6b89730a416b4b13036e376938e37c3f770f79501cf958b7d191ce050d5db92160d2f06f27df3115862c789e0c05557ebadcd17d7d121d93f54df92739dafada3c967733fdbdb8882f4251b6130edffa283751f60e4d985b1b8ed3fcd32aa6839f783322fa5bfc44b8faee60fe520575a57a58c48704037e01dc9f9dc9eb81dd8a36e6a40d7010e58ad1ecec9f66d007fc80c7e0d3dcdd9ae557c02400815d77ef5757ab61640a292bffbd158af318371ad0d297c920847ced51778b3f29d8379531926d36c1bd2a02af8712861f667ae50d706d24318caf7a75eabd40e883d77349b49ac356a7d7238ac9fa7bc2670e944d812ac3a3d8f834276242c280ecab6655b8270757bf86b331318afb5ce814167ec257f432ecc1969f412bfcde96a98df3044708f2e979230e2c812453180837b2b38425ad6208a7afcae6478066fffd87d4e3263d8e67f602f4a5523e9f3bc41e32a27a4accad13467963235cf9a91a05d759339ac87b29501d19f1e1a914ec7d5f6788c9859a1a19fe48c337b286003d642120b324b916848e859d13824e58439d2fb81d04f21db2fc02f89a01746d7c8f6bbd4fe3dff8b488c802699f290f23560a7dc6c3ebff8c8114ee265e5172541842b81158cc6130378fbb143de6c2e2a4e674403a5ac01f186173e2c6d0d54cf215b6df17e8c16bfefddca6612e1d72d5f5f04e88217669b6d33e8154f87da4b61a17a8ca8a0aafa48743b3c972ebfc14899890ad2a18c5e75a041a28e00131e1a0b13cd911597865d26f1e284afa6aadc87bcea83fdb7b90cbca691695b214e49c15d89276c1ee00e6a80741bcc1f81f00dc4d9036e9b369fa686efa0bc53729740dc65ed01b4bb0b246a09b70b99456f4538c519a0df7552b76aa030ae7dced8647b9de0cc793b70b4d19b56c63d2bbe2343d46190610abc85f98eebfe4cf769bed70a534346e691010d79429abbf729db855aafe6dcbb05cf2a9ec3fa242465165790a7be6eeed7f66f49b04ccca189f46bc8f5aa901ce017a3cf1c81da887b1578425c42cac0bb7c844eac2509c2dc5f29479fd40828fff7e3a1d5085741d365afb77b320347f40c656b86ec84f3c7f3a9b24b7dc823be3b11cea5ea47e694a4b56baafda9fd76d7a6a940ded719e06d13dec53864335a5bbf3f59b93ae04711f22a5ccc9a5760b8e3278abe2333ea740eed1c79d2431c36794b3a712791f27579bd343671b3e645650821189888f1da6f987f46f5d77ac91dc492963bddc5ee63c0575a83978797f8eb33abc9b601234a9c285bb9279ff8cb418b2f337b5e120c2a43c1cfbb5fe06ffd4b2dd1672f0e6b91db87aaed18d6c0981af2f8218a63881d1d34f8be4a13e9cbed9bd01aace1aeb132595e436b0b6197b9c4231ec39526a76a6de38866b15fd8a490bbb"}) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000003ac0), &(0x7f0000003b00)=0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003b40), r7) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003c80)={@map=r2, 0x2b, 0x1, 0x10, &(0x7f0000003b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000003bc0)=[0x0, 0x0], &(0x7f0000003c00)=[0x0, 0x0], &(0x7f0000003c40)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003cc0)={@map=r4, r0, 0x24, 0x0, 0xffffffffffffffff, @void, @value=r0, @void, @void, r9}, 0x20) kernel console output (not intermixed with test programs): ueue, screwing up backlog [ 938.359471][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.008680][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.247262][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.467010][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.468902][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.048101][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.977547][T12316] bond10 (unregistering): (slave ip6gretap1): Releasing active interface [ 942.088178][T12316] batman_adv: batadv0: Interface deactivated: macsec2 [ 942.095135][T12316] erspan0 (unregistering): left allmulticast mode [ 942.102253][T12316] erspan0 (unregistering): left promiscuous mode [ 942.114288][T12316] batman_adv: batadv0: Removing interface: macsec2 [ 942.165787][T12316] bond2 (unregistering): (slave gretap1): Releasing active interface [ 942.346985][T12316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.357731][T12316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.371194][T12316] bond0 (unregistering): Released all slaves [ 942.384838][T12316] bond1 (unregistering): (slave veth3): Releasing active interface [ 942.395062][T12316] bond1 (unregistering): Released all slaves [ 942.418097][T12316] bond2 (unregistering): Released all slaves [ 942.435164][T12316] bond3 (unregistering): Released all slaves [ 942.454773][T12316] bond4 (unregistering): (slave lo): Releasing backup interface [ 942.468076][T12316] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 942.483018][T12316] bond4 (unregistering): Released all slaves [ 942.502707][T12316] bond5 (unregistering): Released all slaves [ 942.518667][T12316] bond6 (unregistering): Released all slaves [ 942.535459][T12316] bond7 (unregistering): Released all slaves [ 942.561445][T12316] bond8 (unregistering): Released all slaves [ 942.577444][T12316] bond9 (unregistering): Released all slaves [ 942.593106][T12316] bond10 (unregistering): Released all slaves [ 942.621115][T12316] bond11 (unregistering): (slave wireguard0): Releasing backup interface [ 942.629694][T12316] wireguard0: left promiscuous mode [ 942.637848][T12316] bond11 (unregistering): (slave wireguard1): Releasing backup interface [ 942.650323][T12316] bond11 (unregistering): Released all slaves [ 942.874695][T12316] tipc: Left network mode [ 943.166922][ T5736] net_ratelimit: 9 callbacks suppressed [ 943.166944][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.181403][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.318324][T12316] IPVS: stopping backup sync thread 22869 ... [ 943.926436][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.978947][T19323] Bluetooth: hci0: command 0x0c1a tx timeout [ 943.983465][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.207140][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.242073][T12316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.250593][T12316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.289903][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.446871][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.039166][T12316] IPVS: stop unused estimator thread 0... [ 945.067446][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.136628][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.248219][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.366843][ T5750] net_ratelimit: 9 callbacks suppressed [ 948.366860][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.380705][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.447269][T12316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.927324][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.407060][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.487369][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.546683][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.566800][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.366882][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.446450][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.413902][ T7233] net_ratelimit: 8 callbacks suppressed [ 953.413919][ T7233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.566543][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.906539][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.946661][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.608007][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.687349][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.007309][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.046575][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.328065][ T7233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.336965][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.247063][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 958.766380][T29094] net_ratelimit: 10 callbacks suppressed [ 958.766403][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.416446][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.447794][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.496837][T26436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.806527][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.810890][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.527079][T12316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.556474][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.847554][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.087065][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.826823][T12315] net_ratelimit: 7 callbacks suppressed [ 963.826844][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.856486][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.967527][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.978250][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.988608][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.999488][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.926800][ T7233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.937440][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.966584][T12316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.007140][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.166404][ T5736] net_ratelimit: 13 callbacks suppressed [ 969.166427][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.337625][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.396347][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.206445][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.466325][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.506677][T12316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.687171][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.166624][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.247389][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.566522][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.330561][T31139] bond7: option fail_over_mac: invalid value (127) [ 973.373860][T31139] bond7 (unregistering): Released all slaves [ 973.433493][T31152] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7124'. [ 973.594423][T31138] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.630304][T31138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.685255][T31138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.695853][T31138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.711476][T31138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 973.722296][T31138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 973.743138][T31138] veth1_vlan: left promiscuous mode [ 973.750688][T31138] veth0_vlan: left promiscuous mode [ 973.758734][T31138] veth0_vlan: entered promiscuous mode [ 973.769412][T31138] veth1_vlan: entered promiscuous mode [ 973.785259][T31138] veth1_macvtap: left promiscuous mode [ 973.792729][T31138] veth0_macvtap: left promiscuous mode [ 973.800153][T31138] veth0_macvtap: entered promiscuous mode [ 973.809367][T31138] veth1_macvtap: entered promiscuous mode [ 973.823398][T31138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 973.832724][T31138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 973.841927][T31138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 973.851254][T31138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 973.864706][T31138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 973.876677][T31138] bond2: left promiscuous mode [ 973.881965][T31138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 973.893750][T31138] bond3: left promiscuous mode [ 973.898746][T31138] bridge1: left promiscuous mode [ 973.905141][T31138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 973.920855][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.928181][T12313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.092670][T11966] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.137366][T11966] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.182710][T11966] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.203522][T11966] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.262524][T31167] net_ratelimit: 38 callbacks suppressed [ 974.262546][T31167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.276882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.327760][T31167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.367322][T29094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.462710][T31169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.471259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.508679][T31169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.527259][T31169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.538527][ T7233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.566104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.866303][T31188] syzkaller1: entered promiscuous mode [ 974.874533][T31188] syzkaller1: entered allmulticast mode [ 974.953415][T29094] IPVS: starting estimator thread 0... [ 974.961182][T31193] IPVS: ip_vs_edit_dest(): server weight less than zero [ 975.046521][T31198] IPVS: using max 26 ests per chain, 62400 per kthread [ 975.090434][ T7233] IPVS: starting estimator thread 0... [ 975.169621][T31207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7138'. [ 975.216181][T31205] IPVS: using max 27 ests per chain, 64800 per kthread [ 975.462739][T31207] bond2: left promiscuous mode [ 975.479598][T31207] ip6gre1: left promiscuous mode [ 975.704447][T31223] netlink: 'syz.4.7142': attribute type 8 has an invalid length. [ 975.726872][T31223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7142'. [ 975.775702][T31223] veth1_to_team: entered promiscuous mode [ 975.803240][T31223] gretap0: entered promiscuous mode [ 975.815470][T31223] veth1_to_team: left promiscuous mode [ 975.825357][T31223] gretap0: left promiscuous mode [ 975.904066][T31226] vlan0: left promiscuous mode [ 975.942148][T31226] team0: left promiscuous mode [ 975.969696][T31226] bridge5: port 3(vlan0) entered disabled state [ 976.051652][T31237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7148'. [ 976.068622][T31239] netlink: 'syz.2.7144': attribute type 4 has an invalid length. [ 976.120935][T31226] netlink: 'syz.2.7144': attribute type 4 has an invalid length. [ 976.138980][T31237] bond1: option mode: unable to set because the bond device has slaves [ 976.177339][T31245] tipc: Enabled bearer , priority 0 [ 976.217885][T31234] syzkaller0: entered promiscuous mode [ 976.224735][T31234] syzkaller0: entered allmulticast mode [ 976.336882][T31238] tipc: Resetting bearer [ 976.429680][T31233] tipc: Resetting bearer [ 976.531457][T31233] tipc: Disabling bearer [ 976.655873][T31264] netlink: 'syz.5.7154': attribute type 4 has an invalid length. [ 977.768855][T31291] netlink: 'syz.1.7159': attribute type 8 has an invalid length. [ 977.778375][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7159'. [ 978.247135][T31291] veth1_to_team: entered promiscuous mode [ 978.257911][T31291] gretap0: entered promiscuous mode [ 978.314052][T31291] veth1_to_team: left promiscuous mode [ 978.354811][T31291] gretap0: left promiscuous mode [ 978.390503][T31299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7161'. [ 978.441569][T31299] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 978.486574][T31299] bond1: (slave lo): Enslaving as an active interface with an up link [ 978.838782][T31326] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 979.075573][T31337] netlink: 'syz.1.7172': attribute type 1 has an invalid length. [ 979.100940][T31338] netlink: 'syz.1.7172': attribute type 1 has an invalid length. [ 979.423087][T31357] netlink: 308 bytes leftover after parsing attributes in process `syz.2.7174'. [ 979.445540][T31357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7174'. [ 979.467196][ T6631] net_ratelimit: 22 callbacks suppressed [ 979.467221][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.482835][T31357] netlink: 'syz.2.7174': attribute type 30 has an invalid length. [ 979.502116][T31357] netlink: 'syz.2.7174': attribute type 29 has an invalid length. [ 979.520954][T31357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7174'. [ 980.485108][T31337] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 980.488498][T31338] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 980.621271][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.736459][T31372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7176'. [ 980.755707][T31372] bond1: option mode: unable to set because the bond device has slaves [ 980.786424][T31372] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 980.934458][T31386] FAULT_INJECTION: forcing a failure. [ 980.934458][T31386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.981058][T31386] CPU: 0 UID: 0 PID: 31386 Comm: syz.3.7182 Not tainted syzkaller #0 PREEMPT(full) [ 980.981090][T31386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 980.981103][T31386] Call Trace: [ 980.981113][T31386] [ 980.981122][T31386] dump_stack_lvl+0xe8/0x150 [ 980.981155][T31386] should_fail_ex+0x412/0x560 [ 980.981189][T31386] _copy_to_user+0x31/0xb0 [ 980.981224][T31386] simple_read_from_buffer+0xe1/0x170 [ 980.981258][T31386] proc_fail_nth_read+0x1bb/0x230 [ 980.981292][T31386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.981325][T31386] ? rw_verify_area+0x2a6/0x4d0 [ 980.981355][T31386] ? tun_chr_write_iter+0x18a/0x200 [ 980.981379][T31386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.981409][T31386] vfs_read+0x20c/0xa70 [ 980.981446][T31386] ? __pfx___mutex_lock+0x10/0x10 [ 980.981476][T31386] ? __pfx_vfs_read+0x10/0x10 [ 980.981509][T31386] ? __fget_files+0x2a/0x420 [ 980.981540][T31386] ? __fget_files+0x3a0/0x420 [ 980.981566][T31386] ? __fget_files+0x2a/0x420 [ 980.981603][T31386] ksys_read+0x150/0x270 [ 980.981637][T31386] ? __pfx_ksys_read+0x10/0x10 [ 980.981677][T31386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.981702][T31386] do_syscall_64+0x15f/0xf80 [ 980.981728][T31386] ? trace_irq_disable+0x3b/0x140 [ 980.981760][T31386] ? clear_bhb_loop+0x40/0x90 [ 980.981788][T31386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.981810][T31386] RIP: 0033:0x7f0d5bd5d60e [ 980.981831][T31386] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 980.981855][T31386] RSP: 002b:00007f0d5ccc8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 980.981878][T31386] RAX: ffffffffffffffda RBX: 00007f0d5ccc96c0 RCX: 00007f0d5bd5d60e [ 980.981894][T31386] RDX: 000000000000000f RSI: 00007f0d5ccc90a0 RDI: 0000000000000005 [ 980.981908][T31386] RBP: 00007f0d5ccc9090 R08: 0000000000000000 R09: 0000000000000000 [ 980.981922][T31386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.981935][T31386] R13: 00007f0d5c016128 R14: 00007f0d5c016090 R15: 00007ffdee4b0658 [ 980.981972][T31386] [ 981.362871][T31396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7186'. [ 981.569293][T31406] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 981.669025][T31416] netlink: 'syz.5.7192': attribute type 4 has an invalid length. [ 981.979876][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.207529][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.218373][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.902512][T31423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7194'. [ 982.912353][T31423] bond1: option mode: unable to set because the bond device is up [ 982.930435][T31423] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 983.007623][T31423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 983.048157][T31423] bond1: (slave lo): Enslaving as an active interface with an up link [ 983.072997][T31423] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 983.096659][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.401919][T31455] netlink: 'syz.1.7207': attribute type 4 has an invalid length. [ 983.709881][T31469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7214'. [ 983.719188][T31469] bond1: option mode: unable to set because the bond device has slaves [ 983.742038][T31469] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 983.786550][T31476] netlink: 'syz.3.7211': attribute type 1 has an invalid length. [ 983.845512][T31476] 8021q: adding VLAN 0 to HW filter on device bond9 [ 984.083645][T31494] syzkaller1: entered promiscuous mode [ 984.113832][T31494] syzkaller1: entered allmulticast mode [ 984.149622][T31500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7217'. [ 984.411366][T31508] netlink: 'syz.2.7222': attribute type 4 has an invalid length. [ 984.710629][T31522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7228'. [ 984.720187][T31522] bond1: option mode: unable to set because the bond device has slaves [ 984.734397][T31522] net_ratelimit: 1 callbacks suppressed [ 984.734417][T31522] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 985.251089][T31550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7231'. [ 985.321353][T31553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7231'. [ 985.349364][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.373793][T31551] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 985.383610][T31551] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 985.394085][T31551] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 985.605273][T31565] netlink: 'syz.3.7239': attribute type 1 has an invalid length. [ 985.638382][T31565] bond10: entered promiscuous mode [ 985.645495][T31565] 8021q: adding VLAN 0 to HW filter on device bond10 [ 985.901987][T31578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7242'. [ 986.079756][T31583] netlink: 'syz.2.7244': attribute type 4 has an invalid length. [ 986.396349][T31601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7250'. [ 986.486678][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.092043][T31638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7263'. [ 987.420296][T31655] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7268'. [ 987.505681][T31665] netlink: 'syz.3.7269': attribute type 4 has an invalid length. [ 987.626520][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.655511][T31670] SET target dimension over the limit! [ 987.971719][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.980585][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.049437][T31646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 988.575116][T31716] netlink: 'syz.2.7285': attribute type 4 has an invalid length. [ 988.692318][T31711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7286'. [ 988.771071][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.345229][T31760] netlink: 'syz.5.7301': attribute type 4 has an invalid length. [ 989.363267][T31761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7300'. [ 989.464442][T31771] netlink: 'syz.5.7303': attribute type 8 has an invalid length. [ 989.475666][T31771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7303'. [ 989.492155][T31771] veth1_to_team: entered promiscuous mode [ 989.517963][T31771] gretap0: entered promiscuous mode [ 989.527725][T31771] veth1_to_team: left promiscuous mode [ 989.536584][T31771] gretap0: left promiscuous mode [ 989.963264][T31784] netlink: 'syz.2.7308': attribute type 1 has an invalid length. [ 989.980204][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.007022][T31784] nbd: error processing sock list [ 990.674679][T31834] __nla_validate_parse: 1 callbacks suppressed [ 990.674701][T31834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7320'. [ 991.116929][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.458918][T31878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7331'. [ 991.517283][T31882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7333'. [ 991.604192][T31888] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7334'. [ 992.271871][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.614294][T31948] lo speed is unknown, defaulting to 1000 [ 992.627666][T31943] netlink: 'syz.1.7347': attribute type 2 has an invalid length. [ 992.645426][T31943] netlink: 'syz.1.7347': attribute type 2 has an invalid length. [ 992.744505][T31953] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 992.820483][T31954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7349'. [ 992.916513][T31960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7350'. [ 992.973757][T31961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7350'. [ 992.997464][T31961] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7350'. [ 993.225293][T31968] netlink: 'syz.4.7352': attribute type 39 has an invalid length. [ 993.397970][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.609031][T31980] tipc: Started in network mode [ 993.614872][T31980] tipc: Node identity 3e7d9512c684, cluster identity 4711 [ 993.624648][T31980] tipc: Enabled bearer , priority 0 [ 993.638466][T31982] lo speed is unknown, defaulting to 1000 [ 993.658099][T31980] syzkaller0: entered promiscuous mode [ 993.693074][T31980] syzkaller0: entered allmulticast mode [ 993.727972][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.737440][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.112123][T32006] netlink: 'syz.2.7359': attribute type 5 has an invalid length. [ 994.304171][T32013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7361'. [ 994.416785][T31979] tipc: Resetting bearer [ 994.532507][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.640844][T31979] tipc: Disabling bearer [ 994.751856][T32032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7363'. [ 994.835134][T32032] bond4: (slave 26±ÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 994.882790][T32032] bond4: (slave 26±ÿ): Enslaving as an active interface with an up link [ 994.906743][T32032] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 995.649859][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.944814][T32059] netlink: 'syz.2.7369': attribute type 1 has an invalid length. [ 995.984369][T32059] netlink: 'syz.2.7369': attribute type 4 has an invalid length. [ 996.022424][T32059] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7369'. [ 996.059907][T32069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7368'. [ 996.160608][T32072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7371'. [ 996.442679][T32072] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 996.536347][T32079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 996.778147][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.828783][T32093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7373'. [ 996.873375][ T5627] Bluetooth: hci3: link tx timeout [ 996.879798][ T5627] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 997.771641][T32127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7381'. [ 997.795152][T32127] bond4: option mode: unable to set because the bond device has slaves [ 997.827119][T32127] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 997.916217][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.520170][T32147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7386'. [ 998.810096][ T5627] Bluetooth: hci3: link tx timeout [ 998.815333][ T5627] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 998.928991][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 998.937038][T32175] sctp: [Deprecated]: syz.3.7393 (pid 32175) Use of int in maxseg socket option. [ 998.937038][T32175] Use struct sctp_assoc_value instead [ 999.056222][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.489158][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.497383][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.761714][T32201] syzkaller0: entered promiscuous mode [ 999.779735][T32201] syzkaller0: entered allmulticast mode [ 1000.187267][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.275494][T32218] tipc: Enabling of bearer rejected, failed to enable media [ 1000.285863][T32220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7403'. [ 1000.329852][T32218] x_tables: duplicate underflow at hook 4 [ 1000.396621][T32227] bridge2: entered promiscuous mode [ 1000.427668][T32227] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7407'. [ 1000.934387][T32244] tun0: tun_chr_ioctl cmd 1074025672 [ 1000.946067][T32244] tun0: ignored: set checksum disabled [ 1001.111646][T32251] lo speed is unknown, defaulting to 1000 [ 1001.296181][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.405399][T32264] netlink: 'syz.3.7417': attribute type 10 has an invalid length. [ 1001.449342][T32264] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.7417'. [ 1001.508244][T32271] netlink: 'syz.2.7420': attribute type 4 has an invalid length. [ 1001.578015][T32268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7419'. [ 1001.874080][T32289] sctp: [Deprecated]: syz.1.7424 (pid 32289) Use of int in maxseg socket option. [ 1001.874080][T32289] Use struct sctp_assoc_value instead [ 1001.923353][T32287] syzkaller0: entered promiscuous mode [ 1001.940187][T32287] syzkaller0: entered allmulticast mode [ 1001.961171][T32287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7424'. [ 1002.216520][T32301] netlink: 604 bytes leftover after parsing attributes in process `syz.3.7426'. [ 1002.426771][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.580425][T32306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7427'. [ 1002.598323][T32306] bond1: option mode: unable to set because the bond device has slaves [ 1002.688267][T32304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7428'. [ 1002.710835][T32306] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1003.268747][T32334] netlink: 'syz.5.7431': attribute type 1 has an invalid length. [ 1003.352139][T32328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7434'. [ 1003.560980][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.887669][T32354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7441'. [ 1003.916228][T32354] bond1: option mode: unable to set because the bond device has slaves [ 1004.314154][T32354] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1004.394682][T32357] lo speed is unknown, defaulting to 1000 [ 1004.490240][T32371] netlink: 'syz.1.7445': attribute type 29 has an invalid length. [ 1004.518619][T32371] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7445'. [ 1004.665436][T32378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7446'. [ 1004.697865][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.166854][T32403] syz.1.7453: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1005.196075][T32403] CPU: 1 UID: 0 PID: 32403 Comm: syz.1.7453 Not tainted syzkaller #0 PREEMPT(full) [ 1005.196106][T32403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1005.196121][T32403] Call Trace: [ 1005.196130][T32403] [ 1005.196140][T32403] dump_stack_lvl+0xe8/0x150 [ 1005.196173][T32403] warn_alloc+0x249/0x340 [ 1005.196211][T32403] ? stack_trace_save+0xa9/0x100 [ 1005.196246][T32403] ? __pfx_warn_alloc+0x10/0x10 [ 1005.196286][T32403] ? kasan_save_track+0x4f/0x80 [ 1005.196313][T32403] ? kasan_save_track+0x3e/0x80 [ 1005.196341][T32403] ? __kasan_kmalloc+0x93/0xb0 [ 1005.196369][T32403] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1005.196399][T32403] ? xskq_create+0x56/0x170 [ 1005.196421][T32403] ? xsk_setsockopt+0x54c/0x990 [ 1005.196453][T32403] ? do_sock_setsockopt+0x17c/0x1b0 [ 1005.196478][T32403] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1005.196503][T32403] ? do_syscall_64+0x15f/0xf80 [ 1005.196534][T32403] __vmalloc_node_range_noprof+0x132/0x1750 [ 1005.196611][T32403] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1005.196651][T32403] ? __kasan_kmalloc+0x93/0xb0 [ 1005.196689][T32403] vmalloc_user_noprof+0xad/0xe0 [ 1005.196719][T32403] ? xskq_create+0xbf/0x170 [ 1005.196744][T32403] xskq_create+0xbf/0x170 [ 1005.196770][T32403] xsk_init_queue+0x8a/0xe0 [ 1005.196796][T32403] xsk_setsockopt+0x54c/0x990 [ 1005.196834][T32403] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1005.196868][T32403] ? __pfx_aa_sk_perm+0x10/0x10 [ 1005.196900][T32403] ? aa_sock_opt_perm+0xff/0x1a0 [ 1005.196932][T32403] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1005.196962][T32403] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1005.196998][T32403] do_sock_setsockopt+0x17c/0x1b0 [ 1005.197032][T32403] __x64_sys_setsockopt+0x13d/0x1b0 [ 1005.197064][T32403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.197088][T32403] do_syscall_64+0x15f/0xf80 [ 1005.197113][T32403] ? trace_irq_disable+0x3b/0x140 [ 1005.197145][T32403] ? clear_bhb_loop+0x40/0x90 [ 1005.197173][T32403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.197194][T32403] RIP: 0033:0x7f1e1e39cdd9 [ 1005.197218][T32403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.197237][T32403] RSP: 002b:00007f1e1f2ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1005.197261][T32403] RAX: ffffffffffffffda RBX: 00007f1e1e616180 RCX: 00007f1e1e39cdd9 [ 1005.197278][T32403] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 1005.197292][T32403] RBP: 00007f1e1e432d69 R08: 0000000000000004 R09: 0000000000000000 [ 1005.197306][T32403] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.197320][T32403] R13: 00007f1e1e616218 R14: 00007f1e1e616180 R15: 00007ffcb51297c8 [ 1005.197358][T32403] [ 1005.198599][T32403] Mem-Info: [ 1005.264366][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.366894][T32403] active_anon:6008 inactive_anon:0 isolated_anon:0 [ 1005.366894][T32403] active_file:3218 inactive_file:40702 isolated_file:0 [ 1005.366894][T32403] unevictable:768 dirty:364 writeback:0 [ 1005.366894][T32403] slab_reclaimable:18043 slab_unreclaimable:261674 [ 1005.366894][T32403] mapped:29844 shmem:1295 pagetables:1456 [ 1005.366894][T32403] sec_pagetables:0 bounce:0 [ 1005.366894][T32403] kernel_misc_reclaimable:0 [ 1005.366894][T32403] free:1131690 free_pcp:19159 free_cma:0 [ 1005.532351][T32403] Node 0 active_anon:24132kB inactive_anon:0kB active_file:12872kB inactive_file:162604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53840kB dirty:1456kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17304kB pagetables:5680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1005.574932][T32403] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:65536kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1005.636195][T32403] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.702203][T32415] netlink: 'syz.3.7455': attribute type 21 has an invalid length. [ 1005.716728][T32403] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1005.727019][T32403] Node 0 DMA32 free:1003080kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24232kB inactive_anon:0kB active_file:12872kB inactive_file:162604kB unevictable:1536kB writepending:1456kB zspages:0kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:40188kB local_pcp:20948kB free_cma:0kB [ 1005.784789][T32403] lowmem_reserve[]: 0 0 0 0 0 [ 1005.790128][T32403] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:4kB free_cma:0kB [ 1005.822437][T32403] lowmem_reserve[]: 0 0 0 0 0 [ 1005.829434][T32403] Node 1 Normal free:3512212kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:35156kB local_pcp:16376kB free_cma:0kB [ 1005.866876][T32403] lowmem_reserve[]: 0 0 0 0 0 [ 1005.871813][T32403] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 1005.885383][T32403] Node 0 DMA32: 5239*4kB (UME) 7775*8kB (UM) 4651*16kB (UME) 1001*32kB (UME) 302*64kB (UME) 616*128kB (UME) 679*256kB (UME) 272*512kB (UME) 204*1024kB (UME) 94*2048kB (U) 0*4096kB = 1002276kB [ 1005.911028][T32403] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1005.925136][T32403] Node 1 Normal: 2*4kB (U) 12*8kB (UM) 14*16kB (UM) 12*32kB (UM) 6*64kB (UM) 11*128kB (UM) 10*256kB (UM) 8*512kB (UM) 5*1024kB (UM) 4*2048kB (U) 852*4096kB (UM) = 3512264kB [ 1005.947171][T32403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1005.958065][T32403] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 1005.971511][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.983251][T32403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.002306][T32403] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1006.013639][T32403] 45278 total pagecache pages [ 1006.035469][T32403] 0 pages in swap cache [ 1006.040953][T32403] Free swap = 124996kB [ 1006.055696][T32403] Total swap = 124996kB [ 1006.130833][T32403] 2097051 pages RAM [ 1006.153977][T32403] 0 pages HighMem/MovableOnly [ 1006.181782][T32403] 427099 pages reserved [ 1006.211940][T32403] 0 pages cma reserved [ 1006.224277][T32421] bond4: option mode: unable to set because the bond device has slaves [ 1006.233695][T32425] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1006.747904][T32443] __nla_validate_parse: 3 callbacks suppressed [ 1006.747926][T32443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7461'. [ 1006.985080][T32452] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1007.121100][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.338283][T32471] netlink: 'syz.4.7471': attribute type 8 has an invalid length. [ 1007.347036][T32471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7471'. [ 1007.471882][T32469] xt_hashlimit: size too large, truncated to 1048576 [ 1007.774421][T32488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7474'. [ 1007.912063][T32494] netlink: 'syz.4.7475': attribute type 4 has an invalid length. [ 1008.033445][T32496] netlink: 'syz.4.7476': attribute type 1 has an invalid length. [ 1008.236524][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.308232][T32515] SET target dimension over the limit! [ 1008.509941][T32522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7485'. [ 1009.088329][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.378762][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.630311][T12315] tipc: Subscription rejected, illegal request [ 1009.669766][T32579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7503'. [ 1010.517236][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.685329][T32635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7521'. [ 1011.008894][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.238038][T32670] netlink: 'syz.1.7531': attribute type 8 has an invalid length. [ 1011.256116][T32670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7531'. [ 1011.441350][T32670] veth1_to_team: entered promiscuous mode [ 1011.451495][T32670] gretap0: entered promiscuous mode [ 1011.464733][T32670] veth1_to_team: left promiscuous mode [ 1011.473487][T32670] gretap0: left promiscuous mode [ 1011.641409][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.799943][T32683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7536'. [ 1012.317116][T32689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7537'. [ 1012.612474][T32714] sctp: [Deprecated]: syz.2.7542 (pid 32714) Use of int in max_burst socket option deprecated. [ 1012.612474][T32714] Use struct sctp_assoc_value instead [ 1012.751654][T32719] FAULT_INJECTION: forcing a failure. [ 1012.751654][T32719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.767729][T32719] CPU: 1 UID: 0 PID: 32719 Comm: syz.3.7545 Not tainted syzkaller #0 PREEMPT(full) [ 1012.767760][T32719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1012.767774][T32719] Call Trace: [ 1012.767783][T32719] [ 1012.767792][T32719] dump_stack_lvl+0xe8/0x150 [ 1012.767824][T32719] should_fail_ex+0x412/0x560 [ 1012.767862][T32719] _copy_to_user+0x31/0xb0 [ 1012.767897][T32719] mptcp_getsockopt+0x14ca/0x1ed0 [ 1012.767935][T32719] ? process_measurement+0x195e/0x1c80 [ 1012.767970][T32719] ? process_measurement+0x2d1/0x1c80 [ 1012.768008][T32719] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1012.768051][T32719] ? __pfx_process_measurement+0x10/0x10 [ 1012.768086][T32719] ? tomoyo_check_open_permission+0x38e/0x470 [ 1012.768118][T32719] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.768150][T32719] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.768177][T32719] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.768211][T32719] ? unwind_next_frame+0xa6/0x2550 [ 1012.768248][T32719] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.768288][T32719] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.768309][T32719] ? pool_message+0x370/0xbb0 [ 1012.768349][T32719] ? aa_file_perm+0x192/0x15e0 [ 1012.768386][T32719] ? aa_label_sk_perm+0x532/0x6e0 [ 1012.768421][T32719] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1012.768451][T32719] ? _parse_integer_limit+0x1ae/0x1f0 [ 1012.768484][T32719] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.768536][T32719] ? __might_fault+0xaf/0x130 [ 1012.768565][T32719] ? __might_fault+0xaf/0x130 [ 1012.768609][T32719] ? sock_common_getsockopt+0x2d/0xb0 [ 1012.768633][T32719] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1012.768656][T32719] do_sock_getsockopt+0x51d/0x7e0 [ 1012.768688][T32719] ? __pfx_vfs_write+0x10/0x10 [ 1012.768729][T32719] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1012.768757][T32719] ? do_sys_openat2+0x14c/0x200 [ 1012.768780][T32719] ? kmem_cache_free+0x182/0x650 [ 1012.768809][T32719] ? fd_install+0x94/0x3d0 [ 1012.768850][T32719] ? ksys_write+0x1fc/0x270 [ 1012.768888][T32719] __x64_sys_getsockopt+0x1a4/0x240 [ 1012.768923][T32719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.768947][T32719] do_syscall_64+0x15f/0xf80 [ 1012.768976][T32719] ? clear_bhb_loop+0x40/0x90 [ 1012.769003][T32719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.769025][T32719] RIP: 0033:0x7f0d5bd9cdd9 [ 1012.769045][T32719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.769066][T32719] RSP: 002b:00007f0d5ccea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1012.769090][T32719] RAX: ffffffffffffffda RBX: 00007f0d5c015fa0 RCX: 00007f0d5bd9cdd9 [ 1012.769107][T32719] RDX: 0000000000000001 RSI: 000000000000011c RDI: 0000000000000003 [ 1012.769121][T32719] RBP: 00007f0d5ccea090 R08: 0000200000001000 R09: 0000000000000000 [ 1012.769135][T32719] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.769149][T32719] R13: 00007f0d5c016038 R14: 00007f0d5c015fa0 R15: 00007ffdee4b0658 [ 1012.769184][T32719] [ 1012.811003][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.136351][T32728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7548'. [ 1013.164516][T32728] bond4: option mode: unable to set because the bond device has slaves [ 1013.207181][T32729] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1013.429374][T32745] netlink: 'syz.2.7554': attribute type 4 has an invalid length. [ 1013.469094][T32738] bond2: left allmulticast mode [ 1013.510140][T32738] mac80211_hwsim hwsim234 wlan0: entered promiscuous mode [ 1013.628129][T32747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7555'. [ 1014.178117][T32759] FAULT_INJECTION: forcing a failure. [ 1014.178117][T32759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1014.215134][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.223543][T32759] CPU: 1 UID: 0 PID: 32759 Comm: syz.5.7558 Not tainted syzkaller #0 PREEMPT(full) [ 1014.223571][T32759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.223585][T32759] Call Trace: [ 1014.223594][T32759] [ 1014.223604][T32759] dump_stack_lvl+0xe8/0x150 [ 1014.223644][T32759] should_fail_ex+0x412/0x560 [ 1014.223677][T32759] prepare_alloc_pages+0x22a/0x650 [ 1014.223721][T32759] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1014.223760][T32759] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1014.223796][T32759] ? __pfx_policy_nodemask+0x10/0x10 [ 1014.223826][T32759] ? __schedule+0x17ca/0x5680 [ 1014.223845][T32759] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.223870][T32759] alloc_pages_mpol+0x235/0x490 [ 1014.223904][T32759] folio_alloc_mpol_noprof+0x39/0x160 [ 1014.223935][T32759] shmem_alloc_and_add_folio+0x442/0xf80 [ 1014.223959][T32759] ? filemap_get_entry+0xcd/0x3f0 [ 1014.223992][T32759] ? __pfx_filemap_get_entry+0x10/0x10 [ 1014.224015][T32759] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1014.224041][T32759] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 1014.224069][T32759] shmem_get_folio_gfp+0x5a9/0x1670 [ 1014.224106][T32759] shmem_fault+0x179/0x390 [ 1014.224137][T32759] __do_fault+0x138/0x2a0 [ 1014.224165][T32759] do_pte_missing+0x601/0x33f0 [ 1014.224202][T32759] ? handle_mm_fault+0xee/0x3170 [ 1014.224228][T32759] handle_mm_fault+0x1bd7/0x3170 [ 1014.224263][T32759] ? handle_mm_fault+0xee/0x3170 [ 1014.224290][T32759] ? __pfx_handle_mm_fault+0x10/0x10 [ 1014.224329][T32759] ? lock_mm_and_find_vma+0xa7/0x340 [ 1014.224357][T32759] do_user_addr_fault+0x75b/0x1340 [ 1014.224397][T32759] exc_page_fault+0x6a/0xc0 [ 1014.224420][T32759] asm_exc_page_fault+0x26/0x30 [ 1014.224437][T32759] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1014.224465][T32759] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1014.224481][T32759] RSP: 0018:ffffc900052ff4e8 EFLAGS: 00050202 [ 1014.224497][T32759] RAX: ffffffff84b1fa01 RBX: 0000000000000060 RCX: 0000000000000060 [ 1014.224510][T32759] RDX: 0000000000000000 RSI: ffffc900052ffc00 RDI: 0000200000000000 [ 1014.224523][T32759] RBP: ffffc900052ffcd0 R08: ffffc900052ffc5f R09: 1ffff92000a5ff8b [ 1014.224536][T32759] R10: dffffc0000000000 R11: fffff52000a5ff8c R12: 0000200000000060 [ 1014.224568][T32759] R13: 00007ffffffff000 R14: ffffc900052ffc00 R15: 0000200000000000 [ 1014.224588][T32759] ? _copy_from_user+0x91/0xb0 [ 1014.224622][T32759] _copy_to_user+0x8a/0xb0 [ 1014.224656][T32759] mptcp_getsockopt+0x14ca/0x1ed0 [ 1014.224688][T32759] ? process_measurement+0x195e/0x1c80 [ 1014.224718][T32759] ? process_measurement+0x2d1/0x1c80 [ 1014.224745][T32759] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1014.224780][T32759] ? __pfx_process_measurement+0x10/0x10 [ 1014.224810][T32759] ? tomoyo_check_open_permission+0x38e/0x470 [ 1014.224836][T32759] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.224861][T32759] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.224884][T32759] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.224912][T32759] ? unwind_next_frame+0xa6/0x2550 [ 1014.224942][T32759] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.224974][T32759] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.225004][T32759] ? aa_file_perm+0x192/0x15e0 [ 1014.225034][T32759] ? aa_label_sk_perm+0x532/0x6e0 [ 1014.225063][T32759] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1014.225088][T32759] ? _parse_integer_limit+0x1ae/0x1f0 [ 1014.225115][T32759] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.225155][T32759] ? __might_fault+0xaf/0x130 [ 1014.225179][T32759] ? __might_fault+0xaf/0x130 [ 1014.225216][T32759] ? sock_common_getsockopt+0x2d/0xb0 [ 1014.225240][T32759] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1014.225259][T32759] do_sock_getsockopt+0x51d/0x7e0 [ 1014.225286][T32759] ? __pfx_vfs_write+0x10/0x10 [ 1014.225311][T32759] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1014.225334][T32759] ? do_sys_openat2+0x14c/0x200 [ 1014.225353][T32759] ? kmem_cache_free+0x182/0x650 [ 1014.225377][T32759] ? fd_install+0x94/0x3d0 [ 1014.225411][T32759] ? ksys_write+0x1fc/0x270 [ 1014.225441][T32759] __x64_sys_getsockopt+0x1a4/0x240 [ 1014.225470][T32759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.225490][T32759] do_syscall_64+0x15f/0xf80 [ 1014.225510][T32759] ? trace_irq_disable+0x3b/0x140 [ 1014.225538][T32759] ? clear_bhb_loop+0x40/0x90 [ 1014.225560][T32759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.225578][T32759] RIP: 0033:0x7f1d65d9cdd9 [ 1014.225595][T32759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.225610][T32759] RSP: 002b:00007f1d66c6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1014.225633][T32759] RAX: ffffffffffffffda RBX: 00007f1d66015fa0 RCX: 00007f1d65d9cdd9 [ 1014.225647][T32759] RDX: 0000000000000001 RSI: 000000000000011c RDI: 0000000000000003 [ 1014.225658][T32759] RBP: 00007f1d66c6c090 R08: 0000200000001000 R09: 0000000000000000 [ 1014.225670][T32759] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.225681][T32759] R13: 00007f1d66016038 R14: 00007f1d66015fa0 R15: 00007ffed2ae8f88 [ 1014.225710][T32759] [ 1014.730520][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.089625][ T313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7563'. [ 1015.130083][ T313] bond1: option mode: unable to set because the bond device has slaves [ 1015.184831][ T325] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1015.285020][ T327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7567'. [ 1015.384903][ T335] lo speed is unknown, defaulting to 1000 [ 1015.439716][ T338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7570'. [ 1015.494551][ T338] erspan0: entered promiscuous mode [ 1015.507810][ T342] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7570'. [ 1015.689464][ T346] FAULT_INJECTION: forcing a failure. [ 1015.689464][ T346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.702957][ T346] CPU: 0 UID: 0 PID: 346 Comm: syz.4.7573 Not tainted syzkaller #0 PREEMPT(full) [ 1015.702987][ T346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.703001][ T346] Call Trace: [ 1015.703010][ T346] [ 1015.703020][ T346] dump_stack_lvl+0xe8/0x150 [ 1015.703052][ T346] should_fail_ex+0x412/0x560 [ 1015.703086][ T346] _copy_to_user+0x31/0xb0 [ 1015.703121][ T346] simple_read_from_buffer+0xe1/0x170 [ 1015.703161][ T346] proc_fail_nth_read+0x1bb/0x230 [ 1015.703194][ T346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1015.703226][ T346] ? rw_verify_area+0x2a6/0x4d0 [ 1015.703256][ T346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1015.703286][ T346] vfs_read+0x20c/0xa70 [ 1015.703320][ T346] ? do_sock_getsockopt+0x51d/0x7e0 [ 1015.703352][ T346] ? __pfx_vfs_read+0x10/0x10 [ 1015.703382][ T346] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1015.703410][ T346] ? do_sys_openat2+0x14c/0x200 [ 1015.703433][ T346] ? kmem_cache_free+0x182/0x650 [ 1015.703463][ T346] ? fd_install+0x94/0x3d0 [ 1015.703505][ T346] ksys_read+0x150/0x270 [ 1015.703539][ T346] ? __pfx_ksys_read+0x10/0x10 [ 1015.703570][ T346] ? __x64_sys_getsockopt+0x1a4/0x240 [ 1015.703605][ T346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.703629][ T346] do_syscall_64+0x15f/0xf80 [ 1015.703658][ T346] ? clear_bhb_loop+0x40/0x90 [ 1015.703686][ T346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.703708][ T346] RIP: 0033:0x7f51ec35d60e [ 1015.703729][ T346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1015.703747][ T346] RSP: 002b:00007f51ed1effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1015.703778][ T346] RAX: ffffffffffffffda RBX: 00007f51ed1f06c0 RCX: 00007f51ec35d60e [ 1015.703794][ T346] RDX: 000000000000000f RSI: 00007f51ed1f00a0 RDI: 0000000000000004 [ 1015.703808][ T346] RBP: 00007f51ed1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.703822][ T346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.703835][ T346] R13: 00007f51ec616038 R14: 00007f51ec615fa0 R15: 00007ffda8f76588 [ 1015.703872][ T346] [ 1016.031848][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.339428][ T362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7578'. [ 1016.480993][ T366] netlink: 'syz.2.7580': attribute type 8 has an invalid length. [ 1016.515581][ T366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7580'. [ 1016.569008][ T366] veth1_to_team: entered promiscuous mode [ 1016.577161][ T366] gretap0: entered promiscuous mode [ 1016.609355][ T366] veth1_to_team: left promiscuous mode [ 1016.634284][ T366] gretap0: left promiscuous mode [ 1016.761034][ T369] bond4: option mode: unable to set because the bond device has slaves [ 1016.785284][ T373] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1016.804291][ T371] syzkaller1: entered promiscuous mode [ 1016.826634][ T371] syzkaller1: entered allmulticast mode [ 1017.040994][ T382] __nla_validate_parse: 1 callbacks suppressed [ 1017.041017][ T382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7583'. [ 1017.166967][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.402401][ T399] lo speed is unknown, defaulting to 1000 [ 1017.759846][ T419] netlink: 'syz.3.7593': attribute type 11 has an invalid length. [ 1017.832522][ T421] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1018.087207][ T424] netlink: 'syz.2.7594': attribute type 8 has an invalid length. [ 1018.095214][ T424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7594'. [ 1018.137865][ T424] veth1_to_team: entered promiscuous mode [ 1018.146463][ T424] gretap0: entered promiscuous mode [ 1018.168573][ T424] veth1_to_team: left promiscuous mode [ 1018.184476][ T424] gretap0: left promiscuous mode [ 1018.195253][ T429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7596'. [ 1018.233240][ T426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7595'. [ 1018.243710][ T429] bond1: option mode: unable to set because the bond device has slaves [ 1018.316180][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.352937][ T432] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1018.439049][ T437] netlink: 'syz.2.7599': attribute type 1 has an invalid length. [ 1018.810997][ T448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7602'. [ 1018.987130][ T465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7605'. [ 1019.460533][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.500182][ T474] lo speed is unknown, defaulting to 1000 [ 1019.645813][ T486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7611'. [ 1019.665378][ T486] bond1: option mode: unable to set because the bond device has slaves [ 1019.690302][ T486] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1019.870655][ T490] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1019.891685][ T490] tipc: Started in network mode [ 1019.901658][ T490] tipc: Node identity 263cd488150c, cluster identity 4711 [ 1019.923970][ T490] tipc: Enabled bearer , priority 0 [ 1019.941188][ T490] syzkaller0: entered promiscuous mode [ 1019.958158][ T490] syzkaller0: entered allmulticast mode [ 1020.051516][ T499] tipc: Resetting bearer [ 1020.057679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.121769][ T501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7616'. [ 1020.309839][ T516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.329413][ T517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7617'. [ 1020.366731][T19323] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1020.510428][ T522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7620'. [ 1020.596173][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.609484][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.730795][ T527] netlink: 'syz.4.7622': attribute type 4 has an invalid length. [ 1020.809005][ T489] tipc: Resetting bearer [ 1020.933091][ T489] tipc: Disabling bearer [ 1021.018860][ T5750] tipc: Node number set to 858838152 [ 1021.611086][ T537] bond11: option lacp_active: mode dependency failed, not supported in mode broadcast(3) [ 1021.644758][ T537] bond11 (unregistering): Released all slaves [ 1021.820913][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.234740][ T579] FAULT_INJECTION: forcing a failure. [ 1022.234740][ T579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.250501][ T579] CPU: 0 UID: 0 PID: 579 Comm: syz.3.7637 Not tainted syzkaller #0 PREEMPT(full) [ 1022.250531][ T579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1022.250546][ T579] Call Trace: [ 1022.250555][ T579] [ 1022.250564][ T579] dump_stack_lvl+0xe8/0x150 [ 1022.250595][ T579] should_fail_ex+0x412/0x560 [ 1022.250632][ T579] _copy_from_user+0x2d/0xb0 [ 1022.250663][ T579] do_sock_getsockopt+0x200/0x7e0 [ 1022.250695][ T579] ? __pfx_vfs_write+0x10/0x10 [ 1022.250725][ T579] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1022.250754][ T579] ? do_sys_openat2+0x14c/0x200 [ 1022.250777][ T579] ? kmem_cache_free+0x182/0x650 [ 1022.250806][ T579] ? fd_install+0x94/0x3d0 [ 1022.250848][ T579] ? ksys_write+0x1fc/0x270 [ 1022.250885][ T579] __x64_sys_getsockopt+0x1a4/0x240 [ 1022.250920][ T579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.250945][ T579] do_syscall_64+0x15f/0xf80 [ 1022.250983][ T579] ? clear_bhb_loop+0x40/0x90 [ 1022.251012][ T579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.251035][ T579] RIP: 0033:0x7f0d5bd9cdd9 [ 1022.251055][ T579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.251074][ T579] RSP: 002b:00007f0d5ccea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1022.251097][ T579] RAX: ffffffffffffffda RBX: 00007f0d5c015fa0 RCX: 00007f0d5bd9cdd9 [ 1022.251114][ T579] RDX: 0000000000000001 RSI: 000000000000011c RDI: 0000000000000003 [ 1022.251128][ T579] RBP: 00007f0d5ccea090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.251142][ T579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.251155][ T579] R13: 00007f0d5c016038 R14: 00007f0d5c015fa0 R15: 00007ffdee4b0658 [ 1022.251192][ T579] [ 1022.254747][ T580] __nla_validate_parse: 1 callbacks suppressed [ 1022.254766][ T580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7636'. [ 1022.854295][ T595] openvswitch: netlink: Message has 2 unknown bytes. [ 1022.872483][ T596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7644'. [ 1022.904652][ T605] x_tables: duplicate underflow at hook 2 [ 1023.047659][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.406616][ T630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7648'. [ 1023.473062][ T632] FAULT_INJECTION: forcing a failure. [ 1023.473062][ T632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.513914][ T632] CPU: 0 UID: 0 PID: 632 Comm: syz.4.7652 Not tainted syzkaller #0 PREEMPT(full) [ 1023.513946][ T632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1023.513961][ T632] Call Trace: [ 1023.513970][ T632] [ 1023.513980][ T632] dump_stack_lvl+0xe8/0x150 [ 1023.514011][ T632] should_fail_ex+0x412/0x560 [ 1023.514045][ T632] _copy_to_user+0x31/0xb0 [ 1023.514078][ T632] simple_read_from_buffer+0xe1/0x170 [ 1023.514110][ T632] proc_fail_nth_read+0x1bb/0x230 [ 1023.514143][ T632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1023.514183][ T632] ? rw_verify_area+0x2a6/0x4d0 [ 1023.514214][ T632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1023.514244][ T632] vfs_read+0x20c/0xa70 [ 1023.514277][ T632] ? do_sock_getsockopt+0x51d/0x7e0 [ 1023.514309][ T632] ? __pfx_vfs_read+0x10/0x10 [ 1023.514338][ T632] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1023.514365][ T632] ? do_sys_openat2+0x14c/0x200 [ 1023.514388][ T632] ? kmem_cache_free+0x182/0x650 [ 1023.514417][ T632] ? fd_install+0x94/0x3d0 [ 1023.514463][ T632] ksys_read+0x150/0x270 [ 1023.514496][ T632] ? __pfx_ksys_read+0x10/0x10 [ 1023.514526][ T632] ? __x64_sys_getsockopt+0x1a4/0x240 [ 1023.514561][ T632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.514586][ T632] do_syscall_64+0x15f/0xf80 [ 1023.514611][ T632] ? trace_irq_disable+0x3b/0x140 [ 1023.514643][ T632] ? clear_bhb_loop+0x40/0x90 [ 1023.514670][ T632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.514693][ T632] RIP: 0033:0x7f51ec35d60e [ 1023.514713][ T632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1023.514733][ T632] RSP: 002b:00007f51ed1effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1023.514756][ T632] RAX: ffffffffffffffda RBX: 00007f51ed1f06c0 RCX: 00007f51ec35d60e [ 1023.514772][ T632] RDX: 000000000000000f RSI: 00007f51ed1f00a0 RDI: 0000000000000004 [ 1023.514786][ T632] RBP: 00007f51ed1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.514799][ T632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.514812][ T632] R13: 00007f51ec616038 R14: 00007f51ec615fa0 R15: 00007ffda8f76588 [ 1023.514848][ T632] [ 1023.807422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.420294][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.878849][ T692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7670'. [ 1024.881359][ T693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7668'. [ 1024.959802][ T694] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1024.987938][ T692] bond2: option mode: unable to set because the bond device has slaves [ 1025.255385][ T706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7675'. [ 1025.429016][ T713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7675'. [ 1025.513476][ T700] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.557367][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.571650][ T706] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1025.760420][ T731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7683'. [ 1025.822428][ T700] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.861497][ T731] bond1: option mode: unable to set because the bond device has slaves [ 1025.882789][ T733] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1026.032900][ T700] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.223995][ T700] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.367037][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.376676][ T761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7692'. [ 1026.396062][ T761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7692'. [ 1026.411781][ T761] netlink: 'syz.3.7692': attribute type 5 has an invalid length. [ 1026.480129][ T765] erspan0: entered promiscuous mode [ 1026.535245][T11958] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.575638][T11958] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.686433][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.700250][T11958] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.794864][T11958] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.952732][ T775] netlink: 'syz.3.7697': attribute type 1 has an invalid length. [ 1027.268366][ T775] bond11: entered promiscuous mode [ 1027.292328][ T775] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1027.749462][ T835] tipc: Enabling of bearer rejected, already enabled [ 1027.838217][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.991399][ T846] __nla_validate_parse: 1 callbacks suppressed [ 1027.991422][ T846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7719'. [ 1028.088173][ T850] netlink: zone id is out of range [ 1028.103152][ T850] netlink: zone id is out of range [ 1028.117629][ T850] netlink: zone id is out of range [ 1028.133249][ T850] netlink: zone id is out of range [ 1028.149293][ T850] netlink: zone id is out of range [ 1028.160535][ T850] netlink: zone id is out of range [ 1028.172997][ T850] netlink: zone id is out of range [ 1028.187415][ T850] netlink: zone id is out of range [ 1028.204272][ T850] netlink: zone id is out of range [ 1028.219938][ T850] netlink: zone id is out of range [ 1028.380604][ T862] geneve2: entered promiscuous mode [ 1028.386122][ T862] geneve2: entered allmulticast mode [ 1028.520167][ T877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7729'. [ 1028.533378][ T877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7729'. [ 1028.552895][ T877] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7729'. [ 1028.766872][ T893] atomic_op ffff888084dff998 conn xmit_atomic 0000000000000000 [ 1029.088313][ T856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1029.165616][ T895] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7734'. [ 1029.405534][ T911] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7736'. [ 1029.452098][ T913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7738'. [ 1029.481271][ T913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7738'. [ 1030.369410][ T980] tc_dump_action: action bad kind [ 1030.461899][ T985] netlink: 'syz.1.7753': attribute type 10 has an invalid length. [ 1030.470061][ T985] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7753'. [ 1030.792072][ T1011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7760'. [ 1031.533817][ T1053] lo speed is unknown, defaulting to 1000 [ 1031.982477][ T1081] netlink: 'syz.1.7774': attribute type 1 has an invalid length. [ 1032.003494][ T1081] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1033.376510][T12313] net_ratelimit: 51 callbacks suppressed [ 1033.376533][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.307665][ T1120] __nla_validate_parse: 3 callbacks suppressed [ 1034.307688][ T1120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7781'. [ 1034.506780][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.774880][ T1137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1035.627314][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.974545][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.675336][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7794'. [ 1036.779429][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.176390][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.228424][ T1197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7799'. [ 1037.351200][ T1193] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7801'. [ 1037.378836][ T1206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7800'. [ 1037.744298][ T1214] xt_l2tp: v2 tid > 0xffff: 37482740 [ 1037.918565][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.191724][ T1242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7808'. [ 1038.263778][ T1242] netlink: 'syz.2.7808': attribute type 9 has an invalid length. [ 1038.900666][ T1271] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.040021][ T1271] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.066321][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.170461][ T1271] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.272663][ T1271] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.387741][ T1301] netlink: 'syz.4.7823': attribute type 21 has an invalid length. [ 1039.412930][ T1301] IPv6: NLM_F_CREATE should be specified when creating new route [ 1039.438751][ T1301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1039.446149][ T1301] IPv6: NLM_F_CREATE should be set when creating new route [ 1039.453508][ T1301] IPv6: NLM_F_CREATE should be set when creating new route [ 1039.460831][ T1301] IPv6: NLM_F_CREATE should be set when creating new route [ 1039.488357][ T1308] netlink: 'syz.4.7823': attribute type 21 has an invalid length. [ 1039.527877][ T1308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1039.611522][ T3293] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.649634][ T1321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1039.670542][T11966] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.769736][T12319] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.848904][ T3293] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.161017][ T1341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7831'. [ 1040.196587][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.380451][ T1350] lo speed is unknown, defaulting to 1000 [ 1040.558619][ T1367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7839'. [ 1040.642559][ T1371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7840'. [ 1041.009884][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.327782][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.407179][ T1430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7857'. [ 1042.461295][ T1430] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1042.475304][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.834837][ T1446] bond7: option miimon: invalid value (18446744073709551607) [ 1042.843261][ T1446] bond7: option miimon: allowed values 0 - 2147483647 [ 1042.877083][ T1446] bond7 (unregistering): Released all slaves [ 1043.008829][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.212504][ T1472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7863'. [ 1043.332737][ T1474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7868'. [ 1043.354268][ T1474] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7868'. [ 1043.430866][ T1480] xt_addrtype: ipv6 does not support BROADCAST matching [ 1043.598119][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.982446][ T1504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7874'. [ 1044.277431][ T1524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7876'. [ 1044.286706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.723991][ T1533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7879'. [ 1044.748950][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.259882][ T30] audit: type=1804 audit(1777692298.358:6): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7884" name="/newroot/383/cgroup.controllers" dev="tmpfs" ino=1976 res=1 errno=0 [ 1045.286158][ T30] audit: type=1800 audit(1777692298.358:7): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7884" name="cgroup.controllers" dev="tmpfs" ino=1976 res=0 errno=0 [ 1045.308414][ T30] audit: type=1804 audit(1777692298.378:8): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7884" name="/newroot/383/cgroup.controllers" dev="tmpfs" ino=1976 res=1 errno=0 [ 1045.771157][ T1563] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1045.897700][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.961728][ T1572] netlink: 'syz.3.7890': attribute type 28 has an invalid length. [ 1045.972944][ T1572] netlink: 'syz.3.7890': attribute type 3 has an invalid length. [ 1045.990225][ T1572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7890'. [ 1046.027030][ T1574] can: request_module (can-proto-3) failed. [ 1046.132099][ T1580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.196682][ T1580] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1046.218433][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.338835][ T1583] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7895'. [ 1046.427721][ T1591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7893'. [ 1046.468878][ T1591] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7893'. [ 1047.026096][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.090957][ T1620] xt_hashlimit: max too large, truncated to 1048576 [ 1047.257661][ T1624] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1047.291745][ T1624] bond2 (unregistering): Released all slaves [ 1047.382352][ T1628] geneve3: entered promiscuous mode [ 1047.388019][ T1628] geneve3: entered allmulticast mode [ 1047.747883][ T1639] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1047.806376][ T5736] syzkaller1: tun_net_xmit 90 [ 1047.813907][ T57] syzkaller1: tun_net_xmit 86 [ 1047.891799][ T1648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7914'. [ 1047.963661][ T1648] bond1: option mode: unable to set because the bond device has slaves [ 1048.129927][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.151773][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.355211][ T1668] netlink: 'syz.1.7921': attribute type 1 has an invalid length. [ 1048.573481][ T1674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7921'. [ 1048.746686][ T1668] bond7: entered promiscuous mode [ 1048.775385][ T1668] bond7: entered allmulticast mode [ 1048.822653][ T1668] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1048.882076][ T1680] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1048.899407][ T1672] erspan2: entered allmulticast mode [ 1048.910096][ T1672] bond7: (slave erspan2): making interface the new active one [ 1048.918128][ T1672] erspan2: entered promiscuous mode [ 1048.925229][ T1672] bond7: (slave erspan2): Enslaving as an active interface with an up link [ 1048.953382][ T1680] gretap0: entered promiscuous mode [ 1048.995556][ T1680] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1049.031358][ T1680] 0ªî{X¹¦: renamed from gretap0 [ 1049.040884][ T1680] 0ªî{X¹¦: left promiscuous mode [ 1049.047478][ T1680] 0ªî{X¹¦: entered allmulticast mode [ 1049.067113][ T1680] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1049.118845][ T30] audit: type=1804 audit(1777692302.218:9): pid=1685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7925" name="/newroot/404/memory.events" dev="tmpfs" ino=2088 res=1 errno=0 [ 1049.144771][ T30] audit: type=1800 audit(1777692302.218:10): pid=1685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7925" name="memory.events" dev="tmpfs" ino=2088 res=0 errno=0 [ 1049.312716][ T1694] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1049.322705][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.418285][ T30] audit: type=1800 audit(1777692302.518:11): pid=1696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7928" name="memory.events" dev="tmpfs" ino=2094 res=0 errno=0 [ 1050.120369][ T1704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1050.271529][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7937'. [ 1050.320041][ T1735] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7939'. [ 1050.446410][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.858606][ T1758] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7946'. [ 1051.154333][ T1758] lo speed is unknown, defaulting to 1000 [ 1051.180649][ T1764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7946'. [ 1051.196169][ T1764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7946'. [ 1051.274046][ T1779] netlink: 'syz.1.7950': attribute type 10 has an invalid length. [ 1051.285710][ T1779] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7950'. [ 1051.340709][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.579603][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.978915][ T1801] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7953'. [ 1052.116789][ T1807] netlink: 'syz.2.7955': attribute type 8 has an invalid length. [ 1052.135558][ T1807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7955'. [ 1052.157006][ T1807] veth1_to_team: entered promiscuous mode [ 1052.164595][ T1807] gretap0: entered promiscuous mode [ 1052.174840][ T1807] veth1_to_team: left promiscuous mode [ 1052.185045][ T1807] gretap0: left promiscuous mode [ 1052.707764][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.002529][ T1832] syzkaller1: entered promiscuous mode [ 1053.019850][ T1832] syzkaller1: entered allmulticast mode [ 1053.448071][ T1852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7963'. [ 1053.515706][ T1853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7963'. [ 1053.791927][ T1866] netlink: 'syz.2.7967': attribute type 1 has an invalid length. [ 1053.859514][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.890292][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.935048][ T1873] netlink: 'syz.3.7968': attribute type 8 has an invalid length. [ 1053.971966][ T1866] bond4: entered promiscuous mode [ 1053.992944][ T1866] bond4: entered allmulticast mode [ 1054.012676][ T1866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1054.041288][ T1875] tipc: New replicast peer: 255.255.255.255 [ 1054.076039][ T1875] tipc: Enabled bearer , priority 10 [ 1054.095046][ T1866] netlink: 'syz.2.7967': attribute type 13 has an invalid length. [ 1054.325048][ T1879] syzkaller1: entered promiscuous mode [ 1054.343471][ T1879] syzkaller1: entered allmulticast mode [ 1054.780336][ T1891] syzkaller1: entered promiscuous mode [ 1054.796060][ T1891] syzkaller1: entered allmulticast mode [ 1054.967708][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.226922][ T1909] netlink: 'syz.3.7980': attribute type 8 has an invalid length. [ 1055.939588][ T1941] lo speed is unknown, defaulting to 1000 [ 1056.098752][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.195009][ T1958] syzkaller0: entered promiscuous mode [ 1056.210816][ T1958] syzkaller0: entered allmulticast mode [ 1056.447851][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.470462][ T1971] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.626672][ T1971] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.789897][ T1984] FAULT_INJECTION: forcing a failure. [ 1056.789897][ T1984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.822027][ T1971] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.836094][ T1984] CPU: 1 UID: 0 PID: 1984 Comm: syz.3.8000 Not tainted syzkaller #0 PREEMPT(full) [ 1056.836124][ T1984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1056.836139][ T1984] Call Trace: [ 1056.836148][ T1984] [ 1056.836158][ T1984] dump_stack_lvl+0xe8/0x150 [ 1056.836190][ T1984] should_fail_ex+0x412/0x560 [ 1056.836224][ T1984] _copy_from_user+0x2d/0xb0 [ 1056.836258][ T1984] __sys_bpf+0x229/0x950 [ 1056.836295][ T1984] ? __pfx___sys_bpf+0x10/0x10 [ 1056.836346][ T1984] ? ksys_write+0x242/0x270 [ 1056.836382][ T1984] ? __pfx_ksys_write+0x10/0x10 [ 1056.836419][ T1984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.836444][ T1984] __x64_sys_bpf+0x7c/0x90 [ 1056.836485][ T1984] do_syscall_64+0x15f/0xf80 [ 1056.836511][ T1984] ? trace_irq_disable+0x3b/0x140 [ 1056.836544][ T1984] ? clear_bhb_loop+0x40/0x90 [ 1056.836572][ T1984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.836595][ T1984] RIP: 0033:0x7f0d5bd9cdd9 [ 1056.836616][ T1984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.836635][ T1984] RSP: 002b:00007f0d5ccea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1056.836659][ T1984] RAX: ffffffffffffffda RBX: 00007f0d5c015fa0 RCX: 00007f0d5bd9cdd9 [ 1056.836675][ T1984] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1056.836690][ T1984] RBP: 00007f0d5ccea090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.836705][ T1984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.836718][ T1984] R13: 00007f0d5c016038 R14: 00007f0d5c015fa0 R15: 00007ffdee4b0658 [ 1056.836755][ T1984] [ 1057.156224][ T1971] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.318637][ T1988] __nla_validate_parse: 3 callbacks suppressed [ 1057.318661][ T1988] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7998'. [ 1057.350048][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.356802][ T1988] netlink: 'syz.1.7998': attribute type 1 has an invalid length. [ 1057.377170][ T1988] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7998'. [ 1057.653029][T12319] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.724240][ T6631] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.811760][T11958] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.963303][ T2007] FAULT_INJECTION: forcing a failure. [ 1057.963303][ T2007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.987595][ T2007] CPU: 1 UID: 0 PID: 2007 Comm: syz.1.8005 Not tainted syzkaller #0 PREEMPT(full) [ 1057.987632][ T2007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1057.987647][ T2007] Call Trace: [ 1057.987656][ T2007] [ 1057.987666][ T2007] dump_stack_lvl+0xe8/0x150 [ 1057.987697][ T2007] should_fail_ex+0x412/0x560 [ 1057.987730][ T2007] _copy_from_user+0x2d/0xb0 [ 1057.987763][ T2007] rds_free_mr+0xe3/0x440 [ 1057.987789][ T2007] ? __pfx_rds_free_mr+0x10/0x10 [ 1057.987821][ T2007] rds_setsockopt+0x3ce/0xe00 [ 1057.987861][ T2007] ? __pfx_rds_setsockopt+0x10/0x10 [ 1057.987896][ T2007] ? fd_install+0x94/0x3d0 [ 1057.987919][ T2007] ? __pfx_aa_sk_perm+0x10/0x10 [ 1057.987943][ T2007] ? aa_sock_opt_perm+0xff/0x1a0 [ 1057.987970][ T2007] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1057.987994][ T2007] ? __pfx_rds_setsockopt+0x10/0x10 [ 1057.988022][ T2007] do_sock_setsockopt+0x17c/0x1b0 [ 1057.988051][ T2007] __x64_sys_setsockopt+0x13d/0x1b0 [ 1057.988077][ T2007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.988097][ T2007] do_syscall_64+0x15f/0xf80 [ 1057.988118][ T2007] ? trace_irq_disable+0x3b/0x140 [ 1057.988146][ T2007] ? clear_bhb_loop+0x40/0x90 [ 1057.988171][ T2007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.988188][ T2007] RIP: 0033:0x7f1e1e39cdd9 [ 1057.988206][ T2007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.988221][ T2007] RSP: 002b:00007f1e1f331028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1057.988241][ T2007] RAX: ffffffffffffffda RBX: 00007f1e1e615fa0 RCX: 00007f1e1e39cdd9 [ 1057.988254][ T2007] RDX: 0000000000000003 RSI: 0000000000000114 RDI: 0000000000000003 [ 1057.988265][ T2007] RBP: 00007f1e1f331090 R08: 0000000000000010 R09: 0000000000000000 [ 1057.988276][ T2007] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1057.988287][ T2007] R13: 00007f1e1e616038 R14: 00007f1e1e615fa0 R15: 00007ffcb51297c8 [ 1057.988316][ T2007] [ 1058.316416][T11958] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.628088][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.014659][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.139106][ T2051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1059.161327][ T2051] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1059.209601][ T2051] netlink: 'syz.3.8017': attribute type 16 has an invalid length. [ 1059.635602][ T2065] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8022'. [ 1059.702208][ T2072] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8022'. [ 1059.725741][ T2070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8024'. [ 1059.762308][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.908229][ T2078] syzkaller0: entered promiscuous mode [ 1059.927655][ T2080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1059.929456][ T2078] syzkaller0: entered allmulticast mode [ 1060.012473][ T2078] xt_hashlimit: size too large, truncated to 1048576 [ 1060.062711][ T2091] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8027'. [ 1060.233208][ T2101] bond2: (slave lo): Releasing backup interface [ 1060.274612][ T2101] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1060.300440][ T2101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1060.908294][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.929122][ T2131] 8021q: VLANs not supported on ip_vti0 [ 1061.145601][ T2141] netlink: 'syz.3.8045': attribute type 8 has an invalid length. [ 1061.164372][ T2141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8045'. [ 1061.402437][ T2148] sit2: entered allmulticast mode [ 1061.468452][ T2147] netlink: 'syz.5.8047': attribute type 21 has an invalid length. [ 1061.485188][ T2147] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8047'. [ 1061.507292][ T2147] netlink: 'syz.5.8047': attribute type 4 has an invalid length. [ 1061.523710][ T2147] netlink: 'syz.5.8047': attribute type 5 has an invalid length. [ 1061.541085][ T2153] syzkaller1: entered promiscuous mode [ 1061.558166][ T2153] syzkaller1: entered allmulticast mode [ 1061.645529][ T2153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.716350][ T2153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.731739][ T2153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.852948][ T2153] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1061.993417][ T2153] geneve2: left promiscuous mode [ 1062.002678][ T2153] geneve2: left allmulticast mode [ 1062.030841][ T2153] syzkaller1: left promiscuous mode [ 1062.040910][ T2153] syzkaller1: left allmulticast mode [ 1062.052193][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.177968][ T2159] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1062.222876][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.303866][ T2164] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1062.329707][ T6631] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.340858][ T6631] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.372166][ T2165] syzkaller0: entered promiscuous mode [ 1062.385208][ T2165] syzkaller0: entered allmulticast mode [ 1062.418027][ T6631] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.434481][ T2189] netlink: 'syz.5.8055': attribute type 1 has an invalid length. [ 1062.459002][ T6631] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.534062][ T2189] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1062.742621][ T2207] netlink: 'syz.3.8059': attribute type 8 has an invalid length. [ 1062.784305][ T2207] __nla_validate_parse: 1 callbacks suppressed [ 1062.784326][ T2207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8059'. [ 1063.092169][ T2226] netlink: 'syz.5.8065': attribute type 1 has an invalid length. [ 1063.126921][ T2229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1063.177908][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.316491][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.742221][ T2226] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1064.744350][ T2229] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1064.769247][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.828071][T12319] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.847333][T12319] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 34060 - 0 [ 1064.882387][T12319] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.908672][T12319] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 34060 - 0 [ 1064.940500][T12319] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.960323][T12319] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 34060 - 0 [ 1064.980819][T12319] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.002934][T12319] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 34060 - 0 [ 1065.065403][ T2263] IPVS: set_ctl: invalid protocol: 56253 127.195.48.50:4508 [ 1065.297228][ T2278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8072'. [ 1065.381789][ T3293] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.432732][ T3293] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.460359][ T3293] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.471122][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.479649][T11958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.664590][ T2303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8079'. [ 1065.799984][ T2303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.409270][ T2342] netlink: 'syz.5.8090': attribute type 5 has an invalid length. [ 1066.428639][ T2342] vxlan0: entered promiscuous mode [ 1066.463468][ T2343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8090'. [ 1066.500481][ T2343] vlan0: entered promiscuous mode [ 1066.521752][ T2347] openvswitch: netlink: Message has 1 unknown bytes. [ 1066.550666][ T2347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1066.590578][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.652086][ T2351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8091'. [ 1067.051757][ T2373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8094'. [ 1067.067707][ T2373] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8094'. [ 1067.089809][ T2373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8094'. [ 1067.341483][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.768015][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.032761][ T2394] netlink: 'syz.3.8099': attribute type 1 has an invalid length. [ 1068.054744][ T2394] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8099'. [ 1068.513906][ T2409] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8104'. [ 1068.896779][ T2425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8110'. [ 1068.951150][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.021344][ T2429] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1069.799465][ T2461] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1069.852802][ T2461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8118'. [ 1070.092238][ T2487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8124'. [ 1070.106967][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.123005][ T2489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8126'. [ 1070.528777][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.591232][ T2508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8129'. [ 1070.617980][ T2508] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8129'. [ 1070.864173][ T2522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8131'. [ 1070.981253][ T2531] netlink: 'syz.1.8133': attribute type 1 has an invalid length. [ 1071.012560][ T2531] netlink: 'syz.1.8133': attribute type 2 has an invalid length. [ 1071.050555][ T2531] netlink: 'syz.1.8133': attribute type 1 has an invalid length. [ 1071.256363][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.310667][ T2522] bond4: option mode: unable to set because the bond device has slaves [ 1071.342832][ T2529] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1071.569885][ T2545] netlink: 'syz.3.8137': attribute type 1 has an invalid length. [ 1071.931303][ T2545] bond12: entered promiscuous mode [ 1071.937545][ T2545] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1071.951860][ T2567] macvlan0: entered promiscuous mode [ 1071.996377][ T2555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8140'. [ 1072.243965][ T2584] lo speed is unknown, defaulting to 1000 [ 1072.295040][ T2588] sctp: [Deprecated]: syz.3.8145 (pid 2588) Use of int in max_burst socket option. [ 1072.295040][ T2588] Use struct sctp_assoc_value instead [ 1072.356249][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.449523][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.614551][ T2598] netlink: 'syz.1.8147': attribute type 1 has an invalid length. [ 1073.239114][ T2635] netlink: 'syz.3.8157': attribute type 1 has an invalid length. [ 1073.249895][ T2633] netlink: 'syz.5.8156': attribute type 3 has an invalid length. [ 1073.268480][ T2633] __nla_validate_parse: 5 callbacks suppressed [ 1073.268498][ T2633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8156'. [ 1073.298662][ T2635] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1073.416978][ T2635] bond13: (slave geneve3): making interface the new active one [ 1073.457840][ T2635] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 1073.466979][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.651136][ T2633] tipc: Enabling of bearer rejected, failed to enable media [ 1073.811214][ T2619] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1074.111054][T12319] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.159787][T12319] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.188067][T12319] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.216889][T12319] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.229324][ T2677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8166'. [ 1074.251159][ T2677] bond1: option mode: unable to set because the bond device has slaves [ 1074.568302][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.698612][ T2698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8172'. [ 1074.993548][ T2713] netlink: 'syz.1.8175': attribute type 13 has an invalid length. [ 1075.010219][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 1075.035937][ T2713] netlink: 'syz.1.8175': attribute type 17 has an invalid length. [ 1075.676598][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.253163][ T2763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8187'. [ 1076.289055][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.796409][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.098407][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 1077.750389][ T2713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.759915][ T2713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.770467][ T2713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.818744][ T2713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1077.829192][ T2713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1077.848410][ T2713] veth1_vlan: left promiscuous mode [ 1077.855648][ T2713] veth0_vlan: left promiscuous mode [ 1077.863742][ T2713] veth0_vlan: entered promiscuous mode [ 1077.872561][ T2713] veth1_vlan: entered promiscuous mode [ 1077.882785][ T2713] veth1_macvtap: left promiscuous mode [ 1077.891152][ T2713] veth0_macvtap: left promiscuous mode [ 1077.898525][ T2713] veth0_macvtap: entered promiscuous mode [ 1077.906396][ T2713] veth1_macvtap: entered promiscuous mode [ 1077.916160][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.919094][ T2713] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1077.932734][ T2713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1077.941974][ T2713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1077.950580][ T2713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1077.959057][ T2713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1077.973284][ T2713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1078.000434][ T2713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1078.009761][ T2713] bond3: left promiscuous mode [ 1078.014578][ T2713] bridge4: left promiscuous mode [ 1078.021678][ T2713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1078.031158][ T2713] bond3: entered allmulticast mode [ 1078.036417][ T2713] bridge4: entered allmulticast mode [ 1078.042010][ T2713] macvtap1: left allmulticast mode [ 1078.048027][ T2713] bond3: left allmulticast mode [ 1078.053067][ T2713] bridge4: left allmulticast mode [ 1078.059483][ T2713] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1078.073670][ T2713] bridge4: entered promiscuous mode [ 1078.080833][ T2713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1078.090655][ T2713] bond5: left promiscuous mode [ 1078.095554][ T2713] veth3: left promiscuous mode [ 1078.102069][ T2713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1078.114068][ T2713] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1078.128085][ T2713] bond7: left promiscuous mode [ 1078.132946][ T2713] erspan2: left promiscuous mode [ 1078.156234][ T2713] bond7: left allmulticast mode [ 1078.162547][ T2713] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1078.172648][ T2713] erspan2: left allmulticast mode [ 1078.188436][ T2713] mac80211_hwsim hwsim208 wlan0: entered promiscuous mode [ 1078.216603][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.236051][ T2713] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 1078.447353][T12319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.488242][ T2762] syz1: Port: 1 Link ACTIVE [ 1078.495110][T12319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.525392][T12319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.566995][T12319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.644085][ T2797] bond0: Caught tx_queue_len zero misconfig [ 1078.964665][ T2811] lo speed is unknown, defaulting to 1000 [ 1078.993728][ T2822] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8201'. [ 1079.036943][ T3293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.917156][ T2838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8204'. [ 1079.963104][ T2890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8211'. [ 1080.176250][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.481193][ T2908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.848162][ T2917] tipc: Started in network mode [ 1080.861155][ T2917] tipc: Node identity 6a6679c727a9, cluster identity 4711 [ 1080.890717][ T2917] tipc: Enabled bearer , priority 0 [ 1080.913817][ T2917] syzkaller0: entered promiscuous mode [ 1080.919673][ T2917] syzkaller0: entered allmulticast mode [ 1080.989480][ T2916] tipc: Resetting bearer [ 1081.037687][ T2916] tipc: Disabling bearer [ 1081.060223][T12313] nci: nci_ntf_packet: unknown ntf opcode 0x125 [ 1081.317798][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.410691][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.859385][ T2970] geneve0: entered promiscuous mode [ 1081.954115][ T2929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1081.992340][ T2947] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8224'. [ 1082.438200][ T2990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8239'. [ 1082.468983][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.398727][ T3026] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8247'. [ 1083.418899][ T3026] netlink: 116 bytes leftover after parsing attributes in process `syz.5.8247'. [ 1083.470823][ T3026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8247'. [ 1083.493395][ T3029] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8247'. [ 1083.617028][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.966677][T12313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.246905][ T3073] FAULT_INJECTION: forcing a failure. [ 1084.246905][ T3073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.271745][ T3073] CPU: 1 UID: 0 PID: 3073 Comm: syz.1.8262 Not tainted syzkaller #0 PREEMPT(full) [ 1084.271777][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1084.271793][ T3073] Call Trace: [ 1084.271802][ T3073] [ 1084.271813][ T3073] dump_stack_lvl+0xe8/0x150 [ 1084.271845][ T3073] should_fail_ex+0x412/0x560 [ 1084.271880][ T3073] _copy_from_iter+0x1d3/0x1670 [ 1084.271909][ T3073] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1084.271950][ T3073] ? __pfx_policy_nodemask+0x10/0x10 [ 1084.271988][ T3073] ? __pfx__copy_from_iter+0x10/0x10 [ 1084.272021][ T3073] ? alloc_pages_mpol+0x3c0/0x490 [ 1084.272065][ T3073] copy_page_from_iter+0x220/0x2d0 [ 1084.272100][ T3073] tun_get_user+0x1bf7/0x43e0 [ 1084.272129][ T3073] ? tun_get_user+0x8aa/0x43e0 [ 1084.272176][ T3073] ? aa_file_perm+0x50e/0x15e0 [ 1084.272208][ T3073] ? __pfx_tun_get_user+0x10/0x10 [ 1084.272238][ T3073] ? __lock_acquire+0x6b5/0x2cf0 [ 1084.272280][ T3073] ? ref_tracker_alloc+0x35c/0x4c0 [ 1084.272313][ T3073] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1084.272344][ T3073] ? tun_get+0x1c/0x2f0 [ 1084.272370][ T3073] ? tun_get+0x1c/0x2f0 [ 1084.272403][ T3073] ? tun_get+0x1c/0x2f0 [ 1084.272429][ T3073] ? tun_get+0x1c/0x2f0 [ 1084.272461][ T3073] tun_chr_write_iter+0x113/0x200 [ 1084.272491][ T3073] vfs_write+0x61d/0xb90 [ 1084.272532][ T3073] ? __pfx_vfs_write+0x10/0x10 [ 1084.272575][ T3073] ? __fget_files+0x2a/0x420 [ 1084.272612][ T3073] ksys_write+0x150/0x270 [ 1084.272646][ T3073] ? __pfx_ksys_write+0x10/0x10 [ 1084.272694][ T3073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.272719][ T3073] do_syscall_64+0x15f/0xf80 [ 1084.272744][ T3073] ? trace_irq_disable+0x3b/0x140 [ 1084.272777][ T3073] ? clear_bhb_loop+0x40/0x90 [ 1084.272806][ T3073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.272829][ T3073] RIP: 0033:0x7f1e1e35d60e [ 1084.272850][ T3073] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1084.272870][ T3073] RSP: 002b:00007f1e1f330fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1084.272894][ T3073] RAX: ffffffffffffffda RBX: 00007f1e1f3316c0 RCX: 00007f1e1e35d60e [ 1084.272911][ T3073] RDX: 000000000000003a RSI: 0000200000000000 RDI: 00000000000000c8 [ 1084.272926][ T3073] RBP: 00007f1e1f331090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.272940][ T3073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.272953][ T3073] R13: 00007f1e1e616038 R14: 00007f1e1e615fa0 R15: 00007ffcb51297c8 [ 1084.272995][ T3073] [ 1084.859008][ T3056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1084.872817][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.512751][ T3143] netlink: 388 bytes leftover after parsing attributes in process `syz.5.8282'. [ 1085.547093][ T3143] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 1085.837332][ T3162] vlan0: entered promiscuous mode [ 1086.007626][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.018640][ T3171] FAULT_INJECTION: forcing a failure. [ 1086.018640][ T3171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.058824][ T3175] FAULT_INJECTION: forcing a failure. [ 1086.058824][ T3175] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.069740][ T3171] CPU: 0 UID: 0 PID: 3171 Comm: syz.5.8293 Not tainted syzkaller #0 PREEMPT(full) [ 1086.069828][ T3171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1086.069872][ T3171] Call Trace: [ 1086.069896][ T3171] [ 1086.069926][ T3171] dump_stack_lvl+0xe8/0x150 [ 1086.070014][ T3171] should_fail_ex+0x412/0x560 [ 1086.070120][ T3171] _copy_from_user+0x2d/0xb0 [ 1086.070241][ T3171] ___sys_sendmsg+0x1c6/0x360 [ 1086.070318][ T3171] ? __lock_acquire+0x6b5/0x2cf0 [ 1086.070398][ T3171] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.070583][ T3171] ? __fget_files+0x2a/0x420 [ 1086.070656][ T3171] ? __fget_files+0x3a0/0x420 [ 1086.070755][ T3171] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1086.070896][ T3171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1086.071010][ T3171] ? __pfx_ksys_write+0x10/0x10 [ 1086.071119][ T3171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.071190][ T3171] do_syscall_64+0x15f/0xf80 [ 1086.071259][ T3171] ? trace_irq_disable+0x3b/0x140 [ 1086.071340][ T3171] ? clear_bhb_loop+0x40/0x90 [ 1086.071425][ T3171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.071482][ T3171] RIP: 0033:0x7f1d65d9cdd9 [ 1086.071502][ T3171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.071527][ T3171] RSP: 002b:00007f1d66c6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.071549][ T3171] RAX: ffffffffffffffda RBX: 00007f1d66015fa0 RCX: 00007f1d65d9cdd9 [ 1086.071565][ T3171] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1086.071580][ T3171] RBP: 00007f1d66c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.071594][ T3171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.071606][ T3171] R13: 00007f1d66016038 R14: 00007f1d66015fa0 R15: 00007ffed2ae8f88 [ 1086.071641][ T3171] [ 1086.275756][ T3175] CPU: 0 UID: 0 PID: 3175 Comm: syz.2.8295 Not tainted syzkaller #0 PREEMPT(full) [ 1086.275788][ T3175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1086.275802][ T3175] Call Trace: [ 1086.275811][ T3175] [ 1086.275821][ T3175] dump_stack_lvl+0xe8/0x150 [ 1086.275853][ T3175] should_fail_ex+0x412/0x560 [ 1086.275892][ T3175] should_failslab+0xa8/0x100 [ 1086.275930][ T3175] __kmalloc_noprof+0xe8/0x760 [ 1086.275960][ T3175] ? bpf_test_init+0x9f/0x150 [ 1086.275993][ T3175] bpf_test_init+0x9f/0x150 [ 1086.276025][ T3175] bpf_prog_test_run_xdp+0x529/0x1160 [ 1086.276070][ T3175] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1086.276104][ T3175] ? __fget_files+0x2a/0x420 [ 1086.276136][ T3175] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1086.276165][ T3175] bpf_prog_test_run+0x2c7/0x340 [ 1086.276192][ T3175] __sys_bpf+0x643/0x950 [ 1086.276228][ T3175] ? __pfx___sys_bpf+0x10/0x10 [ 1086.276278][ T3175] ? ksys_write+0x242/0x270 [ 1086.276312][ T3175] ? __pfx_ksys_write+0x10/0x10 [ 1086.276349][ T3175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.276374][ T3175] __x64_sys_bpf+0x7c/0x90 [ 1086.276405][ T3175] do_syscall_64+0x15f/0xf80 [ 1086.276441][ T3175] ? trace_irq_disable+0x3b/0x140 [ 1086.276474][ T3175] ? clear_bhb_loop+0x40/0x90 [ 1086.276502][ T3175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.276524][ T3175] RIP: 0033:0x7f364fb9cdd9 [ 1086.276544][ T3175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.276564][ T3175] RSP: 002b:00007f3650ab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1086.276586][ T3175] RAX: ffffffffffffffda RBX: 00007f364fe15fa0 RCX: 00007f364fb9cdd9 [ 1086.276603][ T3175] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1086.276617][ T3175] RBP: 00007f3650ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.276631][ T3175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.276644][ T3175] R13: 00007f364fe16038 R14: 00007f364fe15fa0 R15: 00007ffd5cc93068 [ 1086.276681][ T3175] [ 1086.594972][ T3188] tipc: Enabled bearer , priority 0 [ 1086.617308][ T3188] syzkaller0: entered promiscuous mode [ 1086.622872][ T3188] syzkaller0: entered allmulticast mode [ 1086.666045][ T3188] tipc: Resetting bearer [ 1086.717935][ T3187] tipc: Resetting bearer [ 1086.791693][ T3187] tipc: Disabling bearer [ 1087.166725][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.377496][ T3236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8308'. [ 1087.387954][ T3237] FAULT_INJECTION: forcing a failure. [ 1087.387954][ T3237] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.401069][ T3236] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8308'. [ 1087.421517][ T3237] CPU: 1 UID: 0 PID: 3237 Comm: syz.3.8307 Not tainted syzkaller #0 PREEMPT(full) [ 1087.421548][ T3237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1087.421563][ T3237] Call Trace: [ 1087.421572][ T3237] [ 1087.421582][ T3237] dump_stack_lvl+0xe8/0x150 [ 1087.421613][ T3237] should_fail_ex+0x412/0x560 [ 1087.421648][ T3237] should_failslab+0xa8/0x100 [ 1087.421684][ T3237] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1087.421716][ T3237] ? __alloc_skb+0x186/0x7d0 [ 1087.421741][ T3237] ? __alloc_skb+0x1d0/0x7d0 [ 1087.421763][ T3237] ? __local_bh_enable_ip+0xd0/0x130 [ 1087.421792][ T3237] __alloc_skb+0x1d0/0x7d0 [ 1087.421824][ T3237] netlink_sendmsg+0x5d4/0xb40 [ 1087.421864][ T3237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.421896][ T3237] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1087.421926][ T3237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1087.421961][ T3237] ____sys_sendmsg+0x972/0x9f0 [ 1087.421990][ T3237] ? __might_fault+0xaf/0x130 [ 1087.422026][ T3237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1087.422066][ T3237] ? import_iovec+0x73/0xa0 [ 1087.422102][ T3237] ___sys_sendmsg+0x2a5/0x360 [ 1087.422130][ T3237] ? __lock_acquire+0x6b5/0x2cf0 [ 1087.422160][ T3237] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.422227][ T3237] ? __fget_files+0x2a/0x420 [ 1087.422253][ T3237] ? __fget_files+0x3a0/0x420 [ 1087.422292][ T3237] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1087.422325][ T3237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.422366][ T3237] ? __pfx_ksys_write+0x10/0x10 [ 1087.422408][ T3237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.422432][ T3237] do_syscall_64+0x15f/0xf80 [ 1087.422467][ T3237] ? trace_irq_disable+0x3b/0x140 [ 1087.422500][ T3237] ? clear_bhb_loop+0x40/0x90 [ 1087.422531][ T3237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.422553][ T3237] RIP: 0033:0x7f0d5bd9cdd9 [ 1087.422574][ T3237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.422593][ T3237] RSP: 002b:00007f0d5ccc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.422615][ T3237] RAX: ffffffffffffffda RBX: 00007f0d5c016090 RCX: 00007f0d5bd9cdd9 [ 1087.422632][ T3237] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1087.422646][ T3237] RBP: 00007f0d5ccc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.422660][ T3237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.422673][ T3237] R13: 00007f0d5c016128 R14: 00007f0d5c016090 R15: 00007ffdee4b0658 [ 1087.422707][ T3237] [ 1087.678856][T11966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.697727][ T3236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8308'. [ 1087.706737][ T3236] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8308'. [ 1087.716857][T12313] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.725134][T12313] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.736133][T12313] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.744432][T12313] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1088.425394][ T3269] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1088.469720][ T3277] lo speed is unknown, defaulting to 1000 [ 1088.527701][ T3284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8320'. [ 1088.699370][ T3290] 8021q: VLANs not supported on ipvlan1 [ 1088.789175][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.088906][T12315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.571482][ T3334] netlink: 'syz.2.8336': attribute type 12 has an invalid length. [ 1089.716562][ T3341] syzkaller1: entered promiscuous mode [ 1089.746343][ T3341] syzkaller1: entered allmulticast mode [ 1089.911494][ T3347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8339'. [ 1089.922295][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.069252][ T3347] netlink: 'syz.3.8339': attribute type 21 has an invalid length. [ 1090.079231][ T3349] lo speed is unknown, defaulting to 1000 [ 1090.304521][ T3339] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8335'. [ 1091.086713][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.165017][ T3372] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1091.748137][ T3397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8342'. [ 1092.001203][ T3372] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8342'. [ 1092.143288][ T3413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8356'. [ 1092.199127][ T3415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8355'. [ 1092.220750][ T6637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.249176][ T3415] bond1: option mode: unable to set because the bond device has slaves [ 1092.930991][ T6637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.255754][ T3477] netlink: 'syz.1.8375': attribute type 1 has an invalid length. [ 1093.313803][ T3477] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1093.356274][ T383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.387628][ T3477] bond8: (slave geneve2): making interface the new active one [ 1093.420771][ T3477] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 1093.764844][ T3501] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8381'. [ 1094.208148][ T383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.467026][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.764094][ T3546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8392'. [ 1094.820593][ T3548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8393'. [ 1095.174584][ T3555] lo speed is unknown, defaulting to 1000 [ 1095.213296][ T3566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8400'. [ 1095.397337][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8402'. [ 1095.439196][ T3585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8402'. [ 1095.596829][ T6637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.398063][ T3612] netlink: 'syz.3.8409': attribute type 1 has an invalid length. [ 1096.544702][ T3612] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1096.649318][ T3622] bond14: (slave veth9): Enslaving as an active interface with a down link [ 1096.695045][ T3631] xt_bpf: check failed: parse error [ 1096.738223][ T383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.071541][ T3644] macsec2: entered promiscuous mode [ 1097.088292][ T3644] ip6gretap0: entered promiscuous mode [ 1097.108268][ T3644] macsec2: entered allmulticast mode [ 1097.121738][ T3644] ip6gretap0: entered allmulticast mode [ 1097.131624][ T3644] ip6gretap0: left allmulticast mode [ 1097.139396][ T3644] ip6gretap0: left promiscuous mode [ 1097.150767][ T3650] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8419'. [ 1097.354079][ T3655] "syz.2.8422" (3655) uses obsolete ecb(arc4) skcipher [ 1097.392575][ T3662] xt_bpf: check failed: parse error [ 1097.900681][T12311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.902996][ T3687] skbuff: bad partial csum: csum=65506/2 headroom=168 headlen=65526 [ 1097.920850][ T3687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8433'. [ 1098.114815][ T3696] bond9: Removing last ns target with arp_interval on [ 1098.232019][ T3700] xt_bpf: check failed: parse error [ 1098.495392][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8440'. [ 1098.688087][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.884696][ T3725] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8443'. [ 1098.910843][ T3725] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8443'. [ 1098.939381][ T3725] netlink: 'syz.5.8443': attribute type 1 has an invalid length. [ 1099.036355][T11965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.172848][ T3739] netlink: 'syz.1.8451': attribute type 1 has an invalid length. [ 1099.368865][ T3746] syz_tun: entered allmulticast mode [ 1099.394038][ T3747] veth0_to_batadv: entered allmulticast mode [ 1099.430921][ T3747] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1099.719962][ T3760] lo speed is unknown, defaulting to 1000 [ 1099.923807][ T3775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8460'. [ 1099.967827][T12319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.121796][ T3780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8463'. [ 1100.146023][ T3780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8463'. [ 1100.166455][ T1008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.312410][ T3784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8465'. [ 1101.269671][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8468'. [ 1101.279877][ T3796] bond1: option mode: unable to set because the bond device has slaves [ 1101.283770][ T1008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.409938][ T3800] vlan0: left promiscuous mode [ 1101.421058][ T3800] macvlan0: left promiscuous mode [ 1101.461930][ T3800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1101.474460][ T3800] bridge2: left promiscuous mode [ 1101.480770][ T3800] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 1101.552463][ T3802] xt_bpf: check failed: parse error [ 1101.612939][ T3804] netlink: 'syz.5.8472': attribute type 3 has an invalid length. [ 1102.207217][ T1008] ------------[ cut here ]------------ [ 1102.216744][ T1008] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 1102.224303][ T1008] shift exponent 64 is too large for 64-bit type 'unsigned long' [ 1102.232409][ T1008] CPU: 1 UID: 0 PID: 1008 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1102.232435][ T1008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1102.232450][ T1008] Workqueue: events_unbound conn_resize_work_handler [ 1102.232490][ T1008] Call Trace: [ 1102.232499][ T1008] [ 1102.232509][ T1008] dump_stack_lvl+0xe8/0x150 [ 1102.232538][ T1008] ubsan_epilogue+0xa/0x30 [ 1102.232568][ T1008] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 1102.232608][ T1008] ? __lock_acquire+0x6b5/0x2cf0 [ 1102.232639][ T1008] ip_vs_rht_desired_size+0x2cf/0x410 [ 1102.232659][ T1008] conn_resize_work_handler+0x1b6/0x14c0 [ 1102.232683][ T1008] ? __lock_acquire+0x6b5/0x2cf0 [ 1102.232703][ T1008] ? do_raw_spin_lock+0x12b/0x2f0 [ 1102.232733][ T1008] ? do_raw_spin_unlock+0xf5/0x210 [ 1102.232759][ T1008] ? __pfx_conn_resize_work_handler+0x10/0x10 [ 1102.232783][ T1008] ? process_scheduled_works+0xa70/0x1860 [ 1102.232808][ T1008] ? process_scheduled_works+0xa70/0x1860 [ 1102.232824][ T1008] ? process_scheduled_works+0xa70/0x1860 [ 1102.232843][ T1008] process_scheduled_works+0xb5d/0x1860 [ 1102.232886][ T1008] ? __pfx_process_scheduled_works+0x10/0x10 [ 1102.232907][ T1008] ? assign_work+0x3d5/0x5e0 [ 1102.232926][ T1008] worker_thread+0xa53/0xfc0 [ 1102.232964][ T1008] kthread+0x388/0x470 [ 1102.232985][ T1008] ? __pfx_worker_thread+0x10/0x10 [ 1102.232999][ T1008] ? __pfx_kthread+0x10/0x10 [ 1102.233020][ T1008] ret_from_fork+0x514/0xb70 [ 1102.233040][ T1008] ? __pfx_ret_from_fork+0x10/0x10 [ 1102.233056][ T1008] ? __switch_to+0xc79/0x1410 [ 1102.233089][ T1008] ? __pfx_kthread+0x10/0x10 [ 1102.233111][ T1008] ret_from_fork_asm+0x1a/0x30 [ 1102.233143][ T1008] [ 1102.233149][ T1008] ---[ end trace ]--- [ 1102.406273][T30189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.414633][ T1008] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1102.421978][ T1008] CPU: 1 UID: 0 PID: 1008 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1102.431486][ T1008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1102.441589][ T1008] Workqueue: events_unbound conn_resize_work_handler [ 1102.448329][ T1008] Call Trace: [ 1102.451651][ T1008] [ 1102.454603][ T1008] vpanic+0x56c/0xa60 [ 1102.458611][ T1008] ? __pfx_vpanic+0x10/0x10 [ 1102.463136][ T1008] panic+0xc5/0xd0 [ 1102.466885][ T1008] ? __pfx_panic+0x10/0x10 [ 1102.471371][ T1008] ? __pfx__printk+0x10/0x10 [ 1102.476026][ T1008] ? dump_stack_lvl+0x103/0x150 [ 1102.480923][ T1008] check_panic_on_warn+0x89/0xb0 [ 1102.485930][ T1008] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 1102.492409][ T1008] ? __lock_acquire+0x6b5/0x2cf0 [ 1102.497396][ T1008] ip_vs_rht_desired_size+0x2cf/0x410 [ 1102.502801][ T1008] conn_resize_work_handler+0x1b6/0x14c0 [ 1102.508487][ T1008] ? __lock_acquire+0x6b5/0x2cf0 [ 1102.513479][ T1008] ? do_raw_spin_lock+0x12b/0x2f0 [ 1102.518570][ T1008] ? do_raw_spin_unlock+0xf5/0x210 [ 1102.523744][ T1008] ? __pfx_conn_resize_work_handler+0x10/0x10 [ 1102.529873][ T1008] ? process_scheduled_works+0xa70/0x1860 [ 1102.535633][ T1008] ? process_scheduled_works+0xa70/0x1860 [ 1102.541369][ T1008] ? process_scheduled_works+0xa70/0x1860 [ 1102.547117][ T1008] process_scheduled_works+0xb5d/0x1860 [ 1102.552722][ T1008] ? __pfx_process_scheduled_works+0x10/0x10 [ 1102.558723][ T1008] ? assign_work+0x3d5/0x5e0 [ 1102.563352][ T1008] worker_thread+0xa53/0xfc0 [ 1102.568003][ T1008] kthread+0x388/0x470 [ 1102.572104][ T1008] ? __pfx_worker_thread+0x10/0x10 [ 1102.577233][ T1008] ? __pfx_kthread+0x10/0x10 [ 1102.581861][ T1008] ret_from_fork+0x514/0xb70 [ 1102.586542][ T1008] ? __pfx_ret_from_fork+0x10/0x10 [ 1102.591673][ T1008] ? __switch_to+0xc79/0x1410 [ 1102.596377][ T1008] ? __pfx_kthread+0x10/0x10 [ 1102.601008][ T1008] ret_from_fork_asm+0x1a/0x30 [ 1102.605833][ T1008] [ 1102.609638][ T1008] Kernel Offset: disabled [ 1102.614034][ T1008] Rebooting in 86400 seconds..