last executing test programs: 35.823904838s ago: executing program 1 (id=3444): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="05000000010001", 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008015}, 0x4000080) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x17}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xde231b595c3c0d8b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x488c1}, 0x4000000) 35.639232227s ago: executing program 1 (id=3450): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdae"], 0x0, 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x14, r2, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) close(0x4) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000240)=""/200, 0xc8}, {0x0}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) shutdown(r4, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x1000000, 0x25dfdbfd, {}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0x1c) 35.063858321s ago: executing program 0 (id=3454): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delchain={0x98, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xae}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x4, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x34, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x5, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc488}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x8}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="500404", @ANYRES16=r1], 0x7) 35.0601161s ago: executing program 4 (id=3455): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000100)={'wlan1\x00', @random="ef00"}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000100)={'wlan1\x00', @random="ef00"}) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='nv', 0x2) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='nv', 0x2) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000400)) (async) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000400)) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000240)=""/74, &(0x7f00000002c0)=0x4a) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) 34.752458927s ago: executing program 3 (id=3458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 34.686868929s ago: executing program 0 (id=3459): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001b1401"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x60, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x110, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @remote, 0x34}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x2, 0x0) (rerun: 32) write(r7, &(0x7f0000000340)="1c0000001a009b8a140000003b00"/28, 0x1c) (async) recvmmsg(r7, &(0x7f0000000580), 0x400000000000ec0, 0x2, &(0x7f0000000940)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="228ed761470000001000000056afe27704e832c2bb09761f3cbd24ad7a04b1ab7c1aa529e9acf3a4ba8d45edb71e9f8357c23489514ab938b99e7f8bf12bf202207137bd478269296f96dfcda9c74505b457b89da5971349f2af3b755ebb0115622be2491a9ca0cbd2c5cffec87a6a7f4dea00dbc46222c000097e705063eba00f1a9b2755c7c90dc187316034d2f84954221d109ca23aff02ffed7100cb1a2f59f7", @ANYRESDEC=r4, @ANYRES32=r6, @ANYRES64=r6, @ANYRES64=r4, @ANYBLOB="746cff2617a52dac1426fd37485c317e4c44c37f1483da1d19f9f0fa564790d7b34731b0374c156d935dce6c3da41c0fb9f17970e37eae5ab8840578ef21761b724a50d5d9c041177af02ed18753d08a9d9fe561a7ba535e12e9570c3070b153717664f1f3193d9507e83ec8c07741fe2c8c43c186e278484c70a59f05bc6f8d3d311540cfc2dc1c", @ANYRESDEC=r3, @ANYRES32=r0, @ANYRES8=r1, @ANYBLOB="8f70fc9c9a46d9abf326ceafa93f08bdafd50f86e1d510f0acef5be537f7b3cd89d6b870461737147951b7ee958555f63001e9fa0e9541d0f998598a93e44718f11254a4597ac5cff7c63387db8bc82d8f1b7e7cef6f19ebed35b87f4abb8314246802f5c07423a40cda7453c6c7983e86093eb7709795542ce3a20a0580757fe5e02b38d9e1e643d20c8c17b5f69467dbb26cb35e931ccd23bb1698344b466ff79992488a09ff8a1162d75ba724f4ce66305fc4a463a81a52bb2bef94858f", @ANYRES16=r4, @ANYBLOB="50e9504a588911b70f10a12cbad97f2709a6e013b8201bd55f1d3f11bf096780253c9919c2d7d3b18fc2954299a743cc7d478784c2306cda588b80b4e5b558e5a853e716f8c47c7d09b2d96f71e70185cc0995b569460b6ccded82c160808ca186fef99c9f9315727ce46aec285910327aa0895f328971edb25af375bbf214ed10b5b207b7e0dbf3bc54def7bebc1cea5f2e1c87956bca9a257e77690479397d05d145cd374f551f168e49a423317c5f40c20da4e89fd77586c7a2bdf659a2a211a6afef53386ad41342fdb14514fe3023360960e2a92f52b4f993544db337ce8eec14b2cb2c45be325f54"], 0x48) r8 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r10, {0x6, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080) (async) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@deltfilter={0x0, 0x2d, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0xd}, {0x13, 0x7}, {0xe, 0xfff2}}, [@TCA_RATE={0x0, 0x5, {0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) (async) write$tun(r1, &(0x7f00000003c0)=ANY=[], 0xfdef) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000700)={'batadv_slave_0\x00', @multicast}) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc020000000000000000000000000001000107144e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020706500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069fc0000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000900)={r12, r11}, 0xc) (async) socket$pptp(0x18, 0x1, 0x2) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001040)=@newsa={0x160, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d0, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x80, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffdf, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x4, 0x0, 0x20}, [@algo_comp={0x66, 0x3, {{'deflate\x00'}, 0xf0, "8f628d6d9fe98732ac7bd6d6567a8e252406d7f3781804fc27a38fd46306"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x844) 34.514312301s ago: executing program 1 (id=3460): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000080200000000005f"], 0x0, 0x44}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r2, 0x501, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!*+\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20041) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000200)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x15, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="89e35823e3805d8e7b35efe26b1212607a693116d1c744b6ae4cb8b9c66daf4ee00954996fc7c95275db23234374", @ANYRESDEC, @ANYRES16=r4, @ANYRES16], 0x48) 34.223783554s ago: executing program 1 (id=3461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x18, &(0x7f0000000340)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x4e20, 0x0, 'lblcr\x00', 0x1, 0x12c, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x6, @local, 0x4e20, 0x0, 'rr\x00', 0x1, 0x12c, 0xffffffff}, {@remote, 0x4e20, 0x0, 0x1}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f00000000c0)=0x7, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x40000401, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r4, 0xb5d6) listen(r5, 0xe0a5) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/96, 0x60}], 0x1}, 0x9}], 0x1, 0x40002122, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000040)={'gretap0\x00', 0x8014}) 33.884567186s ago: executing program 4 (id=3462): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x47) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x800) (rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000a00)=0x1, 0x4) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000a40)=0x2, 0x4) (async, rerun: 32) connect$inet(r1, &(0x7f0000000a80)={0x2, 0x4e23, @remote}, 0x10) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) (async) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x1d, @loopback, 0x4e25, 0x40002, 'nq\x00', 0x0, 0x100004d2, 0x30}, {@remote, 0x4e22, 0x3, 0x4, 0xd3, 0x6}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18020000f774ffff0000000003000000850000003600000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000e40)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) (async) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000f80)}, {0x0}, {&(0x7f0000000fc0)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001040)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff0000000000000002000000000200000000000008020000000000"], 0x0, 0x44}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="000000000000007e87cbd7cb000000000000f0000004000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001cc0)={'veth1_to_hsr\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001d00)={0xffffffffffffffff, r8, 0x25, 0x1d, @void}, 0x1a) sendmsg$nl_route_sched(r7, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001f00)=@newtfilter={0x4cc, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0x7}, {0x0, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x480, 0x2, [@TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x42e0, 0x3, 0xc7d3, 0x7f, 0x7, 0xd, 0x9140, 0xfffff47f, 0x3, 0x1, 0x3, 0x0, 0xce, 0x7f, 0x2008, 0x2, 0x3ff, 0xa39, 0x0, 0x7, 0x7ff, 0x1ff, 0x8, 0x2, 0x5, 0x3ff, 0x8e8e, 0x4, 0x4, 0x400, 0x4, 0x6, 0x7, 0x2, 0x8, 0xbdd606bb, 0x7fffffff, 0xfffffff9, 0x6, 0x8, 0xb, 0x3, 0x39, 0x5, 0x3, 0xfffffffe, 0xfffff000, 0x9, 0x2, 0x0, 0xf8, 0x8, 0x400, 0xdbd, 0x6, 0x6, 0x0, 0x1a, 0xfffffc01, 0x100000, 0x0, 0x8000, 0x20000000, 0x4, 0x7, 0x3, 0x8, 0xfffffff8, 0x4000, 0x101, 0xe84, 0x2, 0x4, 0x8, 0x7, 0x9, 0x2, 0x401, 0x5, 0x8, 0xdb24, 0x21, 0xa53, 0x3, 0x0, 0xbd, 0x5, 0x78, 0x7, 0xb52, 0x1800, 0xa, 0x3, 0x10001, 0x5, 0x5, 0x200, 0x7, 0x9, 0xfe10, 0xfffffffa, 0x280000, 0x2, 0x401, 0x2, 0x9, 0x5, 0x1, 0x2, 0xa9, 0x4, 0x4, 0x5, 0x7, 0x5, 0x65b, 0x10, 0x5, 0x0, 0xfffffffb, 0xa, 0x6, 0xff, 0xff, 0xd, 0x7, 0x3, 0x7, 0x5, 0xea24, 0x3429, 0xfff, 0x401, 0x1, 0x4, 0x5, 0xbd6, 0x7, 0x8, 0x1ff, 0x7fff, 0xa7, 0x7, 0x6, 0x3, 0x8, 0x0, 0x6, 0x1, 0xfb, 0xffffff2f, 0x0, 0x4, 0x1, 0x1ff, 0xfff, 0x18a, 0x1, 0x3, 0x7, 0x9b, 0x31, 0x4, 0x8575, 0x9, 0x8, 0x15, 0x4, 0x6, 0x8, 0x42db, 0xbaa, 0x100, 0x3, 0xc, 0x5, 0x6, 0x8001, 0xb, 0x80, 0x40, 0x2, 0xb, 0xb, 0x100, 0x7, 0x51b794b1, 0x8, 0x5, 0x1000, 0x7fff, 0x1000, 0x7, 0x5, 0x9, 0xe9, 0x80000001, 0x1ff, 0x59, 0xfff, 0x8000, 0x7, 0x2, 0xfc000000, 0x8, 0xb05b, 0x5, 0x8000, 0x5, 0x9, 0xfffffffb, 0x0, 0x4, 0xc, 0xf, 0x3, 0x8, 0x7cf4, 0x0, 0x2, 0x3ff, 0x6, 0xd, 0x7, 0x0, 0x2, 0xfffffff7, 0x0, 0xb, 0x7fffffff, 0x5, 0xb, 0x4, 0x2, 0x80000001, 0x0, 0x70b5, 0x1, 0x0, 0x8, 0x3, 0x1, 0x2, 0x357, 0x1e6dc940, 0x80000001, 0x9, 0x2c, 0x3, 0x682, 0x81, 0x25, 0x101, 0x3ff, 0x1, 0xfffffff9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x248e}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x5, 0x7, 0xe2, 0xa94a}, {0x8001, 0x2, 0x4, 0x6011}, {0x1, 0x0, 0x81, 0x9}, {0x8, 0x9, 0x8, 0xf}, {0x5, 0x7f, 0x4, 0x112}, {0x4, 0x5, 0x0, 0x10001}, {0x2, 0x6b, 0x4, 0x9}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0xffe2}}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x81}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x4cc}, 0x1, 0xf0ffffffffffff}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e40)={r9, 0x0, 0x0}, 0x10) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4b, &(0x7f0000001e80)=0x5, 0x4) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000001ec0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 33.724358983s ago: executing program 3 (id=3463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffc, 0x2000000, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x2, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x10000084) 33.612618826s ago: executing program 2 (id=3464): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x0, 0x0, 0x3}}, 0x2e) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'macsec0\x00', @random="0100fe2010ff"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x0, 0x0, 0x3}}, 0x2e) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'macsec0\x00', @random="0100fe2010ff"}) (async) 33.517048152s ago: executing program 3 (id=3465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast1}]}, 0x30}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000002c0)=0x2, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=0x0, @ANYBLOB="bd0c0eab5cc2384b2cf3ca2f23056a191dc0bc326701958aede7469cf66470ad584358b79d636b2f056208fbf37d22c5fa"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x90, 0x12, 0x105, 0x70bd2b, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0xa, 0xd}}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xa}}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in6=@empty, 0x0, 0xa}}]}, 0x90}, 0x1, 0xff80, 0x0, 0x1}, 0x20040840) sendto$inet6(r1, &(0x7f0000000300)="9a", 0x1, 0x804, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="e6893005d625fd2cf86849e65e30a0111f9c6adf2e24d884fe2d9860d0ac4ecb1c3622524b121ebf06e956bd6612ae1deedb705990990540e4176bcb244f4bbb74843e0b4e71f60e780d380815d42acab7dbba6e58875b53398653124330c194723c3bad931a5aa1e57359e80b554221428b26e998605c181ad054a7d195cc5ab12627876e4bf8a9f5c7bc3683066f48b406604db238da3d361e4b7e99423715d35edf5add9527897cfc1f915655d28c30121b9c1a486550ac866bca2cf96ffee8b8d77ee98d88026bcca1555fcbc0e61475d404ac0c3b22cbb8", 0xda, 0x80, &(0x7f00000004c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xff}, 0x1c) r5 = socket(0x8, 0x4, 0xfc) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x1, 0x4) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000500)={@private=0xa010100, @broadcast}, 0xc) 33.487288417s ago: executing program 0 (id=3466): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="6400000010003704030000000300060000000000", @ANYRES32=0x0, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=0x0, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700000000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 33.339874267s ago: executing program 2 (id=3467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x34, 0xd, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}]}}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}}, 0x0) 33.301395224s ago: executing program 2 (id=3468): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0xc018, r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x100b, &(0x7f0000000400)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd97, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000200)={0xe, 0xb}) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000170069103c0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 33.193173079s ago: executing program 0 (id=3469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000d00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x366, 0x10, &(0x7f0000000e40), 0x1dd}, 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001040)={r0, &(0x7f0000000580)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x12880, &(0x7f00000005c0)={@align=0x9, {0x0, 0x3, 0x8, 0x8}}, 0x9, &(0x7f0000000fc0), &(0x7f0000001000)=0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001080)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001140)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000001180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x1c, 0x8, 0x81, 0x70000000, 0x40002, r1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001240)={r3, &(0x7f0000001180)="5af86bbc5d14255bd8147ba872c25701ec71af242aeeb551d72ff887bab10975fadea65ed8219d6c90e00ff9ed821319ac6643de8f683283b1bddd3b57aeeb30215ff848efb6d60571e6df170ec570e1eccab9e71ea17d5a955d2fd335b6c0af126523d27960490eb3bc030e3b4c9348e8d21abbd8775c68512be6c5e2ecb123247627a86a716663c0b7cc4e6bb70295267c8ff0794dc8a1e3ff0658bc39996a167284a019"}, 0x20) close(r0) socket(0x28, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r4}, &(0x7f0000000f40), &(0x7f0000000f80)=r0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000000000000000010000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000740)=""/222}, 0x78) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000400)={{r5, &(0x7f0000000200)='\x00', 0x20002, &(0x7f0000000240)={@_ha_fsid={[0x7, 0xc]}, {0x3ff, 0x0, 0xfffffff9, 0x7}}, 0x5, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x200}, {[0x200, 0x4, 0x200, 0x5]}, 0x8, 0xe9, &(0x7f0000000300)=""/233}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000480)={r8, 0x1, 0x6, @multicast}, 0x10) sendto$packet(r7, &(0x7f0000000140)='\x00', 0x1, 0x240250d4, &(0x7f0000000180)={0x11, 0x17, r8, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) 33.119882486s ago: executing program 2 (id=3470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x335}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000340)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000003c0)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000400)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000440)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) bind$xdp(r3, &(0x7f00000004c0)={0x2c, 0xa, r4, 0x1a, r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r1}, 0xc) 33.012251594s ago: executing program 4 (id=3471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc2) 32.913807171s ago: executing program 2 (id=3472): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x10000004, 0xc3, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, 0xffffffffffffffff, 0x26, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000140)='GPL\x00', 0x4000, &(0x7f0000000180)={@_ha_fsid={[0x8, 0xf0]}, {0x1, 0x2, 0x219cacfd, 0x8000000000000001}}, 0xda, &(0x7f00000001c0), &(0x7f0000000240)=0xfffffffe}, {[0x4, 0x3, 0x9, 0x7]}, 0x7b0, 0xaa, &(0x7f0000000280)=""/170}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0xfffffedf, 0x10, &(0x7f0000001900)}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0xfffffedf, 0x10, &(0x7f0000001900)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r4, 0x108, 0xe, 0x0, &(0x7f00000019c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r4, 0x108, 0xe, 0x0, &(0x7f00000019c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400010000002008001ec0"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400010000002008001ec0"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00{', @ANYRES16=r3, @ANYBLOB="010028bd7000060000000c0000000400038004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xc8, 0xa3ca, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8, 0x80, 0x3ff, 0x7}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x44) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x44) recvmsg$can_bcm(r1, &(0x7f0000000cc0)={&(0x7f0000000880)=@tipc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/224, 0xe0}, {&(0x7f0000000a00)=""/181, 0xb5}, {&(0x7f0000000ac0)=""/53, 0x35}, {&(0x7f0000000b00)=""/36, 0x24}, {&(0x7f0000000b40)=""/73, 0x49}], 0x5, &(0x7f0000000c40)=""/116, 0x74}, 0x2) 32.770749054s ago: executing program 0 (id=3473): sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="9800ffbd7000bbb5ff030000da0c00000dffe4b7", @ANYRES32=0x0, @ANYBLOB="0c009900ff030000670000002400238005000e000100000005001d00000000000500110000000000060010000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000800c000000080001005f0000000c0099000800000027000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8890) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010080032c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100100008000b400000000050000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200890000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db2020025100100140003006e657464657673696d3000000000000014001680100001800c0007"], 0x50}, 0x1, 0x0, 0x0, 0x20004010}, 0x48880) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000200)=@pppoe, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000700)=""/168, 0xa8}, {&(0x7f00000007c0)=""/10, 0xa}], 0x4, &(0x7f0000000840)=""/52, 0x34}, 0x40000002) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd01000100000008"], 0x18}}, 0x20004018) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x21cc, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x2198, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x2140, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cc0, 0x5, 0x0, 0x0, {{0xa}, {0x1c74, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x9, 0x8, 0xb9c, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0xa, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x3c, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x1, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x5, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x101, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8002, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x6, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x3, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x9, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x9, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x9, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x0, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x0, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0xc, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0xffff, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x4}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3001}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x1}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0xc, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x8, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0x9, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xee, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x7ffc, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x3}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x90ff}, {0xf1, 0xffffff80, 0x5, 0x6, 0x4, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x10, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x2086a7, 0x1dbe, 0x6e41, 0xfffffff6, 0xfffffffe, 0x101}, {0x7, 0x2, 0x2, 0x6, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0x7, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0xb}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x5, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45124, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0xc, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0xfffffffd, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x9, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0xf, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x5, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x2, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0xfffffff8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x23, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff46"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x70, 0xb, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xc4, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3f800000, 0x5, 0x20000000, 0x9, 0x5}, 0x8}}]}, {0x71, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1e8, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0x79, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7ec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x21cc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.668555484s ago: executing program 1 (id=3474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x8, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], &(0x7f0000003800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000003840)={@cgroup=r3, r3, 0x2f}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003880)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f00000038c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000003900), 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x1, 0xa, 0x9, 0x4, 0x18, 0xb}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x43, &(0x7f0000000440)=""/67, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x7, 0x36, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000580)=[{0x1, 0x1, 0xf, 0x1}, {0x3, 0x3, 0xc, 0x4}, {0x4, 0x5, 0x2, 0xa}, {0x3, 0x3, 0xe, 0x7}, {0x4, 0x1, 0x8, 0xc}], 0x10, 0xf}, 0x94) gettid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@setlink={0x54, 0x13, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x57bad0c1ffc22346, 0x8080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x40}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0xfffffffd, 0x0, 0x10001}, 0x10}, 0x94) 32.559934603s ago: executing program 4 (id=3475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 32.435785668s ago: executing program 2 (id=3476): socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000240)="5766b1b827f6003300", 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f00000015c0)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000001680)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000001740)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000001800)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f0000001840)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000002640)=0x10001, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000340), 0xffffffffffffff94, 0x4102000000000000, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) read$rfkill(r3, &(0x7f00000001c0), 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) 32.435579593s ago: executing program 3 (id=3477): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000002d0a0600000000002500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000300bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0xb, 0x1001, &(0x7f0000000680)=""/4097, 0x41000, 0x24}, 0x94) 32.342161448s ago: executing program 4 (id=3478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x34, 0xd, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}]}}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}}, 0x0) 32.146178179s ago: executing program 3 (id=3479): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000100037040300000003003f0000000000", @ANYRES32=0x0, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=0x0, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700000000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 31.972243861s ago: executing program 4 (id=3480): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x1002}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000680)={0x3, &(0x7f00000006c0)=[{0x1000, 0xd, 0x29, 0xfffffffc}, {0x8, 0xc1, 0x8, 0x4}, {0x623d, 0x2, 0x1, 0x9}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000800)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004b40)=ANY=[@ANYBLOB="0500000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00f3fffffffffffffe0f00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004bc0)={0x16, 0xb, &(0x7f0000004c80)=ANY=[@ANYBLOB="18000000000000e9000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000500000085000000020000009500000000000000"], &(0x7f0000004d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004d40)={r5, 0x0, 0xe, 0x0, &(0x7f0000004dc0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@getqdisc={0x34, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x3, 0xb}, {0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000064}, 0x4048000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x1f}}) r9 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r9, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xffffffff, @empty, 0xffffffff}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x32}) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500000a0900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a31000000002800048008000240000000120800014000000001140003006e657464657673696d30000000000000140000001100010000000000000000000500000a1ffa4dceba7ebc6fce346cd95ee505cb"], 0x9c}}, 0x24004000) r11 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xca, 0x0, 0x45) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4000810) 31.527685226s ago: executing program 0 (id=3481): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200)={0xfffd, 0xc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000640)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000006c0)={0x800, 0x9, 0x8, 0xfffffffe, r1}, &(0x7f0000000700)=0x10) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="4c00000011001100001100020000080002000000200000", 0x17) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200)={0xfffd, 0xc, 0x4}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000640)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000680)=0x10) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000006c0)={0x800, 0x9, 0x8, 0xfffffffe, r1}, &(0x7f0000000700)=0x10) (async) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r3, &(0x7f0000000040)="4c00000011001100001100020000080002000000200000", 0x17) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 31.527133919s ago: executing program 3 (id=3482): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b704000000000000850000003f00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380), &(0x7f00000003c0)=@tcp=r1}, 0x20) sendto(r1, &(0x7f0000000400)="01", 0xffffffee, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x140a, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x48010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x64, 0xb, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4880) 31.526282413s ago: executing program 1 (id=3483): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/28, 0x1c}], 0x3) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="48010000100001040000000000000000ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000ac1414bb000000000000000000000000ffffffffffffff7fffffffffffffff7fffffffffffffff7fffffffffffffff7f7519e4f70c3a444600000000000000000000000000000000000000000200000000000000000000000000000000d8f9ecbadee38e00000000000000000000000000000000000000000000000000000000000000000000000000000002000500000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000005002100010000000600"/256], 0x148}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000800)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000840)={0xa, 0xe64, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x201}, 0x1c) r5 = socket(0xa, 0x1, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000940)={'veth1_to_hsr\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 64) r9 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r10 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000004c0)) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), r10) (async, rerun: 64) getsockname$packet(r10, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) (rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r11, @ANYBLOB="11980400419804002800128008000100736974001c00028008000300ac"], 0x48}}, 0x0) (async) sendto$packet(r9, &(0x7f0000000c40)="05d9", 0x2, 0x40880, &(0x7f0000000c80)={0x11, 0x86dd, r11, 0x1, 0x4, 0x6, @local}, 0x14) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000cc0)=0x9, 0x4) (async, rerun: 32) bind$inet6(r5, &(0x7f0000000d00)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}, 0x1c) (async, rerun: 32) connect$inet6(r5, &(0x7f0000000d40)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 0s ago: executing program 32 (id=3481): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200)={0xfffd, 0xc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000640)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000006c0)={0x800, 0x9, 0x8, 0xfffffffe, r1}, &(0x7f0000000700)=0x10) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="4c00000011001100001100020000080002000000200000", 0x17) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200)={0xfffd, 0xc, 0x4}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000640)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000680)=0x10) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000006c0)={0x800, 0x9, 0x8, 0xfffffffe, r1}, &(0x7f0000000700)=0x10) (async) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r3, &(0x7f0000000040)="4c00000011001100001100020000080002000000200000", 0x17) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) kernel console output (not intermixed with test programs): n, defaulting to 1000 [ 324.083147][T16490] lo speed is unknown, defaulting to 1000 [ 324.344023][T16566] x_tables: duplicate underflow at hook 3 [ 324.374192][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.548071][T16570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.626023][T16574] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 324.694664][ T4947] Bluetooth: hci5: command tx timeout [ 324.777784][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.810528][T16580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.811820][T16580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.222594][T16490] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.222776][T16490] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.223185][T16490] bridge_slave_0: entered allmulticast mode [ 325.246027][T16490] bridge_slave_0: entered promiscuous mode [ 325.250697][T16608] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 325.264784][T16490] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.264956][T16490] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.265111][T16490] bridge_slave_1: entered allmulticast mode [ 325.266934][T16490] bridge_slave_1: entered promiscuous mode [ 325.328264][T16490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.332893][T16490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.385091][T16490] team0: Port device team_slave_0 added [ 325.388296][T16490] team0: Port device team_slave_1 added [ 325.432756][T16490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.432774][T16490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.432797][T16490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.479814][T16490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.479831][T16490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.479853][T16490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.705850][T16490] hsr_slave_0: entered promiscuous mode [ 325.708596][T16490] hsr_slave_1: entered promiscuous mode [ 325.971386][T16632] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 326.031738][T16490] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.042229][T16635] SET target dimension over the limit! [ 326.176869][T16490] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.270100][T16645] __nla_validate_parse: 7 callbacks suppressed [ 326.270122][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2814'. [ 326.295266][T16645] 8021q: adding VLAN 0 to HW filter on device bond14 [ 326.326730][T16490] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.367642][T16648] ip6gre3: entered promiscuous mode [ 326.367658][T16648] ip6gre3: entered allmulticast mode [ 326.410052][T16490] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.419902][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2816'. [ 326.634797][T16490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.642046][T16490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.643177][T16490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.669523][T16490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.670735][T16490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.692815][T16490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.701569][T16490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.716161][T16490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.775930][ T4947] Bluetooth: hci5: command tx timeout [ 326.857648][ T24] net_ratelimit: 7 callbacks suppressed [ 326.857669][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.996384][T16667] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 [ 327.050262][T16490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.112719][T16673] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 327.122447][T16490] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.146576][T16674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2820'. [ 327.148572][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.148678][ T7275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.179790][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.179891][ T7271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.250583][T16668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.440629][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.499151][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'. [ 327.499186][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'. [ 327.535736][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 327.839763][T16703] bond9: option packets_per_slave: invalid value (575537162) [ 327.839788][T16703] bond9: option packets_per_slave: allowed values 0 - 65535 [ 327.863511][T16703] bond9 (unregistering): Released all slaves [ 327.910014][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.991041][T16702] lo: left promiscuous mode [ 327.991226][T16702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.065847][T16692] ip6gretap0: entered allmulticast mode [ 328.242244][T16686] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 328.458558][T16728] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 328.510748][T16723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.596517][T16731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2834'. [ 328.854151][ T4947] Bluetooth: hci5: command tx timeout [ 328.914815][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 328.937233][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.993619][T16747] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.060982][T16753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2840'. [ 329.077457][T16753] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2840'. [ 329.077476][T16747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.078711][T16747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.079900][T16747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.080772][T16747] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 329.123267][T16747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.130846][T16747] syzkaller0: left promiscuous mode [ 329.131973][T16747] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 329.150292][T16747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.162281][T16747] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 329.163579][T16747] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 329.182377][T16747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.194538][T16747] batadv_slave_0: entered promiscuous mode [ 329.199901][T16747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.201325][T16747] geneve2: left promiscuous mode [ 329.222666][T16747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 329.223425][T16747] ip6gre3: left promiscuous mode [ 329.236885][T16747] bridge2: left promiscuous mode [ 329.239578][T16747] bond5: left promiscuous mode [ 329.239600][T16747] bridge3: left promiscuous mode [ 329.240141][T16747] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.241096][T16747] bond5: entered allmulticast mode [ 329.241113][T16747] bridge3: entered allmulticast mode [ 329.241701][T16747] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 329.279046][T16747] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 329.295077][T16747] bridge3: entered promiscuous mode [ 329.299116][T16747] vxlan0: left promiscuous mode [ 329.299419][T16747] vxlan1: left promiscuous mode [ 329.302836][T16747] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.314821][T16747] bond7: left promiscuous mode [ 329.336090][T15833] bridge0: entered promiscuous mode [ 329.464516][T15833] bridge2: entered promiscuous mode [ 329.470896][T16490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.515147][ T3297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.517358][ T3297] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 329.517637][ T3297] bond3: (slave veth9): making interface the new active one [ 329.520989][ T3297] bond3: active interface up! [ 329.665531][ T42] bond6: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 329.681842][ T42] bond6: (slave veth0_to_bond): making interface the new active one [ 329.689336][ T42] bond6: active interface up! [ 329.718983][T16490] veth0_vlan: entered promiscuous mode [ 329.738755][T16490] veth1_vlan: entered promiscuous mode [ 329.765765][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.814516][ T3297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.848357][T16490] veth0_macvtap: entered promiscuous mode [ 329.856291][T16490] veth1_macvtap: entered promiscuous mode [ 329.883200][T16764] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 329.899757][T16490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.919557][T16490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.956422][T16763] batadv_slave_1: entered allmulticast mode [ 329.976060][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.072438][T16763] dvmrp6: entered allmulticast mode [ 330.083466][T16766] sctp: [Deprecated]: syz.0.2846 (pid 16766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.083466][T16766] Use struct sctp_sack_info instead [ 330.126186][T16762] batadv_slave_1: left allmulticast mode [ 330.133422][ T814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.133443][ T814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.137021][ T7275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.137122][ T7275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.137161][ T7275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.137191][ T7275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.277093][ T7271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.277115][ T7271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.455468][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.690269][T16798] netlink: 'syz.2.2851': attribute type 1 has an invalid length. [ 330.690290][T16798] netlink: 'syz.2.2851': attribute type 2 has an invalid length. [ 330.944267][ T4947] Bluetooth: hci5: command tx timeout [ 331.014230][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.052178][T16813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.052400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.437336][T16835] __nla_validate_parse: 4 callbacks suppressed [ 331.437375][T16835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2857'. [ 331.451980][T16835] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2857'. [ 331.452416][T16835] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2857'. [ 331.633353][T16842] ip6gre1: entered promiscuous mode [ 331.633377][T16842] ip6gre1: entered allmulticast mode [ 332.054755][ T5629] net_ratelimit: 2048 callbacks suppressed [ 332.054777][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.269488][T16868] gre2: entered promiscuous mode [ 333.013689][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.027666][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.028550][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.057638][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.058292][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.109570][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.183023][T16884] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 333.209560][T16892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2874'. [ 333.495331][T15820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.513684][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2878'. [ 333.513708][T16906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2878'. [ 333.994274][T16888] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 333.997119][T16890] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 334.044832][T16885] wg2 speed is unknown, defaulting to 1000 [ 334.046674][T16885] lo speed is unknown, defaulting to 1000 [ 334.145557][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.459952][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.776802][T16938] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 334.778074][T16940] xt_hashlimit: size too large, truncated to 1048576 [ 334.842171][T16943] xt_connbytes: Forcing CT accounting to be enabled [ 334.842191][T16943] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 335.174350][ T4947] Bluetooth: hci4: command tx timeout [ 335.176457][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.447840][T16965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 335.548221][T16885] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.548331][T16885] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.548519][T16885] bridge_slave_0: entered allmulticast mode [ 335.552307][T16885] bridge_slave_0: entered promiscuous mode [ 335.573296][T16885] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.576804][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.576982][T16885] bridge_slave_1: entered allmulticast mode [ 335.578686][T16885] bridge_slave_1: entered promiscuous mode [ 335.660972][T16885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.672334][T16885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.819076][T16885] team0: Port device team_slave_0 added [ 335.831377][T16885] team0: Port device team_slave_1 added [ 335.971746][T16885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.971764][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.971786][T16885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.069390][T16885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.069408][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.069431][T16885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.208752][T16885] hsr_slave_0: entered promiscuous mode [ 336.209773][T16885] hsr_slave_1: entered promiscuous mode [ 336.210643][T16885] debugfs: 'hsr0' already exists in 'hsr' [ 336.210662][T16885] Cannot create hsr debugfs directory [ 336.227804][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.259075][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2900'. [ 336.271781][T16992] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2900'. [ 336.366122][T16998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2902'. [ 336.465468][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'. [ 336.484048][T17005] netlink: 'syz.3.2905': attribute type 21 has an invalid length. [ 336.518184][T17005] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2905'. [ 336.518225][T17005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2905'. [ 336.559313][T15820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.605615][T17012] netlink: 'syz.0.2901': attribute type 13 has an invalid length. [ 336.792624][T17022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2910'. [ 336.876740][T17024] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2912'. [ 336.996202][T17034] pim6reg1: entered promiscuous mode [ 336.996223][T17034] pim6reg1: entered allmulticast mode [ 337.000227][T17031] ip_tables: iptables: counters copy to user failed while replacing table [ 337.039796][T17031] bridge_slave_1: left allmulticast mode [ 337.039814][T17031] bridge_slave_1: left promiscuous mode [ 337.039973][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.042019][T17031] bridge_slave_0: left allmulticast mode [ 337.042036][T17031] bridge_slave_0: left promiscuous mode [ 337.042175][T17031] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.253996][ T4947] Bluetooth: hci4: command tx timeout [ 337.258414][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.308901][T16885] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.325020][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.327529][T16885] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.369908][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.370874][T16885] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.400233][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.401923][T16885] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.445917][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.476251][T17065] netlink: 'syz.1.2917': attribute type 1 has an invalid length. [ 337.700241][T16885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.752497][T16885] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.779033][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.779143][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.818303][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.818455][ T7275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.984635][T17128] x_tables: unsorted underflow at hook 3 [ 338.203112][T17036] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 338.295577][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.616078][T17167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2927'. [ 338.660662][T17167] netlink: 'syz.1.2927': attribute type 1 has an invalid length. [ 338.660695][T17167] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.2927'. [ 338.685369][T17167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2927'. [ 339.053675][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2926'. [ 339.070960][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2926'. [ 339.232994][T17190] netlink: 'syz.1.2932': attribute type 83 has an invalid length. [ 339.334073][ T4947] Bluetooth: hci4: command tx timeout [ 339.334446][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.360105][T17193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.360291][T17193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.368654][T17193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.395989][T17193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.396207][T17193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.396378][T17193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.396623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.547552][T16885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.991135][T17205] FAULT_INJECTION: forcing a failure. [ 339.991135][T17205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.991167][T17205] CPU: 0 UID: 0 PID: 17205 Comm: syz.3.2937 Not tainted syzkaller #0 PREEMPT(full) [ 339.991189][T17205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 339.991201][T17205] Call Trace: [ 339.991209][T17205] [ 339.991217][T17205] dump_stack_lvl+0xe8/0x150 [ 339.991253][T17205] should_fail_ex+0x410/0x560 [ 339.991285][T17205] _copy_from_user+0x2d/0xb0 [ 339.991313][T17205] sock_do_ioctl+0x195/0x320 [ 339.991339][T17205] ? __pfx_sock_do_ioctl+0x10/0x10 [ 339.991376][T17205] sock_ioctl+0x57a/0x7e0 [ 339.991397][T17205] ? __fget_files+0x2a/0x420 [ 339.991418][T17205] ? __pfx_sock_ioctl+0x10/0x10 [ 339.991439][T17205] ? __fget_files+0x2a/0x420 [ 339.991458][T17205] ? __fget_files+0x2a/0x420 [ 339.991482][T17205] ? bpf_lsm_file_ioctl+0x9/0x20 [ 339.991503][T17205] ? __pfx_sock_ioctl+0x10/0x10 [ 339.991523][T17205] __se_sys_ioctl+0xfc/0x170 [ 339.991550][T17205] do_syscall_64+0x166/0x520 [ 339.991569][T17205] ? trace_irq_disable+0x3b/0x140 [ 339.991590][T17205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.991609][T17205] ? clear_bhb_loop+0x70/0xc0 [ 339.991632][T17205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.991650][T17205] RIP: 0033:0x7f225419f559 [ 339.991675][T17205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.991691][T17205] RSP: 002b:00007f2255088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.991711][T17205] RAX: ffffffffffffffda RBX: 00007f2254425fa0 RCX: 00007f225419f559 [ 339.991724][T17205] RDX: 0000200000000480 RSI: 0000000000008946 RDI: 0000000000000003 [ 339.991737][T17205] RBP: 00007f2255088090 R08: 0000000000000000 R09: 0000000000000000 [ 339.991748][T17205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.991759][T17205] R13: 00007f2254426038 R14: 00007f2254425fa0 R15: 00007ffd0ed04c48 [ 339.991792][T17205] [ 340.209663][T17210] netlink: 'syz.2.2938': attribute type 7 has an invalid length. [ 340.210400][T17210] netlink: 'syz.2.2938': attribute type 7 has an invalid length. [ 340.569691][T16885] veth0_vlan: entered promiscuous mode [ 340.602049][T16885] veth1_vlan: entered promiscuous mode [ 340.707856][T17238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.858653][T17238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.880178][T17238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.902880][T17238] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.916606][T17238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.951809][T17238] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.966639][ T7275] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.966687][ T7275] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.966720][ T7275] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.980940][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.244044][T17260] FAULT_INJECTION: forcing a failure. [ 341.244044][T17260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.244076][T17260] CPU: 1 UID: 0 PID: 17260 Comm: syz.3.2948 Not tainted syzkaller #0 PREEMPT(full) [ 341.244094][T17260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 341.244104][T17260] Call Trace: [ 341.244111][T17260] [ 341.244121][T17260] dump_stack_lvl+0xe8/0x150 [ 341.244150][T17260] should_fail_ex+0x410/0x560 [ 341.244180][T17260] _copy_from_user+0x2d/0xb0 [ 341.244204][T17260] dev_ethtool+0xdb/0x29e0 [ 341.244227][T17260] ? __lock_acquire+0x747/0x2de0 [ 341.244258][T17260] ? __pfx_dev_ethtool+0x10/0x10 [ 341.244281][T17260] ? kasan_quarantine_put+0xbb/0x1f0 [ 341.244306][T17260] ? lock_acquire+0x115/0x350 [ 341.244332][T17260] ? dev_load+0x21/0x1f0 [ 341.244356][T17260] ? dev_load+0x21/0x1f0 [ 341.244379][T17260] dev_ioctl+0x392/0x1150 [ 341.244405][T17260] sock_do_ioctl+0x23e/0x320 [ 341.244427][T17260] ? __pfx_sock_do_ioctl+0x10/0x10 [ 341.244459][T17260] sock_ioctl+0x57a/0x7e0 [ 341.244477][T17260] ? __fget_files+0x2a/0x420 [ 341.244494][T17260] ? __pfx_sock_ioctl+0x10/0x10 [ 341.244511][T17260] ? __fget_files+0x2a/0x420 [ 341.244527][T17260] ? __fget_files+0x2a/0x420 [ 341.244547][T17260] ? bpf_lsm_file_ioctl+0x9/0x20 [ 341.244564][T17260] ? __pfx_sock_ioctl+0x10/0x10 [ 341.244581][T17260] __se_sys_ioctl+0xfc/0x170 [ 341.244605][T17260] do_syscall_64+0x166/0x520 [ 341.244621][T17260] ? trace_irq_disable+0x3b/0x140 [ 341.244639][T17260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.244669][T17260] ? clear_bhb_loop+0x70/0xc0 [ 341.244689][T17260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.244705][T17260] RIP: 0033:0x7f225419f559 [ 341.244722][T17260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.244736][T17260] RSP: 002b:00007f2255088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.244754][T17260] RAX: ffffffffffffffda RBX: 00007f2254425fa0 RCX: 00007f225419f559 [ 341.244765][T17260] RDX: 0000200000000480 RSI: 0000000000008946 RDI: 0000000000000003 [ 341.244776][T17260] RBP: 00007f2255088090 R08: 0000000000000000 R09: 0000000000000000 [ 341.244785][T17260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.244795][T17260] R13: 00007f2254426038 R14: 00007f2254425fa0 R15: 00007ffd0ed04c48 [ 341.244824][T17260] [ 341.414516][ T4947] Bluetooth: hci4: command tx timeout [ 341.530541][ T2021] block nbd4: Possible stuck request ffff888028980000: control (read@0,1024B). Runtime 30 seconds [ 341.531093][ T2021] block nbd4: Possible stuck request ffff8880289801c0: control (read@1024,1024B). Runtime 30 seconds [ 341.531124][ T2021] block nbd4: Possible stuck request ffff888028980380: control (read@2048,2048B). Runtime 30 seconds [ 341.545118][T17240] syzkaller0: entered promiscuous mode [ 341.545142][T17240] syzkaller0: entered allmulticast mode [ 341.582808][ T51] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.733702][T17265] __nla_validate_parse: 12 callbacks suppressed [ 341.733725][T17265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2950'. [ 342.462087][ T5629] net_ratelimit: 816 callbacks suppressed [ 342.462111][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.617244][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.496614][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.065978][T15820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.376061][T16885] veth0_macvtap: entered promiscuous mode [ 344.377178][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2950'. [ 344.400577][T16885] veth1_macvtap: entered promiscuous mode [ 344.478692][T16885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.512655][T16885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.534863][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.547868][ T7275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.547946][ T7275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.547977][ T7275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.548008][ T7275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.850571][T17294] bridge8: entered allmulticast mode [ 344.850782][T17291] syz_tun: entered allmulticast mode [ 344.854597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.905003][T17296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2958'. [ 344.945111][T17284] netlink: 'syz.1.2953': attribute type 30 has an invalid length. [ 344.951918][T17296] FAULT_INJECTION: forcing a failure. [ 344.951918][T17296] name failslab, interval 1, probability 0, space 0, times 0 [ 344.951948][T17296] CPU: 1 UID: 0 PID: 17296 Comm: syz.0.2958 Not tainted syzkaller #0 PREEMPT(full) [ 344.951969][T17296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 344.951980][T17296] Call Trace: [ 344.951988][T17296] [ 344.951995][T17296] dump_stack_lvl+0xe8/0x150 [ 344.952028][T17296] should_fail_ex+0x410/0x560 [ 344.952059][T17296] should_failslab+0xa8/0x100 [ 344.952088][T17296] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 344.952123][T17296] ? __kasan_kmalloc+0x93/0xb0 [ 344.952148][T17296] ? __request_module+0x2ec/0x630 [ 344.952170][T17296] ? __request_module+0x2ec/0x630 [ 344.952194][T17296] ? __kmalloc_cache_noprof+0x148/0x600 [ 344.952219][T17296] kstrdup+0x42/0x100 [ 344.952245][T17296] __request_module+0x2ec/0x630 [ 344.952269][T17296] ? __pfx_hook_capable+0x10/0x10 [ 344.952299][T17296] ? __pfx___request_module+0x10/0x10 [ 344.952322][T17296] ? kasan_quarantine_put+0xbb/0x1f0 [ 344.952361][T17296] ? security_capable+0x7e/0x2c0 [ 344.952387][T17296] ? dev_load+0x21/0x1f0 [ 344.952411][T17296] dev_load+0x190/0x1f0 [ 344.952437][T17296] dev_ioctl+0x384/0x1150 [ 344.952466][T17296] sock_do_ioctl+0x23e/0x320 [ 344.952490][T17296] ? __pfx_sock_do_ioctl+0x10/0x10 [ 344.952525][T17296] sock_ioctl+0x57a/0x7e0 [ 344.952545][T17296] ? __fget_files+0x2a/0x420 [ 344.952564][T17296] ? __pfx_sock_ioctl+0x10/0x10 [ 344.952583][T17296] ? __fget_files+0x2a/0x420 [ 344.952602][T17296] ? __fget_files+0x2a/0x420 [ 344.952624][T17296] ? bpf_lsm_file_ioctl+0x9/0x20 [ 344.952643][T17296] ? __pfx_sock_ioctl+0x10/0x10 [ 344.952663][T17296] __se_sys_ioctl+0xfc/0x170 [ 344.952688][T17296] do_syscall_64+0x166/0x520 [ 344.952705][T17296] ? trace_irq_disable+0x3b/0x140 [ 344.952725][T17296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.952744][T17296] ? clear_bhb_loop+0x70/0xc0 [ 344.952766][T17296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.952784][T17296] RIP: 0033:0x7f93ceb9f559 [ 344.952800][T17296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.952815][T17296] RSP: 002b:00007f93cfb4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.952835][T17296] RAX: ffffffffffffffda RBX: 00007f93cee25fa0 RCX: 00007f93ceb9f559 [ 344.952849][T17296] RDX: 0000200000000480 RSI: 0000000000008946 RDI: 0000000000000003 [ 344.952860][T17296] RBP: 00007f93cfb4f090 R08: 0000000000000000 R09: 0000000000000000 [ 344.952871][T17296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.952882][T17296] R13: 00007f93cee26038 R14: 00007f93cee25fa0 R15: 00007ffd64fe1938 [ 344.952912][T17296] [ 345.024007][T17290] syz_tun: left allmulticast mode [ 345.031302][ T7275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.031324][ T7275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.267334][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.267355][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.330850][T17306] Bluetooth: MGMT ver 1.23 [ 345.334116][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 345.500563][T17319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2964'. [ 345.577911][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.655057][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.733987][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 345.979429][T17336] netlink: 'syz.1.2966': attribute type 62 has an invalid length. [ 346.442904][T17360] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2971'. [ 346.614740][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.640504][T17332] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 346.890959][T17380] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 346.890981][T17380] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2977'. [ 347.159004][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 347.159042][T17381] netlink: 'syz.4.2978': attribute type 10 has an invalid length. [ 347.159059][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2978'. [ 347.212693][T17381] geneve2: entered promiscuous mode [ 347.217262][T17381] geneve2: entered allmulticast mode [ 347.334273][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 347.405122][T17402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2983'. [ 347.655253][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.731613][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'. [ 347.829156][T17432] bond1: entered promiscuous mode [ 347.830734][T17432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.861797][T17436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.862219][T17436] bond1: (slave sit2): The slave device specified does not support setting the MAC address [ 347.863132][T17436] bond1: (slave sit2): Error -95 calling set_mac_address [ 348.090610][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2994'. [ 348.168545][T17459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2998'. [ 348.168568][T17459] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2998'. [ 348.173222][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2996'. [ 348.221635][T17461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2999'. [ 348.254480][T17461] FAULT_INJECTION: forcing a failure. [ 348.254480][T17461] name failslab, interval 1, probability 0, space 0, times 0 [ 348.254516][T17461] CPU: 1 UID: 0 PID: 17461 Comm: syz.3.2999 Not tainted syzkaller #0 PREEMPT(full) [ 348.254554][T17461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 348.254566][T17461] Call Trace: [ 348.254598][T17461] [ 348.254665][T17461] dump_stack_lvl+0xe8/0x150 [ 348.254810][T17461] should_fail_ex+0x410/0x560 [ 348.254931][T17461] should_failslab+0xa8/0x100 [ 348.254982][T17461] __kmalloc_noprof+0xf9/0x710 [ 348.255012][T17461] ? ethnl_default_notify+0x1ab/0xb00 [ 348.255160][T17461] ? ethnl_default_notify+0x1ab/0xb00 [ 348.255194][T17461] ethnl_default_notify+0x1ab/0xb00 [ 348.255228][T17461] ? lock_acquire+0x115/0x350 [ 348.255267][T17461] ? __pfx_ethnl_default_notify+0x10/0x10 [ 348.255307][T17461] ? rtnl_is_locked+0x15/0x20 [ 348.255363][T17461] ? ethnl_notify+0x1a3/0x300 [ 348.255391][T17461] ethtool_set_settings+0x3ce/0x480 [ 348.255449][T17461] ? __pfx_ethtool_set_settings+0x10/0x10 [ 348.255505][T17461] ? bpf_lsm_capable+0x9/0x20 [ 348.255543][T17461] ? security_capable+0x7e/0x2c0 [ 348.255615][T17461] dev_ethtool+0x12c5/0x29e0 [ 348.255639][T17461] ? __lock_acquire+0x747/0x2de0 [ 348.255676][T17461] ? __pfx_dev_ethtool+0x10/0x10 [ 348.255703][T17461] ? kasan_quarantine_put+0xbb/0x1f0 [ 348.255733][T17461] ? lock_acquire+0x115/0x350 [ 348.255763][T17461] ? dev_load+0x21/0x1f0 [ 348.255838][T17461] ? dev_load+0x21/0x1f0 [ 348.255867][T17461] dev_ioctl+0x392/0x1150 [ 348.255898][T17461] sock_do_ioctl+0x23e/0x320 [ 348.255969][T17461] ? __pfx_sock_do_ioctl+0x10/0x10 [ 348.256009][T17461] sock_ioctl+0x57a/0x7e0 [ 348.256031][T17461] ? __fget_files+0x2a/0x420 [ 348.256061][T17461] ? __pfx_sock_ioctl+0x10/0x10 [ 348.256082][T17461] ? __fget_files+0x2a/0x420 [ 348.256101][T17461] ? __fget_files+0x2a/0x420 [ 348.256126][T17461] ? bpf_lsm_file_ioctl+0x9/0x20 [ 348.256151][T17461] ? __pfx_sock_ioctl+0x10/0x10 [ 348.256172][T17461] __se_sys_ioctl+0xfc/0x170 [ 348.256200][T17461] do_syscall_64+0x166/0x520 [ 348.256271][T17461] ? trace_irq_disable+0x3b/0x140 [ 348.256302][T17461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.256338][T17461] ? clear_bhb_loop+0x70/0xc0 [ 348.256361][T17461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.256379][T17461] RIP: 0033:0x7f225419f559 [ 348.256428][T17461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.256444][T17461] RSP: 002b:00007f2255088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.256500][T17461] RAX: ffffffffffffffda RBX: 00007f2254425fa0 RCX: 00007f225419f559 [ 348.256514][T17461] RDX: 0000200000000480 RSI: 0000000000008946 RDI: 0000000000000003 [ 348.256526][T17461] RBP: 00007f2255088090 R08: 0000000000000000 R09: 0000000000000000 [ 348.256538][T17461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.256550][T17461] R13: 00007f2254426038 R14: 00007f2254425fa0 R15: 00007ffd0ed04c48 [ 348.256584][T17461] [ 348.637899][T17475] dvmrp6: left allmulticast mode [ 348.696256][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.696284][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.753443][T17473] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 348.816180][T17480] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 348.848922][T17482] bond0: (slave ip6tnl0): refused to change device type [ 348.900230][T17487] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 349.241223][T17507] FAULT_INJECTION: forcing a failure. [ 349.241223][T17507] name failslab, interval 1, probability 0, space 0, times 0 [ 349.241247][T17507] CPU: 0 UID: 0 PID: 17507 Comm: syz.0.3013 Not tainted syzkaller #0 PREEMPT(full) [ 349.241260][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 349.241267][T17507] Call Trace: [ 349.241271][T17507] [ 349.241277][T17507] dump_stack_lvl+0xe8/0x150 [ 349.241303][T17507] should_fail_ex+0x410/0x560 [ 349.241323][T17507] should_failslab+0xa8/0x100 [ 349.241340][T17507] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 349.241360][T17507] ? __kasan_kmalloc+0x93/0xb0 [ 349.241410][T17507] ? __request_module+0x2ec/0x630 [ 349.241432][T17507] ? __request_module+0x2ec/0x630 [ 349.241446][T17507] ? __kmalloc_cache_noprof+0x148/0x600 [ 349.241461][T17507] kstrdup+0x42/0x100 [ 349.241479][T17507] __request_module+0x2ec/0x630 [ 349.241493][T17507] ? __pfx___request_module+0x10/0x10 [ 349.241505][T17507] ? kasan_quarantine_put+0xbb/0x1f0 [ 349.241520][T17507] ? __pfx___request_module+0x10/0x10 [ 349.241538][T17507] ? apparmor_capable+0x126/0x170 [ 349.241619][T17507] ? dev_load+0x21/0x1f0 [ 349.241637][T17507] dev_ioctl+0x384/0x1150 [ 349.241653][T17507] sock_do_ioctl+0x23e/0x320 [ 349.241667][T17507] ? __pfx_sock_do_ioctl+0x10/0x10 [ 349.241688][T17507] sock_ioctl+0x57a/0x7e0 [ 349.241699][T17507] ? __fget_files+0x2a/0x420 [ 349.241711][T17507] ? __pfx_sock_ioctl+0x10/0x10 [ 349.241725][T17507] ? __fget_files+0x2a/0x420 [ 349.241735][T17507] ? __fget_files+0x2a/0x420 [ 349.241748][T17507] ? bpf_lsm_file_ioctl+0x9/0x20 [ 349.241759][T17507] ? __pfx_sock_ioctl+0x10/0x10 [ 349.241770][T17507] __se_sys_ioctl+0xfc/0x170 [ 349.241786][T17507] do_syscall_64+0x166/0x520 [ 349.241801][T17507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.241812][T17507] ? clear_bhb_loop+0x70/0xc0 [ 349.241825][T17507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.241835][T17507] RIP: 0033:0x7f93ceb9f559 [ 349.241846][T17507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.241856][T17507] RSP: 002b:00007f93cfb4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.241868][T17507] RAX: ffffffffffffffda RBX: 00007f93cee25fa0 RCX: 00007f93ceb9f559 [ 349.241878][T17507] RDX: 0000200000000480 RSI: 0000000000008946 RDI: 0000000000000003 [ 349.241885][T17507] RBP: 00007f93cfb4f090 R08: 0000000000000000 R09: 0000000000000000 [ 349.241891][T17507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.241897][T17507] R13: 00007f93cee26038 R14: 00007f93cee25fa0 R15: 00007ffd64fe1938 [ 349.241914][T17507] [ 349.734365][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.034240][T17528] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 350.289599][T17543] netlink: 'syz.1.3025': attribute type 21 has an invalid length. [ 350.289685][T17543] netlink: 'syz.1.3025': attribute type 4 has an invalid length. [ 350.290307][T17543] netlink: 'syz.1.3025': attribute type 5 has an invalid length. [ 350.410528][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.410775][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.411144][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.411379][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.411513][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.637974][T17556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.745463][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.750280][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.751549][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.756849][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.757439][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.934924][T17568] netlink: 'syz.4.3032': attribute type 6 has an invalid length. [ 351.442789][T17559] wg2 speed is unknown, defaulting to 1000 [ 351.450735][T17559] lo speed is unknown, defaulting to 1000 [ 351.977948][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 352.007057][T17616] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 352.104100][T17620] netlink: 'syz.0.3051': attribute type 1 has an invalid length. [ 352.558589][T17648] __nla_validate_parse: 16 callbacks suppressed [ 352.558641][T17648] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3055'. [ 352.562714][T17649] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 352.640237][T17650] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3055'. [ 352.664135][T17611] net_ratelimit: 494 callbacks suppressed [ 352.664239][T17611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.664469][T17611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.664735][T17611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.664865][T17611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.666170][T17611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.666322][T17611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.666562][T17611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.666779][T17611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.671172][T17611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.671545][T17611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.774649][ T5635] Bluetooth: hci1: command tx timeout [ 352.921445][T17559] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.921962][T17559] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.922146][T17559] bridge_slave_0: entered allmulticast mode [ 352.945954][T17559] bridge_slave_0: entered promiscuous mode [ 352.959314][T17559] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.961159][T17559] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.961334][T17559] bridge_slave_1: entered allmulticast mode [ 352.968330][T17662] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20000 [ 352.985906][T17559] bridge_slave_1: entered promiscuous mode [ 353.072598][T17559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.088040][T17559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.135820][T17559] team0: Port device team_slave_0 added [ 353.138616][T17559] team0: Port device team_slave_1 added [ 353.183168][T17559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.183188][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.183212][T17559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.202295][T17667] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.216568][T17559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.216652][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.216677][T17559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.321098][T17559] hsr_slave_0: entered promiscuous mode [ 353.322260][T17559] hsr_slave_1: entered promiscuous mode [ 353.323013][T17559] debugfs: 'hsr0' already exists in 'hsr' [ 353.323032][T17559] Cannot create hsr debugfs directory [ 353.790365][T17678] lo speed is unknown, defaulting to 1000 [ 353.790539][T17678] lo speed is unknown, defaulting to 1000 [ 353.791414][T17678] lo speed is unknown, defaulting to 1000 [ 353.799660][T17678] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 353.799707][T17678] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 353.799770][T17678] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 353.882433][T17686] ip6_vti0: entered promiscuous mode [ 353.890612][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 353.911344][T17678] lo speed is unknown, defaulting to 1000 [ 353.915369][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 353.955513][T17678] lo speed is unknown, defaulting to 1000 [ 353.962174][T17678] lo speed is unknown, defaulting to 1000 [ 353.975331][T17682] block nbd3: Unsupported socket: should be TCP or UNIX. [ 353.985718][T17678] lo speed is unknown, defaulting to 1000 [ 353.990219][T17678] lo speed is unknown, defaulting to 1000 [ 354.081651][T17678] lo speed is unknown, defaulting to 1000 [ 354.091577][T17678] lo speed is unknown, defaulting to 1000 [ 354.098903][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3065'. [ 354.126703][T17678] lo speed is unknown, defaulting to 1000 [ 354.281945][T17559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.281980][T17559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.294104][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 354.450173][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 354.516439][T17559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.516472][T17559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.529984][T17706] netlink: 'syz.4.3067': attribute type 1 has an invalid length. [ 354.595538][T17706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3067'. [ 354.690217][T17559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.690249][T17559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.855140][ T5635] Bluetooth: hci1: command tx timeout [ 355.141501][T17559] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.183159][T17559] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.195191][T17559] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.226248][T17559] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.227221][T17559] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.275785][T17559] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.289453][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3075'. [ 355.430879][T17559] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.440490][T17559] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.494372][T17753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3077'. [ 355.536865][T17753] FAULT_INJECTION: forcing a failure. [ 355.536865][T17753] name failslab, interval 1, probability 0, space 0, times 0 [ 355.536897][T17753] CPU: 1 UID: 0 PID: 17753 Comm: syz.2.3077 Not tainted syzkaller #0 PREEMPT(full) [ 355.536917][T17753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 355.536928][T17753] Call Trace: [ 355.536935][T17753] [ 355.536944][T17753] dump_stack_lvl+0xe8/0x150 [ 355.536977][T17753] should_fail_ex+0x410/0x560 [ 355.537010][T17753] should_failslab+0xa8/0x100 [ 355.537037][T17753] __kmalloc_noprof+0xf9/0x710 [ 355.537059][T17753] ? ethnl_default_notify+0x1ab/0xb00 [ 355.537084][T17753] ? ethnl_default_notify+0x1ab/0xb00 [ 355.537115][T17753] ethnl_default_notify+0x1ab/0xb00 [ 355.537151][T17753] ? __pfx_ethnl_default_notify+0x10/0x10 [ 355.537192][T17753] ? rtnl_is_locked+0x15/0x20 [ 355.537211][T17753] ? ethnl_notify+0x1a3/0x300 [ 355.537238][T17753] ethtool_set_settings+0x3db/0x480 [ 355.537270][T17753] ? __pfx_ethtool_set_settings+0x10/0x10 [ 355.537315][T17753] ? bpf_lsm_capable+0x9/0x20 [ 355.537336][T17753] ? security_capable+0x7e/0x2c0 [ 355.537367][T17753] dev_ethtool+0x12c5/0x29e0 [ 355.537390][T17753] ? __lock_acquire+0x747/0x2de0 [ 355.537432][T17753] ? __pfx_dev_ethtool+0x10/0x10 [ 355.537457][T17753] ? kasan_quarantine_put+0xbb/0x1f0 [ 355.537483][T17753] ? lock_acquire+0x115/0x350 [ 355.537510][T17753] ? dev_load+0x21/0x1f0 [ 355.537538][T17753] ? dev_load+0x21/0x1f0 [ 355.537566][T17753] dev_ioctl+0x392/0x1150 [ 355.537597][T17753] sock_do_ioctl+0x23e/0x320 [ 355.537621][T17753] ? __pfx_sock_do_ioctl+0x10/0x10 [ 355.537659][T17753] sock_ioctl+0x57a/0x7e0 [ 355.537680][T17753] ? __fget_files+0x2a/0x420 [ 355.537698][T17753] ? __pfx_sock_ioctl+0x10/0x10 [ 355.537718][T17753] ? __fget_files+0x2a/0x420 [ 355.537738][T17753] ? __fget_files+0x2a/0x420 [ 355.537759][T17753] ? bpf_lsm_file_ioctl+0x9/0x20 [ 355.537780][T17753] ? __pfx_sock_ioctl+0x10/0x10 [ 355.537799][T17753] __se_sys_ioctl+0xfc/0x170 [ 355.537827][T17753] do_syscall_64+0x166/0x520 [ 355.537845][T17753] ? trace_irq_disable+0x3b/0x140 [ 355.537866][T17753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.537884][T17753] ? clear_bhb_loop+0x70/0xc0 [ 355.537904][T17753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.537921][T17753] RIP: 0033:0x7f075d19f559 [ 355.537940][T17753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.537955][T17753] RSP: 002b:00007f075df89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.537974][T17753] RAX: ffffffffffffffda RBX: 00007f075d425fa0 RCX: 00007f075d19f559 [ 355.537988][T17753] RDX: 0000200000000480 RSI: 0000000000008946 RDI: 0000000000000003 [ 355.537999][T17753] RBP: 00007f075df89090 R08: 0000000000000000 R09: 0000000000000000 [ 355.538011][T17753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.538022][T17753] R13: 00007f075d426038 R14: 00007f075d425fa0 R15: 00007ffcc2e3f7f8 [ 355.538053][T17753] [ 355.803565][T17755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3078'. [ 355.881473][T17559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.906387][T17559] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.928782][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.928889][ T3297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.961623][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.961735][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.161631][T17778] pim6reg: entered allmulticast mode [ 356.563624][T17796] syzkaller0: entered promiscuous mode [ 356.563647][T17796] syzkaller0: entered allmulticast mode [ 356.608063][T17794] tipc: Enabled bearer , priority 0 [ 356.632219][T17793] tipc: Resetting bearer [ 356.668196][T17793] tipc: Disabling bearer [ 356.934074][ T5635] Bluetooth: hci1: command tx timeout [ 357.030100][T17559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.111799][T17827] veth8: entered allmulticast mode [ 357.179572][T17826] veth10: entered allmulticast mode [ 357.211692][T17829] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.212268][T17829] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.213204][T17829] bridge0: entered allmulticast mode [ 357.237655][T17829] bridge_slave_1: left allmulticast mode [ 357.237715][T17829] bridge_slave_1: left promiscuous mode [ 357.239500][T17829] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.270146][T17829] bridge_slave_0: left allmulticast mode [ 357.270171][T17829] bridge_slave_0: left promiscuous mode [ 357.270375][T17829] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.411829][T17559] veth0_vlan: entered promiscuous mode [ 357.431546][T17559] veth1_vlan: entered promiscuous mode [ 357.497255][T17559] veth0_macvtap: entered promiscuous mode [ 357.513666][T17559] veth1_macvtap: entered promiscuous mode [ 357.541318][T17559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.565958][T17559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.586654][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.644219][ T814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.644715][ T814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.644750][ T814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.799182][T17864] syzkaller0: entered promiscuous mode [ 357.799197][T17864] syzkaller0: entered allmulticast mode [ 357.817138][T15831] net_ratelimit: 558 callbacks suppressed [ 357.817159][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.906508][T17866] __nla_validate_parse: 5 callbacks suppressed [ 357.906526][T17866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3100'. [ 357.907806][T17866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.909035][T17866] FAULT_INJECTION: forcing a failure. [ 357.909035][T17866] name failslab, interval 1, probability 0, space 0, times 0 [ 357.909055][T17866] CPU: 1 UID: 0 PID: 17866 Comm: syz.2.3100 Not tainted syzkaller #0 PREEMPT(full) [ 357.909067][T17866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 357.909073][T17866] Call Trace: [ 357.909078][T17866] [ 357.909083][T17866] dump_stack_lvl+0xe8/0x150 [ 357.909104][T17866] should_fail_ex+0x410/0x560 [ 357.909122][T17866] ? __alloc_skb+0x1db/0x7a0 [ 357.909212][T17866] should_failslab+0xa8/0x100 [ 357.909230][T17866] ? __alloc_skb+0x1db/0x7a0 [ 357.909242][T17866] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 357.909255][T17866] ? __alloc_skb+0x18d/0x7a0 [ 357.909269][T17866] ? __alloc_skb+0x1db/0x7a0 [ 357.909285][T17866] __alloc_skb+0x1db/0x7a0 [ 357.909301][T17866] ethnl_default_notify+0x5b8/0xb00 [ 357.909325][T17866] ? __pfx_ethnl_default_notify+0x10/0x10 [ 357.909350][T17866] ? rtnl_is_locked+0x15/0x20 [ 357.909361][T17866] ? ethnl_notify+0x1a3/0x300 [ 357.909376][T17866] ethtool_set_settings+0x3db/0x480 [ 357.909394][T17866] ? __pfx_ethtool_set_settings+0x10/0x10 [ 357.909418][T17866] ? bpf_lsm_capable+0x9/0x20 [ 357.909430][T17866] ? security_capable+0x7e/0x2c0 [ 357.909448][T17866] dev_ethtool+0x12c5/0x29e0 [ 357.909461][T17866] ? __lock_acquire+0x747/0x2de0 [ 357.909480][T17866] ? __pfx_dev_ethtool+0x10/0x10 [ 357.909496][T17866] ? kasan_quarantine_put+0xbb/0x1f0 [ 357.909511][T17866] ? lock_acquire+0x115/0x350 [ 357.909527][T17866] ? dev_load+0x21/0x1f0 [ 357.909542][T17866] ? dev_load+0x21/0x1f0 [ 357.909557][T17866] dev_ioctl+0x392/0x1150 [ 357.909574][T17866] sock_do_ioctl+0x23e/0x320 [ 357.909588][T17866] ? __pfx_sock_do_ioctl+0x10/0x10 [ 357.909608][T17866] sock_ioctl+0x57a/0x7e0 [ 357.909619][T17866] ? __fget_files+0x2a/0x420 [ 357.909630][T17866] ? __pfx_sock_ioctl+0x10/0x10 [ 357.909641][T17866] ? __fget_files+0x2a/0x420 [ 357.909651][T17866] ? __fget_files+0x2a/0x420 [ 357.909664][T17866] ? bpf_lsm_file_ioctl+0x9/0x20 [ 357.909675][T17866] ? __pfx_sock_ioctl+0x10/0x10 [ 357.909686][T17866] __se_sys_ioctl+0xfc/0x170 [ 357.909701][T17866] do_syscall_64+0x166/0x520 [ 357.909712][T17866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.909722][T17866] ? clear_bhb_loop+0x70/0xc0 [ 357.909735][T17866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.909750][T17866] RIP: 0033:0x7f075d19f559 [ 357.909777][T17866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.909792][T17866] RSP: 002b:00007f075df89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.909811][T17866] RAX: ffffffffffffffda RBX: 00007f075d425fa0 RCX: 00007f075d19f559 [ 357.909831][T17866] RDX: 0000200000000480 RSI: 0000000000008946 RDI: 0000000000000003 [ 357.909842][T17866] RBP: 00007f075df89090 R08: 0000000000000000 R09: 0000000000000000 [ 357.909854][T17866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.909864][T17866] R13: 00007f075d426038 R14: 00007f075d425fa0 R15: 00007ffcc2e3f7f8 [ 357.909892][T17866] [ 358.055821][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.014301][ T5635] Bluetooth: hci1: command tx timeout [ 359.095668][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.530515][T17797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.650376][T17872] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3103'. [ 359.667442][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.667462][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.735800][ T3297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.735821][ T3297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.758088][T17879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3104'. [ 359.808069][T17881] FAULT_INJECTION: forcing a failure. [ 359.808069][T17881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.808101][T17881] CPU: 0 UID: 0 PID: 17881 Comm: syz.0.3106 Not tainted syzkaller #0 PREEMPT(full) [ 359.808121][T17881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 359.808132][T17881] Call Trace: [ 359.808139][T17881] [ 359.808147][T17881] dump_stack_lvl+0xe8/0x150 [ 359.808181][T17881] should_fail_ex+0x410/0x560 [ 359.808212][T17881] _copy_to_user+0x31/0xb0 [ 359.808337][T17881] simple_read_from_buffer+0xe1/0x170 [ 359.808378][T17881] proc_fail_nth_read+0x1bb/0x230 [ 359.808482][T17881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.808512][T17881] ? rw_verify_area+0x24a/0x4c0 [ 359.808542][T17881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.808567][T17881] vfs_read+0x213/0xa80 [ 359.808595][T17881] ? __pfx___mutex_lock+0x10/0x10 [ 359.808657][T17881] ? __pfx_vfs_read+0x10/0x10 [ 359.808680][T17881] ? __fget_files+0x2a/0x420 [ 359.808698][T17881] ? __fget_files+0x3a2/0x420 [ 359.808717][T17881] ? __fget_files+0x2a/0x420 [ 359.808741][T17881] ? fdget+0x1ac/0x250 [ 359.808768][T17881] ksys_read+0x150/0x270 [ 359.808793][T17881] ? __pfx_ksys_read+0x10/0x10 [ 359.808828][T17881] do_syscall_64+0x166/0x520 [ 359.808845][T17881] ? trace_irq_disable+0x3b/0x140 [ 359.808866][T17881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.808886][T17881] ? clear_bhb_loop+0x70/0xc0 [ 359.808909][T17881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.808928][T17881] RIP: 0033:0x7f93ceb5fd8e [ 359.808946][T17881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.808961][T17881] RSP: 002b:00007f93cfb4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.808982][T17881] RAX: ffffffffffffffda RBX: 00007f93cfb4f6c0 RCX: 00007f93ceb5fd8e [ 359.808996][T17881] RDX: 000000000000000f RSI: 00007f93cfb4f0a0 RDI: 0000000000000005 [ 359.809008][T17881] RBP: 00007f93cfb4f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.809020][T17881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.809031][T17881] R13: 00007f93cee26038 R14: 00007f93cee25fa0 R15: 00007ffd64fe1938 [ 359.809063][T17881] [ 360.136030][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.308860][T17899] bond15: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 360.328972][T17899] bond15 (unregistering): Released all slaves [ 360.724222][T17913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3113'. [ 360.765143][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.772044][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.773007][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.800498][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.802927][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.854225][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.917346][T17923] netlink: 'syz.1.3117': attribute type 62 has an invalid length. [ 361.055034][T17927] bridge0: entered promiscuous mode [ 361.055062][T17927] bridge0: entered allmulticast mode [ 361.180103][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.212835][T17941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3121'. [ 361.281806][T17943] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 361.466917][T17947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3124'. [ 361.466954][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3124'. [ 361.574771][T17957] FAULT_INJECTION: forcing a failure. [ 361.574771][T17957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.574818][T17957] CPU: 0 UID: 0 PID: 17957 Comm: syz.3.3127 Not tainted syzkaller #0 PREEMPT(full) [ 361.574837][T17957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 361.574854][T17957] Call Trace: [ 361.574860][T17957] [ 361.574868][T17957] dump_stack_lvl+0xe8/0x150 [ 361.574899][T17957] should_fail_ex+0x410/0x560 [ 361.574927][T17957] _copy_from_user+0x2d/0xb0 [ 361.574951][T17957] __sys_bpf+0x2e7/0xd90 [ 361.575002][T17957] ? __pfx___sys_bpf+0x10/0x10 [ 361.575034][T17957] ? __fget_files+0x2a/0x420 [ 361.575068][T17957] ? ksys_write+0x242/0x270 [ 361.575089][T17957] ? __pfx_ksys_write+0x10/0x10 [ 361.575112][T17957] __x64_sys_bpf+0xba/0xd0 [ 361.575134][T17957] do_syscall_64+0x166/0x520 [ 361.575150][T17957] ? trace_irq_disable+0x3b/0x140 [ 361.575176][T17957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.575193][T17957] ? clear_bhb_loop+0x70/0xc0 [ 361.575213][T17957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.575229][T17957] RIP: 0033:0x7febb8f9f559 [ 361.575245][T17957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.575259][T17957] RSP: 002b:00007febb9da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.575277][T17957] RAX: ffffffffffffffda RBX: 00007febb9225fa0 RCX: 00007febb8f9f559 [ 361.575289][T17957] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 361.575300][T17957] RBP: 00007febb9da0090 R08: 0000000000000000 R09: 0000000000000000 [ 361.575310][T17957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.575320][T17957] R13: 00007febb9226038 R14: 00007febb9225fa0 R15: 00007fffcfaa1ab8 [ 361.575349][T17957] [ 361.740268][T17917] wg2 speed is unknown, defaulting to 1000 [ 361.754193][T17917] lo speed is unknown, defaulting to 1000 [ 361.877882][T17961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 361.941983][T17964] ip6gre1: entered promiscuous mode [ 361.942013][T17964] ip6gre1: entered allmulticast mode [ 361.981060][T17961] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.214334][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.280305][T17982] x_tables: unsorted entry at hook 1 [ 362.362712][T17917] lo speed is unknown, defaulting to 1000 [ 362.583323][T17990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3137'. [ 362.855604][ T5635] Bluetooth: hci2: command tx timeout [ 363.012410][T18004] 8021q: VLANs not supported on vxcan0 [ 363.255299][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.255372][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.298806][T18021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3146'. [ 363.348571][T18021] 8021q: adding VLAN 0 to HW filter on device bond15 [ 363.369367][T18019] netlink: 'syz.0.3146': attribute type 1 has an invalid length. [ 363.369816][T17917] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.369988][T17917] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.370176][T17917] bridge_slave_0: entered allmulticast mode [ 363.372020][T17917] bridge_slave_0: entered promiscuous mode [ 363.375774][T17917] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.375945][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.376417][T17917] bridge_slave_1: entered allmulticast mode [ 363.378135][T17917] bridge_slave_1: entered promiscuous mode [ 363.426890][T17917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.436294][T17917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.572579][T17917] team0: Port device team_slave_0 added [ 363.584821][T17917] team0: Port device team_slave_1 added [ 363.679305][T17917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.679323][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.679347][T17917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.681354][T17917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.681370][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.681393][T17917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.730502][T18034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3150'. [ 363.859006][T17917] hsr_slave_0: entered promiscuous mode [ 363.866263][T17917] hsr_slave_1: entered promiscuous mode [ 363.869586][T17917] debugfs: 'hsr0' already exists in 'hsr' [ 363.869610][T17917] Cannot create hsr debugfs directory [ 363.898225][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.284941][ T5635] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 364.298469][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.304401][T18052] netlink: 'syz.4.3155': attribute type 23 has an invalid length. [ 364.304430][T18052] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.304565][T18052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.304576][T18052] IPv6: NLM_F_CREATE should be set when creating new route [ 364.306435][T18054] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3156'. [ 364.514245][T18064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3159'. [ 364.822209][T17917] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.935120][ T5635] Bluetooth: hci2: command tx timeout [ 365.334269][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.601566][T18102] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3169'. [ 366.376105][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.934373][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.014233][ T5635] Bluetooth: hci2: command tx timeout [ 367.415198][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.460514][T18100] tipc: Enabling of bearer rejected, failed to enable media [ 367.497050][T17917] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.599760][T17917] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.853418][T17917] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.900801][T18117] No such timeout policy "syz1" [ 368.005940][T18129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3177'. [ 368.158937][T18136] ip_tables: iptables: counters copy to user failed while replacing table [ 368.211188][T18137] syzkaller1: entered promiscuous mode [ 368.211211][T18137] syzkaller1: entered allmulticast mode [ 368.232608][T18142] ip_tables: iptables: counters copy to user failed while replacing table [ 368.455505][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.473318][T18152] tap0: tun_chr_ioctl cmd 21731 [ 368.824241][T17917] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.837619][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.838974][T17917] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.870467][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.871834][T17917] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.913570][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.926111][T17917] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.931027][T18179] netlink: 'syz.4.3187': attribute type 12 has an invalid length. [ 368.931048][T18179] netlink: 'syz.4.3187': attribute type 5 has an invalid length. [ 368.945315][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.983707][T18187] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3188'. [ 369.015151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.096401][ T5635] Bluetooth: hci2: command tx timeout [ 369.189529][ T3313] IPVS: starting estimator thread 0... [ 369.195943][T17917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.238172][T17917] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.250433][T18203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3192'. [ 369.260727][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.260859][ T3313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.274863][T18200] IPVS: using max 29 ests per chain, 69600 per kthread [ 369.280828][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.280939][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.400144][T18207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3195'. [ 369.495315][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.631387][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3197'. [ 369.631427][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3197'. [ 369.668264][T18223] tc_dump_action: action bad kind [ 369.720402][T18227] netlink: 'syz.1.3196': attribute type 8 has an invalid length. [ 369.974048][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.336551][T18253] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3205'. [ 370.471554][T17917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.536508][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.568198][T17917] veth0_vlan: entered promiscuous mode [ 370.621426][T17917] veth1_vlan: entered promiscuous mode [ 370.678972][T17917] veth0_macvtap: entered promiscuous mode [ 370.706652][T17917] veth1_macvtap: entered promiscuous mode [ 370.747119][T17917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.768352][T17917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.829997][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.832392][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.832444][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.832477][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.847759][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'. [ 370.847785][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'. [ 370.966168][ T3297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.966191][ T3297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.078975][ T7275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.078996][ T7275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.391123][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 371.535732][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3217'. [ 371.579909][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.580101][ T2021] block nbd4: Possible stuck request ffff888028980000: control (read@0,1024B). Runtime 60 seconds [ 371.580137][ T2021] block nbd4: Possible stuck request ffff8880289801c0: control (read@1024,1024B). Runtime 60 seconds [ 371.580161][ T2021] block nbd4: Possible stuck request ffff888028980380: control (read@2048,2048B). Runtime 60 seconds [ 371.905202][T18308] ip6gre1: entered promiscuous mode [ 371.905227][T18308] ip6gre1: entered allmulticast mode [ 372.214950][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 372.615067][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.815367][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.829197][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.837091][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.845748][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.846477][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.914531][T15820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.014437][T15825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.655732][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.920131][T18369] syzkaller0: entered promiscuous mode [ 373.920153][T18369] syzkaller0: entered allmulticast mode [ 374.012955][T18372] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 374.186712][T18379] FAULT_INJECTION: forcing a failure. [ 374.186712][T18379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.186744][T18379] CPU: 1 UID: 0 PID: 18379 Comm: syz.4.3239 Not tainted syzkaller #0 PREEMPT(full) [ 374.186765][T18379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 374.186776][T18379] Call Trace: [ 374.186784][T18379] [ 374.186793][T18379] dump_stack_lvl+0xe8/0x150 [ 374.186827][T18379] should_fail_ex+0x410/0x560 [ 374.186857][T18379] _copy_from_user+0x2d/0xb0 [ 374.186883][T18379] generic_map_update_batch+0x6b1/0xad0 [ 374.186916][T18379] ? __pfx_generic_map_update_batch+0x10/0x10 [ 374.186935][T18379] ? __fget_files+0x3a2/0x420 [ 374.186954][T18379] ? __fget_files+0x2a/0x420 [ 374.186979][T18379] ? fdget+0x1ac/0x250 [ 374.186998][T18379] ? __pfx_generic_map_update_batch+0x10/0x10 [ 374.187026][T18379] bpf_map_do_batch+0x391/0x630 [ 374.187058][T18379] __sys_bpf+0xbe5/0xd90 [ 374.187090][T18379] ? __pfx___sys_bpf+0x10/0x10 [ 374.187126][T18379] ? __fget_files+0x2a/0x420 [ 374.187164][T18379] ? ksys_write+0x242/0x270 [ 374.187189][T18379] ? __pfx_ksys_write+0x10/0x10 [ 374.187217][T18379] __x64_sys_bpf+0xba/0xd0 [ 374.187243][T18379] do_syscall_64+0x166/0x520 [ 374.187261][T18379] ? trace_irq_disable+0x3b/0x140 [ 374.187284][T18379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.187303][T18379] ? clear_bhb_loop+0x70/0xc0 [ 374.187327][T18379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.187345][T18379] RIP: 0033:0x7fcdbed9f559 [ 374.187363][T18379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.187378][T18379] RSP: 002b:00007fcdbfbbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.187400][T18379] RAX: ffffffffffffffda RBX: 00007fcdbf025fa0 RCX: 00007fcdbed9f559 [ 374.187414][T18379] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 374.187426][T18379] RBP: 00007fcdbfbbc090 R08: 0000000000000000 R09: 0000000000000000 [ 374.187438][T18379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.187450][T18379] R13: 00007fcdbf026038 R14: 00007fcdbf025fa0 R15: 00007ffd184756a8 [ 374.187482][T18379] [ 374.493230][T18333] wg2 speed is unknown, defaulting to 1000 [ 374.500013][T18333] lo speed is unknown, defaulting to 1000 [ 374.652031][T18391] __nla_validate_parse: 4 callbacks suppressed [ 374.652052][T18391] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3242'. [ 374.652065][T18391] tc_dump_action: action bad kind [ 374.695449][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.936126][ T5635] Bluetooth: hci3: command tx timeout [ 374.967361][T18404] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3245'. [ 375.224080][T18407] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 375.489641][T18417] FAULT_INJECTION: forcing a failure. [ 375.489641][T18417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.489675][T18417] CPU: 1 UID: 0 PID: 18417 Comm: syz.2.3251 Not tainted syzkaller #0 PREEMPT(full) [ 375.489696][T18417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 375.489708][T18417] Call Trace: [ 375.489715][T18417] [ 375.489723][T18417] dump_stack_lvl+0xe8/0x150 [ 375.489755][T18417] should_fail_ex+0x410/0x560 [ 375.489783][T18417] _copy_from_user+0x2d/0xb0 [ 375.489809][T18417] generic_map_update_batch+0x662/0xad0 [ 375.489845][T18417] ? __pfx_generic_map_update_batch+0x10/0x10 [ 375.489863][T18417] ? __fget_files+0x3a2/0x420 [ 375.489882][T18417] ? __fget_files+0x2a/0x420 [ 375.489903][T18417] ? fdget+0x1ac/0x250 [ 375.489929][T18417] ? __pfx_generic_map_update_batch+0x10/0x10 [ 375.489948][T18417] bpf_map_do_batch+0x391/0x630 [ 375.489978][T18417] __sys_bpf+0xbe5/0xd90 [ 375.490009][T18417] ? __pfx___sys_bpf+0x10/0x10 [ 375.490043][T18417] ? __fget_files+0x2a/0x420 [ 375.490079][T18417] ? ksys_write+0x242/0x270 [ 375.490103][T18417] ? __pfx_ksys_write+0x10/0x10 [ 375.490131][T18417] __x64_sys_bpf+0xba/0xd0 [ 375.490156][T18417] do_syscall_64+0x166/0x520 [ 375.490174][T18417] ? trace_irq_disable+0x3b/0x140 [ 375.490195][T18417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.490214][T18417] ? clear_bhb_loop+0x70/0xc0 [ 375.490236][T18417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.490254][T18417] RIP: 0033:0x7fc166b9f559 [ 375.490272][T18417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.490287][T18417] RSP: 002b:00007fc167a40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.490307][T18417] RAX: ffffffffffffffda RBX: 00007fc166e25fa0 RCX: 00007fc166b9f559 [ 375.490320][T18417] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 375.490332][T18417] RBP: 00007fc167a40090 R08: 0000000000000000 R09: 0000000000000000 [ 375.490344][T18417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.490355][T18417] R13: 00007fc166e26038 R14: 00007fc166e25fa0 R15: 00007fff29573d28 [ 375.490387][T18417] [ 375.734802][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.890000][T18428] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3256'. [ 375.920950][ T3313] bond6 (unregistering): (slave gretap1): Releasing active interface [ 376.056450][T15825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.139250][ T3313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.143165][ T3313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.164765][ T3313] bond0 (unregistering): Released all slaves [ 376.169407][ T3313] bond1 (unregistering): Released all slaves [ 376.191564][ T3313] bond2 (unregistering): Released all slaves [ 376.206209][ T3313] bond3 (unregistering): Released all slaves [ 376.221941][ T3313] bond4 (unregistering): Released all slaves [ 376.244703][ T3313] bond5 (unregistering): Released all slaves [ 376.261288][ T3313] bond6 (unregistering): Released all slaves [ 376.277521][ T3313] bond7 (unregistering): Released all slaves [ 376.291928][ T3313] bond8 (unregistering): Released all slaves [ 376.317147][ T3313] bond9 (unregistering): (slave veth3): Releasing active interface [ 376.318482][ T3313] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 376.319159][ T3313] bond9 (unregistering): Released all slaves [ 376.356801][ T3313] bond10 (unregistering): Released all slaves [ 376.372501][ T3313] bond11 (unregistering): (slave lo): Releasing backup interface [ 376.372906][ T3313] bond11 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 376.373141][ T3313] bond11 (unregistering): Released all slaves [ 376.391154][ T3313] bond12 (unregistering): Released all slaves [ 376.411924][ T3313] bond13 (unregistering): Released all slaves [ 376.428870][ T3313] bond14 (unregistering): Released all slaves [ 376.440084][ T3313] bond15 (unregistering): Released all slaves [ 376.452086][T18333] lo speed is unknown, defaulting to 1000 [ 376.467828][T18412] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 376.472208][T18424] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3254'. [ 376.472232][T18424] tc_dump_action: action bad kind [ 376.527257][T15825] infiniband syz1: ib_query_port failed (-19) [ 376.610049][T18087] smbdirect: ib_dev[syz1] removed [ 376.777132][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.811745][T18442] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 377.015017][ T5635] Bluetooth: hci3: command tx timeout [ 377.017398][ T3313] tipc: Disabling bearer [ 377.037825][ T3313] tipc: Left network mode [ 377.177720][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3262'. [ 377.185763][T18453] syzkaller0: entered promiscuous mode [ 377.185787][T18453] syzkaller0: entered allmulticast mode [ 377.519404][T18477] netlink: 'syz.3.3264': attribute type 16 has an invalid length. [ 377.519427][T18477] netlink: 'syz.3.3264': attribute type 17 has an invalid length. [ 377.819065][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.854298][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.100830][ T5635] Bluetooth: hci3: command tx timeout [ 379.100990][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.899944][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.439441][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 380.467474][T18494] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3268'. [ 380.467499][T18494] tc_dump_action: action bad kind [ 380.771258][T18504] geneve2: entered promiscuous mode [ 380.909939][T18515] netlink: 'syz.4.3272': attribute type 1 has an invalid length. [ 380.934611][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.030689][T18521] netlink: 'syz.2.3273': attribute type 1 has an invalid length. [ 381.174587][ T5635] Bluetooth: hci3: command tx timeout [ 381.342583][T18515] bond1: entered promiscuous mode [ 381.349600][T18515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.371224][T18333] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.372523][T18333] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.372723][T18333] bridge_slave_0: entered allmulticast mode [ 381.425364][T18333] bridge_slave_0: entered promiscuous mode [ 381.606470][T18333] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.607475][T18333] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.607639][T18333] bridge_slave_1: entered allmulticast mode [ 381.620671][T18333] bridge_slave_1: entered promiscuous mode [ 381.974958][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.134649][T15820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.194039][ T3313] team_slave_1 (unregistering): left promiscuous mode [ 382.194068][ T3313] team_slave_1 (unregistering): left allmulticast mode [ 382.195884][ T3313] team0 (unregistering): Port device team_slave_1 removed [ 382.242776][ T3313] team_slave_0 (unregistering): left promiscuous mode [ 382.242802][ T3313] team_slave_0 (unregistering): left allmulticast mode [ 382.254339][ T3313] team0 (unregistering): Port device team_slave_0 removed [ 382.405921][ T3313] dummy0 (unregistering): left promiscuous mode [ 382.405975][ T3313] dummy0 (unregistering): left allmulticast mode [ 382.407589][ T3313] team0 (unregistering): Port device dummy0 removed [ 382.439383][ T3297] smc: removing ib device syz0 [ 382.455559][T15829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.502190][ T3297] smbdirect: ib_dev[syz0] removed [ 382.546821][T18333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.626626][T18550] ip6gretap2: entered allmulticast mode [ 382.642553][T18550] batman_adv: batadv0: Adding interface: ip6gretap2 [ 382.642571][T18550] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.642601][T18550] batman_adv: batadv0: Interface activated: ip6gretap2 [ 382.842897][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 382.865217][T18333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.990391][T18560] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3280'. [ 382.990414][T18560] tc_dump_action: action bad kind [ 383.014751][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.176865][T18333] team0: Port device team_slave_0 added [ 383.232378][T18333] team0: Port device team_slave_1 added [ 383.311224][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3283'. [ 383.331358][T18571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.405562][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3284'. [ 383.436985][T18571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.482715][T18581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.634929][T18585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.832800][T18596] netlink: 'syz.1.3287': attribute type 1 has an invalid length. [ 383.900839][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.912382][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.949390][T18600] FAULT_INJECTION: forcing a failure. [ 383.949390][T18600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.949424][T18600] CPU: 0 UID: 0 PID: 18600 Comm: syz.3.3288 Not tainted syzkaller #0 PREEMPT(full) [ 383.949445][T18600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 383.949457][T18600] Call Trace: [ 383.949464][T18600] [ 383.949473][T18600] dump_stack_lvl+0xe8/0x150 [ 383.949507][T18600] should_fail_ex+0x410/0x560 [ 383.949540][T18600] _copy_from_user+0x2d/0xb0 [ 383.949564][T18600] generic_map_update_batch+0x662/0xad0 [ 383.949596][T18600] ? __pfx_generic_map_update_batch+0x10/0x10 [ 383.949614][T18600] ? __fget_files+0x3a2/0x420 [ 383.949632][T18600] ? __fget_files+0x2a/0x420 [ 383.949655][T18600] ? fdget+0x1ac/0x250 [ 383.949674][T18600] ? __pfx_generic_map_update_batch+0x10/0x10 [ 383.949694][T18600] bpf_map_do_batch+0x391/0x630 [ 383.949724][T18600] __sys_bpf+0xbe5/0xd90 [ 383.949754][T18600] ? __pfx___sys_bpf+0x10/0x10 [ 383.949790][T18600] ? __fget_files+0x2a/0x420 [ 383.949825][T18600] ? ksys_write+0x242/0x270 [ 383.949848][T18600] ? __pfx_ksys_write+0x10/0x10 [ 383.949873][T18600] __x64_sys_bpf+0xba/0xd0 [ 383.949907][T18600] do_syscall_64+0x166/0x520 [ 383.949926][T18600] ? trace_irq_disable+0x3b/0x140 [ 383.949947][T18600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.949966][T18600] ? clear_bhb_loop+0x70/0xc0 [ 383.949990][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.950009][T18600] RIP: 0033:0x7febb8f9f559 [ 383.950027][T18600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.950042][T18600] RSP: 002b:00007febb9da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.950065][T18600] RAX: ffffffffffffffda RBX: 00007febb9225fa0 RCX: 00007febb8f9f559 [ 383.950079][T18600] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 383.950090][T18600] RBP: 00007febb9da0090 R08: 0000000000000000 R09: 0000000000000000 [ 383.950102][T18600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.950111][T18600] R13: 00007febb9226038 R14: 00007febb9225fa0 R15: 00007fffcfaa1ab8 [ 383.950143][T18600] [ 384.061850][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.120726][T18333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.120745][T18333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.120770][T18333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.260895][T18596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.395987][T18598] bond2: (slave dummy0): making interface the new active one [ 384.396973][T18598] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 384.463377][T18333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.463396][T18333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.463422][T18333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.023957][T18616] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3292'. [ 385.023979][T18616] tc_dump_action: action bad kind [ 385.094342][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.179225][T15825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.388109][T18333] hsr_slave_0: entered promiscuous mode [ 385.402893][T18333] hsr_slave_1: entered promiscuous mode [ 385.403486][T18333] debugfs: 'hsr0' already exists in 'hsr' [ 385.403507][T18333] Cannot create hsr debugfs directory [ 385.430437][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 385.499476][ T4996] udevd[4996]: worker [15935] /devices/virtual/block/nbd4 is taking a long time [ 385.718671][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3297'. [ 386.115975][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3297'. [ 386.135692][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.373398][T18670] bridge_slave_1: default FDB implementation only supports local addresses [ 386.456354][T18658] wg2 speed is unknown, defaulting to 1000 [ 386.671657][T18658] lo speed is unknown, defaulting to 1000 [ 386.838893][T18684] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3306'. [ 386.857011][T18682] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3304'. [ 386.857031][T18682] tc_dump_action: action bad kind [ 387.173992][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.258690][T18661] xt_nat: multiple ranges no longer supported [ 387.260062][T18661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3300'. [ 387.459252][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3309'. [ 388.215778][T15820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.217145][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.854549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.254053][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.621497][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5 [ 389.982008][T18724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3312'. [ 390.056635][ T3313] IPVS: stop unused estimator thread 0... [ 390.300088][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.448382][T18742] netlink: 'syz.3.3315': attribute type 1 has an invalid length. [ 390.635381][T18747] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3317'. [ 390.635406][T18747] tc_dump_action: action bad kind [ 391.113455][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3321'. [ 391.249439][T18333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 391.264381][T15829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.280089][T18333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.335936][T18333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 391.343537][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.434247][T18333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.437257][T18333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 391.457656][T18783] netlink: 'syz.1.3325': attribute type 11 has an invalid length. [ 391.472208][T18333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.481579][T18775] xfrm0: entered allmulticast mode [ 391.488224][T18775] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 391.543538][T18333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 391.557159][T18333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.711719][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3328'. [ 391.743582][T18790] gtp0: entered promiscuous mode [ 391.743606][T18790] gtp0: entered allmulticast mode [ 391.839475][T18811] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3329'. [ 391.839500][T18811] tc_dump_action: action bad kind [ 391.950499][T18817] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 391.969190][T18817] bond3 (unregistering): Released all slaves [ 392.061028][T15825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.101582][T18333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.141988][T18333] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.175896][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.176007][ T7274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.213230][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.213347][ T7274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.295792][T18831] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3335'. [ 392.376135][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.526197][T18838] veth0: entered promiscuous mode [ 392.632717][T18836] veth0: left promiscuous mode [ 392.895188][T18862] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3343'. [ 392.895212][T18862] tc_dump_action: action bad kind [ 393.414610][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.822190][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'. [ 394.233100][T18907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.234685][T18907] bridge0: port 3(bond1) entered blocking state [ 394.234853][T18907] bridge0: port 3(bond1) entered disabled state [ 394.234995][T18907] bond1: entered allmulticast mode [ 394.237399][T18907] bond1: entered promiscuous mode [ 394.238126][T18907] bridge0: port 3(bond1) entered blocking state [ 394.238272][T18907] bridge0: port 3(bond1) entered forwarding state [ 394.283074][ T62] bridge0: port 3(bond1) entered disabled state [ 394.298345][T15829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.438564][T18920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.466502][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.478302][T18926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3353'. [ 394.537769][T18333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.673114][T18930] bond2 (unregistering): Released all slaves [ 394.682281][T18937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3353'. [ 394.859901][T18938] syzkaller0: entered promiscuous mode [ 394.859927][T18938] syzkaller0: entered allmulticast mode [ 394.987616][T18333] veth0_vlan: entered promiscuous mode [ 395.030966][T18333] veth1_vlan: entered promiscuous mode [ 395.142380][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3353'. [ 395.505212][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.555895][T18955] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3356'. [ 395.555918][T18955] tc_dump_action: action bad kind [ 395.562302][T18333] veth0_macvtap: entered promiscuous mode [ 395.592530][T18333] veth1_macvtap: entered promiscuous mode [ 395.702849][T18333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.763038][T18333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.907607][ T3313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.907685][ T3313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.945505][ T814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.947082][ T7271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.269713][ T814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.269736][ T814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.418687][ T7274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.418709][ T7274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.535750][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.119069][T19020] netlink: 964 bytes leftover after parsing attributes in process `syz.0.3226'. [ 397.124657][T19020] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 397.334621][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.415916][T19040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3367'. [ 397.418470][T19040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3367'. [ 397.576996][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.758742][T19044] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3368'. [ 397.758768][T19044] tc_dump_action: action bad kind [ 397.942611][T19047] netlink: 'syz.1.3369': attribute type 1 has an invalid length. [ 398.037558][T19047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.103250][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 398.147559][T19052] bond3: (slave gretap1): making interface the new active one [ 398.149573][T19052] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 398.617007][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.725438][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3378'. [ 398.725636][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3378'. [ 398.725829][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3378'. [ 398.726018][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3378'. [ 398.726192][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3378'. [ 398.787506][T19091] tc_dump_action: action bad kind [ 399.156102][T19103] FAULT_INJECTION: forcing a failure. [ 399.156102][T19103] name failslab, interval 1, probability 0, space 0, times 0 [ 399.156134][T19103] CPU: 0 UID: 0 PID: 19103 Comm: syz.3.3382 Not tainted syzkaller #0 PREEMPT(full) [ 399.156155][T19103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 399.156166][T19103] Call Trace: [ 399.156174][T19103] [ 399.156182][T19103] dump_stack_lvl+0xe8/0x150 [ 399.156216][T19103] should_fail_ex+0x410/0x560 [ 399.156250][T19103] should_failslab+0xa8/0x100 [ 399.156280][T19103] __kvmalloc_node_noprof+0x171/0x820 [ 399.156303][T19103] ? netdev_alloc_config+0x4f/0xc0 [ 399.156409][T19103] ? netdev_alloc_config+0x4f/0xc0 [ 399.156431][T19103] ? alloc_netdev_mqs+0xd5b/0x1240 [ 399.156484][T19103] ? alloc_netdev_mqs+0xd5b/0x1240 [ 399.156512][T19103] alloc_netdev_mqs+0xd5b/0x1240 [ 399.156541][T19103] rtnl_create_link+0x321/0xd70 [ 399.156571][T19103] rtnl_newlink_create+0x258/0x7b0 [ 399.156625][T19103] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 399.156648][T19103] ? __pfx___mutex_lock+0x10/0x10 [ 399.156679][T19103] ? ns_capable+0x84/0xe0 [ 399.156724][T19103] rtnl_newlink+0x167a/0x1c30 [ 399.156767][T19103] ? __pfx_rtnl_newlink+0x10/0x10 [ 399.156799][T19103] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 399.156847][T19103] ? netlink_deliver_tap+0x19c/0x1b0 [ 399.156867][T19103] ? netlink_unicast+0x8c1/0xa80 [ 399.156885][T19103] ? netlink_sendmsg+0x7f0/0xb20 [ 399.156906][T19103] ? sock_sendmsg_nosec+0x14e/0x190 [ 399.156926][T19103] ? ____sys_sendmsg+0x54e/0x850 [ 399.156977][T19103] ? ___sys_sendmsg+0x2a5/0x360 [ 399.157002][T19103] ? __x64_sys_sendmsg+0x1b1/0x290 [ 399.157018][T19103] ? do_syscall_64+0x166/0x520 [ 399.157035][T19103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.157093][T19103] ? kasan_quarantine_put+0xbb/0x1f0 [ 399.157117][T19103] ? lockdep_hardirqs_on+0x7b/0x110 [ 399.157139][T19103] ? nlmon_xmit+0xb0/0x100 [ 399.157209][T19103] ? kmem_cache_free+0x182/0x650 [ 399.157242][T19103] ? __lock_acquire+0x747/0x2de0 [ 399.157270][T19103] ? __pfx_hook_capable+0x10/0x10 [ 399.157383][T19103] ? __dev_queue_xmit+0x29b/0x3920 [ 399.157435][T19103] ? __pfx_hook_capable+0x10/0x10 [ 399.157458][T19103] ? lockdep_hardirqs_on+0x7b/0x110 [ 399.157504][T19103] ? __pfx_rtnl_newlink+0x10/0x10 [ 399.157529][T19103] rtnetlink_rcv_msg+0x802/0xc00 [ 399.157560][T19103] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 399.157586][T19103] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.157615][T19103] ? __copy_skb_header+0xa3/0x4a0 [ 399.157674][T19103] netlink_rcv_skb+0x226/0x4a0 [ 399.157698][T19103] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.157726][T19103] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.157763][T19103] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.157793][T19103] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.157822][T19103] netlink_unicast+0x8ef/0xa80 [ 399.157862][T19103] netlink_sendmsg+0x7f0/0xb20 [ 399.157892][T19103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.157920][T19103] ? aa_sock_msg_perm+0x144/0x210 [ 399.157976][T19103] ? apparmor_socket_sendmsg+0x98/0x360 [ 399.157999][T19103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.158026][T19103] sock_sendmsg_nosec+0x14e/0x190 [ 399.158051][T19103] ____sys_sendmsg+0x54e/0x850 [ 399.158085][T19103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.158118][T19103] ? import_iovec+0x73/0xa0 [ 399.158175][T19103] ___sys_sendmsg+0x2a5/0x360 [ 399.158198][T19103] ? __lock_acquire+0x747/0x2de0 [ 399.158222][T19103] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.158280][T19103] ? __fget_files+0x3a2/0x420 [ 399.158298][T19103] ? __fget_files+0x2a/0x420 [ 399.158325][T19103] __x64_sys_sendmsg+0x1b1/0x290 [ 399.158345][T19103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.158392][T19103] do_syscall_64+0x166/0x520 [ 399.158409][T19103] ? trace_irq_disable+0x3b/0x140 [ 399.158428][T19103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.158445][T19103] ? clear_bhb_loop+0x70/0xc0 [ 399.158467][T19103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.158484][T19103] RIP: 0033:0x7febb8f9f559 [ 399.158502][T19103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.158516][T19103] RSP: 002b:00007febb9da0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.158536][T19103] RAX: ffffffffffffffda RBX: 00007febb9225fa0 RCX: 00007febb8f9f559 [ 399.158548][T19103] RDX: 0000000004000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 399.158558][T19103] RBP: 00007febb9da0090 R08: 0000000000000000 R09: 0000000000000000 [ 399.158568][T19103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.158578][T19103] R13: 00007febb9226038 R14: 00007febb9225fa0 R15: 00007fffcfaa1ab8 [ 399.158607][T19103] [ 399.654421][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.688582][T19111] Bluetooth: MGMT ver 1.23 [ 399.736245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.997631][T19126] tc_dump_action: action bad kind [ 400.192160][T19130] bridge0: port 1(veth0) entered blocking state [ 400.192397][T19130] bridge0: port 1(veth0) entered disabled state [ 400.192581][T19130] veth0: entered allmulticast mode [ 400.218560][T19130] veth0: entered promiscuous mode [ 400.221238][T19130] bridge0: port 1(veth0) entered blocking state [ 400.221352][T19130] bridge0: port 1(veth0) entered forwarding state [ 400.376184][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.523943][T19130] bridge0: port 1(veth0) entered disabled state [ 400.662718][T19130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.672158][T19130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.694455][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.167837][T19160] netlink: 'syz.3.3402': attribute type 10 has an invalid length. [ 401.202090][T19160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.213203][T19160] team0: Port device netdevsim1 added [ 401.257646][T19163] ip6gretap0: entered promiscuous mode [ 401.301782][T19169] tc_dump_action: action bad kind [ 401.305326][ T814] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.305370][ T814] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.305401][ T814] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.305432][ T814] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.593934][T19180] syzkaller1: entered promiscuous mode [ 401.593956][T19180] syzkaller1: entered allmulticast mode [ 401.720238][T15820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.720660][ T2021] block nbd4: Possible stuck request ffff888028980000: control (read@0,1024B). Runtime 90 seconds [ 401.720701][ T2021] block nbd4: Possible stuck request ffff8880289801c0: control (read@1024,1024B). Runtime 90 seconds [ 401.720727][ T2021] block nbd4: Possible stuck request ffff888028980380: control (read@2048,2048B). Runtime 90 seconds [ 401.747364][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.286931][T19207] __nla_validate_parse: 35 callbacks suppressed [ 402.286952][T19207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 402.333431][T19209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3413'. [ 402.353941][T19209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.532986][T19215] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3415'. [ 402.533008][T19215] tc_dump_action: action bad kind [ 402.647236][T19221] ip6gre1: entered promiscuous mode [ 402.647259][T19221] ip6gre1: entered allmulticast mode [ 402.775853][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.186366][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3423'. [ 403.187907][T19242] sctp: [Deprecated]: syz.0.3423 (pid 19242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.187907][T19242] Use struct sctp_sack_info instead [ 403.333253][T19245] batman_adv: batadv0: Adding interface: syzkaller0 [ 403.333272][T19245] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.333301][T19245] batman_adv: batadv0: Interface activated: syzkaller0 [ 403.414228][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.508225][T19244] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 403.522818][T19247] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3425'. [ 403.539813][T19244] batman_adv: batadv0: Removing interface: syzkaller0 [ 403.551281][T19247] bridge0: left allmulticast mode [ 403.552535][T19250] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3426'. [ 403.799053][T19258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3428'. [ 403.830952][ T1771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.896983][T18087] IPVS: starting estimator thread 0... [ 403.976640][T19261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.977408][T19261] bridge0: port 3(bond1) entered blocking state [ 403.979406][T19261] bridge0: port 3(bond1) entered disabled state [ 403.979563][T19261] bond1: entered allmulticast mode [ 403.984908][T19261] bond1: entered promiscuous mode [ 403.987346][T19261] bridge0: port 3(bond1) entered blocking state [ 403.987464][T19261] bridge0: port 3(bond1) entered forwarding state [ 404.004268][T19262] IPVS: using max 31 ests per chain, 74400 per kthread [ 404.308640][ T3313] bridge0: port 3(bond1) entered disabled state [ 404.347057][T19275] FAULT_INJECTION: forcing a failure. [ 404.347057][T19275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.347089][T19275] CPU: 1 UID: 0 PID: 19275 Comm: syz.0.3433 Not tainted syzkaller #0 PREEMPT(full) [ 404.347110][T19275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 404.347122][T19275] Call Trace: [ 404.347129][T19275] [ 404.347138][T19275] dump_stack_lvl+0xe8/0x150 [ 404.347171][T19275] should_fail_ex+0x410/0x560 [ 404.347203][T19275] _copy_from_iter+0x1d3/0x1660 [ 404.347227][T19275] ? __alloc_skb+0x27a/0x7a0 [ 404.347254][T19275] ? __alloc_skb+0x27a/0x7a0 [ 404.347280][T19275] ? __alloc_skb+0x27a/0x7a0 [ 404.347305][T19275] ? __pfx__copy_from_iter+0x10/0x10 [ 404.347329][T19275] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 404.347351][T19275] ? __alloc_skb+0x27a/0x7a0 [ 404.347373][T19275] ? __alloc_skb+0x27a/0x7a0 [ 404.347403][T19275] ? __alloc_skb+0x4d0/0x7a0 [ 404.347425][T19275] ? skb_put+0x112/0x210 [ 404.347453][T19275] pfkey_sendmsg+0x25f/0x11d0 [ 404.347623][T19275] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 404.347652][T19275] ? aa_sk_perm+0x6ff/0x8f0 [ 404.347674][T19275] ? __lock_acquire+0x747/0x2de0 [ 404.347698][T19275] ? __lock_acquire+0x747/0x2de0 [ 404.347715][T19275] ? __pfx_aa_sk_perm+0x10/0x10 [ 404.347739][T19275] ? aa_sock_msg_perm+0x144/0x210 [ 404.347767][T19275] ? apparmor_socket_sendmsg+0x98/0x360 [ 404.347790][T19275] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 404.347813][T19275] sock_sendmsg_nosec+0x14e/0x190 [ 404.347839][T19275] ____sys_sendmsg+0x54e/0x850 [ 404.347872][T19275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.347909][T19275] ? import_iovec+0x73/0xa0 [ 404.347939][T19275] ___sys_sendmsg+0x2a5/0x360 [ 404.347964][T19275] ? __lock_acquire+0x747/0x2de0 [ 404.347988][T19275] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.348052][T19275] ? __fget_files+0x3a2/0x420 [ 404.348071][T19275] ? __fget_files+0x2a/0x420 [ 404.348100][T19275] __x64_sys_sendmsg+0x1b1/0x290 [ 404.348121][T19275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.348170][T19275] do_syscall_64+0x166/0x520 [ 404.348187][T19275] ? trace_irq_disable+0x3b/0x140 [ 404.348208][T19275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.348227][T19275] ? clear_bhb_loop+0x70/0xc0 [ 404.348250][T19275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.348268][T19275] RIP: 0033:0x7fc47c59f559 [ 404.348286][T19275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.348301][T19275] RSP: 002b:00007fc47d3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.348321][T19275] RAX: ffffffffffffffda RBX: 00007fc47c825fa0 RCX: 00007fc47c59f559 [ 404.348335][T19275] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 404.348347][T19275] RBP: 00007fc47d3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 404.348359][T19275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.348370][T19275] R13: 00007fc47c826038 R14: 00007fc47c825fa0 R15: 00007ffdc2e2c5c8 [ 404.348402][T19275] [ 404.466028][T19284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3435'. [ 404.626020][T19288] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 404.861097][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.985578][T19288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.989089][T19289] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3437'. [ 405.000725][T19283] wg2 speed is unknown, defaulting to 1000 [ 405.030722][T19283] lo speed is unknown, defaulting to 1000 [ 405.896541][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.944930][T19319] syzkaller0: entered promiscuous mode [ 405.944952][T19319] syzkaller0: entered allmulticast mode [ 405.969401][T19321] FAULT_INJECTION: forcing a failure. [ 405.969401][T19321] name failslab, interval 1, probability 0, space 0, times 0 [ 405.969433][T19321] CPU: 0 UID: 0 PID: 19321 Comm: syz.0.3447 Not tainted syzkaller #0 PREEMPT(full) [ 405.969455][T19321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 405.969466][T19321] Call Trace: [ 405.969474][T19321] [ 405.969482][T19321] dump_stack_lvl+0xe8/0x150 [ 405.969515][T19321] should_fail_ex+0x410/0x560 [ 405.969548][T19321] should_failslab+0xa8/0x100 [ 405.969576][T19321] ? skb_clone+0x212/0x3a0 [ 405.969595][T19321] kmem_cache_alloc_noprof+0x9c/0x600 [ 405.969616][T19321] ? __pfx__copy_from_iter+0x10/0x10 [ 405.969641][T19321] ? skb_clone+0x212/0x3a0 [ 405.969668][T19321] skb_clone+0x212/0x3a0 [ 405.969691][T19321] pfkey_sendmsg+0x4d6/0x11d0 [ 405.969739][T19321] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 405.969789][T19321] ? aa_sock_msg_perm+0x144/0x210 [ 405.969819][T19321] ? apparmor_socket_sendmsg+0x98/0x360 [ 405.969841][T19321] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 405.969865][T19321] sock_sendmsg_nosec+0x14e/0x190 [ 405.969892][T19321] ____sys_sendmsg+0x54e/0x850 [ 405.969926][T19321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.969964][T19321] ? import_iovec+0x73/0xa0 [ 405.969994][T19321] ___sys_sendmsg+0x2a5/0x360 [ 405.970020][T19321] ? __lock_acquire+0x747/0x2de0 [ 405.970046][T19321] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.970112][T19321] ? __fget_files+0x3a2/0x420 [ 405.970131][T19321] ? __fget_files+0x2a/0x420 [ 405.970161][T19321] __x64_sys_sendmsg+0x1b1/0x290 [ 405.970183][T19321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.970234][T19321] do_syscall_64+0x166/0x520 [ 405.970252][T19321] ? trace_irq_disable+0x3b/0x140 [ 405.970273][T19321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.970292][T19321] ? clear_bhb_loop+0x70/0xc0 [ 405.970315][T19321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.970333][T19321] RIP: 0033:0x7fc47c59f559 [ 405.970351][T19321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.970366][T19321] RSP: 002b:00007fc47d3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.970390][T19321] RAX: ffffffffffffffda RBX: 00007fc47c825fa0 RCX: 00007fc47c59f559 [ 405.970403][T19321] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 405.970415][T19321] RBP: 00007fc47d3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 405.970427][T19321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.970438][T19321] R13: 00007fc47c826038 R14: 00007fc47c825fa0 R15: 00007ffdc2e2c5c8 [ 405.970471][T19321] [ 406.137610][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 406.281612][T19335] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3451'. [ 406.457604][T15828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.908211][T19362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 406.942800][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.205877][T19374] netlink: 'syz.1.3460': attribute type 11 has an invalid length. [ 407.629412][T19358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.651705][T19358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.667750][T19358] bond0 (unregistering): Released all slaves [ 407.962837][T19389] __nla_validate_parse: 2 callbacks suppressed [ 407.962857][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3462'. [ 407.984452][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.986433][T19387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3462'. [ 408.060739][T19389] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20005 [ 408.112754][T19388] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.3462'. [ 408.177774][T19388] hsr_slave_1 (unregistering): left promiscuous mode [ 408.308616][T19404] ip6gre1: entered promiscuous mode [ 408.308640][T19404] ip6gre1: entered allmulticast mode [ 408.353131][T19383] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 408.358080][T19383] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 408.715258][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3471'. [ 408.862025][T19417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.973496][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3473'. [ 409.015911][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.140760][T19428] bond4: entered allmulticast mode [ 409.333923][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 409.640909][T15828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.212949][T19445] batman_adv: batadv0: Adding interface: syzkaller0 [ 410.212969][T19445] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.213007][T19445] batman_adv: batadv0: Interface activated: syzkaller0 [ 410.414462][ T1771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.279882][T15829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.924286][T15829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.787349][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.562864][ C1] sched: DL replenish lagged too much [ 419.031445][T15828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.857808][T15830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.750669][ T1771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.667278][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.169486][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.394633][ T2021] block nbd4: Possible stuck request ffff888028980000: control (read@0,1024B). Runtime 120 seconds [ 445.394682][ T2021] block nbd4: Possible stuck request ffff8880289801c0: control (read@1024,1024B). Runtime 120 seconds [ 445.394707][ T2021] block nbd4: Possible stuck request ffff888028980380: control (read@2048,2048B). Runtime 120 seconds [ 446.086918][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.744926][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 454.256996][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.326285][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.671037][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.901312][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 478.148050][ T7259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.985113][ T3297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.211594][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.904197][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.816297][T15820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.995957][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.857663][ T25] block nbd4: Possible stuck request ffff888028980000: control (read@0,1024B). Runtime 150 seconds [ 511.857714][ T25] block nbd4: Possible stuck request ffff8880289801c0: control (read@1024,1024B). Runtime 150 seconds [ 511.857739][ T25] block nbd4: Possible stuck request ffff888028980380: control (read@2048,2048B). Runtime 150 seconds [ 514.768852][ T4996] udevd[4996]: worker [15935] /devices/virtual/block/nbd4 timeout; kill it [ 516.183686][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 516.190855][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19454/1:b..l.. [ 516.200954][ C0] rcu: (detected by 0, t=10503 jiffies, g=84225, q=874311 ncpus=2) [ 516.208977][ C0] task:syz.4.3480 state:R running task stack:25672 pid:19454 tgid:19444 ppid:16885 task_flags:0x400040 flags:0x00080002 [ 516.222584][ C0] Call Trace: [ 516.225894][ C0] [ 516.228858][ C0] __schedule+0x17dd/0x5820 [ 516.233421][ C0] ? netif_receive_skb+0x102/0xbf0 [ 516.238663][ C0] ? __pfx___schedule+0x10/0x10 [ 516.243560][ C0] ? netif_receive_skb+0x102/0xbf0 [ 516.248699][ C0] ? rcu_is_watching+0x16/0xb0 [ 516.253532][ C0] ? netif_receive_skb+0x38b/0xbf0 [ 516.258703][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 516.264103][ C0] preempt_schedule_common+0x7f/0xd0 [ 516.269421][ C0] ? tun_rx_batched+0x185/0x790 [ 516.274382][ C0] preempt_schedule_thunk+0x16/0x40 [ 516.279620][ C0] __local_bh_enable_ip+0xe9/0x140 [ 516.284759][ C0] ? tun_rx_batched+0x185/0x790 [ 516.289639][ C0] tun_rx_batched+0x616/0x790 [ 516.294515][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 516.299912][ C0] ? lock_acquire+0x115/0x350 [ 516.304660][ C0] ? tun_get_user+0x1db7/0x4470 [ 516.309703][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 516.315020][ C0] tun_get_user+0x2b78/0x4470 [ 516.319723][ C0] ? tun_get_user+0x275c/0x4470 [ 516.324607][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 516.329396][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 516.334543][ C0] ? __lock_acquire+0x747/0x2de0 [ 516.339511][ C0] ? ref_tracker_alloc+0x172/0x530 [ 516.344687][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 516.350449][ C0] ? lock_acquire+0x115/0x350 [ 516.355143][ C0] ? tun_get+0x1c/0x2f0 [ 516.359342][ C0] ? tun_get+0x1c/0x2f0 [ 516.363542][ C0] ? tun_get+0x1c/0x2f0 [ 516.367725][ C0] tun_chr_write_iter+0x113/0x200 [ 516.372784][ C0] vfs_write+0x612/0xba0 [ 516.377084][ C0] ? __pfx_vfs_write+0x10/0x10 [ 516.381872][ C0] ? __fget_files+0x3a2/0x420 [ 516.386566][ C0] ? __fget_files+0x2a/0x420 [ 516.391261][ C0] ? fdget+0x1ac/0x250 [ 516.395356][ C0] ksys_write+0x150/0x270 [ 516.399708][ C0] ? __pfx_ksys_write+0x10/0x10 [ 516.404578][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 516.409762][ C0] do_syscall_64+0x166/0x520 [ 516.414656][ C0] ? trace_irq_disable+0x3b/0x140 [ 516.419806][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.425901][ C0] ? clear_bhb_loop+0x70/0xc0 [ 516.430688][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.436596][ C0] RIP: 0033:0x7fcdbed9f559 [ 516.441036][ C0] RSP: 002b:00007fcdbfb9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.449463][ C0] RAX: ffffffffffffffda RBX: 00007fcdbf026090 RCX: 00007fcdbed9f559 [ 516.457538][ C0] RDX: 000000000000fdef RSI: 0000200000000800 RDI: 0000000000000003 [ 516.465617][ C0] RBP: 00007fcdbee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 516.473604][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.481591][ C0] R13: 00007fcdbf026128 R14: 00007fcdbf026090 R15: 00007ffd184756a8 [ 516.489609][ C0] [ 516.492649][ C0] rcu: rcu_preempt kthread starved for 238 jiffies! g84225 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 516.503519][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 516.513524][ C0] rcu: RCU grace-period kthread stack dump: [ 516.519428][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 516.532957][ C0] Call Trace: [ 516.536246][ C0] [ 516.539197][ C0] __schedule+0x17dd/0x5820 [ 516.543728][ C0] ? __lock_acquire+0x747/0x2de0 [ 516.548698][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 516.553840][ C0] ? __pfx___schedule+0x10/0x10 [ 516.558978][ C0] ? lock_acquire+0x115/0x350 [ 516.563800][ C0] ? schedule+0x90/0x2b0 [ 516.568594][ C0] schedule+0x164/0x2b0 [ 516.572867][ C0] schedule_timeout+0x152/0x2c0 [ 516.577825][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 516.583309][ C0] ? __pfx_process_timeout+0x10/0x10 [ 516.588627][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 516.594468][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 516.600052][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 516.605644][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 516.610536][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 516.616734][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 516.622042][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 516.627276][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 516.633111][ C0] rcu_gp_kthread+0x9c/0x340 [ 516.637735][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 516.642959][ C0] ? __kthread_parkme+0x71/0x1f0 [ 516.647949][ C0] ? __kthread_parkme+0x199/0x1f0 [ 516.653010][ C0] kthread+0x38b/0x480 [ 516.657099][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 516.662319][ C0] ? __pfx_kthread+0x10/0x10 [ 516.666929][ C0] ret_from_fork+0x514/0xb70 [ 516.671600][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 516.676810][ C0] ? __switch_to+0xc78/0x1410 [ 516.681522][ C0] ? __pfx_kthread+0x10/0x10 [ 516.686132][ C0] ret_from_fork_asm+0x1a/0x30 [ 516.690951][ C0] [ 516.693978][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 516.700317][ C0] Sending NMI from CPU 0 to CPUs 1: [ 516.705636][ C1] NMI backtrace for cpu 1 [ 516.705659][ C1] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 516.705707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 516.705733][ C1] Workqueue: krds_cp_wq#7/0 rds_connect_worker [ 516.705874][ C1] RIP: 0010:lock_acquire+0x51/0x350 [ 516.705899][ C1] Code: 8b 05 db d6 f7 12 48 89 44 24 50 0f 1f 44 00 00 65 8b 05 da d6 f7 12 83 f8 08 0f 83 9b 01 00 00 89 c0 48 0f a3 05 47 99 d8 0f <73> 0d e8 18 57 09 00 84 c0 0f 84 e2 01 00 00 83 3d 59 ca d8 0f 00 [ 516.705915][ C1] RSP: 0018:ffffc90000a07d28 EFLAGS: 00000297 [ 516.705931][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 516.705944][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8fd59ca0 [ 516.705957][ C1] RBP: 1ffff92000140fd4 R08: 0000000000000000 R09: 0000000000000000 [ 516.705970][ C1] R10: ffffc90000a07eb8 R11: ffffffff81b301f0 R12: ffffffff8fd59ca0 [ 516.705985][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 516.705997][ C1] FS: 0000000000000000(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000 [ 516.706013][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.706026][ C1] CR2: 00007f4f0b426e83 CR3: 000000007e754000 CR4: 00000000003526f0 [ 516.706043][ C1] Call Trace: [ 516.706059][ C1] [ 516.706071][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.706103][ C1] ? save_stack+0x122/0x230 [ 516.706130][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.706154][ C1] unwind_next_frame+0xac/0x2550 [ 516.706178][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.706204][ C1] ? stack_trace_save+0xa9/0x100 [ 516.706226][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.706251][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.706276][ C1] arch_stack_walk+0x11b/0x150 [ 516.706307][ C1] ? save_stack+0x122/0x230 [ 516.706334][ C1] stack_trace_save+0xa9/0x100 [ 516.706354][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 516.706375][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 516.706408][ C1] kasan_save_track+0x3e/0x80 [ 516.706432][ C1] ? kasan_save_track+0x3e/0x80 [ 516.706455][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 516.706480][ C1] ? kmem_cache_alloc_node_noprof+0x34f/0x600 [ 516.706503][ C1] ? __alloc_skb+0x27a/0x7a0 [ 516.706529][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 516.706580][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 516.706635][ C1] ? nft_synproxy_do_eval+0x389/0x5d0 [ 516.706656][ C1] ? nft_do_chain+0x48d/0x1b10 [ 516.706677][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 516.706722][ C1] ? nf_hook_slow+0xc5/0x220 [ 516.706795][ C1] ? NF_HOOK+0x21f/0x3c0 [ 516.706853][ C1] ? NF_HOOK+0x336/0x3c0 [ 516.706873][ C1] ? process_backlog+0xa6b/0x18b0 [ 516.706927][ C1] ? __napi_poll+0xaa/0x330 [ 516.706950][ C1] ? net_rx_action+0x61d/0xf50 [ 516.706975][ C1] ? handle_softirqs+0x265/0x8d0 [ 516.706996][ C1] ? __irq_exit_rcu+0xc6/0x220 [ 516.707017][ C1] ? irq_exit_rcu+0x9/0x30 [ 516.707037][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 516.707073][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.707094][ C1] ? lock_acquire+0x232/0x350 [ 516.707112][ C1] ? unwind_next_frame+0xac/0x2550 [ 516.707135][ C1] ? arch_stack_walk+0x11b/0x150 [ 516.707156][ C1] ? stack_trace_save+0xa9/0x100 [ 516.707175][ C1] ? save_stack+0x122/0x230 [ 516.707221][ C1] __kasan_slab_alloc+0x6c/0x80 [ 516.707248][ C1] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 516.707272][ C1] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 516.707294][ C1] ? __alloc_skb+0x27a/0x7a0 [ 516.707318][ C1] ? __alloc_skb+0x27a/0x7a0 [ 516.707348][ C1] __alloc_skb+0x27a/0x7a0 [ 516.707376][ C1] synproxy_send_client_synack+0x175/0xde0 [ 516.707397][ C1] ? lock_acquire+0x115/0x350 [ 516.707417][ C1] ? synproxy_pernet+0x45/0x270 [ 516.707441][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 516.707460][ C1] ? nft_synproxy_eval_v6+0x360/0x4e0 [ 516.707482][ C1] ? synproxy_pernet+0x45/0x270 [ 516.707506][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 516.707532][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 516.707555][ C1] ? nf_ip_checksum+0x13c/0x510 [ 516.707578][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 516.707603][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 516.707623][ C1] ? ieee80211_rx_handlers+0xcf76/0xcfe0 [ 516.707671][ C1] ? ieee80211_rx_handlers+0xcf76/0xcfe0 [ 516.707698][ C1] nft_do_chain+0x48d/0x1b10 [ 516.707728][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 516.707748][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 516.707774][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 516.707840][ C1] nft_do_chain_inet+0x360/0x4b0 [ 516.707864][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 516.707886][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 516.707909][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 516.707964][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 516.707988][ C1] nf_hook_slow+0xc5/0x220 [ 516.708018][ C1] NF_HOOK+0x21f/0x3c0 [ 516.708041][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 516.708071][ C1] ? NF_HOOK+0x9e/0x3c0 [ 516.708091][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 516.708114][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 516.708140][ C1] ? ip_local_deliver+0x113/0x190 [ 516.708164][ C1] NF_HOOK+0x336/0x3c0 [ 516.708186][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 516.708207][ C1] ? NF_HOOK+0x9e/0x3c0 [ 516.708228][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 516.708251][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 516.708272][ C1] ? ip_rcv_core+0x88d/0xd50 [ 516.708297][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 516.708318][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 516.708339][ C1] process_backlog+0xa6b/0x18b0 [ 516.708368][ C1] ? process_backlog+0x3de/0x18b0 [ 516.708401][ C1] __napi_poll+0xaa/0x330 [ 516.708427][ C1] net_rx_action+0x61d/0xf50 [ 516.708460][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 516.708485][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 516.708535][ C1] handle_softirqs+0x265/0x8d0 [ 516.708564][ C1] __irq_exit_rcu+0xc6/0x220 [ 516.708587][ C1] irq_exit_rcu+0x9/0x30 [ 516.708608][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 516.708636][ C1] [ 516.708643][ C1] [ 516.708650][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.708671][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 516.708692][ C1] Code: ff ff ff e8 e0 ca 50 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 d4 f7 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7f d2 53 0a cc 48 8d 3d c7 d3 db [ 516.708708][ C1] RSP: 0018:ffffc90000bb71e0 EFLAGS: 00000292 [ 516.708724][ C1] RAX: f7f4545891411b00 RBX: 0000000000000000 RCX: 0000000000000046 [ 516.708738][ C1] RDX: 000000000bde36e7 RSI: ffffffff8e70fdbb RDI: ffffffff8c6e1780 [ 516.708753][ C1] RBP: ffff88801cf0ddc0 R08: ffffffff8178699f R09: 0000000000000000 [ 516.708766][ C1] R10: ffffc90000bb7318 R11: ffffffff81b301f0 R12: ffffffff8fd59ca0 [ 516.708782][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 516.708796][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.708818][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.708847][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 516.708869][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.708894][ C1] unwind_next_frame+0xac/0x2550 [ 516.708917][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.708943][ C1] ? __reset_page_owner+0x71/0x1f0 [ 516.708969][ C1] ? unwind_next_frame+0x8f/0x2550 [ 516.708995][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.709017][ C1] arch_stack_walk+0x11b/0x150 [ 516.709043][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 516.709072][ C1] stack_trace_save+0xa9/0x100 [ 516.709093][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 516.709120][ C1] save_stack+0x122/0x230 [ 516.709147][ C1] ? __pfx_save_stack+0x10/0x10 [ 516.709172][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 516.709201][ C1] ? page_ext_put+0x97/0xc0 [ 516.709230][ C1] __reset_page_owner+0x71/0x1f0 [ 516.709258][ C1] __free_frozen_pages+0xc93/0xd90 [ 516.709287][ C1] __slab_free+0x274/0x2c0 [ 516.709317][ C1] ? qlist_free_all+0x8e/0x100 [ 516.709342][ C1] qlist_free_all+0x99/0x100 [ 516.709365][ C1] ? sk_prot_alloc+0x57/0x210 [ 516.709392][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 516.709413][ C1] kasan_quarantine_reduce+0x148/0x160 [ 516.709440][ C1] __kasan_slab_alloc+0x22/0x80 [ 516.709466][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 516.709488][ C1] ? sk_prot_alloc+0x57/0x210 [ 516.709515][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 516.709537][ C1] ? sk_prot_alloc+0x57/0x210 [ 516.709567][ C1] sk_prot_alloc+0x57/0x210 [ 516.709594][ C1] ? sk_alloc+0x27/0x390 [ 516.709621][ C1] sk_alloc+0x3a/0x390 [ 516.709650][ C1] inet_create+0x7a9/0xff0 [ 516.709707][ C1] ? inet_create+0x9d/0xff0 [ 516.709726][ C1] __sock_create+0x4b5/0xac0 [ 516.709755][ C1] rds_tcp_conn_path_connect+0x2d8/0x920 [ 516.709816][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 516.709849][ C1] ? lock_acquire+0x115/0x350 [ 516.709876][ C1] rds_connect_worker+0x1d8/0x290 [ 516.709898][ C1] ? process_scheduled_works+0x97a/0x1630 [ 516.709924][ C1] process_scheduled_works+0xc3d/0x1630 [ 516.709968][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.709997][ C1] ? assign_work+0x3cf/0x5d0 [ 516.710024][ C1] worker_thread+0xa47/0xfb0 [ 516.710073][ C1] kthread+0x38b/0x480 [ 516.710091][ C1] ? __pfx_worker_thread+0x10/0x10 [ 516.710115][ C1] ? __pfx_kthread+0x10/0x10 [ 516.710135][ C1] ret_from_fork+0x514/0xb70 [ 516.710156][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 516.710175][ C1] ? __switch_to+0xc78/0x1410 [ 516.710203][ C1] ? __pfx_kthread+0x10/0x10 [ 516.710222][ C1] ret_from_fork_asm+0x1a/0x30 [ 516.710250][ C1]