last executing test programs: 2m51.611070173s ago: executing program 4 (id=1578): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) 2m51.375804837s ago: executing program 4 (id=1579): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000000c0)) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r3, 0x17}, 0x80, &(0x7f0000003500)=[{&(0x7f00000001c0)="27030200dc0f14120e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0xfffe}], 0x2}, 0x8000) 2m47.366142751s ago: executing program 4 (id=1599): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400010301000000000000002c0000000000000018"], 0x24}}, 0x0) 2m47.012156968s ago: executing program 4 (id=1604): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001400010301000000000000002c0000d4fc2dda1c7b"], 0x24}}, 0x20000840) 2m46.697456778s ago: executing program 4 (id=1608): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10102) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xb, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2m45.667691812s ago: executing program 4 (id=1618): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000270009002dbd7000fedbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40070) 2m42.692944436s ago: executing program 0 (id=1665): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x9808, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2m42.146434358s ago: executing program 0 (id=1675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) 2m42.003470676s ago: executing program 0 (id=1679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7f, 0x401, 0x1, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m41.36499566s ago: executing program 0 (id=1686): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000001c0)="69be1199", 0x5ea}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)}}, {{&(0x7f0000000b80)=@xdp={0x2c, 0xa, 0x0, 0xf}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8000) 2m41.079017032s ago: executing program 0 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2m40.886842603s ago: executing program 0 (id=1692): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m30.586104553s ago: executing program 32 (id=1618): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000270009002dbd7000fedbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40070) 2m25.777535324s ago: executing program 33 (id=1692): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2.003306338s ago: executing program 3 (id=3178): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r6, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmmsg$inet(r2, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.547068324s ago: executing program 1 (id=3184): r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x8050, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @empty, 0xe91}}}, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x4000091, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$sock_int(r0, 0x1, 0x45, 0x0, 0x0) 1.524249152s ago: executing program 2 (id=3185): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xfc) 1.506132349s ago: executing program 1 (id=3186): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1.429678255s ago: executing program 3 (id=3187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x4, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x29}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0xc801}, 0x10) 1.429096016s ago: executing program 5 (id=3188): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b"], 0x120}}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934341004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r2], 0xfe33) 1.347466637s ago: executing program 1 (id=3190): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000540)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01018842b5057c4d7200", 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffd, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "13080001000000bb98c68e00", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r4 = accept4(r3, 0x0, 0x0, 0x0) listen(r4, 0x3ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f0000000a40)=0x6, 0x4) sendmmsg$sock(r1, &(0x7f0000003980)=[{{&(0x7f0000000240)=@generic={0x2c, "f820cf62a94e96f3c05b05265614aea971892219ece1fd7e9a372cacab4a9df6dac7b8fff9b8b5c8623a277f0765b082e65118be2b2bafba3d8dc94332719ee60fdc3147ea6eb76dc5f4083cec19a59cf6719ffb53e7721ca646132694fb254dc29c6fbe181e5f065508f17955a8697476259b6d8831c940639164a38c2c"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)="13d5b3ead49d47d597048af06ee48f6e9041b2616fcc30dbbffd770ec50d7de6459346be0553e5b904fee9b60f5a13eb3717b1754f7fd8609cda68ae87a057aebef020e34bc9b2b564b94c2c8f6c8aeb67651baf9cc94c91f4ba984cae4bd9c4204c3992c7730e18ca2a0c6978c0b5803655e0206348a07796861a41ea31a9da98128d4bd589677e06adf9b794def7352eb9263fe53add227b045c1610d43d15ed8bc1c9851e11535b42d9a0fd41d43c4b98d3bd3af8b36c7bfc3e6423073094a3b116b5990bc1e23a7131b13ef8804e", 0xd0}, {&(0x7f0000000500)="fd47baf838dca3e2839331e2926de8815188d6f84fb6f778be88ac349da385", 0x1f}], 0x2, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}], 0x18}}, {{&(0x7f0000000700)=@generic={0x8, "e7aeeca1090dea74907f2396245f7db139aad1bd6ecfe4e822aa25d189d16be84f85c480701ddd59d6a94cc7bbdda7b650c1f25c664b0b3fa78b27603352933908383e684beb87f68d087fd0747311a56afd0928d1632d4ffba8f3675bb79f9640d8ca9decded969f4804e9934557bc8b64455aa91425569f8995176c87b"}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000780)="afa1e38ac4cd20d882819224154ea2d1fe62a5899a6e2fe50767a444762ec9a6a7d1f1263932b0895f9b0896b6d23497490a7e58c4e3d5bd04d2eab78cfe5af23a5518df4d25d0a1c100712949760310c805a95fc8e3f7259413bda3bf1e8ef0528cf51c54fc7e4ee5ffecbf02a4fb01956e994f6434965c3b28418c3c6ae9aea8cd81277de12066772a2218926b1a208b8818e91bbc7beedb03ea5486ed26c47659644184e3769298ee2f187f0fe481", 0xb0}, {&(0x7f0000000840)="ba4d17efc7accd11e6982fa56a5cd1dc70a6ac2fbdf0a196e3f7dd9564b45fd17a580962bc69a412bbe63d6e88f997b6f29cdf", 0x33}, {&(0x7f0000000880)="d628e87a553e4fd862f95cc0af87c70d9f883b35cdb42d0cbaeb5540a1104bc6c547548e6846bd5f36423b3982be41bbcd4a44da7907eefd8ecf307501d34b94a330f0d56be961f3551ccaea597ee91c260e17ae", 0x54}, {&(0x7f0000000900)="00c2cb34d8fa39b5dd671a8a2e228475332487c1bae6385ded968ad9a85023fdc85de4a194f69c1e657a4e9bc53b23eb076260323142883f176b1efd125ee6d4", 0x40}, {&(0x7f0000000940)="6e8bb0cd69197621f4f8b7672712cbd4b2bb2092371b1135e3facddd4bd1ca809838f3ba9beb22bde28d62900948098b46d3f1ccf7e320c4286735075c3f717a6857f09d4fa6fee3fdc8e127f1053136ff66e1749fa27b6abecba6c9376ec14a460ad82df8e1c922c3f5910e2cf6c97b9f1546050ee4264210370019bebff640533269fb4e82ea463f8cf6bf119358c62bfdccc8707e1958805cc6a7ae094abe38c842028eb62fdef0aed78230c060bb", 0xb0}, {&(0x7f0000000a00)="f43ba64b43c631ad35864ed12e85be6ba7181e71a2d7cdf2d6a8d14217", 0x1d}, {&(0x7f0000000ec0)="4caf7d5994e6f683d3331617af4b8fdbbebade7fba9f274a21215f6ee77e0fc3dca3850abec4c98fe1cabcf8899a65e1cbe7db2001d4d047f530df20eb7452616dd13c032dadf253aaa17d2bab22d88cc253378d3a7f59fedda6517b29497b30194faea8c57d011c53e3953e26e0435140b2", 0x72}, {&(0x7f0000000f40)="c7cc62369ccad8c1df9dee4cd878e78a1f67b18fcfbf8759b3e08648ecc9c594fc2ae5c655bf86ab660286c609fccb1ea9b01b5584855a0aff838bd89dfc133ec2201b81038df3b08d6b2131a81c94d0de6f32601be270c96dd72d89b91215fd505df22b5b0edac417422afe6c33c8eac42d1d5f7cc7775358fe68784912cf33bd1c6ffd0ee8482def344632b5b7a7add7a48220e363bd9857d53dbd1375c5ad234f3c40326a5952e8ce4e1c798729c494192f391fb02f9e5c80e20f7047b6fb9330b2f0d51fd9c273f3e3cbe70ee938b055ce87f6f3aa54c36f8b164b3956", 0xdf}], 0x8, &(0x7f00000010c0)=[@mark={{0x14, 0x1, 0x24, 0xc28}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x60}}, {{&(0x7f0000001140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0xe325, 0x1, 0x3, 0x4, {0xa, 0x4e21, 0x9, @private2, 0x1000}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f00000011c0)="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", 0x1000}], 0x1, &(0x7f0000002200)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @timestamping={{0x14, 0x1, 0x25, 0xa8bb}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x48}}, {{&(0x7f0000002280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x4, 0x2, {0xa, 0x4e20, 0xffff, @mcast2, 0x9c}}}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002300)="60aa106ec73d27aa129f3d10a68684a55c6ccc3ed762241fbb279bd9ef88fa42271454b86353550787b1d061a3d616c39cbc1c63a7b68ecfc153f462d725b8c54d31c8a01232f63c3265a384f6af2c24a3", 0x51}], 0x1, &(0x7f00000023c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xa2}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4d7}}, @mark={{0x14, 0x1, 0x24, 0xfffffff9}}, @txtime={{0x18, 0x1, 0x3d, 0xfa3}}, @mark={{0x14, 0x1, 0x24, 0x280000}}], 0xd8}}, {{&(0x7f00000024c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @local}, 0x1, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000003880)=[{&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)}, {&(0x7f0000003580)="a0a94bdf67ca0170b955f9132a403461280314c71a110b4f52977220b12e1592c4be5b0f6e936130f39d8d6569eb9c7ee3261de6aae26c311bae70c36f576840b36917c38af88fab215bf29c82ca5911fafefcbcd0119324480ac3c298af31b0fa0cb32105922fda463e01", 0x6b}, {&(0x7f0000003600)="0cfac676f7c28382", 0x8}, {&(0x7f0000003640)="e679e4a1419be1b1b75281d896606774043693950fb89de7aa6fd6e23afe00f3aea5eb93b8581985089c90fe337fd2df5d813767d129b95d9404a5b94683c2045a0834e45692e4bb4d73934aa64ccc61fe1bcb8ac112bbe7813226bfc18f5284ccb246fa1c2c016bf242a50153bfd887e9e4da2c5cea89c89f3354d60348914840fb85abb288a14cfdc56dea5ea87b1c512090934a0db3fcbedf02181c55470f18427afa29ed0b27d998c570cf5a8534fd625337129aa9a053569bc1086c12b51de21e643bd904c0b91cd328ab53", 0xce}, {&(0x7f0000003740)="57ce594fb6a2e7e5f03d4560d63a7e6740f992c48712846b9fbcddaa9fb4e7c60896e09790bdf04c269dd03609eacb6986ef7400a4f83651060ead80619be465fe70f869f2790d638d0a49c501e0a920ad94a607d3322803209024ae1d6e69ca4bd388dcb7fbce7e78dac2088410685ad29dc97b03f64c3f5afb9e7a7e25cd14787772abbe0db501671fe39b1921a3e587d174ede5d30b1731b42670b853cffbe22659ed51a03afa04137dc25aa1e17607672898f17598623ba3ef4361552d8327177e68d495e46cad15c3a58063e735548b1b3f437098e7a9467aea2de2bc08cf1c803df85ca2", 0xe7}, {&(0x7f0000003840)="1f9ede29f9f7a2be2c2b949d8ad0e745bb835c3ac37dcd5c1709bb6c308df45b5ad93c", 0x23}], 0x7, &(0x7f0000003900)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x60}}], 0x5, 0x804) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003b40)={r8, 0x58, &(0x7f0000003ac0)}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r7, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r7, 0x8000}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = socket(0x1e, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 1.269905022s ago: executing program 2 (id=3191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40048050}, 0x4004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0xfff3}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x94e, 0x8, 0x5}, {0x4, 0x6, 0x4}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @TCA_RATE={0x6, 0x5, {0xc, 0x7f}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 1.265077057s ago: executing program 3 (id=3192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='kF', 0x2}], 0x1}, 0x20000885) 1.215942003s ago: executing program 5 (id=3193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r0, 0x0, 0x8010) sendmsg$NFT_BATCH(r0, 0x0, 0x20040010) 1.106249533s ago: executing program 5 (id=3195): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1f, 0x4, 0x8, 0x8}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.023634499s ago: executing program 6 (id=3196): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 910.757727ms ago: executing program 6 (id=3197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x4, 0x0, @void}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002840)={&(0x7f0000000700)={0x212c, r8, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2de}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4c}, @NL80211_ATTR_CSA_IES={0x5c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0xff7f, 0x6, 0x8000, 0x8, 0xffff, 0x8001, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x9, 0x0, 0x2d4, 0x1, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x2d97, 0x9, 0x10, 0xee69, 0x800, 0x80, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0xd, 0x8, 0x3, 0xd, 0x5bd, 0x3, 0xdfd, 0x0, 0x9]}]}, @NL80211_ATTR_CSA_IES={0x2070, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x6f5, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x124, 0x80, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @mesh_chsw={0x76, 0x6, {0x4, 0xac, 0x3e, 0x7}}, @cf={0x4, 0x6, {0x1, 0x7, 0x7, 0xf11}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @cf={0x4, 0x6, {0x8, 0x4, 0x22, 0x4}}, @tim={0x5, 0xef, {0x2, 0x60, 0xb, "6e8c69edf83e7a92721e35e0395c19fb0238295aa8548a873484352e51f7eaedd0a75690fa3abf0f2c651f33aa080712cd85289e50339c7377900f1267f9e02a7ef0c53dd067430faf7086f69ef9696e75354289eb789d85a4cb793c5c81b2f88e4a07d06432f5dc20396c1875fe33a9e23dd934a4e7a0dac5fb8a173e2cd3e735f1380bab98c400ec3ca4f15f311bdedfc5f4349d299d85a381f993afa02c1c33196d1a14f2218206a78afa1ad592f4ad2ce7ed810542f0b5770221dc27154566abed542c471d5f6881af3af9790c0af6b53b42f82dfe828d0acc25ce2d9a3b31f99689037022114c5d1e8c"}}]}, @NL80211_ATTR_FTM_RESPONDER={0xa8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x9f, 0x2, "ddc193b8d64d2f2c305548b0855a86a5f685d919992f96b1ca2777b8b01cd70c617da1b29f5a9398914e466ea407a57ceb010692dd5c90b575cb1c3ede5a4cedb42cce4c36d564539a308077cf2e3dc7259659908ef129044fc440efc757bb2969ad78988b983014388a595a861bce26ca8a32e9f7352501e9f88fe8ae4406ef088dcd76cfabcf16637dbfdfd03573d9cea97304201f6976bddcbe"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x285, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x17d, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x558, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x65, 0xf, [@chsw_timing={0x68, 0x4, {0x9, 0x3}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x51, {{0x0, 0x0, 0x1}, 0x3, 0x7, 0x6, @device_b, 0x7, @void, 0xffff, 0x5, 0x5, [{{0x1}, @broadcast, 0x5}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @device_b, 0x3}, {{0x1}, @broadcast}, {{}, @broadcast, 0x7}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2a4, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xc4}, @broadcast, @device_a, @initial, {0x0, 0x8}, @value=@ver_80211n={0x0, 0x8, 0x1, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x27, @random=0xda00, 0x82, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x60}, {0x9}, {0x16, 0x1}]}, @val={0x3, 0x1, 0xb6}, @val={0x4, 0x6, {0xf, 0x9, 0xd8}}, @val={0x6, 0x2, 0x10}, @val={0x5, 0x72, {0xa, 0xd7, 0xb, "21627fb6e20edd842ef40fb7d3264b07844b66bb9d7528c0fcb19f7b1838bae70cc870c22037e3378561b6b78534753094c7a88e86acf11be9aa1951cfeae252a3663ef3bf5c0cbae4402aed0399b8c6373789564580df1da076815fa9ed3264552a340e2b1e271d44d68aa8a5050c"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x98, "1117dedfa41366546520f520de1639708cb11445f17fd9bcec18136ca020c6feae487a0663e30c95a0ac8d2afea0ecd8a3431e2286d2cc308ca46158042f0b97a9ebe81309eb6a4c2e8b852ad25a4748e7f32455ca70749fbe0b38e6700ee491eec93315e0fbedccd62739bc76b1efee8acfe34471a4ce3f9d067902020f06b9603875f5f4d332f306f85f8f7cb81ac539269ad81ca8726f"}, {0xdd, 0x8f, "bf59488a31bec3419ffb1eb43f61dea9fc1c566e78a51769442452a96f67f79dabcbaed59d4461b00dd9e6aa0c1587514f901379134625ce10bb5ddfb8c68fa774241e5e0d1ec360bd133b80650fbc76d74a987896e59ac664b9e9d295d7361dcedfa62c623d1de41260d5f2f91cf6ac253d39dff88f4f3f3b28d409ee2f9976f019c2d8f4edfb7ef8238c4f22ef53"}, {0xdd, 0xb2, "fc8e72511a07fb3b87761858533d47a4c76154c677dd0b52ca4c8db66ef8aed41354d9032b4af93e7a9a5b6c56d2a8ad741c02ed2869b5be63e6c0d791d35a1fc5cf92083f7f62e4fe06aed9395801ffebe2d2f767ffd8e6a6a865e2823ed8f14242b32d64b8ca289e232f3d3abd81bc34c0aa0d930225355aaeaadd09bbff907368e554ceaca4baa2418ad56df1cb991481a6e3505607f9767a6e6e710c7b8b9f43e13466c32fc4bcf48890447b61076339"}]}}, @NL80211_ATTR_PROBE_RESP={0x57b, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x5b7, 0x91, "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"}]]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3f}]}, 0x212c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000010) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES64=r3, @ANYRES32=r5], 0x1c}}, 0x840) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r10, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e10540000086dd00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5005"], 0x7) 886.608066ms ago: executing program 2 (id=3198): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0xfffb, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x0, 0x4, r4}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r4, 0xea9}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001371121b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000000)=0x59, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000009000), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000006800010000426c54b12a4173f200000400000000"], 0x18}}, 0x0) 754.379072ms ago: executing program 6 (id=3199): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x5}, 0x6) getsockname(r0, 0x0, &(0x7f0000002100)) 693.577229ms ago: executing program 2 (id=3200): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="14000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x8050, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @empty, 0xe91}}}, 0x84) 691.706859ms ago: executing program 5 (id=3201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 553.201321ms ago: executing program 6 (id=3202): bpf$MAP_CREATE_CONST_STR(0x8, &(0x7f0000000240)={0x2, 0x4, 0x3d, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x48) 549.379601ms ago: executing program 2 (id=3203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x608, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00e\x00\a'], 0x20}}, 0x0) 548.619253ms ago: executing program 3 (id=3204): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018020000000002000000000000000000000400"/38], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000200)=""/70, &(0x7f0000000280)=0x46) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0xd8, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xa4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x815a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x154, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x34, 0x7, 0x1, 0x0, "b79ab06c229693c81f4e6a5ecd7bf62be9e42f2fcde441473fe1393cdaeb3ba7a7db5ecc7f5167c5612f46b655718890"}, @NFTA_RULE_USERDATA={0xee, 0x7, 0x1, 0x0, "34d75e1b91e0699bfeb800a5da279b420222149855eae3f86003032cb1c978da4c38ac11877fc2bb09e2a6e388c315d8dc79bde313058536e5a7e46cf61de228791654139df574a1d6d3e6826a09104a91b1dbb64dbadad937eeb9952da6f7f20ee4b2ef25042ca66945276921f34ca58ee175147b9e5e662dbda2f62a948b419df48fbe2c8b53a6e011aef89c9e98d8ac477900156dbc0558aac8f4d41b3fcf2b77f44dbef26fc33546dd77a1f1e2f561045a572aab9c65ab2fe4804d8d7090ace488b7843a4a0ab60b3aa81e6b1f0153d6f92f7feba4284e0cb2488a79889e83f5912bf714e5ec8f37"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x94, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1e8c3c3c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6de7ee25}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3d52e9a9}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWTABLE={0x12c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x89, 0x6, "fd528270677c5dc1b08fe83ca88f7fdc5dca7e4834f910c5987b51a34506eb0a65a78d28ea24cc63ffb1e76896e7d48380408bb0fd5b00f6be682ca218c7ca50e40131a988ae50424c729537e32b3734cace0f33c2acf954584aff65a2afa22da0e52a683f892b0408004903c15b0fea1a3d5bf7ae3fe73e891632b8caa949ce6cbd5768e0"}, @NFTA_TABLE_USERDATA={0x65, 0x6, "eaa66614e0a3fc2e566b637b54793e12c256db6eca5cb954bcb710dc3b379e37dcd30fec09f42cfe4945439ec3872b1436775346c9ba3d0db6eb69bae63eb48de8c02d27a9fb17a5fc0b9fa965b33b8ea1d43d1d1af5778d2ab23aeec082e6fda3"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x1a, 0x6, "21399032a81b774582bc2ded288336fb9afe4212a3a8"}]}], {0x14}}, 0x474}, 0x1, 0x0, 0x0, 0x4044004}, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000080)='mpls\x00', 0x800, &(0x7f0000000140)={@align=0x3, {0xff, 0x4, 0x7f, 0x4}}, 0x9, &(0x7f0000000180), &(0x7f00000001c0)=0x6}) connect$tipc(r5, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x1, {{0x40, 0x1}, 0x1}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4) 483.854603ms ago: executing program 5 (id=3205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r0, 0x0, 0x8010) sendmsg$NFT_BATCH(r0, 0x0, 0x20040010) 442.128622ms ago: executing program 3 (id=3206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x4, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x29}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0xc801}, 0x10) 397.484833ms ago: executing program 1 (id=3207): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0xfffffffffffffffd, 0x80, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0x2}, 0x18) close(0x3) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x4) 315.305651ms ago: executing program 6 (id=3208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) (fail_nth: 10) 290.137575ms ago: executing program 5 (id=3209): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x34, r5, 0x8, 0x1, 0x1000000, {{}, {@val={0x2d, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0xfffffc5a, 0x9, 0xb}, @NL80211_ATTR_CQM_TXE_PKTS={0x0, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8}]}, @NL80211_ATTR_CQM={0x0, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x0, 0x5, 0x5c}, @NL80211_ATTR_CQM_TXE_INTVL={0x0, 0x7, 0x126}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x0, 0x9, 0x71}]}, @NL80211_ATTR_CQM={0x0, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x0, 0x1, [0x4, 0xe0, 0x4, 0x69d, 0x8]}]}]}, 0x34}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb29d453e94df581d7575dd5b7ff0f58e200", '\x00\t\x00', "1f00000000000080"}, 0x38) writev(r7, &(0x7f0000000240)=[{&(0x7f00000003c0)="59e02313fb06bcfb7c8f84e043beeaab908cca44c9fa3d320506892dcac987c5a24ae06c5a9426ad3eb6069d43e14bf928b5595f796533d496827a3355c1592ecefbe1ae90d06969514098b66bcae4edab63c029f7e014f9d66f4bd1ec868ff6a8ea83506a869de2b1639e439edb9d561d50d2e9e466a162d414ee05782aac6462", 0x81}], 0x1) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRESDEC=r3, @ANYRES64=r4], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$packet(r6, &(0x7f0000000640)="01", 0x54, 0x4004855, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 273.981335ms ago: executing program 2 (id=3210): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xfff, 0x1, [0x200]}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r1, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x5, @private1}]}, &(0x7f0000000280)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000004060104000000000000000000060000050001"], 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001200010a0000c4433d00000000ce0f223d05da3f3624d3fe227bd7952355b19c1ea7e47f35af5b958c6c86d7c7c798786f81450b36e11493173dbf6587c7185c0c29bf9f7aafcc786a77b50fbc0639f2085c5a49b4ba6bdca8cfae9733e28ae390cea413d39db6deb7804626d6b4a51a860afe23d3242cadca5648652a4c3a14e6430bf44a78ec66fef46a109c9185853da55e0deb3ea9fcf8207a69a00ff023a1ddc3992aaa071c3dc02247d465a818c11bac03b783467c5dec4a5ec5a431c6fdf387c609a46254f1426af113af67df179545b0c930cf88e4"], 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x8, 0x645}, 0x3c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)={0x614, 0x3b, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@typed={0x8, 0xa5, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x288, 0xb4, 0x0, 0x1, [@generic="94d480e3c5639fd8c6a422bbb338e2e9bd04c9dc465902be84c2a608de98b35466d8a1eff0714234619ddc6818011707da8b9f6507eaeee5db667effc730f2fc943fee0a60f872bf3b9b9c09eb6e434a401155812a59c7e97731a57eec7fd97ff98c8da734ee7ac36cc1f256ad8ea8bd465e7380ad4ad60eb6fbf5afafeea84dece5e9869af2369083a889c78ab920dc87ce7ea8ba20d40a1717dc4126526b83", @nested={0x4, 0x2c}, @typed={0xda, 0x28, 0x0, 0x0, @binary="546d7e9dbdeb63018b1b3f137779162d98d9c702d5e36ae135c338e2855be98a4ced028560c409cebc9a3de6b1d22260fe3441bce09a57368b66607dd696b7e7dd19bde23e1a804f9de3ceae64b34a44131c528ce5168d9304c91cdeea933a007dea22bdafbbcb80cbb3aa941254200a34c08b4e241cd6d4d0e677b9fb3885bfbe27f93f4ed020bfa65e452462170a54b067c133494a10596bc2f3bdf5e0d4d72fe51209c1cb9e742db4927e6552974c0ad31a30d52ed3f9b68f662d690bfead060eab0be106b416d55c2618ed2fbfcc35c014906b8c"}, @nested={0x4, 0x87}, @nested={0xf9, 0x37, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @pid}, @generic="11a5afe8f9d002d42bb30857e4afeceed870f066192158cb3b8fcd82f7e08bcbc57ec2ca4605c8c5d1b03fee9639462e8498028a942cb7156fad1effe149c6a8a63526628a24b61672b20e5698bd924b209cc163b2a0e6b3b257abd5795d8109514be9e0a86e53eeae7ed046ed9b4a9ac9b96e6be81362218d3b348a454e47c99c629845dad09bf6f207fc3e570b1b2fb7c87f34190b615612c7115d45be885437e5e10725104df3d30c34d1ef0738ade8d5b58a2b0417d84a4c47ea36ae408b34ed794a8c9071c48765fd62cbbbf7f8f03ddd6d9e5b8c390b0e2676b8dea9c876451c05080a6441c65c6d3f96"]}, @nested={0x4, 0xce}]}, @generic="d2e25421305054db07a47f975540e1e58ac2c0198ae48a231bf47fca7cddae609423f642edd3ad20d0d6ddeafb2a980a635d10b284351c069090099f241f2c10779b7e715ab6a586391325680f31d307a343da8e5c5705ca09df3fc56e26b15e436409dbe2ce7a96080af291c39679a1293a50fe385bb9b94bbfbea767e419ffaf05ea1016b9d1ed53c888ee74e0329492396948b14d10a946b22860e735a545eea9bfe84d5c5671544afd6d429a269def1648299a3d6aa5509b99497755e0", @nested={0x104, 0x13d, 0x0, 0x1, [@nested={0x4, 0xed}, @generic="fb0f94fcbfb0da75f80441391291dff856052d25843afae16bdbe23e7001e857eb5beb3d882033", @nested={0x4, 0x9}, @typed={0x8, 0x71, 0x0, 0x0, @uid=r7}, @generic="7771641d945956793d037d586c44c93ef0772e084a520495d423b3fa687a51ff74752af0029c939fffb42ba626ace7311fa40ba36c7cbb760457fe302a6ff53024bf54e8003c95ad119d14dabfdbe52749fca7f0d58e2218f46200b63efa671300751b4e64740fcbdddb76fd6cf55de6b60480075589ea44dec48b65d98773bc301e4bac9a86d7da37bbbb0137286a875476008e0012200629f74bab77ef72067e6ddeee0f4dcd4fc2dcaeef55fd9b6b05ebdcb5bc1da4ab6b96942ac93efb61792c18bba7", @nested={0x4, 0x97}]}, @generic='D', @generic="2caab3cc1513eb2311a7cb3d057e61a1d35f6293409fd181a194becb5eb86a36c3e8399bdcb8d8e08bee70beedc4104c548a1d29ca628d86f2b824bd479d23c8589e04755d113ca43f2ebe4e4cb3cf0bac3923e1c8965b4056789b447f4c81e7079271f4e0bd9687f79fd66b84217b0dd8cf89531b0142bcae5d6683ee880f0458e648845aae2b25f195b2a8fe0124d66b0adfaf7ee7750509fb49de0343852e40fd00299093dc5f5a53f4241d89f98b8be6b62139f92e7b151cdfe42a4d7f98b0c994c2a47439e9b9cc6bc6e89eb39090ee210c697df4a7e13a20184bcb23cf87922ea46f338d03cc", @typed={0x8, 0x3c, 0x0, 0x0, @u32=0x757}, @generic="3a568169df78aabe54ca7e9a8dd953ca32d10fa829f96135d525dca5d7b97904a833232b8da804fbc98fce5f5b781a1039e13ddd15cb6abf834475ec13494b4636f5f80b09d28f6f4aa47fa9842644fbb1ba32027739f2fe7c69ec86718ec12aa7f4eb73cca535de973a8c709ad70eb86c20857e2b9040470a917009bf0dccf59e47fbb838959b12289a690147f454ce96d6c0b262f87e2a8769d65cf86a9e276b7f54da6ee91299a9fafe0aa96a3216711ca4", @nested={0x8, 0x110, 0x0, 0x1, [@nested={0x4, 0xc2}]}]}, 0x614}}, 0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000000)=0x10, 0x4) 252.916708ms ago: executing program 3 (id=3211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xc) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x12, 0x0, 0x20040001}}) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r12, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) write$nci(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="5005"], 0x7) 75.627879ms ago: executing program 6 (id=3212): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRESHEX=r0], 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xc}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}]}]}, 0x48}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, r6, 0x705, 0x70bd2f, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004844) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x8}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x8, 0x0}, 0x8) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000006c0)={r0, &(0x7f0000000340)='802.15.4 MAC\x00', 0x1100, &(0x7f0000000600)={@align=0x100000000, {0x6, 0x8000}}, 0x8, &(0x7f0000000640), &(0x7f0000000680)=0x7}) socket$inet6(0xa, 0x200000000003, 0x87) (async) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x0, 0x87, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880), 0x0, 0xd8, &(0x7f0000000880), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000014da15a9187bd53ee20000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001860000004000000000000000200000018530000000000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', r9, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x60) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000014da15a9187bd53ee20000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001860000004000000000000000200000018530000000000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', r9, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x800, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x800, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="dbaa00fe50000000711016000000000018160000", @ANYRES32=r10, @ANYBLOB="00006c00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="dbaa00fe50000000711016000000000018160000", @ANYRES32=r10, @ANYBLOB="00006c00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000001f0002800600020020200000140003006e696376663000"/56], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x8, r9, 0x1, 0x8c, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x8, r9, 0x1, 0x8c, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 72.497504ms ago: executing program 1 (id=3213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x2e8, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000280)=0x1e) sendto$inet(r2, &(0x7f0000000440), 0x0, 0x884, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x8) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="1c00000034000701fffffffffe7acaff971f5ec4b3321c00648441a5"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 0s ago: executing program 1 (id=3214): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="140000000900", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x8050, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @empty, 0xe91}}}, 0x84) kernel console output (not intermixed with test programs): [T11344] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.005457][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.005609][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.034585][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.034712][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.152603][ T5626] Bluetooth: hci5: command tx timeout [ 276.188415][T11493] syzkaller1: entered promiscuous mode [ 276.188450][T11493] syzkaller1: entered allmulticast mode [ 276.550104][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'. [ 276.550150][T11511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.777116][T11522] netlink: 'syz.1.1933': attribute type 2 has an invalid length. [ 276.779879][T11522] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 276.779911][T11522] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 276.818675][T11522] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 276.834865][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.845467][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.851260][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.867921][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.868862][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.955928][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.162119][T11536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.162375][T11536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.162538][T11536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.420658][T11547] netlink: 'syz.3.1938': attribute type 16 has an invalid length. [ 277.420685][T11547] netlink: 'syz.3.1938': attribute type 17 has an invalid length. [ 277.477892][T11344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.617919][T11546] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1938'. [ 277.776354][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'. [ 277.776397][T11559] net_ratelimit: 7 callbacks suppressed [ 277.776409][T11559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.831897][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.037311][T11523] lo speed is unknown, defaulting to 1000 [ 278.154479][ T6306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.155368][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.156513][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.158839][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.233022][ T54] Bluetooth: hci5: command tx timeout [ 278.637123][T11344] veth0_vlan: entered promiscuous mode [ 278.700395][T11591] syz_tun: entered promiscuous mode [ 278.714819][T11344] veth1_vlan: entered promiscuous mode [ 278.795285][T11344] veth0_macvtap: entered promiscuous mode [ 278.812644][T11344] veth1_macvtap: entered promiscuous mode [ 278.883967][T11344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.905982][T11344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.965046][ T54] Bluetooth: hci6: command tx timeout [ 278.967503][ T4334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.967555][ T4334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.967594][ T4334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.976437][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'. [ 279.195750][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.232092][T11568] infiniband syz1: set down [ 279.232118][T11568] infiniband syz1: added team0 [ 279.242526][T11568] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 279.246729][T11568] infiniband syz1: Couldn't open port 1 [ 279.247084][T11568] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 279.247113][T11568] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 279.247150][T11568] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 279.315065][T11568] RDS/IB: syz1: added [ 279.315606][T11568] smc: adding ib device syz1 with port count 1 [ 279.315726][T11568] smc: ib device syz1 port 1 has no pnetid [ 279.425965][T11523] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.426092][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.426252][T11523] bridge_slave_0: entered allmulticast mode [ 279.427959][T11523] bridge_slave_0: entered promiscuous mode [ 279.430830][T11523] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.430933][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.431920][T11523] bridge_slave_1: entered allmulticast mode [ 279.434340][T11523] bridge_slave_1: entered promiscuous mode [ 279.444325][T10378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.444345][T10378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.575262][T11523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.613231][T11523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.653288][T10378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.653322][T10378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.713920][ T4334] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.726277][T11523] team0: Port device team_slave_0 added [ 279.743126][T11523] team0: Port device team_slave_1 added [ 279.916465][T11523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.916487][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.916515][T11523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.933131][T11523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.933149][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.933173][T11523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.019583][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.220334][T11523] hsr_slave_0: entered promiscuous mode [ 280.224580][T11523] hsr_slave_1: entered promiscuous mode [ 280.226975][T11523] debugfs: 'hsr0' already exists in 'hsr' [ 280.226996][T11523] Cannot create hsr debugfs directory [ 280.232475][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.311479][ T54] Bluetooth: hci5: command tx timeout [ 280.336796][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'. [ 280.712190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.043635][ T54] Bluetooth: hci6: command tx timeout [ 281.286989][T11523] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 281.313057][T11523] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.314000][T11523] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 281.350036][T11523] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.355736][T11523] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 281.389419][T11523] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.390025][T11523] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.422432][T11523] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.673806][T11523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.716502][T11523] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.737717][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.737850][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.776394][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.776520][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.985718][T11523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.031783][T10118] net_ratelimit: 3 callbacks suppressed [ 283.031805][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.111352][ T54] Bluetooth: hci6: command tx timeout [ 283.206920][ T4334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.223161][ T8342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.225272][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.730281][T11523] veth0_vlan: entered promiscuous mode [ 283.751855][T11523] veth1_vlan: entered promiscuous mode [ 283.939820][T11523] veth0_macvtap: entered promiscuous mode [ 283.969135][T11523] veth1_macvtap: entered promiscuous mode [ 284.038699][T11523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.054792][T11523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.215996][ T6306] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.232365][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.313063][T10378] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.313701][T10378] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.313750][T10378] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.819479][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.819508][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.945284][ T6306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.945309][ T6306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.211064][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.215232][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.237045][ T54] Bluetooth: hci6: command tx timeout [ 285.244010][T11742] netlink: 'syz.6.1928': attribute type 16 has an invalid length. [ 285.244032][T11742] netlink: 'syz.6.1928': attribute type 17 has an invalid length. [ 285.272006][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.304055][T11732] syzkaller1: entered promiscuous mode [ 285.304102][T11732] syzkaller1: entered allmulticast mode [ 285.389558][T11742] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.389711][T11742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.407367][T11742] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.407503][T11742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.508119][T11746] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1928'. [ 285.674117][T11749] syzkaller1: entered promiscuous mode [ 285.674143][T11749] syzkaller1: entered allmulticast mode [ 285.919305][T11754] syzkaller0: entered promiscuous mode [ 285.919331][T11754] syzkaller0: entered allmulticast mode [ 286.078762][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.315422][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.101559][T11788] netlink: 'syz.3.2003': attribute type 16 has an invalid length. [ 287.101585][T11788] netlink: 'syz.3.2003': attribute type 17 has an invalid length. [ 287.199910][ T8342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.351429][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.398033][T11786] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2003'. [ 288.167704][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2010'. [ 288.167749][T11813] net_ratelimit: 2 callbacks suppressed [ 288.167761][T11813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.404293][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.428424][T11815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.007785][T11829] netlink: 'syz.3.2016': attribute type 16 has an invalid length. [ 289.007812][T11829] netlink: 'syz.3.2016': attribute type 17 has an invalid length. [ 289.119513][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.274940][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.292289][T11826] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2016'. [ 289.367421][T11836] batman_adv: batadv0: Adding interface: syzkaller0 [ 289.367442][T11836] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.367475][T11836] batman_adv: batadv0: Interface activated: syzkaller0 [ 289.368297][T11837] netlink: 'syz.1.2019': attribute type 12 has an invalid length. [ 289.435481][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.487070][T11830] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 289.561563][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.580782][T11830] batman_adv: batadv0: Removing interface: syzkaller0 [ 289.682442][T11712] Set syz0 is full, maxelem 65536 reached [ 289.863199][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 290.084146][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'. [ 290.084190][T11857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.339936][T11875] netlink: 'syz.1.2031': attribute type 1 has an invalid length. [ 290.458792][T11882] netlink: 'syz.1.2031': attribute type 10 has an invalid length. [ 290.458817][T11882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2031'. [ 290.478561][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.489496][T11884] netlink: 'syz.2.2030': attribute type 16 has an invalid length. [ 290.489520][T11884] netlink: 'syz.2.2030': attribute type 17 has an invalid length. [ 290.552596][ T989] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 290.558054][T11875] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.588364][T11881] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 290.631597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.677235][T11882] dummy0: entered promiscuous mode [ 290.690944][T11882] bond6: (slave dummy0): Removing an active aggregator [ 290.695351][T11882] bond6: (slave dummy0): Releasing backup interface [ 290.731394][T11880] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2030'. [ 291.189834][ T6306] IPVS: starting estimator thread 0... [ 291.271700][T11910] IPVS: using max 27 ests per chain, 64800 per kthread [ 291.303326][T11914] tipc: New replicast peer: 172.20.20.187 [ 291.304415][T11914] tipc: Enabled bearer , priority 10 [ 292.217690][T11946] tipc: Started in network mode [ 292.217717][T11946] tipc: Node identity 2000004, cluster identity 4711 [ 292.217731][T11946] tipc: Node number set to 33554436 [ 292.421259][ T989] tipc: Node number set to 129201214 [ 293.593200][ T5797] net_ratelimit: 8 callbacks suppressed [ 293.593225][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.631450][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.203152][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.672766][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.719836][T11959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.004554][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2071'. [ 296.071716][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2071'. [ 296.083974][T10381] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.089415][T10381] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.089459][T10381] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.089491][T10381] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.165216][T12010] batman_adv: batadv0: Adding interface: syzkaller0 [ 296.165237][T12010] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.166081][T12010] batman_adv: batadv0: Interface activated: syzkaller0 [ 296.216105][T12009] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 296.249315][T12009] batman_adv: batadv0: Removing interface: syzkaller0 [ 296.797331][ T8342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.835248][T12020] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 297.236408][T12042] netlink: 'syz.2.2082': attribute type 16 has an invalid length. [ 297.236435][T12042] netlink: 'syz.2.2082': attribute type 17 has an invalid length. [ 297.458313][T12049] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2082'. [ 297.563890][T12051] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 297.752806][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.209373][T12072] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2094'. [ 298.228401][T12072] syzkaller1: entered promiscuous mode [ 298.228426][T12072] syzkaller1: entered allmulticast mode [ 298.237493][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.792066][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.013516][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 299.013561][T12093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.192644][T12022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.313872][T12099] tipc: Enabled bearer , priority 0 [ 299.317210][T12099] syzkaller0: MTU too low for tipc bearer [ 299.317235][T12099] tipc: Disabling bearer [ 299.612720][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.615906][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.817967][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 299.831524][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.919245][T12126] syz_tun (unregistering): left allmulticast mode [ 299.927997][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.928299][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.946965][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.947297][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.947516][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.030589][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2113'. [ 301.556247][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 302.508536][T12204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2139'. [ 302.508567][T12204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2139'. [ 302.508581][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 302.702274][T12216] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 302.702308][T12216] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 302.960691][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 303.332715][T12241] syzkaller1: entered promiscuous mode [ 303.332741][T12241] syzkaller1: entered allmulticast mode [ 303.993623][ T5797] net_ratelimit: 773 callbacks suppressed [ 303.993645][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.312650][ T8342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.445241][T12288] syzkaller1: entered promiscuous mode [ 304.445267][T12288] syzkaller1: entered allmulticast mode [ 304.720564][T12303] Dropped outbound packet type=17 [ 305.031723][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.356141][T12324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.357777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.646551][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2187'. [ 305.833686][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'. [ 305.991582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.992105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.072825][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.392688][ T8342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.789016][T12379] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2206'. [ 306.846977][T12379] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2206'. [ 306.993101][T12391] tipc: Started in network mode [ 306.993136][T12391] tipc: Node identity e2c7ee35cc0a, cluster identity 4711 [ 306.993318][T12391] tipc: Enabled bearer , priority 0 [ 307.107519][T12391] syzkaller0: entered promiscuous mode [ 307.107557][T12391] syzkaller0: entered allmulticast mode [ 307.108210][T12391] tipc: Resetting bearer [ 307.128765][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.143684][T12390] tipc: Resetting bearer [ 309.191456][ T989] net_ratelimit: 2 callbacks suppressed [ 309.191483][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.682023][T12390] tipc: Disabling bearer [ 309.825504][ T5797] tipc: Node number set to 785247797 [ 309.866629][T12436] netlink: Only one type of NAT may be specified [ 309.866667][T12436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.902173][T12438] ip_tables: iptables: counters copy to user failed while replacing table [ 309.908226][T12438] tipc: Enabling of bearer rejected, already enabled [ 310.047435][T12441] syzkaller1: entered promiscuous mode [ 310.047461][T12441] syzkaller1: entered allmulticast mode [ 310.271460][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.392469][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.474783][T12459] tipc: Enabled bearer , priority 0 [ 310.566967][T12457] tipc: Disabling bearer [ 310.619205][T12467] netlink: 'syz.3.2233': attribute type 1 has an invalid length. [ 310.699703][T12467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.761904][T12470] bond2: (slave veth7): Enslaving as an active interface with a down link [ 310.794088][T12467] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 310.797486][T12467] bond2: (slave batadv1): making interface the new active one [ 310.799180][T12467] batadv1: entered promiscuous mode [ 310.799712][T12467] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 310.835640][T12478] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2235'. [ 310.863453][T12470] bond2: (slave veth9): Enslaving as an active interface with a down link [ 310.869271][T12473] syzkaller0: entered promiscuous mode [ 310.869295][T12473] syzkaller0: entered allmulticast mode [ 311.362676][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.405083][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.436482][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.448685][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.163442][T12522] lo: entered allmulticast mode [ 314.163667][T12522] lo: left allmulticast mode [ 314.321546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.321778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.321992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.322211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.322414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.322620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.322833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.323048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.323279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.323491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.785858][ T1167] IPVS: starting estimator thread 0... [ 314.822633][T12552] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 314.822666][T12552] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 314.881484][T12554] IPVS: using max 27 ests per chain, 64800 per kthread [ 315.016651][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2262'. [ 315.151734][T12559] tipc: Enabling of bearer rejected, already enabled [ 315.391968][T12567] syzkaller0: entered promiscuous mode [ 315.391995][T12567] syzkaller0: entered allmulticast mode [ 315.752047][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 316.186810][T12583] syzkaller0: entered promiscuous mode [ 316.186840][T12583] syzkaller0: entered allmulticast mode [ 316.275910][T12601] netlink: 'syz.3.2273': attribute type 16 has an invalid length. [ 316.275930][T12601] netlink: 'syz.3.2273': attribute type 17 has an invalid length. [ 316.502829][T12605] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2273'. [ 317.276809][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.882992][ T12] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 318.900557][ T12] bond2: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 319.067804][T12629] syzkaller0: entered promiscuous mode [ 319.067830][T12629] syzkaller0: entered allmulticast mode [ 319.096258][T12629] tipc: Enabled bearer , priority 0 [ 319.109638][T12628] tipc: Resetting bearer [ 319.139532][T12628] tipc: Disabling bearer [ 319.931461][T10088] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.931501][T10088] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.932585][T10088] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.932615][T10088] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.932650][T10088] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.932674][T10088] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.932706][T10088] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.932730][T10088] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.032987][T12657] syzkaller0: entered promiscuous mode [ 320.033014][T12657] syzkaller0: entered allmulticast mode [ 320.047117][T12654] net_ratelimit: 96 callbacks suppressed [ 320.047166][T12654] 0: reclassify loop, rule prio 0, protocol 800 [ 320.267916][T12671] netlink: 'syz.5.2292': attribute type 1 has an invalid length. [ 320.322272][T12671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.436361][T12671] bond1: (slave gretap1): making interface the new active one [ 320.449816][T12671] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 320.641367][T12682] 0: reclassify loop, rule prio 0, protocol 03 [ 321.101501][T12693] syzkaller0: entered promiscuous mode [ 321.101539][T12693] syzkaller0: entered allmulticast mode [ 321.202481][T12692] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 321.202551][T12692] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 321.330620][T12703] syzkaller0: entered promiscuous mode [ 321.330639][T12703] syzkaller0: entered allmulticast mode [ 321.340764][T12703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2302'. [ 321.341031][T12703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2302'. [ 321.719195][T12713] syzkaller0: entered promiscuous mode [ 321.719218][T12713] syzkaller0: entered allmulticast mode [ 322.370833][T12715] syzkaller1: entered promiscuous mode [ 322.370851][T12715] syzkaller1: entered allmulticast mode [ 322.557896][T12648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.262968][T12728] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 325.263036][T12728] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 325.412218][T12736] syzkaller0: entered promiscuous mode [ 325.412244][T12736] syzkaller0: entered allmulticast mode [ 328.005550][T12775] syzkaller0: entered promiscuous mode [ 328.005576][T12775] syzkaller0: entered allmulticast mode [ 328.298052][T12782] tipc: Enabling of bearer rejected, already enabled [ 328.302900][T12792] syzkaller0: entered promiscuous mode [ 328.302923][T12792] syzkaller0: entered allmulticast mode [ 328.535912][T12801] tipc: Resetting bearer [ 328.536322][T12801] tipc: Resetting bearer [ 328.556132][ T25] lo speed is unknown, defaulting to 1000 [ 328.556651][T12804] netlink: 'syz.1.2327': attribute type 16 has an invalid length. [ 328.556673][T12804] netlink: 'syz.1.2327': attribute type 17 has an invalid length. [ 328.599546][T12804] dummy0: left promiscuous mode [ 328.610612][T12804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.718024][T12804] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 328.718058][T12804] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 328.718280][T12804] tipc: Resetting bearer [ 328.727671][T12804] ip6gre1: left promiscuous mode [ 328.727693][T12804] ip6gre1: left allmulticast mode [ 328.736950][T12804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.743852][T12813] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2327'. [ 328.744499][T12804] veth11: left allmulticast mode [ 328.758535][T12804] 8021q: adding VLAN 0 to HW filter on device bond4 [ 328.762802][T12804] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.763916][T12804] bridge6: left promiscuous mode [ 328.767190][T12804] bridge7: left promiscuous mode [ 328.975168][T12819] openvswitch: netlink: Flow key attr not present in new flow. [ 329.063910][ T61] bond0: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 329.081738][ T61] bond0: (slave veth11): making interface the new active one [ 329.116111][ T61] bond0: active interface up! [ 329.716425][T12824] syzkaller1: entered promiscuous mode [ 329.716452][T12824] syzkaller1: entered allmulticast mode [ 329.916657][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.931864][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.942446][T12858] netlink: 'syz.6.2342': attribute type 16 has an invalid length. [ 329.942470][T12858] netlink: 'syz.6.2342': attribute type 17 has an invalid length. [ 330.046225][T12855] syzkaller0: entered promiscuous mode [ 330.046253][T12855] syzkaller0: entered allmulticast mode [ 330.095861][T12852] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2342'. [ 330.144635][T12858] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.144781][T12858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.151035][T12858] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.151258][T12858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.203725][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 330.278178][T12866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.982467][T12894] tipc: Resetting bearer [ 331.580459][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 331.839250][T12934] syzkaller0: entered promiscuous mode [ 331.839277][T12934] syzkaller0: entered allmulticast mode [ 332.615838][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2375'. [ 333.322318][T13000] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2389'. [ 333.569240][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2396'. [ 333.898650][T13030] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2403'. [ 334.801844][T13066] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 335.935882][T12974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.283872][T13136] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2435'. [ 337.301602][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2437'. [ 337.301645][T13137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.316860][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2438'. [ 337.319372][T13141] netlink: 'syz.3.2439': attribute type 3 has an invalid length. [ 337.319398][T13141] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2439'. [ 338.215542][T13185] ip_tables: iptables: counters copy to user failed while replacing table [ 338.411399][T13190] tipc: Enabling of bearer rejected, already enabled [ 338.825060][T13215] netlink: zone id is out of range [ 338.825078][T13215] netlink: zone id is out of range [ 338.897590][T13214] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.900897][T13218] netlink: 'syz.6.2465': attribute type 16 has an invalid length. [ 338.900924][T13218] netlink: 'syz.6.2465': attribute type 17 has an invalid length. [ 338.926038][T13214] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.086741][ T54] Bluetooth: hci6: link tx timeout [ 339.086891][ T54] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 339.188358][T13218] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.188575][T13218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.197291][T13218] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.197414][T13218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.264453][T13218] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 339.313866][ T54] Bluetooth: hci6: link tx timeout [ 339.313893][ T54] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 339.345072][ T54] Bluetooth: hci6: link tx timeout [ 339.345090][ T54] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 339.995560][ T54] Bluetooth: hci6: link tx timeout [ 339.995583][ T54] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.079398][T13266] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.089691][T13266] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.114341][T13270] netlink: 'syz.6.2482': attribute type 16 has an invalid length. [ 340.114365][T13270] netlink: 'syz.6.2482': attribute type 17 has an invalid length. [ 340.264679][T13270] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.264792][T13270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.268517][T13270] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.268589][T13270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.378110][T13270] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 340.398759][ T54] Bluetooth: hci6: link tx timeout [ 340.398777][ T54] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.444844][T13270] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2482'. [ 341.033974][ T54] Bluetooth: hci6: link tx timeout [ 341.033999][ T54] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 341.112161][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 342.128751][T13340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2496'. [ 342.594527][T13242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.729114][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 343.487015][T13402] tipc: Enabling of bearer rejected, failed to enable media [ 343.944625][T13423] netlink: 'syz.6.2517': attribute type 16 has an invalid length. [ 343.944653][T13423] netlink: 'syz.6.2517': attribute type 17 has an invalid length. [ 343.994849][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.015272][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.247772][T13423] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.247918][T13423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.256951][T13419] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2517'. [ 344.258101][T13423] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.258221][T13423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.299045][T13423] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 344.509980][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2524'. [ 345.576410][T13495] netlink: 'syz.3.2536': attribute type 16 has an invalid length. [ 345.576439][T13495] netlink: 'syz.3.2536': attribute type 17 has an invalid length. [ 345.795625][T13495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.798103][T13495] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.820766][T13495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.855007][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.855241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.858777][ T6306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.858992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.865566][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.866254][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.866538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.870406][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.873520][T13505] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2536'. [ 345.880007][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.981749][T13495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.981796][T13495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.916579][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2543'. [ 347.245109][T13537] can: request_module (can-proto-0) failed. [ 347.430966][T13549] netlink: 'syz.3.2550': attribute type 8 has an invalid length. [ 347.430993][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2550'. [ 347.786072][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2557'. [ 348.261960][T13579] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 348.929331][T13622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2578'. [ 349.352369][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 349.618052][T13651] net_ratelimit: 21 callbacks suppressed [ 349.618133][T13651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.618507][T13651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.618789][T13651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.619012][T13651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.620906][T13651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.671921][T13651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.672208][T13651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.672582][T13651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.672860][T13651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.673089][T13651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.809003][T13685] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 351.145568][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2603'. [ 351.208346][T13698] syzkaller0: entered promiscuous mode [ 351.208367][T13698] syzkaller0: entered allmulticast mode [ 351.704953][T13719] sctp: [Deprecated]: syz.6.2604 (pid 13719) Use of int in max_burst socket option deprecated. [ 351.704953][T13719] Use struct sctp_assoc_value instead [ 352.312098][T13733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.489141][T13737] netlink: 'syz.6.2610': attribute type 1 has an invalid length. [ 352.599155][T13739] netlink: 'syz.6.2610': attribute type 10 has an invalid length. [ 352.599180][T13739] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2610'. [ 354.451737][T13701] netlink: 'syz.5.2602': attribute type 5 has an invalid length. [ 354.466761][T13737] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 354.490400][T13739] dummy0: entered promiscuous mode [ 354.748581][T13754] net_ratelimit: 1023 callbacks suppressed [ 354.748605][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.748888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.774015][T13752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.776246][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.776546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.801009][T13760] batman_adv: batadv0: Adding interface: syzkaller0 [ 354.801028][T13760] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.812741][T13760] batman_adv: batadv0: Interface activated: syzkaller0 [ 354.855425][T13757] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 354.949570][T13757] batman_adv: batadv0: Removing interface: syzkaller0 [ 354.962659][T13767] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 355.095957][T13767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.118310][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.254224][T13771] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 355.254968][T13779] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2621'. [ 355.284914][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.336059][T13767] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 355.363417][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 355.524388][ T3382] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 355.639292][T13793] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2625'. [ 355.640362][T13786] syzkaller0: entered promiscuous mode [ 355.640386][T13786] syzkaller0: entered allmulticast mode [ 356.324380][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.577909][T13794] syzkaller1: entered promiscuous mode [ 358.577927][T13794] syzkaller1: entered allmulticast mode [ 358.927322][T13841] netlink: 'syz.1.2639': attribute type 16 has an invalid length. [ 358.927349][T13841] netlink: 'syz.1.2639': attribute type 17 has an invalid length. [ 359.138086][T13851] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2639'. [ 359.667911][T13868] bond0: entered promiscuous mode [ 359.691336][T13873] macvlan3: entered promiscuous mode [ 359.691361][T13873] macvlan3: entered allmulticast mode [ 359.692560][T13873] bond0: (slave macvlan3): Opening slave failed [ 360.343237][T13898] netlink: 'syz.6.2654': attribute type 16 has an invalid length. [ 360.354012][T13895] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.354714][T13898] netlink: 'syz.6.2654': attribute type 17 has an invalid length. [ 360.379594][T13895] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.435288][T13898] dummy0: left promiscuous mode [ 360.448840][T13898] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.448979][T13898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.450909][T13898] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.451124][T13898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.475746][ T25] net_ratelimit: 15 callbacks suppressed [ 360.475769][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.523934][T13898] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 360.585861][T13898] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2654'. [ 361.192823][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.436588][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.519342][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.640100][T13942] syzkaller0: entered promiscuous mode [ 361.640126][T13942] syzkaller0: entered allmulticast mode [ 362.108229][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2673'. [ 362.123911][T13970] bridge_slave_1: left allmulticast mode [ 362.123942][T13970] bridge_slave_1: left promiscuous mode [ 362.124200][T13970] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.161799][T13970] bridge_slave_0: left allmulticast mode [ 362.161831][T13970] bridge_slave_0: left promiscuous mode [ 362.162085][T13970] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.236257][T13961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.345007][T13972] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2671'. [ 362.362559][T13965] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2671'. [ 362.398424][T13974] syzkaller0: entered promiscuous mode [ 362.398449][T13974] syzkaller0: entered allmulticast mode [ 362.552234][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.862304][T13996] syzkaller0: entered promiscuous mode [ 362.862333][T13996] syzkaller0: entered allmulticast mode [ 363.597299][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.931667][T14015] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2683'. [ 363.932665][T14015] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2683'. [ 364.240246][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.244878][T14021] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2685'. [ 364.296247][T14022] netlink: 'syz.6.2685': attribute type 21 has an invalid length. [ 364.296278][T14022] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.296374][T14022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.296385][T14022] IPv6: NLM_F_CREATE should be set when creating new route [ 364.296429][T14022] IPv6: NLM_F_CREATE should be set when creating new route [ 364.296455][T14022] IPv6: NLM_F_CREATE should be set when creating new route [ 364.636977][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.689179][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.727264][T14021] netlink: 'syz.6.2685': attribute type 21 has an invalid length. [ 365.727330][T14021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.979891][T14031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.980443][T14031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.602282][T14062] syzkaller0: entered promiscuous mode [ 366.602310][T14062] syzkaller0: entered allmulticast mode [ 366.726115][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.819345][T14047] syzkaller1: entered promiscuous mode [ 366.819370][T14047] syzkaller1: entered allmulticast mode [ 366.947140][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2702'. [ 367.236798][T14085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2706'. [ 367.281731][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.454840][ T6306] bond4: (slave dummy0): link status up again after 0 ms [ 367.474297][ T13] bond4: (slave dummy0): link status up again after 0 ms [ 367.491194][ T13] bond4: (slave dummy0): link status up again after 0 ms [ 367.512611][ T13] bond4: (slave dummy0): link status up again after 0 ms [ 367.532362][ T6306] bond4: (slave dummy0): link status up again after 0 ms [ 367.678691][T14092] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2710'. [ 368.524682][T14134] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2726'. [ 368.949391][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2735'. [ 368.949419][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2735'. [ 368.996466][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2734'. [ 369.109864][T14167] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2740'. [ 369.466696][T14184] tipc: Enabled bearer , priority 0 [ 369.933098][T14201] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 369.933129][T14201] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 370.049467][T14168] syzkaller1: entered promiscuous mode [ 370.049495][T14168] syzkaller1: entered allmulticast mode [ 370.553082][T14222] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 370.553112][T14222] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 370.556770][T14222] tipc: Enabling of bearer rejected, already enabled [ 370.709104][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'. [ 370.709149][T14230] net_ratelimit: 37 callbacks suppressed [ 370.709164][T14230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.771247][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 370.873957][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.883609][ T61] bond4: (slave dummy0): failed to get link speed/duplex [ 370.947424][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'. [ 371.033810][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.037505][T14238] syzkaller0: entered promiscuous mode [ 371.037532][T14238] syzkaller0: entered allmulticast mode [ 371.061253][ T61] bond4: (slave dummy0): failed to get link speed/duplex [ 371.171584][ T61] bond4: (slave dummy0): failed to get link speed/duplex [ 371.306504][T14252] netlink: 'syz.5.2772': attribute type 1 has an invalid length. [ 371.306530][T14252] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2772'. [ 371.438342][T14264] netlink: 83 bytes leftover after parsing attributes in process `syz.5.2775'. [ 371.914999][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.961462][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.354845][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.740760][T14271] tipc: Enabling of bearer rejected, failed to enable media [ 373.950399][T14279] netlink: 808 bytes leftover after parsing attributes in process `syz.2.2777'. [ 374.833487][T14319] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 374.833518][T14319] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 375.502732][T14349] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.502882][T14349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.502895][T14349] IPv6: NLM_F_CREATE should be set when creating new route [ 375.781415][ T6300] net_ratelimit: 22 callbacks suppressed [ 375.781444][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 375.892123][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 375.899331][T14367] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2817'. [ 376.012333][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 376.071569][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.128889][ T12] bond4: (slave dummy0): failed to get link speed/duplex [ 376.233321][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 376.344041][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 376.392564][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.452789][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 376.561719][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 377.124862][T14415] syzkaller0: entered promiscuous mode [ 377.124890][T14415] syzkaller0: entered allmulticast mode [ 377.363510][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 378.717521][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.019892][T14458] syzkaller1: entered promiscuous mode [ 380.019921][T14458] syzkaller1: entered allmulticast mode [ 380.851496][ T6305] net_ratelimit: 17 callbacks suppressed [ 380.851521][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 380.943974][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2853'. [ 380.945005][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2853'. [ 380.974045][ T144] bond4: (slave dummy0): failed to get link speed/duplex [ 381.069750][T14486] openvswitch: netlink: Flow key attr not present in new flow. [ 381.085156][ T12] bond4: (slave dummy0): failed to get link speed/duplex [ 381.272648][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.314815][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 381.462221][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 381.571378][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 381.630446][T14502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2860'. [ 381.682187][ T6306] bond4: (slave dummy0): failed to get link speed/duplex [ 381.794146][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 381.876880][T14505] netlink: 'syz.2.2864': attribute type 5 has an invalid length. [ 381.931807][T14509] tipc: Enabled bearer , priority 0 [ 383.903535][T14582] netlink: 'syz.1.2889': attribute type 16 has an invalid length. [ 383.903560][T14582] netlink: 'syz.1.2889': attribute type 17 has an invalid length. [ 384.135778][T14582] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2889'. [ 385.160431][T14603] syzkaller0: entered promiscuous mode [ 385.160448][T14603] syzkaller0: entered allmulticast mode [ 385.536123][T14539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.800130][T14613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2901'. [ 385.885308][T10088] net_ratelimit: 52 callbacks suppressed [ 385.885333][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 385.886534][T14618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.886881][T14618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.887165][T14618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.887422][T14618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.887684][T14618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.887970][T14618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.893977][T14618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.894273][T14618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.894519][T14618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.515255][T14648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2909'. [ 387.129257][T14653] syzkaller0: entered promiscuous mode [ 387.129276][T14653] syzkaller0: entered allmulticast mode [ 387.277983][T14655] netlink: 'syz.2.2912': attribute type 16 has an invalid length. [ 387.278002][T14655] netlink: 'syz.2.2912': attribute type 17 has an invalid length. [ 387.426457][T14657] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2912'. [ 388.907357][T14627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.162083][T14661] syzkaller0: entered promiscuous mode [ 389.162109][T14661] syzkaller0: entered allmulticast mode [ 389.587106][T14680] tipc: Resetting bearer [ 389.587701][T14680] tipc: Resetting bearer [ 389.616385][T14681] netlink: 'syz.6.2921': attribute type 16 has an invalid length. [ 389.616410][T14681] netlink: 'syz.6.2921': attribute type 17 has an invalid length. [ 389.653225][T14680] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.656026][T14680] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.739781][T14681] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.739929][T14681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.760353][T14681] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.760496][T14681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.909475][T14680] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2921'. [ 390.016740][T14694] syzkaller0: entered promiscuous mode [ 390.016764][T14694] syzkaller0: entered allmulticast mode [ 390.753963][T14722] netlink: 'syz.3.2933': attribute type 16 has an invalid length. [ 390.753990][T14722] netlink: 'syz.3.2933': attribute type 17 has an invalid length. [ 390.892818][ T12] net_ratelimit: 115 callbacks suppressed [ 390.892847][ T12] bond4: (slave dummy0): link status up again after 0 ms [ 390.899325][T14722] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 390.921362][T10088] bond4: (slave dummy0): link status up again after 0 ms [ 390.921397][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 390.995733][T14735] syzkaller0: entered promiscuous mode [ 390.995760][T14735] syzkaller0: entered allmulticast mode [ 391.021332][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 391.110075][T14722] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2933'. [ 391.181204][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 391.291578][ T144] bond4: (slave dummy0): failed to get link speed/duplex [ 391.349303][T14747] netlink: 'syz.5.2937': attribute type 16 has an invalid length. [ 391.349329][T14747] netlink: 'syz.5.2937': attribute type 17 has an invalid length. [ 391.416847][T14748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.443316][ T81] bond4: (slave dummy0): failed to get link speed/duplex [ 391.547865][T14748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.756911][T14758] syzkaller0: entered promiscuous mode [ 391.756943][T14758] syzkaller0: entered allmulticast mode [ 391.763113][T14761] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 391.763139][T14761] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 391.825007][T14747] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2937'. [ 391.827423][T14767] netlink: 'syz.2.2944': attribute type 16 has an invalid length. [ 391.827446][T14767] netlink: 'syz.2.2944': attribute type 17 has an invalid length. [ 392.096614][T14773] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2944'. [ 392.450221][T14781] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2946'. [ 394.604763][T14787] syzkaller0: entered promiscuous mode [ 394.604788][T14787] syzkaller0: entered allmulticast mode [ 394.677579][T14797] validate_nla: 2 callbacks suppressed [ 394.677612][T14797] netlink: 'syz.1.2950': attribute type 16 has an invalid length. [ 394.677628][T14797] netlink: 'syz.1.2950': attribute type 17 has an invalid length. [ 394.929202][T14806] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2950'. [ 394.970566][T14810] netlink: 'syz.3.2952': attribute type 16 has an invalid length. [ 394.970591][T14810] netlink: 'syz.3.2952': attribute type 17 has an invalid length. [ 395.533529][T14831] netlink: 'syz.5.2956': attribute type 16 has an invalid length. [ 395.533556][T14831] netlink: 'syz.5.2956': attribute type 17 has an invalid length. [ 395.863139][T14840] tipc: Enabling of bearer rejected, already enabled [ 395.882562][T14836] tipc: Enabled bearer , priority 0 [ 395.907817][T14826] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2956'. [ 395.955009][ T6300] net_ratelimit: 51 callbacks suppressed [ 395.955034][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 396.085708][T14835] tipc: Resetting bearer [ 396.112044][T14835] tipc: Disabling bearer [ 396.139267][T14850] netlink: 'syz.5.2964': attribute type 16 has an invalid length. [ 396.139310][T14850] netlink: 'syz.5.2964': attribute type 17 has an invalid length. [ 396.162727][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 396.299288][T14850] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 396.348574][T14849] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 396.348604][T14849] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 396.405247][T14860] netlink: 'syz.3.2965': attribute type 16 has an invalid length. [ 396.405272][T14860] netlink: 'syz.3.2965': attribute type 17 has an invalid length. [ 396.421703][ T81] bond4: (slave dummy0): link status up again after 0 ms [ 396.441519][ T6300] bond4: (slave dummy0): link status up again after 0 ms [ 396.463374][ T144] bond4: (slave dummy0): link status up again after 0 ms [ 396.481214][ T144] bond4: (slave dummy0): link status up again after 0 ms [ 396.502110][ T81] bond4: (slave dummy0): link status up again after 0 ms [ 396.523814][ T12] bond4: (slave dummy0): link status up again after 0 ms [ 396.541226][ T81] bond4: (slave dummy0): link status up again after 0 ms [ 396.561433][ T81] bond4: (slave dummy0): link status up again after 0 ms [ 396.564827][T14850] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2964'. [ 396.655811][T14857] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2965'. [ 397.267489][T14879] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2969'. [ 397.285945][T14878] syzkaller0: entered promiscuous mode [ 397.285974][T14878] syzkaller0: entered allmulticast mode [ 397.385722][T14889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2974'. [ 397.385749][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2974'. [ 397.400775][T14890] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2974'. [ 397.400800][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2974'. [ 397.515957][T14893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2978'. [ 400.045110][T14910] validate_nla: 4 callbacks suppressed [ 400.045135][T14910] netlink: 'syz.2.2981': attribute type 4 has an invalid length. [ 400.104722][T14913] netlink: 'syz.3.2982': attribute type 16 has an invalid length. [ 400.104749][T14913] netlink: 'syz.3.2982': attribute type 17 has an invalid length. [ 400.209517][T14916] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 400.209547][T14916] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 400.288851][T14909] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2982'. [ 400.289939][T14911] tipc: Enabling of bearer rejected, already enabled [ 400.982239][ T6300] net_ratelimit: 48 callbacks suppressed [ 400.982264][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 401.013284][T14956] FAULT_INJECTION: forcing a failure. [ 401.013284][T14956] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 401.013321][T14956] CPU: 1 UID: 0 PID: 14956 Comm: syz.6.3003 Not tainted syzkaller #0 PREEMPT(full) [ 401.013344][T14956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.013357][T14956] Call Trace: [ 401.013436][T14956] [ 401.013489][T14956] dump_stack_lvl+0xe8/0x150 [ 401.013656][T14956] should_fail_ex+0x410/0x560 [ 401.013758][T14956] _copy_from_user+0x2d/0xb0 [ 401.013836][T14956] sctp_setsockopt+0x1c4/0x12c0 [ 401.013922][T14956] ? sock_common_setsockopt+0x36/0xc0 [ 401.014028][T14956] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 401.014053][T14956] do_sock_setsockopt+0x17c/0x1b0 [ 401.014140][T14956] __x64_sys_setsockopt+0x13d/0x1b0 [ 401.014173][T14956] do_syscall_64+0x166/0x520 [ 401.014286][T14956] ? trace_irq_disable+0x3b/0x140 [ 401.014334][T14956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.014375][T14956] ? clear_bhb_loop+0x70/0xc0 [ 401.014402][T14956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.014424][T14956] RIP: 0033:0x7fcd7659e159 [ 401.014484][T14956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.014503][T14956] RSP: 002b:00007fcd77511028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 401.014550][T14956] RAX: ffffffffffffffda RBX: 00007fcd76825fa0 RCX: 00007fcd7659e159 [ 401.014567][T14956] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 401.014589][T14956] RBP: 00007fcd77511090 R08: 000000000000003c R09: 0000000000000000 [ 401.014603][T14956] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 401.014617][T14956] R13: 00007fcd76826038 R14: 00007fcd76825fa0 R15: 00007fff22f414f8 [ 401.014653][T14956] [ 401.034140][ T6300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.067685][ T8344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.093492][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 401.130645][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.221232][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 401.333954][ T81] bond4: (slave dummy0): failed to get link speed/duplex [ 401.436766][T14971] nbd0: detected capacity change from 0 to 63 [ 401.442056][ T81] bond4: (slave dummy0): failed to get link speed/duplex [ 401.482666][T14971] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 401.549247][ T5626] block nbd0: Receive control failed (result -104) [ 401.615379][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 401.650454][T14980] FAULT_INJECTION: forcing a failure. [ 401.650454][T14980] name failslab, interval 1, probability 0, space 0, times 0 [ 401.650489][T14980] CPU: 1 UID: 0 PID: 14980 Comm: syz.6.3013 Not tainted syzkaller #0 PREEMPT(full) [ 401.650523][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.650536][T14980] Call Trace: [ 401.650544][T14980] [ 401.650553][T14980] dump_stack_lvl+0xe8/0x150 [ 401.650589][T14980] should_fail_ex+0x410/0x560 [ 401.650619][T14980] should_failslab+0xa8/0x100 [ 401.650713][T14980] __kmalloc_noprof+0xfe/0x720 [ 401.650743][T14980] ? tomoyo_encode+0x2ad/0x570 [ 401.650875][T14980] ? tomoyo_encode+0x2ad/0x570 [ 401.650910][T14980] tomoyo_encode+0x2ad/0x570 [ 401.650943][T14980] tomoyo_realpath_from_path+0x5fa/0x640 [ 401.650982][T14980] ? tomoyo_path_number_perm+0x219/0x5f0 [ 401.651006][T14980] tomoyo_path_number_perm+0x246/0x5f0 [ 401.651031][T14980] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.651072][T14980] ? __lock_acquire+0x747/0x2de0 [ 401.651134][T14980] ? hook_file_ioctl+0x1f2/0x600 [ 401.651211][T14980] ? __fget_files+0x2a/0x420 [ 401.651255][T14980] ? __fget_files+0x2a/0x420 [ 401.651281][T14980] ? __fget_files+0x3a2/0x420 [ 401.651306][T14980] ? __fget_files+0x2a/0x420 [ 401.651339][T14980] security_file_ioctl+0xc3/0x2a0 [ 401.651386][T14980] __se_sys_ioctl+0x47/0x170 [ 401.651420][T14980] do_syscall_64+0x166/0x520 [ 401.651444][T14980] ? trace_irq_disable+0x3b/0x140 [ 401.651466][T14980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.651488][T14980] ? clear_bhb_loop+0x70/0xc0 [ 401.651523][T14980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.651543][T14980] RIP: 0033:0x7fcd7659e159 [ 401.651564][T14980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.651582][T14980] RSP: 002b:00007fcd77511028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.651607][T14980] RAX: ffffffffffffffda RBX: 00007fcd76825fa0 RCX: 00007fcd7659e159 [ 401.651622][T14980] RDX: 0000200000000180 RSI: 00000000000089eb RDI: 0000000000000004 [ 401.651636][T14980] RBP: 00007fcd77511090 R08: 0000000000000000 R09: 0000000000000000 [ 401.651649][T14980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.651662][T14980] R13: 00007fcd76826038 R14: 00007fcd76825fa0 R15: 00007fff22f414f8 [ 401.651696][T14980] [ 401.663764][T14980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.723161][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 401.976302][T14987] ip6t_srh: unknown srh invflags 4000 [ 402.006661][T14988] FAULT_INJECTION: forcing a failure. [ 402.006661][T14988] name failslab, interval 1, probability 0, space 0, times 0 [ 402.006697][T14988] CPU: 1 UID: 0 PID: 14988 Comm: syz.1.3015 Not tainted syzkaller #0 PREEMPT(full) [ 402.006721][T14988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.006734][T14988] Call Trace: [ 402.006743][T14988] [ 402.006753][T14988] dump_stack_lvl+0xe8/0x150 [ 402.006789][T14988] should_fail_ex+0x410/0x560 [ 402.006820][T14988] should_failslab+0xa8/0x100 [ 402.006850][T14988] __kmalloc_noprof+0xfe/0x720 [ 402.006882][T14988] ? tomoyo_encode+0x2ad/0x570 [ 402.006908][T14988] ? tomoyo_encode+0x2ad/0x570 [ 402.006942][T14988] tomoyo_encode+0x2ad/0x570 [ 402.006988][T14988] tomoyo_realpath_from_path+0x5fa/0x640 [ 402.007028][T14988] ? tomoyo_path_number_perm+0x219/0x5f0 [ 402.007052][T14988] tomoyo_path_number_perm+0x246/0x5f0 [ 402.007077][T14988] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 402.007106][T14988] ? __lock_acquire+0x747/0x2de0 [ 402.007143][T14988] ? hook_file_ioctl+0x1f2/0x600 [ 402.007189][T14988] ? __fget_files+0x2a/0x420 [ 402.007220][T14988] ? __fget_files+0x2a/0x420 [ 402.007247][T14988] ? __fget_files+0x3a2/0x420 [ 402.007272][T14988] ? __fget_files+0x2a/0x420 [ 402.007304][T14988] security_file_ioctl+0xc3/0x2a0 [ 402.007327][T14988] __se_sys_ioctl+0x47/0x170 [ 402.007352][T14988] do_syscall_64+0x166/0x520 [ 402.007375][T14988] ? trace_irq_disable+0x3b/0x140 [ 402.007396][T14988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.007418][T14988] ? clear_bhb_loop+0x70/0xc0 [ 402.007444][T14988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.007465][T14988] RIP: 0033:0x7f1b4879e159 [ 402.007486][T14988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.007503][T14988] RSP: 002b:00007f1b49735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.007528][T14988] RAX: ffffffffffffffda RBX: 00007f1b48a25fa0 RCX: 00007f1b4879e159 [ 402.007543][T14988] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 402.007556][T14988] RBP: 00007f1b49735090 R08: 0000000000000000 R09: 0000000000000000 [ 402.007569][T14988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.007581][T14988] R13: 00007f1b48a26038 R14: 00007f1b48a25fa0 R15: 00007ffc21496fb8 [ 402.007617][T14988] [ 402.018132][T14988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 402.488287][T15008] netlink: 'syz.5.3022': attribute type 25 has an invalid length. [ 402.844680][T15023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3029'. [ 402.982743][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3031'. [ 402.982885][T15030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.315389][T15030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.666527][T15052] : renamed from bond0 (while UP) [ 403.797217][T15059] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3037'. [ 403.885591][T15062] netlink: 'syz.1.3038': attribute type 25 has an invalid length. [ 404.230360][T15075] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3043'. [ 404.243758][T15073] FAULT_INJECTION: forcing a failure. [ 404.243758][T15073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.243794][T15073] CPU: 1 UID: 0 PID: 15073 Comm: syz.5.3040 Not tainted syzkaller #0 PREEMPT(full) [ 404.243819][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.243831][T15073] Call Trace: [ 404.243839][T15073] [ 404.243849][T15073] dump_stack_lvl+0xe8/0x150 [ 404.243886][T15073] should_fail_ex+0x410/0x560 [ 404.243916][T15073] _copy_to_user+0x31/0xb0 [ 404.243945][T15073] btf_get_info_by_fd+0x1db/0x650 [ 404.244012][T15073] ? __fget_files+0x2a/0x420 [ 404.244042][T15073] ? __pfx_btf_get_info_by_fd+0x10/0x10 [ 404.244065][T15073] ? __fget_files+0x2a/0x420 [ 404.244100][T15073] bpf_obj_get_info_by_fd+0xa82/0x3530 [ 404.244138][T15073] ? lock_acquire+0x115/0x350 [ 404.244171][T15073] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 404.244203][T15073] ? __lock_acquire+0x747/0x2de0 [ 404.244236][T15073] ? kstrtoull+0x137/0x1d0 [ 404.244271][T15073] ? kstrtouint+0x6e/0xe0 [ 404.244305][T15073] ? lock_acquire+0x115/0x350 [ 404.244348][T15073] ? bpf_lsm_bpf+0x9/0x20 [ 404.244383][T15073] ? security_bpf+0x7e/0x2d0 [ 404.244462][T15073] __sys_bpf+0xa50/0xd90 [ 404.244494][T15073] ? __pfx___sys_bpf+0x10/0x10 [ 404.244532][T15073] ? __fget_files+0x2a/0x420 [ 404.244586][T15073] ? ksys_write+0x242/0x270 [ 404.244619][T15073] ? __pfx_ksys_write+0x10/0x10 [ 404.244655][T15073] __x64_sys_bpf+0xba/0xd0 [ 404.244685][T15073] do_syscall_64+0x166/0x520 [ 404.244709][T15073] ? trace_irq_disable+0x3b/0x140 [ 404.244730][T15073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.244752][T15073] ? clear_bhb_loop+0x70/0xc0 [ 404.244778][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.244799][T15073] RIP: 0033:0x7f104839e159 [ 404.244820][T15073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.244837][T15073] RSP: 002b:00007f10465f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.244862][T15073] RAX: ffffffffffffffda RBX: 00007f1048625fa0 RCX: 00007f104839e159 [ 404.244877][T15073] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 404.244890][T15073] RBP: 00007f10465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.244903][T15073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.244916][T15073] R13: 00007f1048626038 R14: 00007f1048625fa0 R15: 00007ffc2a2d40f8 [ 404.244951][T15073] [ 404.299150][T15075] FAULT_INJECTION: forcing a failure. [ 404.299150][T15075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.299182][T15075] CPU: 1 UID: 0 PID: 15075 Comm: syz.1.3043 Not tainted syzkaller #0 PREEMPT(full) [ 404.299204][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.299215][T15075] Call Trace: [ 404.299223][T15075] [ 404.299235][T15075] dump_stack_lvl+0xe8/0x150 [ 404.299269][T15075] should_fail_ex+0x410/0x560 [ 404.299295][T15075] _copy_from_iter+0x1d3/0x1660 [ 404.299316][T15075] ? trace_kmem_cache_alloc+0x29/0xe0 [ 404.299344][T15075] ? __build_skb+0x62/0x440 [ 404.299367][T15075] ? trace_kmalloc+0x2a/0xf0 [ 404.299392][T15075] ? __build_skb+0x62/0x440 [ 404.299412][T15075] ? __build_skb+0x62/0x440 [ 404.299434][T15075] ? __pfx__copy_from_iter+0x10/0x10 [ 404.299461][T15075] ? __build_skb+0x2a2/0x440 [ 404.299483][T15075] ? netlink_sendmsg+0x650/0xb40 [ 404.299628][T15075] ? skb_put+0x112/0x210 [ 404.299653][T15075] netlink_sendmsg+0x6c0/0xb40 [ 404.299689][T15075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.299725][T15075] ? apparmor_socket_sendmsg+0x98/0x360 [ 404.299768][T15075] ? lock_acquire+0x115/0x350 [ 404.299789][T15075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.299815][T15075] sock_sendmsg_nosec+0x13a/0x180 [ 404.299846][T15075] sock_write_iter+0x2de/0x3e0 [ 404.299876][T15075] ? __pfx_sock_write_iter+0x10/0x10 [ 404.299910][T15075] ? bpf_lsm_file_permission+0x9/0x20 [ 404.299934][T15075] ? security_file_permission+0x75/0x260 [ 404.299991][T15075] vfs_write+0x612/0xba0 [ 404.300027][T15075] ? __pfx_vfs_write+0x10/0x10 [ 404.300065][T15075] ? __fget_files+0x2a/0x420 [ 404.300099][T15075] ksys_write+0x150/0x270 [ 404.300129][T15075] ? __pfx_ksys_write+0x10/0x10 [ 404.300167][T15075] do_syscall_64+0x166/0x520 [ 404.300189][T15075] ? trace_irq_disable+0x3b/0x140 [ 404.300207][T15075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.300226][T15075] ? clear_bhb_loop+0x70/0xc0 [ 404.300249][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.300268][T15075] RIP: 0033:0x7f1b4879e159 [ 404.300286][T15075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.300302][T15075] RSP: 002b:00007f1b49735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.300323][T15075] RAX: ffffffffffffffda RBX: 00007f1b48a25fa0 RCX: 00007f1b4879e159 [ 404.300337][T15075] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000000b [ 404.300350][T15075] RBP: 00007f1b49735090 R08: 0000000000000000 R09: 0000000000000000 [ 404.300361][T15075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.300373][T15075] R13: 00007f1b48a26038 R14: 00007f1b48a25fa0 R15: 00007ffc21496fb8 [ 404.300404][T15075] [ 404.812114][T15093] sctp: [Deprecated]: syz.2.3047 (pid 15093) Use of int in maxseg socket option. [ 404.812114][T15093] Use struct sctp_assoc_value instead [ 404.871465][ T5626] Bluetooth: hci6: link tx timeout [ 404.871489][ T5626] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 405.046339][T15104] FAULT_INJECTION: forcing a failure. [ 405.046339][T15104] name failslab, interval 1, probability 0, space 0, times 0 [ 405.046373][T15104] CPU: 0 UID: 0 PID: 15104 Comm: syz.2.3051 Not tainted syzkaller #0 PREEMPT(full) [ 405.046407][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.046417][T15104] Call Trace: [ 405.046425][T15104] [ 405.046432][T15104] dump_stack_lvl+0xe8/0x150 [ 405.046465][T15104] should_fail_ex+0x410/0x560 [ 405.046493][T15104] should_failslab+0xa8/0x100 [ 405.046517][T15104] ? skb_clone+0x212/0x3a0 [ 405.046543][T15104] kmem_cache_alloc_noprof+0xa1/0x600 [ 405.046576][T15104] ? skb_clone+0x212/0x3a0 [ 405.046610][T15104] skb_clone+0x212/0x3a0 [ 405.046641][T15104] __netlink_deliver_tap+0x413/0x860 [ 405.046684][T15104] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.046715][T15104] netlink_deliver_tap+0x19c/0x1b0 [ 405.046746][T15104] netlink_unicast+0x781/0x940 [ 405.046785][T15104] netlink_sendmsg+0x813/0xb40 [ 405.046825][T15104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.046864][T15104] ? apparmor_socket_sendmsg+0x98/0x360 [ 405.046889][T15104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.046917][T15104] sock_sendmsg_nosec+0x13a/0x180 [ 405.046951][T15104] ____sys_sendmsg+0x54e/0x850 [ 405.046981][T15104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.047017][T15104] ? import_iovec+0x73/0xa0 [ 405.047046][T15104] ___sys_sendmsg+0x2a5/0x360 [ 405.047072][T15104] ? __lock_acquire+0x747/0x2de0 [ 405.047099][T15104] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.047162][T15104] ? __fget_files+0x2a/0x420 [ 405.047190][T15104] ? __fget_files+0x3a2/0x420 [ 405.047229][T15104] __x64_sys_sendmsg+0x1b1/0x290 [ 405.047259][T15104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.047312][T15104] do_syscall_64+0x166/0x520 [ 405.047335][T15104] ? trace_irq_disable+0x3b/0x140 [ 405.047359][T15104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.047380][T15104] ? clear_bhb_loop+0x70/0xc0 [ 405.047415][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.047437][T15104] RIP: 0033:0x7f8cfd59e159 [ 405.047458][T15104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.047475][T15104] RSP: 002b:00007f8cfe430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.047500][T15104] RAX: ffffffffffffffda RBX: 00007f8cfd825fa0 RCX: 00007f8cfd59e159 [ 405.047516][T15104] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 405.047529][T15104] RBP: 00007f8cfe430090 R08: 0000000000000000 R09: 0000000000000000 [ 405.047542][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.047555][T15104] R13: 00007f8cfd826038 R14: 00007f8cfd825fa0 R15: 00007ffe5acba608 [ 405.047591][T15104] [ 405.655375][T15122] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3060'. [ 405.916735][T15135] netlink: 'syz.5.3063': attribute type 16 has an invalid length. [ 405.916760][T15135] netlink: 'syz.5.3063': attribute type 17 has an invalid length. [ 406.290303][T15131] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3063'. [ 406.310067][T15135] net_ratelimit: 35 callbacks suppressed [ 406.310093][T15135] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 406.393614][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.705088][T15150] tipc: Enabled bearer , priority 0 [ 406.718075][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 406.734430][T15139] tipc: Disabling bearer [ 406.822732][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 406.930201][T15159] FAULT_INJECTION: forcing a failure. [ 406.930201][T15159] name failslab, interval 1, probability 0, space 0, times 0 [ 406.930238][T15159] CPU: 0 UID: 0 PID: 15159 Comm: syz.1.3069 Not tainted syzkaller #0 PREEMPT(full) [ 406.930262][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.930275][T15159] Call Trace: [ 406.930283][T15159] [ 406.930293][T15159] dump_stack_lvl+0xe8/0x150 [ 406.930330][T15159] should_fail_ex+0x410/0x560 [ 406.930359][T15159] should_failslab+0xa8/0x100 [ 406.930387][T15159] __kmalloc_noprof+0xfe/0x720 [ 406.930408][T15159] ? fib6_info_alloc+0x30/0xf0 [ 406.930509][T15159] ? fib6_info_alloc+0x30/0xf0 [ 406.930536][T15159] fib6_info_alloc+0x30/0xf0 [ 406.930557][T15159] ip6_route_info_create+0x149/0x890 [ 406.930612][T15159] ip6_route_add+0x49/0x1b0 [ 406.930636][T15159] inet6_rtm_newroute+0x267/0x1a30 [ 406.930675][T15159] ? kasan_quarantine_put+0xbb/0x1f0 [ 406.930695][T15159] ? lockdep_hardirqs_on+0x7b/0x110 [ 406.930750][T15159] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 406.930779][T15159] ? nlmon_xmit+0xb0/0x100 [ 406.930855][T15159] ? kmem_cache_free+0x182/0x650 [ 406.930899][T15159] ? __lock_acquire+0x747/0x2de0 [ 406.930932][T15159] ? __local_bh_enable_ip+0xd6/0x140 [ 406.930996][T15159] ? lockdep_hardirqs_on+0x7b/0x110 [ 406.931051][T15159] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 406.931081][T15159] rtnetlink_rcv_msg+0x802/0xc00 [ 406.931153][T15159] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 406.931177][T15159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.931199][T15159] ? ref_tracker_free+0x689/0x830 [ 406.931254][T15159] ? __pfx_ref_tracker_free+0x10/0x10 [ 406.931290][T15159] netlink_rcv_skb+0x226/0x4a0 [ 406.931319][T15159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.931346][T15159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.931389][T15159] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.931418][T15159] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.931452][T15159] netlink_unicast+0x7bd/0x940 [ 406.931491][T15159] netlink_sendmsg+0x813/0xb40 [ 406.931530][T15159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.931569][T15159] ? apparmor_socket_sendmsg+0x98/0x360 [ 406.931590][T15159] ? lock_acquire+0x115/0x350 [ 406.931612][T15159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.931641][T15159] sock_sendmsg_nosec+0x13a/0x180 [ 406.931676][T15159] sock_write_iter+0x2de/0x3e0 [ 406.931708][T15159] ? __pfx_sock_write_iter+0x10/0x10 [ 406.931746][T15159] ? bpf_lsm_file_permission+0x9/0x20 [ 406.931773][T15159] ? security_file_permission+0x75/0x260 [ 406.931814][T15159] vfs_write+0x612/0xba0 [ 406.931853][T15159] ? __pfx_vfs_write+0x10/0x10 [ 406.931903][T15159] ? __fget_files+0x2a/0x420 [ 406.931940][T15159] ksys_write+0x150/0x270 [ 406.931972][T15159] ? __pfx_ksys_write+0x10/0x10 [ 406.932014][T15159] do_syscall_64+0x166/0x520 [ 406.932038][T15159] ? trace_irq_disable+0x3b/0x140 [ 406.932059][T15159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.932080][T15159] ? clear_bhb_loop+0x70/0xc0 [ 406.932105][T15159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.932126][T15159] RIP: 0033:0x7f1b4879e159 [ 406.932147][T15159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.932164][T15159] RSP: 002b:00007f1b49735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 406.932188][T15159] RAX: ffffffffffffffda RBX: 00007f1b48a25fa0 RCX: 00007f1b4879e159 [ 406.932203][T15159] RDX: 0000000000000058 RSI: 0000200000001480 RDI: 0000000000000003 [ 406.932210][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 406.932216][T15159] RBP: 00007f1b49735090 R08: 0000000000000000 R09: 0000000000000000 [ 406.932229][T15159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.932242][T15159] R13: 00007f1b48a26038 R14: 00007f1b48a25fa0 R15: 00007ffc21496fb8 [ 406.932274][T15159] [ 406.953346][ T5626] Bluetooth: hci6: command 0x0406 tx timeout [ 407.196529][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 407.303342][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 407.435516][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.452714][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 407.519090][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.744850][T15187] netlink: 'syz.2.3074': attribute type 4 has an invalid length. [ 407.934910][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3073'. [ 408.061747][T15200] netlink: 'syz.2.3077': attribute type 16 has an invalid length. [ 408.061775][T15200] netlink: 'syz.2.3077': attribute type 17 has an invalid length. [ 408.100999][T15202] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3078'. [ 408.166718][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3075'. [ 408.176585][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3075'. [ 408.308328][T15208] FAULT_INJECTION: forcing a failure. [ 408.308328][T15208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.308366][T15208] CPU: 1 UID: 0 PID: 15208 Comm: syz.1.3079 Not tainted syzkaller #0 PREEMPT(full) [ 408.308391][T15208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.308418][T15208] Call Trace: [ 408.308427][T15208] [ 408.308437][T15208] dump_stack_lvl+0xe8/0x150 [ 408.308477][T15208] should_fail_ex+0x410/0x560 [ 408.308507][T15208] _copy_to_user+0x31/0xb0 [ 408.308537][T15208] simple_read_from_buffer+0xe1/0x170 [ 408.308572][T15208] proc_fail_nth_read+0x1bb/0x230 [ 408.308642][T15208] ? common_file_perm+0x20e/0x2b0 [ 408.308670][T15208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.308706][T15208] ? rw_verify_area+0x24a/0x4c0 [ 408.308733][T15208] ? lock_acquire+0x115/0x350 [ 408.308756][T15208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.308786][T15208] vfs_read+0x213/0xa80 [ 408.308822][T15208] ? __pfx___mutex_lock+0x10/0x10 [ 408.308900][T15208] ? __pfx_vfs_read+0x10/0x10 [ 408.308932][T15208] ? __fget_files+0x2a/0x420 [ 408.308965][T15208] ? __fget_files+0x3a2/0x420 [ 408.308991][T15208] ? __fget_files+0x2a/0x420 [ 408.309029][T15208] ksys_read+0x150/0x270 [ 408.309062][T15208] ? __pfx_ksys_read+0x10/0x10 [ 408.309105][T15208] do_syscall_64+0x166/0x520 [ 408.309129][T15208] ? trace_irq_disable+0x3b/0x140 [ 408.309149][T15208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.309171][T15208] ? clear_bhb_loop+0x70/0xc0 [ 408.309197][T15208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.309219][T15208] RIP: 0033:0x7f1b4875e98e [ 408.309240][T15208] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.309258][T15208] RSP: 002b:00007f1b49734fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.309282][T15208] RAX: ffffffffffffffda RBX: 00007f1b497356c0 RCX: 00007f1b4875e98e [ 408.309298][T15208] RDX: 000000000000000f RSI: 00007f1b497350a0 RDI: 0000000000000005 [ 408.309310][T15208] RBP: 00007f1b49735090 R08: 0000000000000000 R09: 0000000000000000 [ 408.309323][T15208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.309334][T15208] R13: 00007f1b48a26038 R14: 00007f1b48a25fa0 R15: 00007ffc21496fb8 [ 408.309369][T15208] [ 408.349968][T15200] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3077'. [ 408.620378][T15217] tipc: Enabling of bearer rejected, failed to enable media [ 408.688403][T15217] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3081'. [ 408.736243][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3081'. [ 408.859412][T15232] FAULT_INJECTION: forcing a failure. [ 408.859412][T15232] name failslab, interval 1, probability 0, space 0, times 0 [ 408.859448][T15232] CPU: 1 UID: 0 PID: 15232 Comm: syz.1.3087 Not tainted syzkaller #0 PREEMPT(full) [ 408.859472][T15232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.859485][T15232] Call Trace: [ 408.859493][T15232] [ 408.859503][T15232] dump_stack_lvl+0xe8/0x150 [ 408.859538][T15232] should_fail_ex+0x410/0x560 [ 408.859567][T15232] should_failslab+0xa8/0x100 [ 408.859592][T15232] ? security_file_alloc+0x34/0x310 [ 408.859623][T15232] kmem_cache_alloc_noprof+0xa1/0x600 [ 408.859651][T15232] ? rcu_is_watching+0x16/0xb0 [ 408.859724][T15232] ? security_file_alloc+0x34/0x310 [ 408.859760][T15232] security_file_alloc+0x34/0x310 [ 408.859793][T15232] init_file+0x90/0x2b0 [ 408.859821][T15232] alloc_empty_file+0x74/0x1d0 [ 408.859845][T15232] alloc_file_pseudo+0x115/0x1e0 [ 408.859869][T15232] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 408.859891][T15232] anon_inode_getfd+0xc8/0x1f0 [ 408.859915][T15232] ? btf_get_fd_by_id+0x7a/0x3f0 [ 408.859931][T15232] btf_get_fd_by_id+0x33b/0x3f0 [ 408.859944][T15232] ? bpf_lsm_capable+0x9/0x20 [ 408.859955][T15232] ? security_capable+0x7e/0x2c0 [ 408.859968][T15232] ? btf_get_fd_by_id+0x7a/0x3f0 [ 408.859981][T15232] ? __pfx_btf_get_fd_by_id+0x10/0x10 [ 408.859997][T15232] ? bpf_token_put+0x143/0x160 [ 408.860012][T15232] __sys_bpf+0xa67/0xd90 [ 408.860037][T15232] ? __pfx___sys_bpf+0x10/0x10 [ 408.860070][T15232] ? __fget_files+0x2a/0x420 [ 408.860104][T15232] ? ksys_write+0x242/0x270 [ 408.860130][T15232] ? __pfx_ksys_write+0x10/0x10 [ 408.860151][T15232] __x64_sys_bpf+0xba/0xd0 [ 408.860166][T15232] do_syscall_64+0x166/0x520 [ 408.860181][T15232] ? trace_irq_disable+0x3b/0x140 [ 408.860193][T15232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.860206][T15232] ? clear_bhb_loop+0x70/0xc0 [ 408.860221][T15232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.860234][T15232] RIP: 0033:0x7f1b4879e159 [ 408.860247][T15232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.860258][T15232] RSP: 002b:00007f1b49735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.860278][T15232] RAX: ffffffffffffffda RBX: 00007f1b48a25fa0 RCX: 00007f1b4879e159 [ 408.860288][T15232] RDX: 0000000000000004 RSI: 0000200000001840 RDI: 0000000000000013 [ 408.860296][T15232] RBP: 00007f1b49735090 R08: 0000000000000000 R09: 0000000000000000 [ 408.860304][T15232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.860312][T15232] R13: 00007f1b48a26038 R14: 00007f1b48a25fa0 R15: 00007ffc21496fb8 [ 408.860338][T15232] [ 409.786122][T15267] netlink: 'syz.1.3094': attribute type 16 has an invalid length. [ 409.786151][T15267] netlink: 'syz.1.3094': attribute type 17 has an invalid length. [ 409.788616][T15266] tipc: Resetting bearer [ 409.789045][T15266] tipc: Resetting bearer [ 409.818858][T15264] FAULT_INJECTION: forcing a failure. [ 409.818858][T15264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.818890][T15264] CPU: 1 UID: 0 PID: 15264 Comm: syz.5.3093 Not tainted syzkaller #0 PREEMPT(full) [ 409.818912][T15264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.818923][T15264] Call Trace: [ 409.818931][T15264] [ 409.818939][T15264] dump_stack_lvl+0xe8/0x150 [ 409.818973][T15264] should_fail_ex+0x410/0x560 [ 409.819000][T15264] _copy_to_user+0x31/0xb0 [ 409.819026][T15264] simple_read_from_buffer+0xe1/0x170 [ 409.819058][T15264] proc_fail_nth_read+0x1bb/0x230 [ 409.819086][T15264] ? common_file_perm+0x20e/0x2b0 [ 409.819111][T15264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.819148][T15264] ? rw_verify_area+0x24a/0x4c0 [ 409.819177][T15264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.819205][T15264] vfs_read+0x213/0xa80 [ 409.819238][T15264] ? __pfx___mutex_lock+0x10/0x10 [ 409.819261][T15264] ? __pfx_vfs_read+0x10/0x10 [ 409.819290][T15264] ? __fget_files+0x2a/0x420 [ 409.819320][T15264] ? __fget_files+0x3a2/0x420 [ 409.819344][T15264] ? __fget_files+0x2a/0x420 [ 409.819377][T15264] ksys_read+0x150/0x270 [ 409.819414][T15264] ? __pfx_ksys_read+0x10/0x10 [ 409.819453][T15264] do_syscall_64+0x166/0x520 [ 409.819474][T15264] ? trace_irq_disable+0x3b/0x140 [ 409.819493][T15264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.819513][T15264] ? clear_bhb_loop+0x70/0xc0 [ 409.819536][T15264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.819555][T15264] RIP: 0033:0x7f104835e98e [ 409.819573][T15264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 409.819589][T15264] RSP: 002b:00007f10465f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.819611][T15264] RAX: ffffffffffffffda RBX: 00007f10465f66c0 RCX: 00007f104835e98e [ 409.819625][T15264] RDX: 000000000000000f RSI: 00007f10465f60a0 RDI: 0000000000000004 [ 409.819637][T15264] RBP: 00007f10465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.819649][T15264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.819660][T15264] R13: 00007f1048626038 R14: 00007f1048625fa0 R15: 00007ffc2a2d40f8 [ 409.819691][T15264] [ 409.953923][T15266] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.967316][T15266] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.004337][T15274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3096'. [ 410.085962][T15276] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3094'. [ 410.244477][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'. [ 410.369893][T15288] FAULT_INJECTION: forcing a failure. [ 410.369893][T15288] name failslab, interval 1, probability 0, space 0, times 0 [ 410.369931][T15288] CPU: 1 UID: 0 PID: 15288 Comm: syz.5.3099 Not tainted syzkaller #0 PREEMPT(full) [ 410.369955][T15288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.369968][T15288] Call Trace: [ 410.369976][T15288] [ 410.369986][T15288] dump_stack_lvl+0xe8/0x150 [ 410.370023][T15288] should_fail_ex+0x410/0x560 [ 410.370053][T15288] should_failslab+0xa8/0x100 [ 410.370078][T15288] ? skb_clone+0x212/0x3a0 [ 410.370106][T15288] kmem_cache_alloc_noprof+0xa1/0x600 [ 410.370140][T15288] ? skb_clone+0x212/0x3a0 [ 410.370175][T15288] skb_clone+0x212/0x3a0 [ 410.370206][T15288] __netlink_deliver_tap+0x413/0x860 [ 410.370249][T15288] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.370279][T15288] netlink_deliver_tap+0x19c/0x1b0 [ 410.370310][T15288] netlink_unicast+0x781/0x940 [ 410.370351][T15288] netlink_sendmsg+0x813/0xb40 [ 410.370391][T15288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.370430][T15288] ? apparmor_socket_sendmsg+0x98/0x360 [ 410.370456][T15288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.370485][T15288] sock_sendmsg_nosec+0x13a/0x180 [ 410.370530][T15288] ____sys_sendmsg+0x54e/0x850 [ 410.370563][T15288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.370601][T15288] ? import_iovec+0x73/0xa0 [ 410.370630][T15288] ___sys_sendmsg+0x2a5/0x360 [ 410.370656][T15288] ? __lock_acquire+0x747/0x2de0 [ 410.370684][T15288] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.370753][T15288] ? __fget_files+0x2a/0x420 [ 410.370780][T15288] ? __fget_files+0x3a2/0x420 [ 410.370824][T15288] __x64_sys_sendmsg+0x1b1/0x290 [ 410.370854][T15288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.370904][T15288] do_syscall_64+0x166/0x520 [ 410.370928][T15288] ? trace_irq_disable+0x3b/0x140 [ 410.370948][T15288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.370971][T15288] ? clear_bhb_loop+0x70/0xc0 [ 410.370996][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.371016][T15288] RIP: 0033:0x7f104839e159 [ 410.371036][T15288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.371053][T15288] RSP: 002b:00007f10465f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.371076][T15288] RAX: ffffffffffffffda RBX: 00007f1048625fa0 RCX: 00007f104839e159 [ 410.371091][T15288] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 410.371104][T15288] RBP: 00007f10465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 410.371117][T15288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.371129][T15288] R13: 00007f1048626038 R14: 00007f1048625fa0 R15: 00007ffc2a2d40f8 [ 410.371165][T15288] [ 410.378550][T15288] netlink: 'syz.5.3099': attribute type 4 has an invalid length. [ 410.654340][T15295] FAULT_INJECTION: forcing a failure. [ 410.654340][T15295] name failslab, interval 1, probability 0, space 0, times 0 [ 410.654374][T15295] CPU: 1 UID: 0 PID: 15295 Comm: syz.6.3101 Not tainted syzkaller #0 PREEMPT(full) [ 410.654396][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.654408][T15295] Call Trace: [ 410.654415][T15295] [ 410.654423][T15295] dump_stack_lvl+0xe8/0x150 [ 410.654455][T15295] should_fail_ex+0x410/0x560 [ 410.654482][T15295] should_failslab+0xa8/0x100 [ 410.654515][T15295] __kmalloc_noprof+0xfe/0x720 [ 410.654535][T15295] ? seg6_local_build_state+0x151/0xdd0 [ 410.654623][T15295] ? seg6_local_build_state+0x151/0xdd0 [ 410.654654][T15295] seg6_local_build_state+0x151/0xdd0 [ 410.654685][T15295] ? pcpu_chunk_relocate+0x1d0/0x430 [ 410.654730][T15295] ? __pfx_seg6_local_build_state+0x10/0x10 [ 410.654776][T15295] ? lwtunnel_build_state+0xe2/0x4c0 [ 410.654838][T15295] lwtunnel_build_state+0x384/0x4c0 [ 410.654862][T15295] ? lwtunnel_build_state+0xe2/0x4c0 [ 410.654885][T15295] fib_nh_common_init+0x130/0x3d0 [ 410.654953][T15295] ? __pfx_fib_nh_common_init+0x10/0x10 [ 410.654982][T15295] fib6_nh_init+0xd20/0x1e40 [ 410.655013][T15295] ? kasan_save_track+0x4f/0x80 [ 410.655034][T15295] ? __pfx_fib6_nh_init+0x10/0x10 [ 410.655052][T15295] ? fib6_info_alloc+0x30/0xf0 [ 410.655068][T15295] ? ip6_route_info_create+0x149/0x890 [ 410.655088][T15295] ? ip6_route_add+0x49/0x1b0 [ 410.655105][T15295] ? inet6_rtm_newroute+0x267/0x1a30 [ 410.655132][T15295] ? rtnetlink_rcv_msg+0x802/0xc00 [ 410.655152][T15295] ? netlink_rcv_skb+0x226/0x4a0 [ 410.655177][T15295] ? netlink_unicast+0x7bd/0x940 [ 410.655198][T15295] ? netlink_sendmsg+0x813/0xb40 [ 410.655223][T15295] ? sock_sendmsg_nosec+0x13a/0x180 [ 410.655250][T15295] ? sock_write_iter+0x2de/0x3e0 [ 410.655274][T15295] ? vfs_write+0x612/0xba0 [ 410.655298][T15295] ? ksys_write+0x150/0x270 [ 410.655323][T15295] ? do_syscall_64+0x166/0x520 [ 410.655344][T15295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.655397][T15295] ? rcu_is_watching+0x16/0xb0 [ 410.655420][T15295] ? ip_fib_metrics_init+0x419/0x6f0 [ 410.655469][T15295] ip6_route_info_create_nh+0x16a/0xad0 [ 410.655491][T15295] ? ipv6_addr_prefix+0x5d/0x1a0 [ 410.655543][T15295] ? __asan_memcpy+0x40/0x70 [ 410.655571][T15295] ? __pfx_ip6_route_info_create_nh+0x10/0x10 [ 410.655590][T15295] ? ipv6_addr_prefix+0xd6/0x1a0 [ 410.655619][T15295] ? ip6_route_info_create+0x545/0x890 [ 410.655645][T15295] ip6_route_add+0x6e/0x1b0 [ 410.655668][T15295] inet6_rtm_newroute+0x267/0x1a30 [ 410.655703][T15295] ? kasan_quarantine_put+0xbb/0x1f0 [ 410.655722][T15295] ? lockdep_hardirqs_on+0x7b/0x110 [ 410.655746][T15295] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 410.655772][T15295] ? nlmon_xmit+0xb0/0x100 [ 410.655791][T15295] ? kmem_cache_free+0x182/0x650 [ 410.655822][T15295] ? __lock_acquire+0x747/0x2de0 [ 410.655851][T15295] ? __local_bh_enable_ip+0xd6/0x140 [ 410.655876][T15295] ? lockdep_hardirqs_on+0x7b/0x110 [ 410.655923][T15295] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 410.655950][T15295] rtnetlink_rcv_msg+0x802/0xc00 [ 410.655976][T15295] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 410.655997][T15295] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.656017][T15295] ? ref_tracker_free+0x689/0x830 [ 410.656041][T15295] ? __pfx_ref_tracker_free+0x10/0x10 [ 410.656073][T15295] netlink_rcv_skb+0x226/0x4a0 [ 410.656100][T15295] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.656124][T15295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.656162][T15295] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.656187][T15295] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.656218][T15295] netlink_unicast+0x7bd/0x940 [ 410.656253][T15295] netlink_sendmsg+0x813/0xb40 [ 410.656289][T15295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.656324][T15295] ? apparmor_socket_sendmsg+0x98/0x360 [ 410.656344][T15295] ? lock_acquire+0x115/0x350 [ 410.656363][T15295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.656389][T15295] sock_sendmsg_nosec+0x13a/0x180 [ 410.656420][T15295] sock_write_iter+0x2de/0x3e0 [ 410.656449][T15295] ? __pfx_sock_write_iter+0x10/0x10 [ 410.656484][T15295] ? bpf_lsm_file_permission+0x9/0x20 [ 410.656515][T15295] ? security_file_permission+0x75/0x260 [ 410.656552][T15295] vfs_write+0x612/0xba0 [ 410.656587][T15295] ? __pfx_vfs_write+0x10/0x10 [ 410.656624][T15295] ? __fget_files+0x2a/0x420 [ 410.656658][T15295] ksys_write+0x150/0x270 [ 410.656687][T15295] ? __pfx_ksys_write+0x10/0x10 [ 410.656725][T15295] do_syscall_64+0x166/0x520 [ 410.656746][T15295] ? trace_irq_disable+0x3b/0x140 [ 410.656764][T15295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.656783][T15295] ? clear_bhb_loop+0x70/0xc0 [ 410.656807][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.656826][T15295] RIP: 0033:0x7fcd7659e159 [ 410.656844][T15295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.656861][T15295] RSP: 002b:00007fcd77511028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.656882][T15295] RAX: ffffffffffffffda RBX: 00007fcd76825fa0 RCX: 00007fcd7659e159 [ 410.656897][T15295] RDX: 0000000000000058 RSI: 0000200000001480 RDI: 0000000000000003 [ 410.656909][T15295] RBP: 00007fcd77511090 R08: 0000000000000000 R09: 0000000000000000 [ 410.656920][T15295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.656932][T15295] R13: 00007fcd76826038 R14: 00007fcd76825fa0 R15: 00007fff22f414f8 [ 410.656962][T15295] [ 411.401245][ T6305] net_ratelimit: 32 callbacks suppressed [ 411.401273][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 411.480438][T15319] netlink: 'syz.3.3109': attribute type 16 has an invalid length. [ 411.480465][T15319] netlink: 'syz.3.3109': attribute type 17 has an invalid length. [ 411.516096][ T81] bond4: (slave dummy0): link status up again after 0 ms [ 411.531463][ T6305] bond4: (slave dummy0): link status up again after 0 ms [ 411.552590][ T81] bond4: (slave dummy0): link status up again after 0 ms [ 411.555499][T15319] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 411.571793][ T6305] bond4: (slave dummy0): link status up again after 0 ms [ 411.571824][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 411.605045][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.612675][T15324] FAULT_INJECTION: forcing a failure. [ 411.612675][T15324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.612705][T15324] CPU: 1 UID: 0 PID: 15324 Comm: syz.5.3110 Not tainted syzkaller #0 PREEMPT(full) [ 411.612727][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.612738][T15324] Call Trace: [ 411.612746][T15324] [ 411.612753][T15324] dump_stack_lvl+0xe8/0x150 [ 411.612787][T15324] should_fail_ex+0x410/0x560 [ 411.612814][T15324] _copy_to_user+0x31/0xb0 [ 411.612840][T15324] simple_read_from_buffer+0xe1/0x170 [ 411.612872][T15324] proc_fail_nth_read+0x1bb/0x230 [ 411.612900][T15324] ? common_file_perm+0x20e/0x2b0 [ 411.612926][T15324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.612958][T15324] ? rw_verify_area+0x24a/0x4c0 [ 411.612987][T15324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.613015][T15324] vfs_read+0x213/0xa80 [ 411.613048][T15324] ? __pfx___mutex_lock+0x10/0x10 [ 411.613071][T15324] ? __pfx_vfs_read+0x10/0x10 [ 411.613100][T15324] ? __fget_files+0x2a/0x420 [ 411.613130][T15324] ? __fget_files+0x3a2/0x420 [ 411.613153][T15324] ? __fget_files+0x2a/0x420 [ 411.613187][T15324] ksys_read+0x150/0x270 [ 411.613216][T15324] ? __pfx_ksys_read+0x10/0x10 [ 411.613255][T15324] do_syscall_64+0x166/0x520 [ 411.613276][T15324] ? trace_irq_disable+0x3b/0x140 [ 411.613294][T15324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.613313][T15324] ? clear_bhb_loop+0x70/0xc0 [ 411.613337][T15324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.613361][T15324] RIP: 0033:0x7f104835e98e [ 411.613379][T15324] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 411.613395][T15324] RSP: 002b:00007f10465f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 411.613416][T15324] RAX: ffffffffffffffda RBX: 00007f10465f66c0 RCX: 00007f104835e98e [ 411.613430][T15324] RDX: 000000000000000f RSI: 00007f10465f60a0 RDI: 0000000000000004 [ 411.613442][T15324] RBP: 00007f10465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.613454][T15324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.613472][T15324] R13: 00007f1048626038 R14: 00007f1048625fa0 R15: 00007ffc2a2d40f8 [ 411.613503][T15324] [ 411.682696][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 411.792282][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 412.207423][T15334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.373137][T15352] gtp4: entered promiscuous mode [ 412.373163][T15352] gtp4: entered allmulticast mode [ 412.757335][T15372] netlink: 'syz.1.3123': attribute type 4 has an invalid length. [ 412.926627][T15376] netlink: 'syz.2.3125': attribute type 4 has an invalid length. [ 413.124138][T15390] tipc: Enabling of bearer rejected, already enabled [ 413.127023][T15390] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 413.127071][T15390] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 413.129648][T15390] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 413.236037][T15400] FAULT_INJECTION: forcing a failure. [ 413.236037][T15400] name failslab, interval 1, probability 0, space 0, times 0 [ 413.236075][T15400] CPU: 0 UID: 0 PID: 15400 Comm: syz.6.3133 Not tainted syzkaller #0 PREEMPT(full) [ 413.236099][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.236112][T15400] Call Trace: [ 413.236121][T15400] [ 413.236130][T15400] dump_stack_lvl+0xe8/0x150 [ 413.236168][T15400] should_fail_ex+0x410/0x560 [ 413.236205][T15400] should_failslab+0xa8/0x100 [ 413.236230][T15400] ? skb_clone+0x212/0x3a0 [ 413.236258][T15400] kmem_cache_alloc_noprof+0xa1/0x600 [ 413.236292][T15400] ? skb_clone+0x212/0x3a0 [ 413.236327][T15400] skb_clone+0x212/0x3a0 [ 413.236358][T15400] __netlink_deliver_tap+0x413/0x860 [ 413.236402][T15400] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.236432][T15400] netlink_deliver_tap+0x19c/0x1b0 [ 413.236464][T15400] netlink_sendskb+0x68/0x140 [ 413.236494][T15400] netlink_rcv_skb+0x2a4/0x4a0 [ 413.236523][T15400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.236552][T15400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.236596][T15400] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.236625][T15400] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.236660][T15400] netlink_unicast+0x7bd/0x940 [ 413.236700][T15400] netlink_sendmsg+0x813/0xb40 [ 413.236740][T15400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.236779][T15400] ? apparmor_socket_sendmsg+0x98/0x360 [ 413.236810][T15400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.236837][T15400] sock_sendmsg_nosec+0x13a/0x180 [ 413.236873][T15400] ____sys_sendmsg+0x54e/0x850 [ 413.236931][T15400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.236967][T15400] ? import_iovec+0x73/0xa0 [ 413.236995][T15400] ___sys_sendmsg+0x2a5/0x360 [ 413.237022][T15400] ? __lock_acquire+0x747/0x2de0 [ 413.237050][T15400] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.237116][T15400] ? __fget_files+0x2a/0x420 [ 413.237145][T15400] ? __fget_files+0x3a2/0x420 [ 413.237185][T15400] __x64_sys_sendmsg+0x1b1/0x290 [ 413.237214][T15400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.237268][T15400] do_syscall_64+0x166/0x520 [ 413.237292][T15400] ? trace_irq_disable+0x3b/0x140 [ 413.237312][T15400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.237334][T15400] ? clear_bhb_loop+0x70/0xc0 [ 413.237361][T15400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.237381][T15400] RIP: 0033:0x7fcd7659e159 [ 413.237402][T15400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.237419][T15400] RSP: 002b:00007fcd77511028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.237450][T15400] RAX: ffffffffffffffda RBX: 00007fcd76825fa0 RCX: 00007fcd7659e159 [ 413.237465][T15400] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 413.237477][T15400] RBP: 00007fcd77511090 R08: 0000000000000000 R09: 0000000000000000 [ 413.237488][T15400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.237500][T15400] R13: 00007fcd76826038 R14: 00007fcd76825fa0 R15: 00007fff22f414f8 [ 413.237536][T15400] [ 414.097598][T15435] bond0: (slave bond_slave_0): Releasing backup interface [ 414.142774][T15435] bond0: (slave bond_slave_1): Releasing backup interface [ 414.173214][T15442] FAULT_INJECTION: forcing a failure. [ 414.173214][T15442] name failslab, interval 1, probability 0, space 0, times 0 [ 414.173252][T15442] CPU: 0 UID: 0 PID: 15442 Comm: syz.2.3141 Not tainted syzkaller #0 PREEMPT(full) [ 414.173276][T15442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.173290][T15442] Call Trace: [ 414.173299][T15442] [ 414.173308][T15442] dump_stack_lvl+0xe8/0x150 [ 414.173346][T15442] should_fail_ex+0x410/0x560 [ 414.173376][T15442] should_failslab+0xa8/0x100 [ 414.173406][T15442] __kmalloc_cache_noprof+0xa3/0x600 [ 414.173429][T15442] ? ip_set_create+0x38f/0x1a50 [ 414.173554][T15442] ? ip_set_create+0x38f/0x1a50 [ 414.173587][T15442] ip_set_create+0x38f/0x1a50 [ 414.173620][T15442] ? rcu_is_watching+0x16/0xb0 [ 414.173654][T15442] ? __pfx_ip_set_create+0x10/0x10 [ 414.173721][T15442] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 414.173790][T15442] ? unwind_get_return_address+0x4d/0x90 [ 414.173829][T15442] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 414.173877][T15442] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 414.173965][T15442] netlink_rcv_skb+0x226/0x4a0 [ 414.173998][T15442] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 414.174028][T15442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.174071][T15442] ? bpf_lsm_capable+0x9/0x20 [ 414.174089][T15442] ? security_capable+0x7e/0x2c0 [ 414.174127][T15442] nfnetlink_rcv+0x2b9/0x28c0 [ 414.174158][T15442] ? __dev_queue_xmit+0x29b/0x3820 [ 414.174241][T15442] ? __local_bh_enable_ip+0xd6/0x140 [ 414.174269][T15442] ? lockdep_hardirqs_on+0x7b/0x110 [ 414.174292][T15442] ? __dev_queue_xmit+0x29b/0x3820 [ 414.174319][T15442] ? __local_bh_enable_ip+0xd6/0x140 [ 414.174343][T15442] ? __dev_queue_xmit+0x29b/0x3820 [ 414.174369][T15442] ? __dev_queue_xmit+0x1edc/0x3820 [ 414.174395][T15442] ? do_syscall_64+0x166/0x520 [ 414.174417][T15442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.174451][T15442] ? __dev_queue_xmit+0x29b/0x3820 [ 414.174480][T15442] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 414.174514][T15442] ? __pfx___dev_queue_xmit+0x10/0x10 [ 414.174550][T15442] ? ref_tracker_free+0x689/0x830 [ 414.174578][T15442] ? __pfx_ref_tracker_free+0x10/0x10 [ 414.174612][T15442] ? __skb_clone+0x449/0x6c0 [ 414.174645][T15442] ? skb_clone+0x246/0x3a0 [ 414.174676][T15442] ? __netlink_deliver_tap+0x811/0x860 [ 414.174704][T15442] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.174740][T15442] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.174769][T15442] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.174804][T15442] netlink_unicast+0x7bd/0x940 [ 414.174843][T15442] netlink_sendmsg+0x813/0xb40 [ 414.174883][T15442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.174922][T15442] ? apparmor_socket_sendmsg+0x98/0x360 [ 414.174957][T15442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.174985][T15442] sock_sendmsg_nosec+0x13a/0x180 [ 414.175020][T15442] ____sys_sendmsg+0x54e/0x850 [ 414.175054][T15442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.175090][T15442] ? import_iovec+0x73/0xa0 [ 414.175121][T15442] ___sys_sendmsg+0x2a5/0x360 [ 414.175146][T15442] ? __lock_acquire+0x747/0x2de0 [ 414.175174][T15442] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.175238][T15442] ? __fget_files+0x2a/0x420 [ 414.175266][T15442] ? __fget_files+0x3a2/0x420 [ 414.175307][T15442] __x64_sys_sendmsg+0x1b1/0x290 [ 414.175336][T15442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.175386][T15442] do_syscall_64+0x166/0x520 [ 414.175409][T15442] ? trace_irq_disable+0x3b/0x140 [ 414.175429][T15442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.175450][T15442] ? clear_bhb_loop+0x70/0xc0 [ 414.175475][T15442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.175502][T15442] RIP: 0033:0x7f8cfd59e159 [ 414.175523][T15442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.175541][T15442] RSP: 002b:00007f8cfe430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.175564][T15442] RAX: ffffffffffffffda RBX: 00007f8cfd825fa0 RCX: 00007f8cfd59e159 [ 414.175579][T15442] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 414.175593][T15442] RBP: 00007f8cfe430090 R08: 0000000000000000 R09: 0000000000000000 [ 414.175606][T15442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.175618][T15442] R13: 00007f8cfd826038 R14: 00007f8cfd825fa0 R15: 00007ffe5acba608 [ 414.175652][T15442] [ 414.269479][T15435] team0: Port device team_slave_0 removed [ 414.305208][T15435] team0: Port device team_slave_1 removed [ 414.307757][T15435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.307780][T15435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.439065][T15438] team0: Port device xfrm0 added [ 416.472572][T10088] net_ratelimit: 41 callbacks suppressed [ 416.472599][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 416.504665][T15406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.505194][T15419] netlink: 'syz.3.3136': attribute type 4 has an invalid length. [ 416.508026][T15452] netlink: 'syz.6.3144': attribute type 4 has an invalid length. [ 416.508087][T15452] FAULT_INJECTION: forcing a failure. [ 416.508087][T15452] name failslab, interval 1, probability 0, space 0, times 0 [ 416.508120][T15452] CPU: 1 UID: 0 PID: 15452 Comm: syz.6.3144 Not tainted syzkaller #0 PREEMPT(full) [ 416.508144][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.508156][T15452] Call Trace: [ 416.508165][T15452] [ 416.508174][T15452] dump_stack_lvl+0xe8/0x150 [ 416.508213][T15452] should_fail_ex+0x410/0x560 [ 416.508243][T15452] should_failslab+0xa8/0x100 [ 416.508269][T15452] ? security_inode_alloc+0x39/0x310 [ 416.508298][T15452] kmem_cache_alloc_noprof+0xa1/0x600 [ 416.508332][T15452] ? __pfx_make_kgid+0x10/0x10 [ 416.508399][T15452] ? security_inode_alloc+0x39/0x310 [ 416.508433][T15452] security_inode_alloc+0x39/0x310 [ 416.508463][T15452] inode_init_always_gfp+0x97e/0xd30 [ 416.508496][T15452] ? __pfx_sock_alloc_inode+0x10/0x10 [ 416.508537][T15452] alloc_inode+0x82/0x1b0 [ 416.508565][T15452] __sock_create+0x12d/0x9d0 [ 416.508597][T15452] udp_sock_create4+0xc5/0x480 [ 416.508682][T15452] ? __pfx_udp_sock_create4+0x10/0x10 [ 416.508718][T15452] ? __pfx___nla_validate_parse+0x10/0x10 [ 416.508753][T15452] fou_nl_add_doit+0x1a0/0xad0 [ 416.508782][T15452] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 416.508805][T15452] ? trace_kmalloc+0x2a/0xf0 [ 416.508861][T15452] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 416.508908][T15452] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 416.508938][T15452] genl_family_rcv_msg_doit+0x233/0x340 [ 416.508965][T15452] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 416.509004][T15452] ? bpf_lsm_capable+0x9/0x20 [ 416.509022][T15452] ? security_capable+0x7e/0x2c0 [ 416.509051][T15452] genl_rcv_msg+0x614/0x7a0 [ 416.509079][T15452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.509099][T15452] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 416.509134][T15452] netlink_rcv_skb+0x226/0x4a0 [ 416.509161][T15452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.509183][T15452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.509226][T15452] ? down_read+0x2be/0x330 [ 416.509254][T15452] genl_rcv+0x28/0x40 [ 416.509272][T15452] netlink_unicast+0x7bd/0x940 [ 416.509308][T15452] netlink_sendmsg+0x813/0xb40 [ 416.509345][T15452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.509381][T15452] ? apparmor_socket_sendmsg+0x98/0x360 [ 416.509403][T15452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.509428][T15452] sock_sendmsg_nosec+0x13a/0x180 [ 416.509458][T15452] ____sys_sendmsg+0x54e/0x850 [ 416.509488][T15452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.509521][T15452] ? import_iovec+0x73/0xa0 [ 416.509548][T15452] ___sys_sendmsg+0x2a5/0x360 [ 416.509570][T15452] ? __lock_acquire+0x747/0x2de0 [ 416.509594][T15452] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.509656][T15452] ? __fget_files+0x2a/0x420 [ 416.509680][T15452] ? __fget_files+0x3a2/0x420 [ 416.509714][T15452] __x64_sys_sendmsg+0x1b1/0x290 [ 416.509739][T15452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.509783][T15452] do_syscall_64+0x166/0x520 [ 416.509804][T15452] ? trace_irq_disable+0x3b/0x140 [ 416.509830][T15452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.509849][T15452] ? clear_bhb_loop+0x70/0xc0 [ 416.509871][T15452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.509889][T15452] RIP: 0033:0x7fcd7659e159 [ 416.509908][T15452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.509925][T15452] RSP: 002b:00007fcd77511028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.509946][T15452] RAX: ffffffffffffffda RBX: 00007fcd76825fa0 RCX: 00007fcd7659e159 [ 416.509960][T15452] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 416.509974][T15452] RBP: 00007fcd77511090 R08: 0000000000000000 R09: 0000000000000000 [ 416.509986][T15452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.509998][T15452] R13: 00007fcd76826038 R14: 00007fcd76825fa0 R15: 00007fff22f414f8 [ 416.510031][T15452] [ 416.527233][T15452] socket: no more sockets [ 416.589378][ T81] bond4: (slave dummy0): failed to get link speed/duplex [ 416.703737][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 416.792050][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.818611][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 416.923457][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 416.923849][T15512] __nla_validate_parse: 5 callbacks suppressed [ 416.923929][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3148'. [ 416.999061][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3148'. [ 416.999087][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3148'. [ 417.031518][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 417.142839][ T6300] bond4: (slave dummy0): failed to get link speed/duplex [ 417.251994][T10088] bond4: (slave dummy0): failed to get link speed/duplex [ 417.283930][T15535] netlink: 'syz.1.3164': attribute type 4 has an invalid length. [ 417.485951][T15546] netlink: 'syz.1.3157': attribute type 16 has an invalid length. [ 417.485978][T15546] netlink: 'syz.1.3157': attribute type 17 has an invalid length. [ 417.764089][T15556] netlink: 'syz.3.3162': attribute type 16 has an invalid length. [ 417.764119][T15556] netlink: 'syz.3.3162': attribute type 17 has an invalid length. [ 417.928494][T15565] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3162'. [ 420.142980][T15524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.146321][T15569] netlink: 'syz.2.3167': attribute type 4 has an invalid length. [ 420.304333][T15598] netlink: 'syz.2.3177': attribute type 16 has an invalid length. [ 420.304360][T15598] netlink: 'syz.2.3177': attribute type 17 has an invalid length. [ 420.564847][T15602] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 420.564876][T15602] syzkaller1: group set to 0 [ 420.898772][T15621] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3188'. [ 421.604767][ T6305] net_ratelimit: 44 callbacks suppressed [ 421.606666][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 421.712613][ T12] bond4: (slave dummy0): failed to get link speed/duplex [ 421.822848][ T6305] bond4: (slave dummy0): failed to get link speed/duplex [ 421.931619][ T144] bond4: (slave dummy0): failed to get link speed/duplex [ 421.993658][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.045855][ T81] bond4: (slave dummy0): failed to get link speed/duplex [ 422.107644][T15675] validate_nla: 2 callbacks suppressed [ 422.107669][T15675] netlink: 'syz.3.3211': attribute type 1 has an invalid length. [ 422.170989][T15681] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 422.181736][T15682] netlink: 'syz.2.3210': attribute type 10 has an invalid length. [ 422.231865][ T31] INFO: task syz.0.1692:10864 blocked for more than 143 seconds. [ 422.231894][ T31] Not tainted syzkaller #0 [ 422.231905][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.231916][ T31] task:syz.0.1692 state:D stack:27200 pid:10864 tgid:10863 ppid:5618 task_flags:0x400140 flags:0x00080002 [ 422.231979][ T31] Call Trace: [ 422.231987][ T31] [ 422.232001][ T31] __schedule+0x17db/0x58f0 [ 422.232023][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.232062][ T31] ? __pfx___schedule+0x10/0x10 [ 422.232096][ T31] ? schedule+0x90/0x2b0 [ 422.232122][ T31] schedule+0x164/0x2b0 [ 422.232146][ T31] schedule_preempt_disabled+0x13/0x30 [ 422.232170][ T31] __mutex_lock+0x7c1/0x1550 [ 422.232201][ T31] ? __mutex_lock+0x5d4/0x1550 [ 422.232250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.232240][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 422.232378][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 422.232417][ T31] ? rcu_is_watching+0x16/0xb0 [ 422.232448][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 422.232474][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 422.232500][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 422.232531][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 422.232556][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 422.232589][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 422.232621][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 422.232681][ T31] ? bpf_lsm_capable+0x9/0x20 [ 422.232701][ T31] ? security_capable+0x7e/0x2c0 [ 422.232731][ T31] genl_rcv_msg+0x614/0x7a0 [ 422.232762][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.232785][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 422.232828][ T31] netlink_rcv_skb+0x226/0x4a0 [ 422.232862][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.232888][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.232938][ T31] ? down_read+0x2be/0x330 [ 422.232971][ T31] genl_rcv+0x28/0x40 [ 422.232993][ T31] netlink_unicast+0x7bd/0x940 [ 422.233032][ T31] netlink_sendmsg+0x813/0xb40 [ 422.233072][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.233112][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 422.233138][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.233166][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 422.233203][ T31] ____sys_sendmsg+0x54e/0x850 [ 422.233247][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.233285][ T31] ? import_iovec+0x73/0xa0 [ 422.233316][ T31] ___sys_sendmsg+0x2a5/0x360 [ 422.233372][ T31] ? __lock_acquire+0x747/0x2de0 [ 422.233401][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.233432][ T31] ? futex_wait+0x2a2/0x390 [ 422.233497][ T31] ? __fget_files+0x2a/0x420 [ 422.233525][ T31] ? __fget_files+0x3a2/0x420 [ 422.233565][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 422.233596][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.233648][ T31] do_syscall_64+0x166/0x520 [ 422.233672][ T31] ? trace_irq_disable+0x3b/0x140 [ 422.233692][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.233715][ T31] ? clear_bhb_loop+0x70/0xc0 [ 422.233742][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.233763][ T31] RIP: 0033:0x7f8e47b9e159 [ 422.233784][ T31] RSP: 002b:00007f8e4898c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.233808][ T31] RAX: ffffffffffffffda RBX: 00007f8e47e25fa0 RCX: 00007f8e47b9e159 [ 422.233824][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 422.233839][ T31] RBP: 00007f8e47c3506b R08: 0000000000000000 R09: 0000000000000000 [ 422.233852][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.233866][ T31] R13: 00007f8e47e26038 R14: 00007f8e47e25fa0 R15: 00007ffd07d82858 [ 422.233902][ T31] [ 422.233935][ T31] [ 422.233935][ T31] Showing all locks held in the system: [ 422.233984][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 422.234068][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 422.234156][ T31] locks held by kworker/u8:5/81: 2, on CPU#1: [ 422.234171][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 422.234236][ T31] #1: ffffc900024ffc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 422.234296][ T31] locks held by kworker/u8:6/144: 2, last CPU#1: [ 422.234311][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 422.234367][ T31] #1: ffffc90002eafc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 422.234439][ T31] locks held by udevd/4985: 1, last CPU#1: [ 422.234454][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 422.234532][ T31] locks held by getty/5378: 2, on CPU#1: [ 422.234545][ T31] #0: ffff888029aad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 422.234670][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 422.234730][ T31] locks held by syz-executor/5617: 4, last CPU#0: [ 422.234745][ T31] #0: ffffffff8ee36330 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 422.234802][ T31] #1: ffff8880361c29f8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 422.234872][ T31] #2: ffff88807f0b1d38 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 422.234938][ T31] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 422.235002][ T31] locks held by kworker/u8:14/6305: 2, last CPU#1: [ 422.235014][ T31] #0: ffff888033704140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 422.235068][ T31] #1: ffffc90004b07c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 422.235131][ T31] locks held by syz.4.1618/10666: 2, on CPU#0: [ 422.235146][ T31] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 422.235197][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xc30 [ 422.235261][ T31] locks held by syz.0.1692/10864: 2, on CPU#0: [ 422.235275][ T31] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 422.235325][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 422.235381][ T31] locks held by udevd/14208: 1, on CPU#0: [ 422.235395][ T31] #0: ffff8880280f9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 422.235488][ T31] locks held by syz.2.3210/15676: 3, last CPU#1: [ 422.235503][ T31] #0: ffffffff907bf8a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 422.235572][ T31] #1: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 422.235623][ T31] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 422.235675][ T31] locks held by syz.2.3210/15682: 1, on CPU#1: [ 422.235688][ T31] #0: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ac/0x810 [ 422.235739][ T31] locks held by syz.3.3211/15680: 2, on CPU#1: [ 422.235753][ T31] #0: ffffffff907a6c40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 422.235813][ T31] #1: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 422.235864][ T31] locks held by syz.5.3209/15677: 1, on CPU#1: [ 422.235878][ T31] #0: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 422.235932][ T31] locks held by modprobe/15686: 1, last CPU#1: [ 422.235947][ T31] #0: ffff88807e9f9d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 422.235999][ T31] [ 422.236005][ T31] ============================================= [ 422.236005][ T31] [ 422.236014][ T31] NMI backtrace for cpu 0 [ 422.236027][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 422.236050][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.236061][ T31] Call Trace: [ 422.236070][ T31] [ 422.236078][ T31] dump_stack_lvl+0xe8/0x150 [ 422.236109][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 422.236165][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 422.236200][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 422.236244][ T31] sys_info+0x135/0x170 [ 422.236294][ T31] watchdog+0xfd7/0x1030 [ 422.236329][ T31] ? watchdog+0x1c7/0x1030 [ 422.236357][ T31] kthread+0x38b/0x480 [ 422.236377][ T31] ? __pfx_watchdog+0x10/0x10 [ 422.236394][ T31] ? __pfx_kthread+0x10/0x10 [ 422.236416][ T31] ret_from_fork+0x514/0xb70 [ 422.236458][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 422.236487][ T31] ? __switch_to+0xc89/0x1420 [ 422.236517][ T31] ? __pfx_kthread+0x10/0x10 [ 422.236539][ T31] ret_from_fork_asm+0x1a/0x30 [ 422.236584][ T31] [ 422.236593][ T31] Sending NMI from CPU 0 to CPUs 1: [ 422.236621][ C1] NMI backtrace for cpu 1 [ 422.236635][ C1] CPU: 1 UID: 0 PID: 4985 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 422.236659][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.236669][ C1] RIP: 0010:is_bpf_text_address+0x1a2/0x2b0 [ 422.236695][ C1] Code: 24 4c 89 e7 4c 89 f6 e8 6c 66 ef ff 4d 39 f4 73 47 e8 92 63 ef ff b8 08 00 00 00 49 01 c7 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 84 63 5f 00 4d 8b 3f 4d 85 ff 74 0a e8 67 63 ef [ 422.236710][ C1] RSP: 0018:ffffc900051c7210 EFLAGS: 00000246 [ 422.236734][ C1] RAX: 1ffff11004d9fa86 RBX: 0000000000000000 RCX: ffff88807d973e80 [ 422.236748][ C1] RDX: 0000000000000000 RSI: 00007fb7b4f15c3a RDI: ffffffffa0400a4c [ 422.236760][ C1] RBP: 0000000000000000 R08: ffffffff81d865b6 R09: 0000000000000000 [ 422.236771][ C1] R10: ffffc900051c72f8 R11: ffffffff81b285f0 R12: ffffffffa0400a4c [ 422.236783][ C1] R13: dffffc0000000000 R14: 00007fb7b4f15c3a R15: ffff888026cfd430 [ 422.236796][ C1] FS: 00007fb7b555c880(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 422.236812][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.236824][ C1] CR2: 00005589609f4008 CR3: 000000007cc9a000 CR4: 00000000003526f0 [ 422.236841][ C1] Call Trace: [ 422.236848][ C1] [ 422.236854][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 422.236878][ C1] kernel_text_address+0xa5/0xe0 [ 422.236898][ C1] __kernel_text_address+0xd/0x30 [ 422.236917][ C1] unwind_get_return_address+0x4d/0x90 [ 422.236938][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 422.236955][ C1] arch_stack_walk+0xfb/0x150 [ 422.236979][ C1] stack_trace_save+0xa9/0x100 [ 422.237004][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 422.237031][ C1] ? stack_trace_save+0xa9/0x100 [ 422.237056][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 422.237081][ C1] kasan_save_track+0x3e/0x80 [ 422.237099][ C1] ? kasan_save_track+0x3e/0x80 [ 422.237115][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 422.237133][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 422.237148][ C1] ? tomoyo_encode+0x2ad/0x570 [ 422.237169][ C1] ? tomoyo_realpath_from_path+0x5fa/0x640 [ 422.237190][ C1] ? tomoyo_check_open_permission+0x229/0x470 [ 422.237208][ C1] ? security_file_open+0xa9/0x240 [ 422.237224][ C1] ? do_dentry_open+0x4a0/0x1380 [ 422.237244][ C1] ? vfs_open+0x3b/0x340 [ 422.237261][ C1] ? path_openat+0x1443/0x1d60 [ 422.237278][ C1] ? do_file_open+0x23e/0x4a0 [ 422.237292][ C1] ? do_sys_openat2+0x115/0x200 [ 422.237312][ C1] ? __x64_sys_openat+0x138/0x170 [ 422.237331][ C1] ? do_syscall_64+0x166/0x520 [ 422.237350][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.237387][ C1] __kasan_kmalloc+0x93/0xb0 [ 422.237406][ C1] __kmalloc_noprof+0x36b/0x720 [ 422.237423][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 422.237437][ C1] ? tomoyo_encode+0x2ad/0x570 [ 422.237457][ C1] ? tomoyo_encode+0x2ad/0x570 [ 422.237480][ C1] tomoyo_encode+0x2ad/0x570 [ 422.237503][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 422.237531][ C1] tomoyo_check_open_permission+0x229/0x470 [ 422.237550][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 422.237568][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 422.237588][ C1] ? __asan_memset+0x22/0x50 [ 422.237615][ C1] ? __up_read+0x29c/0x930 [ 422.237647][ C1] ? tomoyo_file_open+0x163/0x220 [ 422.237672][ C1] security_file_open+0xa9/0x240 [ 422.237689][ C1] do_dentry_open+0x4a0/0x1380 [ 422.237714][ C1] vfs_open+0x3b/0x340 [ 422.237739][ C1] ? path_openat+0x1428/0x1d60 [ 422.237757][ C1] path_openat+0x1443/0x1d60 [ 422.237783][ C1] do_file_open+0x23e/0x4a0 [ 422.237802][ C1] ? __pfx_do_file_open+0x10/0x10 [ 422.237828][ C1] ? _raw_spin_unlock+0x28/0x50 [ 422.237844][ C1] ? alloc_fd+0x651/0x6c0 [ 422.237870][ C1] do_sys_openat2+0x115/0x200 [ 422.237892][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.237911][ C1] ? do_readlinkat+0x451/0x510 [ 422.237936][ C1] ? rcu_is_watching+0x16/0xb0 [ 422.237958][ C1] __x64_sys_openat+0x138/0x170 [ 422.237981][ C1] do_syscall_64+0x166/0x520 [ 422.238000][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.238018][ C1] ? clear_bhb_loop+0x70/0xc0 [ 422.238037][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.238054][ C1] RIP: 0033:0x7fb7b4f15c3a [ 422.238068][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 422.238083][ C1] RSP: 002b:00007fff0d40f138 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 422.238101][ C1] RAX: ffffffffffffffda RBX: 00005647810f1830 RCX: 00007fb7b4f15c3a [ 422.238114][ C1] RDX: 0000000000090800 RSI: 000056478111e430 RDI: 00000000ffffff9c [ 422.238126][ C1] RBP: 000056478111e430 R08: 00000000000001d0 R09: 0000000000000003 [ 422.238137][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00005647810f77b0 [ 422.238149][ C1] R13: 0000000000000100 R14: 0000000000000000 R15: 00007fff0d40f380 [ 422.238168][ C1] [ 422.238619][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 423.578667][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 423.587782][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.597840][ T31] Call Trace: [ 423.601124][ T31] [ 423.604055][ T31] vpanic+0x56d/0xa60 [ 423.608050][ T31] ? __pfx_vpanic+0x10/0x10 [ 423.612560][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 423.618114][ T31] panic+0xc5/0xd0 [ 423.621841][ T31] ? __pfx_panic+0x10/0x10 [ 423.626277][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 423.631305][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 423.637474][ T31] watchdog+0x1030/0x1030 [ 423.641811][ T31] ? watchdog+0x1c7/0x1030 [ 423.646328][ T31] kthread+0x38b/0x480 [ 423.650405][ T31] ? __pfx_watchdog+0x10/0x10 [ 423.655084][ T31] ? __pfx_kthread+0x10/0x10 [ 423.659679][ T31] ret_from_fork+0x514/0xb70 [ 423.664280][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 423.669419][ T31] ? __switch_to+0xc89/0x1420 [ 423.674110][ T31] ? __pfx_kthread+0x10/0x10 [ 423.678710][ T31] ret_from_fork_asm+0x1a/0x30 [ 423.683502][ T31] [ 423.686792][ T31] Kernel Offset: disabled [ 423.691116][ T31] Rebooting in 86400 seconds..