last executing test programs: 2m42.663860795s ago: executing program 2 (id=2663): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000000e14755b26bd7000fedbdf250800030001000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2m42.476628365s ago: executing program 2 (id=2667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x40}}, 0x0) 2m41.846499056s ago: executing program 2 (id=2674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x6a1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2m41.661425167s ago: executing program 2 (id=2678): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x126}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x7, 0x8, 0x0, 0x0, @str='Y-\x00'}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 2m41.472382818s ago: executing program 2 (id=2680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}}, 0x0) 2m41.403477018s ago: executing program 2 (id=2682): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m39.644416386s ago: executing program 4 (id=2717): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x5, 0x0, &(0x7f0000000540)='GPL\x00'}, 0x94) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x10}, {&(0x7f0000000640)=ANY=[@ANYBLOB], 0x10}], 0x2}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, 0x0, 0x2000800) sendmmsg(r1, &(0x7f0000000440), 0x4000000000001f2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x1000000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_INFO(r6, 0x80106f05, &(0x7f0000005440)={&(0x7f0000005280)=[0x0, 0x0, 0x0, &(0x7f00000011c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001200)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x100000000}}, &(0x7f0000001240)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000001280)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f00000012c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x9bb, 0x6}, {0xfffffffffffffffd, 0x2}, {0x1}, {0x4}, {0x7, 0x3}, {0x9, 0x58}, {0x8000, 0x80000001}, {0xffffffff, 0x8001}, {0xfffffffffffffffa, 0x7940}, {0x100, 0x8}, {0x9, 0x2}, {0x3, 0x6}, {0x100, 0x6}, {0x5, 0x1}, {0x0, 0x1ff}, {0xfffffffffffffe00, 0x7}, {0xd2d1, 0x7ab6ff2a}, {0x400, 0x80000000}, {0x1, 0x2}, {0x8, 0x6}, {0xfffffffffffffff8}, {0x5400000000000000, 0x1}, {0x6, 0x9}, {0x1, 0x8001}, {0x0, 0x9}, {0x40, 0x5}, {0xffffffff, 0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0x4}, {0xfffffffffffffff8, 0x9}, {0xc, 0x63d}, {0x8, 0x7}, {0x7, 0x5}, {0xffffffffffff8000}, {0x2, 0x1}, {0x1, 0xa}, {0xfffffffffffffffe, 0x1}, {0xff, 0x9}, {0x1, 0xa74}, {0xffffffffffffffff, 0x6000000000}, {0x6, 0x9}, {0x3}, {0x9, 0x5}, {0x7f, 0x100000000}, {0x7fff, 0x7fff}, {0x1, 0xfffffffffffffffd}, {0x200, 0x4}, {0x7fff, 0x8}, {0x3, 0xa9}, {0x0, 0x6}, {0x100000001, 0x8}, {0xffffffffffffffff, 0x63ba}, {0x0, 0x8001}, {0x10000, 0x5}, {0x9, 0x401}, {0x8000000000000001, 0x9}, {0x7, 0x1}, {0xfffffffffffffff8}, {0x80000000, 0x3}, {0x1, 0x2f}, {0x1, 0x3}, {0x10001, 0x5}, {0x18, 0x5}, {0xf, 0x4}, {0x511, 0x101}, {0x8, 0xbc}, {0x5, 0x8}, {0x9, 0x2}, {0x120000000, 0xfffffffffffff075}, {0x9, 0x1}, {0xa66, 0x1}, {0x700000000000, 0x3d0}, {0x7fffffffffffffff, 0x1}, {0xae, 0x100000000}, {0x6, 0x8000000000000001}, {0x4}, {0x1}, {0x6, 0x5}, {0xffffffffffffffff, 0x4}, {0x7, 0x80000000}, {0x4, 0x8}, {0x1, 0x4}, {0x80, 0x1}, {0x3, 0x10001}, {0x8000000000000000, 0xed}, {0xffffffffffffffff, 0x1}, {0xc86d, 0x8}, {0x3, 0x7}, {0x10001, 0x3e}, {0x1, 0xd40}, {0x101, 0x2d}, {0x9b77, 0x101}, {0xfa5, 0x9}, {0x3, 0x6}, {0x1}, {0x0, 0x9}, {0x7}, {0x8, 0x8}, {0x1, 0x9}, {0x10, 0xc}, {0x2, 0x2}, {0x0, 0x86}, {0x10, 0xffffffffffffffff}, {0x10001, 0x8}, {0x1, 0x7}, {0x9, 0xe32}, {0x3, 0x585}, {0x400, 0x1}, {0x1, 0x1}, {0x8, 0x4}, {0xfffffffffffffff8, 0x3}, {0x4}, {0x7, 0x4}, {0x9, 0x2}, {0x5, 0x4}, {0x8, 0x2}, {0x5, 0x7}, {0x7, 0x3}, {0x400, 0x1ff}, {0x3, 0x6}, {0x7e08, 0x1}, {0x3, 0xfffffffffffffffd}, {0x9, 0x7e73abd7}, {0x100, 0xba2a}, {0x3ecd, 0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x1}, {0x86, 0x9}, {0x7a4, 0x5}, {0x6, 0x2}, {0x4, 0x8}, {0x100, 0x4ef4}, {0x2, 0x8025}, {0x1, 0x7fffffffffffffff}, {0x9, 0x234}, {0x200, 0x5b}, {0x31, 0x7}, {0x1000, 0x28}, {0x6, 0x6}, {0x2, 0x7}, {0x3, 0xfe}, {0x100, 0x1}, {0x6, 0x3}, {0xffffffffffffff2f, 0x2}, {0x7, 0x7}, {0x3, 0x401}, {0x8, 0xffffffffffffffff}, {0x0, 0xebf1}, {0xc, 0xf79}, {0x5, 0x5}, {0x4d, 0x6}, {0x200, 0x371}, {0x8001, 0x7}, {0xffffffffffffffff, 0x6}, {0x4, 0xfffffffffffff000}, {0xfff, 0x1}, {0x36a1, 0x8}, {0x10, 0x80000001}, {0x67, 0x7}, {0xffffffff, 0x5}, {0x7, 0xd}, {0x1b34, 0x6}, {0x78, 0x9}, {0x1, 0x6}, {0x330, 0x10}, {0x10000, 0x2}, {0xd96c, 0x4}, {0xf397, 0x4}, {0xffffffff, 0x7}, {0x3ed, 0x4}, {0x7, 0x2}, {}, {0xffff, 0x7ff}, {0xffffffff80000000, 0xffffffff}, {0xe796, 0xab4}, {0x7, 0x1}, {0x1, 0x1e}, {0x2, 0x400}, {0x9b77, 0x2}, {0x1, 0x6}, {0x4, 0x80000001}, {0x9, 0x8}, {0xf1f6000000000000, 0x4}, {0x5, 0x10}, {0x5, 0x3}, {0x5, 0x8}, {0x6, 0xf046}, {0x5, 0x81}, {0x63, 0xb631}, {0x1, 0x47}, {0x8, 0x5}, {0x214}, {0x2, 0x5}, {0x1, 0x7f}, {0x0, 0x10}, {0x5, 0x598}, {0x61b6, 0x3}, {0xc, 0x10000}, {}, {0x9, 0x9}, {0x8, 0xb}, {0x7fffffff, 0x8}, {0x7, 0x6}, {0xf776, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x9, 0x3}, {0x4, 0x4}, {0x6, 0x7ff}, {0x3, 0x3}, {0x5, 0x3}, {0x6, 0x800}, {0x8, 0x3}, {0x7b63, 0x9}, {0x8, 0x80}, {0x3, 0x2}, {0x6, 0x2}, {0xfffffffffffffffb, 0x1}, {0x0, 0x1}, {0x2d, 0xa88a}, {0x0, 0x3}, {0xcb, 0x3}, {0x7fffffffffffffff, 0x1}, {0x81, 0x8000000000000001}, {0x5, 0x8000}, {0x9, 0xfffffffffffffff4}, {0xe8, 0x6}, {0x0, 0x1c}, {0x8, 0x761}, {0x52fd554b, 0x80}, {0x74, 0x5}, {0xffff, 0x3}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0x2}, {0xb6, 0x5}, {0x0, 0x8f7}, {0x8a32, 0x5}, {0x5, 0x7ff}, {0x10000, 0x80}, {0xe9, 0x87a}, {0x9, 0x476c}, {0x5, 0x7}, {0x9, 0x10000}, {0x7, 0xfffffffffffffff2}, {0x84, 0x2}, {0x0, 0xfffffffffffffffc}, {0x8, 0xffffffffffff6934}, {0x7ff, 0xa}, {0x3}, {0xd, 0x5900000000000}, {0x0, 0x3}, {0x11e8, 0xff35}]}, &(0x7f0000002300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002340)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f00000023c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, 0x0, 0x0, &(0x7f00000024c0)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000002500)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000002540)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000002580)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, 0x0, &(0x7f0000002600)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, 0x0, &(0x7f0000002680)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x8}, 0x0, &(0x7f0000002800)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, 0x0, &(0x7f00000029c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f0000002a00)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000002a80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x2}, &(0x7f0000002bc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000002c00)=@clustersize={{0x4f32494e, 0x1, 0x10}}, 0x0, &(0x7f0000002c80)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002cc0)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000002d00)=@maxslots={{0x4f32494e, 0x3, 0x10}}, 0x0, &(0x7f0000002d80)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002dc0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000002e00)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000002e40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000002e80)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000002f00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000002f40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000002f80)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000002fc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0xffff, 0x4}, {0x7ff, 0x7}, {0x8, 0x55c}, {0x7ff, 0x9}, {0x7fff, 0x9}, {0x1, 0x1ff}, {0x1, 0x1}, {0xfae, 0x5}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x6}, {0x3f9a8fcf, 0x9a}, {0x4, 0x7fff}, {0x0, 0x8}, {0x0, 0x1}, {0x100, 0x57d}, {0x8, 0x7}, {0x42c9, 0xe7}, {0x7, 0x6e}, {0x8, 0x2}, {0x7ff, 0x1ff}, {0x40000000000000, 0x6}, {0x7, 0x2}, {0x7, 0x10}, {0x5, 0x5}, {0x1, 0x4}, {0x7, 0xca}, {0xe4, 0x7}, {0x9, 0x6}, {0x6ef14b12, 0x6}, {0x6, 0xc42}, {0x7, 0xfffffffffffffffb}, {0x1, 0xc}, {0xfffffffffffffffe, 0x5}, {0xac, 0xb2d}, {0x8, 0x8}, {0x1}, {0x100, 0xcb49}, {0x0, 0x2}, {0x60a, 0x3}, {0xffffffff, 0x7}, {0x8, 0xffffffffffff9ffa}, {0x7f, 0x9}, {0xef, 0xfffffffffffffffb}, {0x75d, 0x975}, {0x8, 0x8000}, {0x400, 0x6000000000000}, {0x1, 0x1}, {0x8f1, 0x100}, {0xe}, {0x7, 0x7}, {0x9, 0x6}, {0xf, 0x8}, {0xde0b, 0x1}, {0x8, 0x3}, {0x100000001, 0x8000}, {0x84f, 0xdde7}, {0x1, 0x2caf}, {0x7ff, 0x5}, {0xfffffffffffffff0, 0x3}, {0x1800000000, 0xfffffffffffffff8}, {0x9, 0x5}, {0x5, 0x1}, {0xffff, 0x4}, {0x6, 0xfffffffffffffff0}, {0x4, 0x8}, {0xd567, 0xf}, {0x5, 0x8}, {0x2, 0x401}, {0x7c5b, 0x7}, {0x3, 0x7bf5fd1c}, {0x7, 0x3}, {0x2, 0x1}, {0x6, 0x80}, {0x8, 0x8}, {0x800, 0x81}, {0x6e, 0x9}, {0x3}, {0x4, 0x2}, {0x2, 0x6390}, {0x5, 0x100000001}, {0xffff, 0xd}, {0x1, 0x1ff}, {0x7, 0x17cf}, {0x5, 0x38c1}, {0x4, 0xc000000000}, {0x2, 0xb5dd}, {0x0, 0x800}, {0x7fff, 0x3}, {0x53fc, 0x6}, {0x8, 0x94}, {0x10, 0x7}, {0x7, 0x3}, {0xfffffffffffffff7, 0x8}, {0x2, 0x6}, {0x56c, 0x942}, {0x1ff, 0x9}, {0x1, 0x46}, {0x7fff, 0x4}, {0x7}, {0x2, 0x92}, {0x6, 0x85}, {0xffffffffffffff3a, 0x9}, {0x1, 0x8}, {0xfffffffffffffffa, 0x4f1a}, {0xfffffffffffffffc, 0x3}, {0x4678, 0x38f}, {0x8, 0x9}, {0x8, 0x8}, {0x298b, 0x7}, {0x396b, 0x3}, {0x831, 0x3}, {0x3, 0x6}, {0x6, 0x1}, {0x6, 0x1000}, {0x7, 0x10001}, {0x8, 0x9}, {0x80, 0x6}, {0x7c8, 0x5}, {0x2, 0x6}, {0xa, 0x1}, {0xfff, 0x3}, {0x8, 0x5}, {0x100000000, 0x4}, {0x2, 0x58c2}, {0x9, 0x23}, {0x800, 0xa3f1}, {0xe4da, 0x5}, {0x1000, 0xffffffff}, {0x3, 0x8}, {0x100000001, 0xb58}, {0xf6, 0x5}, {0x0, 0x3}, {0x4, 0x200}, {0x6, 0x94}, {0x85b, 0x8000000000000001}, {0x5, 0x800}, {0xb, 0x5f}, {0x7ff, 0x6}, {0x7f, 0x1}, {0x9, 0xffffffffffffffff}, {0xb62f, 0x8}, {0x7fffffff, 0x10001}, {0x7, 0x2}, {0x9, 0xffffffffffffffff}, {0x81, 0x1}, {0x0, 0x8000}, {0x9, 0x4}, {0xbca6, 0x6}, {0x1, 0x7}, {0x0, 0xfff}, {0x3a09, 0x5083}, {0x9, 0x1000}, {0x0, 0x2}, {0x3ff, 0x300d3496}, {0x1, 0x2}, {0x8, 0xffffffffffffff81}, {0x1, 0x8}, {0x3, 0x1ca}, {0x100000001, 0x4}, {0x3, 0x3}, {0x26, 0x4}, {0x8, 0x7}, {0xffffffffffffffff, 0x200}, {0x8, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0xfff, 0x2}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x7}, {0xc1, 0x4}, {0x10001, 0x3}, {0x200}, {0x7b, 0x7}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x713b0659}, {0x7, 0x80}, {0x6, 0x7fffffff}, {0x80000001}, {0xfffffffffffffff8, 0x2}, {0x7ff, 0x3a}, {0x9, 0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x80, 0x2}, {0x3, 0x1e148000}, {0x0, 0x4}, {0x361, 0x3ff}, {0x69, 0x5}, {0x5, 0x81}, {0x8, 0xfffffffffffffffb}, {0x7, 0x7fffffffffffffff}, {0x56, 0xfff}, {0x5, 0xe01500}, {0x0, 0xfff}, {0xffff, 0xe000}, {0x80000000000000, 0x1}, {0x80000001, 0x2}, {0x4, 0xfffffffffffffffa}, {0x2, 0x100000000}, {0x2, 0xfffffffffffffffd}, {0x9, 0xffffffffffffffff}, {0x1, 0x3}, {0x9, 0xcf1}, {0x2, 0x7fffffffffffffff}, {0x1, 0x6}, {0x2, 0xfffffffffffffffc}, {0x4, 0x7}, {0x4, 0x4}, {0xffffffff, 0x5}, {0x80, 0x50c}, {0x5, 0x2}, {0x8001, 0xb}, {0xffffffffffff8001, 0x402d}, {0x455, 0x7ff}, {0x8de9, 0x8}, {0x0, 0x7ff1}, {0x2, 0x200}, {0x9a6, 0x7f03}, {0xf, 0xe15f}, {0x8, 0x69e9}, {0x3, 0x1}, {0x95b, 0x7fffffff}, {0xf, 0x4}, {0x7, 0x4b13}, {0x3, 0x1}, {0x1ff, 0xcaf}, {0x3, 0x8a50}, {0x3}, {0xc6, 0x3}, {0x100000001, 0x662}, {0x0, 0x33}, {0x7f, 0x4}, {0x1, 0xffff}, {0x1, 0xe4}, {0x4, 0x8000}, {0x1ac, 0x6}, {0x2, 0xb09}, {0x6}, {0x100000000, 0x1ff}, {0x6, 0x7fff}, {0x3ff, 0x6}, {0x1ffe000000, 0xfffffffffffffff8}, {0x5, 0x4}, {0x2, 0x3}, {0x6, 0xde9}, {0x6, 0xb0d}, {0x2, 0x7f}, {0x2, 0x67e}, {0x6, 0x7c}, {0x3ff, 0x1}, {0x8000, 0x8}, {0xb5, 0x8e33}]}, &(0x7f0000004000)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x43ec}, 0x0, &(0x7f0000004180)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f00000041c0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004200)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x4, 0xd6}, {0x6, 0x3}, {0x4f22, 0x3a}, {0xa, 0xfffffffffffffff8}, {0x10001, 0xee}, {0x9, 0x7fff}, {0x4}, {0x4, 0x491}, {0xe7d, 0x1}, {0x3, 0x7}, {0xda0f, 0x5}, {0x101, 0x8000}, {0x6f6f, 0xffffffff}, {0xffffffff, 0x4}, {0x8000000000000000, 0x7}, {0x3, 0xb}, {0xffffffffffffffff, 0x5}, {0x42, 0x6}, {0x6, 0x3}, {0x8, 0xffffffffffffff7f}, {0xfffffffffffffffa, 0x7}, {0x7, 0x6}, {0x4, 0x6}, {0x3, 0x9}, {0x975, 0x3}, {0x7, 0x1}, {0x7, 0xe8}, {0x81, 0x3}, {0x8, 0x7ff}, {0x7f, 0x4}, {0x8, 0xc}, {0xc5, 0xa1}, {0x9, 0x1}, {0x9, 0xc22}, {0x7fffffff, 0xf0}, {0x22, 0x6}, {0xe6, 0x3}, {0xf107, 0x4}, {0x11, 0x7}, {0x1000, 0x4fa}, {0x0, 0xdc34}, {0x0, 0x195}, {0x8a0, 0xbaa7}, {0xfffffffffffffffb, 0x401}, {0x9, 0x3}, {0x8000000000000001, 0x4}, {0x8, 0x7fffffffffffffff}, {0x7, 0xc}, {0x0, 0x4}, {0x3, 0x3}, {0x9, 0x3}, {0x8000000000000000, 0x40}, {0x0, 0xffffffff}, {0x400, 0x9}, {0x7fff, 0x7fffffff}, {0x0, 0xfffffffffffffff8}, {0x7fffffffffffffff, 0xff}, {0x1, 0xad42}, {0xa, 0xb}, {0x7fff, 0xd33}, {0xe850, 0x6}, {0xfc22}, {0xfffffffffffff27c, 0xd}, {0x8000, 0x6}, {0x4, 0xfffffffffffffff6}, {0xfffffffffffffffc, 0x10000}, {0xfffffffffffff000, 0x1}, {0x4, 0x6a}, {0xb8ae, 0x8}, {0xe, 0x9}, {0x4, 0x80}, {0x1ff}, {0x7, 0xfffffffffffff16b}, {0xa, 0xffffffffffff4788}, {0x5da, 0x5}, {0x6}, {0x6, 0x4c9}, {0x8, 0x5}, {0xfff, 0xfff}, {0x2, 0x5}, {0x3ff, 0x8}, {0x1ff, 0xce}, {0xfb9570c, 0x2}, {0x0, 0x2}, {0xffff, 0x8}, {0x4, 0xfffffffffffffc01}, {0x5, 0x7fffffff}, {0x4, 0x4}, {0x2, 0xd7bc}, {0x2, 0x2e4}, {0x100000000, 0xb94}, {0x4, 0x3}, {0x1000, 0x8}, {0x5, 0x9}, {0x2a, 0x10001}, {0x7fffffffffffffff, 0x6}, {0xfffffffffffffff7, 0x5}, {0x4, 0x210000}, {0x5, 0x1}, {0xcae5, 0x15d5}, {0x7, 0x3}, {0x2, 0x40}, {0x2c, 0x7fffffff}, {0x9, 0xdb9}, {0x629, 0x3d5d}, {0x5, 0x4}, {0xe5b, 0x100000001}, {0x0, 0x2}, {0x5016a37e, 0x71d}, {0x9, 0x7}, {0x6, 0x5}, {0xfffffffffffffffb, 0xb9}, {0xb, 0x1}, {0x3, 0x1ff}, {0xb, 0x1}, {0x7, 0x1}, {0x8, 0x81}, {0x6, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x7a23}, {0x80000000}, {0x9, 0xb8}, {0x1}, {0x1, 0x8}, {0x9bde, 0x10000}, {0x53}, {0x80000000, 0x6}, {0x7ef, 0x9}, {0x0, 0x5}, {0xc52, 0x5}, {0x7, 0x3}, {0xb, 0x48}, {0x9, 0xfffffffffffffffd}, {0x1}, {0x7b20, 0x3}, {0x8, 0x592}, {0x2, 0x80}, {0xd295d51, 0x7}, {0x401, 0x6}, {0xfffffffffffffff7, 0x6}, {0x3, 0xbb1}, {0x3, 0x6bf}, {0x2}, {0x4, 0x3ffb6328}, {0x2, 0x7}, {0x9113, 0x3}, {0x80000001, 0x4}, {0x10001, 0x10}, {0x3f000, 0x8000000000000000}, {0x9, 0x6}, {0x2, 0x7f}, {0x9, 0x7f}, {0xffffffffffffffff, 0xa}, {0x7f, 0x1}, {0x6, 0xb57}, {0x9, 0x100000001}, {0xffff, 0x8}, {0x600000000, 0x3}, {0x8, 0x1}, {0x40, 0xa}, {0xf96}, {0x7f, 0x1643}, {0x100, 0x4}, {0x3ff, 0x57}, {0x8, 0x9}, {0xffffffff, 0xd4}, {0xffffffffffffffff, 0x4}, {0xa3}, {0x0, 0xeb51}, {0x7359, 0x2}, {0xfffffffffffffffe, 0x1}, {0x5, 0x12}, {0xffffffffffff8001, 0x8d69}, {0x100, 0x3}, {0x4a, 0x6d}, {0x8, 0x7}, {}, {0x0, 0x10001}, {0xfffffffffffff001, 0x81}, {0x6, 0x645c}, {0x40, 0xfffffffffffff001}, {0x2, 0x200000000000}, {0x400, 0x9}, {0x0, 0x1}, {0xce, 0x800}, {0xd8d, 0x8000000000000001}, {0x1, 0x67ae}, {0x3d8000000, 0x1}, {0x7fbf, 0xfd}, {0x7d3, 0x95c8}, {0x3, 0x1000}, {0x3, 0x2}, {0x7fffffff, 0x7fffffffffffffff}, {0xbe7, 0x401}, {0xff}, {0x5, 0x3}, {0x6, 0x4}, {0x9ce, 0x8}, {0x8000000000000000, 0x3}, {0x227b52e1, 0x100}, {0x3f, 0x5}, {0xc280, 0xffffffffffffffff}, {0x200, 0x2}, {0x2, 0x8461}, {0x80000001, 0x1}, {0x7, 0x510}, {0x7, 0x7}, {0x7, 0xf}, {0x2, 0x6}, {0x9, 0x7}, {0xfffffffffffffffd, 0x6}, {0x0, 0x8}, {0x3}, {0x5, 0x6ee}, {0x48, 0x81}, {0x8, 0x5}, {0x1, 0x45}, {0x5, 0x2}, {0xf, 0x10001}, {0x8000, 0x8001}, {0xffffffffffffffff, 0x9}, {0x4, 0x8001}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x8}, {0x6, 0x10}, {0x1, 0x10000}, {0x9, 0x2}, {0x7, 0x4}, {0x35d, 0x100000000}, {0x800, 0x3}, {0x0, 0x4}, {0x5c24, 0x100000000}, {0x3, 0xb}, {0x100000000, 0xa}, {0xcbf, 0x2}, {0x10000, 0x9}, {0xfffffffffffffffb, 0x5}, {0x7, 0x9}, {0x2d04, 0x509}, {0x2, 0x81}, {0x5, 0x4}, {0x1000}, {0x6e92, 0x9ad}, {0x6, 0x3}, {0x9, 0x8}, {0x4, 0xffffffffffffffff}, {0xaa, 0xe}, {0x5, 0x5}, {0x7, 0x4}, {0x5, 0x800}, {0xffffffffffffb742, 0x8000000000000001}, {0xffffffffffffffff, 0xe2}, {0x6, 0x28}]}, &(0x7f0000005240)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}], 0x32}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0xf501}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x7}, 0x38) 2m39.495085755s ago: executing program 4 (id=2719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000018c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0xcfc}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0xc, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x8, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x2}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x9}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0xffffff7f, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0x7fffffff, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x10001, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000017c0)=@xdp={0x2c, 0x8, r4, 0x1109}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="37d55af210fe", 0x6}], 0x1}, 0x20000885) 2m39.214728157s ago: executing program 4 (id=2721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 2m39.038869113s ago: executing program 4 (id=2727): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000004000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000006000)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000006040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000006080)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000060c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006100)={'veth0_to_bond\x00', 0x0}) bind$xdp(r0, &(0x7f0000006140)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f0000006180)={0x8, 0x8001, 0x3, 0x300, 0x0, 0x0, 0x9c28}, 0x0, &(0x7f00000061c0)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) 2m38.095672259s ago: executing program 4 (id=2743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000002) 2m38.020355043s ago: executing program 4 (id=2745): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 2m26.284314687s ago: executing program 32 (id=2682): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m22.867988544s ago: executing program 33 (id=2745): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 2m18.583680627s ago: executing program 3 (id=3053): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc46) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000280)="399b76", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000180)="583c485f2587569b2b3f6c5961168177f242f81057", 0x15, 0x3b00, 0x0, 0x0) 2m18.517510821s ago: executing program 3 (id=3054): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000cc0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x200400c4) 2m15.981203075s ago: executing program 3 (id=3057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$inet(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xb}, 0x40) 2m15.887353374s ago: executing program 3 (id=3059): socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0300"}) 2m15.811069902s ago: executing program 3 (id=3060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m15.460237989s ago: executing program 3 (id=3063): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) connect$can_bcm(r2, &(0x7f0000000100), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2m0.413572982s ago: executing program 34 (id=3063): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) connect$can_bcm(r2, &(0x7f0000000100), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 6.783781365s ago: executing program 7 (id=4219): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/4098, 0x1002}, {&(0x7f0000001580)=""/13, 0xd}, {&(0x7f00000015c0)=""/97, 0x61}, {&(0x7f0000001640)=""/104, 0x68}, {&(0x7f00000016c0)=""/25, 0x19}, {&(0x7f0000001700)=""/130, 0x82}, {&(0x7f00000017c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r1, &(0x7f0000001880)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r3 = socket(0xa, 0x3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001cc0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)={0x14, r5, 0x1}, 0x14}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000001ac0)={'IDLETIMER\x00'}, &(0x7f0000001b00)=0x1e) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000001b40)={0x28, 0x4, 0x8, 0x4, 0x2}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000002dc0)=@get={0x1, &(0x7f0000001dc0)=""/4096, 0xfffffffffffffff8}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x1000, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f00000018c0)='\b\x00', 0x2}, {&(0x7f0000001900)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r8) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)={0x14, r9, 0x72b, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.115407587s ago: executing program 7 (id=4230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x1, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x1ffffffc, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x2, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x1, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0xa, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x5, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x2001fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0xb, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x5, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x7, 0xfff}, {0x2cb, 0x1000b5, 0xcee4, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x1, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0xbf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000021c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000002200), 0x56) sendmsg$kcm(r6, &(0x7f0000002240)={&(0x7f0000002280)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002340)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.924038749s ago: executing program 0 (id=4232): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f0000000580)='GPL\x00'}, 0x94) pipe(&(0x7f00000005c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="060015000700fdff0c00168008000100"], 0x38}}, 0x10) 5.511911946s ago: executing program 1 (id=4236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) syz_genetlink_get_family_id$nfc(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000008"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4808) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nfc(0x0, r1) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000008"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) (async) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4808) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) (async) 2.85175327s ago: executing program 5 (id=4238): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000280)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000500)=0xc) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0xc, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x4}, @struct={0x9, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x1, 0x2, 0x3}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x1}, @enum={0x1, 0x5, 0x0, 0x6, 0x4, [{0xe, 0x9}, {0x9, 0x9f62}, {0x0, 0x9}, {0x6, 0x4}, {0x9, 0x1ff}]}, @float={0x4, 0x0, 0x0, 0x10, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0xd, 0x2}]}]}, {0x0, [0x9d, 0x61, 0x5f, 0x5f, 0x5f, 0x2e, 0x61, 0x2e, 0x5f, 0x0]}}, &(0x7f0000000a80)=""/15, 0xc4, 0xf, 0x1, 0x4}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000180)=0x80000000, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.821475243s ago: executing program 0 (id=4239): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0xc000000, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 2.774504986s ago: executing program 1 (id=4240): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/4098, 0x1002}, {&(0x7f0000001580)=""/13, 0xd}, {&(0x7f00000015c0)=""/97, 0x61}, {&(0x7f0000001640)=""/104, 0x68}, {&(0x7f00000016c0)=""/25, 0x19}, {&(0x7f0000001700)=""/130, 0x82}, {&(0x7f00000017c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r1, &(0x7f0000001880)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r3 = socket(0xa, 0x3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001cc0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)={0x14, r5, 0x1}, 0x14}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000001ac0)={'IDLETIMER\x00'}, &(0x7f0000001b00)=0x1e) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000001b40)={0x28, 0x4, 0x8, 0x4, 0x2}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000002dc0)=@get={0x1, &(0x7f0000001dc0)=""/4096, 0xfffffffffffffff8}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x1000, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f00000018c0)='\b\x00', 0x2}, {&(0x7f0000001900)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r8) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)={0x14, r9, 0x72b, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.773789097s ago: executing program 7 (id=4241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 2.54837193s ago: executing program 7 (id=4244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xfffffffd, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) 2.484490591s ago: executing program 5 (id=4245): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010001fff00000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000012620400280012800b000100697036746e6c0000180002801400020000000000000000000000000000000001080004000005004008000a0005"], 0x58}}, 0x0) (fail_nth: 33) 1.969289184s ago: executing program 0 (id=4246): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61127900000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xd}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 1.769731894s ago: executing program 5 (id=4247): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) syz_emit_ethernet(0x56, &(0x7f0000000800)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x20, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0xffd, {[@mptcp=@ack={0x1e, 0xc, 0x4, 0x4, "c0606d1b03f62691"}]}}}}}}}}, 0x0) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@updpolicy={0xb8, 0x15, 0x203, 0x70bd28, 0xffffffff, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x100, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x2}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000880)=""/4076, &(0x7f0000001880)=0xfec) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x21, 0x3, 0x338, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x8, 0x6}}}, {{@uncond, 0x0, 0x128, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x6b, 0x0, 0x5, 0x401, 0x0, 0x7, 0x5}}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x1, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19b49a3ba41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b724612"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) 1.640024357s ago: executing program 7 (id=4248): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000004000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000006000)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000006040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000006080)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000060c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006100)={'veth0_to_bond\x00', 0x0}) bind$xdp(r0, &(0x7f0000006140)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f0000006180)={0x8, 0x8001, 0x3, 0x300, 0x0, 0x0, 0x9c28}, 0x0, &(0x7f00000061c0)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @loopback}, 0x10) 1.520593257s ago: executing program 1 (id=4249): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind(r0, &(0x7f0000000000)=@generic={0x2b, "89d079df2815ae43ccda410d348bbaf2c702c43620d58cdcb15013f741d03baaac7b8af347ca8ca97c8c3809f4ce980c1cc8c67d21e7f9df75174022adfe4be24c8bdd3404567381bdb993980ee0e2e9c718953d01b39522000cc983dffd0c0b4dd1d9a48151cb47dfb833b15605350d8a722fa9893e21643cd43ffd3fd8"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtclass={0x34, 0x28, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0xc, 0xe}, {0x0, 0xfff1}}, [@TCA_RATE={0x2, 0x5, {0x9, 0x10}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x34}}, 0x4080) 1.305959727s ago: executing program 5 (id=4250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x405, 0x8000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1f}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}}, 0x4080) 1.259471133s ago: executing program 0 (id=4251): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)="2b102c3741b88f3373b7ec6ef982306d58cb6ef527156d82419428acbb085f83897d8a609bb80f351c9c3a74e34ed0ab3002f163bdc9447cc71289b7529526cd48886ecff7359e7d2a36a5d87d2b265bad6f9d60b35b34a4c39ab917b7612cbcca6fea741b3d3d0c118a570167fdce5a178b243e7f89870c35c764069a7d2e105ae54b06ddd166e85f1580b87cbfd79061615a56d6c93d8de66afa1cd97d355a34085ce70edd503efeb2248fd47f9322e2e509d16ee0ff9e573073abd936f18ebe72d31f202a3b244f3baee5546b71a254ea178ba8cb232dbad5375ca57275f169737e6680d50be0d8080593b1a0c70e582910c1b357", 0xf6) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x7, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x9, 0xe, 0x4, 0x9, 0x401}], &(0x7f0000000140)='GPL\x00', 0x6, 0x19, &(0x7f0000000180)=""/25, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xb, 0x0, 0x10001}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x3, 0x3, 0x4, 0xa}, {0x1, 0x4, 0xf, 0x7}, {0x2, 0x3, 0xf, 0x5}, {0x4, 0x5, 0x9, 0x4}, {0x5, 0x2, 0xc, 0x8}, {0x2, 0x2, 0x3}, {0x2, 0x2, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000500)={r1, 0x0, 0x98, 0x0, &(0x7f00000003c0)="643fa682031c38bcdf75444945fbc1fd9b66e08acdba1f413a1e43bce3004cd6ce575797b240566e74a15ae3c4cb077dbc463f83467adc4a6088ec98acdaeb921f304af4f099e2b5b480bdda8d00b5964f6240904a16903ef80684301c630e8ea8b512937cf1e18b0c91dc6cefcb9276f08c78f4bfa8d785ed9e95d6624a47150f58a50e8446c2b9c53cb9c7bb887d3c7e96b1c0ec83fb41", 0x0, 0xffffffff, 0x0, 0x4b, 0x0, &(0x7f0000000480)="de7a97bff64b0ba2c84e780e76f812e8b8fb11accd0810f4e4c8efc8295683a3518d886b36748b952bdbc9062dd36cda3542a0f6b290c44eaed3f532f7c36f6ed6278b520489c2952a0706", 0x0, 0x2, 0x0, 0xffffffff}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, &(0x7f0000000580), 0x0, 0x48010, &(0x7f00000005c0)={0xa, 0x8f18, 0x7, @empty, 0xe}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000600)='wg1\x00', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x4, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000740), 0x3) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xf0, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0xb8, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4be}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}]}, 0xf0}}, 0x40044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000016c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000000a00)={0xc68, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x90, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x83, 0x3, "6e9dca25874fd7a453ad924cc5230fb30d33cbe0478fcc9b46863079296e8bd73f77faa3f3d7a817dbaca3b25e0bf6759a2b1425e1b193955c955fa37c42b6c8fa5b36b6d6f40106382b7802269a05dcf420e2cb69400d269b81b9ef5262c179f8b2a6466661b58c0c20763ffaa0cf667388fc2a35ea5021343ad147ce6d82"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x3a, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0xa5, 0x8}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x16, {0x1, 0x6, @void, @val=0x38, @val="cc296e1fbe3204e475ab828785b56978"}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x7, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_PROBE_RESP={0x6b9, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_chsw={0x76, 0x6, {0x3, 0x20, 0xb, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x8, 0x80, [@ibss={0x6, 0x2, 0x8}]}, @NL80211_ATTR_IE={0x16, 0x2a, [@mic={0x8c, 0x10, {0x875, "b0072980fc2d", @short="719399a6528db16e"}}]}, @NL80211_ATTR_BEACON_HEAD={0x493, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @device_a, @from_mac=@device_b, {0x7, 0x2}}, 0x5, @random=0x1ff, 0x9044, @void, @void, @val={0x3, 0x1, 0x74}, @void, @val={0x6, 0x2, 0x9}, @val={0x5, 0x8a, {0x3, 0xa9, 0x1, "47512c79f74b37c8526e8650a8b057748f3cf4129b8273c74a994783b9bc08cd531bb45963e8bca63f2c4e7d912305748e078bc498c6e03a73435c95807a5439a79e6cc0572cacc9589c3b8c644d1e96a85403c5d3b8a01683a1c1e7bfcd56499d2a5a77aeb485922ab49915ed3fcfdae26a571a4f81fafcd9eb636d063ad9bc0a6d4ea8bf4f5f"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0xe7, 0xab, 0x3}}, @val={0x2d, 0x1a, {0x8030, 0x0, 0x0, 0x0, {0x8, 0xbdf, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0x1, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x40}}, @val={0x76, 0x6, {0x2, 0xb4, 0x29, 0x6}}, [{0xdd, 0x9, "5ad31e0996c5562896"}, {0xdd, 0xe5, "bca687e61b923a3c1e6b02e721990fd9ee4caa652afda5dc5ded09587ced1430946a89f2b1f2a8763b02b37f289a215f4b08d82403c09ddd22fd21987837db4086883fb252f4fc67d97d917971cec873ef837f34b2687c227b5ebada9213e4f7832059c64fd10b560f2ef8e101d065ace984b02ef1f58fa87ddd35dab86faf3cb743fd435c454bbd3c6dcfa008b1ed0bb3ba9113e0515f0c8dbe8a5defed1978da9c5e323b51c4ec7692b1201de2287ed9bd7aa63c06245fdac7f34dbd98da768ae96f17b81ec76eef8d8a640a8f3cd75de450f5ef8096ab19ea5249150ee604945a7e657d"}, {0xdd, 0x61, "313661ea054f0def188fbe2fe9894aafc8ab2630430fb3158444c7ffb25ccf8b92aa2cb3c2fba945f48cfb549eef376a8470977bdf6cd1d72b5cd3fa0ddb54196b99e11bf3fe60dc7b2db10dac6dfa75ca56b60ce31157c89f775756b527c6126b"}, {0xdd, 0x94, "303e1815b4c9e4d532cd48360f78e952d19d7a91cc8bbf0b99008713cbd0627fad4ab4fb7a24e140851c2754f43a897090b556f8d79e1ec61b31c46a8ae735502a3a69ac15a2a76a49961f07c8aabc775f5811528964b759213997079d0738bb39812198bf64eaab44fe7bf9398a0cb121856fe5489a78ac4e5b3ce4c5767ba9abdfb270fb1e0081f42cf2d3ede65f8b4aecc3fa"}, {0xdd, 0xd1, "90cc8a79bc8f244b8df4005f137b43619895394f538926b635c85bb6c54f6addb8719ad478d9849cb429a807e1c1013c06a13c11d5b54d1a106010cc196487a8e5edd5f4917796cf0623981d950bcfd08c04215f9f6da1a62bb9ced1165b4b94b8edd6446a61c1eeb092d8bbe032f160b12ad4315cd7c2531fab8338d4bc3bb000676d0a66a111600bebe07668de76f0e9093fdce400d528de6dc27b4865041793322e936356a7b9b10ab115a101b0c22186b90fe768ac80ad87057aef345555fa5e45fef98559242d4527cb00d6089969"}, {0xdd, 0x37, "136558e1cacf1e79a4b8182b3a7d4f548a28326c0d828731586af9c86aa2de04bac2fb5134185a1b69b3f9615cc73fea2f41bc86683c37"}, {0xdd, 0xa4, "ce13dae22b97067a19823a7b0e7839b0da759de95925c6e63b46d317f0da8f83c9111abe95f9af3fccd2594c031e91cb3118f42468aa01623fb124a09de829feb47c986584810d7ccae0e4150a9db2ef89354ea9695491d6cf8cac7bc6bde9a51a7a7d4138860d1688f231c045ed4025faf0130ef960c3060475151b55c92c61b8904eef9ed88ed6398d3f77bdb8a2c5b171fec45e58487ee1f01cddcd9ef6751611c400"}]}}]}, 0xc68}, 0x1, 0x0, 0x0, 0x14008000}, 0x24004841) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001700), 0x4) readv(r7, &(0x7f0000001880)=[{&(0x7f0000001740)=""/143, 0x8f}, {&(0x7f0000001800)=""/75, 0x4b}], 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000018c0)={{0x0, 0x9, 0xfffffffffffffff1, 0x3, 0x5, 0x6113, 0x4, 0x6, 0x2, 0x9, 0x5, 0x5, 0x33e, 0x5, 0xfffffffffffffffe}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000028c0)={{r8, 0xa5ca, 0x61, 0x7, 0x9, 0x7, 0x2, 0x0, 0x7, 0xfffffff7, 0x8, 0x6, 0x4, 0xce5f, 0x6}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003940)={0xffffffffffffffff, 0x58, &(0x7f00000038c0)}, 0x10) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000003980)=[@window={0x3, 0x2, 0x8}, @sack_perm], 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, &(0x7f00000039c0)="1e72462eb2fc0ca6445190cc7ef8df2d8bdfeb08fbf07e62acadd87a81b9baaa459cab4eb03b22a4d381e8723c866155c3f0f1e1cb0cfd2b790d8c4e618a75d6ead36f8d998def7ea4da35415f51c9d50209f1ef7b91be006fef8ae0411df266193e7bb53bbb77ef8ed85369281411287a4b0c457d546e2a073309db4cf33d", 0x7f, 0x40, &(0x7f0000003a40)={0xa, 0x4e24, 0x4, @loopback, 0x8000}, 0x1c) r11 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r11, 0x40047452, &(0x7f0000003a80)=0x9d24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003c80)={&(0x7f0000003b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0xa05, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0xe4, 0x18, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffc44}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x4c000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f0000003d00)=0xfffffffd, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000003d40)) 1.226021458s ago: executing program 1 (id=4252): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r1, 0x4) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r1, r0, 0x4, r0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1.172011751s ago: executing program 6 (id=4253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30a888001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) 1.158061757s ago: executing program 6 (id=4254): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.083137766s ago: executing program 5 (id=4255): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000400000000", @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 995.794728ms ago: executing program 0 (id=4256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x7, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) recvmsg(r1, &(0x7f0000014340)={0x0, 0x0, 0x0}, 0x10000) 995.623589ms ago: executing program 6 (id=4257): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010001fff00000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000012620400280012800b000100697036746e6c0000180002801400020000000000000000000000000000000001080004000005004008000a0005"], 0x58}}, 0x0) (fail_nth: 34) 787.699973ms ago: executing program 1 (id=4258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x7b, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) 320.922126ms ago: executing program 0 (id=4259): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/4098, 0x1002}, {&(0x7f0000001580)=""/13, 0xd}, {&(0x7f00000015c0)=""/97, 0x61}, {&(0x7f0000001640)=""/104, 0x68}, {&(0x7f00000016c0)=""/25, 0x19}, {&(0x7f0000001700)=""/130, 0x82}, {&(0x7f00000017c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r1, &(0x7f0000001880)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r3 = socket(0xa, 0x3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001cc0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)={0x14, r5, 0x1}, 0x14}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000001ac0)={'IDLETIMER\x00'}, &(0x7f0000001b00)=0x1e) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000001b40)={0x28, 0x4, 0x8, 0x4, 0x2}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000002dc0)=@get={0x1, &(0x7f0000001dc0)=""/4096, 0xfffffffffffffff8}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x1000, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f00000018c0)='\b\x00', 0x2}, {&(0x7f0000001900)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r8) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)={0x14, r9, 0x72b, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 319.197594ms ago: executing program 1 (id=4260): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000001340)={@random="97b12932df73", @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x6, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x84, 0x0, @empty, @multicast2}, "59a7b1b4c805d3f7"}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)={0x6c, r3, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={0x58, r3, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x58}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001700), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001740)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001780)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x5c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000140)=0x9, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r9, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000240)={0x1060, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7ff}, 0xe, 0x6, 0x3, 0x3ff, 0x21, 'syz1\x00', "61e2428e5450d035fa7fba63e244c39ba3add12b41f4648de8c4bf5a2f2f110d", "0b4a1fa685993f01dc66f1d44d84e5f66a0b952469c702c05b1fedc85035623b", [{0x5, 0x3, {0x2, 0xfffffffc}}, {0xd, 0x8, {0x1, 0x7}}, {0x0, 0x7f, {0x2, 0x8a07}}, {0xc6e, 0x4, {0x1, 0x80000001}}, {0x1, 0x6, {0x0, 0x300}}, {0x5, 0x7fff, {0x1, 0x7fff}}, {0xfff9, 0x5, {0x2, 0x5}}, {0xc, 0x3, {0x3}}, {0x3, 0x6, {0x2, 0xde}}, {0xffff, 0xa70, {0x0, 0x3}}, {0x4cb, 0xff, {0x1, 0x8}}, {0x6642, 0x5, {0x2}}, {0x7fff, 0x100, {0x1, 0x598}}, {0x2, 0x6, {0x3, 0x6}}, {0xfff1, 0x5, {0x2, 0x81}}, {0x5, 0x4, {0x0, 0x1}}, {0x9, 0x80, {0x0, 0x8001}}, {0xfff, 0x7, {0x1, 0xd0}}, {0x5, 0x8001, {0x3}}, {0xa3ee, 0x4, {0x0, 0x94}}, {0x36, 0x9, {0x2, 0xfffffffd}}, {0xfff5, 0x4a4e, {0x0, 0xffffff01}}, {0x4, 0x7, {0x3, 0x1000}}, {0x6, 0xc, {0x3, 0x8}}, {0xffff, 0x0, {0x1, 0x555}}, {0x6, 0x800, {0x0, 0x5}}, {0x6, 0x4, {0x2, 0x1000}}, {0x1ff, 0x9, {0x2}}, {0x3, 0x4, {0x0, 0x3}}, {0x0, 0x5d5, {0x2, 0x7db41a5b}}, {0x8, 0x4}, {0x401, 0x10, {0x1, 0x3}}, {0x9, 0x9, {0x2, 0x7}}, {0x8, 0x800, {0x1, 0x6}}, {0x400, 0x2, {0x1, 0x5}}, {0xccd, 0x6, {0x0, 0x347000}}, {0x3, 0x5, {0x3, 0x9}}, {0x3, 0x0, {0x0, 0x81aa}}, {0x7f, 0x1, {0x3, 0x2}}, {0x5, 0x5, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0xea}, 0xc0, 0xfe, 0x100, 0xa, 0x13, 'syz1\x00', "fbfeacd3ba32accdbae5cf2ef55785181cee5e239c2683c5a06ae614c9e78a60", "0c7347432402db55b77861cd00c34cb5de74f22fff259693500092617e6d89b4", [{0xc2e9, 0x7, {0x0, 0xff}}, {0x1ff, 0x6c90, {0x1, 0x668}}, {0x7, 0x8, {0x0, 0x2}}, {0xf, 0xfffe, {0x1, 0x27fd}}, {0xa, 0x8, {0x2, 0x80000000}}, {0x1, 0x4, {0x0, 0x400}}, {0x4, 0x7ff, {0x2, 0x8}}, {0x6, 0x7ff, {0x0, 0x1}}, {0x8, 0x3, {0x1, 0x1}}, {0x1, 0x7f, {0x1, 0x8}}, {0x0, 0xe790, {0x1, 0x10000}}, {0x7fff, 0x2, {0x2, 0x3}}, {0x337, 0x7, {0x1, 0x100}}, {0x101, 0x7, {0x2, 0x2}}, {0xcb7b, 0x7, {0x2, 0xeb}}, {0x5, 0x7, {0x3, 0x28000000}}, {0xe, 0x6, {0x2, 0x6}}, {0x0, 0xfff6, {0x0, 0x2}}, {0xa, 0x3, {0x3, 0x6}}, {0x4, 0x9, {0x2, 0x9}}, {0x1000, 0xc, {0x1, 0x8}}, {0xfff, 0xc00, {0x3, 0x6}}, {0x6, 0x8000, {0x0, 0x8}}, {0x6, 0x603, {0x3, 0x9}}, {0x3, 0xe1, {0x2, 0x5}}, {0x2, 0x7, {0x3, 0x4b97}}, {0x1000, 0x1, {0x2, 0x6}}, {0x4, 0x4, {0x1, 0x2}}, {0x0, 0x5, {0x1, 0x7}}, {0x0, 0x6, {0x1, 0x1}}, {0x150, 0x1, {0x1, 0xa890}}, {0x0, 0x0, {0x1, 0xffff}}, {0x0, 0x8000, {0x0, 0xa000}}, {0xa, 0x8, {0x0, 0xb}}, {0xc9a, 0xd6, {0x0, 0x3}}, {0x0, 0xa00, {0x0, 0x6}}, {0x16f, 0x4, {0x3, 0x101}}, {0x800, 0x2b28, {0x0, 0x4}}, {0x0, 0x669, {0x2, 0x3}}, {0x0, 0xfffb, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x0, 0xff, 0xd, 0x4, 0x18, 'syz0\x00', "a6dadd8b8dff1f7f99047a7b2ffa4e9a2f6b8dee844e6f1773882def2dc2b3cd", "6a6486675a5aa157d9e1ab953a44d0489185322f1cad6144d3ab46945c459c1b", [{0x0, 0x8, {0x1, 0x3}}, {0x8, 0x3, {0x1, 0x2d}}, {0x2, 0xf, {0x2, 0x4}}, {0xa, 0x4, {0x0, 0xd6c2}}, {0x4, 0x2, {0x1, 0x5}}, {0x5420, 0x4, {0x1, 0x6}}, {0x1000, 0x401, {0x3, 0x80000001}}, {0x3, 0x5, {0x1, 0x3}}, {0x446b, 0x6, {0x1, 0xff}}, {0x0, 0x7, {0x1, 0xc}}, {0xa, 0x100, {0x3, 0x404}}, {0x1, 0x1, {0x3, 0x3}}, {0xa4e, 0x5, {0x2, 0x2fb0}}, {0xffff, 0x8, {0x0, 0x7}}, {0x2, 0x2, {0x3, 0x8}}, {0x4, 0x1ff, {0x2, 0x4}}, {0x6, 0x1, {0x2, 0x6}}, {0xfff, 0x2, {0x1, 0x6}}, {0x4, 0x7, {0x1, 0x6}}, {0x6, 0x2, {0x1, 0xf4cb2af6}}, {0x4, 0x1, {0x3, 0x1}}, {0x0, 0x5}, {0x8, 0x9, {0x2, 0x1}}, {0x5, 0xfffd, {0x2, 0x7fff}}, {0xbe0, 0x8}, {0xb, 0x3, {0x0, 0xc}}, {0xfffe, 0x7f, {0x0, 0xff}}, {0x10, 0x80, {0x2, 0xb}}, {0x2, 0xfffb, {0x0, 0xffffff8e}}, {0x5, 0x1000, {0x2, 0x88}}, {0x6, 0xc7, {0x0, 0xffffffff}}, {0x8, 0x6, {0x3, 0x400}}, {0x101, 0x1, {0x1, 0xe6b4}}, {0xe, 0xfd33, {0x3, 0xf}}, {0x9, 0x800, {0x0, 0x61}}, {0x40, 0x3a2, {0x2, 0x2}}, {0x90c, 0xaf0, {0x0, 0x1}}, {0x9, 0x463a, {0x3}}, {0xb, 0x4, {0x2, 0x8}}, {0x7f, 0x401, {0x0, 0x7fff}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0xf8, 0xf, 0xdbe, 0xedb, 0x12, 'syz1\x00', "3171139a65951678d960235f39241785649af5d7a7ee5ca28248696ca31ce201", "84a1a9ecb92b9ffff9a7a7285c899442192784ae1c266bd288563f61a822b111", [{0x7, 0x3, {0x0, 0x6}}, {0x0, 0x8000, {0x1, 0x1}}, {0xdd0, 0x7f, {0x1, 0x1}}, {0x7, 0x5, {0x2, 0x6}}, {0x2, 0xfff2, {0x3, 0x80}}, {0x9, 0x9, {0x2, 0xef}}, {0xb, 0x0, {0x1, 0x6}}, {0x800, 0xf6, {0x0, 0x7ff}}, {0x0, 0x786, {0x1, 0x67}}, {0xf53d, 0xd845, {0x3, 0xb43}}, {0xfff7, 0x2, {0x0, 0x9}}, {0x401, 0x4, {0x3, 0x1ff}}, {0x7fff, 0x8, {0x3, 0x84}}, {0x4, 0x1, {0x2, 0x4}}, {0x8, 0xfff, {0x3, 0x10}}, {0xc, 0x2f, {0x2, 0x1}}, {0x9, 0x8, {0x1, 0x2}}, {0xf2, 0xfff, {0x2}}, {0xd203, 0xff81, {0x3, 0x8}}, {0xfff7, 0x8, {0x0, 0x81}}, {0x8, 0xb, {0x0, 0xffff38c4}}, {0x2, 0x8, {0x0, 0x2}}, {0x278, 0x9, {0x0, 0xfffffff9}}, {0x1ff, 0x3, {0x1, 0xfffffff7}}, {0x9, 0xb6, {0x0, 0x6}}, {0xffff, 0x1, {0x0, 0x4}}, {0x5, 0x3, {0x3, 0x7}}, {0x213c, 0x9, {0x0, 0x2}}, {0x6, 0xff, {0x3, 0x2}}, {0x6, 0x2, {0x2, 0xff}}, {0x401, 0x0, {0x0, 0x9}}, {0x5, 0x101, {0x2, 0x894}}, {0x9, 0x1, {0x2, 0x9}}, {0x0, 0x8, {0x1, 0x9}}, {0x2, 0x4, {0x3, 0xd8}}, {0x4b, 0x2, {0x1, 0x5}}, {0x500, 0xfffe, {0x2, 0x7ff}}, {0x65, 0x3, {0x2, 0x9}}, {0x400, 0x1, {0x2, 0x9}}, {0x2, 0x1, {0x1, 0xfffffffa}}]}}}, {{0x254, 0x1, {{0x1, 0x7fff}, 0xf8, 0x8, 0x11, 0xf, 0x1c, 'syz1\x00', "e20d74221b7f1bd12e11bbea1f622972ff1b9f943c33dce0d6d33bc84b80853c", "c1ac3967f33ee22d81f0f2e39e0d55d2f013c3e68b9a385768d6942b61c0971b", [{0x3, 0x7, {0x2, 0x5}}, {0x5, 0x1, {0x0, 0x3}}, {0x5, 0x8, {0x3, 0x5}}, {0x5, 0x20, {0x6, 0x5}}, {0x8, 0x1000, {0x1, 0x35c5}}, {0x5, 0xc, {0x3, 0x2}}, {0x81, 0x1, {0x3, 0xd}}, {0x8, 0x2, {0x0, 0xf2}}, {0x6, 0x400, {0x1, 0x8}}, {0x3, 0xfff, {0x3, 0x39b7}}, {0x4, 0x0, {0x0, 0x88}}, {0xa0a, 0x1ff, {0x1, 0x3}}, {0xa3f, 0x9, {0x3, 0x2}}, {0x3, 0xffb4, {0x3}}, {0x7ff, 0xff1, {0x2, 0x3}}, {0x3, 0x74b, {0x3, 0x5}}, {0x1dc3, 0xc, {0x0, 0xfff}}, {0x5, 0x3, {0x0, 0x2}}, {0x3, 0x2, {0x3, 0x2}}, {0x7, 0x2, {0x1, 0x6}}, {0x3, 0x6, {0x1, 0xe}}, {0xa9, 0x6c8, {0x3, 0x3}}, {0x40, 0x1, {0x3, 0x5}}, {0xfff7, 0x9, {0x3, 0x5}}, {0x56f5, 0x5, {0x1, 0x3}}, {0x2, 0x7fff, {0x0, 0x8}}, {0x0, 0xa, {0x3, 0x16}}, {0x400, 0xffff, {0x4de4dee2e0e9ff55, 0x1}}, {0x1, 0x5, {0x3, 0x7}}, {0x4, 0xb, {0x3, 0x8}}, {0x0, 0x9, {0x0, 0xa47}}, {0x7, 0x9, {0x1, 0x7}}, {0x4, 0x4, {0x1, 0x9}}, {0x4, 0xf068, {0x2, 0x3}}, {0x1, 0x3adb, {0x2, 0xc3}}, {0x8, 0x15, {0x0, 0x2}}, {0x5, 0x94, {0x3, 0x80}}, {0x6, 0x904, {0x1, 0x6}}, {0x7fff, 0x2, {0x2, 0xe874}}, {0x0, 0xe, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0xffff}, 0x9, 0xe, 0xaa01, 0xa, 0xe, 'syz1\x00', "d55bec475ed5c88b9427dae13ed0728bdabc6db0ac978eaa4cb4415a07da0674", "3b2d9c43ea6432c1d0ffb7ed5426a8ce1b371dad5385e4f41a4721e2a4137788", [{0x10, 0x2, {0x1}}, {0x7, 0x9, {0x0, 0x9}}, {0x1, 0xff, {0x1, 0x6}}, {0x6, 0x40, {0x2, 0x4}}, {0x0, 0x1, {0x0, 0x3}}, {0x8, 0x8, {0x1, 0xb}}, {0x7, 0x4, {0x2, 0x9}}, {0x200, 0x1, {0x0, 0x1}}, {0x9, 0xfff, {0x1}}, {0xff, 0x5d, {0x1, 0x464e}}, {0x1, 0x467d, {0x2, 0x7fff}}, {0x0, 0x4, {0x2, 0x5}}, {0xd, 0x9, {0x3, 0x3}}, {0x8, 0x255, {0x1, 0x2}}, {0x57, 0x100, {0x2, 0x41}}, {0x3ac, 0x7, {0x3, 0xa}}, {0xb, 0x8, {0x3, 0x4}}, {0xb, 0x7ff, {0x0, 0xff}}, {0x929, 0x7f, {0x0, 0x3}}, {0x2, 0x7, {0x3}}, {0xe24d, 0xa, {0x1, 0x3ff}}, {0x1, 0x1ff, {0x2, 0x2}}, {0x7, 0x8, {0x1, 0x8f}}, {0x8, 0xffff, {0x0, 0x4}}, {0xb, 0x80, {0x1}}, {0x1ff, 0x2, {0x0, 0x95}}, {0x2, 0x1, {0x0, 0x1000000}}, {0x1, 0x7, {0x2, 0x5}}, {0xb, 0x400}, {0x10, 0xf4ef, {0x1, 0x5}}, {0x7, 0x80, {0x3, 0x7fffffff}}, {0x9, 0x4e, {0x1, 0x1}}, {0x2, 0x4e, {0x0, 0x40}}, {0xdc, 0x6, {0x3, 0x4}}, {0x8001, 0xcd, {0x0, 0x10000}}, {0x6, 0xffff, {0x2, 0x100}}, {0xa, 0x2600, {0x3, 0x9}}, {0x5, 0x1, {0x0, 0xff}}, {0x5, 0xb8, {0x2, 0x4}}, {0x401, 0x148, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x8, 0x6, 0x4, 0xe8a6, 0x3, 'syz1\x00', "f0c5d58d4e8304867922b546d0e9c1e791904d21c4d6ec495f81e9b340b9aefa", "8aac595202c1a0d1a7f96d856abf165b087fadcc5090978cf45f63556eea74d6", [{0x6, 0x3, {0x3, 0x7f}}, {0xd, 0x1, {0x2, 0x101}}, {0xa00, 0x4f3c, {0x3, 0x3}}, {0x5, 0x9, {0x0, 0x5}}, {0x5, 0x6, {0x0, 0x5}}, {0x1, 0x3, {0x0, 0xd}}, {0x6, 0x0, {0x1, 0x7fff}}, {0x9, 0x5, {0x1, 0x3}}, {0x7, 0x1, {0x3, 0xf6}}, {0x1, 0x0, {0x0, 0xffff0252}}, {0x302, 0x1, {0x2, 0x8}}, {0x10, 0x7ff, {0x0, 0x5}}, {0x2, 0x8, {0x0, 0xfff}}, {0x5e, 0x3ff, {0x3, 0x4}}, {0x7, 0x1, {0x2, 0x9}}, {0x5, 0x98, {0x2, 0x1}}, {0x72, 0x1, {0x0, 0x80}}, {0x40, 0x2, {0x2, 0x6}}, {0xc36, 0x4, {0x1, 0x3}}, {0x8, 0x8, {0x1, 0x5ab1a3a7}}, {0xf19, 0x3, {0x0, 0x7fffffff}}, {0x67, 0x8a, {0x1, 0x8}}, {0x0, 0x0, {0x3, 0xf}}, {0x5, 0x9, {0x1, 0x5}}, {0xfffa, 0x0, {0x0, 0xe8}}, {0x1, 0xd4, {0x1, 0x9}}, {0x5, 0x7ff, {0x3, 0x7}}, {0x4, 0x6, {0x3, 0x88}}, {0x4, 0x5, {0x2, 0xab}}, {0x6, 0x8, {0x3, 0x62a7}}, {0xa09a, 0x101, {0x3, 0x9}}, {0x9, 0x0, {0x3, 0x9}}, {0xa83, 0x20, {0x3, 0x9}}, {0x8, 0xa, {0x3, 0x8}}, {0x2a77, 0xb, {0x3, 0x401}}, {0x4, 0x6b5, {0x3, 0x7f}}, {0x40, 0x0, {0x1, 0x2}}, {0xd740, 0x7f, {0x1, 0x9}}, {0x8, 0x8, {0x3, 0x4}}, {0x8001, 0x2c8b, {0x0, 0x9}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f00000013c0)={r10, r10, 0xc, 0x0, 0x0, 0x9, 0xff, 0x4f3, 0x1009, 0x209, 0x1, 0x1, 'syz1\x00'}) r12 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r12}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 317.11997ms ago: executing program 7 (id=4261): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61127900000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xd}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 316.786366ms ago: executing program 6 (id=4262): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000280)="4c00000011000a00"/23, 0x17) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xc, &(0x7f0000000480)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'nicvf0\x00', 0x1000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc044) 111.142126ms ago: executing program 5 (id=4263): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0xe000000, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 109.374778ms ago: executing program 6 (id=4264): unshare(0x28000600) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r1, 0x0, r0, &(0x7f00000000c0), 0x6, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="78ef33480ee66605e7b5d42e2ecda22b810ff7bbd92f538898d606b142dfb2796b6576874113c6df051bc2f1837ea28be6c53b841cd35b7ee64f2962d590afd95097c9c229f7e3a5b2e7ba0cb92cb6248566da2843d2b1c38a46d0d02007b761548604ba206c59df33fa492996f3ae379fe0e0c3b8414e55a02794277c64a6a43164ff9be11ed60dddb881c2c4d43fadb3d19ce60a6039b4b71d311e79b8d680e7be7bebb2faf109054ab0d5c403527e46f01555035c", 0xb6}], 0x1, 0x5, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 0s ago: executing program 6 (id=4265): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x3, 0xa6ffffff}, 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000004) kernel console output (not intermixed with test programs): mode [ 360.148031][T14659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.195580][T14659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.224749][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.232921][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.233054][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.233154][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.233270][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.479538][T14943] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 360.570357][T13066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.570381][T13066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.663673][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.663698][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.840642][T14953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.307544][T14967] syzkaller0: entered promiscuous mode [ 361.307570][T14967] syzkaller0: entered allmulticast mode [ 361.652684][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3225'. [ 361.787063][T14982] syzkaller0: entered promiscuous mode [ 361.787089][T14982] syzkaller0: entered allmulticast mode [ 362.422740][T15016] syzkaller0: entered promiscuous mode [ 362.422766][T15016] syzkaller0: entered allmulticast mode [ 362.453916][T15019] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3235'. [ 362.554581][T15019] bridge0: port 1(gretap0) entered blocking state [ 362.554691][T15019] bridge0: port 1(gretap0) entered disabled state [ 362.554928][T15019] gretap0: entered allmulticast mode [ 362.585636][T15019] gretap0: entered promiscuous mode [ 362.612117][T15019] bridge0: port 1(gretap0) entered blocking state [ 362.612231][T15019] bridge0: port 1(gretap0) entered forwarding state [ 363.089658][T15049] tipc: Started in network mode [ 363.089695][T15049] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 363.095293][T15049] tipc: Enabled bearer , priority 10 [ 363.261701][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.528072][T15068] syzkaller0: entered promiscuous mode [ 363.528107][T15068] syzkaller0: entered allmulticast mode [ 363.561118][T15068] tipc: Enabled bearer , priority 0 [ 363.611880][T15068] tipc: Resetting bearer [ 363.612081][T15068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.612108][T15068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.612127][T15068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.612145][T15068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.612172][T15068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.612190][T15068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.685963][T15067] tipc: Resetting bearer [ 363.703766][T15076] netlink: 'syz.1.3247': attribute type 1 has an invalid length. [ 363.770946][T15067] tipc: Disabling bearer [ 363.928047][T15080] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 363.943238][T15080] bond12 (unregistering): Released all slaves [ 364.099643][T15076] bridge6: entered promiscuous mode [ 364.116296][T15076] bond11: (slave bridge6): making interface the new active one [ 364.119806][T15076] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 364.396924][T15113] syz_tun: entered allmulticast mode [ 364.494287][T15108] syzkaller0: entered promiscuous mode [ 364.494312][T15108] syzkaller0: entered allmulticast mode [ 364.989179][ T9] tipc: Node number set to 10136234 [ 365.148132][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 365.263939][T13066] net_ratelimit: 2 callbacks suppressed [ 365.264049][T13066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.264236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.394729][T15152] openvswitch: netlink: Flow key attr not present in new flow. [ 365.441758][T15156] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 365.636171][T15168] netlink: 'syz.6.3273': attribute type 10 has an invalid length. [ 366.058386][T15189] syzkaller0: entered promiscuous mode [ 366.058413][T15189] syzkaller0: entered allmulticast mode [ 366.308056][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.519003][T15212] netlink: ct family unspecified [ 366.640111][T15218] netlink: 'syz.7.3288': attribute type 25 has an invalid length. [ 366.800787][T15231] openvswitch: netlink: Port 196609 exceeds max allowable 65535 [ 367.194363][T15248] netlink: 'syz.5.3302': attribute type 25 has an invalid length. [ 367.216706][T15252] openvswitch: netlink: Message has 8 unknown bytes. [ 367.216745][T15252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.353801][T15260] netlink: 'syz.5.3307': attribute type 1 has an invalid length. [ 367.382880][T15262] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 367.436522][T15260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.506368][T15264] netlink: 'syz.0.3309': attribute type 2 has an invalid length. [ 367.531204][T15260] bond1: (slave geneve2): making interface the new active one [ 367.543677][T15260] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 367.658242][T15273] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.3313'. [ 367.683479][T15273] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 367.704158][T15273] 0ªX¹¦Dö»: entered allmulticast mode [ 367.713627][T13052] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.713755][T13052] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.713889][T13052] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.713988][T13052] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.995628][T15283] netlink: 'syz.5.3317': attribute type 25 has an invalid length. [ 368.090937][T15289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.112032][T15289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.117852][T15289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.394136][T15303] netlink: 'syz.5.3328': attribute type 2 has an invalid length. [ 368.396793][T15295] xt_connbytes: Forcing CT accounting to be enabled [ 368.585709][T15313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3332'. [ 368.585768][T15313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3332'. [ 368.750061][T15321] netlink: 'syz.6.3335': attribute type 25 has an invalid length. [ 369.116803][T15340] nftables ruleset with unbound set [ 369.117374][T15338] tipc: New replicast peer: 172.20.20.187 [ 369.118264][T15338] tipc: Enabled bearer , priority 10 [ 369.229291][T15347] netlink: 5260 bytes leftover after parsing attributes in process `syz.6.3345'. [ 369.808572][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3357'. [ 370.386458][ T13] net_ratelimit: 9 callbacks suppressed [ 370.386483][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.386689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.603574][T15419] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.603672][T15419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.141235][T15453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3387'. [ 371.144518][T15453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3387'. [ 371.317545][T15458] syzkaller0: entered promiscuous mode [ 371.317568][T15458] syzkaller0: entered allmulticast mode [ 371.344122][T15462] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3390'. [ 372.272765][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3403'. [ 372.385489][ T9814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.540291][T15502] syzkaller0: entered promiscuous mode [ 372.540312][T15502] syzkaller0: entered allmulticast mode [ 375.422064][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.875979][T15554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.143142][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.143338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.408961][T15595] netlink: 'syz.1.3429': attribute type 4 has an invalid length. [ 376.447418][T15595] netlink: 'syz.1.3429': attribute type 4 has an invalid length. [ 376.826865][T15610] netlink: 'syz.0.3434': attribute type 2 has an invalid length. [ 377.003668][T15620] bridge0: port 3(syz_tun) entered blocking state [ 377.003803][T15620] bridge0: port 3(syz_tun) entered disabled state [ 377.004225][T15620] syz_tun: entered allmulticast mode [ 377.009848][T15620] syz_tun: entered promiscuous mode [ 377.010829][T15620] bridge0: port 3(syz_tun) entered blocking state [ 377.010947][T15620] bridge0: port 3(syz_tun) entered forwarding state [ 377.073941][T15622] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 377.417316][T15641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3446'. [ 377.466007][T15641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3446'. [ 377.742283][T15652] syz_tun: entered allmulticast mode [ 377.744424][T15651] syz_tun: left allmulticast mode [ 377.975099][T15663] ip_tables: iptables: counters copy to user failed while replacing table [ 378.003978][T15663] syzkaller1: entered promiscuous mode [ 378.004001][T15663] syzkaller1: entered allmulticast mode [ 378.075168][T15658] syzkaller0: entered promiscuous mode [ 378.075193][T15658] syzkaller0: entered allmulticast mode [ 378.465426][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.507399][T15674] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 378.526133][T15674] bond1 (unregistering): Released all slaves [ 378.649652][T15691] syzkaller0: entered promiscuous mode [ 378.649680][T15691] syzkaller0: entered allmulticast mode [ 379.248132][T15710] syzkaller0: entered promiscuous mode [ 379.248158][T15710] syzkaller0: entered allmulticast mode [ 379.726891][T15735] netlink: 'syz.1.3476': attribute type 42 has an invalid length. [ 379.726916][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3476'. [ 380.188643][T15744] syzkaller0: entered promiscuous mode [ 380.188672][T15744] syzkaller0: entered allmulticast mode [ 380.617367][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3485'. [ 380.617395][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3485'. [ 380.878855][T15784] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3487'. [ 380.937749][T15785] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3487'. [ 381.502163][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.546501][T15796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.905089][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.905297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.627072][T15784] bridge0: port 1(gretap0) entered disabled state [ 383.630866][T15785] 0ªî{X¹¦: renamed from gretap0 [ 383.694854][T15785] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 383.694986][T15785] bridge0: port 1(30ªî{X¹¦) entered forwarding state [ 383.700826][T15785] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 384.072276][ T51] nci: nci_ntf_packet: unknown ntf opcode 0x4 [ 384.518910][T15856] TC_ACT_REPEAT abuse ? [ 384.542221][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.868582][T15865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.226915][T15881] ip_tables: iptables: counters copy to user failed while replacing table [ 386.139668][T15893] netlink: 'syz.0.3520': attribute type 2 has an invalid length. [ 386.336991][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3521'. [ 386.337023][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3521'. [ 386.337040][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3521'. [ 386.508862][T15897] syzkaller0: entered promiscuous mode [ 386.509634][T15897] syzkaller0: entered allmulticast mode [ 386.976916][T15831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.338082][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3528'. [ 387.602266][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.671836][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.672088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.595050][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057797400: rx timeout, send abort [ 388.595380][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880485aac00: rx timeout, send abort [ 388.595758][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880485aac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 388.596077][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057797400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 389.936883][T15933] syzkaller0: entered promiscuous mode [ 389.936911][T15933] syzkaller0: entered allmulticast mode [ 390.147376][T15950] syzkaller0: entered promiscuous mode [ 390.147403][T15950] syzkaller0: entered allmulticast mode [ 390.492642][T15962] syzkaller0: entered promiscuous mode [ 390.492671][T15962] syzkaller0: entered allmulticast mode [ 390.625641][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.044150][T15982] bond8: option mode: unable to set because the bond device has slaves [ 391.067424][T15982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 391.084223][T15982] bond8: (slave macvlan2): Enslaving as an active interface with a down link [ 391.111152][T15982] bond8: (slave ip6gretap1): making interface the new active one [ 391.125212][T15982] ip6gretap1: entered promiscuous mode [ 391.125588][T15982] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 391.128116][T15982] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3543'. [ 391.179944][T15982] bond8: (slave .`): Releasing active interface [ 391.179972][T15982] bond8: (slave .`): the permanent HWaddr of slave - aa:aa:aa:aa:aa:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 391.224194][T15982] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.242087][T15982] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.254732][T15982] .` (unregistering): Released all slaves [ 391.733560][T16000] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 391.840238][T16005] vlan0: entered promiscuous mode [ 392.049983][T16014] netlink: 'syz.6.3558': attribute type 3 has an invalid length. [ 392.073208][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3557'. [ 392.117827][T16018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 392.868833][T15937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.223221][T16054] No such timeout policy "s" [ 393.223249][T16054] netlink: Failed to associated timeout policy 's' [ 393.423622][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.423864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.449415][T16060] bond2: entered allmulticast mode [ 393.449440][T16060] ip6gre1: entered allmulticast mode [ 393.663304][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.799984][T16076] syzkaller0: entered promiscuous mode [ 393.800010][T16076] syzkaller0: entered allmulticast mode [ 394.332367][T16096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.488256][T16101] bond3: entered allmulticast mode [ 394.488725][T16101] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.530298][T16101] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.539356][T16101] macvlan2: entered allmulticast mode [ 394.539383][T16101] bond0: entered allmulticast mode [ 394.539398][T16101] bond_slave_0: entered allmulticast mode [ 394.539416][T16101] bond_slave_1: entered allmulticast mode [ 394.539481][T16101] bond_slave_0: entered promiscuous mode [ 394.539522][T16101] bond_slave_1: entered promiscuous mode [ 394.540340][T16101] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 394.617181][T16101] ip6gretap1: entered allmulticast mode [ 394.617841][T16101] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 394.619759][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3590'. [ 394.651790][T16101] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3588'. [ 394.654963][T16105] batadv_slave_1: entered allmulticast mode [ 394.668916][T16101] bond_slave_0: left promiscuous mode [ 394.669012][T16101] bond_slave_1: left promiscuous mode [ 394.750931][T16101] bond0 (unregistering): left allmulticast mode [ 394.750958][T16101] bond_slave_0: left allmulticast mode [ 394.750978][T16101] bond_slave_1: left allmulticast mode [ 394.797395][T16101] bond3: (slave macvlan2): Removing an active aggregator [ 394.797431][T16101] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 394.798078][T16101] bond3: (slave macvlan2): Releasing backup interface [ 394.798100][T16101] bond3: (slave macvlan2): the permanent HWaddr of slave - f6:04:73:63:e0:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 394.800722][T16101] macvlan2 (unregistering): left allmulticast mode [ 394.822559][T13052] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 394.888640][T16115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 394.907915][T16101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.965163][T16101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.005122][T16101] bond0 (unregistering): Released all slaves [ 395.504813][T16138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.602660][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3601'. [ 395.713644][ T53] Bluetooth: hci7: link tx timeout [ 395.713665][ T53] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 395.770680][T16147] syzkaller0: entered promiscuous mode [ 395.770709][T16147] syzkaller0: entered allmulticast mode [ 395.874620][ T4936] Bluetooth: hci7: link tx timeout [ 395.874644][ T4936] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 396.703965][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.707746][ T4936] Bluetooth: hci7: link tx timeout [ 397.707767][ T4936] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 397.748047][ T4936] Bluetooth: hci7: command 0x0405 tx timeout [ 398.546195][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.546395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.743116][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.014972][T16224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3619'. [ 400.018490][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3619'. [ 400.540144][T16244] syzkaller0: entered promiscuous mode [ 400.540174][T16244] syzkaller0: entered allmulticast mode [ 401.099565][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3631'. [ 402.783989][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.203928][T13052] ip6gretap1: left promiscuous mode [ 403.278844][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3635'. [ 403.310019][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3632'. [ 404.075716][T16317] xt_hashlimit: size too large, truncated to 1048576 [ 404.304750][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.304953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.528170][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3647'. [ 404.606922][T16334] syzkaller0: entered promiscuous mode [ 404.606950][T16334] syzkaller0: entered allmulticast mode [ 405.185926][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 405.185955][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 405.821832][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.447017][T16349] tipc: Enabling of bearer rejected, failed to enable media [ 407.449900][T16360] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3650'. [ 407.450129][T16360] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3650'. [ 407.713686][T16393] ip_tables: iptables: counters copy to user failed while replacing table [ 407.751674][T16393] syzkaller1: entered promiscuous mode [ 407.751700][T16393] syzkaller1: entered allmulticast mode [ 407.927157][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3659'. [ 408.165272][T16418] ip_tables: iptables: counters copy to user failed while replacing table [ 408.268487][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3662'. [ 408.514747][T16428] tcf_pedit_act: 7 callbacks suppressed [ 408.514848][T16428] tc action pedit offset must be on 32 bit boundaries [ 408.859201][T13066] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 408.874279][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.898491][T16436] syzkaller0: entered promiscuous mode [ 408.898521][T16436] syzkaller0: entered allmulticast mode [ 408.948261][T16452] xt_hashlimit: size too large, truncated to 1048576 [ 409.436729][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.436977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.744142][T16443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.901756][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.924929][T16475] xt_hashlimit: size too large, truncated to 1048576 [ 414.142201][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.171038][T16456] bridge_slave_0 (unregistering): left allmulticast mode [ 414.171072][T16456] bridge_slave_0 (unregistering): left promiscuous mode [ 414.171169][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.225895][T16472] batman_adv: batadv0: Adding interface: syzkaller0 [ 414.225916][T16472] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.225951][T16472] batman_adv: batadv0: Interface activated: syzkaller0 [ 414.225970][T16472] batadv0: mtu less than device minimum [ 414.227434][T16472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.228842][T16472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.230238][T16472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.232172][T16472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.235878][T16472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.239260][T16472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.385385][T16471] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 414.536176][T16471] batman_adv: batadv0: Removing interface: syzkaller0 [ 414.542585][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 414.580988][T16489] netlink: 264 bytes leftover after parsing attributes in process `syz.7.3678'. [ 414.627655][T16484] syzkaller0: entered promiscuous mode [ 414.627684][T16484] syzkaller0: entered allmulticast mode [ 414.761100][T16492] FAULT_INJECTION: forcing a failure. [ 414.761100][T16492] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 414.761138][T16492] CPU: 0 UID: 0 PID: 16492 Comm: syz.7.3680 Not tainted syzkaller #0 PREEMPT(full) [ 414.761162][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 414.761185][T16492] Call Trace: [ 414.761234][T16492] [ 414.761331][T16492] dump_stack_lvl+0xe8/0x150 [ 414.761483][T16492] should_fail_ex+0x410/0x560 [ 414.761579][T16492] _copy_from_user+0x2d/0xb0 [ 414.761683][T16492] __sys_bpf+0x2e7/0xd90 [ 414.761740][T16492] ? __pfx___sys_bpf+0x10/0x10 [ 414.761812][T16492] ? __fget_files+0x2a/0x420 [ 414.761885][T16492] ? ksys_write+0x242/0x270 [ 414.761912][T16492] ? __pfx_ksys_write+0x10/0x10 [ 414.761942][T16492] __x64_sys_bpf+0xba/0xd0 [ 414.761971][T16492] do_syscall_64+0x166/0x520 [ 414.762070][T16492] ? trace_irq_disable+0x3b/0x140 [ 414.762101][T16492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.762146][T16492] ? clear_bhb_loop+0x70/0xc0 [ 414.762174][T16492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.762196][T16492] RIP: 0033:0x7f3ffed9e559 [ 414.762225][T16492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.762245][T16492] RSP: 002b:00007f3fffbd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.762276][T16492] RAX: ffffffffffffffda RBX: 00007f3fff025fa0 RCX: 00007f3ffed9e559 [ 414.762293][T16492] RDX: 0000000000000038 RSI: 00002000000002c0 RDI: 0000000000000018 [ 414.762308][T16492] RBP: 00007f3fffbd9090 R08: 0000000000000000 R09: 0000000000000000 [ 414.762322][T16492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.762336][T16492] R13: 00007f3fff026038 R14: 00007f3fff025fa0 R15: 00007ffc4c7b9538 [ 414.762372][T16492] [ 414.951123][ T9] net_ratelimit: 33 callbacks suppressed [ 414.951145][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.157205][T16496] syzkaller0: entered promiscuous mode [ 415.157234][T16496] syzkaller0: entered allmulticast mode [ 415.185132][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.185351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.370346][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3686'. [ 415.393513][T16513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3687'. [ 417.745665][T16500] syzkaller1: entered promiscuous mode [ 417.745686][T16500] syzkaller1: entered allmulticast mode [ 417.776494][T16513] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 417.876403][T16517] bond0: entered promiscuous mode [ 417.876434][T16517] bond0: entered allmulticast mode [ 417.947144][T16526] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 418.019922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.047252][T16528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3688'. [ 418.118749][T16534] FAULT_INJECTION: forcing a failure. [ 418.118749][T16534] name failslab, interval 1, probability 0, space 0, times 1 [ 418.118783][T16534] CPU: 0 UID: 0 PID: 16534 Comm: syz.5.3690 Not tainted syzkaller #0 PREEMPT(full) [ 418.118808][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 418.118822][T16534] Call Trace: [ 418.118831][T16534] [ 418.118841][T16534] dump_stack_lvl+0xe8/0x150 [ 418.118880][T16534] should_fail_ex+0x410/0x560 [ 418.118916][T16534] ? __alloc_skb+0x1db/0x7a0 [ 418.119075][T16534] should_failslab+0xa8/0x100 [ 418.119127][T16534] ? __alloc_skb+0x1db/0x7a0 [ 418.119146][T16534] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 418.119178][T16534] ? __alloc_skb+0x18d/0x7a0 [ 418.119199][T16534] ? __alloc_skb+0x1db/0x7a0 [ 418.119236][T16534] __alloc_skb+0x1db/0x7a0 [ 418.119263][T16534] netlink_sendmsg+0x5d4/0xb40 [ 418.119386][T16534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.119426][T16534] ? apparmor_socket_sendmsg+0x98/0x360 [ 418.119590][T16534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.119618][T16534] sock_sendmsg_nosec+0x13a/0x180 [ 418.119701][T16534] ____sys_sendmsg+0x54e/0x850 [ 418.119730][T16534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.119759][T16534] ? import_iovec+0x73/0xa0 [ 418.119833][T16534] ___sys_sendmsg+0x2a5/0x360 [ 418.119858][T16534] ? __lock_acquire+0x747/0x2de0 [ 418.119913][T16534] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.119978][T16534] ? __fget_files+0x2a/0x420 [ 418.119998][T16534] ? __fget_files+0x3a2/0x420 [ 418.120031][T16534] __x64_sys_sendmsg+0x1b1/0x290 [ 418.120059][T16534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.120107][T16534] do_syscall_64+0x166/0x520 [ 418.120134][T16534] ? trace_irq_disable+0x3b/0x140 [ 418.120159][T16534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.120183][T16534] ? clear_bhb_loop+0x70/0xc0 [ 418.120219][T16534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.120242][T16534] RIP: 0033:0x7f8cba39e559 [ 418.120263][T16534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.120282][T16534] RSP: 002b:00007f8cbb250028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.120307][T16534] RAX: ffffffffffffffda RBX: 00007f8cba625fa0 RCX: 00007f8cba39e559 [ 418.120324][T16534] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 418.120339][T16534] RBP: 00007f8cbb250090 R08: 0000000000000000 R09: 0000000000000000 [ 418.120353][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.120367][T16534] R13: 00007f8cba626038 R14: 00007f8cba625fa0 R15: 00007ffe52db0078 [ 418.120404][T16534] [ 418.278166][T16530] syzkaller0: entered promiscuous mode [ 418.278254][T16530] syzkaller0: entered allmulticast mode [ 418.676575][T16551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3695'. [ 418.812920][T16554] netlink: 'syz.7.3696': attribute type 2 has an invalid length. [ 419.082008][T16560] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3699'. [ 419.119290][T16569] veth0: entered promiscuous mode [ 419.176113][T16569] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 419.238017][T16572] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3701'. [ 419.239840][T16567] veth0: left promiscuous mode [ 419.273281][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3701'. [ 419.508358][T16587] FAULT_INJECTION: forcing a failure. [ 419.508358][T16587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.508396][T16587] CPU: 0 UID: 0 PID: 16587 Comm: syz.0.3705 Not tainted syzkaller #0 PREEMPT(full) [ 419.508421][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 419.508435][T16587] Call Trace: [ 419.508445][T16587] [ 419.508455][T16587] dump_stack_lvl+0xe8/0x150 [ 419.508499][T16587] should_fail_ex+0x410/0x560 [ 419.508538][T16587] _copy_from_iter+0x3b0/0x1660 [ 419.508572][T16587] ? rcu_is_watching+0x16/0xb0 [ 419.508637][T16587] ? __alloc_skb+0x27a/0x7a0 [ 419.508671][T16587] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 419.508701][T16587] ? __pfx__copy_from_iter+0x10/0x10 [ 419.508733][T16587] ? lock_acquire+0x115/0x350 [ 419.508758][T16587] ? __napi_alloc_frag_align+0x17e/0x570 [ 419.508806][T16587] skb_copy_datagram_from_iter+0xe6/0x720 [ 419.508914][T16587] ? lockdep_hardirqs_on+0x7b/0x110 [ 419.508975][T16587] ? __netdev_alloc_frag_align+0xdb/0x130 [ 419.509008][T16587] ? __local_bh_enable_ip+0xd6/0x140 [ 419.509056][T16587] tun_get_user+0x14fd/0x4450 [ 419.509224][T16587] ? __lock_acquire+0x747/0x2de0 [ 419.509278][T16587] ? __pfx_tun_get_user+0x10/0x10 [ 419.509313][T16587] ? __lock_acquire+0x747/0x2de0 [ 419.509347][T16587] ? aa_file_perm+0x18b/0x15f0 [ 419.509377][T16587] ? ref_tracker_alloc+0x341/0x4b0 [ 419.509445][T16587] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 419.509483][T16587] ? lock_acquire+0x115/0x350 [ 419.509508][T16587] ? tun_get+0x1c/0x2f0 [ 419.509545][T16587] ? tun_get+0x1c/0x2f0 [ 419.509575][T16587] ? tun_get+0x1c/0x2f0 [ 419.509611][T16587] tun_chr_write_iter+0x113/0x200 [ 419.509644][T16587] do_iter_readv_writev+0x612/0x8c0 [ 419.509689][T16587] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 419.509722][T16587] ? bpf_lsm_file_permission+0x9/0x20 [ 419.509763][T16587] ? security_file_permission+0x75/0x260 [ 419.509873][T16587] ? rw_verify_area+0x203/0x4c0 [ 419.509901][T16587] vfs_writev+0x343/0x990 [ 419.509942][T16587] ? __pfx_vfs_writev+0x10/0x10 [ 419.509990][T16587] ? __fget_files+0x2a/0x420 [ 419.510017][T16587] ? __fget_files+0x3a2/0x420 [ 419.510038][T16587] ? __fget_files+0x2a/0x420 [ 419.510067][T16587] do_writev+0x154/0x2e0 [ 419.510100][T16587] ? __pfx_do_writev+0x10/0x10 [ 419.510144][T16587] do_syscall_64+0x166/0x520 [ 419.510171][T16587] ? trace_irq_disable+0x3b/0x140 [ 419.510197][T16587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.510220][T16587] ? clear_bhb_loop+0x70/0xc0 [ 419.510248][T16587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.510271][T16587] RIP: 0033:0x7f58a819e559 [ 419.510292][T16587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.510311][T16587] RSP: 002b:00007f58a90e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 419.510336][T16587] RAX: ffffffffffffffda RBX: 00007f58a8425fa0 RCX: 00007f58a819e559 [ 419.510352][T16587] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 419.510366][T16587] RBP: 00007f58a90e2090 R08: 0000000000000000 R09: 0000000000000000 [ 419.510381][T16587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.510395][T16587] R13: 00007f58a8426038 R14: 00007f58a8425fa0 R15: 00007ffff04943f8 [ 419.510431][T16587] [ 419.963526][T16595] syzkaller0: entered promiscuous mode [ 419.964381][T16595] syzkaller0: entered allmulticast mode [ 420.020354][T16599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3708'. [ 420.435725][T16605] bond12: entered promiscuous mode [ 420.435755][T16605] bond12: entered allmulticast mode [ 420.748315][T16623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.805117][T16630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3713'. [ 420.842629][T16629] syzkaller1: entered promiscuous mode [ 420.842657][T16629] syzkaller1: entered allmulticast mode [ 420.947805][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.948064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.032028][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.489562][T16659] FAULT_INJECTION: forcing a failure. [ 421.489562][T16659] name failslab, interval 1, probability 0, space 0, times 0 [ 421.489609][T16659] CPU: 1 UID: 0 PID: 16659 Comm: syz.1.3719 Not tainted syzkaller #0 PREEMPT(full) [ 421.489634][T16659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 421.489653][T16659] Call Trace: [ 421.489667][T16659] [ 421.489678][T16659] dump_stack_lvl+0xe8/0x150 [ 421.489718][T16659] should_fail_ex+0x410/0x560 [ 421.489754][T16659] should_failslab+0xa8/0x100 [ 421.489787][T16659] ? skb_clone+0x212/0x3a0 [ 421.489815][T16659] kmem_cache_alloc_noprof+0xa1/0x600 [ 421.489843][T16659] ? skb_clone+0x212/0x3a0 [ 421.489875][T16659] skb_clone+0x212/0x3a0 [ 421.489905][T16659] __netlink_deliver_tap+0x413/0x860 [ 421.489947][T16659] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.489978][T16659] netlink_deliver_tap+0x19c/0x1b0 [ 421.490008][T16659] netlink_unicast+0x8c1/0xa80 [ 421.490071][T16659] netlink_sendmsg+0x813/0xb40 [ 421.490111][T16659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.490149][T16659] ? apparmor_socket_sendmsg+0x98/0x360 [ 421.490184][T16659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.490213][T16659] sock_sendmsg_nosec+0x13a/0x180 [ 421.490248][T16659] ____sys_sendmsg+0x54e/0x850 [ 421.490280][T16659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.490319][T16659] ? import_iovec+0x73/0xa0 [ 421.490357][T16659] ___sys_sendmsg+0x2a5/0x360 [ 421.490380][T16659] ? __lock_acquire+0x747/0x2de0 [ 421.490412][T16659] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.490476][T16659] ? __fget_files+0x2a/0x420 [ 421.490497][T16659] ? __fget_files+0x3a2/0x420 [ 421.490530][T16659] __x64_sys_sendmsg+0x1b1/0x290 [ 421.490559][T16659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.490609][T16659] do_syscall_64+0x166/0x520 [ 421.490638][T16659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.490662][T16659] ? clear_bhb_loop+0x70/0xc0 [ 421.490690][T16659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.490712][T16659] RIP: 0033:0x7f587f39e559 [ 421.490733][T16659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.490753][T16659] RSP: 002b:00007f5880186028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.490778][T16659] RAX: ffffffffffffffda RBX: 00007f587f625fa0 RCX: 00007f587f39e559 [ 421.490795][T16659] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000004 [ 421.490809][T16659] RBP: 00007f5880186090 R08: 0000000000000000 R09: 0000000000000000 [ 421.490822][T16659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.490835][T16659] R13: 00007f587f626038 R14: 00007f587f625fa0 R15: 00007ffd536ed798 [ 421.490873][T16659] [ 421.889427][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3723'. [ 421.958977][T16672] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 422.013401][T16678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3728'. [ 422.014975][T16678] FAULT_INJECTION: forcing a failure. [ 422.014975][T16678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.015008][T16678] CPU: 1 UID: 0 PID: 16678 Comm: syz.1.3728 Not tainted syzkaller #0 PREEMPT(full) [ 422.015034][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 422.015046][T16678] Call Trace: [ 422.015055][T16678] [ 422.015065][T16678] dump_stack_lvl+0xe8/0x150 [ 422.015115][T16678] should_fail_ex+0x410/0x560 [ 422.015154][T16678] _copy_from_user+0x2d/0xb0 [ 422.015191][T16678] kstrtouint_from_user+0xd6/0x180 [ 422.015224][T16678] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 422.015263][T16678] ? lock_acquire+0x115/0x350 [ 422.015294][T16678] proc_fail_nth_write+0x8e/0x210 [ 422.015362][T16678] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 422.015399][T16678] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 422.015425][T16678] vfs_write+0x296/0xba0 [ 422.015461][T16678] ? __pfx_vfs_write+0x10/0x10 [ 422.015487][T16678] ? __fget_files+0x2a/0x420 [ 422.015514][T16678] ? __fget_files+0x3a2/0x420 [ 422.015534][T16678] ? __fget_files+0x2a/0x420 [ 422.015565][T16678] ksys_write+0x150/0x270 [ 422.015592][T16678] ? __pfx_ksys_write+0x10/0x10 [ 422.015630][T16678] do_syscall_64+0x166/0x520 [ 422.015658][T16678] ? trace_irq_disable+0x3b/0x140 [ 422.015682][T16678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.015705][T16678] ? clear_bhb_loop+0x70/0xc0 [ 422.015733][T16678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.015755][T16678] RIP: 0033:0x7f587f35ed8e [ 422.015776][T16678] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 422.015795][T16678] RSP: 002b:00007f5880185fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.015820][T16678] RAX: ffffffffffffffda RBX: 00007f58801866c0 RCX: 00007f587f35ed8e [ 422.015841][T16678] RDX: 0000000000000001 RSI: 00007f58801860a0 RDI: 0000000000000005 [ 422.015855][T16678] RBP: 00007f5880186090 R08: 0000000000000000 R09: 0000000000000000 [ 422.015869][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.015883][T16678] R13: 00007f587f626038 R14: 00007f587f625fa0 R15: 00007ffd536ed798 [ 422.015920][T16678] [ 422.379607][T16688] syzkaller1: entered promiscuous mode [ 422.379632][T16688] syzkaller1: entered allmulticast mode [ 422.476855][T16697] FAULT_INJECTION: forcing a failure. [ 422.476855][T16697] name failslab, interval 1, probability 0, space 0, times 0 [ 422.476891][T16697] CPU: 0 UID: 0 PID: 16697 Comm: syz.1.3730 Not tainted syzkaller #0 PREEMPT(full) [ 422.476917][T16697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 422.476930][T16697] Call Trace: [ 422.476938][T16697] [ 422.476949][T16697] dump_stack_lvl+0xe8/0x150 [ 422.476993][T16697] should_fail_ex+0x410/0x560 [ 422.477032][T16697] should_failslab+0xa8/0x100 [ 422.477065][T16697] ? skb_clone+0x212/0x3a0 [ 422.477091][T16697] kmem_cache_alloc_noprof+0xa1/0x600 [ 422.477120][T16697] ? skb_clone+0x212/0x3a0 [ 422.477153][T16697] skb_clone+0x212/0x3a0 [ 422.477184][T16697] __netlink_deliver_tap+0x413/0x860 [ 422.477227][T16697] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.477257][T16697] netlink_deliver_tap+0x19c/0x1b0 [ 422.477287][T16697] netlink_unicast+0x8c1/0xa80 [ 422.477339][T16697] netlink_sendmsg+0x813/0xb40 [ 422.477379][T16697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.477418][T16697] ? apparmor_socket_sendmsg+0x18b/0x360 [ 422.477460][T16697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.477488][T16697] sock_sendmsg_nosec+0x13a/0x180 [ 422.477523][T16697] ____sys_sendmsg+0x54e/0x850 [ 422.477554][T16697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.477591][T16697] ? import_iovec+0x73/0xa0 [ 422.477631][T16697] ___sys_sendmsg+0x2a5/0x360 [ 422.477655][T16697] ? __lock_acquire+0x747/0x2de0 [ 422.477686][T16697] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.477753][T16697] ? __fget_files+0x2a/0x420 [ 422.477773][T16697] ? __fget_files+0x3a2/0x420 [ 422.477806][T16697] __x64_sys_sendmsg+0x1b1/0x290 [ 422.477835][T16697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.477886][T16697] do_syscall_64+0x166/0x520 [ 422.477912][T16697] ? trace_irq_disable+0x3b/0x140 [ 422.477937][T16697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.477960][T16697] ? clear_bhb_loop+0x70/0xc0 [ 422.477989][T16697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.478012][T16697] RIP: 0033:0x7f587f39e559 [ 422.478034][T16697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.478054][T16697] RSP: 002b:00007f587d5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.478078][T16697] RAX: ffffffffffffffda RBX: 00007f587f626090 RCX: 00007f587f39e559 [ 422.478123][T16697] RDX: 0000000020000050 RSI: 00002000000004c0 RDI: 0000000000000003 [ 422.478139][T16697] RBP: 00007f587d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.478153][T16697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.478167][T16697] R13: 00007f587f626128 R14: 00007f587f626090 R15: 00007ffd536ed798 [ 422.478205][T16697] [ 422.487236][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3730'. [ 423.034549][T16706] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3734'. [ 423.344001][T16723] syzkaller1: entered promiscuous mode [ 423.344029][T16723] syzkaller1: entered allmulticast mode [ 423.566378][T16732] FAULT_INJECTION: forcing a failure. [ 423.566378][T16732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.566415][T16732] CPU: 1 UID: 0 PID: 16732 Comm: syz.0.3740 Not tainted syzkaller #0 PREEMPT(full) [ 423.566440][T16732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 423.566453][T16732] Call Trace: [ 423.566462][T16732] [ 423.566481][T16732] dump_stack_lvl+0xe8/0x150 [ 423.566522][T16732] should_fail_ex+0x410/0x560 [ 423.566559][T16732] _copy_from_iter+0x1d3/0x1660 [ 423.566591][T16732] ? __alloc_skb+0x27a/0x7a0 [ 423.566615][T16732] ? __alloc_skb+0x27a/0x7a0 [ 423.566636][T16732] ? __alloc_skb+0x27a/0x7a0 [ 423.566660][T16732] ? __pfx__copy_from_iter+0x10/0x10 [ 423.566689][T16732] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 423.566714][T16732] ? __alloc_skb+0x27a/0x7a0 [ 423.566732][T16732] ? __alloc_skb+0x27a/0x7a0 [ 423.566759][T16732] ? netlink_sendmsg+0x650/0xb40 [ 423.566788][T16732] ? skb_put+0x112/0x210 [ 423.566813][T16732] netlink_sendmsg+0x6c0/0xb40 [ 423.566852][T16732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.566890][T16732] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.566923][T16732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.566951][T16732] sock_sendmsg_nosec+0x13a/0x180 [ 423.566985][T16732] ____sys_sendmsg+0x54e/0x850 [ 423.567015][T16732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.567050][T16732] ? import_iovec+0x73/0xa0 [ 423.567088][T16732] ___sys_sendmsg+0x2a5/0x360 [ 423.567111][T16732] ? __lock_acquire+0x747/0x2de0 [ 423.567142][T16732] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.567203][T16732] ? __fget_files+0x2a/0x420 [ 423.567224][T16732] ? __fget_files+0x3a2/0x420 [ 423.567255][T16732] __x64_sys_sendmsg+0x1b1/0x290 [ 423.567284][T16732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.567332][T16732] do_syscall_64+0x166/0x520 [ 423.567371][T16732] ? trace_irq_disable+0x3b/0x140 [ 423.567397][T16732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.567420][T16732] ? clear_bhb_loop+0x70/0xc0 [ 423.567447][T16732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.567477][T16732] RIP: 0033:0x7f58a819e559 [ 423.567498][T16732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.567518][T16732] RSP: 002b:00007f58a90e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.567543][T16732] RAX: ffffffffffffffda RBX: 00007f58a8425fa0 RCX: 00007f58a819e559 [ 423.567560][T16732] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 423.567574][T16732] RBP: 00007f58a90e2090 R08: 0000000000000000 R09: 0000000000000000 [ 423.567588][T16732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.567602][T16732] R13: 00007f58a8426038 R14: 00007f58a8425fa0 R15: 00007ffff04943f8 [ 423.567638][T16732] [ 423.620908][T16735] FAULT_INJECTION: forcing a failure. [ 423.620908][T16735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.621023][T16735] CPU: 0 UID: 0 PID: 16735 Comm: syz.6.3741 Not tainted syzkaller #0 PREEMPT(full) [ 423.621107][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 423.621142][T16735] Call Trace: [ 423.621173][T16735] [ 423.621198][T16735] dump_stack_lvl+0xe8/0x150 [ 423.621313][T16735] should_fail_ex+0x410/0x560 [ 423.621428][T16735] _copy_from_iter+0x1d3/0x1660 [ 423.621525][T16735] ? __alloc_skb+0x27a/0x7a0 [ 423.621594][T16735] ? __alloc_skb+0x27a/0x7a0 [ 423.621662][T16735] ? __alloc_skb+0x27a/0x7a0 [ 423.621721][T16735] ? __pfx__copy_from_iter+0x10/0x10 [ 423.621804][T16735] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 423.621878][T16735] ? __alloc_skb+0x27a/0x7a0 [ 423.621929][T16735] ? __alloc_skb+0x27a/0x7a0 [ 423.622010][T16735] ? netlink_sendmsg+0x650/0xb40 [ 423.622101][T16735] ? skb_put+0x112/0x210 [ 423.622173][T16735] netlink_sendmsg+0x6c0/0xb40 [ 423.622289][T16735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.622398][T16735] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.622472][T16735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.622502][T16735] sock_sendmsg_nosec+0x13a/0x180 [ 423.622537][T16735] ____sys_sendmsg+0x54e/0x850 [ 423.622570][T16735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.622607][T16735] ? import_iovec+0x73/0xa0 [ 423.622648][T16735] ___sys_sendmsg+0x2a5/0x360 [ 423.622674][T16735] ? __lock_acquire+0x747/0x2de0 [ 423.622708][T16735] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.622780][T16735] ? __fget_files+0x2a/0x420 [ 423.622803][T16735] ? __fget_files+0x3a2/0x420 [ 423.622838][T16735] __x64_sys_sendmsg+0x1b1/0x290 [ 423.622869][T16735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.622923][T16735] do_syscall_64+0x166/0x520 [ 423.622953][T16735] ? trace_irq_disable+0x3b/0x140 [ 423.622981][T16735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.623008][T16735] ? clear_bhb_loop+0x70/0xc0 [ 423.623039][T16735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.623065][T16735] RIP: 0033:0x7f1a9c59e559 [ 423.623088][T16735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.623111][T16735] RSP: 002b:00007f1a9d4a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.623138][T16735] RAX: ffffffffffffffda RBX: 00007f1a9c825fa0 RCX: 00007f1a9c59e559 [ 423.623157][T16735] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 423.623173][T16735] RBP: 00007f1a9d4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.623189][T16735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.623204][T16735] R13: 00007f1a9c826038 R14: 00007f1a9c825fa0 R15: 00007fff913249e8 [ 423.623245][T16735] [ 424.076831][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.373067][T16744] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3745'. [ 424.719203][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3751'. [ 424.719231][T16762] FAULT_INJECTION: forcing a failure. [ 424.719231][T16762] name failslab, interval 1, probability 0, space 0, times 0 [ 424.719258][T16762] CPU: 0 UID: 0 PID: 16762 Comm: syz.1.3751 Not tainted syzkaller #0 PREEMPT(full) [ 424.719293][T16762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 424.719308][T16762] Call Trace: [ 424.719316][T16762] [ 424.719326][T16762] dump_stack_lvl+0xe8/0x150 [ 424.719365][T16762] should_fail_ex+0x410/0x560 [ 424.719402][T16762] ? __alloc_skb+0x1db/0x7a0 [ 424.719424][T16762] should_failslab+0xa8/0x100 [ 424.719458][T16762] ? __alloc_skb+0x1db/0x7a0 [ 424.719480][T16762] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 424.719506][T16762] ? __alloc_skb+0x18d/0x7a0 [ 424.719526][T16762] ? __alloc_skb+0x1db/0x7a0 [ 424.719551][T16762] __alloc_skb+0x1db/0x7a0 [ 424.719575][T16762] netlink_ack+0x136/0xb30 [ 424.719601][T16762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.719700][T16762] ? ref_tracker_free+0x689/0x830 [ 424.719737][T16762] ? __pfx_ref_tracker_free+0x10/0x10 [ 424.719782][T16762] netlink_rcv_skb+0x2a4/0x4a0 [ 424.719811][T16762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.719834][T16762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.719876][T16762] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.719903][T16762] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.719937][T16762] netlink_unicast+0x8ef/0xa80 [ 424.719980][T16762] netlink_sendmsg+0x813/0xb40 [ 424.720018][T16762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.720056][T16762] ? apparmor_socket_sendmsg+0x18b/0x360 [ 424.720092][T16762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.720120][T16762] sock_sendmsg_nosec+0x13a/0x180 [ 424.720155][T16762] ____sys_sendmsg+0x54e/0x850 [ 424.720186][T16762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.720221][T16762] ? import_iovec+0x73/0xa0 [ 424.720260][T16762] ___sys_sendmsg+0x2a5/0x360 [ 424.720292][T16762] ? __lock_acquire+0x747/0x2de0 [ 424.720324][T16762] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.720387][T16762] ? __fget_files+0x2a/0x420 [ 424.720408][T16762] ? __fget_files+0x3a2/0x420 [ 424.720439][T16762] __x64_sys_sendmsg+0x1b1/0x290 [ 424.720468][T16762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.720516][T16762] do_syscall_64+0x166/0x520 [ 424.720543][T16762] ? trace_irq_disable+0x3b/0x140 [ 424.720568][T16762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.720592][T16762] ? clear_bhb_loop+0x70/0xc0 [ 424.720620][T16762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.720643][T16762] RIP: 0033:0x7f587f39e559 [ 424.720663][T16762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.720683][T16762] RSP: 002b:00007f587d5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.720708][T16762] RAX: ffffffffffffffda RBX: 00007f587f626090 RCX: 00007f587f39e559 [ 424.720725][T16762] RDX: 0000000020000050 RSI: 00002000000004c0 RDI: 0000000000000003 [ 424.720741][T16762] RBP: 00007f587d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.720754][T16762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.720767][T16762] R13: 00007f587f626128 R14: 00007f587f626090 R15: 00007ffd536ed798 [ 424.720803][T16762] [ 425.163966][T16769] syzkaller0: entered promiscuous mode [ 425.163992][T16769] syzkaller0: entered allmulticast mode [ 425.196401][T16768] netlink: 'syz.6.3753': attribute type 2 has an invalid length. [ 425.329173][T16774] netlink: 'syz.6.3756': attribute type 1 has an invalid length. [ 425.446688][T16774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 425.473728][T16781] bond4: (slave geneve2): making interface the new active one [ 425.479082][T16781] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 425.715336][T16798] openvswitch: netlink: IP tunnel TTL not specified. [ 425.773422][T16798] syzkaller1: entered promiscuous mode [ 425.773448][T16798] syzkaller1: entered allmulticast mode [ 426.070432][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.070698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.228955][T16813] syzkaller0: entered promiscuous mode [ 426.228982][T16813] syzkaller0: entered allmulticast mode [ 426.267777][T16817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3771'. [ 426.638373][T16832] netlink: 'syz.0.3778': attribute type 2 has an invalid length. [ 426.638476][T16832] FAULT_INJECTION: forcing a failure. [ 426.638476][T16832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.638506][T16832] CPU: 0 UID: 0 PID: 16832 Comm: syz.0.3778 Not tainted syzkaller #0 PREEMPT(full) [ 426.638531][T16832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 426.638545][T16832] Call Trace: [ 426.638554][T16832] [ 426.638564][T16832] dump_stack_lvl+0xe8/0x150 [ 426.638603][T16832] should_fail_ex+0x410/0x560 [ 426.638641][T16832] _copy_to_user+0x31/0xb0 [ 426.638665][T16832] simple_read_from_buffer+0xe1/0x170 [ 426.638743][T16832] proc_fail_nth_read+0x1bb/0x230 [ 426.638769][T16832] ? common_file_perm+0x20e/0x2b0 [ 426.638807][T16832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.638838][T16832] ? rw_verify_area+0x24a/0x4c0 [ 426.638864][T16832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.638890][T16832] vfs_read+0x213/0xa80 [ 426.638920][T16832] ? __pfx___mutex_lock+0x10/0x10 [ 426.639012][T16832] ? __pfx_vfs_read+0x10/0x10 [ 426.639038][T16832] ? __fget_files+0x2a/0x420 [ 426.639064][T16832] ? __fget_files+0x3a2/0x420 [ 426.639083][T16832] ? __fget_files+0x2a/0x420 [ 426.639115][T16832] ksys_read+0x150/0x270 [ 426.639141][T16832] ? __pfx_ksys_read+0x10/0x10 [ 426.639186][T16832] do_syscall_64+0x166/0x520 [ 426.639213][T16832] ? trace_irq_disable+0x3b/0x140 [ 426.639238][T16832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.639262][T16832] ? clear_bhb_loop+0x70/0xc0 [ 426.639290][T16832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.639313][T16832] RIP: 0033:0x7f58a815ed8e [ 426.639334][T16832] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.639354][T16832] RSP: 002b:00007f58a90e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.639379][T16832] RAX: ffffffffffffffda RBX: 00007f58a90e26c0 RCX: 00007f58a815ed8e [ 426.639396][T16832] RDX: 000000000000000f RSI: 00007f58a90e20a0 RDI: 0000000000000004 [ 426.639411][T16832] RBP: 00007f58a90e2090 R08: 0000000000000000 R09: 0000000000000000 [ 426.639425][T16832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.639439][T16832] R13: 00007f58a8426038 R14: 00007f58a8425fa0 R15: 00007ffff04943f8 [ 426.639474][T16832] [ 426.969993][T16834] bond5: entered promiscuous mode [ 426.970080][T16834] bond5: entered allmulticast mode [ 426.970575][T16834] 8021q: adding VLAN 0 to HW filter on device bond5 [ 427.069261][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3781'. [ 427.093931][T16841] bond6: entered promiscuous mode [ 427.093963][T16841] bond6: entered allmulticast mode [ 427.094552][T16841] 8021q: adding VLAN 0 to HW filter on device bond6 [ 427.107043][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.217095][T16850] bond1: entered promiscuous mode [ 427.217121][T16850] bond1: entered allmulticast mode [ 427.279628][T16853] ip_tables: iptables: counters copy to user failed while replacing table [ 428.502478][T16906] FAULT_INJECTION: forcing a failure. [ 428.502478][T16906] name failslab, interval 1, probability 0, space 0, times 0 [ 428.502515][T16906] CPU: 0 UID: 0 PID: 16906 Comm: syz.6.3799 Not tainted syzkaller #0 PREEMPT(full) [ 428.502541][T16906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 428.502555][T16906] Call Trace: [ 428.502564][T16906] [ 428.502574][T16906] dump_stack_lvl+0xe8/0x150 [ 428.502613][T16906] should_fail_ex+0x410/0x560 [ 428.502651][T16906] should_failslab+0xa8/0x100 [ 428.502687][T16906] __kmalloc_noprof+0xfe/0x720 [ 428.502714][T16906] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 428.502844][T16906] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 428.502890][T16906] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 428.502937][T16906] genl_family_rcv_msg_doit+0xda/0x340 [ 428.502981][T16906] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 428.503029][T16906] ? apparmor_capable+0x126/0x170 [ 428.503059][T16906] ? bpf_lsm_capable+0x9/0x20 [ 428.503084][T16906] ? security_capable+0x7e/0x2c0 [ 428.503156][T16906] genl_rcv_msg+0x614/0x7a0 [ 428.503198][T16906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.503232][T16906] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 428.503317][T16906] ? __pfx_nl80211_register_mgmt+0x10/0x10 [ 428.503367][T16906] ? __pfx_nl80211_post_doit+0x10/0x10 [ 428.503412][T16906] netlink_rcv_skb+0x226/0x4a0 [ 428.503442][T16906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.503487][T16906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.503533][T16906] ? down_read+0x2be/0x330 [ 428.503568][T16906] genl_rcv+0x28/0x40 [ 428.503600][T16906] netlink_unicast+0x8ef/0xa80 [ 428.503657][T16906] netlink_sendmsg+0x813/0xb40 [ 428.503698][T16906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.503736][T16906] ? apparmor_socket_sendmsg+0x98/0x360 [ 428.503778][T16906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.503807][T16906] sock_sendmsg_nosec+0x13a/0x180 [ 428.503841][T16906] ____sys_sendmsg+0x54e/0x850 [ 428.503873][T16906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.503909][T16906] ? import_iovec+0x73/0xa0 [ 428.503948][T16906] ___sys_sendmsg+0x2a5/0x360 [ 428.503972][T16906] ? __lock_acquire+0x747/0x2de0 [ 428.504003][T16906] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.504067][T16906] ? __fget_files+0x2a/0x420 [ 428.504088][T16906] ? __fget_files+0x3a2/0x420 [ 428.504120][T16906] __x64_sys_sendmsg+0x1b1/0x290 [ 428.504148][T16906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.504198][T16906] do_syscall_64+0x166/0x520 [ 428.504223][T16906] ? trace_irq_disable+0x3b/0x140 [ 428.504247][T16906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.504270][T16906] ? clear_bhb_loop+0x70/0xc0 [ 428.504297][T16906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.504318][T16906] RIP: 0033:0x7f1a9c59e559 [ 428.504340][T16906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.504359][T16906] RSP: 002b:00007f1a9d4a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.504384][T16906] RAX: ffffffffffffffda RBX: 00007f1a9c825fa0 RCX: 00007f1a9c59e559 [ 428.504400][T16906] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 428.504415][T16906] RBP: 00007f1a9d4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.504429][T16906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.504443][T16906] R13: 00007f1a9c826038 R14: 00007f1a9c825fa0 R15: 00007fff913249e8 [ 428.504489][T16906] [ 429.483794][T16933] batman_adv: batadv0: Adding interface: syz_tun [ 429.483816][T16933] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.483851][T16933] batman_adv: batadv0: Interface activated: syz_tun [ 429.647546][T16936] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3812'. [ 429.647599][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3812'. [ 429.828947][T16943] netlink: 'syz.1.3816': attribute type 2 has an invalid length. [ 430.003091][T16951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3819'. [ 430.142469][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.376315][T16965] FAULT_INJECTION: forcing a failure. [ 430.376315][T16965] name failslab, interval 1, probability 0, space 0, times 0 [ 430.376356][T16965] CPU: 1 UID: 0 PID: 16965 Comm: syz.7.3825 Not tainted syzkaller #0 PREEMPT(full) [ 430.376382][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 430.376397][T16965] Call Trace: [ 430.376406][T16965] [ 430.376415][T16965] dump_stack_lvl+0xe8/0x150 [ 430.376455][T16965] should_fail_ex+0x410/0x560 [ 430.376491][T16965] ? __alloc_skb+0x1db/0x7a0 [ 430.376512][T16965] should_failslab+0xa8/0x100 [ 430.376547][T16965] ? __alloc_skb+0x1db/0x7a0 [ 430.376565][T16965] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 430.376592][T16965] ? __alloc_skb+0x18d/0x7a0 [ 430.376613][T16965] ? __alloc_skb+0x1db/0x7a0 [ 430.376640][T16965] __alloc_skb+0x1db/0x7a0 [ 430.376667][T16965] netlink_ack+0x136/0xb30 [ 430.376693][T16965] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 430.376714][T16965] ? ref_tracker_free+0x689/0x830 [ 430.376751][T16965] ? __pfx_ref_tracker_free+0x10/0x10 [ 430.376797][T16965] netlink_rcv_skb+0x2a4/0x4a0 [ 430.376836][T16965] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 430.376860][T16965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.376903][T16965] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.376931][T16965] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.376966][T16965] netlink_unicast+0x8ef/0xa80 [ 430.377010][T16965] netlink_sendmsg+0x813/0xb40 [ 430.377049][T16965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.377088][T16965] ? apparmor_socket_sendmsg+0x98/0x360 [ 430.377123][T16965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.377150][T16965] sock_sendmsg_nosec+0x13a/0x180 [ 430.377185][T16965] ____sys_sendmsg+0x54e/0x850 [ 430.377215][T16965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.377251][T16965] ? import_iovec+0x73/0xa0 [ 430.377290][T16965] ___sys_sendmsg+0x2a5/0x360 [ 430.377319][T16965] ? __lock_acquire+0x747/0x2de0 [ 430.377350][T16965] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.377414][T16965] ? __fget_files+0x2a/0x420 [ 430.377442][T16965] ? __fget_files+0x3a2/0x420 [ 430.377498][T16965] __x64_sys_sendmsg+0x1b1/0x290 [ 430.377527][T16965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.377576][T16965] do_syscall_64+0x166/0x520 [ 430.377604][T16965] ? trace_irq_disable+0x3b/0x140 [ 430.377630][T16965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.377653][T16965] ? clear_bhb_loop+0x70/0xc0 [ 430.377681][T16965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.377704][T16965] RIP: 0033:0x7f3ffed9e559 [ 430.377726][T16965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.377745][T16965] RSP: 002b:00007f3fffbd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.377774][T16965] RAX: ffffffffffffffda RBX: 00007f3fff025fa0 RCX: 00007f3ffed9e559 [ 430.377791][T16965] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000004 [ 430.377806][T16965] RBP: 00007f3fffbd9090 R08: 0000000000000000 R09: 0000000000000000 [ 430.377851][T16965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.377864][T16965] R13: 00007f3fff026038 R14: 00007f3fff025fa0 R15: 00007ffc4c7b9538 [ 430.377901][T16965] [ 430.770868][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3827'. [ 430.936044][T16977] netlink: 'syz.6.3829': attribute type 2 has an invalid length. [ 431.097602][T16987] netlink: Conntrack attr has 8 unknown bytes [ 431.097640][T16987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.125834][T16989] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3832'. [ 431.222010][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.222227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.285850][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3834'. [ 431.316505][T16998] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3838'. [ 431.404895][T16993] bond2: entered promiscuous mode [ 431.404924][T16993] bond2: entered allmulticast mode [ 431.469556][T17001] netlink: 'syz.5.3837': attribute type 11 has an invalid length. [ 431.469580][T17001] netlink: 'syz.5.3837': attribute type 4 has an invalid length. [ 431.469595][T17001] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3837'. [ 431.566404][T17008] Bluetooth: MGMT ver 1.23 [ 431.567362][T17008] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3839'. [ 431.633517][T17005] tipc: Resetting bearer [ 431.656296][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3841'. [ 431.815769][T17017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3842'. [ 431.989386][T17022] netlink: 'syz.7.3846': attribute type 2 has an invalid length. [ 432.104165][T17031] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3848'. [ 432.327057][T17035] 0ªî{X¹¦: left promiscuous mode [ 432.327354][T17035] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 432.354696][T17035] syz_tun: left allmulticast mode [ 432.354725][T17035] syz_tun: left promiscuous mode [ 432.354959][T17035] bridge0: port 3(syz_tun) entered disabled state [ 432.388690][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3852'. [ 432.417065][T17035] batman_adv: batadv0: Interface deactivated: dummy0 [ 432.417093][T17035] batman_adv: batadv0: Removing interface: dummy0 [ 432.437082][T17035] bridge_slave_1: left promiscuous mode [ 432.437298][T17035] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.478292][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3854'. [ 432.480476][T17035] bond0: (slave bond_slave_0): Releasing backup interface [ 432.523687][T17035] bond0: (slave bond_slave_1): Releasing backup interface [ 432.599953][T17035] team0: Port device team_slave_0 removed [ 432.621191][T17035] team0: Port device team_slave_1 removed [ 432.643539][T17035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.643576][T17035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.695930][T17035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.695992][T17035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.740221][T17035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 432.800062][T17041] team0: Mode changed to "random" [ 432.976288][T17049] syzkaller1: entered promiscuous mode [ 432.976332][T17049] syzkaller1: entered allmulticast mode [ 433.175466][T17067] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3858'. [ 433.178753][T17069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.191917][ T9814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.429520][T17077] FAULT_INJECTION: forcing a failure. [ 433.429520][T17077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.429556][T17077] CPU: 1 UID: 0 PID: 17077 Comm: syz.1.3861 Not tainted syzkaller #0 PREEMPT(full) [ 433.429581][T17077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 433.429603][T17077] Call Trace: [ 433.429612][T17077] [ 433.429622][T17077] dump_stack_lvl+0xe8/0x150 [ 433.429661][T17077] should_fail_ex+0x410/0x560 [ 433.429699][T17077] _copy_from_iter+0x1d3/0x1660 [ 433.429731][T17077] ? __alloc_skb+0x27a/0x7a0 [ 433.429755][T17077] ? __alloc_skb+0x27a/0x7a0 [ 433.429777][T17077] ? __alloc_skb+0x27a/0x7a0 [ 433.429797][T17077] ? __pfx__copy_from_iter+0x10/0x10 [ 433.429826][T17077] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 433.429851][T17077] ? __alloc_skb+0x27a/0x7a0 [ 433.429870][T17077] ? __alloc_skb+0x27a/0x7a0 [ 433.429896][T17077] ? netlink_sendmsg+0x650/0xb40 [ 433.429925][T17077] ? skb_put+0x112/0x210 [ 433.429949][T17077] netlink_sendmsg+0x6c0/0xb40 [ 433.429988][T17077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.430026][T17077] ? apparmor_socket_sendmsg+0x98/0x360 [ 433.430059][T17077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.430085][T17077] sock_sendmsg_nosec+0x13a/0x180 [ 433.430125][T17077] ____sys_sendmsg+0x54e/0x850 [ 433.430155][T17077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.430190][T17077] ? import_iovec+0x73/0xa0 [ 433.430227][T17077] ___sys_sendmsg+0x2a5/0x360 [ 433.430251][T17077] ? __lock_acquire+0x747/0x2de0 [ 433.430281][T17077] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.430344][T17077] ? __fget_files+0x2a/0x420 [ 433.430367][T17077] ? __fget_files+0x3a2/0x420 [ 433.430399][T17077] __x64_sys_sendmsg+0x1b1/0x290 [ 433.430427][T17077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.430476][T17077] do_syscall_64+0x166/0x520 [ 433.430502][T17077] ? trace_irq_disable+0x3b/0x140 [ 433.430527][T17077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.430550][T17077] ? clear_bhb_loop+0x70/0xc0 [ 433.430578][T17077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.430616][T17077] RIP: 0033:0x7f587f39e559 [ 433.430637][T17077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.430656][T17077] RSP: 002b:00007f5880186028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.430681][T17077] RAX: ffffffffffffffda RBX: 00007f587f625fa0 RCX: 00007f587f39e559 [ 433.430698][T17077] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 433.430712][T17077] RBP: 00007f5880186090 R08: 0000000000000000 R09: 0000000000000000 [ 433.430727][T17077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.430740][T17077] R13: 00007f587f626038 R14: 00007f587f625fa0 R15: 00007ffd536ed798 [ 433.430775][T17077] [ 434.491661][T17123] netlink: 'syz.7.3875': attribute type 2 has an invalid length. [ 434.603495][T17126] netlink: 'syz.6.3876': attribute type 1 has an invalid length. [ 434.688413][T17126] bond7: (slave gretap1): making interface the new active one [ 434.689249][T17126] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 434.829516][T17139] bridge0: port 1(veth1_to_bridge) entered blocking state [ 434.829698][T17139] bridge0: port 1(veth1_to_bridge) entered disabled state [ 434.829878][T17139] veth1_to_bridge: entered allmulticast mode [ 434.854179][T17139] veth1_to_bridge: entered promiscuous mode [ 435.074826][T17142] netlink: 'syz.5.3883': attribute type 2 has an invalid length. [ 435.531098][T17169] FAULT_INJECTION: forcing a failure. [ 435.531098][T17169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.531124][T17169] CPU: 1 UID: 0 PID: 17169 Comm: syz.5.3893 Not tainted syzkaller #0 PREEMPT(full) [ 435.531142][T17169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 435.531153][T17169] Call Trace: [ 435.531159][T17169] [ 435.531167][T17169] dump_stack_lvl+0xe8/0x150 [ 435.531196][T17169] should_fail_ex+0x410/0x560 [ 435.531239][T17169] _copy_from_user+0x2d/0xb0 [ 435.531291][T17169] kstrtouint_from_user+0xd6/0x180 [ 435.531324][T17169] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 435.531363][T17169] ? lock_acquire+0x115/0x350 [ 435.531392][T17169] proc_fail_nth_write+0x8e/0x210 [ 435.531420][T17169] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 435.531456][T17169] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 435.531482][T17169] vfs_write+0x296/0xba0 [ 435.531515][T17169] ? __pfx_vfs_write+0x10/0x10 [ 435.531541][T17169] ? __fget_files+0x2a/0x420 [ 435.531567][T17169] ? __fget_files+0x3a2/0x420 [ 435.531587][T17169] ? __fget_files+0x2a/0x420 [ 435.531618][T17169] ksys_write+0x150/0x270 [ 435.531645][T17169] ? __pfx_ksys_write+0x10/0x10 [ 435.531682][T17169] do_syscall_64+0x166/0x520 [ 435.531709][T17169] ? trace_irq_disable+0x3b/0x140 [ 435.531734][T17169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.531757][T17169] ? clear_bhb_loop+0x70/0xc0 [ 435.531784][T17169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.531807][T17169] RIP: 0033:0x7f8cba35ed8e [ 435.531827][T17169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.531846][T17169] RSP: 002b:00007f8cbb24ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.531870][T17169] RAX: ffffffffffffffda RBX: 00007f8cbb2506c0 RCX: 00007f8cba35ed8e [ 435.531887][T17169] RDX: 0000000000000001 RSI: 00007f8cbb2500a0 RDI: 0000000000000006 [ 435.531900][T17169] RBP: 00007f8cbb250090 R08: 0000000000000000 R09: 0000000000000000 [ 435.531915][T17169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.531929][T17169] R13: 00007f8cba626038 R14: 00007f8cba625fa0 R15: 00007ffe52db0078 [ 435.531963][T17169] [ 436.221648][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.347485][T17193] __nla_validate_parse: 3 callbacks suppressed [ 436.347540][T17193] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3903'. [ 436.427035][T17195] ip_tables: iptables: counters copy to user failed while replacing table [ 436.427790][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3906'. [ 436.427818][T17195] netlink: 'syz.7.3906': attribute type 3 has an invalid length. [ 436.944502][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.944718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.069757][T17226] syzkaller1: entered promiscuous mode [ 437.069783][T17226] syzkaller1: entered allmulticast mode [ 437.309075][T17234] netdevsim netdevsim6: Firmware load for './file0/file0/..' refused, path contains '..' component [ 437.317065][T17234] SET target dimension over the limit! [ 437.358615][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'. [ 437.668779][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'. [ 437.669112][T17248] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 437.669997][T17248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.676667][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'. [ 437.715876][T17248] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3921'. [ 437.717445][T17250] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3921'. [ 438.035422][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3926'. [ 438.167652][T17268] syzkaller0: entered promiscuous mode [ 438.167679][T17268] syzkaller0: entered allmulticast mode [ 438.494253][T17252] nbd: socks must be embedded in a SOCK_ITEM attr [ 438.537874][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3931'. [ 438.622519][T17294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3933'. [ 438.658692][T17294] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 438.660854][T17294] geneve1: entered promiscuous mode [ 439.081014][T17311] syzkaller0: entered promiscuous mode [ 439.081039][T17311] syzkaller0: entered allmulticast mode [ 439.264838][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.729165][T17349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.870034][T17357] FAULT_INJECTION: forcing a failure. [ 439.870034][T17357] name failslab, interval 1, probability 0, space 0, times 0 [ 439.870069][T17357] CPU: 1 UID: 0 PID: 17357 Comm: syz.0.3957 Not tainted syzkaller #0 PREEMPT(full) [ 439.870093][T17357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 439.870107][T17357] Call Trace: [ 439.870116][T17357] [ 439.870126][T17357] dump_stack_lvl+0xe8/0x150 [ 439.870166][T17357] should_fail_ex+0x410/0x560 [ 439.870205][T17357] should_failslab+0xa8/0x100 [ 439.870240][T17357] __kvmalloc_node_noprof+0x176/0x820 [ 439.870273][T17357] ? alloc_netdev_mqs+0xae2/0x12a0 [ 439.870416][T17357] ? alloc_netdev_mqs+0xae2/0x12a0 [ 439.870453][T17357] alloc_netdev_mqs+0xae2/0x12a0 [ 439.870490][T17357] rtnl_create_link+0x321/0xd70 [ 439.870556][T17357] rtnl_newlink_create+0x258/0x7b0 [ 439.870590][T17357] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 439.870620][T17357] ? __pfx___mutex_lock+0x10/0x10 [ 439.870661][T17357] ? ns_capable+0x89/0xe0 [ 439.870704][T17357] rtnl_newlink+0x166d/0x1c30 [ 439.870745][T17357] ? __pfx_rtnl_newlink+0x10/0x10 [ 439.870770][T17357] ? __lock_acquire+0x747/0x2de0 [ 439.870800][T17357] ? __lock_acquire+0x747/0x2de0 [ 439.870833][T17357] ? __lock_acquire+0x747/0x2de0 [ 439.870875][T17357] ? lock_acquire+0x115/0x350 [ 439.870908][T17357] ? lock_acquire+0x115/0x350 [ 439.870944][T17357] ? __lock_acquire+0x747/0x2de0 [ 439.870973][T17357] ? is_bpf_text_address+0x292/0x2b0 [ 439.871018][T17357] ? kernel_text_address+0xa5/0xe0 [ 439.871058][T17357] ? __kernel_text_address+0xd/0x30 [ 439.871082][T17357] ? unwind_get_return_address+0x4d/0x90 [ 439.871132][T17357] ? lock_acquire+0x115/0x350 [ 439.871174][T17357] ? __pfx_rtnl_newlink+0x10/0x10 [ 439.871195][T17357] rtnetlink_rcv_msg+0x802/0xc00 [ 439.871221][T17357] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 439.871243][T17357] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.871267][T17357] ? __lock_acquire+0x747/0x2de0 [ 439.871305][T17357] netlink_rcv_skb+0x226/0x4a0 [ 439.871334][T17357] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.871357][T17357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.871400][T17357] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.871427][T17357] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.871462][T17357] netlink_unicast+0x8ef/0xa80 [ 439.871507][T17357] netlink_sendmsg+0x813/0xb40 [ 439.871548][T17357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.871585][T17357] ? apparmor_socket_sendmsg+0x98/0x360 [ 439.871631][T17357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.871659][T17357] sock_sendmsg_nosec+0x13a/0x180 [ 439.871693][T17357] ____sys_sendmsg+0x54e/0x850 [ 439.871723][T17357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.871758][T17357] ? import_iovec+0x73/0xa0 [ 439.871796][T17357] ___sys_sendmsg+0x2a5/0x360 [ 439.871820][T17357] ? __lock_acquire+0x747/0x2de0 [ 439.871850][T17357] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.871915][T17357] ? __fget_files+0x2a/0x420 [ 439.871934][T17357] ? __fget_files+0x3a2/0x420 [ 439.871965][T17357] __x64_sys_sendmsg+0x1b1/0x290 [ 439.872002][T17357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.872053][T17357] do_syscall_64+0x166/0x520 [ 439.872080][T17357] ? trace_irq_disable+0x3b/0x140 [ 439.872105][T17357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.872129][T17357] ? clear_bhb_loop+0x70/0xc0 [ 439.872157][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.872181][T17357] RIP: 0033:0x7f58a819e559 [ 439.872202][T17357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.872222][T17357] RSP: 002b:00007f58a90e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.872247][T17357] RAX: ffffffffffffffda RBX: 00007f58a8425fa0 RCX: 00007f58a819e559 [ 439.872264][T17357] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 439.872278][T17357] RBP: 00007f58a90e2090 R08: 0000000000000000 R09: 0000000000000000 [ 439.872293][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.872306][T17357] R13: 00007f58a8426038 R14: 00007f58a8425fa0 R15: 00007ffff04943f8 [ 439.872343][T17357] [ 440.584224][T17373] syzkaller1: entered promiscuous mode [ 440.584268][T17373] syzkaller1: entered allmulticast mode [ 440.588385][T17373] netlink: 'syz.5.3963': attribute type 1 has an invalid length. [ 440.938250][T17391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.627217][T17428] __nla_validate_parse: 8 callbacks suppressed [ 441.627244][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3976'. [ 441.660710][T17428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3976'. [ 441.756153][T17432] syzkaller1: entered promiscuous mode [ 441.756177][T17432] syzkaller1: entered allmulticast mode [ 441.856151][T17433] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 442.010735][T17439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.203090][T17453] FAULT_INJECTION: forcing a failure. [ 442.203090][T17453] name failslab, interval 1, probability 0, space 0, times 0 [ 442.203127][T17453] CPU: 0 UID: 0 PID: 17453 Comm: syz.0.3987 Not tainted syzkaller #0 PREEMPT(full) [ 442.203156][T17453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 442.203170][T17453] Call Trace: [ 442.203178][T17453] [ 442.203189][T17453] dump_stack_lvl+0xe8/0x150 [ 442.203227][T17453] should_fail_ex+0x410/0x560 [ 442.203266][T17453] should_failslab+0xa8/0x100 [ 442.203299][T17453] __kmalloc_cache_noprof+0xa3/0x600 [ 442.203328][T17453] ? __kmalloc_cache_noprof+0x14d/0x600 [ 442.203353][T17453] ? alloc_netdev_mqs+0xca0/0x12a0 [ 442.203384][T17453] ? alloc_netdev_mqs+0xca0/0x12a0 [ 442.203428][T17453] alloc_netdev_mqs+0xca0/0x12a0 [ 442.203466][T17453] rtnl_create_link+0x321/0xd70 [ 442.203505][T17453] rtnl_newlink_create+0x258/0x7b0 [ 442.203539][T17453] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 442.203569][T17453] ? __pfx___mutex_lock+0x10/0x10 [ 442.203609][T17453] ? ns_capable+0x89/0xe0 [ 442.203643][T17453] rtnl_newlink+0x166d/0x1c30 [ 442.203684][T17453] ? __pfx_rtnl_newlink+0x10/0x10 [ 442.203708][T17453] ? __lock_acquire+0x747/0x2de0 [ 442.203737][T17453] ? __lock_acquire+0x747/0x2de0 [ 442.203771][T17453] ? __lock_acquire+0x747/0x2de0 [ 442.203813][T17453] ? lock_acquire+0x115/0x350 [ 442.203846][T17453] ? lock_acquire+0x115/0x350 [ 442.203884][T17453] ? __lock_acquire+0x747/0x2de0 [ 442.203912][T17453] ? is_bpf_text_address+0x292/0x2b0 [ 442.203948][T17453] ? kernel_text_address+0xa5/0xe0 [ 442.203976][T17453] ? __kernel_text_address+0xd/0x30 [ 442.204001][T17453] ? unwind_get_return_address+0x4d/0x90 [ 442.204039][T17453] ? lock_acquire+0x115/0x350 [ 442.204081][T17453] ? __pfx_rtnl_newlink+0x10/0x10 [ 442.204102][T17453] rtnetlink_rcv_msg+0x802/0xc00 [ 442.204128][T17453] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 442.204149][T17453] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 442.204173][T17453] ? __lock_acquire+0x747/0x2de0 [ 442.204213][T17453] netlink_rcv_skb+0x226/0x4a0 [ 442.204243][T17453] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 442.204268][T17453] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.204312][T17453] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.204339][T17453] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.204374][T17453] netlink_unicast+0x8ef/0xa80 [ 442.204426][T17453] netlink_sendmsg+0x813/0xb40 [ 442.204467][T17453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.204506][T17453] ? apparmor_socket_sendmsg+0x98/0x360 [ 442.204540][T17453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.204568][T17453] sock_sendmsg_nosec+0x13a/0x180 [ 442.204603][T17453] ____sys_sendmsg+0x54e/0x850 [ 442.204634][T17453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.204670][T17453] ? import_iovec+0x73/0xa0 [ 442.204710][T17453] ___sys_sendmsg+0x2a5/0x360 [ 442.204733][T17453] ? __lock_acquire+0x747/0x2de0 [ 442.204763][T17453] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.204828][T17453] ? __fget_files+0x2a/0x420 [ 442.204849][T17453] ? __fget_files+0x3a2/0x420 [ 442.204882][T17453] __x64_sys_sendmsg+0x1b1/0x290 [ 442.204911][T17453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.204961][T17453] do_syscall_64+0x166/0x520 [ 442.204987][T17453] ? trace_irq_disable+0x3b/0x140 [ 442.205012][T17453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.205035][T17453] ? clear_bhb_loop+0x70/0xc0 [ 442.205064][T17453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.205086][T17453] RIP: 0033:0x7f58a819e559 [ 442.205109][T17453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.205128][T17453] RSP: 002b:00007f58a90e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.205153][T17453] RAX: ffffffffffffffda RBX: 00007f58a8425fa0 RCX: 00007f58a819e559 [ 442.205170][T17453] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 442.205185][T17453] RBP: 00007f58a90e2090 R08: 0000000000000000 R09: 0000000000000000 [ 442.205199][T17453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.205212][T17453] R13: 00007f58a8426038 R14: 00007f58a8425fa0 R15: 00007ffff04943f8 [ 442.205249][T17453] [ 442.312286][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.691826][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3989'. [ 442.704425][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.707441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.059837][T17485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.346314][T17504] FAULT_INJECTION: forcing a failure. [ 443.346314][T17504] name failslab, interval 1, probability 0, space 0, times 0 [ 443.346351][T17504] CPU: 1 UID: 0 PID: 17504 Comm: syz.5.4004 Not tainted syzkaller #0 PREEMPT(full) [ 443.346376][T17504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 443.346390][T17504] Call Trace: [ 443.346399][T17504] [ 443.346409][T17504] dump_stack_lvl+0xe8/0x150 [ 443.346454][T17504] should_fail_ex+0x410/0x560 [ 443.346490][T17504] should_failslab+0xa8/0x100 [ 443.346525][T17504] __kmalloc_cache_noprof+0xa3/0x600 [ 443.346550][T17504] ? __kmalloc_cache_noprof+0x14d/0x600 [ 443.346574][T17504] ? alloc_netdev_mqs+0xca0/0x12a0 [ 443.346603][T17504] ? alloc_netdev_mqs+0xca0/0x12a0 [ 443.346638][T17504] alloc_netdev_mqs+0xca0/0x12a0 [ 443.346674][T17504] rtnl_create_link+0x321/0xd70 [ 443.346710][T17504] rtnl_newlink_create+0x258/0x7b0 [ 443.346751][T17504] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 443.346781][T17504] ? __pfx___mutex_lock+0x10/0x10 [ 443.346820][T17504] ? ns_capable+0x89/0xe0 [ 443.346854][T17504] rtnl_newlink+0x166d/0x1c30 [ 443.346891][T17504] ? __pfx_rtnl_newlink+0x10/0x10 [ 443.346910][T17504] ? do_syscall_64+0x166/0x520 [ 443.346935][T17504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.346997][T17504] ? kasan_quarantine_put+0xbb/0x1f0 [ 443.347023][T17504] ? lockdep_hardirqs_on+0x7b/0x110 [ 443.347053][T17504] ? nlmon_xmit+0xb0/0x100 [ 443.347199][T17504] ? kmem_cache_free+0x182/0x650 [ 443.347240][T17504] ? __lock_acquire+0x747/0x2de0 [ 443.347292][T17504] ? __local_bh_enable_ip+0xd6/0x140 [ 443.347321][T17504] ? lockdep_hardirqs_on+0x7b/0x110 [ 443.347346][T17504] ? __dev_queue_xmit+0x29b/0x3920 [ 443.347404][T17504] ? __local_bh_enable_ip+0xd6/0x140 [ 443.347444][T17504] ? lock_acquire+0x115/0x350 [ 443.347484][T17504] ? __pfx_rtnl_newlink+0x10/0x10 [ 443.347504][T17504] rtnetlink_rcv_msg+0x802/0xc00 [ 443.347532][T17504] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 443.347554][T17504] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 443.347574][T17504] ? ref_tracker_free+0x689/0x830 [ 443.347611][T17504] ? __pfx_ref_tracker_free+0x10/0x10 [ 443.347655][T17504] netlink_rcv_skb+0x226/0x4a0 [ 443.347686][T17504] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 443.347711][T17504] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.347764][T17504] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.347792][T17504] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.347827][T17504] netlink_unicast+0x8ef/0xa80 [ 443.347873][T17504] netlink_sendmsg+0x813/0xb40 [ 443.347914][T17504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.347953][T17504] ? apparmor_socket_sendmsg+0x98/0x360 [ 443.347988][T17504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.348017][T17504] sock_sendmsg_nosec+0x13a/0x180 [ 443.348052][T17504] ____sys_sendmsg+0x54e/0x850 [ 443.348084][T17504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.348120][T17504] ? import_iovec+0x73/0xa0 [ 443.348159][T17504] ___sys_sendmsg+0x2a5/0x360 [ 443.348183][T17504] ? __lock_acquire+0x747/0x2de0 [ 443.348214][T17504] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.348278][T17504] ? __fget_files+0x2a/0x420 [ 443.348300][T17504] ? __fget_files+0x3a2/0x420 [ 443.348332][T17504] __x64_sys_sendmsg+0x1b1/0x290 [ 443.348361][T17504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.348409][T17504] do_syscall_64+0x166/0x520 [ 443.348433][T17504] ? trace_irq_disable+0x3b/0x140 [ 443.348457][T17504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.348478][T17504] ? clear_bhb_loop+0x70/0xc0 [ 443.348505][T17504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.348528][T17504] RIP: 0033:0x7f8cba39e559 [ 443.348550][T17504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.348567][T17504] RSP: 002b:00007f8cbb250028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.348591][T17504] RAX: ffffffffffffffda RBX: 00007f8cba625fa0 RCX: 00007f8cba39e559 [ 443.348607][T17504] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 443.348621][T17504] RBP: 00007f8cbb250090 R08: 0000000000000000 R09: 0000000000000000 [ 443.348634][T17504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.348648][T17504] R13: 00007f8cba626038 R14: 00007f8cba625fa0 R15: 00007ffe52db0078 [ 443.348684][T17504] [ 443.935754][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4005'. [ 443.978035][T17507] pim6reg: entered allmulticast mode [ 443.993644][T17506] pim6reg: left allmulticast mode [ 444.309782][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4009'. [ 444.366459][T17536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.418847][T17533] syzkaller1: entered promiscuous mode [ 444.418874][T17533] syzkaller1: entered allmulticast mode [ 444.505134][T17537] netlink: 'syz.5.4013': attribute type 4 has an invalid length. [ 444.653108][T17549] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4019'. [ 444.835486][T17559] netlink: 'syz.7.4023': attribute type 2 has an invalid length. [ 444.873720][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4022'. [ 444.957942][T17563] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 444.977835][T17557] bond13: entered promiscuous mode [ 444.977864][T17557] bond13: entered allmulticast mode [ 445.013279][T17569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.344075][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.675836][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4032'. [ 445.867672][T17606] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4036'. [ 445.997629][T17609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.038138][ T31] audit: type=1804 audit(1792497535.534:8): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4038" name="/newroot/853/cgroup.controllers" dev="tmpfs" ino=4357 res=1 errno=0 [ 446.038427][ T31] audit: type=1800 audit(1792497535.534:9): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4038" name="cgroup.controllers" dev="tmpfs" ino=4357 res=0 errno=0 [ 446.106711][T17620] FAULT_INJECTION: forcing a failure. [ 446.106711][T17620] name failslab, interval 1, probability 0, space 0, times 0 [ 446.106747][T17620] CPU: 0 UID: 0 PID: 17620 Comm: syz.0.4040 Not tainted syzkaller #0 PREEMPT(full) [ 446.106772][T17620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 446.106786][T17620] Call Trace: [ 446.106794][T17620] [ 446.106805][T17620] dump_stack_lvl+0xe8/0x150 [ 446.106844][T17620] should_fail_ex+0x410/0x560 [ 446.106882][T17620] should_failslab+0xa8/0x100 [ 446.106916][T17620] __kmalloc_noprof+0xfe/0x720 [ 446.106942][T17620] ? __lock_acquire+0x747/0x2de0 [ 446.106967][T17620] ? dev_prep_valid_name+0x1bc/0x640 [ 446.106998][T17620] ? dev_prep_valid_name+0x1bc/0x640 [ 446.107048][T17620] dev_prep_valid_name+0x1bc/0x640 [ 446.107078][T17620] ? rtnl_newlink+0x166d/0x1c30 [ 446.107099][T17620] ? netlink_rcv_skb+0x226/0x4a0 [ 446.107125][T17620] ? netlink_unicast+0x8ef/0xa80 [ 446.107147][T17620] ? netlink_sendmsg+0x813/0xb40 [ 446.107174][T17620] ? sock_sendmsg_nosec+0x13a/0x180 [ 446.107207][T17620] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 446.107248][T17620] ? __raw_spin_lock_init+0x45/0x100 [ 446.107284][T17620] register_netdevice+0x530/0x1eb0 [ 446.107330][T17620] ? lock_acquire+0x115/0x350 [ 446.107358][T17620] ? __pfx_register_netdevice+0x10/0x10 [ 446.107391][T17620] ? net_generic+0x1e/0x240 [ 446.107530][T17620] ? net_generic+0x1e/0x240 [ 446.107568][T17620] ip6_tnl_create2+0x79/0x400 [ 446.107598][T17620] ? ip6_tnl_newlink+0x24a/0x640 [ 446.107632][T17620] ip6_tnl_newlink+0x335/0x640 [ 446.107666][T17620] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 446.107693][T17620] ? dev_validate_mtu+0x125/0x170 [ 446.107720][T17620] ? rtnl_create_link+0xa04/0xd70 [ 446.107752][T17620] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 446.107785][T17620] rtnl_newlink_create+0x305/0x7b0 [ 446.107845][T17620] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 446.107876][T17620] ? __pfx___mutex_lock+0x10/0x10 [ 446.107918][T17620] ? ns_capable+0x89/0xe0 [ 446.107954][T17620] rtnl_newlink+0x166d/0x1c30 [ 446.107995][T17620] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.108028][T17620] ? __lock_acquire+0x747/0x2de0 [ 446.108057][T17620] ? __lock_acquire+0x747/0x2de0 [ 446.108091][T17620] ? __lock_acquire+0x747/0x2de0 [ 446.108134][T17620] ? lock_acquire+0x115/0x350 [ 446.108167][T17620] ? lock_acquire+0x115/0x350 [ 446.108203][T17620] ? __lock_acquire+0x747/0x2de0 [ 446.108230][T17620] ? is_bpf_text_address+0x292/0x2b0 [ 446.108266][T17620] ? kernel_text_address+0xa5/0xe0 [ 446.108292][T17620] ? __kernel_text_address+0xd/0x30 [ 446.108318][T17620] ? unwind_get_return_address+0x4d/0x90 [ 446.108359][T17620] ? lock_acquire+0x115/0x350 [ 446.108401][T17620] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.108421][T17620] rtnetlink_rcv_msg+0x802/0xc00 [ 446.108447][T17620] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 446.108467][T17620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.108488][T17620] ? __lock_acquire+0x747/0x2de0 [ 446.108527][T17620] netlink_rcv_skb+0x226/0x4a0 [ 446.108557][T17620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.108581][T17620] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.108620][T17620] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.108648][T17620] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.108681][T17620] netlink_unicast+0x8ef/0xa80 [ 446.108724][T17620] netlink_sendmsg+0x813/0xb40 [ 446.108762][T17620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.108801][T17620] ? apparmor_socket_sendmsg+0x98/0x360 [ 446.108836][T17620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.108865][T17620] sock_sendmsg_nosec+0x13a/0x180 [ 446.108900][T17620] ____sys_sendmsg+0x54e/0x850 [ 446.108931][T17620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.108968][T17620] ? import_iovec+0x73/0xa0 [ 446.109015][T17620] ___sys_sendmsg+0x2a5/0x360 [ 446.109037][T17620] ? __lock_acquire+0x747/0x2de0 [ 446.109067][T17620] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.109131][T17620] ? __fget_files+0x2a/0x420 [ 446.109153][T17620] ? __fget_files+0x3a2/0x420 [ 446.109184][T17620] __x64_sys_sendmsg+0x1b1/0x290 [ 446.109212][T17620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.109261][T17620] do_syscall_64+0x166/0x520 [ 446.109288][T17620] ? trace_irq_disable+0x3b/0x140 [ 446.109313][T17620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.109337][T17620] ? clear_bhb_loop+0x70/0xc0 [ 446.109365][T17620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.109387][T17620] RIP: 0033:0x7f58a819e559 [ 446.109408][T17620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.109427][T17620] RSP: 002b:00007f58a90e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.109451][T17620] RAX: ffffffffffffffda RBX: 00007f58a8425fa0 RCX: 00007f58a819e559 [ 446.109469][T17620] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 446.109483][T17620] RBP: 00007f58a90e2090 R08: 0000000000000000 R09: 0000000000000000 [ 446.109498][T17620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.109510][T17620] R13: 00007f58a8426038 R14: 00007f58a8425fa0 R15: 00007ffff04943f8 [ 446.109546][T17620] [ 447.058156][T17647] netlink: 'syz.0.4051': attribute type 2 has an invalid length. [ 447.098662][T17648] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4049'. [ 447.238314][T17656] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4054'. [ 447.238380][T17656] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4054'. [ 447.261346][T17656] netlink: 'syz.5.4054': attribute type 7 has an invalid length. [ 447.261372][T17656] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4054'. [ 447.343172][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 447.343183][T10446] Bluetooth: hci5: command 0x0406 tx timeout [ 447.399427][T17660] FAULT_INJECTION: forcing a failure. [ 447.399427][T17660] name failslab, interval 1, probability 0, space 0, times 0 [ 447.399453][T17660] CPU: 1 UID: 0 PID: 17660 Comm: syz.5.4057 Not tainted syzkaller #0 PREEMPT(full) [ 447.399472][T17660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 447.399482][T17660] Call Trace: [ 447.399489][T17660] [ 447.399496][T17660] dump_stack_lvl+0xe8/0x150 [ 447.399526][T17660] should_fail_ex+0x410/0x560 [ 447.399553][T17660] should_failslab+0xa8/0x100 [ 447.399578][T17660] __kmalloc_cache_noprof+0xa3/0x600 [ 447.399598][T17660] ? register_netdevice+0x57e/0x1eb0 [ 447.399617][T17660] ? register_netdevice+0x57e/0x1eb0 [ 447.399641][T17660] register_netdevice+0x57e/0x1eb0 [ 447.399668][T17660] ? lock_acquire+0x115/0x350 [ 447.399687][T17660] ? __pfx_register_netdevice+0x10/0x10 [ 447.399710][T17660] ? net_generic+0x1e/0x240 [ 447.399731][T17660] ? net_generic+0x1e/0x240 [ 447.399757][T17660] ip6_tnl_create2+0x79/0x400 [ 447.399777][T17660] ? ip6_tnl_newlink+0x24a/0x640 [ 447.399799][T17660] ip6_tnl_newlink+0x335/0x640 [ 447.399822][T17660] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 447.399841][T17660] ? dev_validate_mtu+0x125/0x170 [ 447.399859][T17660] ? rtnl_create_link+0xa04/0xd70 [ 447.399916][T17660] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 447.399948][T17660] rtnl_newlink_create+0x305/0x7b0 [ 447.399983][T17660] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 447.400020][T17660] ? __pfx___mutex_lock+0x10/0x10 [ 447.400049][T17660] ? ns_capable+0x89/0xe0 [ 447.400075][T17660] rtnl_newlink+0x166d/0x1c30 [ 447.400103][T17660] ? __pfx_rtnl_newlink+0x10/0x10 [ 447.400116][T17660] ? do_syscall_64+0x166/0x520 [ 447.400134][T17660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.400180][T17660] ? kasan_quarantine_put+0xbb/0x1f0 [ 447.400200][T17660] ? lockdep_hardirqs_on+0x7b/0x110 [ 447.400222][T17660] ? nlmon_xmit+0xb0/0x100 [ 447.400243][T17660] ? kmem_cache_free+0x182/0x650 [ 447.400271][T17660] ? __lock_acquire+0x747/0x2de0 [ 447.400297][T17660] ? __local_bh_enable_ip+0xd6/0x140 [ 447.400318][T17660] ? lockdep_hardirqs_on+0x7b/0x110 [ 447.400336][T17660] ? __dev_queue_xmit+0x29b/0x3920 [ 447.400354][T17660] ? __local_bh_enable_ip+0xd6/0x140 [ 447.400382][T17660] ? lock_acquire+0x115/0x350 [ 447.400416][T17660] ? __pfx_rtnl_newlink+0x10/0x10 [ 447.400431][T17660] rtnetlink_rcv_msg+0x802/0xc00 [ 447.400449][T17660] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 447.400464][T17660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 447.400479][T17660] ? ref_tracker_free+0x689/0x830 [ 447.400505][T17660] ? __pfx_ref_tracker_free+0x10/0x10 [ 447.400538][T17660] netlink_rcv_skb+0x226/0x4a0 [ 447.400560][T17660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 447.400578][T17660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.400608][T17660] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.400628][T17660] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.400653][T17660] netlink_unicast+0x8ef/0xa80 [ 447.400684][T17660] netlink_sendmsg+0x813/0xb40 [ 447.400712][T17660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.400740][T17660] ? apparmor_socket_sendmsg+0x98/0x360 [ 447.400765][T17660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.400785][T17660] sock_sendmsg_nosec+0x13a/0x180 [ 447.400810][T17660] ____sys_sendmsg+0x54e/0x850 [ 447.400831][T17660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.400856][T17660] ? import_iovec+0x73/0xa0 [ 447.400886][T17660] ___sys_sendmsg+0x2a5/0x360 [ 447.400904][T17660] ? __lock_acquire+0x747/0x2de0 [ 447.400924][T17660] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.400969][T17660] ? __fget_files+0x2a/0x420 [ 447.400984][T17660] ? __fget_files+0x3a2/0x420 [ 447.401025][T17660] __x64_sys_sendmsg+0x1b1/0x290 [ 447.401055][T17660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.401105][T17660] do_syscall_64+0x166/0x520 [ 447.401124][T17660] ? trace_irq_disable+0x3b/0x140 [ 447.401142][T17660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.401159][T17660] ? clear_bhb_loop+0x70/0xc0 [ 447.401179][T17660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.401195][T17660] RIP: 0033:0x7f8cba39e559 [ 447.401210][T17660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.401224][T17660] RSP: 002b:00007f8cbb250028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.401241][T17660] RAX: ffffffffffffffda RBX: 00007f8cba625fa0 RCX: 00007f8cba39e559 [ 447.401253][T17660] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 447.401280][T17660] RBP: 00007f8cbb250090 R08: 0000000000000000 R09: 0000000000000000 [ 447.401293][T17660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.401307][T17660] R13: 00007f8cba626038 R14: 00007f8cba625fa0 R15: 00007ffe52db0078 [ 447.401341][T17660] [ 447.771397][ T1162] net_ratelimit: 1 callbacks suppressed [ 447.771438][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.772627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.076436][T17669] syzkaller0: entered promiscuous mode [ 448.076470][T17669] syzkaller0: entered allmulticast mode [ 448.085774][T17675] ip_tables: iptables: counters copy to user failed while replacing table [ 448.207978][T17681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4063'. [ 448.384667][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.442540][T17692] netlink: 'syz.6.4068': attribute type 29 has an invalid length. [ 448.442569][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4068'. [ 448.444430][T17692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.445061][T17692] netlink: 'syz.6.4068': attribute type 29 has an invalid length. [ 448.445085][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4068'. [ 448.521800][T17694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.658720][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4071'. [ 448.775203][T17707] ip_tables: iptables: counters copy to user failed while replacing table [ 448.964941][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4077'. [ 449.200303][T17732] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4081'. [ 449.483597][T17748] batman_adv: batadv0: Adding interface: macvtap1 [ 449.483614][T17748] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.483637][T17748] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 450.186563][T17776] netlink: 'syz.5.4100': attribute type 2 has an invalid length. [ 450.330480][T17777] bond8: entered promiscuous mode [ 450.330506][T17777] bond8: entered allmulticast mode [ 450.675467][T17802] syzkaller0: entered promiscuous mode [ 450.675493][T17802] syzkaller0: entered allmulticast mode [ 450.809259][T17807] syzkaller1: entered promiscuous mode [ 450.809285][T17807] syzkaller1: entered allmulticast mode [ 450.967188][T17812] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.031532][T13048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.031570][T13048] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.124702][T17826] netlink: 'syz.6.4114': attribute type 2 has an invalid length. [ 451.422846][ T9814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.759564][T17859] syzkaller0: entered promiscuous mode [ 451.759591][T17859] syzkaller0: entered allmulticast mode [ 452.001212][T17870] syzkaller0: entered promiscuous mode [ 452.001238][T17870] syzkaller0: entered allmulticast mode [ 452.046851][T17861] 0: reclassify loop, rule prio 0, protocol 800 [ 452.218551][T17882] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 452.237399][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.238682][T17875] syzkaller0: entered promiscuous mode [ 452.238704][T17875] syzkaller0: entered allmulticast mode [ 452.267676][T17881] batadv_slave_1: entered promiscuous mode [ 452.318314][T17884] netlink: 'syz.0.4129': attribute type 25 has an invalid length. [ 452.385620][T17886] __nla_validate_parse: 7 callbacks suppressed [ 452.385642][T17886] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4131'. [ 452.505032][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4130'. [ 452.559798][T17879] batadv_slave_1: left promiscuous mode [ 452.626958][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4135'. [ 452.772791][T17904] syzkaller0: entered promiscuous mode [ 452.772819][T17904] syzkaller0: entered allmulticast mode [ 452.944209][ T3337] net_ratelimit: 1 callbacks suppressed [ 452.944233][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.944426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.059373][T17921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4140'. [ 453.185779][T17926] netlink: 'syz.1.4143': attribute type 1 has an invalid length. [ 453.185803][T17926] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4143'. [ 453.185820][T17926] netlink: 'syz.1.4143': attribute type 1 has an invalid length. [ 453.496422][T17929] netlink: 'syz.0.4144': attribute type 25 has an invalid length. [ 454.481851][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.623794][T17921] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 455.632103][T17927] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 455.972642][T17938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.167420][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 456.248912][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4152'. [ 456.586611][T17973] syzkaller0: entered promiscuous mode [ 456.586638][T17973] syzkaller0: entered allmulticast mode [ 457.365917][ T53] Bluetooth: hci7: link tx timeout [ 457.365938][ T53] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 457.517180][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.712275][T13052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.712481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.411017][T17976] syzkaller1: entered promiscuous mode [ 459.411044][T17976] syzkaller1: entered allmulticast mode [ 459.425294][ T4936] Bluetooth: hci7: command 0x0405 tx timeout [ 460.070013][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4167'. [ 460.541654][ T9814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.565567][T18057] nbd: must specify at least one socket [ 460.619293][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4176'. [ 460.816630][T18064] bond14: entered promiscuous mode [ 460.816656][T18064] bond14: entered allmulticast mode [ 460.882607][T18075] netlink: 'syz.6.4182': attribute type 1 has an invalid length. [ 460.882629][T18075] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4182'. [ 460.882662][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4182'. [ 460.999891][T18080] netlink: 'syz.0.4179': attribute type 1 has an invalid length. [ 460.999927][T18080] netlink: 'syz.0.4179': attribute type 1 has an invalid length. [ 460.999944][T18080] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4179'. [ 460.999978][T18080] netlink: 'syz.0.4179': attribute type 1 has an invalid length. [ 461.345681][T18091] bond15 (unregistering): Released all slaves [ 461.571986][T18101] can: request_module (can-proto-0) failed. [ 461.647329][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4187'. [ 461.933201][T18126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.019083][T18130] netlink: 2220 bytes leftover after parsing attributes in process `syz.1.4193'. [ 462.663585][T18170] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4207'. [ 462.681759][T18168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.782797][T18174] netlink: Conntrack attr has 1 unknown bytes [ 462.782838][T18174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.028198][T18190] netlink: 'syz.5.4212': attribute type 4 has an invalid length. [ 463.581783][ T9814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.806981][T18232] openvswitch: netlink: Flow actions attr not present in new flow. [ 463.831798][T13048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.832013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.003685][T18241] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4228'. [ 464.314683][T18258] netlink: 'syz.6.4231': attribute type 2 has an invalid length. [ 465.644864][T18288] netlink: 'syz.6.4237': attribute type 1 has an invalid length. [ 466.626152][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.447448][T18288] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 467.493161][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4239'. [ 467.740030][T18305] bond14: entered promiscuous mode [ 467.740058][T18305] bond14: entered allmulticast mode [ 467.786856][T18314] FAULT_INJECTION: forcing a failure. [ 467.786856][T18314] name failslab, interval 1, probability 0, space 0, times 0 [ 467.786885][T18314] CPU: 1 UID: 0 PID: 18314 Comm: syz.5.4245 Not tainted syzkaller #0 PREEMPT(full) [ 467.786908][T18314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 467.786918][T18314] Call Trace: [ 467.786925][T18314] [ 467.786932][T18314] dump_stack_lvl+0xe8/0x150 [ 467.786961][T18314] should_fail_ex+0x410/0x560 [ 467.786989][T18314] should_failslab+0xa8/0x100 [ 467.787012][T18314] ? __kernfs_new_node+0xe6/0x980 [ 467.787062][T18314] kmem_cache_alloc_noprof+0xa1/0x600 [ 467.787081][T18314] ? __kernfs_new_node+0xe6/0x980 [ 467.787106][T18314] __kernfs_new_node+0xe6/0x980 [ 467.787132][T18314] ? __pfx___kernfs_new_node+0x10/0x10 [ 467.787159][T18314] ? kernfs_root+0x1c/0x230 [ 467.787182][T18314] ? kernfs_root+0x1c/0x230 [ 467.787200][T18314] ? kernfs_root+0x1c/0x230 [ 467.787216][T18314] ? kernfs_root+0x1c/0x230 [ 467.787238][T18314] kernfs_new_node+0xea/0x140 [ 467.787262][T18314] __kernfs_create_file+0x4b/0x2e0 [ 467.787289][T18314] sysfs_add_file_mode_ns+0x237/0x300 [ 467.787322][T18314] internal_create_group+0x679/0x1180 [ 467.787355][T18314] ? __pfx_internal_create_group+0x10/0x10 [ 467.787376][T18314] ? up_write+0x19d/0x4a0 [ 467.787409][T18314] sysfs_create_groups+0x59/0x120 [ 467.787431][T18314] device_add_attrs+0xde/0x600 [ 467.787570][T18314] ? __pfx_device_add_attrs+0x10/0x10 [ 467.787606][T18314] ? device_add_class_symlinks+0x21f/0x240 [ 467.787641][T18314] device_add+0x488/0xb80 [ 467.787674][T18314] netdev_register_kobject+0x197/0x350 [ 467.787766][T18314] register_netdevice+0x1433/0x1eb0 [ 467.787798][T18314] ? __pfx_register_netdevice+0x10/0x10 [ 467.787823][T18314] ? net_generic+0x1e/0x240 [ 467.787850][T18314] ip6_tnl_create2+0x79/0x400 [ 467.787870][T18314] ? ip6_tnl_newlink+0x24a/0x640 [ 467.787893][T18314] ip6_tnl_newlink+0x335/0x640 [ 467.787919][T18314] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 467.787941][T18314] ? dev_validate_mtu+0x125/0x170 [ 467.787959][T18314] ? rtnl_create_link+0xa04/0xd70 [ 467.787982][T18314] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 467.788005][T18314] rtnl_newlink_create+0x305/0x7b0 [ 467.788028][T18314] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 467.788049][T18314] ? __pfx___mutex_lock+0x10/0x10 [ 467.788078][T18314] ? ns_capable+0x89/0xe0 [ 467.788104][T18314] rtnl_newlink+0x166d/0x1c30 [ 467.788132][T18314] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.788146][T18314] ? do_syscall_64+0x166/0x520 [ 467.788165][T18314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.788209][T18314] ? kasan_quarantine_put+0xbb/0x1f0 [ 467.788228][T18314] ? lockdep_hardirqs_on+0x7b/0x110 [ 467.788249][T18314] ? nlmon_xmit+0xb0/0x100 [ 467.788270][T18314] ? kmem_cache_free+0x182/0x650 [ 467.788298][T18314] ? __lock_acquire+0x747/0x2de0 [ 467.788323][T18314] ? __local_bh_enable_ip+0xd6/0x140 [ 467.788345][T18314] ? lockdep_hardirqs_on+0x7b/0x110 [ 467.788362][T18314] ? __dev_queue_xmit+0x29b/0x3920 [ 467.788380][T18314] ? __local_bh_enable_ip+0xd6/0x140 [ 467.788414][T18314] ? lock_acquire+0x115/0x350 [ 467.788443][T18314] ? __pfx_rtnl_newlink+0x10/0x10 [ 467.788457][T18314] rtnetlink_rcv_msg+0x802/0xc00 [ 467.788476][T18314] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 467.788492][T18314] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.788505][T18314] ? ref_tracker_free+0x689/0x830 [ 467.788533][T18314] ? __pfx_ref_tracker_free+0x10/0x10 [ 467.788566][T18314] netlink_rcv_skb+0x226/0x4a0 [ 467.788588][T18314] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.788605][T18314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.788636][T18314] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.788656][T18314] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.788705][T18314] netlink_unicast+0x8ef/0xa80 [ 467.788751][T18314] netlink_sendmsg+0x813/0xb40 [ 467.788791][T18314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.788818][T18314] ? apparmor_socket_sendmsg+0x98/0x360 [ 467.788842][T18314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.788861][T18314] sock_sendmsg_nosec+0x13a/0x180 [ 467.788886][T18314] ____sys_sendmsg+0x54e/0x850 [ 467.788910][T18314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.788935][T18314] ? import_iovec+0x73/0xa0 [ 467.788963][T18314] ___sys_sendmsg+0x2a5/0x360 [ 467.788980][T18314] ? __lock_acquire+0x747/0x2de0 [ 467.789001][T18314] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.789046][T18314] ? __fget_files+0x2a/0x420 [ 467.789061][T18314] ? __fget_files+0x3a2/0x420 [ 467.789084][T18314] __x64_sys_sendmsg+0x1b1/0x290 [ 467.789103][T18314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.789138][T18314] do_syscall_64+0x166/0x520 [ 467.789156][T18314] ? trace_irq_disable+0x3b/0x140 [ 467.789174][T18314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.789190][T18314] ? clear_bhb_loop+0x70/0xc0 [ 467.789210][T18314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.789226][T18314] RIP: 0033:0x7f8cba39e559 [ 467.789241][T18314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.789255][T18314] RSP: 002b:00007f8cbb250028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.789272][T18314] RAX: ffffffffffffffda RBX: 00007f8cba625fa0 RCX: 00007f8cba39e559 [ 467.789283][T18314] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 467.789294][T18314] RBP: 00007f8cbb250090 R08: 0000000000000000 R09: 0000000000000000 [ 467.789303][T18314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.789313][T18314] R13: 00007f8cba626038 R14: 00007f8cba625fa0 R15: 00007ffe52db0078 [ 467.789338][T18314] [ 468.032321][T18321] netlink: 'syz.7.4244': attribute type 2 has an invalid length. [ 468.576814][T18332] netlink: 'syz.5.4247': attribute type 75 has an invalid length. [ 468.705900][T18332] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 468.724878][T18332] bond4 (unregistering): Released all slaves [ 468.946627][T13066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.946840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.226859][T18367] FAULT_INJECTION: forcing a failure. [ 469.226859][T18367] name failslab, interval 1, probability 0, space 0, times 0 [ 469.226896][T18367] CPU: 0 UID: 0 PID: 18367 Comm: syz.6.4257 Not tainted syzkaller #0 PREEMPT(full) [ 469.226923][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 469.226936][T18367] Call Trace: [ 469.226946][T18367] [ 469.226959][T18367] dump_stack_lvl+0xe8/0x150 [ 469.227001][T18367] should_fail_ex+0x410/0x560 [ 469.227040][T18367] should_failslab+0xa8/0x100 [ 469.227076][T18367] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 469.227105][T18367] ? __lock_acquire+0x747/0x2de0 [ 469.227131][T18367] ? __kernfs_new_node+0xa9/0x980 [ 469.227158][T18367] ? __kernfs_new_node+0xa9/0x980 [ 469.227201][T18367] kstrdup+0x42/0x100 [ 469.227271][T18367] __kernfs_new_node+0xa9/0x980 [ 469.227310][T18367] ? __pfx___kernfs_new_node+0x10/0x10 [ 469.227344][T18367] ? kernfs_root+0x1c/0x230 [ 469.227377][T18367] ? kernfs_root+0x1c/0x230 [ 469.227402][T18367] ? kernfs_root+0x1c/0x230 [ 469.227425][T18367] ? kernfs_root+0x1c/0x230 [ 469.227456][T18367] kernfs_new_node+0xea/0x140 [ 469.227488][T18367] kernfs_create_link+0xa7/0x200 [ 469.227526][T18367] sysfs_do_create_link_sd+0x83/0x110 [ 469.227554][T18367] device_add_class_symlinks+0x1cf/0x240 [ 469.227592][T18367] device_add+0x467/0xb80 [ 469.227626][T18367] netdev_register_kobject+0x197/0x350 [ 469.227665][T18367] register_netdevice+0x1433/0x1eb0 [ 469.227714][T18367] ? __pfx_register_netdevice+0x10/0x10 [ 469.227750][T18367] ? net_generic+0x1e/0x240 [ 469.227790][T18367] ip6_tnl_create2+0x79/0x400 [ 469.227819][T18367] ? ip6_tnl_newlink+0x24a/0x640 [ 469.227852][T18367] ip6_tnl_newlink+0x335/0x640 [ 469.227884][T18367] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 469.227912][T18367] ? dev_validate_mtu+0x125/0x170 [ 469.227938][T18367] ? rtnl_create_link+0xa04/0xd70 [ 469.227970][T18367] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 469.228001][T18367] rtnl_newlink_create+0x305/0x7b0 [ 469.228034][T18367] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 469.228064][T18367] ? __pfx___mutex_lock+0x10/0x10 [ 469.228107][T18367] ? ns_capable+0x89/0xe0 [ 469.228143][T18367] rtnl_newlink+0x166d/0x1c30 [ 469.228190][T18367] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.228210][T18367] ? do_syscall_64+0x166/0x520 [ 469.228237][T18367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.228303][T18367] ? kasan_quarantine_put+0xbb/0x1f0 [ 469.228330][T18367] ? lockdep_hardirqs_on+0x7b/0x110 [ 469.228361][T18367] ? nlmon_xmit+0xb0/0x100 [ 469.228393][T18367] ? kmem_cache_free+0x182/0x650 [ 469.228433][T18367] ? __lock_acquire+0x747/0x2de0 [ 469.228470][T18367] ? __local_bh_enable_ip+0xd6/0x140 [ 469.228501][T18367] ? lockdep_hardirqs_on+0x7b/0x110 [ 469.228526][T18367] ? __dev_queue_xmit+0x29b/0x3920 [ 469.228552][T18367] ? __local_bh_enable_ip+0xd6/0x140 [ 469.228593][T18367] ? lock_acquire+0x115/0x350 [ 469.228636][T18367] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.228657][T18367] rtnetlink_rcv_msg+0x802/0xc00 [ 469.228683][T18367] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 469.228705][T18367] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.228726][T18367] ? ref_tracker_free+0x689/0x830 [ 469.228764][T18367] ? __pfx_ref_tracker_free+0x10/0x10 [ 469.228809][T18367] netlink_rcv_skb+0x226/0x4a0 [ 469.228840][T18367] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.228865][T18367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.228908][T18367] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.228937][T18367] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.228972][T18367] netlink_unicast+0x8ef/0xa80 [ 469.229018][T18367] netlink_sendmsg+0x813/0xb40 [ 469.229058][T18367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.229096][T18367] ? apparmor_socket_sendmsg+0x98/0x360 [ 469.229132][T18367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.229166][T18367] sock_sendmsg_nosec+0x13a/0x180 [ 469.229201][T18367] ____sys_sendmsg+0x54e/0x850 [ 469.229232][T18367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.229269][T18367] ? import_iovec+0x73/0xa0 [ 469.229308][T18367] ___sys_sendmsg+0x2a5/0x360 [ 469.229332][T18367] ? __lock_acquire+0x747/0x2de0 [ 469.229362][T18367] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.229429][T18367] ? __fget_files+0x2a/0x420 [ 469.229450][T18367] ? __fget_files+0x3a2/0x420 [ 469.229484][T18367] __x64_sys_sendmsg+0x1b1/0x290 [ 469.229512][T18367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.229563][T18367] do_syscall_64+0x166/0x520 [ 469.229588][T18367] ? trace_irq_disable+0x3b/0x140 [ 469.229614][T18367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.229638][T18367] ? clear_bhb_loop+0x70/0xc0 [ 469.229667][T18367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.229706][T18367] RIP: 0033:0x7f1a9c59e559 [ 469.229728][T18367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.229748][T18367] RSP: 002b:00007f1a9d4a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.229780][T18367] RAX: ffffffffffffffda RBX: 00007f1a9c825fa0 RCX: 00007f1a9c59e559 [ 469.229797][T18367] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 469.229811][T18367] RBP: 00007f1a9d4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 469.229825][T18367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.229839][T18367] R13: 00007f1a9c826038 R14: 00007f1a9c825fa0 R15: 00007fff913249e8 [ 469.229893][T18367] [ 469.526456][T18366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4255'. [ 469.671741][ T9812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.831552][T18374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4258'. [ 469.944774][T18372] bond4: entered promiscuous mode [ 469.944804][T18372] bond4: entered allmulticast mode [ 469.973129][T18378] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 470.036197][T18378] netlink: Failed to add  helper -22 [ 470.036255][T18378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.221606][ T33] INFO: task syz.4.2745:13485 blocked for more than 143 seconds. [ 470.221634][ T33] Not tainted syzkaller #0 [ 470.221646][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.221655][ T33] task:syz.4.2745 state:D stack:27136 pid:13485 tgid:13484 ppid:5622 task_flags:0x400140 flags:0x00080002 [ 470.221725][ T33] Call Trace: [ 470.221733][ T33] [ 470.221748][ T33] __schedule+0x17db/0x58f0 [ 470.221811][ T33] ? __pfx___schedule+0x10/0x10 [ 470.221845][ T33] ? schedule+0x90/0x2b0 [ 470.221871][ T33] schedule+0x164/0x2b0 [ 470.221899][ T33] schedule_preempt_disabled+0x13/0x30 [ 470.221924][ T33] __mutex_lock+0x7c1/0x1550 [ 470.221958][ T33] ? __mutex_lock+0x5d4/0x1550 [ 470.221990][ T33] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 470.222178][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 470.222211][ T33] ? net_generic+0x1e/0x240 [ 470.222241][ T33] ? net_generic+0x1e/0x240 [ 470.222277][ T33] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 470.222315][ T33] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 470.222353][ T33] ? rcu_is_watching+0x16/0xb0 [ 470.222383][ T33] ? trace_kmalloc+0x2a/0xf0 [ 470.222410][ T33] ? __kmalloc_noprof+0x38c/0x720 [ 470.222438][ T33] ? __nla_parse+0x40/0x60 [ 470.222464][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 470.222498][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 470.222539][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 470.222597][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 470.222649][ T33] ? bpf_lsm_capable+0x9/0x20 [ 470.222675][ T33] ? security_capable+0x7e/0x2c0 [ 470.222718][ T33] genl_rcv_msg+0x614/0x7a0 [ 470.222762][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.222798][ T33] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 470.222849][ T33] netlink_rcv_skb+0x226/0x4a0 [ 470.222879][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.222916][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.222991][ T33] ? down_read+0x2be/0x330 [ 470.223026][ T33] genl_rcv+0x28/0x40 [ 470.223060][ T33] netlink_unicast+0x8ef/0xa80 [ 470.223106][ T33] netlink_sendmsg+0x813/0xb40 [ 470.223146][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.223183][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 470.223218][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.223243][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 470.223278][ T33] ____sys_sendmsg+0x54e/0x850 [ 470.223310][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.223345][ T33] ? import_iovec+0x73/0xa0 [ 470.223385][ T33] ___sys_sendmsg+0x2a5/0x360 [ 470.223409][ T33] ? __lock_acquire+0x747/0x2de0 [ 470.223438][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.223466][ T33] ? futex_wait+0x2a2/0x390 [ 470.223539][ T33] ? __fget_files+0x2a/0x420 [ 470.223559][ T33] ? __fget_files+0x3a2/0x420 [ 470.223601][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 470.223630][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.223680][ T33] do_syscall_64+0x166/0x520 [ 470.223707][ T33] ? trace_irq_disable+0x3b/0x140 [ 470.223733][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.223757][ T33] ? clear_bhb_loop+0x70/0xc0 [ 470.223785][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.223809][ T33] RIP: 0033:0x7fb335f9e559 [ 470.223830][ T33] RSP: 002b:00007fb336ea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.223854][ T33] RAX: ffffffffffffffda RBX: 00007fb336225fa0 RCX: 00007fb335f9e559 [ 470.223869][ T33] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 470.223883][ T33] RBP: 00007fb336035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 470.223897][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.223911][ T33] R13: 00007fb336226038 R14: 00007fb336225fa0 R15: 00007fffeb25fd18 [ 470.223948][ T33] [ 470.224004][ T33] [ 470.224004][ T33] Showing all locks held in the system: [ 470.224016][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 470.224134][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 470.224231][ T33] locks held by kworker/u9:0/53: 3, on CPU#0: [ 470.224248][ T33] #0: ffff88802b777940 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 470.224314][ T33] #1: ffffc90000be7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 470.224381][ T33] #2: ffff88807c91cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 470.224532][ T33] locks held by getty/5378: 2, on CPU#1: [ 470.224549][ T33] #0: ffff8880372600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 470.224682][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 470.224766][ T33] locks held by kworker/u8:16/13049: 4, last CPU#1: [ 470.224783][ T33] #0: ffff888021f2e140 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 470.224852][ T33] #1: ffffc9000364fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 470.224917][ T33] #2: ffff888032a71440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 470.225016][ T33] #3: ffff88802a9a5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 470.225077][ T33] locks held by kworker/u8:23/13066: 2, on CPU#1: [ 470.225094][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 470.225152][ T33] #1: ffffc9000206fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 470.225211][ T33] locks held by syz.2.2682/13338: 2, on CPU#1: [ 470.225226][ T33] #0: ffffffff912c6948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 470.225289][ T33] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 470.225394][ T33] locks held by syz.4.2745/13485: 2, on CPU#0: [ 470.225410][ T33] #0: ffffffff912c6948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 470.225474][ T33] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 470.225543][ T33] locks held by syz.3.3063/14332: 1, on CPU#1: [ 470.225559][ T33] #0: ffffffff8fd62b78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 470.225637][ T33] locks held by syz.7.4261/18384: 2, last CPU#1: [ 470.225654][ T33] #0: ffff88807ce7d900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 470.225708][ T33] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 470.225775][ T33] locks held by modprobe/18385: 1, last CPU#1: [ 470.225791][ T33] #0: ffff88807d2dccc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 470.225844][ T33] locks held by syz.5.4263/18392: 1, last CPU#0: [ 470.225861][ T33] #0: ffff88802278ccc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 470.230339][ T33] locks held by dhcpcd-run-hook/18394: 1, last CPU#0: [ 470.230357][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: path_init+0x124/0x1330 [ 470.230425][ T33] [ 470.230431][ T33] ============================================= [ 470.230431][ T33] [ 470.230456][ T33] NMI backtrace for cpu 0 [ 470.230470][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 470.230493][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 470.230507][ T33] Call Trace: [ 470.230516][ T33] [ 470.230526][ T33] dump_stack_lvl+0xe8/0x150 [ 470.230560][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 470.230680][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 470.230720][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 470.230759][ T33] sys_info+0x135/0x170 [ 470.230789][ T33] watchdog+0xfd7/0x1030 [ 470.230822][ T33] ? watchdog+0x1c7/0x1030 [ 470.230854][ T33] kthread+0x38b/0x480 [ 470.230878][ T33] ? __pfx_watchdog+0x10/0x10 [ 470.230900][ T33] ? __pfx_kthread+0x10/0x10 [ 470.230924][ T33] ret_from_fork+0x514/0xb70 [ 470.230970][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 470.230992][ T33] ? __switch_to+0xc89/0x1420 [ 470.231026][ T33] ? __pfx_kthread+0x10/0x10 [ 470.231051][ T33] ret_from_fork_asm+0x1a/0x30 [ 470.231089][ T33] [ 470.231098][ T33] Sending NMI from CPU 0 to CPUs 1: [ 470.231165][ C1] NMI backtrace for cpu 1 [ 470.231180][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 470.231202][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 470.231214][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 470.231289][ C1] RIP: 0010:check_preemption_disabled+0x1c/0xd0 [ 470.231322][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 8b 1c ad 08 65 48 8b 0d 5b 1c ad 08 85 c9 74 0c 5b 41 5e <41> 5f 5d c3 cc cc cc cc cc 9c 59 f7 c1 00 02 00 00 74 ea 65 4c 8b [ 470.231340][ C1] RSP: 0018:ffffc90000127888 EFLAGS: 00000202 [ 470.231357][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000001 [ 470.231370][ C1] RDX: 0000000000000000 RSI: ffffffff8c6ddb60 RDI: ffffffff8c6ddb20 [ 470.231383][ C1] RBP: ffffc90000127a20 R08: ffffffff8baf112f R09: 0000000000000000 [ 470.231396][ C1] R10: dffffc0000000000 R11: fffffbfff22f4e90 R12: ffff8880358a9d80 [ 470.231410][ C1] R13: ffff8880213645c0 R14: 0000000000000001 R15: dffffc0000000000 [ 470.231424][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 470.231440][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.231452][ C1] CR2: 00007f5bb4f7de9c CR3: 00000000480f4000 CR4: 00000000003526f0 [ 470.231471][ C1] Call Trace: [ 470.231478][ C1] [ 470.231486][ C1] rcu_is_watching+0x16/0xb0 [ 470.231512][ C1] batadv_iv_ogm_schedule+0x674/0xfc0 [ 470.231537][ C1] ? batadv_iv_ogm_schedule+0x41f/0xfc0 [ 470.231558][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 470.231577][ C1] ? batadv_skb_head_push+0x187/0x200 [ 470.231628][ C1] ? batadv_send_skb_packet+0x40d/0x650 [ 470.231682][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x622/0x740 [ 470.231710][ C1] ? process_scheduled_works+0x97a/0x1630 [ 470.231736][ C1] process_scheduled_works+0xc3d/0x1630 [ 470.231782][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 470.231811][ C1] ? assign_work+0x3cf/0x5d0 [ 470.231838][ C1] worker_thread+0xa47/0xfb0 [ 470.231878][ C1] kthread+0x38b/0x480 [ 470.231897][ C1] ? __pfx_worker_thread+0x10/0x10 [ 470.231936][ C1] ? __pfx_kthread+0x10/0x10 [ 470.231955][ C1] ret_from_fork+0x514/0xb70 [ 470.231975][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 470.231993][ C1] ? __switch_to+0xc89/0x1420 [ 470.232021][ C1] ? __pfx_kthread+0x10/0x10 [ 470.232040][ C1] ret_from_fork_asm+0x1a/0x30 [ 470.232066][ C1] [ 470.313349][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 471.276263][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 471.285478][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 471.295552][ T33] Call Trace: [ 471.298855][ T33] [ 471.301839][ T33] vpanic+0x56d/0xa60 [ 471.305868][ T33] ? __pfx___schedule+0x10/0x10 [ 471.310829][ T33] ? __pfx_vpanic+0x10/0x10 [ 471.315367][ T33] panic+0xc5/0xd0 [ 471.319123][ T33] ? __pfx_panic+0x10/0x10 [ 471.323568][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 471.329052][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 471.334450][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 471.340636][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 471.346834][ T33] watchdog+0x1030/0x1030 [ 471.351193][ T33] ? watchdog+0x1c7/0x1030 [ 471.355644][ T33] kthread+0x38b/0x480 [ 471.359745][ T33] ? __pfx_watchdog+0x10/0x10 [ 471.364440][ T33] ? __pfx_kthread+0x10/0x10 [ 471.369059][ T33] ret_from_fork+0x514/0xb70 [ 471.373688][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 471.378826][ T33] ? __switch_to+0xc89/0x1420 [ 471.383538][ T33] ? __pfx_kthread+0x10/0x10 [ 471.388152][ T33] ret_from_fork_asm+0x1a/0x30 [ 471.392952][ T33] [ 471.396617][ T33] Kernel Offset: disabled [ 471.400967][ T33] Rebooting in 86400 seconds..