last executing test programs: 5.729919141s ago: executing program 1 (id=12250): r0 = socket(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}, {{0x0, 0x0, 0x0}, 0x6cf3}], 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000000040)="5ee2874f8c94e1263fcf49b699f59f0afc8cce42de5103a2ff155c8bd878572757", 0x21}], 0x2}, 0x24040849) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffd6e, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="650000000000000000000a0000000000000004000b000001000500"], 0x30}}, 0x0) recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x4}, 0x22) 5.20910121s ago: executing program 4 (id=12259): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x80}}, 0x4814) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r1, 0x1) listen(r1, 0x20) shutdown(r1, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 5.084528849s ago: executing program 4 (id=12261): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) 4.785836045s ago: executing program 1 (id=12262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x41, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 4.750971118s ago: executing program 0 (id=12263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) write$nbd(r3, &(0x7f0000000080)={0x67446698, 0x0, 0x1, 0x2, 0x4}, 0x10) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}], 0x1}, 0x8}], 0x1, 0x10000, 0x0) recvmsg$can_raw(r3, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7005000000000000000000000000080005"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 4.741738252s ago: executing program 4 (id=12264): r0 = socket(0x28, 0x801, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x34, 0x26, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x4, 0x10}, {0x4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x48000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x20000000) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) poll(&(0x7f0000000040)=[{r0, 0x82}], 0x1, 0x7) 4.639495098s ago: executing program 1 (id=12266): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x8, 0x10010, 0xffffffffffffffff, 0xf27ae000) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x2, @multicast1, 0x4e22, 0x1, 'wlc\x00', 0x2f, 0x9, 0x5a}, 0x2c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(0x4) (async) close(0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x44, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x27}, r3}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r3, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000000)={0x11, 0x8, r3, 0x1, 0x9, 0x6, @local}, 0x14) 4.618871275s ago: executing program 2 (id=12267): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500", 0x63}, {0x0}], 0x2}, 0x200440c4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12}, 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) 4.544597425s ago: executing program 4 (id=12268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 4.544307926s ago: executing program 3 (id=12269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x41, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4a9c4b67}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4) 4.47304815s ago: executing program 3 (id=12270): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x3d9c2d89, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@mcast2, 0x0}, &(0x7f0000000500)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x30]}}, &(0x7f0000000600)=""/7, 0x2b, 0x7, 0x0, 0x1e}, 0x28) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000780)={r1, &(0x7f0000000680)='-&(\x00', 0x68b80, &(0x7f00000006c0)={@align=0x3, {0x3, 0x5, 0xfa, 0x8000000000000000}}, 0x8c0, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x81}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10000}, @alu={0x4, 0x0, 0xe, 0x7, 0x8, 0x50, 0x10}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x5, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000007c0)=[r6], &(0x7f0000000800)=[{0x0, 0x1, 0x5, 0xa}, {0x1, 0x2, 0xc, 0x1}, {0x4, 0x5, 0xb, 0xc}, {0x5, 0x1, 0xe, 0xc}, {0x2, 0x2, 0x2, 0x9}, {0x1, 0x5, 0x1, 0x8}, {0x5, 0x2, 0x4, 0x9}], 0x10, 0x8}, 0x94) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 4.438073788s ago: executing program 1 (id=12271): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000080)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="2400000040000100fcff07000400000001000000040048800900018008000100", @ANYRES32=r0, @ANYBLOB="a2ef9fe33c2c7ba52d4845974424f04795123ba5af7a7652248dfdd0ae8b18795f770e31053a0bdac5324a6830715d8f3086a9366a54274a8390b00122e7c8a88118d6deb7baef53df1b4e45e11e8ada7d84451c961b0789a6bdcc2518cb8f9a5317cb0ede27842c642820bfa7a80faabd3600f9c9d878fa807a08bfd6324d1645738f9a35851df667e40eeb3e0463c8b88f02223dab94"], 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@getnexthop={0x18, 0x76, 0xb0d, 0x18, 0x25dfdbff, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x7fffffff) 4.360783295s ago: executing program 3 (id=12272): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 4.30081024s ago: executing program 3 (id=12273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x9, 0x0, 0x8000, 0x3}, {0xd, 0x1, 0x3, 0x461d, 0xb20, 0xff}, 0x4, 0x2, 0x4e4}}, @TCA_TBF_RATE64={0xc, 0x4, 0x482b771ec8ae0f5e}, @TCA_TBF_PRATE64={0xc, 0x5, 0xbfbfaebe1d121812}]}}]}, 0x70}}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.765817325s ago: executing program 0 (id=12274): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) 3.649403947s ago: executing program 2 (id=12275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @mcast2, 0x3}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (fail_nth: 8) 3.624719185s ago: executing program 0 (id=12276): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="4104"], 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r1, 0x0, 0x10000008ebc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r9 = socket(0x2, 0x3, 0x100000001) setsockopt(r9, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r8, @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r12, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) splice(r0, 0x0, r7, 0x0, 0x25a5, 0x0) 3.436840002s ago: executing program 2 (id=12277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c80", 0x87}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda3", 0x2d}], 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.000500444s ago: executing program 2 (id=12278): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="efca", 0x2}], 0x1}}], 0x1, 0x6ef8eb021116f258) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600)) 2.87883273s ago: executing program 0 (id=12279): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) listen(r1, 0x80) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="48ef00001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 2.738597315s ago: executing program 0 (id=12280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000871ecf6214534e5b350dddeb0000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 597.582219ms ago: executing program 0 (id=12281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(pcrypt(rfc4309(morus1280-sse2)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getaddr={0x14, 0x16, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008011}, 0x80) bind$bt_sco(r2, &(0x7f0000000280)={0x1f, @none}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9f0074000dcb5ab19c5a46377060de9bea3b3b1c371d055de24d3a698367b88d69c464b260dd27fc7ba33d8c3ecc5835de7d882097df1b0f525d3c500fef216d5d719e337b47e651c61e5332dd7819b473b493ca6995de01976945bb41f50895e1b7800e4db05ee93afb", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf255500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x99342112581642ee) listen(r2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x13, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ce75b4845e2fa207c625191a3f43765d8d710f8ff743cc5413d448ac65cac95f32a11afa0e966273953cd6ad02dcc054b609e108b3dec17fd91d0afc81bea63b5d45e53a181b891379b7f32120", 0x4d) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r6, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000ff0100000000000000000000050000000500010007000000040007800c000300686173683a697000050005000a00000005000400000000000900020073797a3000000000507b6284ce9d9642754e1a18936022e37787b73a1d91"], 0x48}}, 0x0) 589.259468ms ago: executing program 1 (id=12282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48) (fail_nth: 8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000680)="a609d1574c5a", 0x0}, 0x20) 568.430547ms ago: executing program 4 (id=12283): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 485.168153ms ago: executing program 2 (id=12284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001400188008000140000000000800004000000000240001801400018008000100e000000108000200e00000010c00028005000100"], 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="25863289c503b00f934e8a4900001000b4a0473141006c", @ANYRES16=r1, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3100000000000000000000000800070001000000"], 0x34}}, 0x0) 483.283436ms ago: executing program 3 (id=12285): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d2419540"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500", 0x63}, {0x0}], 0x2}, 0x200440c4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12}, 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) 89.486859ms ago: executing program 1 (id=12286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x1, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0xd, 0x0, 0xf, 0x10, 0x22, 0x82, 0x2, 0x8, 0x2, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0x5000, 0xff05, 0x2, 0xb, 0x3, 0x90, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x6, 0x0, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x9300, 0xc, 0x40, 0x3, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x48040, 0x0, 0x0) 89.205084ms ago: executing program 2 (id=12287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r4, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r2) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r4, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="02db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 87.906602ms ago: executing program 4 (id=12288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c80", 0x87}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda3", 0x2d}], 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 0s ago: executing program 3 (id=12289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @mcast2, 0x3}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (fail_nth: 9) kernel console output (not intermixed with test programs): T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.665819][T29617] syzkaller0: entered promiscuous mode [ 675.683854][T29617] syzkaller0: entered allmulticast mode [ 675.816519][T29619] syzkaller0: entered promiscuous mode [ 675.832349][T29619] syzkaller0: entered allmulticast mode [ 675.860602][T29619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10878'. [ 675.892934][T29619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10878'. [ 675.938948][T29624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10879'. [ 675.971134][T29624] lo: Caught tx_queue_len zero misconfig [ 676.033814][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 676.360367][T29635] syzkaller0: entered promiscuous mode [ 676.374765][T29635] syzkaller0: entered allmulticast mode [ 676.568847][T29640] syzkaller0: entered promiscuous mode [ 676.593505][T29640] syzkaller0: entered allmulticast mode [ 676.679939][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.700104][T29640] tipc: Enabled bearer , priority 0 [ 676.775767][T29638] tipc: Resetting bearer [ 676.808130][T29638] tipc: Disabling bearer [ 676.837042][T29654] netlink: 'syz.2.10888': attribute type 1 has an invalid length. [ 676.904753][T29654] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 676.971299][T29659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10888'. [ 677.029014][T29654] veth3: entered promiscuous mode [ 677.059372][T29654] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 677.094935][ T3277] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 677.128998][T29659] 8021q: adding VLAN 0 to HW filter on device bond7 [ 677.197072][ T30] audit: type=1804 audit(1785572121.728:4): pid=29663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10891" name="/newroot/2219/cgroup.controllers" dev="tmpfs" ino=11191 res=1 errno=0 [ 677.265819][ T48] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 677.289408][ T30] audit: type=1800 audit(1785572121.728:5): pid=29663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10891" name="cgroup.controllers" dev="tmpfs" ino=11191 res=0 errno=0 [ 677.399037][T29671] syzkaller0: entered promiscuous mode [ 677.408596][T29671] syzkaller0: entered allmulticast mode [ 677.420003][T29665] syzkaller0: entered promiscuous mode [ 677.429977][T29665] syzkaller0: entered allmulticast mode [ 677.633872][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.716755][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.739992][T29682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.846220][T29684] syzkaller0: entered promiscuous mode [ 677.862201][T29684] syzkaller0: entered allmulticast mode [ 678.073763][T29692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10904'. [ 678.091100][T29690] syzkaller0: entered promiscuous mode [ 678.100891][ T30] audit: type=1804 audit(1785572122.618:6): pid=29688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10902" name="/newroot/2189/cgroup.controllers" dev="tmpfs" ino=11020 res=1 errno=0 [ 678.256879][T29690] syzkaller0: entered allmulticast mode [ 678.299835][ T30] audit: type=1800 audit(1785572122.618:7): pid=29688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10902" name="cgroup.controllers" dev="tmpfs" ino=11020 res=0 errno=0 [ 678.544557][T29675] syzkaller1: entered promiscuous mode [ 678.579450][T29675] syzkaller1: entered allmulticast mode [ 678.746694][T29709] syzkaller0: entered promiscuous mode [ 678.752946][T29709] syzkaller0: entered allmulticast mode [ 678.754550][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.806767][T29598] TC_ACT_REPEAT abuse ? [ 678.971009][T29719] netlink: 'syz.0.10908': attribute type 1 has an invalid length. [ 679.184158][T29719] bond7: entered promiscuous mode [ 679.202176][T29719] 8021q: adding VLAN 0 to HW filter on device bond7 [ 679.246565][T29720] macvtap2: entered allmulticast mode [ 679.370926][T29724] macvtap3: entered allmulticast mode [ 679.598033][T29733] bond7: (slave bridge6): making interface the new active one [ 679.650599][T29733] bridge6: entered promiscuous mode [ 679.715727][T29733] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 679.800198][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.828966][T29731] syzkaller0: entered promiscuous mode [ 679.864851][T29731] syzkaller0: entered allmulticast mode [ 680.683539][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.884444][T12403] net_ratelimit: 1 callbacks suppressed [ 681.884467][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.922377][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.084246][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.740502][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.955181][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.995172][T29791] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10915'. [ 684.127942][T29789] syzkaller0: entered promiscuous mode [ 684.136809][T29789] syzkaller0: entered allmulticast mode [ 684.212068][T29812] syzkaller0: entered promiscuous mode [ 684.233795][T29812] syzkaller0: entered allmulticast mode [ 684.241120][T29807] syzkaller0: entered promiscuous mode [ 684.253793][T29807] syzkaller0: entered allmulticast mode [ 685.000033][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.037468][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.296041][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.768231][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.074701][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.937770][T29841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10925'. [ 687.948038][T29838] syzkaller0: entered promiscuous mode [ 687.956448][T29838] syzkaller0: entered allmulticast mode [ 687.980992][T29841] netlink: 'syz.1.10925': attribute type 9 has an invalid length. [ 688.114027][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.200432][T29850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10929'. [ 688.357371][T29855] netlink: 'syz.1.10930': attribute type 1 has an invalid length. [ 688.367793][T29854] syzkaller0: entered promiscuous mode [ 688.381150][T29855] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10930'. [ 688.393501][T29854] syzkaller0: entered allmulticast mode [ 688.443063][T29858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.798371][T29867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10938'. [ 688.879407][T29872] SET target dimension over the limit! [ 689.062125][T29877] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 689.146917][T29881] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.10945'. [ 689.157343][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.329923][T29890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10943'. [ 689.481714][T29869] vlan0: left allmulticast mode [ 689.486919][T29869] vlan0: left promiscuous mode [ 689.575439][T29884] bridge0: port 4(wlan1) entered blocking state [ 689.584145][T29884] bridge0: port 4(wlan1) entered disabled state [ 689.591204][T29884] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 689.605113][T29884] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 689.626178][ T57] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.650838][ T57] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 54109 - 0 [ 689.690142][ T57] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 689.735858][ T57] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.759059][ T57] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 54109 - 0 [ 689.795745][ T57] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 689.805752][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.825621][ T57] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.853554][ T57] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 54109 - 0 [ 689.879574][ T57] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 689.906514][ T57] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.937116][ T57] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 54109 - 0 [ 689.955928][ T57] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 690.196349][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.670173][T29931] syzkaller0: entered promiscuous mode [ 690.693767][T29931] syzkaller0: entered allmulticast mode [ 691.031056][T29943] tc action pedit 'at' offset 5 out of bounds [ 691.038669][T29943] tc action pedit 'at' offset 5 out of bounds [ 691.045289][T29943] tc action pedit 'at' offset 5 out of bounds [ 691.051953][T29943] tc action pedit 'at' offset 5 out of bounds [ 691.058417][T29943] tc action pedit 'at' offset 5 out of bounds [ 691.064742][T29943] tc action pedit 'at' offset 5 out of bounds [ 691.071366][T29943] tc action pedit 'at' offset 5 out of bounds [ 691.077510][T29943] tc action pedit 'at' offset 5 out of bounds [ 691.083709][T29943] tc action pedit 'at' offset 5 out of bounds [ 691.090064][T29943] tc action pedit 'at' offset 5 out of bounds [ 691.096297][T29943] 0: reclassify loop, rule prio 0, protocol 800 [ 691.116729][T29946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10965'. [ 691.237343][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.351187][T29951] syzkaller0: entered promiscuous mode [ 691.362105][T29951] syzkaller0: entered allmulticast mode [ 691.497203][T29951] tipc: Enabled bearer , priority 0 [ 691.543975][T29948] tipc: Resetting bearer [ 691.575812][T29959] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 691.615683][T29959] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 691.628158][T29948] tipc: Disabling bearer [ 692.082370][T29983] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 692.115901][T29980] tipc: Enabled bearer , priority 0 [ 692.174556][T29977] tipc: Disabling bearer [ 692.197227][T29988] sock: sock_set_timeout: `syz.1.10984' (pid 29988) tries to set negative timeout [ 692.276018][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.452303][T29993] syzkaller0: entered promiscuous mode [ 692.472414][T29993] syzkaller0: entered allmulticast mode [ 692.674529][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.718884][T30007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.727461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.836249][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.848638][T30013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.315026][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.322420][T30028] virt_wifi0 speed is unknown, defaulting to 1000 [ 693.342210][T30028] virt_wifi0 speed is unknown, defaulting to 1000 [ 693.342706][T30033] syzkaller0: entered promiscuous mode [ 693.372535][T30033] syzkaller0: entered allmulticast mode [ 693.389896][T30028] virt_wifi0 speed is unknown, defaulting to 1000 [ 693.430892][T30028] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 693.474695][T30028] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 693.511042][T30028] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 693.540933][T30028] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 693.653495][T30028] virt_wifi0 speed is unknown, defaulting to 1000 [ 693.675015][T30028] virt_wifi0 speed is unknown, defaulting to 1000 [ 693.692728][T30028] virt_wifi0 speed is unknown, defaulting to 1000 [ 693.711641][T30043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.734402][T30028] virt_wifi0 speed is unknown, defaulting to 1000 [ 693.753534][T30028] virt_wifi0 speed is unknown, defaulting to 1000 [ 693.838619][T30049] netlink: 'syz.3.11010': attribute type 8 has an invalid length. [ 693.863479][T30049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11010'. [ 694.355379][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.516586][T30074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11022'. [ 695.378541][T30105] syzkaller0: entered promiscuous mode [ 695.407909][T30105] syzkaller0: entered allmulticast mode [ 695.600868][T30110] syzkaller0: entered promiscuous mode [ 695.621794][T30110] syzkaller0: entered allmulticast mode [ 696.011288][T30129] netlink: 'syz.0.11048': attribute type 5 has an invalid length. [ 696.492864][ T190] syz1: Port: 1 Link DOWN [ 696.623059][T30155] syzkaller0: entered promiscuous mode [ 696.647009][T30155] syzkaller0: entered allmulticast mode [ 697.474270][T12403] net_ratelimit: 6 callbacks suppressed [ 697.474291][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.689558][T30191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.724947][T30197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11078'. [ 698.513640][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.685381][T30235] netlink: 'syz.1.11094': attribute type 61 has an invalid length. [ 698.914127][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.553857][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.746660][T30275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.122459][T30292] netlink: 'syz.0.11118': attribute type 12 has an invalid length. [ 700.154900][T30292] netlink: 'syz.0.11118': attribute type 29 has an invalid length. [ 700.180889][T30292] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11118'. [ 700.190581][T30292] netlink: 'syz.0.11118': attribute type 1 has an invalid length. [ 700.212880][T30292] netlink: 'syz.0.11118': attribute type 2 has an invalid length. [ 700.282413][T30294] team0: Caught tx_queue_len zero misconfig [ 700.595609][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.909288][T30308] syzkaller0: entered promiscuous mode [ 700.933489][T30308] syzkaller0: entered allmulticast mode [ 701.150038][T30320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.159414][T30320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.192470][T30320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.754937][T30338] : renamed from bond_slave_1 [ 702.318020][T30351] syzkaller0: entered promiscuous mode [ 702.335719][T30351] syzkaller0: entered allmulticast mode [ 702.352743][T30360] batadv_slave_0: entered allmulticast mode [ 702.642098][T30367] syzkaller0: entered promiscuous mode [ 702.662569][T30367] syzkaller0: entered allmulticast mode [ 702.673801][T12403] net_ratelimit: 5 callbacks suppressed [ 702.673821][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.377349][T30394] netlink: 304 bytes leftover after parsing attributes in process `syz.3.11165'. [ 703.496053][T30405] syzkaller0: entered promiscuous mode [ 703.512821][T30405] syzkaller0: entered allmulticast mode [ 703.663742][T30412] syzkaller0: entered promiscuous mode [ 703.684120][T30412] syzkaller0: entered allmulticast mode [ 703.713837][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.766592][T30414] syzkaller0: entered promiscuous mode [ 703.772247][T30414] syzkaller0: entered allmulticast mode [ 703.838300][T30414] tipc: Enabled bearer , priority 0 [ 703.848551][T30413] tipc: Resetting bearer [ 703.882107][T30413] tipc: Disabling bearer [ 703.959624][T30418] syzkaller1: entered promiscuous mode [ 703.969835][T30418] syzkaller1: entered allmulticast mode [ 704.514381][T30440] syzkaller0: entered promiscuous mode [ 704.520763][T30440] syzkaller0: entered allmulticast mode [ 704.752096][T30445] syzkaller0: entered promiscuous mode [ 704.759133][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.769179][T30445] syzkaller0: entered allmulticast mode [ 704.789001][T30450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.823918][T30450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.846309][T30450] bond0 (unregistering): Released all slaves [ 704.873058][T30451] syzkaller0: entered promiscuous mode [ 704.880573][T30451] syzkaller0: entered allmulticast mode [ 704.970144][T30456] tipc: Enabled bearer , priority 0 [ 705.004462][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.046562][T30444] tipc: Resetting bearer [ 705.095469][T30444] tipc: Disabling bearer [ 705.179362][T30464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11194'. [ 705.520077][T30477] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 705.547122][T30477] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 705.565779][T30481] netlink: 'syz.0.11201': attribute type 29 has an invalid length. [ 705.578391][T30481] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11201'. [ 705.804766][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.846281][T30488] syzkaller0: entered promiscuous mode [ 705.863065][T30488] syzkaller0: entered allmulticast mode [ 706.435665][T30518] syzkaller1: entered promiscuous mode [ 706.458240][T30518] syzkaller1: entered allmulticast mode [ 706.833494][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.091014][T30529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11219'. [ 707.662972][T30545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11226'. [ 707.672609][T30545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11226'. [ 707.870743][T30549] ip6gre1: entered allmulticast mode [ 707.878014][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.896100][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 707.947442][T30553] netlink: 'syz.1.11230': attribute type 4 has an invalid length. [ 708.042740][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.597873][T30564] netdevsim netdevsim0 netdevsim2: IPsec offload requires 128 bit authentication [ 708.891541][T30574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11239'. [ 708.914027][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.949469][T30576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11239'. [ 709.392184][T30587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.424075][T30587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.450332][T30587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.605046][T30585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.642473][T30585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.920567][T30599] syzkaller0: entered promiscuous mode [ 709.942940][T30599] syzkaller0: entered allmulticast mode [ 709.953959][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.264746][T30616] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 711.297220][T30646] syzkaller0: entered promiscuous mode [ 711.355449][T30646] syzkaller0: entered allmulticast mode [ 711.829012][T30658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11271'. [ 712.113702][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.474911][T30677] syzkaller1: entered promiscuous mode [ 712.485045][T30677] syzkaller1: entered allmulticast mode [ 713.156445][T28923] net_ratelimit: 4 callbacks suppressed [ 713.156467][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.298372][T30694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.325509][T30694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.340293][T30694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.360371][T30698] netlink: 27 bytes leftover after parsing attributes in process `syz.3.11289'. [ 713.478770][T30694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.512938][T30694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.527684][T30694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.536212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.603838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.853385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.364135][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11301'. [ 714.631702][T30735] syzkaller0: entered promiscuous mode [ 714.649140][T30735] syzkaller0: entered allmulticast mode [ 715.201665][T30753] syzkaller1: entered promiscuous mode [ 715.217993][T30753] syzkaller1: entered allmulticast mode [ 715.712258][T30775] syzkaller0: entered promiscuous mode [ 715.719485][T30775] syzkaller0: entered allmulticast mode [ 717.511541][T30836] syzkaller1: entered promiscuous mode [ 717.545139][T30836] syzkaller1: entered allmulticast mode [ 718.301096][T30871] syzkaller0: entered promiscuous mode [ 718.313897][T30871] syzkaller0: entered allmulticast mode [ 718.356509][T12403] net_ratelimit: 14 callbacks suppressed [ 718.356543][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.428307][T30881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11362'. [ 719.143574][T30900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.223601][T30904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.397846][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.504750][T30912] syz_tun: entered promiscuous mode [ 719.521876][T30912] syz_tun: entered allmulticast mode [ 719.536694][T30912] team0: Port device syz_tun added [ 719.833420][T30920] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 719.863830][T30920] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 720.138516][T30924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.150854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.193590][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 720.205705][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.436066][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.737006][T30945] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.11387'. [ 720.876157][T30949] syzkaller0: entered promiscuous mode [ 720.896552][T30949] syzkaller0: entered allmulticast mode [ 720.996487][T30952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11390'. [ 721.038669][T30952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11390'. [ 721.058835][ T112] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.098962][ T112] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.126158][ T112] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.151042][ T112] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.272699][T30955] team0: Port device syz_tun added [ 721.305494][T30958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.314392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.473991][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.482872][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.797469][T30974] syzkaller0: entered promiscuous mode [ 721.820405][T30974] syzkaller0: entered allmulticast mode [ 721.838988][T30974] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 722.269612][T30986] netlink: 'syz.4.11403': attribute type 19 has an invalid length. [ 722.289178][T30986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11403'. [ 722.331911][T30986] netlink: 'syz.4.11403': attribute type 19 has an invalid length. [ 722.351798][T30986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11403'. [ 722.590081][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11408'. [ 723.577706][ T5746] net_ratelimit: 2 callbacks suppressed [ 723.577729][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.596503][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.616906][T31072] syzkaller0: entered promiscuous mode [ 725.639176][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.658767][T31072] syzkaller0: entered allmulticast mode [ 726.281448][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.679250][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.218711][T31109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.474631][T31112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.483080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.726483][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.756982][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.332760][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.658276][T31093] tipc: Enabling of bearer rejected, failed to enable media [ 729.686964][T31101] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 729.700507][T31101] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 729.795823][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.080760][T31126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.705519][T31143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.835565][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.084108][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.186137][T31152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11457'. [ 731.266772][T31150] syzkaller0: entered promiscuous mode [ 731.293474][T31150] syzkaller0: entered allmulticast mode [ 731.514776][T31155] 8021q: adding VLAN 0 to HW filter on device bond9 [ 731.549025][T31155] bond9 (unregistering): Released all slaves [ 731.882626][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.371150][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.919962][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.961103][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.730452][T31167] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 734.737720][T31167] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 734.776646][T31175] geneve3: entered promiscuous mode [ 734.803380][T29592] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 734.828405][T29592] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 734.865779][ T139] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 734.897029][ T139] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 734.949646][T31182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.996942][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.116560][T31188] syzkaller0: entered promiscuous mode [ 735.122516][T31188] syzkaller0: entered allmulticast mode [ 735.397508][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.476649][T31195] erspan0: left promiscuous mode [ 735.531803][T31195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.544639][T31195] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.768577][T31195] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 736.036968][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.070420][T31224] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 736.078726][T31224] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 736.193532][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 736.637602][T31244] netlink: 'syz.3.11481': attribute type 8 has an invalid length. [ 736.651474][T31244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11481'. [ 736.707413][T31244] bond0: entered promiscuous mode [ 736.724441][T31244] bond4: entered promiscuous mode [ 736.779468][T31244] bond0: left promiscuous mode [ 736.793472][T31244] bond4: left promiscuous mode [ 737.021571][T31248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11482'. [ 737.076433][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.404900][T31262] bridge0: port 1(wlan1) entered blocking state [ 737.419246][T31262] bridge0: port 1(wlan1) entered disabled state [ 737.435114][T31262] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 737.459366][T31262] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 737.510981][T31266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11486'. [ 737.542109][T31266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11486'. [ 737.850263][T31271] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 737.875015][T31271] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 738.116618][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.130964][T31274] syzkaller0: entered promiscuous mode [ 738.171819][T31274] syzkaller0: entered allmulticast mode [ 738.433907][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.468850][T31291] syzkaller0: entered promiscuous mode [ 738.487036][T31291] syzkaller0: entered allmulticast mode [ 738.643070][T31301] syzkaller0: entered promiscuous mode [ 738.650000][T31301] syzkaller0: entered allmulticast mode [ 738.829879][T31308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11498'. [ 738.908348][T31311] syzkaller0: entered promiscuous mode [ 738.929231][T31311] syzkaller0: entered allmulticast mode [ 739.156013][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.278122][T31318] syzkaller0: entered promiscuous mode [ 739.297084][T31318] syzkaller0: entered allmulticast mode [ 740.171636][T31336] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 740.197490][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.219701][T31336] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 740.508922][T31349] syzkaller0: entered promiscuous mode [ 740.515352][T31349] syzkaller0: entered allmulticast mode [ 740.518919][T31355] netlink: 'syz.0.11507': attribute type 13 has an invalid length. [ 740.621921][T31359] tipc: Failed to remove unknown binding: 66,0,0/2886997007:394188965/394188967 [ 740.633765][T31359] tipc: Failed to remove unknown binding: 66,0,0/2886997007:394188965/394188966 [ 740.654666][T31359] tipc: Failed to remove unknown binding: 66,0,0/2886997007:394188965/394188967 [ 740.667683][T31359] tipc: Failed to remove unknown binding: 66,0,0/2886997007:394188965/394188966 [ 740.693091][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.841693][T31356] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 740.946809][T31352] syzkaller0: entered promiscuous mode [ 740.962964][T31352] syzkaller0: entered allmulticast mode [ 741.236666][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.392774][T31378] syzkaller0: entered promiscuous mode [ 741.419890][T31378] syzkaller0: entered allmulticast mode [ 741.474579][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.579091][T31385] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 741.598161][T31385] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 741.682641][T31387] syzkaller0: entered promiscuous mode [ 741.711309][T31387] syzkaller0: entered allmulticast mode [ 741.830245][T31392] syzkaller0: entered promiscuous mode [ 741.847836][T31392] syzkaller0: entered allmulticast mode [ 741.962943][T31395] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 741.974242][T31395] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 742.277294][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.325184][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.358894][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.537225][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.403862][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.993985][T31424] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 746.002504][T31424] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 746.094166][T31436] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 746.143590][T31436] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 746.435686][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.469135][ T30] audit: type=1804 audit(1785572190.988:8): pid=31454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.11538" name="/newroot/2294/cgroup.controllers" dev="tmpfs" ino=11573 res=1 errno=0 [ 746.552054][ T30] audit: type=1800 audit(1785572191.028:9): pid=31454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11538" name="cgroup.controllers" dev="tmpfs" ino=11573 res=0 errno=0 [ 746.662744][T31441] syzkaller0: entered promiscuous mode [ 746.683693][T31441] syzkaller0: entered allmulticast mode [ 746.711342][T31458] syzkaller0: entered promiscuous mode [ 746.725535][T31458] syzkaller0: entered allmulticast mode [ 746.850314][T31443] syzkaller1: entered promiscuous mode [ 746.862004][T31443] syzkaller1: entered allmulticast mode [ 747.476035][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.553944][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.727728][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.517401][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.557910][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.294251][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.487832][T31483] syzkaller0: entered promiscuous mode [ 750.494639][T31483] syzkaller0: entered allmulticast mode [ 750.593872][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.602728][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.948771][T31518] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 750.965630][T31518] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 751.102904][T31521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11550'. [ 751.454150][T31532] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 751.490123][T31532] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 751.635797][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.988365][T31551] netlink: 'syz.4.11563': attribute type 1 has an invalid length. [ 752.067407][T31559] netlink: 'syz.1.11568': attribute type 12 has an invalid length. [ 752.478293][ T30] audit: type=1804 audit(1785572197.008:10): pid=31574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.11574" name="/newroot/2353/cgroup.controllers" dev="tmpfs" ino=11894 res=1 errno=0 [ 752.566043][ T30] audit: type=1800 audit(1785572197.048:11): pid=31574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11574" name="cgroup.controllers" dev="tmpfs" ino=11894 res=0 errno=0 [ 752.589638][T31575] syzkaller0: entered promiscuous mode [ 752.605898][T31575] syzkaller0: entered allmulticast mode [ 752.637682][T31581] IPv6: NLM_F_CREATE should be specified when creating new route [ 752.664868][T31581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11577'. [ 752.677191][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.319271][T31608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11586'. [ 753.539483][ T30] audit: type=1804 audit(1785572198.068:12): pid=31615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.11590" name="/newroot/2302/cgroup.controllers" dev="tmpfs" ino=11614 res=1 errno=0 [ 753.583898][ T30] audit: type=1800 audit(1785572198.098:13): pid=31615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11590" name="cgroup.controllers" dev="tmpfs" ino=11614 res=0 errno=0 [ 753.634526][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.715852][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.759761][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.758856][T31661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11603'. [ 755.804490][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.691537][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.837809][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.367921][T31666] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 757.599203][T31671] tipc: Enabled bearer , priority 0 [ 757.842609][T31683] syzkaller0: entered promiscuous mode [ 757.861320][T31683] syzkaller0: entered allmulticast mode [ 757.876358][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.905126][T31683] 0: reclassify loop, rule prio 0, protocol 800 [ 758.716192][ T5746] tipc: Node number set to 251658240 [ 758.935436][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.968791][T31730] tipc: Enabled bearer , priority 0 [ 759.308096][T31746] vxcan0: tx drop: invalid da for name 0x0000000000000014 [ 759.309730][T31742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11630'. [ 759.367318][T31742] block nbd0: reconnected socket [ 759.428924][ T4943] block nbd0: Receive control failed (result -32) [ 759.526627][T31756] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11637'. [ 759.576490][T31756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11637'. [ 759.598810][T31756] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11637'. [ 759.599706][T31751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11635'. [ 759.608845][T31756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11637'. [ 759.652094][T31756] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11637'. [ 759.726800][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.884058][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.917316][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.930132][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.939268][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.957408][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.269566][T31787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11649'. [ 760.311232][T31787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11649'. [ 760.546963][T31793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.567207][T31793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.579070][T31793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.610282][T31793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.637267][T31793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.848935][ T30] audit: type=1804 audit(1785572206.378:14): pid=31843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11666" name="/newroot/2303/cgroup.controllers" dev="tmpfs" ino=11622 res=1 errno=0 [ 761.928356][ T30] audit: type=1800 audit(1785572206.378:15): pid=31843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11666" name="cgroup.controllers" dev="tmpfs" ino=11622 res=0 errno=0 [ 762.172030][T31851] tipc: Enabling of bearer rejected, failed to enable media [ 762.481219][T31864] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 762.721042][T31871] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11674'. [ 763.635788][T31908] tipc: Enabling of bearer rejected, already enabled [ 763.718715][T31908] tipc: Resetting bearer [ 764.662611][T31944] netlink: 1355 bytes leftover after parsing attributes in process `syz.1.11703'. [ 764.896015][T31947] net_ratelimit: 1390 callbacks suppressed [ 764.896073][T31947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.919288][T31947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.933674][T31947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.981376][T31948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.003943][T31948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.044986][T31948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.073568][T31948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.082343][T31948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.103077][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.124613][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.538790][T31967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11711'. [ 766.841811][T32021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11731'. [ 766.879793][T32021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11731'. [ 768.536487][T32085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11750'. [ 768.833503][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 769.625085][T32113] syzkaller0: entered promiscuous mode [ 769.632028][T32113] syzkaller0: entered allmulticast mode [ 769.799005][T32120] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 769.845768][T32122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11766'. [ 770.100902][T32128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11767'. [ 770.111554][T32128] net_ratelimit: 129 callbacks suppressed [ 770.111606][T32128] openvswitch: netlink: Flow key attr not present in new flow. [ 770.357548][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.805296][T32145] syzkaller1: entered promiscuous mode [ 770.821887][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11777'. [ 770.838087][T32145] syzkaller1: entered allmulticast mode [ 770.937063][T32154] netlink: 'syz.1.11779': attribute type 1 has an invalid length. [ 771.216778][T32154] 8021q: adding VLAN 0 to HW filter on device bond14 [ 771.407913][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.876548][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.137204][T32195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.138742][T32192] syzkaller1: entered promiscuous mode [ 772.187796][T32192] syzkaller1: entered allmulticast mode [ 772.444032][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.475927][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.520377][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.599556][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.930740][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.568973][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.605708][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.701622][T32204] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11794'. [ 776.912425][T32219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11796'. [ 777.103101][T32219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.345483][T32231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.353029][T32231] bond0: (slave gre3): The slave device specified does not support setting the MAC address [ 777.368848][T32231] bond0: (slave gre3): Error -95 calling set_mac_address [ 777.413879][T32238] gretap3: entered promiscuous mode [ 777.431541][T32238] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 777.637104][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.756123][T32266] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 777.764138][T32266] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 777.772840][T32266] tipc: Resetting bearer [ 777.953674][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.115509][T32273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.119949][T32274] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 778.148544][T32273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.157221][T32274] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 778.169920][T32274] tipc: Resetting bearer [ 778.176417][T32273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.176645][T32273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.176799][T32273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.176957][T32273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.448594][T32277] syzkaller0: entered promiscuous mode [ 778.467351][T32277] syzkaller0: entered allmulticast mode [ 778.490347][T32285] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 778.511857][T32285] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 780.761434][ T5746] net_ratelimit: 45 callbacks suppressed [ 780.761458][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.012755][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.805170][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.838094][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.852443][T32304] tipc: Enabled bearer , priority 0 [ 783.005741][T32301] syzkaller0: entered promiscuous mode [ 783.022054][T32301] syzkaller0: entered allmulticast mode [ 783.116223][T32301] tipc: Resetting bearer [ 783.879846][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.049496][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.202427][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.924728][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.959480][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.401143][T32301] tipc: Disabling bearer [ 786.996056][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.074577][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.688108][T32407] syzkaller0: entered promiscuous mode [ 787.707242][T32407] syzkaller0: entered allmulticast mode [ 788.031110][T32420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.042940][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.065853][T32420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.077596][T32420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.093779][T32420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.102600][T32420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.114424][T32420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.124017][T32423] syzkaller0: entered promiscuous mode [ 788.133539][T32423] syzkaller0: entered allmulticast mode [ 788.264096][T32430] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11861'. [ 789.013570][T32457] nbd6: detected capacity change from 0 to 63 [ 789.030272][T32458] block nbd3: NBD_DISCONNECT [ 789.049539][T32458] block nbd3: Send disconnect failed -32 [ 789.096677][T32458] block nbd3: shutting down sockets [ 789.125641][T32464] netlink: 'syz.1.11875': attribute type 39 has an invalid length. [ 789.136840][ T4943] block nbd6: Receive control failed (result -104) [ 789.350475][T32471] netlink: 'syz.0.11879': attribute type 1 has an invalid length. [ 789.709454][T32486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11885'. [ 789.715673][T32483] bond0: entered promiscuous mode [ 789.729090][T32486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11885'. [ 789.750699][T32483] batadv0: entered promiscuous mode [ 789.762462][T32483] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 789.796376][T32483] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 789.817008][T32483] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 789.828140][T32486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11885'. [ 789.845986][T32486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11885'. [ 789.884831][T32492] "syz.4.11887" (32492) uses obsolete ecb(arc4) skcipher [ 789.968082][T32494] netlink: 'syz.4.11888': attribute type 21 has an invalid length. [ 789.976880][T32494] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11888'. [ 791.159239][ T5746] net_ratelimit: 11 callbacks suppressed [ 791.159260][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.508774][T32559] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 791.517366][T32559] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 792.199166][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.173601][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.239249][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.797625][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.284393][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.809379][T32560] syzkaller0: entered promiscuous mode [ 794.821682][T32560] syzkaller0: entered allmulticast mode [ 794.888190][T32573] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 794.912199][T32573] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 794.938167][T32573] tipc: Resetting bearer [ 795.228227][T32591] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11925'. [ 795.396806][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.222969][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.445286][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.485473][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.519216][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.234001][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.358745][T32638] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 799.513665][T32641] syzkaller1: entered promiscuous mode [ 799.524760][T32641] syzkaller1: entered allmulticast mode [ 799.556222][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.300422][T32672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11952'. [ 800.606680][T28923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.623508][T29592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.632856][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.643948][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.376943][T32693] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 801.386192][T32693] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 801.408704][T32693] tipc: Resetting bearer [ 801.713654][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.039381][T32701] syzkaller0: entered promiscuous mode [ 802.045343][T32701] syzkaller0: entered allmulticast mode [ 802.227810][T32714] syzkaller0: create flow: hash 3971886183 index 2 [ 802.284461][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.298077][T29592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.345814][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.356758][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.699024][T32714] syzkaller0: delete flow: hash 3971886183 index 2 [ 802.754275][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.414178][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.804391][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.841228][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.404076][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.084345][T32749] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 806.092282][T32749] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 806.101707][T32749] tipc: Resetting bearer [ 806.108054][T32750] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 806.123011][T32750] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 806.489804][ T303] syzkaller0: entered promiscuous mode [ 806.507254][ T303] syzkaller0: entered allmulticast mode [ 806.754061][T12403] net_ratelimit: 3 callbacks suppressed [ 806.754082][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.793629][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.889635][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.911336][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.944386][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.838932][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.184180][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.875725][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.919409][ T317] syzkaller0: entered promiscuous mode [ 809.925554][ T317] syzkaller0: entered allmulticast mode [ 810.358591][ T346] syzkaller0: entered promiscuous mode [ 810.373821][ T346] syzkaller0: entered allmulticast mode [ 810.403489][ T349] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.11983'. [ 810.913671][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.004143][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.238012][ T339] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.11983'. [ 811.278940][ T362] syzkaller0: entered promiscuous mode [ 811.298707][ T362] syzkaller0: entered allmulticast mode [ 811.810172][ T397] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 811.833555][ T397] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 811.851242][ T397] tipc: Resetting bearer [ 811.900301][ T398] tipc: Enabled bearer , priority 0 [ 811.920477][ T398] syzkaller0: entered promiscuous mode [ 811.932952][ T398] syzkaller0: entered allmulticast mode [ 811.954239][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.984688][ T398] tipc: Resetting bearer [ 812.042978][ T30] audit: type=1804 audit(1785572256.568:16): pid=403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.11999" name="/newroot/2429/cgroup.controllers" dev="tmpfs" ino=12283 res=1 errno=0 [ 812.088649][ T30] audit: type=1800 audit(1785572256.568:17): pid=403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11999" name="cgroup.controllers" dev="tmpfs" ino=12283 res=0 errno=0 [ 812.143084][ T395] tipc: Resetting bearer [ 812.195306][ T395] tipc: Disabling bearer [ 812.470365][ T415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12004'. [ 812.709495][ T420] tipc: Resetting bearer [ 812.951232][ T435] syzkaller0: entered promiscuous mode [ 812.971823][ T435] syzkaller0: entered allmulticast mode [ 813.006055][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.014283][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.058004][ T437] gre0: Caught tx_queue_len zero misconfig [ 813.069179][ T437] FAULT_INJECTION: forcing a failure. [ 813.069179][ T437] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 813.101114][ T437] CPU: 1 UID: 0 PID: 437 Comm: syz.0.12011 Not tainted syzkaller #0 PREEMPT(full) [ 813.101142][ T437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 813.101155][ T437] Call Trace: [ 813.101163][ T437] [ 813.101172][ T437] dump_stack_lvl+0xe8/0x150 [ 813.101213][ T437] should_fail_ex+0x40c/0x560 [ 813.101373][ T437] _copy_from_user+0x2d/0xb0 [ 813.101423][ T437] ___sys_sendmsg+0x1c6/0x360 [ 813.101507][ T437] ? __lock_acquire+0x683/0x2cf0 [ 813.101551][ T437] ? __pfx____sys_sendmsg+0x10/0x10 [ 813.101609][ T437] ? __fget_files+0x2a/0x420 [ 813.101659][ T437] ? __fget_files+0x3a2/0x420 [ 813.101698][ T437] __x64_sys_sendmsg+0x1b1/0x290 [ 813.101725][ T437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 813.101767][ T437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.101792][ T437] do_syscall_64+0x174/0x580 [ 813.101842][ T437] ? trace_irq_disable+0x3b/0x140 [ 813.101888][ T437] ? clear_bhb_loop+0x40/0x90 [ 813.101911][ T437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.101931][ T437] RIP: 0033:0x7fc09839e019 [ 813.101950][ T437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.101968][ T437] RSP: 002b:00007fc099337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.101992][ T437] RAX: ffffffffffffffda RBX: 00007fc098625fa0 RCX: 00007fc09839e019 [ 813.102006][ T437] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 813.102018][ T437] RBP: 00007fc099337090 R08: 0000000000000000 R09: 0000000000000000 [ 813.102030][ T437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.102041][ T437] R13: 00007fc098626038 R14: 00007fc098625fa0 R15: 00007ffef5c29138 [ 813.102074][ T437] [ 813.678148][ T456] syzkaller0: entered promiscuous mode [ 813.684417][ T459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12015'. [ 813.696796][ T456] syzkaller0: entered allmulticast mode [ 813.702627][ T459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12015'. [ 813.770145][ T461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.825780][ T463] tipc: Enabling of bearer rejected, already enabled [ 814.034352][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.042845][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.851228][ T504] FAULT_INJECTION: forcing a failure. [ 814.851228][ T504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.883075][ T504] CPU: 1 UID: 0 PID: 504 Comm: syz.1.12035 Not tainted syzkaller #0 PREEMPT(full) [ 814.883105][ T504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 814.883121][ T504] Call Trace: [ 814.883130][ T504] [ 814.883139][ T504] dump_stack_lvl+0xe8/0x150 [ 814.883177][ T504] should_fail_ex+0x40c/0x560 [ 814.883209][ T504] _copy_to_user+0x31/0xb0 [ 814.883232][ T504] simple_read_from_buffer+0xe1/0x170 [ 814.883267][ T504] proc_fail_nth_read+0x1bb/0x230 [ 814.883326][ T504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.883356][ T504] ? rw_verify_area+0x24a/0x4c0 [ 814.883380][ T504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.883406][ T504] vfs_read+0x213/0xa80 [ 814.883433][ T504] ? __pfx___mutex_lock+0x10/0x10 [ 814.883510][ T504] ? __pfx_vfs_read+0x10/0x10 [ 814.883532][ T504] ? __fget_files+0x2a/0x420 [ 814.883563][ T504] ? __fget_files+0x3a2/0x420 [ 814.883589][ T504] ? __fget_files+0x2a/0x420 [ 814.883623][ T504] ksys_read+0x150/0x270 [ 814.883645][ T504] ? __pfx_ksys_read+0x10/0x10 [ 814.883672][ T504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.883694][ T504] do_syscall_64+0x174/0x580 [ 814.883718][ T504] ? trace_irq_disable+0x3b/0x140 [ 814.883745][ T504] ? clear_bhb_loop+0x40/0x90 [ 814.883770][ T504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.883789][ T504] RIP: 0033:0x7f678095e84e [ 814.883808][ T504] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 814.883823][ T504] RSP: 002b:00007f678189efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 814.883846][ T504] RAX: ffffffffffffffda RBX: 00007f678189f6c0 RCX: 00007f678095e84e [ 814.883860][ T504] RDX: 000000000000000f RSI: 00007f678189f0a0 RDI: 0000000000000004 [ 814.883873][ T504] RBP: 00007f678189f090 R08: 0000000000000000 R09: 0000000000000000 [ 814.883884][ T504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.883895][ T504] R13: 00007f6780c26038 R14: 00007f6780c25fa0 R15: 00007fff5378dad8 [ 814.883927][ T504] [ 814.924735][ T506] syzkaller0: entered promiscuous mode [ 815.074008][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.087831][ T506] syzkaller0: entered allmulticast mode [ 815.377487][ T522] FAULT_INJECTION: forcing a failure. [ 815.377487][ T522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.392904][ T522] CPU: 0 UID: 0 PID: 522 Comm: syz.3.12040 Not tainted syzkaller #0 PREEMPT(full) [ 815.392933][ T522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 815.392953][ T522] Call Trace: [ 815.392961][ T522] [ 815.392971][ T522] dump_stack_lvl+0xe8/0x150 [ 815.393009][ T522] should_fail_ex+0x40c/0x560 [ 815.393041][ T522] _copy_to_user+0x31/0xb0 [ 815.393064][ T522] simple_read_from_buffer+0xe1/0x170 [ 815.393098][ T522] proc_fail_nth_read+0x1bb/0x230 [ 815.393130][ T522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.393163][ T522] ? rw_verify_area+0x24a/0x4c0 [ 815.393186][ T522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 815.393214][ T522] vfs_read+0x213/0xa80 [ 815.393239][ T522] ? __pfx___mutex_lock+0x10/0x10 [ 815.393265][ T522] ? __pfx_vfs_read+0x10/0x10 [ 815.393286][ T522] ? __fget_files+0x2a/0x420 [ 815.393319][ T522] ? __fget_files+0x3a2/0x420 [ 815.393344][ T522] ? __fget_files+0x2a/0x420 [ 815.393381][ T522] ksys_read+0x150/0x270 [ 815.393403][ T522] ? __pfx_ksys_read+0x10/0x10 [ 815.393432][ T522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.393453][ T522] do_syscall_64+0x174/0x580 [ 815.393480][ T522] ? clear_bhb_loop+0x40/0x90 [ 815.393504][ T522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.393524][ T522] RIP: 0033:0x7f0e99d5e84e [ 815.393542][ T522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 815.393558][ T522] RSP: 002b:00007f0e9ad4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 815.393580][ T522] RAX: ffffffffffffffda RBX: 00007f0e9ad4f6c0 RCX: 00007f0e99d5e84e [ 815.393595][ T522] RDX: 000000000000000f RSI: 00007f0e9ad4f0a0 RDI: 0000000000000004 [ 815.393607][ T522] RBP: 00007f0e9ad4f090 R08: 0000000000000000 R09: 0000000000000000 [ 815.393619][ T522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.393630][ T522] R13: 00007f0e9a026038 R14: 00007f0e9a025fa0 R15: 00007ffca8000b98 [ 815.393665][ T522] [ 815.899530][ T526] FAULT_INJECTION: forcing a failure. [ 815.899530][ T526] name failslab, interval 1, probability 0, space 0, times 1 [ 815.913730][ T526] CPU: 0 UID: 0 PID: 526 Comm: syz.2.12042 Not tainted syzkaller #0 PREEMPT(full) [ 815.913758][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 815.913771][ T526] Call Trace: [ 815.913783][ T526] [ 815.913795][ T526] dump_stack_lvl+0xe8/0x150 [ 815.913835][ T526] should_fail_ex+0x40c/0x560 [ 815.913870][ T526] should_failslab+0xa8/0x100 [ 815.913905][ T526] __kmalloc_noprof+0xfe/0x720 [ 815.913939][ T526] ? tomoyo_encode+0x2ad/0x570 [ 815.914052][ T526] ? tomoyo_encode+0x2ad/0x570 [ 815.914086][ T526] tomoyo_encode+0x2ad/0x570 [ 815.914119][ T526] tomoyo_realpath_from_path+0x5fa/0x640 [ 815.914158][ T526] ? tomoyo_path_number_perm+0x219/0x5f0 [ 815.914212][ T526] tomoyo_path_number_perm+0x246/0x5f0 [ 815.914248][ T526] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 815.914277][ T526] ? __lock_acquire+0x683/0x2cf0 [ 815.914331][ T526] ? hook_file_ioctl+0x1f0/0x5f0 [ 815.914401][ T526] ? __fget_files+0x2a/0x420 [ 815.914432][ T526] ? __fget_files+0x2a/0x420 [ 815.914457][ T526] ? __fget_files+0x3a2/0x420 [ 815.914482][ T526] ? __fget_files+0x2a/0x420 [ 815.914513][ T526] security_file_ioctl+0xc3/0x2a0 [ 815.914597][ T526] __se_sys_ioctl+0x47/0x170 [ 815.914618][ T526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.914641][ T526] do_syscall_64+0x174/0x580 [ 815.914667][ T526] ? trace_irq_disable+0x3b/0x140 [ 815.914696][ T526] ? clear_bhb_loop+0x40/0x90 [ 815.914722][ T526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.914744][ T526] RIP: 0033:0x7f964f59e019 [ 815.914765][ T526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.914782][ T526] RSP: 002b:00007f964d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.914805][ T526] RAX: ffffffffffffffda RBX: 00007f964f825fa0 RCX: 00007f964f59e019 [ 815.914819][ T526] RDX: 0000200000000a00 RSI: 0000000000008946 RDI: 0000000000000004 [ 815.914833][ T526] RBP: 00007f964d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 815.914845][ T526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.914857][ T526] R13: 00007f964f826038 R14: 00007f964f825fa0 R15: 00007ffdc1465888 [ 815.914892][ T526] [ 815.914927][ T526] ERROR: Out of memory at tomoyo_realpath_from_path. [ 816.053679][ T529] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 816.053791][ T529] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 816.054265][ T529] tipc: Resetting bearer [ 816.219150][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.526734][ T545] batadv_slave_0: entered promiscuous mode [ 816.594271][ T546] batadv_slave_0: left promiscuous mode [ 816.648037][ T552] syzkaller0: entered promiscuous mode [ 816.654066][ T552] syzkaller0: entered allmulticast mode [ 816.663291][ T555] syzkaller0: entered promiscuous mode [ 816.668839][ T555] syzkaller0: entered allmulticast mode [ 816.707729][ T559] FAULT_INJECTION: forcing a failure. [ 816.707729][ T559] name failslab, interval 1, probability 0, space 0, times 0 [ 816.739741][ T559] CPU: 1 UID: 0 PID: 559 Comm: syz.1.12055 Not tainted syzkaller #0 PREEMPT(full) [ 816.739769][ T559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.739780][ T559] Call Trace: [ 816.739788][ T559] [ 816.739797][ T559] dump_stack_lvl+0xe8/0x150 [ 816.739834][ T559] should_fail_ex+0x40c/0x560 [ 816.739864][ T559] should_failslab+0xa8/0x100 [ 816.739893][ T559] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 816.739917][ T559] ? local_lock_release+0x9c/0x160 [ 816.740013][ T559] ? __alloc_skb+0x1d7/0x7a0 [ 816.740030][ T559] ? __alloc_skb+0x1d7/0x7a0 [ 816.740053][ T559] __alloc_skb+0x1d7/0x7a0 [ 816.740074][ T559] netlink_sendmsg+0x5d4/0xb40 [ 816.740184][ T559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.740211][ T559] ? aa_sock_msg_perm+0xf1/0x1b0 [ 816.740263][ T559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.740284][ T559] sock_sendmsg_nosec+0x13a/0x180 [ 816.740336][ T559] ____sys_sendmsg+0x54e/0x850 [ 816.740362][ T559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.740390][ T559] ? import_iovec+0x73/0xa0 [ 816.740439][ T559] ___sys_sendmsg+0x2a5/0x360 [ 816.740460][ T559] ? __lock_acquire+0x683/0x2cf0 [ 816.740492][ T559] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.740548][ T559] ? __fget_files+0x2a/0x420 [ 816.740575][ T559] ? __fget_files+0x3a2/0x420 [ 816.740610][ T559] __x64_sys_sendmsg+0x1b1/0x290 [ 816.740634][ T559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 816.740687][ T559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.740710][ T559] do_syscall_64+0x174/0x580 [ 816.740735][ T559] ? trace_irq_disable+0x3b/0x140 [ 816.740763][ T559] ? clear_bhb_loop+0x40/0x90 [ 816.740788][ T559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.740809][ T559] RIP: 0033:0x7f678099e019 [ 816.740830][ T559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.740847][ T559] RSP: 002b:00007f678189f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.740870][ T559] RAX: ffffffffffffffda RBX: 00007f6780c25fa0 RCX: 00007f678099e019 [ 816.740885][ T559] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 816.740897][ T559] RBP: 00007f678189f090 R08: 0000000000000000 R09: 0000000000000000 [ 816.740909][ T559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.740921][ T559] R13: 00007f6780c26038 R14: 00007f6780c25fa0 R15: 00007fff5378dad8 [ 816.740954][ T559] [ 817.116291][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.211123][ T572] FAULT_INJECTION: forcing a failure. [ 817.211123][ T572] name failslab, interval 1, probability 0, space 0, times 0 [ 817.223830][ T572] CPU: 0 UID: 0 PID: 572 Comm: syz.3.12057 Not tainted syzkaller #0 PREEMPT(full) [ 817.223861][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.223874][ T572] Call Trace: [ 817.223882][ T572] [ 817.223890][ T572] dump_stack_lvl+0xe8/0x150 [ 817.223992][ T572] should_fail_ex+0x40c/0x560 [ 817.224031][ T572] ? vmemdup_user+0x2b/0xd0 [ 817.224091][ T572] should_failslab+0xa8/0x100 [ 817.224126][ T572] __kvmalloc_node_noprof+0x176/0x860 [ 817.224161][ T572] ? __fget_files+0x2a/0x420 [ 817.224190][ T572] ? vmemdup_user+0x2b/0xd0 [ 817.224227][ T572] vmemdup_user+0x2b/0xd0 [ 817.224257][ T572] map_lookup_elem+0x3c6/0x9b0 [ 817.224294][ T572] __sys_bpf+0x87c/0xd90 [ 817.224331][ T572] ? __pfx___sys_bpf+0x10/0x10 [ 817.224378][ T572] ? __fget_files+0x2a/0x420 [ 817.224428][ T572] ? ksys_write+0x242/0x270 [ 817.224452][ T572] ? __pfx_ksys_write+0x10/0x10 [ 817.224479][ T572] __x64_sys_bpf+0xba/0xd0 [ 817.224505][ T572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.224528][ T572] do_syscall_64+0x174/0x580 [ 817.224554][ T572] ? trace_irq_disable+0x3b/0x140 [ 817.224581][ T572] ? clear_bhb_loop+0x40/0x90 [ 817.224607][ T572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.224629][ T572] RIP: 0033:0x7f0e99d9e019 [ 817.224651][ T572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.224669][ T572] RSP: 002b:00007f0e9ad4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.224693][ T572] RAX: ffffffffffffffda RBX: 00007f0e9a025fa0 RCX: 00007f0e99d9e019 [ 817.224708][ T572] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000001 [ 817.224721][ T572] RBP: 00007f0e9ad4f090 R08: 0000000000000000 R09: 0000000000000000 [ 817.224734][ T572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.224746][ T572] R13: 00007f0e9a026038 R14: 00007f0e9a025fa0 R15: 00007ffca8000b98 [ 817.224780][ T572] [ 817.235838][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.622408][ T589] FAULT_INJECTION: forcing a failure. [ 817.622408][ T589] name failslab, interval 1, probability 0, space 0, times 0 [ 817.645805][ T589] CPU: 1 UID: 0 PID: 589 Comm: syz.1.12062 Not tainted syzkaller #0 PREEMPT(full) [ 817.645838][ T589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.645850][ T589] Call Trace: [ 817.645858][ T589] [ 817.645867][ T589] dump_stack_lvl+0xe8/0x150 [ 817.645906][ T589] should_fail_ex+0x40c/0x560 [ 817.645939][ T589] should_failslab+0xa8/0x100 [ 817.645972][ T589] __kmalloc_noprof+0xfe/0x720 [ 817.646000][ T589] ? tomoyo_encode+0x2ad/0x570 [ 817.646024][ T589] ? tomoyo_encode+0x2ad/0x570 [ 817.646054][ T589] tomoyo_encode+0x2ad/0x570 [ 817.646085][ T589] tomoyo_realpath_from_path+0x5fa/0x640 [ 817.646122][ T589] ? tomoyo_path_number_perm+0x219/0x5f0 [ 817.646156][ T589] tomoyo_path_number_perm+0x246/0x5f0 [ 817.646193][ T589] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 817.646224][ T589] ? __lock_acquire+0x683/0x2cf0 [ 817.646271][ T589] ? hook_file_ioctl+0x1f0/0x5f0 [ 817.646324][ T589] ? __fget_files+0x2a/0x420 [ 817.646357][ T589] ? __fget_files+0x2a/0x420 [ 817.646390][ T589] ? __fget_files+0x3a2/0x420 [ 817.646416][ T589] ? __fget_files+0x2a/0x420 [ 817.646449][ T589] security_file_ioctl+0xc3/0x2a0 [ 817.646484][ T589] __se_sys_ioctl+0x47/0x170 [ 817.646505][ T589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.646592][ T589] do_syscall_64+0x174/0x580 [ 817.646621][ T589] ? trace_irq_disable+0x3b/0x140 [ 817.646647][ T589] ? clear_bhb_loop+0x40/0x90 [ 817.646671][ T589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.646691][ T589] RIP: 0033:0x7f678099e019 [ 817.646712][ T589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.646730][ T589] RSP: 002b:00007f678189f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.646754][ T589] RAX: ffffffffffffffda RBX: 00007f6780c25fa0 RCX: 00007f678099e019 [ 817.646768][ T589] RDX: 0000200000000040 RSI: 0000000000008933 RDI: 0000000000000003 [ 817.646780][ T589] RBP: 00007f678189f090 R08: 0000000000000000 R09: 0000000000000000 [ 817.646794][ T589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.646805][ T589] R13: 00007f6780c26038 R14: 00007f6780c25fa0 R15: 00007fff5378dad8 [ 817.646841][ T589] [ 817.647084][ T589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 818.080421][ T601] FAULT_INJECTION: forcing a failure. [ 818.080421][ T601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.134587][ T601] CPU: 1 UID: 0 PID: 601 Comm: syz.4.12066 Not tainted syzkaller #0 PREEMPT(full) [ 818.134617][ T601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 818.134629][ T601] Call Trace: [ 818.134637][ T601] [ 818.134646][ T601] dump_stack_lvl+0xe8/0x150 [ 818.134684][ T601] should_fail_ex+0x40c/0x560 [ 818.134716][ T601] _copy_from_iter+0x1d3/0x1660 [ 818.134804][ T601] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 818.134834][ T601] ? rcu_is_watching+0x15/0xb0 [ 818.134866][ T601] ? trace_kmem_cache_alloc+0x29/0xe0 [ 818.134892][ T601] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 818.134922][ T601] ? __pfx__copy_from_iter+0x10/0x10 [ 818.134950][ T601] ? __alloc_skb+0x276/0x7a0 [ 818.134970][ T601] ? __alloc_skb+0x276/0x7a0 [ 818.134996][ T601] ? netlink_sendmsg+0x650/0xb40 [ 818.135019][ T601] ? skb_put+0x112/0x210 [ 818.135042][ T601] netlink_sendmsg+0x6c0/0xb40 [ 818.135065][ T601] ? aa_file_perm+0x18b/0x15f0 [ 818.135124][ T601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.135153][ T601] ? aa_sock_msg_perm+0xf1/0x1b0 [ 818.135181][ T601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.135204][ T601] sock_sendmsg_nosec+0x13a/0x180 [ 818.135235][ T601] sock_write_iter+0x2de/0x3e0 [ 818.135261][ T601] ? __pfx_sock_write_iter+0x10/0x10 [ 818.135305][ T601] do_iter_readv_writev+0x612/0x8c0 [ 818.135333][ T601] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 818.135359][ T601] ? bpf_lsm_file_permission+0x9/0x20 [ 818.135399][ T601] ? security_file_permission+0x75/0x260 [ 818.135429][ T601] ? rw_verify_area+0x203/0x4c0 [ 818.135453][ T601] vfs_writev+0x343/0x990 [ 818.135487][ T601] ? __pfx_vfs_writev+0x10/0x10 [ 818.135528][ T601] ? __fget_files+0x2a/0x420 [ 818.135561][ T601] ? __fget_files+0x3a2/0x420 [ 818.135595][ T601] ? __fget_files+0x2a/0x420 [ 818.135631][ T601] do_writev+0x154/0x2e0 [ 818.135659][ T601] ? __pfx_do_writev+0x10/0x10 [ 818.135691][ T601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.135713][ T601] do_syscall_64+0x174/0x580 [ 818.135735][ T601] ? trace_irq_disable+0x3b/0x140 [ 818.135761][ T601] ? clear_bhb_loop+0x40/0x90 [ 818.135786][ T601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.135806][ T601] RIP: 0033:0x7f35eb99e019 [ 818.135827][ T601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.135844][ T601] RSP: 002b:00007f35ec7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 818.135866][ T601] RAX: ffffffffffffffda RBX: 00007f35ebc25fa0 RCX: 00007f35eb99e019 [ 818.135881][ T601] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000004 [ 818.135894][ T601] RBP: 00007f35ec7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 818.135906][ T601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.135918][ T601] R13: 00007f35ebc26038 R14: 00007f35ebc25fa0 R15: 00007ffeb6eee948 [ 818.135950][ T601] [ 818.539552][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.631183][ T613] FAULT_INJECTION: forcing a failure. [ 818.631183][ T613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.647933][ T613] CPU: 1 UID: 0 PID: 613 Comm: syz.0.12070 Not tainted syzkaller #0 PREEMPT(full) [ 818.647962][ T613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 818.647974][ T613] Call Trace: [ 818.647983][ T613] [ 818.647991][ T613] dump_stack_lvl+0xe8/0x150 [ 818.648027][ T613] should_fail_ex+0x40c/0x560 [ 818.648059][ T613] _copy_to_user+0x31/0xb0 [ 818.648082][ T613] simple_read_from_buffer+0xe1/0x170 [ 818.648117][ T613] proc_fail_nth_read+0x1bb/0x230 [ 818.648148][ T613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 818.648187][ T613] ? rw_verify_area+0x24a/0x4c0 [ 818.648208][ T613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 818.648236][ T613] vfs_read+0x213/0xa80 [ 818.648260][ T613] ? __pfx___mutex_lock+0x10/0x10 [ 818.648285][ T613] ? __pfx_vfs_read+0x10/0x10 [ 818.648307][ T613] ? __fget_files+0x2a/0x420 [ 818.648337][ T613] ? __fget_files+0x3a2/0x420 [ 818.648361][ T613] ? __fget_files+0x2a/0x420 [ 818.648397][ T613] ksys_read+0x150/0x270 [ 818.648420][ T613] ? __pfx_ksys_read+0x10/0x10 [ 818.648449][ T613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.648471][ T613] do_syscall_64+0x174/0x580 [ 818.648494][ T613] ? trace_irq_disable+0x3b/0x140 [ 818.648519][ T613] ? clear_bhb_loop+0x40/0x90 [ 818.648542][ T613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.648562][ T613] RIP: 0033:0x7fc09835e84e [ 818.648590][ T613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 818.648607][ T613] RSP: 002b:00007fc099315fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 818.648629][ T613] RAX: ffffffffffffffda RBX: 00007fc0993166c0 RCX: 00007fc09835e84e [ 818.648644][ T613] RDX: 000000000000000f RSI: 00007fc0993160a0 RDI: 0000000000000006 [ 818.648656][ T613] RBP: 00007fc099316090 R08: 0000000000000000 R09: 0000000000000000 [ 818.648669][ T613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.648680][ T613] R13: 00007fc098626128 R14: 00007fc098626090 R15: 00007ffef5c29138 [ 818.648714][ T613] [ 819.400212][ T1603] block nbd6: Possible stuck request ffff888027c50000: control (read@0,1024B). Runtime 30 seconds [ 819.416180][ T1603] block nbd6: Possible stuck request ffff888027c501c0: control (read@1024,1024B). Runtime 30 seconds [ 819.428843][ T1603] block nbd6: Possible stuck request ffff888027c50380: control (read@2048,1024B). Runtime 30 seconds [ 819.440858][ T1603] block nbd6: Possible stuck request ffff888027c50540: control (read@3072,1024B). Runtime 30 seconds [ 819.553653][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.815959][ T652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12085'. [ 820.215726][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.598677][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.644100][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.610673][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.674009][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.249475][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.717804][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.869700][ T709] FAULT_INJECTION: forcing a failure. [ 823.869700][ T709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.877210][ T707] netlink: 'syz.0.12098': attribute type 8 has an invalid length. [ 823.921784][ T709] CPU: 1 UID: 0 PID: 709 Comm: syz.1.12100 Not tainted syzkaller #0 PREEMPT(full) [ 823.921812][ T709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.921824][ T709] Call Trace: [ 823.921832][ T709] [ 823.921840][ T709] dump_stack_lvl+0xe8/0x150 [ 823.921881][ T709] should_fail_ex+0x40c/0x560 [ 823.921913][ T709] _copy_from_iter+0x1d3/0x1660 [ 823.921940][ T709] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 823.921967][ T709] ? rcu_is_watching+0x15/0xb0 [ 823.921987][ T709] ? trace_kmem_cache_alloc+0x29/0xe0 [ 823.922022][ T709] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 823.922048][ T709] ? __pfx__copy_from_iter+0x10/0x10 [ 823.922074][ T709] ? __alloc_skb+0x276/0x7a0 [ 823.922094][ T709] ? __alloc_skb+0x276/0x7a0 [ 823.922118][ T709] ? netlink_sendmsg+0x650/0xb40 [ 823.922142][ T709] ? skb_put+0x112/0x210 [ 823.922165][ T709] netlink_sendmsg+0x6c0/0xb40 [ 823.922199][ T709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.922228][ T709] ? aa_sock_msg_perm+0xf1/0x1b0 [ 823.922257][ T709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.922279][ T709] sock_sendmsg_nosec+0x13a/0x180 [ 823.922309][ T709] ____sys_sendmsg+0x54e/0x850 [ 823.922335][ T709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.922364][ T709] ? import_iovec+0x73/0xa0 [ 823.922381][ T709] ___sys_sendmsg+0x2a5/0x360 [ 823.922402][ T709] ? __lock_acquire+0x683/0x2cf0 [ 823.922430][ T709] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.922481][ T709] ? __fget_files+0x2a/0x420 [ 823.922504][ T709] ? __fget_files+0x3a2/0x420 [ 823.922542][ T709] __x64_sys_sendmsg+0x1b1/0x290 [ 823.922567][ T709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.922613][ T709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.922636][ T709] do_syscall_64+0x174/0x580 [ 823.922659][ T709] ? trace_irq_disable+0x3b/0x140 [ 823.922684][ T709] ? clear_bhb_loop+0x40/0x90 [ 823.922708][ T709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.922727][ T709] RIP: 0033:0x7f678099e019 [ 823.922747][ T709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.922763][ T709] RSP: 002b:00007f678189f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.922786][ T709] RAX: ffffffffffffffda RBX: 00007f6780c25fa0 RCX: 00007f678099e019 [ 823.922801][ T709] RDX: 0000000000000880 RSI: 0000200000000340 RDI: 0000000000000003 [ 823.922814][ T709] RBP: 00007f678189f090 R08: 0000000000000000 R09: 0000000000000000 [ 823.922827][ T709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.922838][ T709] R13: 00007f6780c26038 R14: 00007f6780c25fa0 R15: 00007fff5378dad8 [ 823.922869][ T709] [ 824.538332][ T722] syzkaller0: entered promiscuous mode [ 824.555302][ T722] syzkaller0: entered allmulticast mode [ 824.787115][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.832928][ T734] FAULT_INJECTION: forcing a failure. [ 824.832928][ T734] name failslab, interval 1, probability 0, space 0, times 0 [ 824.894552][ T734] CPU: 1 UID: 0 PID: 734 Comm: syz.0.12109 Not tainted syzkaller #0 PREEMPT(full) [ 824.894580][ T734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 824.894592][ T734] Call Trace: [ 824.894600][ T734] [ 824.894608][ T734] dump_stack_lvl+0xe8/0x150 [ 824.894645][ T734] should_fail_ex+0x40c/0x560 [ 824.894676][ T734] should_failslab+0xa8/0x100 [ 824.894709][ T734] __kmalloc_cache_noprof+0xa8/0x660 [ 824.894737][ T734] ? __inet_diag_dump_start+0x90/0xbb0 [ 824.894847][ T734] ? __inet_diag_dump_start+0x90/0xbb0 [ 824.894875][ T734] __inet_diag_dump_start+0x90/0xbb0 [ 824.894897][ T734] ? netlink_lookup+0x30/0x200 [ 824.894919][ T734] ? netlink_lookup+0x30/0x200 [ 824.894946][ T734] __netlink_dump_start+0x442/0x7b0 [ 824.894976][ T734] inet_diag_handler_cmd+0x1df/0x2c0 [ 824.894994][ T734] ? sock_diag_lock_handler+0x19/0x290 [ 824.895090][ T734] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 824.895108][ T734] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 824.895126][ T734] ? __pfx_inet_diag_dump+0x10/0x10 [ 824.895142][ T734] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 824.895165][ T734] ? sock_diag_lock_handler+0x19/0x290 [ 824.895193][ T734] ? sock_diag_lock_handler+0x19/0x290 [ 824.895227][ T734] sock_diag_rcv_msg+0x4b0/0x5f0 [ 824.895262][ T734] netlink_rcv_skb+0x226/0x4a0 [ 824.895286][ T734] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 824.895318][ T734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 824.895355][ T734] ? netlink_deliver_tap+0x2e/0x1b0 [ 824.895378][ T734] ? netlink_deliver_tap+0x2e/0x1b0 [ 824.895407][ T734] netlink_unicast+0x7bb/0x940 [ 824.895442][ T734] netlink_sendmsg+0x813/0xb40 [ 824.895486][ T734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.895515][ T734] ? aa_sock_msg_perm+0xf1/0x1b0 [ 824.895544][ T734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.895566][ T734] sock_sendmsg_nosec+0x13a/0x180 [ 824.895600][ T734] sock_write_iter+0x2de/0x3e0 [ 824.895628][ T734] ? __pfx_sock_write_iter+0x10/0x10 [ 824.895677][ T734] do_iter_readv_writev+0x612/0x8c0 [ 824.895703][ T734] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 824.895731][ T734] ? bpf_lsm_file_permission+0x9/0x20 [ 824.895755][ T734] ? security_file_permission+0x75/0x260 [ 824.895787][ T734] ? rw_verify_area+0x203/0x4c0 [ 824.895811][ T734] vfs_writev+0x343/0x990 [ 824.895847][ T734] ? __pfx_vfs_writev+0x10/0x10 [ 824.895888][ T734] ? __fget_files+0x2a/0x420 [ 824.895921][ T734] ? __fget_files+0x3a2/0x420 [ 824.895947][ T734] ? __fget_files+0x2a/0x420 [ 824.895980][ T734] do_writev+0x154/0x2e0 [ 824.896009][ T734] ? __pfx_do_writev+0x10/0x10 [ 824.896042][ T734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.896065][ T734] do_syscall_64+0x174/0x580 [ 824.896091][ T734] ? clear_bhb_loop+0x40/0x90 [ 824.896117][ T734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.896136][ T734] RIP: 0033:0x7fc09839e019 [ 824.896157][ T734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.896175][ T734] RSP: 002b:00007fc099337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 824.896197][ T734] RAX: ffffffffffffffda RBX: 00007fc098625fa0 RCX: 00007fc09839e019 [ 824.896212][ T734] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000004 [ 824.896224][ T734] RBP: 00007fc099337090 R08: 0000000000000000 R09: 0000000000000000 [ 824.896237][ T734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.896249][ T734] R13: 00007fc098626038 R14: 00007fc098625fa0 R15: 00007ffef5c29138 [ 824.896283][ T734] [ 825.259593][ T736] FAULT_INJECTION: forcing a failure. [ 825.259593][ T736] name failslab, interval 1, probability 0, space 0, times 0 [ 825.272436][ T736] CPU: 1 UID: 0 PID: 736 Comm: syz.3.12112 Not tainted syzkaller #0 PREEMPT(full) [ 825.272473][ T736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.272486][ T736] Call Trace: [ 825.272494][ T736] [ 825.272503][ T736] dump_stack_lvl+0xe8/0x150 [ 825.272540][ T736] should_fail_ex+0x40c/0x560 [ 825.272573][ T736] should_failslab+0xa8/0x100 [ 825.272605][ T736] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 825.272631][ T736] ? skb_clone+0x212/0x3a0 [ 825.272654][ T736] ? skb_clone+0x212/0x3a0 [ 825.272684][ T736] skb_clone+0x212/0x3a0 [ 825.272711][ T736] __netlink_deliver_tap+0x413/0x860 [ 825.272749][ T736] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.272774][ T736] netlink_deliver_tap+0x19c/0x1b0 [ 825.272799][ T736] netlink_unicast+0x77f/0x940 [ 825.272832][ T736] netlink_sendmsg+0x813/0xb40 [ 825.272868][ T736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.272897][ T736] ? aa_sock_msg_perm+0xf1/0x1b0 [ 825.272927][ T736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.272949][ T736] sock_sendmsg_nosec+0x13a/0x180 [ 825.272981][ T736] ____sys_sendmsg+0x54e/0x850 [ 825.273010][ T736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.273043][ T736] ? import_iovec+0x73/0xa0 [ 825.273069][ T736] ___sys_sendmsg+0x2a5/0x360 [ 825.273090][ T736] ? __lock_acquire+0x683/0x2cf0 [ 825.273126][ T736] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.273187][ T736] ? __fget_files+0x2a/0x420 [ 825.273212][ T736] ? __fget_files+0x3a2/0x420 [ 825.273250][ T736] __x64_sys_sendmsg+0x1b1/0x290 [ 825.273276][ T736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.273319][ T736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.273341][ T736] do_syscall_64+0x174/0x580 [ 825.273365][ T736] ? trace_irq_disable+0x3b/0x140 [ 825.273391][ T736] ? clear_bhb_loop+0x40/0x90 [ 825.273416][ T736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.273437][ T736] RIP: 0033:0x7f0e99d9e019 [ 825.273457][ T736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.273482][ T736] RSP: 002b:00007f0e9ad4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.273504][ T736] RAX: ffffffffffffffda RBX: 00007f0e9a025fa0 RCX: 00007f0e99d9e019 [ 825.273519][ T736] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 825.273531][ T736] RBP: 00007f0e9ad4f090 R08: 0000000000000000 R09: 0000000000000000 [ 825.273543][ T736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.273555][ T736] R13: 00007f0e9a026038 R14: 00007f0e9a025fa0 R15: 00007ffca8000b98 [ 825.273588][ T736] [ 825.644557][ T738] netlink: 'syz.1.12114': attribute type 2 has an invalid length. [ 825.702330][ T738] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12114'. [ 825.794253][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.816655][ T745] FAULT_INJECTION: forcing a failure. [ 825.816655][ T745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.823421][ T741] tipc: Enabled bearer , priority 0 [ 825.830640][ T745] CPU: 1 UID: 0 PID: 745 Comm: syz.0.12116 Not tainted syzkaller #0 PREEMPT(full) [ 825.830668][ T745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.830679][ T745] Call Trace: [ 825.830688][ T745] [ 825.830695][ T745] dump_stack_lvl+0xe8/0x150 [ 825.830730][ T745] should_fail_ex+0x40c/0x560 [ 825.830760][ T745] _copy_from_user+0x2d/0xb0 [ 825.830780][ T745] ___sys_sendmsg+0x1c6/0x360 [ 825.830802][ T745] ? __lock_acquire+0x683/0x2cf0 [ 825.830831][ T745] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.830850][ T745] ? __lock_acquire+0x683/0x2cf0 [ 825.830878][ T745] ? kstrtouint+0x6e/0xe0 [ 825.830939][ T745] __sys_sendmmsg+0x273/0x4d0 [ 825.830973][ T745] ? __pfx___sys_sendmmsg+0x10/0x10 [ 825.831003][ T745] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 825.831039][ T745] ? ksys_write+0x242/0x270 [ 825.831060][ T745] ? __pfx_ksys_write+0x10/0x10 [ 825.831085][ T745] __x64_sys_sendmmsg+0xa0/0xc0 [ 825.831106][ T745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.831125][ T745] do_syscall_64+0x174/0x580 [ 825.831148][ T745] ? clear_bhb_loop+0x40/0x90 [ 825.831170][ T745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.831189][ T745] RIP: 0033:0x7fc09839e019 [ 825.831207][ T745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.831222][ T745] RSP: 002b:00007fc099337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 825.831243][ T745] RAX: ffffffffffffffda RBX: 00007fc098625fa0 RCX: 00007fc09839e019 [ 825.831256][ T745] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 825.831268][ T745] RBP: 00007fc099337090 R08: 0000000000000000 R09: 0000000000000000 [ 825.831279][ T745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.831290][ T745] R13: 00007fc098626038 R14: 00007fc098625fa0 R15: 00007ffef5c29138 [ 825.831342][ T745] [ 825.958683][ T742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12114'. [ 826.064744][ T741] syzkaller0: entered promiscuous mode [ 826.070364][ T741] syzkaller0: entered allmulticast mode [ 826.078226][ T738] netlink: 'syz.1.12114': attribute type 2 has an invalid length. [ 826.117911][ T749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.136671][ T741] tipc: Resetting bearer [ 826.202720][ T740] tipc: Resetting bearer [ 826.234370][ T740] tipc: Disabling bearer [ 826.276938][ T757] nbd: couldn't find device at index 134217728 [ 826.324678][ T762] FAULT_INJECTION: forcing a failure. [ 826.324678][ T762] name failslab, interval 1, probability 0, space 0, times 0 [ 826.337841][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.354603][ T762] CPU: 0 UID: 0 PID: 762 Comm: syz.1.12121 Not tainted syzkaller #0 PREEMPT(full) [ 826.354634][ T762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 826.354646][ T762] Call Trace: [ 826.354655][ T762] [ 826.354665][ T762] dump_stack_lvl+0xe8/0x150 [ 826.354718][ T762] should_fail_ex+0x40c/0x560 [ 826.354752][ T762] should_failslab+0xa8/0x100 [ 826.354786][ T762] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 826.354814][ T762] ? skb_clone+0x212/0x3a0 [ 826.354837][ T762] ? skb_clone+0x212/0x3a0 [ 826.354868][ T762] skb_clone+0x212/0x3a0 [ 826.354897][ T762] __netlink_deliver_tap+0x413/0x860 [ 826.354935][ T762] ? netlink_deliver_tap+0x2e/0x1b0 [ 826.354960][ T762] netlink_deliver_tap+0x19c/0x1b0 [ 826.354986][ T762] netlink_unicast+0x77f/0x940 [ 826.355021][ T762] netlink_sendmsg+0x813/0xb40 [ 826.355056][ T762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.355085][ T762] ? aa_sock_msg_perm+0xf1/0x1b0 [ 826.355116][ T762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.355140][ T762] sock_sendmsg_nosec+0x13a/0x180 [ 826.355173][ T762] ____sys_sendmsg+0x54e/0x850 [ 826.355204][ T762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 826.355240][ T762] ? import_iovec+0x73/0xa0 [ 826.355265][ T762] ___sys_sendmsg+0x2a5/0x360 [ 826.355288][ T762] ? __lock_acquire+0x683/0x2cf0 [ 826.355323][ T762] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.355387][ T762] ? __fget_files+0x2a/0x420 [ 826.355415][ T762] ? __fget_files+0x3a2/0x420 [ 826.355465][ T762] __x64_sys_sendmsg+0x1b1/0x290 [ 826.355493][ T762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 826.355538][ T762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.355562][ T762] do_syscall_64+0x174/0x580 [ 826.355589][ T762] ? clear_bhb_loop+0x40/0x90 [ 826.355615][ T762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.355635][ T762] RIP: 0033:0x7f678099e019 [ 826.355656][ T762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.355673][ T762] RSP: 002b:00007f678189f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.355696][ T762] RAX: ffffffffffffffda RBX: 00007f6780c25fa0 RCX: 00007f678099e019 [ 826.355712][ T762] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 826.355725][ T762] RBP: 00007f678189f090 R08: 0000000000000000 R09: 0000000000000000 [ 826.355737][ T762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.355749][ T762] R13: 00007f6780c26038 R14: 00007f6780c25fa0 R15: 00007fff5378dad8 [ 826.355784][ T762] [ 826.786839][ T774] FAULT_INJECTION: forcing a failure. [ 826.786839][ T774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.809281][ T774] CPU: 1 UID: 0 PID: 774 Comm: syz.0.12126 Not tainted syzkaller #0 PREEMPT(full) [ 826.809310][ T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 826.809322][ T774] Call Trace: [ 826.809331][ T774] [ 826.809340][ T774] dump_stack_lvl+0xe8/0x150 [ 826.809377][ T774] should_fail_ex+0x40c/0x560 [ 826.809411][ T774] _copy_to_user+0x31/0xb0 [ 826.809434][ T774] simple_read_from_buffer+0xe1/0x170 [ 826.809466][ T774] proc_fail_nth_read+0x1bb/0x230 [ 826.809497][ T774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 826.809525][ T774] ? rw_verify_area+0x24a/0x4c0 [ 826.809546][ T774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 826.809573][ T774] vfs_read+0x213/0xa80 [ 826.809597][ T774] ? __pfx___mutex_lock+0x10/0x10 [ 826.809622][ T774] ? __pfx_vfs_read+0x10/0x10 [ 826.809643][ T774] ? __fget_files+0x2a/0x420 [ 826.809672][ T774] ? __fget_files+0x3a2/0x420 [ 826.809695][ T774] ? __fget_files+0x2a/0x420 [ 826.809728][ T774] ksys_read+0x150/0x270 [ 826.809751][ T774] ? __pfx_ksys_read+0x10/0x10 [ 826.809779][ T774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.809799][ T774] do_syscall_64+0x174/0x580 [ 826.809822][ T774] ? trace_irq_disable+0x3b/0x140 [ 826.809848][ T774] ? clear_bhb_loop+0x40/0x90 [ 826.809871][ T774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.809889][ T774] RIP: 0033:0x7fc09835e84e [ 826.809908][ T774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 826.809925][ T774] RSP: 002b:00007fc099336fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 826.809946][ T774] RAX: ffffffffffffffda RBX: 00007fc0993376c0 RCX: 00007fc09835e84e [ 826.809960][ T774] RDX: 000000000000000f RSI: 00007fc0993370a0 RDI: 0000000000000005 [ 826.809983][ T774] RBP: 00007fc099337090 R08: 0000000000000000 R09: 0000000000000000 [ 826.809996][ T774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.810008][ T774] R13: 00007fc098626038 R14: 00007fc098625fa0 R15: 00007ffef5c29138 [ 826.810041][ T774] [ 827.027154][T12403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.395204][ T807] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 827.628738][ T820] FAULT_INJECTION: forcing a failure. [ 827.628738][ T820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.641917][ T820] CPU: 0 UID: 0 PID: 820 Comm: syz.4.12142 Not tainted syzkaller #0 PREEMPT(full) [ 827.641947][ T820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 827.641967][ T820] Call Trace: [ 827.641976][ T820] [ 827.641986][ T820] dump_stack_lvl+0xe8/0x150 [ 827.642023][ T820] should_fail_ex+0x40c/0x560 [ 827.642053][ T820] _copy_to_user+0x31/0xb0 [ 827.642075][ T820] simple_read_from_buffer+0xe1/0x170 [ 827.642106][ T820] proc_fail_nth_read+0x1bb/0x230 [ 827.642137][ T820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.642169][ T820] ? rw_verify_area+0x24a/0x4c0 [ 827.642190][ T820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.642216][ T820] vfs_read+0x213/0xa80 [ 827.642240][ T820] ? __pfx___mutex_lock+0x10/0x10 [ 827.642265][ T820] ? __pfx_vfs_read+0x10/0x10 [ 827.642285][ T820] ? __fget_files+0x2a/0x420 [ 827.642316][ T820] ? __fget_files+0x3a2/0x420 [ 827.642346][ T820] ? __fget_files+0x2a/0x420 [ 827.642377][ T820] ksys_read+0x150/0x270 [ 827.642400][ T820] ? __pfx_ksys_read+0x10/0x10 [ 827.642418][ T820] ? __pfx_sock_ioctl+0x10/0x10 [ 827.642452][ T820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.642472][ T820] do_syscall_64+0x174/0x580 [ 827.642495][ T820] ? trace_irq_disable+0x3b/0x140 [ 827.642520][ T820] ? clear_bhb_loop+0x40/0x90 [ 827.642543][ T820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.642563][ T820] RIP: 0033:0x7f35eb95e84e [ 827.642583][ T820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 827.642599][ T820] RSP: 002b:00007f35ec7e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 827.642621][ T820] RAX: ffffffffffffffda RBX: 00007f35ec7e26c0 RCX: 00007f35eb95e84e [ 827.642636][ T820] RDX: 000000000000000f RSI: 00007f35ec7e20a0 RDI: 0000000000000004 [ 827.642648][ T820] RBP: 00007f35ec7e2090 R08: 0000000000000000 R09: 0000000000000000 [ 827.642660][ T820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.642671][ T820] R13: 00007f35ebc26038 R14: 00007f35ebc25fa0 R15: 00007ffeb6eee948 [ 827.642705][ T820] [ 827.952549][ T825] tipc: Enabling of bearer rejected, already enabled [ 828.046743][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.241061][ T838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12149'. [ 828.280109][ T838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12149'. [ 828.291021][ T838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12149'. [ 828.336011][ T845] FAULT_INJECTION: forcing a failure. [ 828.336011][ T845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.351902][ T845] CPU: 1 UID: 0 PID: 845 Comm: syz.1.12152 Not tainted syzkaller #0 PREEMPT(full) [ 828.351933][ T845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.351945][ T845] Call Trace: [ 828.351953][ T845] [ 828.351962][ T845] dump_stack_lvl+0xe8/0x150 [ 828.352008][ T845] should_fail_ex+0x40c/0x560 [ 828.352055][ T845] _copy_to_user+0x31/0xb0 [ 828.352080][ T845] simple_read_from_buffer+0xe1/0x170 [ 828.352114][ T845] proc_fail_nth_read+0x1bb/0x230 [ 828.352147][ T845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 828.352179][ T845] ? rw_verify_area+0x24a/0x4c0 [ 828.352201][ T845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 828.352229][ T845] vfs_read+0x213/0xa80 [ 828.352256][ T845] ? __pfx___mutex_lock+0x10/0x10 [ 828.352282][ T845] ? __pfx_vfs_read+0x10/0x10 [ 828.352304][ T845] ? __fget_files+0x2a/0x420 [ 828.352337][ T845] ? __fget_files+0x3a2/0x420 [ 828.352373][ T845] ? __fget_files+0x2a/0x420 [ 828.352410][ T845] ksys_read+0x150/0x270 [ 828.352434][ T845] ? __pfx_ksys_read+0x10/0x10 [ 828.352462][ T845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.352486][ T845] do_syscall_64+0x174/0x580 [ 828.352509][ T845] ? trace_irq_disable+0x3b/0x140 [ 828.352536][ T845] ? clear_bhb_loop+0x40/0x90 [ 828.352562][ T845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.352582][ T845] RIP: 0033:0x7f678095e84e [ 828.352602][ T845] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 828.352619][ T845] RSP: 002b:00007f678189efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 828.352642][ T845] RAX: ffffffffffffffda RBX: 00007f678189f6c0 RCX: 00007f678095e84e [ 828.352657][ T845] RDX: 000000000000000f RSI: 00007f678189f0a0 RDI: 0000000000000005 [ 828.352670][ T845] RBP: 00007f678189f090 R08: 0000000000000000 R09: 0000000000000000 [ 828.352681][ T845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.352692][ T845] R13: 00007f6780c26038 R14: 00007f6780c25fa0 R15: 00007fff5378dad8 [ 828.352723][ T845] [ 828.610516][ T846] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 828.618072][ T846] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 828.626020][ T846] tipc: Resetting bearer [ 828.662523][ T838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12149'. [ 828.671535][ T838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12149'. [ 828.682331][ T838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12149'. [ 828.795603][ T858] tipc: Enabling of bearer rejected, already enabled [ 828.946967][ T866] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 829.075169][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.360921][ T894] netlink: 'syz.4.12169': attribute type 9 has an invalid length. [ 829.385845][ T894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12169'. [ 829.400430][ T894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12169'. [ 829.447666][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.701633][ T912] FAULT_INJECTION: forcing a failure. [ 829.701633][ T912] name failslab, interval 1, probability 0, space 0, times 0 [ 829.715393][ T912] CPU: 1 UID: 0 PID: 912 Comm: syz.1.12177 Not tainted syzkaller #0 PREEMPT(full) [ 829.715421][ T912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 829.715432][ T912] Call Trace: [ 829.715440][ T912] [ 829.715449][ T912] dump_stack_lvl+0xe8/0x150 [ 829.715485][ T912] should_fail_ex+0x40c/0x560 [ 829.715517][ T912] should_failslab+0xa8/0x100 [ 829.715544][ T912] __kmalloc_cache_noprof+0xa8/0x660 [ 829.715571][ T912] ? genl_start+0x1c9/0x6d0 [ 829.715599][ T912] ? genl_start+0x1c9/0x6d0 [ 829.715634][ T912] genl_start+0x1c9/0x6d0 [ 829.715668][ T912] __netlink_dump_start+0x442/0x7b0 [ 829.715701][ T912] genl_family_rcv_msg_dumpit+0x213/0x310 [ 829.715731][ T912] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 829.715757][ T912] ? genl_get_cmd+0x82f/0x960 [ 829.715789][ T912] ? __pfx_genl_start+0x10/0x10 [ 829.715814][ T912] ? __pfx_genl_dumpit+0x10/0x10 [ 829.715836][ T912] ? __pfx_genl_done+0x10/0x10 [ 829.715864][ T912] ? __dev_queue_xmit+0x29b/0x3820 [ 829.715987][ T912] genl_rcv_msg+0x5e1/0x7a0 [ 829.716032][ T912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 829.716059][ T912] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 829.716134][ T912] ? __pfx_ref_tracker_free+0x10/0x10 [ 829.716218][ T912] netlink_rcv_skb+0x226/0x4a0 [ 829.716245][ T912] ? __pfx_genl_rcv_msg+0x10/0x10 [ 829.716277][ T912] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 829.716318][ T912] ? down_read+0x2be/0x330 [ 829.716350][ T912] genl_rcv+0x28/0x40 [ 829.716376][ T912] netlink_unicast+0x7bb/0x940 [ 829.716412][ T912] netlink_sendmsg+0x813/0xb40 [ 829.716448][ T912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.716479][ T912] ? aa_sock_msg_perm+0xf1/0x1b0 [ 829.716509][ T912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.716532][ T912] sock_sendmsg_nosec+0x13a/0x180 [ 829.716563][ T912] ____sys_sendmsg+0x54e/0x850 [ 829.716593][ T912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.716627][ T912] ? import_iovec+0x73/0xa0 [ 829.716652][ T912] ___sys_sendmsg+0x2a5/0x360 [ 829.716673][ T912] ? __lock_acquire+0x683/0x2cf0 [ 829.716705][ T912] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.716770][ T912] ? __fget_files+0x2a/0x420 [ 829.716797][ T912] ? __fget_files+0x3a2/0x420 [ 829.716834][ T912] __x64_sys_sendmsg+0x1b1/0x290 [ 829.716861][ T912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 829.716906][ T912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.716930][ T912] do_syscall_64+0x174/0x580 [ 829.716953][ T912] ? trace_irq_disable+0x3b/0x140 [ 829.716981][ T912] ? clear_bhb_loop+0x40/0x90 [ 829.717017][ T912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.717039][ T912] RIP: 0033:0x7f678099e019 [ 829.717060][ T912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.717079][ T912] RSP: 002b:00007f678189f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.717102][ T912] RAX: ffffffffffffffda RBX: 00007f6780c25fa0 RCX: 00007f678099e019 [ 829.717117][ T912] RDX: 0000000020000400 RSI: 0000200000000780 RDI: 0000000000000003 [ 829.717130][ T912] RBP: 00007f678189f090 R08: 0000000000000000 R09: 0000000000000000 [ 829.717143][ T912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.717155][ T912] R13: 00007f6780c26038 R14: 00007f6780c25fa0 R15: 00007fff5378dad8 [ 829.717190][ T912] [ 830.140990][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.797897][ T952] FAULT_INJECTION: forcing a failure. [ 830.797897][ T952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.857544][ T952] CPU: 1 UID: 0 PID: 952 Comm: syz.0.12191 Not tainted syzkaller #0 PREEMPT(full) [ 830.857573][ T952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.857584][ T952] Call Trace: [ 830.857592][ T952] [ 830.857600][ T952] dump_stack_lvl+0xe8/0x150 [ 830.857638][ T952] should_fail_ex+0x40c/0x560 [ 830.857670][ T952] _copy_from_user+0x2d/0xb0 [ 830.857690][ T952] kstrtouint_from_user+0xd6/0x180 [ 830.857718][ T952] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 830.857760][ T952] proc_fail_nth_write+0x8e/0x210 [ 830.857789][ T952] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 830.857837][ T952] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 830.857864][ T952] vfs_write+0x296/0xba0 [ 830.857895][ T952] ? __pfx_vfs_write+0x10/0x10 [ 830.857916][ T952] ? __fget_files+0x2a/0x420 [ 830.857946][ T952] ? __fget_files+0x3a2/0x420 [ 830.857972][ T952] ? __fget_files+0x2a/0x420 [ 830.858007][ T952] ksys_write+0x150/0x270 [ 830.858029][ T952] ? __pfx_ksys_write+0x10/0x10 [ 830.858058][ T952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.858080][ T952] do_syscall_64+0x174/0x580 [ 830.858104][ T952] ? clear_bhb_loop+0x40/0x90 [ 830.858129][ T952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.858149][ T952] RIP: 0033:0x7fc09835e84e [ 830.858169][ T952] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 830.858184][ T952] RSP: 002b:00007fc099336fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 830.858206][ T952] RAX: ffffffffffffffda RBX: 00007fc0993376c0 RCX: 00007fc09835e84e [ 830.858220][ T952] RDX: 0000000000000001 RSI: 00007fc0993370a0 RDI: 0000000000000005 [ 830.858232][ T952] RBP: 00007fc099337090 R08: 0000000000000000 R09: 0000000000000000 [ 830.858244][ T952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.858255][ T952] R13: 00007fc098626038 R14: 00007fc098625fa0 R15: 00007ffef5c29138 [ 830.858288][ T952] [ 831.155009][ T961] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 831.227915][ T972] __nla_validate_parse: 1 callbacks suppressed [ 831.227937][ T972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12198'. [ 832.066436][ T1017] netlink: 'syz.4.12216': attribute type 1 has an invalid length. [ 832.844516][ T1059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12228'. [ 832.955710][ T1059] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12228'. [ 832.977622][ T1072] syzkaller0: entered promiscuous mode [ 832.990755][ T1072] syzkaller0: entered allmulticast mode [ 833.240444][ T1083] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12236'. [ 834.063402][ T1118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12250'. [ 834.480079][ T1136] netlink: 140 bytes leftover after parsing attributes in process `syz.3.12257'. [ 834.525567][ T1136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12257'. [ 834.535843][ T1136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12257'. [ 834.558451][ T1139] FAULT_INJECTION: forcing a failure. [ 834.558451][ T1139] name failslab, interval 1, probability 0, space 0, times 0 [ 834.571109][ T1139] CPU: 0 UID: 0 PID: 1139 Comm: syz.0.12258 Not tainted syzkaller #0 PREEMPT(full) [ 834.571136][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.571147][ T1139] Call Trace: [ 834.571156][ T1139] [ 834.571164][ T1139] dump_stack_lvl+0xe8/0x150 [ 834.571201][ T1139] should_fail_ex+0x40c/0x560 [ 834.571233][ T1139] should_failslab+0xa8/0x100 [ 834.571284][ T1139] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 834.571310][ T1139] ? security_file_alloc+0x34/0x310 [ 834.571337][ T1139] ? security_file_alloc+0x34/0x310 [ 834.571373][ T1139] security_file_alloc+0x34/0x310 [ 834.571403][ T1139] init_file+0x90/0x2b0 [ 834.571431][ T1139] alloc_empty_file+0x74/0x1d0 [ 834.571459][ T1139] alloc_file_pseudo+0x115/0x1e0 [ 834.571489][ T1139] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 834.571526][ T1139] anon_inode_getfd+0xc8/0x1f0 [ 834.571586][ T1139] map_create+0x617/0x1b90 [ 834.571623][ T1139] ? __pfx_map_create+0x10/0x10 [ 834.571659][ T1139] ? bpf_lsm_bpf+0x9/0x20 [ 834.571682][ T1139] ? security_bpf+0x7e/0x2d0 [ 834.571705][ T1139] __sys_bpf+0xaea/0xd90 [ 834.571742][ T1139] ? __pfx___sys_bpf+0x10/0x10 [ 834.571780][ T1139] ? __fget_files+0x2a/0x420 [ 834.571826][ T1139] ? ksys_write+0x242/0x270 [ 834.571848][ T1139] ? __pfx_ksys_write+0x10/0x10 [ 834.571875][ T1139] __x64_sys_bpf+0xba/0xd0 [ 834.571908][ T1139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.571931][ T1139] do_syscall_64+0x174/0x580 [ 834.571954][ T1139] ? trace_irq_disable+0x3b/0x140 [ 834.571978][ T1139] ? clear_bhb_loop+0x40/0x90 [ 834.572001][ T1139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.572020][ T1139] RIP: 0033:0x7fc09839e019 [ 834.572040][ T1139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.572056][ T1139] RSP: 002b:00007fc099337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 834.572080][ T1139] RAX: ffffffffffffffda RBX: 00007fc098625fa0 RCX: 00007fc09839e019 [ 834.572093][ T1139] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000000 [ 834.572107][ T1139] RBP: 00007fc099337090 R08: 0000000000000000 R09: 0000000000000000 [ 834.572119][ T1139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.572131][ T1139] R13: 00007fc098626038 R14: 00007fc098625fa0 R15: 00007ffef5c29138 [ 834.572163][ T1139] [ 835.124752][ T1156] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20002 [ 835.143893][ T1156] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12266'. [ 835.165191][ T1156] gretap0: entered promiscuous mode [ 835.375812][ T1171] netlink: 'syz.1.12271': attribute type 1 has an invalid length. [ 836.189810][ T1194] FAULT_INJECTION: forcing a failure. [ 836.189810][ T1194] name failslab, interval 1, probability 0, space 0, times 0 [ 836.202471][ T1194] CPU: 0 UID: 0 PID: 1194 Comm: syz.2.12275 Not tainted syzkaller #0 PREEMPT(full) [ 836.202497][ T1194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.202507][ T1194] Call Trace: [ 836.202514][ T1194] [ 836.202522][ T1194] dump_stack_lvl+0xe8/0x150 [ 836.202560][ T1194] should_fail_ex+0x40c/0x560 [ 836.202592][ T1194] should_failslab+0xa8/0x100 [ 836.202623][ T1194] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 836.202650][ T1194] ? skb_clone+0x212/0x3a0 [ 836.202673][ T1194] ? skb_clone+0x212/0x3a0 [ 836.202701][ T1194] skb_clone+0x212/0x3a0 [ 836.202726][ T1194] __netlink_deliver_tap+0x413/0x860 [ 836.202772][ T1194] ? netlink_deliver_tap+0x2e/0x1b0 [ 836.202799][ T1194] netlink_deliver_tap+0x19c/0x1b0 [ 836.202823][ T1194] netlink_dump+0x95b/0xee0 [ 836.202859][ T1194] ? __pfx_netlink_dump+0x10/0x10 [ 836.202878][ T1194] ? security_capable+0x7e/0x2c0 [ 836.202925][ T1194] __netlink_dump_start+0x589/0x7b0 [ 836.202953][ T1194] inet_diag_handler_cmd+0x1df/0x2c0 [ 836.202972][ T1194] ? sock_diag_lock_handler+0x19/0x290 [ 836.203004][ T1194] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 836.203022][ T1194] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 836.203038][ T1194] ? __pfx_inet_diag_dump+0x10/0x10 [ 836.203054][ T1194] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 836.203076][ T1194] ? sock_diag_lock_handler+0x19/0x290 [ 836.203105][ T1194] ? sock_diag_lock_handler+0x19/0x290 [ 836.203137][ T1194] sock_diag_rcv_msg+0x4b0/0x5f0 [ 836.203171][ T1194] netlink_rcv_skb+0x226/0x4a0 [ 836.203194][ T1194] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 836.203225][ T1194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 836.203263][ T1194] ? netlink_deliver_tap+0x2e/0x1b0 [ 836.203286][ T1194] ? netlink_deliver_tap+0x2e/0x1b0 [ 836.203317][ T1194] netlink_unicast+0x7bb/0x940 [ 836.203348][ T1194] netlink_sendmsg+0x813/0xb40 [ 836.203371][ T1194] ? aa_file_perm+0x18b/0x15f0 [ 836.203401][ T1194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.203428][ T1194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 836.203456][ T1194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.203479][ T1194] sock_sendmsg_nosec+0x13a/0x180 [ 836.203509][ T1194] sock_write_iter+0x2de/0x3e0 [ 836.203538][ T1194] ? __pfx_sock_write_iter+0x10/0x10 [ 836.203582][ T1194] do_iter_readv_writev+0x612/0x8c0 [ 836.203609][ T1194] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 836.203635][ T1194] ? bpf_lsm_file_permission+0x9/0x20 [ 836.203659][ T1194] ? security_file_permission+0x75/0x260 [ 836.203689][ T1194] ? rw_verify_area+0x203/0x4c0 [ 836.203713][ T1194] vfs_writev+0x343/0x990 [ 836.203779][ T1194] ? __pfx_vfs_writev+0x10/0x10 [ 836.203818][ T1194] ? __fget_files+0x2a/0x420 [ 836.203848][ T1194] ? __fget_files+0x3a2/0x420 [ 836.203870][ T1194] ? __fget_files+0x2a/0x420 [ 836.203903][ T1194] do_writev+0x154/0x2e0 [ 836.203928][ T1194] ? __pfx_do_writev+0x10/0x10 [ 836.203960][ T1194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.203981][ T1194] do_syscall_64+0x174/0x580 [ 836.204004][ T1194] ? trace_irq_disable+0x3b/0x140 [ 836.204030][ T1194] ? clear_bhb_loop+0x40/0x90 [ 836.204054][ T1194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.204075][ T1194] RIP: 0033:0x7f964f59e019 [ 836.204095][ T1194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.204112][ T1194] RSP: 002b:00007f964d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 836.204135][ T1194] RAX: ffffffffffffffda RBX: 00007f964f825fa0 RCX: 00007f964f59e019 [ 836.204148][ T1194] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000004 [ 836.204160][ T1194] RBP: 00007f964d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 836.204173][ T1194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.204183][ T1194] R13: 00007f964f826038 R14: 00007f964f825fa0 R15: 00007ffdc1465888 [ 836.204216][ T1194] [ 836.976600][ T1210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12280'. [ 839.301196][ T1218] FAULT_INJECTION: forcing a failure. [ 839.301196][ T1218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.336336][ T1218] CPU: 0 UID: 0 PID: 1218 Comm: syz.1.12282 Not tainted syzkaller #0 PREEMPT(full) [ 839.336367][ T1218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.336378][ T1218] Call Trace: [ 839.336386][ T1218] [ 839.336394][ T1218] dump_stack_lvl+0xe8/0x150 [ 839.336437][ T1218] should_fail_ex+0x40c/0x560 [ 839.336473][ T1218] _copy_from_user+0x2d/0xb0 [ 839.336497][ T1218] kstrtouint_from_user+0xd6/0x180 [ 839.336529][ T1218] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 839.336578][ T1218] proc_fail_nth_write+0x8e/0x210 [ 839.336613][ T1218] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 839.336652][ T1218] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 839.336681][ T1218] vfs_write+0x296/0xba0 [ 839.336714][ T1218] ? __pfx_vfs_write+0x10/0x10 [ 839.336737][ T1218] ? __fget_files+0x2a/0x420 [ 839.336772][ T1218] ? __fget_files+0x3a2/0x420 [ 839.336798][ T1218] ? __fget_files+0x2a/0x420 [ 839.336835][ T1218] ksys_write+0x150/0x270 [ 839.336859][ T1218] ? __pfx_ksys_write+0x10/0x10 [ 839.336890][ T1218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.336915][ T1218] do_syscall_64+0x174/0x580 [ 839.336943][ T1218] ? trace_irq_disable+0x3b/0x140 [ 839.336974][ T1218] ? clear_bhb_loop+0x40/0x90 [ 839.337000][ T1218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.337022][ T1218] RIP: 0033:0x7f678095e84e [ 839.337042][ T1218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 839.337059][ T1218] RSP: 002b:00007f678189efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 839.337082][ T1218] RAX: ffffffffffffffda RBX: 00007f678189f6c0 RCX: 00007f678095e84e [ 839.337097][ T1218] RDX: 0000000000000001 RSI: 00007f678189f0a0 RDI: 0000000000000004 [ 839.337111][ T1218] RBP: 00007f678189f090 R08: 0000000000000000 R09: 0000000000000000 [ 839.337124][ T1218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.337137][ T1218] R13: 00007f6780c26038 R14: 00007f6780c25fa0 R15: 00007fff5378dad8 [ 839.337173][ T1218] [ 839.601284][ T1222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12284'. [ 839.748414][ T1231] syzkaller0: entered promiscuous mode [ 839.753965][ T1231] syzkaller0: entered allmulticast mode [ 839.830556][ T1238] [ 839.832942][ T1238] ====================================================== [ 839.838242][ T1237] FAULT_INJECTION: forcing a failure. [ 839.838242][ T1237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.839993][ T1238] WARNING: possible circular locking dependency detected [ 839.853096][ T1237] CPU: 0 UID: 0 PID: 1237 Comm: syz.3.12289 Not tainted syzkaller #0 PREEMPT(full) [ 839.853118][ T1237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.853129][ T1237] Call Trace: [ 839.853136][ T1237] [ 839.853143][ T1237] dump_stack_lvl+0xe8/0x150 [ 839.853175][ T1237] should_fail_ex+0x40c/0x560 [ 839.853199][ T1237] _copy_to_user+0x31/0xb0 [ 839.853217][ T1237] simple_read_from_buffer+0xe1/0x170 [ 839.853243][ T1237] proc_fail_nth_read+0x1bb/0x230 [ 839.853268][ T1237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 839.853293][ T1237] ? rw_verify_area+0x24a/0x4c0 [ 839.853309][ T1237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 839.853332][ T1237] vfs_read+0x213/0xa80 [ 839.853349][ T1237] ? __pfx___mutex_lock+0x10/0x10 [ 839.853371][ T1237] ? __pfx_vfs_read+0x10/0x10 [ 839.853386][ T1237] ? __fget_files+0x2a/0x420 [ 839.853411][ T1237] ? __fget_files+0x3a2/0x420 [ 839.853432][ T1237] ? __fget_files+0x2a/0x420 [ 839.853458][ T1237] ksys_read+0x150/0x270 [ 839.853474][ T1237] ? __pfx_ksys_read+0x10/0x10 [ 839.853491][ T1237] ? rcu_is_watching+0x15/0xb0 [ 839.853509][ T1237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.853528][ T1237] do_syscall_64+0x174/0x580 [ 839.853548][ T1237] ? trace_irq_disable+0x3b/0x140 [ 839.853570][ T1237] ? clear_bhb_loop+0x40/0x90 [ 839.853589][ T1237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.853606][ T1237] RIP: 0033:0x7f0e99d5e84e [ 839.853622][ T1237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 839.853637][ T1237] RSP: 002b:00007f0e9ad4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 839.853657][ T1237] RAX: ffffffffffffffda RBX: 00007f0e9ad4f6c0 RCX: 00007f0e99d5e84e [ 839.853671][ T1237] RDX: 000000000000000f RSI: 00007f0e9ad4f0a0 RDI: 0000000000000005 [ 839.853682][ T1237] RBP: 00007f0e9ad4f090 R08: 0000000000000000 R09: 0000000000000000 [ 839.853693][ T1237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.853703][ T1237] R13: 00007f0e9a026038 R14: 00007f0e9a025fa0 R15: 00007ffca8000b98 [ 839.853723][ T1237] [ 840.013805][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 840.018661][ T1238] syzkaller #0 Not tainted [ 840.018675][ T1238] ------------------------------------------------------ [ 840.018723][ T1238] cryptomgr_probe/1238 is trying to acquire lock: [ 840.018747][ T1238] ffffffff8ec5ed80 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 840.105594][ T1238] [ 840.105594][ T1238] but task is already holding lock: [ 840.112957][ T1238] ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: padata_alloc_shell+0x7d/0x1d0 [ 840.122466][ T1238] [ 840.122466][ T1238] which lock already depends on the new lock. [ 840.122466][ T1238] [ 840.132869][ T1238] [ 840.132869][ T1238] the existing dependency chain (in reverse order) is: [ 840.141888][ T1238] [ 840.141888][ T1238] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 840.149866][ T1238] cpus_read_lock+0x42/0x160 [ 840.155094][ T1238] static_key_slow_inc+0x12/0x30 [ 840.160573][ T1238] nbd_genl_reconfigure+0x1301/0x1e80 [ 840.166723][ T1238] genl_family_rcv_msg_doit+0x233/0x340 [ 840.172826][ T1238] genl_rcv_msg+0x614/0x7a0 [ 840.177951][ T1238] netlink_rcv_skb+0x226/0x4a0 [ 840.183263][ T1238] genl_rcv+0x28/0x40 [ 840.187790][ T1238] netlink_unicast+0x7bb/0x940 [ 840.193180][ T1238] netlink_sendmsg+0x813/0xb40 [ 840.198500][ T1238] sock_sendmsg_nosec+0x13a/0x180 [ 840.204169][ T1238] ____sys_sendmsg+0x54e/0x850 [ 840.209476][ T1238] ___sys_sendmsg+0x2a5/0x360 [ 840.214771][ T1238] __x64_sys_sendmsg+0x1b1/0x290 [ 840.220595][ T1238] do_syscall_64+0x174/0x580 [ 840.225728][ T1238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.232148][ T1238] [ 840.232148][ T1238] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 840.240187][ T1238] __mutex_lock+0x19d/0x1550 [ 840.246005][ T1238] nbd_queue_rq+0x373/0x1150 [ 840.251309][ T1238] blk_mq_dispatch_rq_list+0x499/0x1990 [ 840.257660][ T1238] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 840.264669][ T1238] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 840.271446][ T1238] blk_mq_run_work_fn+0x16c/0x300 [ 840.277355][ T1238] process_scheduled_works+0xa8e/0x14e0 [ 840.283713][ T1238] worker_thread+0xa47/0xfb0 [ 840.288833][ T1238] kthread+0x388/0x470 [ 840.293485][ T1238] ret_from_fork+0x514/0xb70 [ 840.298728][ T1238] ret_from_fork_asm+0x1a/0x30 [ 840.304017][ T1238] [ 840.304017][ T1238] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 840.311237][ T1238] __mutex_lock+0x19d/0x1550 [ 840.316388][ T1238] nbd_queue_rq+0xc1/0x1150 [ 840.321424][ T1238] blk_mq_dispatch_rq_list+0x499/0x1990 [ 840.327505][ T1238] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 840.334363][ T1238] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 840.340966][ T1238] blk_mq_run_work_fn+0x16c/0x300 [ 840.346611][ T1238] process_scheduled_works+0xa8e/0x14e0 [ 840.352776][ T1238] worker_thread+0xa47/0xfb0 [ 840.357896][ T1238] kthread+0x388/0x470 [ 840.362582][ T1238] ret_from_fork+0x514/0xb70 [ 840.367707][ T1238] ret_from_fork_asm+0x1a/0x30 [ 840.373005][ T1238] [ 840.373005][ T1238] -> #4 (set->srcu){.+.+}-{0:0}: [ 840.380134][ T1238] __synchronize_srcu+0xc9/0x2f0 [ 840.385689][ T1238] elevator_switch+0x1e8/0x7b0 [ 840.391272][ T1238] elevator_change+0x2fa/0x480 [ 840.396583][ T1238] elevator_set_default+0x375/0x440 [ 840.402343][ T1238] blk_register_queue+0x3f3/0x4e0 [ 840.407967][ T1238] __add_disk+0x6cb/0xe30 [ 840.412863][ T1238] add_disk_fwnode+0x100/0x3a0 [ 840.418161][ T1238] nbd_dev_add+0x733/0xb60 [ 840.423108][ T1238] nbd_init+0x15f/0x1e0 [ 840.427885][ T1238] do_one_initcall+0x250/0x870 [ 840.433248][ T1238] do_initcall_level+0x10a/0x1a0 [ 840.438809][ T1238] do_initcalls+0x59/0xa0 [ 840.443669][ T1238] kernel_init_freeable+0x29d/0x3e0 [ 840.449714][ T1238] kernel_init+0x1d/0x1d0 [ 840.454927][ T1238] ret_from_fork+0x514/0xb70 [ 840.460047][ T1238] ret_from_fork_asm+0x1a/0x30 [ 840.465369][ T1238] [ 840.465369][ T1238] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 840.473203][ T1238] __mutex_lock+0x19d/0x1550 [ 840.478325][ T1238] elevator_change+0x1af/0x480 [ 840.483620][ T1238] elevator_set_none+0xb5/0x140 [ 840.489002][ T1238] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 840.495330][ T1238] nbd_start_device+0x189/0xb30 [ 840.500793][ T1238] nbd_genl_connect+0x1597/0x1c10 [ 840.506429][ T1238] genl_family_rcv_msg_doit+0x233/0x340 [ 840.512508][ T1238] genl_rcv_msg+0x614/0x7a0 [ 840.517542][ T1238] netlink_rcv_skb+0x226/0x4a0 [ 840.522845][ T1238] genl_rcv+0x28/0x40 [ 840.527368][ T1238] netlink_unicast+0x7bb/0x940 [ 840.532844][ T1238] netlink_sendmsg+0x813/0xb40 [ 840.538420][ T1238] sock_sendmsg_nosec+0x13a/0x180 [ 840.544011][ T1238] ____sys_sendmsg+0x54e/0x850 [ 840.549310][ T1238] ___sys_sendmsg+0x2a5/0x360 [ 840.554534][ T1238] __x64_sys_sendmsg+0x1b1/0x290 [ 840.560124][ T1238] do_syscall_64+0x174/0x580 [ 840.565338][ T1238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.571764][ T1238] [ 840.571764][ T1238] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 840.580419][ T1238] blk_alloc_queue+0x544/0x690 [ 840.585721][ T1238] __blk_mq_alloc_disk+0x194/0x390 [ 840.591474][ T1238] nbd_dev_add+0x494/0xb60 [ 840.596433][ T1238] nbd_init+0x15f/0x1e0 [ 840.601118][ T1238] do_one_initcall+0x250/0x870 [ 840.606418][ T1238] do_initcall_level+0x10a/0x1a0 [ 840.612168][ T1238] do_initcalls+0x59/0xa0 [ 840.617050][ T1238] kernel_init_freeable+0x29d/0x3e0 [ 840.622970][ T1238] kernel_init+0x1d/0x1d0 [ 840.627856][ T1238] ret_from_fork+0x514/0xb70 [ 840.633088][ T1238] ret_from_fork_asm+0x1a/0x30 [ 840.638399][ T1238] [ 840.638399][ T1238] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 840.645714][ T1238] fs_reclaim_acquire+0x71/0x100 [ 840.651209][ T1238] prepare_alloc_pages+0x15b/0x650 [ 840.656864][ T1238] __alloc_frozen_pages_noprof+0x12f/0x380 [ 840.663291][ T1238] __alloc_pages_noprof+0x10/0x100 [ 840.668934][ T1238] pcpu_populate_chunk+0x181/0xb30 [ 840.674586][ T1238] pcpu_alloc_noprof+0xbca/0x1900 [ 840.680142][ T1238] bpf_map_alloc_percpu+0x65/0x180 [ 840.685794][ T1238] array_map_alloc+0x377/0x710 [ 840.691207][ T1238] map_create+0xf2a/0x1b90 [ 840.696163][ T1238] __sys_bpf+0xaea/0xd90 [ 840.700945][ T1238] __x64_sys_bpf+0xba/0xd0 [ 840.705976][ T1238] do_syscall_64+0x174/0x580 [ 840.711111][ T1238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.717705][ T1238] [ 840.717705][ T1238] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 840.725458][ T1238] __lock_acquire+0x1520/0x2cf0 [ 840.730860][ T1238] lock_acquire+0x106/0x350 [ 840.735891][ T1238] __mutex_lock+0x19d/0x1550 [ 840.741015][ T1238] pcpu_alloc_noprof+0x231/0x1900 [ 840.746567][ T1238] padata_alloc_pd+0x93/0x720 [ 840.751776][ T1238] padata_alloc_shell+0x8a/0x1d0 [ 840.757246][ T1238] pcrypt_create+0xea/0x750 [ 840.762515][ T1238] cryptomgr_probe+0x80/0x210 [ 840.767836][ T1238] kthread+0x388/0x470 [ 840.772438][ T1238] ret_from_fork+0x514/0xb70 [ 840.777562][ T1238] ret_from_fork_asm+0x1a/0x30 [ 840.782965][ T1238] [ 840.782965][ T1238] other info that might help us debug this: [ 840.782965][ T1238] [ 840.793281][ T1238] Chain exists of: [ 840.793281][ T1238] pcpu_alloc_mutex --> &nsock->tx_lock --> cpu_hotplug_lock [ 840.793281][ T1238] [ 840.806957][ T1238] Possible unsafe locking scenario: [ 840.806957][ T1238] [ 840.815049][ T1238] CPU0 CPU1 [ 840.820557][ T1238] ---- ---- [ 840.826325][ T1238] rlock(cpu_hotplug_lock); [ 840.830958][ T1238] lock(&nsock->tx_lock); [ 840.838712][ T1238] lock(cpu_hotplug_lock); [ 840.846727][ T1238] lock(pcpu_alloc_mutex); [ 840.851523][ T1238] [ 840.851523][ T1238] *** DEADLOCK *** [ 840.851523][ T1238] [ 840.859999][ T1238] 1 lock held by cryptomgr_probe/1238: [ 840.867375][ T1238] #0: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: padata_alloc_shell+0x7d/0x1d0 [ 840.881269][ T1238] [ 840.881269][ T1238] stack backtrace: [ 840.887521][ T1238] CPU: 1 UID: 0 PID: 1238 Comm: cryptomgr_probe Not tainted syzkaller #0 PREEMPT(full) [ 840.887548][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.887560][ T1238] Call Trace: [ 840.887570][ T1238] [ 840.887579][ T1238] dump_stack_lvl+0xe8/0x150 [ 840.887608][ T1238] print_circular_bug+0x2e1/0x300 [ 840.887628][ T1238] check_noncircular+0x12e/0x150 [ 840.887648][ T1238] __lock_acquire+0x1520/0x2cf0 [ 840.887677][ T1238] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 840.887695][ T1238] ? lockdep_hardirqs_on+0x7a/0x110 [ 840.887715][ T1238] ? pcpu_alloc_noprof+0x231/0x1900 [ 840.887745][ T1238] lock_acquire+0x106/0x350 [ 840.887767][ T1238] ? pcpu_alloc_noprof+0x231/0x1900 [ 840.887790][ T1238] __mutex_lock+0x19d/0x1550 [ 840.887810][ T1238] ? pcpu_alloc_noprof+0x231/0x1900 [ 840.887833][ T1238] ? pcpu_alloc_noprof+0x231/0x1900 [ 840.887852][ T1238] ? __pfx___mutex_lock+0x10/0x10 [ 840.887875][ T1238] ? rcu_is_watching+0x15/0xb0 [ 840.887893][ T1238] pcpu_alloc_noprof+0x231/0x1900 [ 840.887913][ T1238] ? __kmalloc_cache_noprof+0x150/0x660 [ 840.887936][ T1238] ? padata_alloc_pd+0x6d/0x720 [ 840.887958][ T1238] padata_alloc_pd+0x93/0x720 [ 840.887983][ T1238] padata_alloc_shell+0x8a/0x1d0 [ 840.888007][ T1238] pcrypt_create+0xea/0x750 [ 840.888034][ T1238] cryptomgr_probe+0x80/0x210 [ 840.888055][ T1238] kthread+0x388/0x470 [ 840.888078][ T1238] ? __pfx_cryptomgr_probe+0x10/0x10 [ 840.888096][ T1238] ? __pfx_kthread+0x10/0x10 [ 840.888117][ T1238] ret_from_fork+0x514/0xb70 [ 840.888143][ T1238] ? __pfx_ret_from_fork+0x10/0x10 [ 840.888166][ T1238] ? __switch_to+0xc89/0x1420 [ 840.888187][ T1238] ? __pfx_kthread+0x10/0x10 [ 840.888209][ T1238] ret_from_fork_asm+0x1a/0x30 [ 840.888230][ T1238] [ 849.475414][ T1603] block nbd6: Possible stuck request ffff888027c50000: control (read@0,1024B). Runtime 60 seconds [ 849.487626][ T1603] block nbd6: Possible stuck request ffff888027c501c0: control (read@1024,1024B). Runtime 60 seconds [ 849.499065][ T1603] block nbd6: Possible stuck request ffff888027c50380: control (read@2048,1024B). Runtime 60 seconds [ 849.510176][ T1603] block nbd6: Possible stuck request ffff888027c50540: control (read@3072,1024B). Runtime 60 seconds