last executing test programs: 27.639063477s ago: executing program 2 (id=3212): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="e3ffffff", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000300"/28], 0x50) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1}, &(0x7f0000000180)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x9, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x3, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x3, 0xe, 0xffff, 0x92, @struct={0x10000, 0x4f8}, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000002380)={{r4}, r6, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r8}) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x8) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001180)={r7, 0x9, 0x0, [0x8afe, 0x0, 0x80000000, 0x10, 0x3], [0x5, 0x0, 0x6, 0x0, 0x8, 0x9, 0x2, 0xfffffffffffffff8, 0xf744, 0x3, 0xd29, 0x1, 0xc, 0x2b83faff, 0x100, 0x5, 0xffffffffffff5979, 0x9, 0xfd, 0x9, 0x5, 0x5, 0x17, 0x7fffffff, 0x5, 0xfffffffffffff38a, 0x4, 0x7, 0x80000001, 0xff7ffffeffffffff, 0x6, 0x7ff, 0xffffffff, 0x2, 0x3, 0x9, 0x1000, 0xfffffffffffffffe, 0xea39, 0xfffffffffffffffd, 0xffffffffffff0772, 0x0, 0x2, 0x5113, 0x4, 0x6, 0x3, 0xfffffffffffffffe, 0x7, 0x6, 0x9, 0x8, 0xe52c, 0x5, 0x10, 0x5, 0xf0d3, 0x9, 0x4, 0x1ff, 0x89f, 0x9, 0x6, 0x5, 0x8000, 0x3, 0x2, 0xc6d, 0x0, 0x4, 0x86d3, 0x3, 0x7, 0x7, 0x0, 0x7, 0xaf, 0x1, 0x8, 0x8, 0x7fffffff, 0x0, 0x3, 0x80000000, 0x7, 0x8, 0x8000000000000000, 0xe, 0x8, 0xcbb5, 0x4, 0x400, 0xffffffffffffff71, 0x0, 0x5, 0x8, 0x6, 0x8, 0x1ff, 0x2, 0x0, 0x205, 0x96a, 0x7, 0x6, 0x80000001, 0xffffffffffffffff, 0x9, 0x6, 0x0, 0x8000000000000000, 0x4, 0x8000, 0x2f42, 0xf3, 0x7c4c, 0x7, 0x8, 0x6, 0xc999, 0x6]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001880)={0x2, 0x1, {0x3, @struct={0x1ff, 0x4}, r7, 0x7, 0x4, 0x20000000000c, 0x8, 0x1, 0x400, @usage=0x3, 0x5, 0x7fff, [0x5, 0x0, 0x3, 0x9, 0xe6, 0x3]}, {0x1, @usage=0x4, r10, 0x100, 0x7fffffffffffffff, 0x200, 0x5, 0x5, 0x80, @usage=0x9, 0x5, 0x9, [0x1, 0x80000000, 0xffff, 0x3, 0x585f2fba, 0x6]}, {0xb0, @usage=0x6, r8, 0x1000, 0xc46e, 0x1, 0x4, 0x8000, 0x40d, @struct={0xa2, 0x5}, 0x1, 0x5, [0x5, 0x3, 0xe, 0x2, 0x1, 0xfffffffffffffffd]}, {0x8b05, 0x7a5, 0x1}}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) recvmsg(r5, &(0x7f0000004740)={&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000004600)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/96, 0x60}, {&(0x7f0000004400)}, {&(0x7f0000004440)=""/132, 0x84}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000004580)=""/32, 0x20}, {&(0x7f00000045c0)}], 0x8, &(0x7f0000004680)=""/129, 0x81}, 0x10022) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r12, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000f90000181100003d74cb421e6e877a0437338f945a6f45965912a03e03c6b22bcddde0b9a70b055f0249fe07408a310e20d0dc64b37c0058d77a45f859133d1438758a62be0b8de875de09b0eb07af43871016bda52040f329c39246f8626d5bb5f430c0b0c8c2b48d4c577211b651e968f13cc5a5ef19e50539491f525e6a014e", @ANYRES32=r3, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) 26.666750016s ago: executing program 2 (id=3219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004d80)={'sit0\x00', &(0x7f0000004cc0)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0xffff0001, 0xf, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x67, 0x0, 0x10, 0x29, 0x0, @multicast2, @broadcast}}}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x200, 0x4) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r4, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05", 0x1, 0x200400d1, &(0x7f0000000200)={0x11, 0x8, r4, 0x1, 0x88, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000140)=0x10, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r5], 0xc4}}, 0x881) 26.231258372s ago: executing program 2 (id=3222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x6, 0x11, 0x0, 0x0, @str='\x92\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @reject_conn_req={{0x40a, 0x7}, {@any, 0x6}}}, 0xb) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000040)) 25.779171159s ago: executing program 2 (id=3226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229", 0x33}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000380)) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000000080)=""/26, 0x1a, 0x10160, 0x0, 0x0) 25.551257318s ago: executing program 2 (id=3229): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1c0012800b00010062726964676500000c0002800500070006000000b5e7b0cc18a04857ef5fe1ee47ffd1aad354a186b68dbb519730dd0200612415a3078c5b368efcf1c5b8c45e792d6d0c"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 24.88162553s ago: executing program 2 (id=3236): sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0xd1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x9, 0x7, 0x24, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0xd7, 0xe}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800e98dccd2a1bcc8012d3dbe9700001500040058a4925e1dd7e3c832b5cabdef4ef14a02daf7afef5115d1eeff205d9cad24ce820207ec9d9c1e2d5d96b118f0da91c1cafda00a0c814d93dc0a410e81057333dfb1bedc2c9d5ebb1f90351f8077a9aff7e63d74b244930be5d323f3b99139b32a2845831686bb55d83344e950b125172a3a9583fdc63e7926bd1213000000000000000000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff1400060009000000000000001000000008000000080008000000000008000100ac1414bb1400060000800000050000000800000080000000"], 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x30, 0x41, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}, @generic="347f3bed"]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r5, 0x6, 0x2e, &(0x7f0000000140)=0xffffffbe, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000001f00)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="b942782e11e878a6bf36cf8edb8bcf7bc04f6ee721da51a1790426a71ea604563e03cda220a7bedbd94157807f21ba911f897794cf319a26ade5b89e5eebae6d08f2f476fa207d05c8e9ed1db400f4fb518d71f722e84df6821944eb6c73b189d332b29e16455cbbd11a76eb227795fe08e7ce4fbcf956a6e26901820823aa53592f16eb5f0c7e51644e237624b5d56abf01ab4c08f302130500", 0x9a}, {&(0x7f00000006c0)="232de30d95ed98e3382b6d5b0fd313977873a28da299b4594a3c38d75022a8736ce84950859e56ca8607b3c8c8099fd8831f2191b0757a3a1e5ad0d262af8194c96549fff072dd46d68ce5e964744845aa4fb0b85ccce245b4ccadeee15b80ab4787cf937472706931bef99e17e449d6b055a55b1358e6ba390c30bc304c21e10c612e19404f7f9cfffcdf8e76d5c89cbd4d5c639a68f598dceeaebd842553681d2d93d808dce11560ddf6c1f141747ec2a65a4e31919dac713e7d2fb7918fa438f63cca619a1c7dbd96369e79e1b59c222dc3074e", 0xd5}, {&(0x7f0000000440)="b62513038a5bdadc0f82047cb0b49899e10207821b0ff9cd238fae2e71441c8de45e394c73eb1f672172092ebd0c4548ce633a1a0eebffae9d89824182405a3259e6c7d1dee81bdc6cb678252fac47d2628d3352e71c5545d06d2f5911f7bd9e8c5815fdc896224ce86c57b8d06ad846fe7d14a5b24d53322766", 0x7a}, {&(0x7f0000002f80)="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", 0xf17}], 0x4, &(0x7f0000000300), 0x0, 0x4001}], 0x1, 0x44804) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000000)=r11, 0x4) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x400000d4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) 12.478807045s ago: executing program 4 (id=3328): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185a00000a0000000000000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7910e0008000000b7030000040000008500000006000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x8e, &(0x7f00000003c0)=""/142, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[0x1, 0x1], &(0x7f0000000540)=[{0x1, 0x3, 0x6, 0x8}, {0x1, 0x4, 0x4, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0x3, 0x3, 0xa}], 0x10, 0x6}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1f1113f2008e", {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0xe8, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x68}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0xff03}}}, {{@arp={@multicast2, @local, 0x0, 0xffffffff, 0x0, 0x0, {@mac=@local}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x34, 0x0, &(0x7f00000006c0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000700), 0xa0, 0x0, 0xaa, 0x80, &(0x7f0000000740)="24f2319e8da38ac1031aa8085e7b1f73bc5e2b04052f2ac22afc13d8ba595fda24cd5ab55e73a13c964e2d5d896de90be54fb6255d25ee329a8e4b1607f29abd27b7adc2ed30bf69a3b0630fe2a39af9b74558c3311e55f8991854dc866615442574cad5dbff6ae003c970e14e58d1e1be7c61cba92a49d0110989a24ee4908c7ffd406faac66ace0a40a1a56d5c8c0acdf1931485671cae03467246f523393d92766c44ede51de998bb", &(0x7f0000000800)="b2aa2f37526cd6fb8f82581b6f1d9d90f6dffb3a71c5781adec5960424401c6cd7f67e0e96a9db7a529d3c70d6edad4028d72b7681958e097e02a58681239115d826fa5129f5c4f79dff426b9bcd12a95faf94fc94080e6833be6f22d25977449b869abfd4f1d63ce8126f8af945ed213aac68413429bdc164877e914a95f41d", 0x3, 0x0, 0x8}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000000000001002c00128009000100766c616e000000001c000280060001000200000006000100020000000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[], 0x20) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x71}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x1) 12.347285589s ago: executing program 3 (id=3329): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) pipe(&(0x7f0000000b40)) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x57fb36209d97903c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "02722e3486ebd900"}]}}}}}}}, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000008c0)={{r0, &(0x7f0000000140)='\x00', 0x100, &(0x7f0000000180)={@_ha_fsid={[0x3, 0x2]}, {0xaa1, 0xd, 0x217670ff, 0x300000000000000}}, 0xd78, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x5}, 0x6, &(0x7f0000000800)=[{0x3, 0x3, &(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)="5708edd082c3107945e40311e1ed7597d0e9f81e257fd88f59e0083d3806f0686f2c48ee1667e596655a8c5cdc79b111a7a63558e2982b52fb945c8e1db8cdf88364c2d676e4b39a8d6777da606c2e73a36e9ec3991273536c61db4777211cc1767ba17a38212a4cd429e0d7b40a8993f6b9c06ac97b10b1224f3ee4533bf1c121e1f49dce7e04f703cf262e26a2b539ff41cb", 0x93, 0x12}, {0x3, 0x2, &(0x7f0000000380)='\\\x00', &(0x7f00000003c0)="35f42c5046ed687af97d826220b5bf84e291b8987f7fba227e78a42048190e352d930b2e04786afe31e98f9bb43a62ddc9f585ae7631542a0a9ca9cac890e0f659f0e5774ecc8917ceaaf9cae528311fea3177d67c412b17947996c525a89d8ec7833e3115d63f33d544e81883b3ec121813ffa54e5d7903c880992cdcd95d144f42e52a11e5f06ffc991b59d0de173a2df99c2751755fa35de9be052fcf6173d1e929918684ca6f0a4ce59f15c6ace3f99a614b999a0bb87ff9aebc129f238710fd41bf14c60816c0f03eeb2ed6094f0657f4", 0xd3, 0x6c}, {0x3, 0x0, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="4bd81b5bb4ec8d5543fe02db2d196979228ef033033f33dd8398ccf88a9e7d3c1e7b516e3559e8bd459c91ea964d1ee02dbf47de024efead1d7a7495fc6cecdab87a77644c828191db8716db4c92856cce9186a60bf66d4dde229c7b710bc1d4e39ccb3dbd0b51047cbbd7662e6fd015af86b2fe1992f13f2142d22b490d977fa76dd93f5503157376a4338f40b204cbf35cd842ea87a737cce62a64f5b260341a89", 0xa2, 0x8}, {0x3, 0x8001, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="1ac62b8319d78dd16e32323591b931375889089c1adc5b8d0066b0ec5cb51f7ea687a446ba32e5c9b7689b18ea842df97153a3", 0x33, 0x28}, {0x3, 0x7fff, &(0x7f0000000640)='\x93\x00', &(0x7f0000000680)="64c254bcd6ed0eb7a21828e2b2e123f30d1848b09eccba438fa6e70bdddeda6efe3f5c450b04d8edb4486cb818bcf0d31a2c0012d09e4e002007961d7c23729451438e06e21d509d45ffbe56af8287b1bd147fee210574f0b0ffd85cff539d7a6d631b865f3b83f624c5d4e69b5b02dc43b3ff1dfd4a7b", 0x77, 0x2}, {0x2, 0x4, &(0x7f0000000700)='!)(!@%\x00', &(0x7f0000000740)="cb18ed118f68fbfb6a4c58772d6ba39257d8a72b911b334adf702bf0a1d014818fae9581b1d18465e1fa2f2c9d732b7796ddccb2b899ff57825ef55fde65dfb911778de117b7778272c4a1150e792cc47fda868095ed103b2689ad74388249c7f6b6b8657f6f67271c941a7f4d843778885dd396de4ca3d1ee3132b8381764c2439310e4cd6211605cefa4ac23511a52df2f67c990ab62", 0x97, 0x2}]}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000940)={@dev, 0x0}, &(0x7f0000000980)=0x14) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000a80)=0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={r1, 0x20, &(0x7f0000000b80)={&(0x7f0000000b00)=""/34, 0x22, 0x0, &(0x7f0000000b40)}}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000ac0)={r1, r2, 0x25, 0x19, @val=@uprobe_multi={&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)=[0x800, 0xffffffffffffffff, 0x4af, 0xd4f, 0xffffffffffffffff, 0x2, 0x3, 0x40], &(0x7f0000000a40)=[0x0, 0x3, 0x1, 0x5, 0x1, 0x5, 0x5], 0x6, 0x8, 0x0, r3}}, 0x40) 12.235410364s ago: executing program 3 (id=3332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x4e22, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000800)="08003b117c123a3d", 0x8}, {0x0}], 0x2}, 0x20008896) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x1ff, 0x8, 0x81]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r8, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01"], 0x3c}}, 0x0) 11.710037238s ago: executing program 3 (id=3337): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) preadv(r3, 0x0, 0x0, 0x1, 0x7) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) sendmsg$inet6(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="8096673cf9dcaaf6a6fae57dd8a2199f55775de5ad394b027e652a4d9cc5cfd8d594d0ded7ba563b7969bb403d1443bb89ef2336dfb5721c5161d98952530fb6280515efa149a570457995ba", 0x4c}], 0x1, &(0x7f0000000580)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x18}, 0x30) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f0000000080)=0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, 0x0, 0x0, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e89296", 0x61}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000003280)=""/4104, &(0x7f0000001080)=0x1008) socket$unix(0x1, 0x1, 0x0) socket(0xa, 0x5, 0x0) 11.508722805s ago: executing program 4 (id=3340): recvmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000040)=""/141, 0x8d}, {&(0x7f0000000100)=""/169, 0xa9}, {&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x9, &(0x7f00000015c0)}, 0x42) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0x440, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001680)=0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000016c0)={0xa, 0x4e20, 0x10000, @empty, 0x3}, 0x1c) socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'syztnl1\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x5, 0x1, {{0x5, 0x4, 0x1, 0x3d, 0x14, 0x67, 0x0, 0x21, 0x4, 0x0, @local, @rand_addr=0x64010100}}}}) r3 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r3, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000017c0)=0x14, 0x40000) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x13b) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000001800)=0x2) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000001840)=0x1, 0x4) r7 = socket$inet6(0xa, 0x800, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r1) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20221000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0x8c, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x5a}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x54, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xea3}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x64}}, {0x38, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x32, 0x1, "7e31cdd38c8b9d1befdac7f4e0df2229c286fd15d5963c1acfdca776cc9b057d20ca01bd2043e9b3abe54945ffc1"}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r10, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x801) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001bc0)={'filter\x00', 0x4}, 0x68) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000001f80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d80)={0x18c, r12, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVKEY={0xac, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_DEVKEY={0xa8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff9}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x246f504f5ddf3c10}}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc000}, 0x20008000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001fc0)={0x0, 0x8001, 0x8, [0x3, 0x4, 0x9302, 0x3, 0x6, 0x1, 0xa99, 0x0]}, &(0x7f0000002000)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000002040)={r16, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000003580)={0xd, 0x2, &(0x7f0000002080)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x1}], &(0x7f00000020c0)='GPL\x00', 0xe8, 0x1000, &(0x7f0000002100)=""/4096, 0x41100, 0x41, '\x00', r4, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000003200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000003240)={0x2, 0x2, 0x40, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000003500)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003540)=[{0x2, 0x2, 0x6, 0x5}, {0x4, 0x4, 0x10, 0x2}], 0x10, 0x5}, 0x94) 11.046745309s ago: executing program 1 (id=3342): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "c24c9322d86bc09b", "06d5a74346a42ad69a2349ddde66324dc12f8bdd716b1abe67d289b6752acbbc", "3ff2d6be", "f99661af04120d36"}, 0x38) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/71, 0x47}, {0x0}], 0x2, &(0x7f0000000780)=""/255, 0xff}, 0x6}], 0x2, 0x23, 0x0) (async) writev(r6, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) (async) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 10.917424174s ago: executing program 3 (id=3343): r0 = epoll_create(0xffffffff) (async) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e23, 0x4, @local, 0x8000}, 0x1c) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv4_deladdr={0x50, 0x15, 0x100, 0x70bd28, 0x25dfdbfe, {0x2, 0x3f, 0x10, 0x2, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x10001, 0x6, 0x6}}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x5a3}, @IFA_LABEL={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10.80721445s ago: executing program 4 (id=3344): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000180)=""/137, 0x89, 0x0, &(0x7f0000000240)=""/166, 0xa6}}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x80000, &(0x7f0000000040)={@align=0x9, {0x200, 0x3, 0x800, 0xfffffffffffffffc}}, 0xef, &(0x7f0000000380), &(0x7f00000003c0)=0x80000000}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000680)={{r2, &(0x7f0000000100)='\x00', 0x529840, &(0x7f0000000140)={@align, {0xfff9, 0x1ff, 0xfffffffc, 0x1}}, 0x9fa, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x2}, {[0x5, 0x5, 0x400, 0xfffffffe]}, 0xf93, 0xce, &(0x7f0000000580)=""/206}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 10.760685164s ago: executing program 3 (id=3346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r3, r2, 0x0, 0xb) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.642785082s ago: executing program 4 (id=3347): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xffffffffffffffb8, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f0000000380), &(0x7f0000000480)=0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2], 0xfffffffffffffff2}, 0x1, 0x0, 0x0, 0x4044050}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000004c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x4) sendmsg(r0, &(0x7f00000009c0)={&(0x7f0000000180)=@in={0x2, 0x4e22, @private=0xa010100}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="461aa70a08bad7c9f60a92e11b7e5908d6a5d8a704717215a1ecf391642738456bba7b889b74ba913ccf59c6100d07bfd1d89b6a9d87dd7a9a2b114db46254413e2015257ffea21564934da2", 0x4c}], 0x1, &(0x7f0000000580)=[{0x10, 0x110, 0x2}, {0x108, 0x118, 0x4, "55e8c15b14a9feed3880601c4624e3efa84e7a8c94b7928e14fe54b53d9770fd10ace995dd6ac422a0afacfa2bb50ab4c3fa66981a2206c7065abb2f7a5030bb8aca4c89ba8ebe1dc3341db95a16bef036df31551c5c64ec46054e3f4d4109f772059bf7c6e66eef0ab7bc0ccca16d68905b5ecc2da437b01fd7e0246d6390fd3131de1df3c2c61ec5d6ee614d4b352b7f8f42e4c8f5d9992370b8da8ab7086b0cbff7b44da8b64dfed257c843463f6ab5d969afe78b2d72db9e42ee2742fe5f9a656eb582fe4f0880f4996c1d8e5642610203a2e7a1a517213e6099f6c94c96ed952cc54280c6e46c538ee1ffb34b1dc53360"}, {0x70, 0x10c, 0x6, "2e4405e8a9e660ecb3776c3e0fa75ac3a5f7413b38e53c2f76d1c4ccd3956a5d6b361870c6cade83648f74d321db49243fab3c23668b6884637bd3076e58ebfaa231a3e198a9157c42093e2da0caf8afd3434233c0cebea90b92ae7b"}, {0x40, 0x107, 0x0, "d17451640aaf4a98ea77d6073a2e34a607587b08e680172a66ddec9575108beee0841a6c1feba6c1d3956f95f1b7"}, {0xb8, 0x29, 0xffff, "2102483cbaefbfc27fe90cf272261e2bd25c7f051f66251040152c6ddf61f4c6f4b5470b8a3d0bcafb40e80edac824216693c7eddc28a772fc1007123da1c9ba85671a170f77f61d999b34fd73489cd3a965c2682da64ef1b5308d015d1b425960e9991b9e408607704c9d62b5ffcfc8245f0af70c4e75edddfeba27fca4c8925ec4377632f0c1345f14180d32e9376ceb56cd00bf73b8caa4cb1f1b1c33d3c2f0b39bc90b"}, {0xb0, 0x113, 0x983, "4149c9e5e753a35f79e5b2ae52590d3b1004edad82672a4618a00e32e2203afae71a0ebb8b27830166e33e5acb52e2a100a31ef16c37a7c5f061bba96a4f66f6d97a64de97ca8c4e4cce2533bebf9fe15e86c0e3299df8828aafc99c9308e43480d62eb289a1c8fe3ec88c9362b8ded24d0b5dc060ec0d924dc485c325e726297effd2e9c117d76f2813594de62309d1a51e810c2081bfecc7"}], 0x330}, 0x20000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) 10.531224689s ago: executing program 0 (id=3348): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 10.508081193s ago: executing program 1 (id=3349): unshare(0x4000880) unshare(0x800) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x8) unshare(0x0) unshare(0x6000400) unshare(0x400) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000040)='!(,@\x00', 0x481, &(0x7f0000000080)={@align=0x3e03, {0x3, 0x7, 0x4, 0xffffffffffffff81}}, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x1, 0x1, 0xffffffff, @vifc_lcl_addr=@remote, @multicast1}, 0x10) connect$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0xfffff801, @mcast1, 0x8}}, 0x24) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) unshare(0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r0, 0xb, 0x8}) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f00000002c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x250, r4, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aa8e0f2e45211d6f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "12d484aed9863bbd"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3995c3de99eec3f129c9eb2f1e1e428e7e6a60257f0e299651a05774473ca19b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d175201cb3b1c6309347b867ac242c6808b1b1d5e3afc579a9d5710d24038c4d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e6e57e038684849bea066dbd64e36cfde2f3d72e83c564b0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0cc2e950487b63af"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xcbb}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2e39773d5e338f7085b9674481df70e4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4823bd40bed27f86fb6858a9359aea8a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5f738e8837fccaca"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "db3156f391f065b7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1cf59d36bc8769d8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6d7146ad452826a4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bbc56a09f114ef2c8295e7d52f250d3f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "63a7459536598f70"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6bc02ee9eab7d87b3ba0a6eb70a1548c07421efd7675291f568496c05531562f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "643b8ebcbdac9d30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c0019033650f888a8c596a0acfcc536e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e3e9c668e0dcc1c956566f280ad8ca8d"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e94a7ec65798c75b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="174b96af1f484121c344b742418db231"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f5908d9d79a582d2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37267ab248b4f133331c3f0be267cd9f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bd9133701e04695bb1da8c00ae536c27"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ebd080a9e1dab31c6d0d34e13e4e61203946fae0482d141f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a658d82e93941c7d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "60f1aedf42727170"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r5 = accept$unix(r2, 0x0, &(0x7f0000000680)) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r3) getsockname$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001380)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f0000000a00)={0x908, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x8dc, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffd}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3b83866926007f2df59c2ce5af9f4c1ba466eb8ffd06cf618694493e8ad5d03f"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a4f35b2bb10bd8da5d485b75c9ea84dcf1c4e7bbda191a70a8a43beca71e7984"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x25c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x1}}]}]}]}, {0x470, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x43c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f2b34f4738109d05a1445a5338fb92a1d305e1313de5b8f9b45304dce07993d8"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @loopback, 0x5}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x78, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x908}, 0x1, 0x0, 0x0, 0xc004}, 0x20040804) unshare(0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000013c0)={0x0, 0x2, 0x20, 0x5, 0x3}, &(0x7f0000001400)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001440)=@sack_info={r8, 0x731b0b7a, 0xb0a}, &(0x7f0000001480)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r1, 0x0, 0x80, 0xe, &(0x7f00000014c0)="8eebd07c8332167c6d3d1fc526ba205cbac2dea02d4238c78034b833f521ff3cb4a061383adcd2f0ec3e79cd381a4aa554cc06a9412d68e051400f66aac0c423f3a036269dc120866a3c1cc01a002f8bce99b3273e359abfc5a2f07a4cea8314ca1f9d97c37d279f09684786e6962d0a2da0a1288affb5e5826b59e3b9a9fa93", &(0x7f0000001540)=""/14, 0x1, 0x0, 0xc9, 0xcc, &(0x7f0000001580)="481d6a6e9991644dfe5ebf2fad3b0b1d6de9e678df53c494c59eff30ece6ba90fdc070cb390f6dba8ccea133591d404b09f1405003c71ed75f8c17833270e2979a4d5f5129c12490a92c1c8683fcade3d9ccfcb8bd56a95828762656c79b9a67109783561d07f56c79bda7aa0f857929fea7208726544bd38dd9cf50c325ebe5b6196cdb62d189dbd6911c920840c63dca11787601596c58c880e4879571c212d68c39d7523d226c99158c3fb8b2697f16f9b206878686328a8ae7c76f6d1490e6b0139be25aae6bba", &(0x7f0000001680)="05b61731bd23eccc73bf8f08462e8274e1d3ce63b27d93ee3789dfeb9a9e2361d5a493f6adb19f304aef4af7812282cc02c3ffa5566be5271fd0122361f5de251fe51632ba84444009ce4936aeb5f1964e3ffd68f643dd43e6d89aadc5364e2613a025a8e151497245b8d82179f86fc7d56c11bb63f6e04a39ea4feadad9e19c0ae635e179b8caba152c790c853ffb032b0b87b4824cec7b0b4ee54f1270a1315c778dda7d57dc45bfb6a03c3a73d3af38ae21b3a8e89759c36bb0c3b4139f39ef04cc75126c8c61e983756e", 0x1, 0x0, 0x2}, 0x50) ioctl$OCFS2_IOC_RESVSP64(r5, 0x4030582a, &(0x7f0000001800)={0x2, 0x2, 0x4, 0x401, 0x9, 0x1ff}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000001840)={{{@in6=@private1, @in6=@loopback}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f0000001940)=0xe8) connect$x25(0xffffffffffffffff, &(0x7f00000019c0), 0x12) 10.402915193s ago: executing program 0 (id=3350): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ipvlan0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1, 0x7f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket(0x28, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x28, 0x20, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) listen(r2, 0xb) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}], 0x1}], 0x1, 0x881) close(0x4) close(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRESOCT=r7, @ANYRESOCT=0x0, @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 10.251134683s ago: executing program 1 (id=3351): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbf8, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000000) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3a, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @mcast1, 0x9ed6}}]}, 0x70}}, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 9.979727226s ago: executing program 0 (id=3352): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000680)={'vxcan1\x00', {0x2, 0x0, @loopback}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x84, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x49}, 0xc011) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r6, 0x0, 0x20, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0xf, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x3, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) r10 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xfffffd79) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) 9.97301792s ago: executing program 3 (id=3353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x94, 0x0, 0xffffffffffffffff, 0x35, '\x00', 0x0, 0xffffffffffffffff, 0xf, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xb, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @printk={@s}], &(0x7f0000000140)='GPL\x00', 0x8, 0xec, &(0x7f0000000180)=""/236, 0x40f00, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xb, 0x98, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[r4, r5, r6, 0x1], &(0x7f0000000540)=[{0x0, 0x1, 0x9}, {0x0, 0x3, 0xe, 0x2}], 0x10, 0x8000}, 0x94) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x3, 0x28, [0x7, 0x0, 0x7fff, 0xe1a], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 9.799379905s ago: executing program 1 (id=3354): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b708fcffffffffff7a8af8ff00000000bfa20000000000a3a237300007020000f8ffffffb703000008000000b704000800000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="f0930100000a000008001300", @ANYRES32=0x0, @ANYBLOB="7a4a6ee3e459df2ceac6001846327b6c7ed9a30457700a3f7284b3149e0cdf24ce9fc5c1ba553d8434ad27ddda924558d8fa66da29a7d05db6f25a680837219cf14074accdda59e089c299c37140c783f3442617abaf", @ANYRES32, @ANYBLOB], 0x30}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) socket$inet(0x2, 0x2, 0x1) (async) bind$unix(r1, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b708fcffffffffff7a8af8ff00000000bfa20000000000a3a237300007020000f8ffffffb703000008000000b704000800000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="f0930100000a000008001300", @ANYRES32=0x0, @ANYBLOB="7a4a6ee3e459df2ceac6001846327b6c7ed9a30457700a3f7284b3149e0cdf24ce9fc5c1ba553d8434ad27ddda924558d8fa66da29a7d05db6f25a680837219cf14074accdda59e089c299c37140c783f3442617abaf", @ANYRES32, @ANYBLOB], 0x30}}, 0x0) (async) 9.720622131s ago: executing program 1 (id=3355): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) sendmmsg$inet(r1, &(0x7f00000036c0)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000280)="5a397dba73132ffba0b4e55b018b07af39487255f3176700f5e4b8b659ca6ad954f22455796dc1dbed7b9caf9e82098a850f537bfba65639eee92c11800e4dcc0f7fc9554828e42348c3aeb64ea218ce10f3bd7167326f64ceb1386ca89c42911730ea2860b12c5ece6bd2598458b9f2ecbad31da86922923bdfa2f41bd874b26e7ea026dcf6306bce1d46a7b8d6f808bf548d7d35931a7e0a0206cea708e474719648d705", 0xa5}, {&(0x7f00000003c0)="de1ec73c9297aab554e53356438169b8691b3073b6246ab90115fd04eb21a7072f50c05da9a367fefd7e961800f69ade4f67d34c05154f47330076f4f069bbf8dec456cf76542394", 0x48}, {&(0x7f0000000440)="3675e001b70ed86fe69c5013e4886aadf9914fcd82659d54d814401e6c93fc611c64f1f5b8b375427052752c497923117327b32088fbd86405f4bbe202b20863b92272f767c9c1e7b0dc80cd438dd4ddf764fa6da1d3e83ebde9d6406a0e9fd53440920f28fec3303ce3ea6ce895a16afb46c7e3e2dd03a0a7315a53369019bdd1b6680db52ea284cfcaa38eb9bff183d95d853d55d1fa80fe4f961a1c63e037459a122a0d10ada906faea2165183f6a9953d0592e223ebc7cc67f64e62f3a", 0xbf}, {&(0x7f0000000500)}, {&(0x7f0000000540)="7316a022a72125684bb4f0ddb0661bbfc3d5bcf39e03920902dcea187758374c7a46c959e5150f06398fb7ab1c29428b2239d8e475d3c3f3fdb4b63ffcb94073e38e594aa3b851b65953db7ba8e29da94cd53ba913b4adfbe4dd22c66c652c7dd1b88f5d33218b030cf52f517f9195a1d3f1b576efbbf946c491c0e47be3f22f7382b8d08884592ecebc59e3852bd2e2931323c2990a5d10d55ded59c9813c0ccc517bfbfc9e7c9ba38c5a49486f8eafdd", 0xb1}, {&(0x7f0000000640)="c8eb9aa63008f75e12aec7d8c696baf9719b33a829b46f373e7843fb30ca512352d42d13c9126c7e7fb3bf2c3efe0b010d", 0x31}, {&(0x7f0000000680)="9b2d36806d7e3673d1bf63f8a812b93258d5b0d1ccc33528e05aab651909117b161a63a76c717ca31c", 0x29}, {&(0x7f00000006c0)="7b611311221ed19946d2f9579f66cad8cb12b60188a303c60fa8c4066ac0ee812fdd1ece", 0x24}], 0x8, &(0x7f0000000780)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @multicast2}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x1b, 0x9a, [@dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp_prespec={0x44, 0x2c, 0x87, 0x3, 0xc, [{@local, 0xa7d8}, {@remote, 0x5}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x4, 0x0}, 0x5}, {@remote, 0x4}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010100, @local}}}], 0xf8}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="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", 0x1000}], 0x2, &(0x7f0000003500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}], 0x60}}, {{&(0x7f0000003580)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000035c0), 0x0, &(0x7f0000003600)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5dcc}}], 0x88}}], 0x3, 0x40) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 9.700768925s ago: executing program 0 (id=3356): r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, &(0x7f0000000000), &(0x7f0000000080)=0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x7b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="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", 0xfb}, {&(0x7f0000000200)="a222fe2df057d5eb2fbf8038e3", 0xd}, {&(0x7f0000000240)="6ccfebdd8bf614710288484b6862a60a49a77b9c1605a9c9112fcf1b635c1d2026f2290a3eba6015942c77a3a57a3b9ef5291d908a6e3512e83eebdc8ca72c2f7fa30079dfd521c4164e98265c260fbee7ea653b3143424d623c2e239b0e8e1618a25a84142b4093e07ad03bd181f6f2790f63f336715c60bd", 0x79}, {&(0x7f00000002c0)="864a860337b944a5d731de49029b9810c79ee04c7382fd426c2fdac3ab30fa8000f5ccefd7979407cda46603ff56daa127971f60e1120d33c7c49b5e598cd0358d452ef50d14b3f09e63b791d0d9f8dcd36ffdd063fec35aeb4333710fd7909bbcffa4b20bf61bd3e2c1583a554997c1bdda6ee0812ad06654672129e38c811e66e966625b4c0852e0acad5a466c323254268e7e9f6b485cd6a5f398808940deec04aa832ccf964acba036dfa3f44d377341edf7b235e81dc94e33aa93b211cea38f6461b2ccd614770f56d35ca8b1", 0xcf}], 0x4, &(0x7f0000000700)=[@ip_retopts={{0xd4, 0x0, 0x7, {[@generic={0x94, 0xa, "043306035760f25d"}, @lsrr={0x83, 0x17, 0x73, [@rand_addr=0x64010100, @multicast2, @multicast2, @broadcast, @local]}, @timestamp_prespec={0x44, 0x54, 0xb6, 0x3, 0x7, [{@local, 0x7}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x44}}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x7ff}, {@rand_addr=0x64010102, 0x7fff}, {@multicast2, 0x10000}, {@loopback, 0xf}, {@multicast2, 0xa3a2}, {@multicast2, 0x7fff}, {@private=0xa010100, 0xf}]}, @generic={0x94, 0x2}, @ssrr={0x89, 0x7, 0x99, [@private=0xa010101]}, @rr={0x7, 0x27, 0x26, [@multicast1, @multicast1, @empty, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x9, [{@loopback, 0x2}, {@local, 0xb}, {@private=0xa010102, 0x5}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @rand_addr=0x64010100}}}], 0xf8}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x13c, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf5}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x578a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x22}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x13c}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@map=r4, 0x2e, 0x1, 0x1ff, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0]}, 0x40) sendto$packet(0xffffffffffffffff, &(0x7f0000000c40)="7b8fd3c1275e797efcbabca86e09a8fc327c75daf21dbf76ba4dae8ffc98781669d08e5d0378f99a2419a8dab8b78e4bf279cd474362ec7d53a5", 0x3a, 0x10, &(0x7f0000000c80)={0x11, 0x16, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@deltfilter={0x5c, 0x2d, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x8, 0x9}, {0xfff1, 0x2}, {0xfff3, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfffe, 0x1, 0x132}, {0x8001, 0x0, 0x7, 0x3, 0x7, 0x1, 0x2}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000e00)=@gcm_128={{0x304}, "42b3ea2a666fc896", "7c7fed5088ed5d17f468ecb10c0a4db6", "e07ee3e2", "80a56f807028663f"}, 0x28) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r8, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x100088c4) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r10, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x10, 0x3f6, 0x4, 0x70bd2d, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44001}, 0x8042) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e22, 0xfffffffa, @loopback, 0xfffffffb}}, 0x2, 0x1, 0x8, 0x9, 0x45, 0x7, 0x6}, &(0x7f00000012c0)=0x9c) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r11, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x40, r12, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', r1, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) ioctl$OCFS2_IOC_UNRESVSP(r14, 0x40305829, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x6, 0x4}) r15 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r15, 0x107, 0x3, &(0x7f0000001540)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000001580)=0x100, 0x4) 9.595279025s ago: executing program 4 (id=3357): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100001002dbd70000008000000000000", @ANYRES32=0x0, @ANYBLOB="02000100000008000a000100ffffffffffff000014000300766c616e30"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.461151673s ago: executing program 4 (id=3358): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$inet(r2, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001e2060000c0675004863294260000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003007665746830000000000000000000000008001f00010000001400128009000100766574680000000004000280"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0xd8, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xa8, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa42}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xd8}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100090a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x24000000) 9.412889257s ago: executing program 0 (id=3359): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 9.263397756s ago: executing program 0 (id=3360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfa1, 0x65, 0x0, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}}, "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"}}, 0xfaf) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, 0x0, 0xf371cc2a4cc195fb) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20000010}, 0x4090) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000400000000000000000a0102000000000000000007000000020002400000000214000000100001"], 0x44}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@local, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x9732) listen(r5, 0xec) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) unshare(0x22020600) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) recvmmsg(r10, 0x0, 0x0, 0x0, 0x0) write(r9, &(0x7f0000000000)="41000200010001", 0x7) 0s ago: executing program 1 (id=3361): syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffffb88}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="1c7b0a5e41d7fb1e640324"], 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x44, 0x41, 0x107, 0xfffffffa, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="800000001000ffff25bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300000000000000000000000000000000004400128009000100766c616e00000000340002800600010000000000280003800c0001002b000000070000000c000100ffffff7f060000000c000100ff0100000000010008000500", @ANYRES32=r3], 0x80}, 0x1, 0x0, 0x0, 0x4c800}, 0x8000002) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711821000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.132583][ T3359] tipc: Resetting bearer [ 465.159469][T16603] team0: Mode changed to "broadcast" [ 465.300594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.565797][T16625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2475'. [ 465.780908][T16637] netlink: 'syz.3.2479': attribute type 9 has an invalid length. [ 465.817681][T16637] netlink: 'syz.3.2479': attribute type 6 has an invalid length. [ 465.890251][T16642] FAULT_INJECTION: forcing a failure. [ 465.890251][T16642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.921044][T16642] CPU: 0 UID: 0 PID: 16642 Comm: syz.4.2481 Not tainted syzkaller #0 PREEMPT(full) [ 465.921075][T16642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.921086][T16642] Call Trace: [ 465.921094][T16642] [ 465.921103][T16642] dump_stack_lvl+0xe8/0x150 [ 465.921140][T16642] should_fail_ex+0x40c/0x560 [ 465.921172][T16642] _copy_from_user+0x2d/0xb0 [ 465.921193][T16642] ___sys_sendmsg+0x1c6/0x360 [ 465.921218][T16642] ? __lock_acquire+0x683/0x2cf0 [ 465.921251][T16642] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.921273][T16642] ? __lock_acquire+0x683/0x2cf0 [ 465.921305][T16642] ? kstrtouint+0x6e/0xe0 [ 465.921370][T16642] __sys_sendmmsg+0x273/0x4d0 [ 465.921401][T16642] ? __pfx___sys_sendmmsg+0x10/0x10 [ 465.921436][T16642] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.921477][T16642] ? ksys_write+0x242/0x270 [ 465.921501][T16642] ? __pfx_ksys_write+0x10/0x10 [ 465.921528][T16642] __x64_sys_sendmmsg+0xa0/0xc0 [ 465.921552][T16642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.921573][T16642] do_syscall_64+0x174/0x580 [ 465.921597][T16642] ? trace_irq_disable+0x3b/0x140 [ 465.921624][T16642] ? clear_bhb_loop+0x40/0x90 [ 465.921658][T16642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.921678][T16642] RIP: 0033:0x7f65a0f9e019 [ 465.921698][T16642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.921715][T16642] RSP: 002b:00007f65a1e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 465.921737][T16642] RAX: ffffffffffffffda RBX: 00007f65a1225fa0 RCX: 00007f65a0f9e019 [ 465.921752][T16642] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 465.921764][T16642] RBP: 00007f65a1e09090 R08: 0000000000000000 R09: 0000000000000000 [ 465.921777][T16642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.921790][T16642] R13: 00007f65a1226038 R14: 00007f65a1225fa0 R15: 00007ffd93e89808 [ 465.921823][T16642] [ 466.191261][T16651] netlink: 'syz.3.2483': attribute type 16 has an invalid length. [ 466.217361][T16651] netlink: 'syz.3.2483': attribute type 17 has an invalid length. [ 466.247056][T16651] team0: left allmulticast mode [ 466.252816][T16651] tipc: Resetting bearer [ 466.258792][T16651] tipc: Resetting bearer [ 466.299070][T16651] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 466.325513][T16654] openvswitch: netlink: Tunnel attr 3 has unexpected len 262 expected 1 [ 466.343169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.654703][T16660] ip6gretap0: entered promiscuous mode [ 466.853285][T16681] FAULT_INJECTION: forcing a failure. [ 466.853285][T16681] name failslab, interval 1, probability 0, space 0, times 0 [ 466.882609][T16681] CPU: 1 UID: 0 PID: 16681 Comm: syz.0.2495 Not tainted syzkaller #0 PREEMPT(full) [ 466.882638][T16681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.882649][T16681] Call Trace: [ 466.882657][T16681] [ 466.882665][T16681] dump_stack_lvl+0xe8/0x150 [ 466.882700][T16681] should_fail_ex+0x40c/0x560 [ 466.882730][T16681] should_failslab+0xa8/0x100 [ 466.882759][T16681] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 466.882785][T16681] ? __alloc_skb+0x1d7/0x7a0 [ 466.882804][T16681] ? __alloc_skb+0x1d7/0x7a0 [ 466.882831][T16681] __alloc_skb+0x1d7/0x7a0 [ 466.882856][T16681] tipc_msg_build+0x15f/0xf50 [ 466.882977][T16681] ? tipc_node_find+0xb3/0x490 [ 466.883027][T16681] ? tipc_node_find+0x3bd/0x490 [ 466.883047][T16681] ? register_lock_class+0x31/0x2e0 [ 466.883077][T16681] ? __pfx_tipc_msg_build+0x10/0x10 [ 466.883119][T16681] ? ima_match_policy+0x106/0x21c0 [ 466.883201][T16681] __tipc_sendmsg+0x1849/0x2b60 [ 466.883237][T16681] ? process_measurement+0x443/0x1c10 [ 466.883267][T16681] ? __pfx___tipc_sendmsg+0x10/0x10 [ 466.883293][T16681] ? aa_label_sk_perm+0x532/0x6e0 [ 466.883313][T16681] ? process_measurement+0x7b2/0x1c10 [ 466.883347][T16681] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 466.883364][T16681] ? look_up_lock_class+0x57/0x110 [ 466.883390][T16681] ? register_lock_class+0x31/0x2e0 [ 466.883421][T16681] ? __lock_acquire+0x683/0x2cf0 [ 466.883451][T16681] ? __lock_acquire+0x683/0x2cf0 [ 466.883502][T16681] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.883524][T16681] ? __pfx_woken_wake_function+0x10/0x10 [ 466.883555][T16681] ? tipc_sendmsg+0x47/0x70 [ 466.883607][T16681] ? __local_bh_enable_ip+0xd0/0x130 [ 466.883634][T16681] tipc_sendmsg+0x55/0x70 [ 466.883659][T16681] ? __pfx_tipc_sendmsg+0x10/0x10 [ 466.883681][T16681] sock_sendmsg_nosec+0x13a/0x180 [ 466.883712][T16681] ____sys_sendmsg+0x54e/0x850 [ 466.883738][T16681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.883770][T16681] ? import_iovec+0x73/0xa0 [ 466.883805][T16681] ___sys_sendmsg+0x2a5/0x360 [ 466.883825][T16681] ? __lock_acquire+0x683/0x2cf0 [ 466.883855][T16681] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.883876][T16681] ? __lock_acquire+0x683/0x2cf0 [ 466.883905][T16681] ? kstrtouint+0x6e/0xe0 [ 466.883972][T16681] __sys_sendmmsg+0x273/0x4d0 [ 466.884002][T16681] ? __pfx___sys_sendmmsg+0x10/0x10 [ 466.884036][T16681] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 466.884075][T16681] ? ksys_write+0x242/0x270 [ 466.884097][T16681] ? __pfx_ksys_write+0x10/0x10 [ 466.884132][T16681] __x64_sys_sendmmsg+0xa0/0xc0 [ 466.884155][T16681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.884176][T16681] do_syscall_64+0x174/0x580 [ 466.884199][T16681] ? trace_irq_disable+0x3b/0x140 [ 466.884225][T16681] ? clear_bhb_loop+0x40/0x90 [ 466.884248][T16681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.884267][T16681] RIP: 0033:0x7f5cfaf9e019 [ 466.884287][T16681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.884304][T16681] RSP: 002b:00007f5cfbe02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 466.884326][T16681] RAX: ffffffffffffffda RBX: 00007f5cfb225fa0 RCX: 00007f5cfaf9e019 [ 466.884340][T16681] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 466.884353][T16681] RBP: 00007f5cfbe02090 R08: 0000000000000000 R09: 0000000000000000 [ 466.884365][T16681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.884376][T16681] R13: 00007f5cfb226038 R14: 00007f5cfb225fa0 R15: 00007ffe923aba18 [ 466.884408][T16681] [ 467.512779][T16689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.530697][T16691] netlink: 'syz.1.2499': attribute type 3 has an invalid length. [ 467.545136][T16689] netlink: 'syz.4.2498': attribute type 27 has an invalid length. [ 467.663840][T16704] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20001 [ 467.671124][T16695] lo speed is unknown, defaulting to 1000 [ 467.714710][T16707] x_tables: duplicate underflow at hook 1 [ 468.423175][ C0] net_ratelimit: 2 callbacks suppressed [ 468.423278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.437136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.564929][T16729] __nla_validate_parse: 3 callbacks suppressed [ 468.564951][T16729] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2510'. [ 468.622638][T16729] openvswitch: netlink: Message has 512 unknown bytes. [ 468.984154][T16746] 8021q: VLANs not supported on lo [ 469.187618][T16752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2518'. [ 469.214761][T16759] nft_compat: unsupported protocol 1 [ 469.324717][T16765] FAULT_INJECTION: forcing a failure. [ 469.324717][T16765] name failslab, interval 1, probability 0, space 0, times 0 [ 469.348995][T16747] tipc: Resetting bearer [ 469.378548][T16765] CPU: 0 UID: 0 PID: 16765 Comm: syz.1.2522 Not tainted syzkaller #0 PREEMPT(full) [ 469.378579][T16765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.378591][T16765] Call Trace: [ 469.378599][T16765] [ 469.378609][T16765] dump_stack_lvl+0xe8/0x150 [ 469.378647][T16765] should_fail_ex+0x40c/0x560 [ 469.378678][T16765] should_failslab+0xa8/0x100 [ 469.378712][T16765] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 469.378742][T16765] ? __alloc_skb+0x1d7/0x7a0 [ 469.378761][T16765] ? __alloc_skb+0x1d7/0x7a0 [ 469.378789][T16765] __alloc_skb+0x1d7/0x7a0 [ 469.378815][T16765] tipc_msg_build+0x15f/0xf50 [ 469.378841][T16765] ? tipc_node_find+0xb3/0x490 [ 469.378868][T16765] ? tipc_node_find+0x3bd/0x490 [ 469.378889][T16765] ? register_lock_class+0x31/0x2e0 [ 469.378919][T16765] ? __pfx_tipc_msg_build+0x10/0x10 [ 469.378951][T16765] ? ima_match_policy+0x106/0x21c0 [ 469.378991][T16765] __tipc_sendmsg+0x1849/0x2b60 [ 469.379038][T16765] ? process_measurement+0x443/0x1c10 [ 469.379070][T16765] ? __pfx___tipc_sendmsg+0x10/0x10 [ 469.379099][T16765] ? aa_label_sk_perm+0x532/0x6e0 [ 469.379120][T16765] ? process_measurement+0x7b2/0x1c10 [ 469.379152][T16765] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 469.379169][T16765] ? look_up_lock_class+0x57/0x110 [ 469.379193][T16765] ? register_lock_class+0x31/0x2e0 [ 469.379223][T16765] ? __lock_acquire+0x683/0x2cf0 [ 469.379258][T16765] ? __lock_acquire+0x683/0x2cf0 [ 469.379311][T16765] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 469.379335][T16765] ? __pfx_woken_wake_function+0x10/0x10 [ 469.379361][T16765] ? tipc_sendmsg+0x47/0x70 [ 469.379386][T16765] ? __local_bh_enable_ip+0xd0/0x130 [ 469.379415][T16765] tipc_sendmsg+0x55/0x70 [ 469.379439][T16765] ? __pfx_tipc_sendmsg+0x10/0x10 [ 469.379464][T16765] sock_sendmsg_nosec+0x13a/0x180 [ 469.379496][T16765] ____sys_sendmsg+0x54e/0x850 [ 469.379525][T16765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.379558][T16765] ? import_iovec+0x73/0xa0 [ 469.379591][T16765] ___sys_sendmsg+0x2a5/0x360 [ 469.379611][T16765] ? __lock_acquire+0x683/0x2cf0 [ 469.379642][T16765] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.379663][T16765] ? __lock_acquire+0x683/0x2cf0 [ 469.379694][T16765] ? kstrtouint+0x6e/0xe0 [ 469.379766][T16765] __sys_sendmmsg+0x273/0x4d0 [ 469.379797][T16765] ? __pfx___sys_sendmmsg+0x10/0x10 [ 469.379832][T16765] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 469.379875][T16765] ? ksys_write+0x242/0x270 [ 469.379898][T16765] ? __pfx_ksys_write+0x10/0x10 [ 469.379926][T16765] __x64_sys_sendmmsg+0xa0/0xc0 [ 469.379950][T16765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.379972][T16765] do_syscall_64+0x174/0x580 [ 469.379996][T16765] ? trace_irq_disable+0x3b/0x140 [ 469.380032][T16765] ? clear_bhb_loop+0x40/0x90 [ 469.380058][T16765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.380078][T16765] RIP: 0033:0x7f3ed7f9e019 [ 469.380097][T16765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.380114][T16765] RSP: 002b:00007f3ed8ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 469.380137][T16765] RAX: ffffffffffffffda RBX: 00007f3ed8225fa0 RCX: 00007f3ed7f9e019 [ 469.380151][T16765] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 469.380165][T16765] RBP: 00007f3ed8ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 469.380178][T16765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.380190][T16765] R13: 00007f3ed8226038 R14: 00007f3ed8225fa0 R15: 00007fff4c763ec8 [ 469.380239][T16765] [ 469.726898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.735113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.980798][T16747] ip6gre1: left promiscuous mode [ 469.985822][T16747] ip6gre1: left allmulticast mode [ 469.994292][T16747] gretap1: left promiscuous mode [ 470.000166][T16747] bond2: left promiscuous mode [ 470.013462][T16747] bond4: left promiscuous mode [ 470.018364][T16747] bond4: left allmulticast mode [ 470.027986][T16747] bond8: left allmulticast mode [ 470.033829][T16747] geneve3: left promiscuous mode [ 470.038880][T16747] geneve3: left allmulticast mode [ 470.047241][T16747] bond10: left promiscuous mode [ 470.052285][T16747] ip6gre2: left promiscuous mode [ 470.064038][T16747] vlan0: left allmulticast mode [ 470.068905][T16747] bond0: left allmulticast mode [ 470.074361][T16747] xfrm2: left allmulticast mode [ 470.098857][T16747] ip6gre3: left promiscuous mode [ 470.105139][T16747] ip6gre3: left allmulticast mode [ 470.191858][ T3359] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.213215][ T3359] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.222326][ T3359] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.234091][ T3359] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.247477][ T3359] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.270716][ T3359] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.295307][ T3359] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.332935][ T3359] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.366062][T16782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2525'. [ 470.391652][T16783] x_tables: duplicate underflow at hook 2 [ 470.415442][T16783] xt_NFQUEUE: number of total queues is 0 [ 470.693311][T16799] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 470.740614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.358133][T16825] syzkaller0: entered promiscuous mode [ 471.363820][T16825] syzkaller0: entered allmulticast mode [ 471.373494][T16825] tipc: Enabled bearer , priority 0 [ 471.569720][T16831] 8021q: VLANs not supported on ip6_vti0 [ 471.667158][T16831] netlink: 'syz.4.2538': attribute type 1 has an invalid length. [ 471.743960][T16831] bond7: entered promiscuous mode [ 471.751319][T16831] 8021q: adding VLAN 0 to HW filter on device bond7 [ 471.782128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.790373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.965393][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 472.105548][T16852] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2544'. [ 472.115794][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 472.125541][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 472.156315][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 472.190177][T16824] tipc: Resetting bearer [ 472.258095][T16824] tipc: Disabling bearer [ 472.287916][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 472.288774][T16868] netlink: 'syz.4.2547': attribute type 2 has an invalid length. [ 472.300702][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 472.648442][T16885] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 472.667978][T16885] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 472.689622][T16885] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 472.722883][T16885] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 472.751904][T16885] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 472.766434][T16885] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 472.776336][T16885] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 472.784882][T16885] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 472.820565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.860586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.868811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.081561][T16936] __nla_validate_parse: 68 callbacks suppressed [ 474.081582][T16936] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2567'. [ 474.131613][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2567'. [ 474.262869][T16953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2568'. [ 474.373483][T16954] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 474.708399][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'. [ 474.708758][T16975] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2577'. [ 474.819365][T16983] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2579'. [ 474.831940][T16982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2579'. [ 474.900547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.908777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.968193][T16988] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 474.978072][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2580'. [ 475.091502][T16990] syzkaller0: entered promiscuous mode [ 475.097827][T16990] syzkaller0: entered allmulticast mode [ 475.106165][T16993] tap0: tun_chr_ioctl cmd 1074025677 [ 475.114549][T16993] tap0: linktype set to 6 [ 475.363830][T17008] bond7: entered promiscuous mode [ 475.369415][T17008] 8021q: adding VLAN 0 to HW filter on device bond7 [ 475.943245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.106857][T17046] 8021q: adding VLAN 0 to HW filter on device bond14 [ 476.523913][T17072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2602'. [ 476.594423][ T30] audit: type=1804 audit(1785472449.007:9): pid=17073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2599" name="/newroot/475/cgroup.controllers" dev="tmpfs" ino=2458 res=1 errno=0 [ 476.669941][T17077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2603'. [ 476.679315][ T30] audit: type=1800 audit(1785472449.007:10): pid=17073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2599" name="cgroup.controllers" dev="tmpfs" ino=2458 res=0 errno=0 [ 476.960015][T17097] validate_nla: 59 callbacks suppressed [ 476.960109][T17097] netlink: 'syz.0.2608': attribute type 23 has an invalid length. [ 476.986374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.994600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.607150][T17123] bridge6: entered promiscuous mode [ 477.616308][T17123] bridge6: entered allmulticast mode [ 477.645084][T17124] (: renamed from bridge_slave_0 (while UP) [ 478.020565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.189674][T17149] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 478.215124][T17149] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 478.273953][T17149] tipc: Invalid UDP bearer configuration [ 478.274014][T17149] tipc: Enabling of bearer rejected, failed to enable media [ 478.409968][T17161] openvswitch: netlink: Message has 1 unknown bytes. [ 479.060554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.068790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.138285][T17192] __nla_validate_parse: 6 callbacks suppressed [ 479.138305][T17192] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2636'. [ 479.145713][T17191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2637'. [ 479.215448][T17192] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 479.275776][T17192] openvswitch: netlink: Message has 208 unknown bytes. [ 479.773360][T17224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2646'. [ 479.992531][T17236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2649'. [ 480.100622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.108859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.118692][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'. [ 480.472688][T17243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2651'. [ 481.077813][T17276] syzkaller0: entered promiscuous mode [ 481.106854][T17276] syzkaller0: entered allmulticast mode [ 481.140580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.153412][T17286] tipc: Enabled bearer , priority 0 [ 481.208986][T17276] tipc: Resetting bearer [ 481.260833][T17275] tipc: Resetting bearer [ 481.314503][T17275] tipc: Disabling bearer [ 481.414421][T17294] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 481.424332][T17296] tipc: Enabling of bearer rejected, already enabled [ 481.947280][T17323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2671'. [ 482.180583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.188822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.275809][T17331] netlink: 'syz.4.2672': attribute type 1 has an invalid length. [ 482.495709][T17331] 8021q: adding VLAN 0 to HW filter on device bond8 [ 483.220565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.676967][T17383] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 483.816162][T17349] netlink: 'syz.2.2675': attribute type 8 has an invalid length. [ 483.825122][T17388] tipc: Enabled bearer , priority 0 [ 483.863001][T17387] tipc: Disabling bearer [ 484.234202][T17410] vlan5: entered promiscuous mode [ 484.239467][T17410] bridge0: entered promiscuous mode [ 484.248284][T17411] syzkaller0: left promiscuous mode [ 484.259919][T17411] syzkaller0: left allmulticast mode [ 484.260604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.273573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.402394][T17416] bond12: ARP target 9.0.0.0 is already present [ 484.408851][T17416] bond12: option arp_ip_target: invalid value (9) [ 484.418611][T17416] bond12 (unregistering): Released all slaves [ 484.577028][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2698'. [ 484.598302][T17427] IPv6: Can't replace route, no match found [ 484.606902][T17427] IPv6: Can't replace route, no match found [ 484.614482][T17427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2701'. [ 484.653336][T17425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2698'. [ 484.692403][T17431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2700'. [ 484.813320][T17437] netlink: 'syz.0.2703': attribute type 1 has an invalid length. [ 484.865413][T17436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2703'. [ 484.912457][T17436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2703'. [ 485.031456][T17437] bond12: entered promiscuous mode [ 485.061241][T17437] 8021q: adding VLAN 0 to HW filter on device bond12 [ 485.300547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.308799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.446453][T17462] netlink: 'syz.4.2710': attribute type 1 has an invalid length. [ 485.532864][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'. [ 485.579033][T17465] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 485.632122][T17462] 8021q: adding VLAN 0 to HW filter on device bond9 [ 485.727183][T17461] bond9: (slave geneve3): making interface the new active one [ 485.758883][T17461] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 485.771393][T17457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2708'. [ 485.922898][T10718] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.958409][T10718] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.970899][T10718] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.980151][T10718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.053882][T17478] team0 (unregistering): Port device team_slave_1 removed [ 486.340600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.627105][T17512] FAULT_INJECTION: forcing a failure. [ 486.627105][T17512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.673802][T17512] CPU: 1 UID: 0 PID: 17512 Comm: syz.2.2721 Not tainted syzkaller #0 PREEMPT(full) [ 486.673831][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.673842][T17512] Call Trace: [ 486.673850][T17512] [ 486.673858][T17512] dump_stack_lvl+0xe8/0x150 [ 486.673900][T17512] should_fail_ex+0x40c/0x560 [ 486.673935][T17512] _copy_from_user+0x2d/0xb0 [ 486.673956][T17512] ___sys_sendmsg+0x1c6/0x360 [ 486.673982][T17512] ? __lock_acquire+0x683/0x2cf0 [ 486.674019][T17512] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.674040][T17512] ? __lock_acquire+0x683/0x2cf0 [ 486.674084][T17512] ? kstrtouint+0x6e/0xe0 [ 486.674154][T17512] __sys_sendmmsg+0x273/0x4d0 [ 486.674185][T17512] ? __pfx___sys_sendmmsg+0x10/0x10 [ 486.674221][T17512] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 486.674266][T17512] ? ksys_write+0x242/0x270 [ 486.674295][T17512] ? __pfx_ksys_write+0x10/0x10 [ 486.674323][T17512] __x64_sys_sendmmsg+0xa0/0xc0 [ 486.674348][T17512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.674371][T17512] do_syscall_64+0x174/0x580 [ 486.674394][T17512] ? trace_irq_disable+0x3b/0x140 [ 486.674421][T17512] ? clear_bhb_loop+0x40/0x90 [ 486.674447][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.674467][T17512] RIP: 0033:0x7f6fd679e019 [ 486.674486][T17512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.674503][T17512] RSP: 002b:00007f6fd76a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 486.674525][T17512] RAX: ffffffffffffffda RBX: 00007f6fd6a25fa0 RCX: 00007f6fd679e019 [ 486.674540][T17512] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 486.674552][T17512] RBP: 00007f6fd76a6090 R08: 0000000000000000 R09: 0000000000000000 [ 486.674565][T17512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.674576][T17512] R13: 00007f6fd6a26038 R14: 00007f6fd6a25fa0 R15: 00007ffe26bbbb98 [ 486.674609][T17512] [ 486.690370][T17515] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2722'. [ 486.892136][T17521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2723'. [ 486.975048][T17525] tipc: Enabled bearer , priority 25 [ 487.006918][T17511] bridge7: entered promiscuous mode [ 487.013572][T17511] bridge7: entered allmulticast mode [ 487.363878][T17543] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 487.380559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.388800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.929717][T17573] FAULT_INJECTION: forcing a failure. [ 487.929717][T17573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.964969][T17573] CPU: 1 UID: 0 PID: 17573 Comm: syz.0.2735 Not tainted syzkaller #0 PREEMPT(full) [ 487.964998][T17573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.965010][T17573] Call Trace: [ 487.965018][T17573] [ 487.965027][T17573] dump_stack_lvl+0xe8/0x150 [ 487.965066][T17573] should_fail_ex+0x40c/0x560 [ 487.965097][T17573] _copy_from_user+0x2d/0xb0 [ 487.965119][T17573] ___sys_sendmsg+0x1c6/0x360 [ 487.965141][T17573] ? __lock_acquire+0x683/0x2cf0 [ 487.965174][T17573] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.965194][T17573] ? __lock_acquire+0x683/0x2cf0 [ 487.965223][T17573] ? kstrtouint+0x6e/0xe0 [ 487.965287][T17573] __sys_sendmmsg+0x273/0x4d0 [ 487.965316][T17573] ? __pfx___sys_sendmmsg+0x10/0x10 [ 487.965349][T17573] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 487.965388][T17573] ? ksys_write+0x242/0x270 [ 487.965411][T17573] ? __pfx_ksys_write+0x10/0x10 [ 487.965437][T17573] __x64_sys_sendmmsg+0xa0/0xc0 [ 487.965460][T17573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.965547][T17573] do_syscall_64+0x174/0x580 [ 487.965571][T17573] ? trace_irq_disable+0x3b/0x140 [ 487.965598][T17573] ? clear_bhb_loop+0x40/0x90 [ 487.965622][T17573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.965642][T17573] RIP: 0033:0x7f5cfaf9e019 [ 487.965662][T17573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.965678][T17573] RSP: 002b:00007f5cfbe02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.965701][T17573] RAX: ffffffffffffffda RBX: 00007f5cfb225fa0 RCX: 00007f5cfaf9e019 [ 487.965715][T17573] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 487.965719][T17576] sctp: [Deprecated]: syz.4.2737 (pid 17576) Use of int in maxseg socket option. [ 487.965719][T17576] Use struct sctp_assoc_value instead [ 487.965727][T17573] RBP: 00007f5cfbe02090 R08: 0000000000000000 R09: 0000000000000000 [ 487.965739][T17573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.965750][T17573] R13: 00007f5cfb226038 R14: 00007f5cfb225fa0 R15: 00007ffe923aba18 [ 487.965776][T17573] [ 488.005540][ T29] tipc: Node number set to 3084016341 [ 488.420620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.436096][T17604] netlink: 'syz.2.2742': attribute type 12 has an invalid length. [ 488.455886][T17603] syzkaller0: Caught tx_queue_len zero misconfig [ 488.679958][T17615] veth1_to_bond: Caught tx_queue_len zero misconfig [ 489.002631][T17632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.346483][T17643] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 489.460547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.470386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.516439][T17648] lo speed is unknown, defaulting to 1000 [ 489.619112][T17658] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 490.274808][T17665] netlink: 'syz.4.2760': attribute type 49 has an invalid length. [ 490.360071][T17680] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 490.477378][T17665] ip6gretap0: left promiscuous mode [ 490.492587][T17665] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 490.500715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.500816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.529632][T17665] ip6gretap0: entered promiscuous mode [ 490.535678][T17665] ip6gretap0: entered allmulticast mode [ 490.862022][T17694] FAULT_INJECTION: forcing a failure. [ 490.862022][T17694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.880060][T17694] CPU: 1 UID: 0 PID: 17694 Comm: syz.4.2767 Not tainted syzkaller #0 PREEMPT(full) [ 490.880089][T17694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.880102][T17694] Call Trace: [ 490.880109][T17694] [ 490.880118][T17694] dump_stack_lvl+0xe8/0x150 [ 490.880155][T17694] should_fail_ex+0x40c/0x560 [ 490.880185][T17694] _copy_from_user+0x2d/0xb0 [ 490.880205][T17694] ___sys_sendmsg+0x1c6/0x360 [ 490.880230][T17694] ? __lock_acquire+0x683/0x2cf0 [ 490.880262][T17694] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.880282][T17694] ? __lock_acquire+0x683/0x2cf0 [ 490.880314][T17694] ? kstrtouint+0x6e/0xe0 [ 490.880382][T17694] __sys_sendmmsg+0x273/0x4d0 [ 490.880412][T17694] ? __pfx___sys_sendmmsg+0x10/0x10 [ 490.880449][T17694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 490.880490][T17694] ? ksys_write+0x242/0x270 [ 490.880513][T17694] ? __pfx_ksys_write+0x10/0x10 [ 490.880550][T17694] __x64_sys_sendmmsg+0xa0/0xc0 [ 490.880572][T17694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.880594][T17694] do_syscall_64+0x174/0x580 [ 490.880620][T17694] ? clear_bhb_loop+0x40/0x90 [ 490.880643][T17694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.880662][T17694] RIP: 0033:0x7f65a0f9e019 [ 490.880681][T17694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.880698][T17694] RSP: 002b:00007f65a1e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 490.880720][T17694] RAX: ffffffffffffffda RBX: 00007f65a1225fa0 RCX: 00007f65a0f9e019 [ 490.880733][T17694] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 490.880746][T17694] RBP: 00007f65a1e09090 R08: 0000000000000000 R09: 0000000000000000 [ 490.880759][T17694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.880771][T17694] R13: 00007f65a1226038 R14: 00007f65a1225fa0 R15: 00007ffd93e89808 [ 490.880803][T17694] [ 491.156101][T17690] syzkaller0: entered promiscuous mode [ 491.163387][T17690] syzkaller0: entered allmulticast mode [ 491.429418][T17709] __nla_validate_parse: 8 callbacks suppressed [ 491.429439][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2770'. [ 491.464943][T17709] block nbd4: Unsupported socket: should be TCP or UNIX. [ 491.540563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.561101][T17714] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 492.128923][T17746] netlink: 'syz.3.2777': attribute type 1 has an invalid length. [ 492.155169][T17746] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 492.312523][T17754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2778'. [ 492.342340][T17757] FAULT_INJECTION: forcing a failure. [ 492.342340][T17757] name failslab, interval 1, probability 0, space 0, times 0 [ 492.364232][T17757] CPU: 1 UID: 0 PID: 17757 Comm: syz.1.2779 Not tainted syzkaller #0 PREEMPT(full) [ 492.364258][T17757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.364269][T17757] Call Trace: [ 492.364278][T17757] [ 492.364287][T17757] dump_stack_lvl+0xe8/0x150 [ 492.364323][T17757] should_fail_ex+0x40c/0x560 [ 492.364360][T17757] should_failslab+0xa8/0x100 [ 492.364393][T17757] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 492.364425][T17757] ? __alloc_skb+0x1d7/0x7a0 [ 492.364445][T17757] ? __alloc_skb+0x1d7/0x7a0 [ 492.364470][T17757] __alloc_skb+0x1d7/0x7a0 [ 492.364491][T17757] tipc_msg_build+0x15f/0xf50 [ 492.364514][T17757] ? tipc_node_find+0xb3/0x490 [ 492.364537][T17757] ? tipc_node_find+0x3bd/0x490 [ 492.364557][T17757] ? register_lock_class+0x31/0x2e0 [ 492.364585][T17757] ? __pfx_tipc_msg_build+0x10/0x10 [ 492.364614][T17757] ? ima_match_policy+0x106/0x21c0 [ 492.364654][T17757] __tipc_sendmsg+0x1849/0x2b60 [ 492.364692][T17757] ? process_measurement+0x443/0x1c10 [ 492.364724][T17757] ? __pfx___tipc_sendmsg+0x10/0x10 [ 492.364752][T17757] ? aa_label_sk_perm+0x532/0x6e0 [ 492.364773][T17757] ? process_measurement+0x7b2/0x1c10 [ 492.364808][T17757] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 492.364827][T17757] ? look_up_lock_class+0x57/0x110 [ 492.364854][T17757] ? register_lock_class+0x31/0x2e0 [ 492.364887][T17757] ? __lock_acquire+0x683/0x2cf0 [ 492.364922][T17757] ? __lock_acquire+0x683/0x2cf0 [ 492.364987][T17757] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.365013][T17757] ? __pfx_woken_wake_function+0x10/0x10 [ 492.365041][T17757] ? tipc_sendmsg+0x47/0x70 [ 492.365068][T17757] ? __local_bh_enable_ip+0xd0/0x130 [ 492.365099][T17757] tipc_sendmsg+0x55/0x70 [ 492.365124][T17757] ? __pfx_tipc_sendmsg+0x10/0x10 [ 492.365146][T17757] sock_sendmsg_nosec+0x13a/0x180 [ 492.365179][T17757] ____sys_sendmsg+0x54e/0x850 [ 492.365210][T17757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.365246][T17757] ? import_iovec+0x73/0xa0 [ 492.365283][T17757] ___sys_sendmsg+0x2a5/0x360 [ 492.365305][T17757] ? __lock_acquire+0x683/0x2cf0 [ 492.365338][T17757] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.365359][T17757] ? __lock_acquire+0x683/0x2cf0 [ 492.365393][T17757] ? kstrtouint+0x6e/0xe0 [ 492.365464][T17757] __sys_sendmmsg+0x273/0x4d0 [ 492.365496][T17757] ? __pfx___sys_sendmmsg+0x10/0x10 [ 492.365531][T17757] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 492.365574][T17757] ? ksys_write+0x242/0x270 [ 492.365598][T17757] ? __pfx_ksys_write+0x10/0x10 [ 492.365627][T17757] __x64_sys_sendmmsg+0xa0/0xc0 [ 492.365652][T17757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.365673][T17757] do_syscall_64+0x174/0x580 [ 492.365697][T17757] ? trace_irq_disable+0x3b/0x140 [ 492.365722][T17757] ? clear_bhb_loop+0x40/0x90 [ 492.365746][T17757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.365767][T17757] RIP: 0033:0x7f3ed7f9e019 [ 492.365787][T17757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.365803][T17757] RSP: 002b:00007f3ed8ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 492.365824][T17757] RAX: ffffffffffffffda RBX: 00007f3ed8225fa0 RCX: 00007f3ed7f9e019 [ 492.365839][T17757] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 492.365852][T17757] RBP: 00007f3ed8ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 492.365864][T17757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.365875][T17757] R13: 00007f3ed8226038 R14: 00007f3ed8225fa0 R15: 00007fff4c763ec8 [ 492.365910][T17757] [ 492.366418][T17754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2778'. [ 492.582138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.736550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.089737][T17781] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2786'. [ 493.432631][T17796] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 493.462211][T17796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2790'. [ 493.620611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.862839][ T4939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.881165][ T4939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.890303][ T4939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.900136][ T4939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.908117][ T4939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.942866][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.952422][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.960344][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.970304][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.983677][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.227661][T17826] netlink: 'syz.1.2797': attribute type 1 has an invalid length. [ 494.347724][T17826] bond10: entered promiscuous mode [ 494.369910][T17826] 8021q: adding VLAN 0 to HW filter on device bond10 [ 494.411949][T17826] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2797'. [ 494.463618][T17826] 8021q: adding VLAN 0 to HW filter on device bond10 [ 494.485009][T17826] bond10: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 494.502622][T17826] bond10: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 494.515825][T17826] bond10: (slave ip6gre3): making interface the new active one [ 494.523615][T17826] ip6gre3: entered promiscuous mode [ 494.530009][T17826] bond10: (slave ip6gre3): Enslaving as an active interface with an up link [ 494.545486][T17839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.554735][T17839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.660545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.668791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.748517][T17813] lo speed is unknown, defaulting to 1000 [ 494.875072][T17849] syzkaller0: entered promiscuous mode [ 494.884839][T17849] syzkaller0: entered allmulticast mode [ 495.168063][T17856] xt_hashlimit: size too large, truncated to 1048576 [ 495.392322][T17867] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 495.439512][T17867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2808'. [ 495.622380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.700711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.708986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.966569][T17896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2813'. [ 495.988486][T17895] netlink: 'syz.1.2812': attribute type 1 has an invalid length. [ 496.099857][T17903] bond11: (slave bridge4): making interface the new active one [ 496.107567][ T4939] Bluetooth: hci5: command tx timeout [ 496.115844][T17903] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 496.166766][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2814'. [ 496.353523][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2815'. [ 496.388904][T17915] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 496.399419][T17915] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 496.412454][T17915] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 496.448517][T17813] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.455994][T17813] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.464078][T17813] bridge_slave_0: entered allmulticast mode [ 496.473192][T17813] bridge_slave_0: entered promiscuous mode [ 496.483406][T17813] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.490879][T17813] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.498432][T17813] bridge_slave_1: entered allmulticast mode [ 496.507075][T17813] bridge_slave_1: entered promiscuous mode [ 496.574476][T17813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.589955][T17813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.660699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.734398][T17813] team0: Port device team_slave_0 added [ 496.740564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.745282][T17813] team0: Port device team_slave_1 added [ 496.748764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.773323][T17935] sock: sock_timestamping_bind_phc: sock not bind to device [ 496.781658][T17935] __nla_validate_parse: 3 callbacks suppressed [ 496.781677][T17935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2821'. [ 496.799812][T17813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.807387][T17813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.835680][T17813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.848686][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 496.884044][T17813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.902292][T17813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.928779][T17813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.032220][T17946] netlink: 'syz.2.2822': attribute type 4 has an invalid length. [ 497.055454][T17943] bridge_slave_1: left allmulticast mode [ 497.063334][T17943] bridge_slave_1: left promiscuous mode [ 497.069946][T17943] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.082080][T17943] (: left allmulticast mode [ 497.087105][T17943] bridge0: port 1(() entered disabled state [ 497.087868][T17940] netlink: 'syz.2.2822': attribute type 4 has an invalid length. [ 497.212156][T17813] hsr_slave_0: entered promiscuous mode [ 497.228261][T17813] hsr_slave_1: entered promiscuous mode [ 497.246248][T17813] debugfs: 'hsr0' already exists in 'hsr' [ 497.255529][T17813] Cannot create hsr debugfs directory [ 497.266897][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2825'. [ 497.331676][T17952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2825'. [ 497.389665][T17953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.419825][T17950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2825'. [ 497.430313][T17957] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 497.441471][T17957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2827'. [ 497.478636][T17952] bridge0: entered allmulticast mode [ 498.035499][T17975] tipc: Resetting bearer [ 498.182255][ T4939] Bluetooth: hci5: command tx timeout [ 498.592913][T17975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.622367][T17975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.798573][T17975] veth1_vlan: left allmulticast mode [ 499.130706][T15286] syz1: Port: 1 Link DOWN [ 499.150984][ T6008] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.197280][ T6008] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.236012][ T6008] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.273774][ T6008] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.283544][T17997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2837'. [ 499.316782][ T6008] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.326442][ T6008] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.338233][ T6008] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.363027][ T6008] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.384082][T18002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2838'. [ 499.404582][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 499.418472][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 499.429154][T18000] netlink: 'syz.2.2835': attribute type 11 has an invalid length. [ 499.469005][T18000] netlink: 'syz.2.2835': attribute type 11 has an invalid length. [ 499.544045][T17813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 499.565011][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.582620][T17813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 499.613040][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.623074][T17813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 499.638040][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.652553][T17813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 499.673750][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.727179][T18021] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 499.797029][T17813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.838660][T17813] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.860658][ C0] net_ratelimit: 3 callbacks suppressed [ 499.860679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.874559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.885343][T10730] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.892577][T10730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.914446][T10730] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.921790][T10730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.261137][ T4939] Bluetooth: hci5: command tx timeout [ 500.261918][T18036] Unsupported ieee802154 address type: 0 [ 500.286022][T18038] xt_TCPMSS: Only works on TCP SYN packets [ 500.467265][T17813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.563577][T17813] veth0_vlan: entered promiscuous mode [ 500.595038][T18048] netlink: 'syz.4.2848': attribute type 1 has an invalid length. [ 500.678645][T18048] 8021q: adding VLAN 0 to HW filter on device bond10 [ 500.743624][T18051] veth9: entered allmulticast mode [ 500.757891][T18051] bond10: (slave veth9): Enslaving as an active interface with an up link [ 500.769211][T17813] veth1_vlan: entered promiscuous mode [ 500.817253][T18048] bond10 (unregistering): (slave veth9): Releasing backup interface [ 500.832558][T18048] bond10 (unregistering): Released all slaves [ 500.884868][T18063] bond13: option mode: invalid value (254) [ 500.893917][T18063] bond13 (unregistering): Released all slaves [ 500.900809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.017684][T17813] veth0_macvtap: entered promiscuous mode [ 501.030123][T17813] veth1_macvtap: entered promiscuous mode [ 501.115225][T17813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.189289][T17813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.248248][ T6008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.275949][ T6008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.334521][T18071] bond0: entered promiscuous mode [ 501.352119][T18071] bond_slave_0: entered promiscuous mode [ 501.365598][T18071] bond_slave_1: entered promiscuous mode [ 501.382647][T18076] netlink: 'syz.2.2854': attribute type 1 has an invalid length. [ 501.405016][T18071] gretap0: entered promiscuous mode [ 501.413798][T18071] gretap0: left promiscuous mode [ 501.427569][T18071] bond0: left promiscuous mode [ 501.436705][T18071] bond_slave_0: left promiscuous mode [ 501.465245][T18071] bond_slave_1: left promiscuous mode [ 501.503329][ T6008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.552684][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.598997][T18073] bond0: entered promiscuous mode [ 501.610813][T18073] bond_slave_0: entered promiscuous mode [ 501.617399][T18073] bond_slave_1: entered promiscuous mode [ 501.632589][T18082] netlink: 'syz.2.2854': attribute type 10 has an invalid length. [ 501.652116][T18073] gretap0: entered promiscuous mode [ 501.657727][T18073] gretap0: left promiscuous mode [ 501.663689][T18073] bond0: left promiscuous mode [ 501.668594][T18073] bond_slave_0: left promiscuous mode [ 501.674978][T18073] bond_slave_1: left promiscuous mode [ 501.744184][T18076] 8021q: adding VLAN 0 to HW filter on device bond8 [ 501.780867][T18081] bond8: (slave veth5): Enslaving as an active interface with a down link [ 501.789864][ T6008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.826111][T18091] __nla_validate_parse: 8 callbacks suppressed [ 501.826133][T18091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2857'. [ 501.940678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.948941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.014269][T18094] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 502.045514][T18094] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2858'. [ 502.129136][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.157920][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.299677][ T344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.324541][ T344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.340843][ T4939] Bluetooth: hci5: command tx timeout [ 502.980796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.989025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.098403][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 503.113768][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 503.122822][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 503.138690][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 503.151601][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 503.538426][T18152] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2872'. [ 503.556592][T18149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2871'. [ 503.592517][T18152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2872'. [ 503.641432][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 503.651586][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 503.655710][T18159] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2872'. [ 503.730848][T18152] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2872'. [ 503.802381][T18153] syzkaller0: entered promiscuous mode [ 503.808103][T18153] syzkaller0: entered allmulticast mode [ 504.021491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.060735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.068996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.227597][ T4939] Bluetooth: hci1: command tx timeout [ 506.100688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.404503][T18169] netlink: 279 bytes leftover after parsing attributes in process `syz.2.2874'. [ 506.413976][T18169] veth0_to_bond: default FDB implementation only supports local addresses [ 507.140622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.148854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.304807][ T4939] Bluetooth: hci1: command tx timeout [ 508.180690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.188840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.674290][T18221] =v: renamed from veth0_to_bond [ 508.887717][T18249] netlink: 'syz.3.2889': attribute type 10 has an invalid length. [ 508.900166][T18248] x_tables: duplicate entry at hook 3 [ 508.904984][T18136] lo speed is unknown, defaulting to 1000 [ 509.182886][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2895'. [ 509.194025][T18258] syz_tun: left promiscuous mode [ 509.212034][T18258] gretap2: left promiscuous mode [ 509.220732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.234570][T18258] geneve2: left promiscuous mode [ 509.247105][T18258] geneve2: left allmulticast mode [ 509.266619][T18258] bond5: left promiscuous mode [ 509.282149][T18258] bond5: left allmulticast mode [ 509.294445][T18258] bond6: left promiscuous mode [ 509.307024][T18258] bridge5: left promiscuous mode [ 509.320695][T18258] bridge5: left allmulticast mode [ 509.337301][T18258] bond11: left promiscuous mode [ 509.355519][T18258] erspan2: left promiscuous mode [ 509.378846][T18258] bond11: left allmulticast mode [ 509.387129][ T4939] Bluetooth: hci1: command tx timeout [ 509.410813][T18258] erspan2: left allmulticast mode [ 509.428317][T18258] bond12: left promiscuous mode [ 510.260611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.268819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.276987][T18293] xfrm1: entered allmulticast mode [ 510.381999][T18136] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.389301][T18136] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.400747][T18136] bridge_slave_0: entered allmulticast mode [ 510.437580][T18136] bridge_slave_0: entered promiscuous mode [ 510.453535][T18136] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.461055][T18136] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.469938][T18136] bridge_slave_1: entered allmulticast mode [ 510.479173][T18136] bridge_slave_1: entered promiscuous mode [ 510.592703][T18136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.615093][T18136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.625765][T18313] syzkaller0: entered promiscuous mode [ 510.633223][T18313] syzkaller0: entered allmulticast mode [ 510.749966][T18136] team0: Port device team_slave_0 added [ 510.775968][T18136] team0: Port device team_slave_1 added [ 510.914470][T18136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.930797][T18136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.959491][T18136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.978442][T18136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.997120][T18136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.032152][T18136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.176915][T18136] hsr_slave_0: entered promiscuous mode [ 511.201503][T18136] hsr_slave_1: entered promiscuous mode [ 511.226893][T18136] debugfs: 'hsr0' already exists in 'hsr' [ 511.247293][T18136] Cannot create hsr debugfs directory [ 511.300687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.315923][T18331] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2913'. [ 511.354323][T18333] FAULT_INJECTION: forcing a failure. [ 511.354323][T18333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.398156][T18333] CPU: 1 UID: 0 PID: 18333 Comm: syz.3.2912 Not tainted syzkaller #0 PREEMPT(full) [ 511.398186][T18333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.398198][T18333] Call Trace: [ 511.398207][T18333] [ 511.398220][T18333] dump_stack_lvl+0xe8/0x150 [ 511.398259][T18333] should_fail_ex+0x40c/0x560 [ 511.398290][T18333] _copy_from_user+0x2d/0xb0 [ 511.398311][T18333] kstrtouint_from_user+0xd6/0x180 [ 511.398342][T18333] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 511.398386][T18333] proc_fail_nth_write+0x8e/0x210 [ 511.398416][T18333] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 511.398453][T18333] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 511.398480][T18333] vfs_write+0x296/0xba0 [ 511.398510][T18333] ? __pfx_vfs_write+0x10/0x10 [ 511.398545][T18333] ? __fget_files+0x2a/0x420 [ 511.398578][T18333] ? __fget_files+0x3a2/0x420 [ 511.398605][T18333] ? __fget_files+0x2a/0x420 [ 511.398642][T18333] ksys_write+0x150/0x270 [ 511.398677][T18333] ? __pfx_ksys_write+0x10/0x10 [ 511.398735][T18333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.398767][T18333] do_syscall_64+0x174/0x580 [ 511.398791][T18333] ? trace_irq_disable+0x3b/0x140 [ 511.398818][T18333] ? clear_bhb_loop+0x40/0x90 [ 511.398852][T18333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.398873][T18333] RIP: 0033:0x7ff17815e84e [ 511.398893][T18333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 511.398919][T18333] RSP: 002b:00007ff17901cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 511.398941][T18333] RAX: ffffffffffffffda RBX: 00007ff17901d6c0 RCX: 00007ff17815e84e [ 511.398957][T18333] RDX: 0000000000000001 RSI: 00007ff17901d0a0 RDI: 0000000000000004 [ 511.398969][T18333] RBP: 00007ff17901d090 R08: 0000000000000000 R09: 0000000000000000 [ 511.398982][T18333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.398994][T18333] R13: 00007ff178426038 R14: 00007ff178425fa0 R15: 00007ffe6dfd7218 [ 511.399028][T18333] [ 511.605474][ T4939] Bluetooth: hci1: command tx timeout [ 511.790915][T18346] netlink: 'syz.3.2917': attribute type 1 has an invalid length. [ 511.960921][T18136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.972452][T18136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.059897][T18354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2918'. [ 512.069911][T18354] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2918'. [ 512.079588][T18354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2918'. [ 512.089063][T18354] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2918'. [ 512.146932][T18136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.161559][T18136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.217926][T18356] bond9: option ad_user_port_key: invalid value (65535) [ 512.225059][T18356] bond9: option ad_user_port_key: allowed values 0 - 1023 [ 512.234081][T18356] bond9 (unregistering): Released all slaves [ 512.268244][T18350] netlink: 'syz.0.2918': attribute type 23 has an invalid length. [ 512.340673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.348910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.378533][T18136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.395003][T18136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.579287][T18136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.591837][T18136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.609125][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2923'. [ 512.670182][T18370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2923'. [ 513.074631][T18381] netlink: 'syz.3.2926': attribute type 1 has an invalid length. [ 513.144384][T18136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 513.162736][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2926'. [ 513.195427][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.225551][T18389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.226770][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 513.288427][T18136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 513.333894][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.380654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.388875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.432019][T18397] team1: entered promiscuous mode [ 513.438076][T18397] team1: entered allmulticast mode [ 513.443890][T18397] 8021q: adding VLAN 0 to HW filter on device team1 [ 513.451943][T18136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 513.475295][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.489807][T18136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.512571][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.520659][T18393] tipc: Enabled bearer , priority 0 [ 513.537818][T18405] syzkaller0: entered promiscuous mode [ 513.553453][T18405] syzkaller0: entered allmulticast mode [ 513.565315][T18391] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 513.652495][T18414] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 513.663751][T18414] batman_adv: batadv0: Adding interface: gretap1 [ 513.670151][T18414] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.696338][T18414] batman_adv: batadv0: Interface activated: gretap1 [ 513.728262][T18393] tipc: Resetting bearer [ 513.828718][T18390] tipc: Resetting bearer [ 513.873491][T18390] tipc: Disabling bearer [ 514.420751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.460646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.468889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.500662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.169622][T18136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.329173][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.349400][T18444] x_tables: duplicate underflow at hook 1 [ 517.386754][T10718] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.394021][T10718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.463199][T10718] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.472180][T10718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.541825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.550045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.588791][T18455] syzkaller0: entered promiscuous mode [ 517.601615][T18455] syzkaller0: entered allmulticast mode [ 517.633532][T18445] lo speed is unknown, defaulting to 1000 [ 517.667645][T18456] __nla_validate_parse: 1 callbacks suppressed [ 517.667665][T18456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2944'. [ 518.439598][T18483] lo speed is unknown, defaulting to 1000 [ 518.580623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.588875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.687831][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2951'. [ 518.742057][T18496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2951'. [ 518.829592][T18496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2951'. [ 518.879068][T18493] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.887065][T18493] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.911755][T18493] bridge0: entered allmulticast mode [ 519.017341][T18493] bridge_slave_1: left allmulticast mode [ 519.024820][T18493] bridge_slave_1: left promiscuous mode [ 519.031230][T18493] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.047786][T18493] bridge_slave_0: left allmulticast mode [ 519.060151][T18493] bridge_slave_0: left promiscuous mode [ 519.068305][T18493] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.113433][T18136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.620751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.748428][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2954'. [ 519.792519][T18518] netlink: 'syz.3.2955': attribute type 5 has an invalid length. [ 519.905493][T18518] Cannot find set identified by id 0 to match [ 519.934852][T18521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2954'. [ 520.119300][T18136] veth0_vlan: entered promiscuous mode [ 520.166165][T18136] veth1_vlan: entered promiscuous mode [ 520.270812][T18136] veth0_macvtap: entered promiscuous mode [ 520.299296][T18136] veth1_macvtap: entered promiscuous mode [ 520.403764][T18136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.462463][T18136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.660633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.668880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.680123][T18446] udevd[18446]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 520.690220][ T3359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.691558][ T3359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.811250][ T3359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.860001][ T3359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.218190][T10735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.238633][T10735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.335578][T10718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.363170][T10718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.443556][T18553] bridge0: port 1(veth0) entered blocking state [ 521.494906][T18553] bridge0: port 1(veth0) entered disabled state [ 521.517867][T18553] veth0: entered allmulticast mode [ 521.544964][T18553] veth0: entered promiscuous mode [ 521.700699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.769796][T18573] netlink: 'syz.1.2965': attribute type 1 has an invalid length. [ 522.110730][T18580] openvswitch: netlink: Missing valid actions attribute. [ 522.146420][T18580] openvswitch: netlink: Actions may not be safe on all matching packets [ 522.197714][ T6008] bond11: left allmulticast mode [ 522.211996][ T6008] bond11: left promiscuous mode [ 522.234883][ T6008] bridge0: port 3(bond11) entered disabled state [ 522.339909][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 522.410999][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 522.437857][ T6008] pim6reg: left allmulticast mode [ 522.578467][T18606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'. [ 522.676482][T18606] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2970'. [ 522.740647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.748862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.825879][ T6008] bond10 (unregistering): (slave ip6gre2): Releasing backup interface [ 523.368878][ T6008] bond0 (unregistering): Released all slaves [ 523.384210][ T6008] bond1 (unregistering): (slave veth3): Releasing backup interface [ 523.398721][ T6008] bond1 (unregistering): Released all slaves [ 523.415170][ T6008] bond2 (unregistering): Released all slaves [ 523.434858][ T6008] bond3 (unregistering): Released all slaves [ 523.449543][ T6008] bond4 (unregistering): Released all slaves [ 523.465496][ T6008] bond5 (unregistering): Released all slaves [ 523.480652][ T6008] bond6 (unregistering): Released all slaves [ 523.498626][ T6008] bond7 (unregistering): Released all slaves [ 523.530661][ T6008] bond8 (unregistering): Released all slaves [ 523.547878][ T6008] bond9 (unregistering): (slave batadv1): Releasing active interface [ 523.556865][ T6008] bond9 (unregistering): Released all slaves [ 523.571885][ T6008] bond10 (unregistering): Released all slaves [ 523.586682][ T6008] bond11 (unregistering): Released all slaves [ 523.601768][ T6008] bond12 (unregistering): Released all slaves [ 523.630017][ T6008] bond13 (unregistering): Released all slaves [ 523.646042][ T6008] bond14 (unregistering): Released all slaves [ 523.780622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.788827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.069988][T18648] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2982'. [ 524.145682][T18648] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2982'. [ 524.204870][T18648] 0·: renamed from hsr0 [ 524.219139][T18652] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2984'. [ 524.277586][T18648] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 524.325320][T18649] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2981'. [ 524.327600][T18648] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.432006][T18648] 0·: entered allmulticast mode [ 524.443655][T18648] hsr_slave_0: entered allmulticast mode [ 524.483153][T18648] hsr_slave_1: entered allmulticast mode [ 524.505000][T18648] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 524.541432][ T6008] : left promiscuous mode [ 524.621655][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.638347][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.647670][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.667686][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 524.676631][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 524.773468][T18663] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 524.859888][T18666] xfrm1: entered allmulticast mode [ 525.030666][ T6008] tipc: Disabling bearer [ 525.059126][ T6008] tipc: Left network mode [ 525.067072][T15291] bridge0: entered promiscuous mode [ 525.232085][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2988'. [ 525.494278][T18704] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2992'. [ 525.610328][T18706] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2993'. [ 525.695720][T18710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'. [ 525.854888][T18714] net_ratelimit: 1 callbacks suppressed [ 525.854908][T18714] openvswitch: netlink: Message has 13072 unknown bytes. [ 525.860681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.860745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.907899][T18717] tipc: Enabled bearer , priority 0 [ 525.919590][T18718] syzkaller0: entered promiscuous mode [ 525.926116][T18718] syzkaller0: entered allmulticast mode [ 525.937855][T18714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.205314][T18720] tipc: Resetting bearer [ 526.239602][T18734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 526.247683][T18734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 526.255681][T18734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 526.263642][T18734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 526.271611][T18734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 526.279528][T18734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 526.345872][T18720] tipc: Disabling bearer [ 526.441678][T18671] lo speed is unknown, defaulting to 1000 [ 526.453248][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3002'. [ 526.610032][T18745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.741968][ T4939] Bluetooth: hci2: command tx timeout [ 526.852582][T18755] : renamed from bond0 (while UP) [ 527.119663][T18767] macvlan2: entered allmulticast mode [ 527.131168][T18767] bridge_slave_1: entered promiscuous mode [ 527.147758][T18767] bridge_slave_1: entered allmulticast mode [ 527.195428][T18767] team0: Port device macvlan2 added [ 527.418490][T18774] syzkaller0: entered promiscuous mode [ 527.432758][T18774] syzkaller0: entered allmulticast mode [ 527.476934][T18771] tipc: Enabled bearer , priority 0 [ 527.524351][T18771] tipc: Resetting bearer [ 527.605113][T18770] tipc: Resetting bearer [ 527.707134][T18770] tipc: Disabling bearer [ 527.801151][ T6008] hsr_slave_0: left promiscuous mode [ 528.452250][T18793] __nla_validate_parse: 2 callbacks suppressed [ 528.452272][T18793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3016'. [ 528.821134][ T4939] Bluetooth: hci2: command tx timeout [ 528.909083][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 528.923808][T18806] FAULT_INJECTION: forcing a failure. [ 528.923808][T18806] name failslab, interval 1, probability 0, space 0, times 0 [ 529.013873][T18806] CPU: 0 UID: 0 PID: 18806 Comm: syz.3.3018 Not tainted syzkaller #0 PREEMPT(full) [ 529.013903][T18806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.013914][T18806] Call Trace: [ 529.013923][T18806] [ 529.013930][T18806] dump_stack_lvl+0xe8/0x150 [ 529.013968][T18806] should_fail_ex+0x40c/0x560 [ 529.013999][T18806] should_failslab+0xa8/0x100 [ 529.014033][T18806] __kmalloc_cache_noprof+0xa8/0x660 [ 529.014063][T18806] ? ovs_flow_cmd_new+0x356/0xe80 [ 529.014161][T18806] ? ovs_flow_cmd_new+0x356/0xe80 [ 529.014189][T18806] ovs_flow_cmd_new+0x356/0xe80 [ 529.014211][T18806] ? __kmalloc_noprof+0x1ad/0x720 [ 529.014239][T18806] ? kasan_save_track+0x3e/0x80 [ 529.014277][T18806] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 529.014351][T18806] ? __kmalloc_noprof+0x396/0x720 [ 529.014381][T18806] ? __nla_parse+0x40/0x60 [ 529.014412][T18806] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 529.014445][T18806] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 529.014483][T18806] genl_family_rcv_msg_doit+0x233/0x340 [ 529.014518][T18806] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 529.014562][T18806] ? bpf_lsm_capable+0x9/0x20 [ 529.014591][T18806] ? security_capable+0x7e/0x2c0 [ 529.014646][T18806] genl_rcv_msg+0x614/0x7a0 [ 529.014684][T18806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.014713][T18806] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 529.014738][T18806] ? __pfx_ref_tracker_free+0x10/0x10 [ 529.014782][T18806] netlink_rcv_skb+0x226/0x4a0 [ 529.014808][T18806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.014840][T18806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.014881][T18806] ? down_read+0x2be/0x330 [ 529.014915][T18806] genl_rcv+0x28/0x40 [ 529.014942][T18806] netlink_unicast+0x7bb/0x940 [ 529.014976][T18806] netlink_sendmsg+0x813/0xb40 [ 529.015013][T18806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.015042][T18806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.015071][T18806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.015096][T18806] sock_sendmsg_nosec+0x13a/0x180 [ 529.015128][T18806] ____sys_sendmsg+0x54e/0x850 [ 529.015159][T18806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.015192][T18806] ? import_iovec+0x73/0xa0 [ 529.015227][T18806] ___sys_sendmsg+0x2a5/0x360 [ 529.015248][T18806] ? __lock_acquire+0x683/0x2cf0 [ 529.015289][T18806] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.015347][T18806] ? __fget_files+0x2a/0x420 [ 529.015371][T18806] ? __fget_files+0x3a2/0x420 [ 529.015409][T18806] __x64_sys_sendmsg+0x1b1/0x290 [ 529.015435][T18806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.015476][T18806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.015500][T18806] do_syscall_64+0x174/0x580 [ 529.015523][T18806] ? trace_irq_disable+0x3b/0x140 [ 529.015549][T18806] ? clear_bhb_loop+0x40/0x90 [ 529.015573][T18806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.015594][T18806] RIP: 0033:0x7ff17819e019 [ 529.015615][T18806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.015633][T18806] RSP: 002b:00007ff17901d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.015655][T18806] RAX: ffffffffffffffda RBX: 00007ff178425fa0 RCX: 00007ff17819e019 [ 529.015669][T18806] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 529.015681][T18806] RBP: 00007ff17901d090 R08: 0000000000000000 R09: 0000000000000000 [ 529.015692][T18806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.015702][T18806] R13: 00007ff178426038 R14: 00007ff178425fa0 R15: 00007ffe6dfd7218 [ 529.015734][T18806] [ 529.679045][T18826] x_tables: duplicate entry at hook 3 [ 529.716293][T18815] bond9: (slave bond_slave_1): Device is not our slave [ 529.723621][T18815] bond9: option active_slave: invalid value (bond_slave_1) [ 530.054813][T18815] bond9 (unregistering): Released all slaves [ 530.371228][T18846] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 530.389227][ T6008] IPVS: stop unused estimator thread 0... [ 530.478761][T18671] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.500727][T18671] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.512791][T18671] bridge_slave_0: entered allmulticast mode [ 530.537363][T18671] bridge_slave_0: entered promiscuous mode [ 530.598508][T18671] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.626522][T18671] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.643292][T18671] bridge_slave_1: entered allmulticast mode [ 530.676605][T18671] bridge_slave_1: entered promiscuous mode [ 530.952359][ T4939] Bluetooth: hci2: command tx timeout [ 531.069624][ C0] net_ratelimit: 55 callbacks suppressed [ 531.069646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.083649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.356594][T18868] netlink: 'syz.3.3032': attribute type 4 has an invalid length. [ 531.392458][T18870] netlink: 'syz.3.3032': attribute type 4 has an invalid length. [ 531.415929][T18671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.488571][T18874] FAULT_INJECTION: forcing a failure. [ 531.488571][T18874] name failslab, interval 1, probability 0, space 0, times 0 [ 531.521408][T18874] CPU: 1 UID: 0 PID: 18874 Comm: syz.0.3033 Not tainted syzkaller #0 PREEMPT(full) [ 531.521449][T18874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 531.521461][T18874] Call Trace: [ 531.521469][T18874] [ 531.521479][T18874] dump_stack_lvl+0xe8/0x150 [ 531.521517][T18874] should_fail_ex+0x40c/0x560 [ 531.521549][T18874] should_failslab+0xa8/0x100 [ 531.521583][T18874] __kmalloc_cache_noprof+0xa8/0x660 [ 531.521612][T18874] ? ovs_nla_get_identifier+0x72/0xd0 [ 531.521638][T18874] ? ovs_nla_get_identifier+0x72/0xd0 [ 531.521670][T18874] ovs_nla_get_identifier+0x72/0xd0 [ 531.521699][T18874] ovs_flow_cmd_new+0x500/0xe80 [ 531.521720][T18874] ? __kmalloc_noprof+0x1ad/0x720 [ 531.521754][T18874] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 531.521830][T18874] ? __kmalloc_noprof+0x396/0x720 [ 531.521859][T18874] ? __nla_parse+0x40/0x60 [ 531.521891][T18874] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 531.521922][T18874] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 531.521960][T18874] genl_family_rcv_msg_doit+0x233/0x340 [ 531.521997][T18874] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 531.522042][T18874] ? bpf_lsm_capable+0x9/0x20 [ 531.522067][T18874] ? security_capable+0x7e/0x2c0 [ 531.522095][T18874] genl_rcv_msg+0x614/0x7a0 [ 531.522136][T18874] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.522163][T18874] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 531.522201][T18874] netlink_rcv_skb+0x226/0x4a0 [ 531.522227][T18874] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.522258][T18874] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.522297][T18874] ? down_read+0x2be/0x330 [ 531.522327][T18874] genl_rcv+0x28/0x40 [ 531.522354][T18874] netlink_unicast+0x7bb/0x940 [ 531.522388][T18874] netlink_sendmsg+0x813/0xb40 [ 531.522411][T18874] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 531.522457][T18874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.522486][T18874] ? aa_sock_msg_perm+0xf1/0x1b0 [ 531.522514][T18874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.522538][T18874] sock_sendmsg_nosec+0x13a/0x180 [ 531.522572][T18874] ____sys_sendmsg+0x54e/0x850 [ 531.522602][T18874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.522636][T18874] ? import_iovec+0x73/0xa0 [ 531.522670][T18874] ___sys_sendmsg+0x2a5/0x360 [ 531.522693][T18874] ? __lock_acquire+0x683/0x2cf0 [ 531.522726][T18874] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.522790][T18874] ? __fget_files+0x2a/0x420 [ 531.522817][T18874] ? __fget_files+0x3a2/0x420 [ 531.522855][T18874] __x64_sys_sendmsg+0x1b1/0x290 [ 531.522882][T18874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.522927][T18874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.522950][T18874] do_syscall_64+0x174/0x580 [ 531.522973][T18874] ? trace_irq_disable+0x3b/0x140 [ 531.523000][T18874] ? clear_bhb_loop+0x40/0x90 [ 531.523026][T18874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.523046][T18874] RIP: 0033:0x7f5cfaf9e019 [ 531.523066][T18874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.523083][T18874] RSP: 002b:00007f5cfbe02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.523106][T18874] RAX: ffffffffffffffda RBX: 00007f5cfb225fa0 RCX: 00007f5cfaf9e019 [ 531.523121][T18874] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 531.523134][T18874] RBP: 00007f5cfbe02090 R08: 0000000000000000 R09: 0000000000000000 [ 531.523146][T18874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 531.523157][T18874] R13: 00007f5cfb226038 R14: 00007f5cfb225fa0 R15: 00007ffe923aba18 [ 531.523191][T18874] [ 531.887367][T18671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.933424][T18671] team0: Port device team_slave_0 added [ 531.943317][T18671] team0: Port device team_slave_1 added [ 531.998798][T18867] netlink: 'syz.4.3031': attribute type 43 has an invalid length. [ 532.040387][T18867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3031'. [ 532.096512][T18671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.103864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.151305][T18671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.194080][T18878] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3034'. [ 532.230378][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 532.283120][T18671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.344498][T18671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.351599][T18671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.377752][T18671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.669892][T18671] hsr_slave_0: entered promiscuous mode [ 532.677111][T18671] hsr_slave_1: entered promiscuous mode [ 532.975405][T18892] lo speed is unknown, defaulting to 1000 [ 532.981396][ T4939] Bluetooth: hci2: command tx timeout [ 533.140657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.148876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.416416][T18909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3042'. [ 533.449622][T18671] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.480648][T18671] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.484056][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 533.536423][T18914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3043'. [ 533.673493][T18910] bond13: option primary_reselect: invalid value (6) [ 533.685065][T18910] bond13 (unregistering): Released all slaves [ 533.725177][T18913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3042'. [ 533.816502][T18671] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.850880][T18671] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.953354][T18671] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.967328][T18671] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.049485][T18671] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.060135][T18671] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.180616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.188843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.900979][T18671] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 534.917194][T18671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.929781][T18671] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 534.943416][T18671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.953393][T18671] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 534.971871][T18671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.991461][T18671] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 535.006343][T18671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.220657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.223398][T18961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.404879][T18671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.536393][T18671] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.575277][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.582545][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.637444][T10708] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.644620][T10708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.939151][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3061'. [ 536.260653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.268917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.423437][T19017] xt_hashlimit: size too large, truncated to 1048576 [ 536.805236][T19031] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3067'. [ 537.026002][T18671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.188183][T18671] veth0_vlan: entered promiscuous mode [ 537.225221][T18671] veth1_vlan: entered promiscuous mode [ 537.300585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.329230][T18671] veth0_macvtap: entered promiscuous mode [ 537.359865][T18671] veth1_macvtap: entered promiscuous mode [ 537.476533][T18671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.516713][T18671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.648402][ T6008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.667255][ T6008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.680987][ T6008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.689967][ T6008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.831428][T19081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3081'. [ 537.906910][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.939504][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.003895][T10708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.013237][T10708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.052391][T19090] syzkaller0: entered promiscuous mode [ 538.058122][T19090] syzkaller0: entered allmulticast mode [ 538.340693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.348904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.364946][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3087'. [ 538.763370][T19114] tc_dump_action: action bad kind [ 538.825741][T19120] netlink: 'syz.1.3093': attribute type 62 has an invalid length. [ 539.056791][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 539.071935][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 539.083563][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 539.100134][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 539.112324][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.380772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.389024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.567249][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3101'. [ 539.734931][T19155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.949730][ T5624] bond0: (slave syz_tun): Releasing backup interface [ 540.093140][T19177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3105'. [ 540.122874][T19180] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 540.420631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.455360][T19125] lo speed is unknown, defaulting to 1000 [ 540.557419][T19192] lo speed is unknown, defaulting to 1000 [ 540.649816][T19198] IPv6: sit1: Disabled Multicast RS [ 541.141323][ T5631] Bluetooth: hci4: command tx timeout [ 541.398996][T19216] netlink: 'syz.4.3112': attribute type 1 has an invalid length. [ 541.460632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.468866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.554700][T19217] syzkaller0: entered promiscuous mode [ 541.570556][T19217] syzkaller0: entered allmulticast mode [ 541.602486][T19216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3112'. [ 541.764726][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3115'. [ 542.500738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.225533][ T5631] Bluetooth: hci4: command tx timeout [ 543.543977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.552145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.177624][T19228] netlink: 'syz.4.3116': attribute type 1 has an invalid length. [ 544.291991][T19228] bond3: entered promiscuous mode [ 544.298118][T19228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.580633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.588851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.753789][T19229] bond3: (slave bridge2): making interface the new active one [ 544.772194][T19229] bridge2: entered promiscuous mode [ 544.799605][T19229] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 545.155435][T19260] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3121'. [ 545.301001][ T5631] Bluetooth: hci4: command tx timeout [ 545.339372][T19262] netlink: 'syz.1.3122': attribute type 9 has an invalid length. [ 545.440118][T19125] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.448811][T19125] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.456231][T19125] bridge_slave_0: entered allmulticast mode [ 545.464874][T19125] bridge_slave_0: entered promiscuous mode [ 545.493612][T19125] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.525706][T19125] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.550062][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3125'. [ 545.555315][T19125] bridge_slave_1: entered allmulticast mode [ 545.580185][T19273] IPVS: sed: FWM 3 0x00000003 - no destination available [ 545.581033][T19125] bridge_slave_1: entered promiscuous mode [ 545.589757][T10735] IPVS: starting estimator thread 0... [ 545.620648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.702027][T19276] IPVS: using max 26 ests per chain, 62400 per kthread [ 545.747703][T19125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.778568][T19125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.807622][T19280] netlink: 'syz.1.3128': attribute type 10 has an invalid length. [ 545.855172][T19280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.879219][T19280] team0: Port device netdevsim1 added [ 545.923723][T19125] team0: Port device team_slave_0 added [ 545.936114][T19125] team0: Port device team_slave_1 added [ 546.059239][T19125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.083354][T19125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.128690][T19125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.159778][T19291] macvlan2: entered allmulticast mode [ 546.182207][T19291] batadv0: entered promiscuous mode [ 546.188015][T19291] batadv0: entered allmulticast mode [ 546.201599][T19291] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 546.212972][T19291] team0: Port device macvlan2 added [ 546.235928][T19298] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3133'. [ 546.261785][T19125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.276040][T19125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.304094][T19125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.338043][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'. [ 546.360012][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'. [ 546.531260][T19125] hsr_slave_0: entered promiscuous mode [ 546.546903][T19125] hsr_slave_1: entered promiscuous mode [ 546.569631][T19125] debugfs: 'hsr0' already exists in 'hsr' [ 546.595647][T19125] Cannot create hsr debugfs directory [ 546.603198][T19322] openvswitch: netlink: Message has 4 unknown bytes. [ 546.633011][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3138'. [ 546.656306][T19322] block nbd4: Unsupported socket: should be TCP or UNIX. [ 546.660663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.671602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.381641][ T5631] Bluetooth: hci4: command tx timeout [ 547.428452][T19352] netlink: 'syz.3.3147': attribute type 12 has an invalid length. [ 547.452661][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'. [ 547.700689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.160963][T19125] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 548.368899][T19385] macsec1: entered allmulticast mode [ 548.375327][T19385] dummy0: entered allmulticast mode [ 548.382146][T19385] dummy0: entered promiscuous mode [ 548.391548][T19385] dummy0: left allmulticast mode [ 548.422960][ T6321] dummy0: left promiscuous mode [ 548.740609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.748822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.877544][T19404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.905503][T19404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.043911][T19125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 549.054899][T19413] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3162'. [ 549.078334][T19412] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3162'. [ 549.111930][T19125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.147154][T19125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 549.175652][T19125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.193164][T19125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 549.214111][T19125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 549.235081][T19125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 549.267821][T19125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 549.480081][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3166'. [ 549.499935][T19125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.559236][T19125] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.647836][T10735] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.655097][T10735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.695576][T10708] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.702801][T10708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.780669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.788904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.543486][T19494] __nla_validate_parse: 2 callbacks suppressed [ 550.543507][T19494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3178'. [ 550.821328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.921761][T19125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.044764][T19125] veth0_vlan: entered promiscuous mode [ 551.078426][T19125] veth1_vlan: entered promiscuous mode [ 551.088570][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3180'. [ 551.119268][T19513] netlink: 'syz.2.3180': attribute type 10 has an invalid length. [ 551.144352][T19511] netlink: 'syz.2.3180': attribute type 10 has an invalid length. [ 551.162766][T19125] veth0_macvtap: entered promiscuous mode [ 551.188675][T19125] veth1_macvtap: entered promiscuous mode [ 551.273175][T19125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.295743][T19125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.306244][T19524] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 551.338546][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.359741][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.373708][T10733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.385983][T10733] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.497090][T19528] 8021q: adding VLAN 0 to HW filter on device bond9 [ 551.860831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.869040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.900790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.285040][T19476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.478298][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.518990][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.679634][ T3359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.716304][ T3359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.826867][T19554] bond7: entered allmulticast mode [ 553.940647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.948881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.095734][T19571] geneve1: entered promiscuous mode [ 554.248877][T19576] lo speed is unknown, defaulting to 1000 [ 554.606324][T19597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3200'. [ 554.641857][T19597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3200'. [ 554.980576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.988785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.822624][T19637] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3208'. [ 555.988141][ T5284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.020631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.098689][T19615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3202'. [ 556.541727][T19654] netlink: 'syz.3.3211': attribute type 1 has an invalid length. [ 556.568268][T19654] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3211'. [ 556.865964][T19673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3216'. [ 557.023756][T19680] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3215'. [ 557.060670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.068901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.070122][T19680] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3215'. [ 557.364439][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3217'. [ 557.556197][T19679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.565254][T19679] bond3: left promiscuous mode [ 557.570075][T19679] bridge2: left promiscuous mode [ 557.581302][T19679] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 557.597031][T19679] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 557.636408][T19691] netlink: 'syz.3.3217': attribute type 12 has an invalid length. [ 557.850045][T19711] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3220'. [ 557.895580][T19714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3220'. [ 557.906765][T19715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3220'. [ 558.100792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.495336][T19739] tipc: Enabling of bearer rejected, failed to enable media [ 558.617855][T19744] netlink: 'syz.2.3229': attribute type 1 has an invalid length. [ 558.814520][T19744] 8021q: adding VLAN 0 to HW filter on device bond10 [ 558.895532][T19749] vlan6: entered promiscuous mode [ 558.931805][T19749] bond10: entered promiscuous mode [ 558.943578][T19749] vlan6: entered allmulticast mode [ 558.974721][T19749] bond10: entered allmulticast mode [ 559.079874][T19753] bond10: (slave bridge6): making interface the new active one [ 559.098493][T19753] bridge6: entered promiscuous mode [ 559.105317][T19753] bridge6: entered allmulticast mode [ 559.112576][T19753] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 559.141364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.149600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.210207][T19767] syzkaller0: entered promiscuous mode [ 559.240745][T19767] syzkaller0: entered allmulticast mode [ 559.276417][T19771] netlink: 'syz.3.3234': attribute type 1 has an invalid length. [ 559.297586][T19773] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 559.298460][T19771] netlink: 'syz.3.3234': attribute type 2 has an invalid length. [ 559.406629][T19776] netlink: 'syz.0.3237': attribute type 29 has an invalid length. [ 560.060379][T19814] netlink: 'syz.3.3245': attribute type 7 has an invalid length. [ 560.187041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.195309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.942044][T19827] __nla_validate_parse: 6 callbacks suppressed [ 560.942067][T19827] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3251'. [ 561.009905][T19834] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3249'. [ 561.038748][T19834] gretap0: entered promiscuous mode [ 561.106276][T19834] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3249'. [ 561.152090][T19834] 0ªî{X¹¦: renamed from gretap0 [ 561.205774][T19834] 0ªî{X¹¦: left promiscuous mode [ 561.220678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.248522][T19834] 0ªî{X¹¦: entered allmulticast mode [ 561.262681][T19838] netlink: 'syz.1.3253': attribute type 3 has an invalid length. [ 561.273721][T19834] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 561.298154][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 561.399643][ T4939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 561.420666][ T4939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 561.431178][ T4939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 561.442249][ T4939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 561.451175][ T4939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 561.913380][T19861] netlink: 'syz.3.3259': attribute type 1 has an invalid length. [ 561.917733][ T3359] smc: removing ib device syz1 [ 561.932144][T19861] netlink: 'syz.3.3259': attribute type 2 has an invalid length. [ 562.171616][ T3359] smbdirect: ib_dev[syz1] removed [ 562.260675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.268927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.762960][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 562.802533][T19888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3263'. [ 562.850344][T19888] netlink: 'syz.4.3263': attribute type 18 has an invalid length. [ 562.969855][T19843] lo speed is unknown, defaulting to 1000 [ 562.988263][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.017307][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3264'. [ 563.300648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.517163][T19905] openvswitch: netlink: Flow actions attr not present in new flow. [ 563.540944][ T4939] Bluetooth: hci0: command tx timeout [ 564.159970][T19937] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3276'. [ 564.196085][T19937] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3276'. [ 564.255741][T19937] netlink: 'syz.0.3276': attribute type 5 has an invalid length. [ 564.323747][T19937] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3276'. [ 564.340588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.348781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.476714][T19954] netlink: 'syz.4.3280': attribute type 25 has an invalid length. [ 565.380650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.388874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.564933][T19843] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.580004][T19843] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.599800][T19843] bridge_slave_0: entered allmulticast mode [ 565.620584][ T4939] Bluetooth: hci0: command tx timeout [ 565.643911][T19843] bridge_slave_0: entered promiscuous mode [ 565.665947][T19843] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.688034][T19843] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.719401][T19843] bridge_slave_1: entered allmulticast mode [ 565.794355][T19843] bridge_slave_1: entered promiscuous mode [ 566.054412][T20007] tipc: Started in network mode [ 566.061863][T20007] tipc: Node identity ce7ed80011d, cluster identity 4711 [ 566.102273][T20007] tipc: Enabled bearer , priority 0 [ 566.149912][T19843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.175673][T20008] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 566.217419][T20008] syzkaller0: entered promiscuous mode [ 566.243550][T20008] syzkaller0: entered allmulticast mode [ 566.288039][T20006] tipc: Resetting bearer [ 566.330633][T20013] __nla_validate_parse: 3 callbacks suppressed [ 566.330654][T20013] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3292'. [ 566.352291][T20004] tipc: Resetting bearer [ 566.373233][T20004] tipc: Disabling bearer [ 566.415767][T19843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.420632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.700991][T19843] team0: Port device team_slave_0 added [ 566.724602][T19843] team0: Port device team_slave_1 added [ 566.910898][T20029] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 566.950948][T19843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.979489][T19843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.045126][T19843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.107705][T20033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3295'. [ 567.163245][T19843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.195688][T19843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.284611][T19843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.462702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.470982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.576120][T20052] netlink: 'syz.0.3301': attribute type 1 has an invalid length. [ 567.701500][ T4939] Bluetooth: hci0: command tx timeout [ 567.767318][T19843] hsr_slave_0: entered promiscuous mode [ 567.809502][T19843] hsr_slave_1: entered promiscuous mode [ 567.843188][T19843] debugfs: 'hsr0' already exists in 'hsr' [ 567.889840][T19843] Cannot create hsr debugfs directory [ 567.933097][T20059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 568.068273][T18532] udevd[18532]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 568.079041][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 568.315428][T20072] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.323412][T20072] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.488303][T20072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.500620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.689891][T20079] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.802906][ T344] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.824489][ T344] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.917691][ T344] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.953197][ T344] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.991946][T20085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3310'. [ 569.005140][T20085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3310'. [ 569.015203][T20086] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3309'. [ 569.033280][T20086] openvswitch: netlink: Flow key attr not present in new flow. [ 569.103814][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3309'. [ 569.128029][T20088] netlink: 'syz.0.3311': attribute type 1 has an invalid length. [ 569.179487][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 569.343854][T20099] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 569.540779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.549010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.580757][T20098] lo speed is unknown, defaulting to 1000 [ 569.781161][ T4939] Bluetooth: hci0: command tx timeout [ 570.123907][T20109] netlink: 'syz.0.3317': attribute type 1 has an invalid length. [ 570.298694][T20098] dvmrp0: entered allmulticast mode [ 570.334667][T20121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.379007][T20119] bond4: option ad_user_port_key: invalid value (65535) [ 570.414265][T20119] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 570.451298][T20119] bond4 (unregistering): Released all slaves [ 570.587834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.596056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.678076][ T48] dvmrp0: left allmulticast mode [ 570.863126][T19843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 570.923179][T19843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.984105][T19843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 571.049805][T19843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.067826][T19843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 571.096181][T19843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.207694][T19843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 571.251451][T20154] netlink: 'syz.3.3324': attribute type 1 has an invalid length. [ 571.256819][T19843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.270992][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'. [ 571.335717][T20154] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 571.350275][T20152] bridge0: port 3(syz_tun) entered blocking state [ 571.394724][T20152] bridge0: port 3(syz_tun) entered disabled state [ 571.404173][T20152] syz_tun: entered allmulticast mode [ 571.425479][T20152] syz_tun: entered promiscuous mode [ 571.450113][T20168] ip6tnl1: entered allmulticast mode [ 571.457729][ T344] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 571.459710][T20168] netlink: 'syz.0.3325': attribute type 10 has an invalid length. [ 571.477572][ T344] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 571.487434][ T6314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 571.535907][T20168] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.543755][T20168] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.577692][T20168] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.586582][T20168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.594209][T20168] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.601449][T20168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.620700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.660325][T20168] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 571.673358][T20181] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 571.693378][T15291] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 571.760703][T15291] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 571.845966][T20189] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3330'. [ 571.890382][T19843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.955227][T19843] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.966744][T20194] netlink: 'syz.3.3332': attribute type 1 has an invalid length. [ 572.035301][T20193] bond1: Removing last ns target with arp_interval on [ 572.079346][T20194] bond1: (slave veth3): Enslaving as an active interface with a down link [ 572.119651][T20200] bond1: (slave veth5): Enslaving as an active interface with a down link [ 572.132107][T10735] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.139296][T10735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.171344][T20202] syzkaller0: entered promiscuous mode [ 572.184330][T20202] syzkaller0: entered allmulticast mode [ 572.205696][T10735] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.212870][T10735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.241022][T20198] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3333'. [ 572.242261][T20194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3332'. [ 572.267807][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 572.275825][T20194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.660654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.668845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.748486][T20220] gretap1: entered promiscuous mode [ 573.087358][T20233] netlink: 'syz.0.3341': attribute type 16 has an invalid length. [ 573.119951][T20233] netlink: 'syz.0.3341': attribute type 3 has an invalid length. [ 573.150351][T20233] netlink: 33978 bytes leftover after parsing attributes in process `syz.0.3341'. [ 573.207718][T20237] netlink: 'syz.1.3342': attribute type 1 has an invalid length. [ 573.308860][T20241] netlink: 'syz.4.3344': attribute type 49 has an invalid length. [ 573.419874][T20253] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.421854][T20237] bond2: entered promiscuous mode [ 573.438021][T20253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3346'. [ 573.463290][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'. [ 573.469684][T20237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.493695][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'. [ 573.552752][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3347'. [ 573.645391][T20259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3347'. [ 573.700639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.987161][T20272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 574.071472][T20275] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 574.120267][T20275] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 574.210216][T19843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.377411][T19843] veth0_vlan: entered promiscuous mode [ 574.446139][T19843] veth1_vlan: entered promiscuous mode [ 574.522219][T20287] netlink: 'syz.1.3355': attribute type 1 has an invalid length. [ 574.592059][T20287] 8021q: adding VLAN 0 to HW filter on device bond4 [ 574.601088][T19843] veth0_macvtap: entered promiscuous mode [ 574.681989][T20295] veth3: entered allmulticast mode [ 574.703329][T20295] bond4: (slave veth3): Enslaving as an active interface with an up link [ 574.725398][T19843] veth1_macvtap: entered promiscuous mode [ 574.740732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.748955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.763920][T20287] bond4 (unregistering): (slave veth3): Releasing backup interface [ 574.783126][T20287] bond4 (unregistering): Released all slaves [ 575.501080][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 583.500698][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 583.974221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.982395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.133449][T19843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.860967][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 629.563544][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 689.060393][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 689.068448][ C1] rcu: 0-...!: (1 GPs behind) idle=e3fc/1/0x4000000000000000 softirq=99395/99400 fqs=1 [ 689.081469][ C1] rcu: (detected by 1, t=10506 jiffies, g=111133, q=778 ncpus=2) [ 689.091442][ C1] Sending NMI from CPU 1 to CPUs 0: [ 689.091482][ C0] NMI backtrace for cpu 0 [ 689.091498][ C0] CPU: 0 UID: 0 PID: 6312 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 689.091526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.091537][ C0] Workqueue: events_power_efficient gc_worker [ 689.091640][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 689.091675][ C0] Code: 8b 3d d4 de 88 0c 48 89 de 5b e9 63 09 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 78 ce a5 11 65 8b 15 99 ce a5 11 81 e2 00 01 ff 00 74 [ 689.091689][ C0] RSP: 0018:ffffc90000007d88 EFLAGS: 00000086 [ 689.091704][ C0] RAX: ffffffff81b3dd5a RBX: 0000000000000001 RCX: 0000000000000000 [ 689.091716][ C0] RDX: 0000000000000000 RSI: ffff8880b8628300 RDI: ffff888029bd0300 [ 689.091728][ C0] RBP: dffffc0000000000 R08: ffffffff9aa1299b R09: 1ffffffff3542533 [ 689.091740][ C0] R10: dffffc0000000000 R11: fffffbfff3542534 R12: 0000000000000000 [ 689.091752][ C0] R13: dffffc0000000000 R14: ffff888029bd0300 R15: ffff8880b8628300 [ 689.091765][ C0] FS: 0000000000000000(0000) GS:ffff888124f53000(0000) knlGS:0000000000000000 [ 689.091779][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.091791][ C0] CR2: 000000110c2ab50b CR3: 0000000025b92000 CR4: 00000000003526f0 [ 689.091808][ C0] Call Trace: [ 689.091823][ C0] [ 689.091834][ C0] __remove_hrtimer+0x2a/0x3e0 [ 689.091861][ C0] __hrtimer_run_queues+0x295/0xa10 [ 689.091888][ C0] hrtimer_interrupt+0x448/0x910 [ 689.091918][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 689.091945][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 689.091968][ C0] [ 689.091974][ C0] [ 689.091980][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 689.091999][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 689.092022][ C0] Code: ff ff ff e8 61 5f 2e 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 1a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 78 0f b8 [ 689.092035][ C0] RSP: 0018:ffffc9000601f960 EFLAGS: 00000286 [ 689.092048][ C0] RAX: 78faf6ae84339400 RBX: 0000000000000000 RCX: 0000000000000046 [ 689.092059][ C0] RDX: 0000000034c1692a RSI: ffffffff8e4b4147 RDI: ffffffff8c4bdb80 [ 689.092070][ C0] RBP: ffffffff89f1b164 R08: ffffffff89f1b164 R09: 0000000000000000 [ 689.092081][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 689.092091][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 689.092103][ C0] ? gc_worker+0x274/0x1890 [ 689.092121][ C0] ? gc_worker+0x274/0x1890 [ 689.092144][ C0] gc_worker+0x298/0x1890 [ 689.092159][ C0] ? gc_worker+0x274/0x1890 [ 689.092176][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 689.092197][ C0] ? gc_worker+0x274/0x1890 [ 689.092215][ C0] ? __pfx_gc_worker+0x10/0x10 [ 689.092233][ C0] ? rcu_is_watching+0x15/0xb0 [ 689.092249][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 689.092269][ C0] process_scheduled_works+0xa8e/0x14e0 [ 689.092299][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 689.092320][ C0] ? assign_work+0x3cf/0x5d0 [ 689.092339][ C0] worker_thread+0xa47/0xfb0 [ 689.092364][ C0] ? __kthread_parkme+0x71/0x1f0 [ 689.092388][ C0] kthread+0x388/0x470 [ 689.092409][ C0] ? __pfx_worker_thread+0x10/0x10 [ 689.092426][ C0] ? __pfx_kthread+0x10/0x10 [ 689.092448][ C0] ret_from_fork+0x514/0xb70 [ 689.092490][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 689.092519][ C0] ? __switch_to+0xc89/0x1420 [ 689.092539][ C0] ? __pfx_kthread+0x10/0x10 [ 689.092560][ C0] ret_from_fork_asm+0x1a/0x30 [ 689.092584][ C0] [ 689.093476][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g111133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 689.537924][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 689.550542][ C1] rcu: RCU grace-period kthread stack dump: [ 689.559691][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 689.575462][ C1] Call Trace: [ 689.579785][ C1] [ 689.582772][ C1] __schedule+0x17d9/0x56c0 [ 689.588663][ C1] ? __lock_acquire+0x683/0x2cf0 [ 689.596685][ C1] ? __pfx___schedule+0x10/0x10 [ 689.602567][ C1] ? schedule+0x90/0x2b0 [ 689.607153][ C1] schedule+0x164/0x2b0 [ 689.612647][ C1] schedule_timeout+0x152/0x2c0 [ 689.618776][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 689.624731][ C1] ? __pfx_process_timeout+0x10/0x10 [ 689.631372][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 689.638116][ C1] ? prepare_to_swait_event+0x322/0x350 [ 689.646023][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 689.651204][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 689.657519][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 689.663229][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 689.669152][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 689.675867][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 689.681737][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 689.688392][ C1] ? __kthread_parkme+0x71/0x1f0 [ 689.693662][ C1] ? __kthread_parkme+0x196/0x1f0 [ 689.701458][ C1] kthread+0x388/0x470 [ 689.706459][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 689.713290][ C1] ? __pfx_kthread+0x10/0x10 [ 689.719462][ C1] ret_from_fork+0x514/0xb70 [ 689.724571][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 689.730295][ C1] ? __switch_to+0xc89/0x1420 [ 689.735693][ C1] ? __pfx_kthread+0x10/0x10 [ 689.741122][ C1] ret_from_fork_asm+0x1a/0x30 [ 689.747220][ C1] [ 689.750426][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 689.757494][ C1] CPU: 1 UID: 0 PID: 10735 Comm: kworker/u8:60 Not tainted syzkaller #0 PREEMPT(full) [ 689.769072][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.785263][ C1] Workqueue: events_unbound toggle_allocation_gate [ 689.796289][ C1] RIP: 0010:smp_call_function_many_cond+0x10b0/0x14b0 [ 689.805244][ C1] Code: c0 75 73 41 8b 1e 89 de 83 e6 01 31 ff e8 d8 22 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1e 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1e 0c [ 689.832208][ C1] RSP: 0018:ffffc9000604f720 EFLAGS: 00000293 [ 689.839756][ C1] RAX: ffffffff81bae317 RBX: dffffc0000000000 RCX: ffff88802920dd00 [ 689.850477][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 689.860062][ C1] RBP: ffffc9000604f860 R08: ffffffff90579037 R09: 1ffffffff20af206 [ 689.868950][ C1] R10: dffffc0000000000 R11: fffffbfff20af207 R12: 1ffff110170c85fd [ 689.880412][ C1] R13: ffff8880b873c448 R14: ffff8880b8642fe8 R15: 0000000000000000 [ 689.891153][ C1] FS: 0000000000000000(0000) GS:ffff888125053000(0000) knlGS:0000000000000000 [ 689.904223][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.911601][ C1] CR2: 00007f29c4bf14b8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 689.920158][ C1] Call Trace: [ 689.923568][ C1] [ 689.928636][ C1] ? smp_call_function_many_cond+0x8b1/0x14b0 [ 689.937121][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 689.943447][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 689.951058][ C1] ? kmem_cache_alloc_bulk_noprof+0xb7/0x7b0 [ 689.958334][ C1] ? __pfx___text_poke+0x10/0x10 [ 689.964479][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 689.970618][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 689.977127][ C1] smp_text_poke_batch_finish+0x5fd/0x1110 [ 689.983167][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 689.990341][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 689.995954][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 690.004678][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 690.011295][ C1] ? __jump_label_update+0x347/0x370 [ 690.017526][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 690.024356][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 690.030346][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 690.040941][ C1] static_key_enable+0x1a/0x20 [ 690.046228][ C1] toggle_allocation_gate+0xab/0x290 [ 690.052225][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 690.058626][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 690.065292][ C1] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 690.071716][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 690.078824][ C1] process_scheduled_works+0xa8e/0x14e0 [ 690.084602][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.091081][ C1] ? assign_work+0x3cf/0x5d0 [ 690.096450][ C1] worker_thread+0xa47/0xfb0 [ 690.101242][ C1] kthread+0x388/0x470 [ 690.106003][ C1] ? __pfx_worker_thread+0x10/0x10 [ 690.112968][ C1] ? __pfx_kthread+0x10/0x10 [ 690.119063][ C1] ret_from_fork+0x514/0xb70 [ 690.125645][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 690.130828][ C1] ? __switch_to+0xc89/0x1420 [ 690.136858][ C1] ? __pfx_kthread+0x10/0x10 [ 690.144031][ C1] ret_from_fork_asm+0x1a/0x30 [ 690.150903][ C1] [ 690.990950][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!