last executing test programs: 6.193909928s ago: executing program 1 (id=18451): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX=r0, @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.378085278s ago: executing program 1 (id=18466): sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000280)={0x7, [0x94, 0x1], 0x2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.402438114s ago: executing program 1 (id=18487): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d01"], 0xc0}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae", @ANYRESHEX=r0, @ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200000200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.922183207s ago: executing program 1 (id=18494): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX=r0, @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.559055205s ago: executing program 0 (id=18519): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x1f90, @loopback}, 0x10) 2.503258256s ago: executing program 0 (id=18521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x400) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c0005"], 0xc0}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x5082}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX=r3], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8e01801}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/70, 0x46}, {&(0x7f00000006c0)=""/82, 0x52}], 0x2, 0x0, 0xfffffefa}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.873464028s ago: executing program 1 (id=18526): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c0005"], 0xc0}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2a060400) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) ppoll(&(0x7f0000000140)=[{r6, 0x82d2}, {r6, 0xc122}], 0x2, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000030010000f000000005c21f452d2056c97fba755f4fa47745c0d98bd6d1e1091ea00", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000", @ANYRESHEX=r0, @ANYRESOCT=r5], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000300)=0xb3, 0x4) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.774333533s ago: executing program 4 (id=18528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x20, 0x3, 0x258, 0xe0, 0xa, 0x148, 0x0, 0x10, 0x1c0, 0x2a8, 0x2a8, 0x1c0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff000000, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x18f, 0x0, 0x1, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x0, 'pimreg1\x00', 'tunl0\x00', {}, {}, 0x20, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'pim6reg1\x00', {0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2b8) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) sendmmsg(r3, &(0x7f0000000300)=[{{&(0x7f0000000080)=@ll={0x11, 0x7, r4, 0x1, 0x3, 0x6, @broadcast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c3a8b55d6582ff4560c93f7cb27190dc9e3ae8592304fdc3d88236c646ddeb4d57a6a8b827ff12d3ee566f271bb37580448aa7ce8d814719e30bb309def851fdc19fa87c16beff8b2b2f9715eb0b3344a3a63b505609eab598ca0773528f36a76ada0336b075353866332f20b0d2c9f174819a7dbba755e46ef1887fd4a2a77ba30915cda6d4bf329d1d0be6f7e003ee7a66960ac209fb431ef43933", 0x9c}], 0x1, &(0x7f0000000200)=[{0xe8, 0x108, 0x4, "abcdae3952c49d7ff9c4df6ff414ade1e14bd692c0bac66779b78195d89ece341c02daaa4a74f616ad7df1577ea7610652caca485b78228571b394d497d2602367ebfc34a32a3abd3f22a82eba435c35ab4a933eeddc490eacbede2a4a297d059d9cdf6271052c8672baea1af4a9cb69ceece266a7a0d8ba9cc03f724f709d9ac82a3a1ef77ba8f718ec0680b52af146bec8743c016a80ba4069776ed5e714598121af3c24f535a9e6cb3f23b8368846e3760f624c48091d4860ccc2a5dc21ba4040d020679df791bf42fdf2e7245be25ac93b5bb8"}], 0xe8}}], 0x1, 0x40000) r8 = socket$inet(0x2, 0x3, 0x33) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000000)=0xffffffff, 0x4) 1.622407249s ago: executing program 4 (id=18532): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d01"], 0xc0}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae", @ANYRESHEX=r0, @ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200000200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.572473438s ago: executing program 3 (id=18533): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x20044000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8}, @IFLA_MAP={0x24, 0xe, {0x3, 0x2, 0x3, 0xd6, 0x5, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0xa0}, 0x8000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r0, 0x401, 0x70bd2e, 0x25dfdbee, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x14008080) 1.516897209s ago: executing program 4 (id=18534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000ffff29bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fa0a0500230807003c0012800b000100697036746e6c00002c00028014000300000000000000000000000010ac1414aa14000200fe80"], 0x5c}}, 0x24000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c0005"], 0xc0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.437120918s ago: executing program 3 (id=18535): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xe, 0x0, &(0x7f0000000240)="4a460640b083dcc1010f3efc8864", 0x0, 0x2fc, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x440088c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX=r3, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="f78d9c978fbe9643680d00ea5963989388d73cd9a74773e47165c83fb880b3247ea99ea5f472f25b0849aa190ba30f00be01d70261b5e10326539a9ca30de2185ed891bd3d1d8ee6bba20afbf9c70c7f97b6020eb205c500b4c71a0db2aa2a5ed61dab385dc8784fac4b2657672aee1f54aa28145ecb7e3d2c0000000000000000", 0x81}, {&(0x7f0000000680)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x3, &(0x7f0000000280)=[@iv={0x38, 0x117, 0x2, 0x21, "d33c35382853799179d4841f353366b1595e2026b06f94a1d0568f9dcc8ae90601"}], 0x38, 0x4000}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.38653612s ago: executing program 4 (id=18537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r2, 0x5, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000240)={{0x2f, @multicast2, 0x4e20, 0x1, 'lc\x00', 0x10, 0x8, 0x6e}, {@remote, 0x4e22, 0x4, 0x3, 0x4, 0xa}}, 0x44) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000200)={r4}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r5}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}}, 0x0) 1.314420201s ago: executing program 1 (id=18538): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xfffffffffffffd5c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) socket$inet6(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r7, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e695"], &(0x7f0000000080)='GPL\x00', 0x7, 0xd8, &(0x7f0000000740)=""/216, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.313850677s ago: executing program 3 (id=18539): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c"], 0xc0}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX=r0, @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.223195702s ago: executing program 3 (id=18541): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b78811", @ANYRESHEX=r0, @ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0xfc65}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'macvlan1\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r8 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x7f}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c90780100000000fcffff7a4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a7f6ffb1a9cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) recvmsg(r8, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000740)=""/85, 0x55}, {&(0x7f0000000800)=""/4, 0x4}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002600)=""/226, 0xe2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x6}, [@generic={0x10, 0x0, 0x9, 0xc, 0x800}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbe}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x3b, &(0x7f0000000600)=""/59, 0x41100, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0xffffffffffffffff, r7], &(0x7f00000007c0)=[{0x4, 0x5, 0x6}, {0x4, 0x4, 0x6, 0x3}], 0x10, 0x3}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 1.170193284s ago: executing program 0 (id=18542): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@allocspi={0xf8, 0x16, 0x339, 0x80, 0x0, {{{@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2}, {0x0, 0x0, 0x6}, 0x70bd2a, 0x0, 0xa, 0x1}, 0x0, 0x8}}, 0xf8}}, 0x40000) 1.150975522s ago: executing program 0 (id=18543): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xc0}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x88804) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x2, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x41, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f086dd1f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181a", 0x0, 0x100, 0x60000000, 0x0, 0x36, 0x0, &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99dec", 0x0, 0x0, 0xaac}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x4000010) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000180)=0x20000, 0x0}, 0x20) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r5, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r5, 0x0, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, &(0x7f0000000540)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="d0af02", &(0x7f0000000180)=""/238}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 1.137635058s ago: executing program 4 (id=18545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r2, 0x5421, 0x110e22fff7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r3, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x38c, 0x10000}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, &(0x7f0000000600)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000003"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r5, 0x6}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x7, 0xfffffff8) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x2, 0x7, 0x18a, 0x67, 0x0, 0x5, 0x6, 0x0, @multicast2, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x6d, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x94, 0x8, "c7a9698c8668"}, @rr={0x7, 0x7, 0x15, [@remote]}, @timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x10800}, {@rand_addr=0x64010100, 0x9}, {@multicast2, 0x7}, {@local, 0x9}]}]}}, {{0x4e23, 0x4e22, r10, r11, 0x0, 0x0, 0x1c, 0x1, 0x8, 0x0, 0x4, {[@eol, @sack={0x5, 0x22, [0x4, 0xffffffff, 0x5, 0x56c, 0x7, 0x8, 0xfffff12c, 0x4]}, @sack={0x5, 0x16, [0x8, 0x80, 0x80000000, 0x8, 0x2]}, @timestamp={0x8, 0xa, 0x6, 0x80000000}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "4557051933e9c240e61d8ee73c59cdb0"}]}}, {"2c95a6655d24511f43a6f66783a32e1146da03ae6fd5322b421762407a4edfd88bf1b1aaf29bb9f8daded53872717ee2f95feba2eb1d3f83a7ebc0ae1de88e0c2c9f878ce27ff8dd4e2b0af529ba7fc2c307206591bddd8d6cc41a17a2934b55f9c2ef043ae2aacc85e7418cbf9180d81c8ea3a89a0c40be6131931d89411159623612d0b606389c09aa361385fa5b61a8a27e09451be240fa7f1bad6967fdae7bf0fc02faccdfb9a8bc7c8d9b75acb6407c91b3233d65e4d3d5c1085d643f5fa8ee36e2f887815eb59a"}}}}}}}, 0x1a4) 930.164816ms ago: executing program 0 (id=18547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000ffff29bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fa0a0500230807003c0012800b000100697036746e6c00002c00028014000300000000000000000000000010ac1414aa14000200fe80"], 0x5c}}, 0x24000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c0005"], 0xc0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 874.354322ms ago: executing program 2 (id=18548): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c"], 0xc0}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae", @ANYRESHEX=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}}}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket(0x26, 0xba00ec6b4378e89f, 0xde) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x65}]}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff0001}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x20004890) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000021c0)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r5], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000001000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r6, &(0x7f00000022c0)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/99, 0x63}], 0x1, &(0x7f0000000280)=""/245, 0xf5}, 0x8}, {{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000400)=""/173, 0xad}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000580)=""/180, 0xb4}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)}], 0x5, &(0x7f0000001700)}, 0x78f}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001740)=""/130, 0x82}, {&(0x7f0000001800)=""/177, 0xb1}, {&(0x7f00000018c0)=""/249, 0xf9}, {&(0x7f00000019c0)=""/12, 0xc}, {&(0x7f0000001a00)=""/120, 0x78}, {&(0x7f0000001a80)=""/112, 0x70}, {&(0x7f0000001b00)=""/31, 0x1f}], 0x7, &(0x7f0000001bc0)=""/35, 0x23}, 0x1000}, {{&(0x7f0000001c00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001c80)=""/130, 0x82}, {&(0x7f0000001d40)=""/233, 0xe9}, {&(0x7f0000001e40)=""/90, 0x5a}, {&(0x7f0000001ec0)=""/47, 0x2f}, {&(0x7f0000001f00)=""/39, 0x27}], 0x5, &(0x7f0000001fc0)=""/8, 0x8}, 0x6}, {{&(0x7f0000002000)=@xdp, 0x80, &(0x7f0000002180)=[{&(0x7f0000002080)=""/240, 0xf0}], 0x1, &(0x7f0000002400)=""/240, 0xf0}, 0x2}], 0x5, 0x12002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x18, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 685.457451ms ago: executing program 0 (id=18549): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$kcm(0x2, 0xa, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000811}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) epoll_create1(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0x2, 0xa, 0xbfffffe6) socket$nl_netfilter(0x10, 0x3, 0xc) 671.584451ms ago: executing program 2 (id=18550): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xc0}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae", @ANYRESHEX=r0, @ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 393.934666ms ago: executing program 2 (id=18551): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c"], 0xc0}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX=r0, @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 381.753058ms ago: executing program 2 (id=18552): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c0005"], 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x30}, 0x24040880) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 332.810974ms ago: executing program 2 (id=18553): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b78811", @ANYRESHEX=r0, @ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000008bc0)={0x2cd8, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xd5, 0x0, 0x1, [@generic="33ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c4264"]}]}, @nested={0x2c74, 0x6, 0x0, 0x1, [@nested={0x2c70, 0xa9, 0x0, 0x1, [@nested={0x2c6c, 0x13e, 0x0, 0x1, [@nested={0x2c68, 0x10a0, 0x0, 0x1, [@nested={0x2c64, 0x61, 0x0, 0x1, [@nested={0x2c5d, 0x6d, 0x0, 0x1, [@generic="64c4f39e5a8bf7075598bed7433f839921ccb03fb134a3b196876b70baae84163118d077a7e0c1765cd03b31b27bfb1b8d8138c1c584d2066b2debf8b0b310db4b1aef425b66f463d2f23ee796064df7fac114a0d9ca2097d33b1dfb5369ea375274b26a37efe91391b87c5a763ba6a10ca54e642ffee3da1555dbe57943a68eee57a34b919b1ebf67bf4f9a67ac2082d00133deee8390a60bd3d9d48ce63c9ec71edb076c4aaf095b37733ffc9a7ce489d95a02cd9e8eddd7fd08e232ec86427c0caa96a3bf474c6f32e52c8976edd923a1822f9875aad4354cfd64044d120c74c21d9a40996ef7d5a5d399c33fa456ee7fc04879ce2d7fe25d9e6290e949c0a01fdb9d6d7883c0cf8e2d2f5e00f595446f2eb3e40fde2c5cc9dbf89b82e12caf127efd51229c3c367add8b7adf83fa45819add7c8fcbaf429a7efb8e6a6e0bc45f08245708af8e78e7ad2b3497fb84159756916dd9d2972c6b10619df7d413a2048dcec7ef5b8225cbbe261f66fc5f96611b63617294d5438f14d71891faeb142628f567cb6552b6d382544359ef0ad23c6ef69b4d56cb5cfe05019089dc9e5c523d59cca7f70487", @typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4}, @nested={0x212e, 0x68, 0x0, 0x1, [@nested={0x1031, 0x2, 0x0, 0x1, [@generic="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", @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}, @nested={0x4, 0x1f}, @typed={0x8, 0xea, 0x0, 0x0, @pid}, @nested={0x4, 0x10a}, @nested={0x4, 0xd3}, @nested={0x4, 0xae}, @typed={0xc, 0x9e, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x5a}]}, @nested={0xe3, 0x13b, 0x0, 0x1, [@generic="826a26f69b490b585dcf6158d740953b2f610dfe7e62e0288a830dc57e4f225960128d198c13e348fefe274b3eda32298013a3d89490cd28b145bc903691723b6c72c46d542b12eeb9724ba8b6096e06329b2d65b73ee94c98b4c3a1c469333499614ae4bda609e892694b1d573f44499817abb1c2599c340d25f809744dcf25a2af8c47bf0586f3a1b7bf7b468b6556e9bedc0f3e0f91cf30ac4080c3e21f93541485e51572880485cafc13ca646e203a56e54805c4e8a82f22327c8dce6bf7834a953eead56257d0fd31", @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0x4, 0x169}, @generic="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", @nested={0x4, 0x38}, @typed={0xf, 0xbf, 0x0, 0x0, @str='ip6gretap0\x00'}]}, @nested={0x978, 0x4b, 0x0, 0x1, [@nested={0x969, 0xb5, 0x0, 0x1, [@typed={0x7, 0x9a, 0x0, 0x0, @str=':*\x00'}, @nested={0x4, 0x153}, @nested={0x4, 0x131}, @generic, @typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@mcast1}, @generic="48baf0eedc3f8e2d3e313fbd7240101a794ca57e662d6201d41f94a3b2e99cdd0c5754b47183a2fe7ae5bb269cd95117aed87df67767740176748c325dbdd280335aae24b0a648e2ec4d7b98c294d44aef126206a34e8c6030ce0b320a6b6cda170a159497f8e0699e739515033ea07de8274789d12f54c5db", @nested={0x4, 0x13c}, @generic="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", @typed={0x8, 0x120, 0x0, 0x0, @u32=0xf}]}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x10}]}]}]}]}]}]}]}]}, 0x2cd8}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x40000012}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0xb6}, 0x20) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 161.828831ms ago: executing program 3 (id=18554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 105.575624ms ago: executing program 3 (id=18555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c0005"], 0xc0}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x91) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r5, &(0x7f0000006b80)=""/207, 0xcf) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185", @ANYRESHEX=r1, @ANYRESOCT=r6], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r8, &(0x7f0000004bc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000004d40)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}], 0x28}}, {{&(0x7f0000001840)={0xa, 0x4e23, 0x4, @private1, 0xc}, 0x1c, 0x0}}], 0x2, 0x401c040) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 96.027357ms ago: executing program 2 (id=18556): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d01"], 0xc0}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae", @ANYRESHEX=r0, @ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200000200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 4 (id=18557): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xc0}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x88804) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x2, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x41, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f086dd1f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181a", 0x0, 0x100, 0x60000000, 0x0, 0x36, 0x0, &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99dec", 0x0, 0x0, 0xaac}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x4000010) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000180)=0x20000, 0x0}, 0x20) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r5, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r5, 0x0, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, &(0x7f0000000540)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="d0af02", &(0x7f0000000180)=""/238}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 8686][T18873] genl_family_rcv_msg_doit+0x233/0x340 [ 1135.658721][T18873] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1135.658760][T18873] ? bpf_lsm_capable+0x9/0x20 [ 1135.658783][T18873] ? security_capable+0x7e/0x2c0 [ 1135.658809][T18873] genl_rcv_msg+0x614/0x7a0 [ 1135.658840][T18873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1135.658866][T18873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1135.658894][T18873] ? __pfx_ref_tracker_free+0x10/0x10 [ 1135.658929][T18873] netlink_rcv_skb+0x226/0x4a0 [ 1135.658951][T18873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1135.658979][T18873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1135.659016][T18873] ? down_read+0x2be/0x330 [ 1135.659043][T18873] genl_rcv+0x28/0x40 [ 1135.659067][T18873] netlink_unicast+0x7bb/0x940 [ 1135.659098][T18873] netlink_sendmsg+0x813/0xb40 [ 1135.659130][T18873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1135.659162][T18873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1135.659189][T18873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1135.659210][T18873] sock_sendmsg_nosec+0x13a/0x180 [ 1135.659239][T18873] ____sys_sendmsg+0x54e/0x850 [ 1135.659265][T18873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1135.659296][T18873] ? import_iovec+0x73/0xa0 [ 1135.659333][T18873] ___sys_sendmsg+0x2a5/0x360 [ 1135.659353][T18873] ? __lock_acquire+0x683/0x2cf0 [ 1135.659383][T18873] ? __pfx____sys_sendmsg+0x10/0x10 [ 1135.659440][T18873] ? __fget_files+0x2a/0x420 [ 1135.659463][T18873] ? __fget_files+0x3a2/0x420 [ 1135.659499][T18873] __x64_sys_sendmsg+0x1b1/0x290 [ 1135.659523][T18873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1135.659562][T18873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.659583][T18873] do_syscall_64+0x174/0x580 [ 1135.659605][T18873] ? trace_irq_disable+0x3b/0x140 [ 1135.659629][T18873] ? clear_bhb_loop+0x40/0x90 [ 1135.659652][T18873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.659670][T18873] RIP: 0033:0x7fc786b9de99 [ 1135.659687][T18873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.659703][T18873] RSP: 002b:00007fc787b43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.659723][T18873] RAX: ffffffffffffffda RBX: 00007fc786e25fa0 RCX: 00007fc786b9de99 [ 1135.659737][T18873] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 1135.659748][T18873] RBP: 00007fc787b43090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.659760][T18873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1135.659771][T18873] R13: 00007fc786e26038 R14: 00007fc786e25fa0 R15: 00007fff6f5beeb8 [ 1135.659802][T18873] [ 1135.665070][T18873] kobject: kobject_add_internal failed for hwsim108 (error: -12 parent: mac80211_hwsim) [ 1135.678469][T18869] macvlan2: entered allmulticast mode [ 1135.721253][T18869] batadv0: entered allmulticast mode [ 1135.731455][T18876] netlink: 'syz.1.17576': attribute type 4 has an invalid length. [ 1135.740735][T18869] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1136.160463][T18869] batadv0: left allmulticast mode [ 1136.165864][ T5628] Bluetooth: hci0: command tx timeout [ 1136.168073][T18881] netlink: 'syz.1.17576': attribute type 4 has an invalid length. [ 1136.176572][T18869] batadv0: left promiscuous mode [ 1136.276950][T18738] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.376449][T18738] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.421503][T18895] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17587'. [ 1136.430754][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17587'. [ 1136.445341][T18895] netlink: 31 bytes leftover after parsing attributes in process `syz.3.17587'. [ 1136.457545][T18895] netlink: 'syz.3.17587': attribute type 2 has an invalid length. [ 1136.465757][T18895] netlink: 31 bytes leftover after parsing attributes in process `syz.3.17587'. [ 1136.574706][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17587'. [ 1136.777525][T18738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1136.798971][T18738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1136.835571][T18738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1136.848453][T18738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1136.857533][T18738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1136.874394][T18738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1136.882936][T18738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1136.888960][T18909] FAULT_INJECTION: forcing a failure. [ 1136.888960][T18909] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.903290][T18909] CPU: 1 UID: 0 PID: 18909 Comm: syz.4.17592 Not tainted syzkaller #0 PREEMPT(full) [ 1136.903314][T18909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1136.903325][T18909] Call Trace: [ 1136.903332][T18909] [ 1136.903340][T18909] dump_stack_lvl+0xe8/0x150 [ 1136.903374][T18909] should_fail_ex+0x40c/0x560 [ 1136.903403][T18909] should_failslab+0xa8/0x100 [ 1136.903434][T18909] __kmalloc_cache_noprof+0xa8/0x660 [ 1136.903456][T18909] ? __kmalloc_cache_noprof+0x150/0x660 [ 1136.903478][T18909] ? gf128mul_init_64k_bbe+0xb7/0xef0 [ 1136.903507][T18909] ? gf128mul_init_64k_bbe+0xb7/0xef0 [ 1136.903532][T18909] gf128mul_init_64k_bbe+0xb7/0xef0 [ 1136.903561][T18909] lrw_setkey+0x182/0x2d0 [ 1136.903587][T18909] ? __might_fault+0xaf/0x130 [ 1136.903611][T18909] ? __pfx_lrw_setkey+0x10/0x10 [ 1136.903642][T18909] crypto_skcipher_setkey+0x2a3/0x460 [ 1136.903666][T18909] ? __pfx_skcipher_setkey+0x10/0x10 [ 1136.903694][T18909] alg_setkey+0x138/0x190 [ 1136.903720][T18909] alg_setsockopt+0x3da/0x4a0 [ 1136.903744][T18909] ? __pfx_alg_setsockopt+0x10/0x10 [ 1136.903770][T18909] do_sock_setsockopt+0x17c/0x1b0 [ 1136.903797][T18909] __x64_sys_setsockopt+0x13d/0x1b0 [ 1136.903820][T18909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.903842][T18909] do_syscall_64+0x174/0x580 [ 1136.903864][T18909] ? trace_irq_disable+0x3b/0x140 [ 1136.903890][T18909] ? clear_bhb_loop+0x40/0x90 [ 1136.903917][T18909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.903936][T18909] RIP: 0033:0x7fc786b9de99 [ 1136.903955][T18909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.903972][T18909] RSP: 002b:00007fc787b43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1136.903989][T18909] RAX: ffffffffffffffda RBX: 00007fc786e25fa0 RCX: 00007fc786b9de99 [ 1136.904000][T18909] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 1136.904010][T18909] RBP: 00007fc787b43090 R08: 0000000000000012 R09: 0000000000000000 [ 1136.904022][T18909] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 1136.904034][T18909] R13: 00007fc786e26038 R14: 00007fc786e25fa0 R15: 00007fff6f5beeb8 [ 1136.904065][T18909] [ 1136.906307][T18738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1137.317459][T18928] mac80211_hwsim hwsim90 syzkaller0: entered promiscuous mode [ 1137.331392][T18928] mac80211_hwsim hwsim90 syzkaller0: entered allmulticast mode [ 1137.362964][T18738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.406387][T18738] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.434359][T15322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.441638][T15322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.487179][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.494391][T15303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.151356][T15322] net_ratelimit: 2 callbacks suppressed [ 1138.151374][T15322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.205229][T18738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.230273][ T5628] Bluetooth: hci0: command tx timeout [ 1138.293517][T18738] veth0_vlan: entered promiscuous mode [ 1138.314498][T18738] veth1_vlan: entered promiscuous mode [ 1138.327596][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 1138.363783][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.417927][T18738] veth0_macvtap: entered promiscuous mode [ 1138.483322][T18738] veth1_macvtap: entered promiscuous mode [ 1138.561940][T18738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.584408][T18738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.602828][T15322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.635635][T15322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.650752][T15322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.712140][T15303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.783940][ T29] audit: type=1107 audit(1785170941.494:16): pid=18994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1138.880776][T15322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.931520][T15322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.000320][T15306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.029746][T15306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.152676][T19011] x_tables: duplicate underflow at hook 2 [ 1139.158739][T19006] syzkaller0: entered promiscuous mode [ 1139.167373][T19006] syzkaller0: entered allmulticast mode [ 1139.192244][T19011] netlink: 'syz.3.17621': attribute type 4 has an invalid length. [ 1139.214952][T19011] netlink: 'syz.3.17621': attribute type 4 has an invalid length. [ 1139.456897][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.688276][T19043] virt_wifi0 speed is unknown, defaulting to 1000 [ 1139.696901][T19043] lo speed is unknown, defaulting to 1000 [ 1139.813737][T19051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17632'. [ 1139.972013][T19054] bond0: entered promiscuous mode [ 1139.977162][T19054] bond_slave_0: entered promiscuous mode [ 1139.994065][T19054] bond_slave_1: entered promiscuous mode [ 1140.002464][T19054] bond0: entered allmulticast mode [ 1140.007693][T19054] bond_slave_0: entered allmulticast mode [ 1140.013774][T19054] bond_slave_1: entered allmulticast mode [ 1140.044403][T19058] netlink: 84 bytes leftover after parsing attributes in process `syz.0.17634'. [ 1140.072435][T15322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.080581][T15302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.088709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.096849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.311200][T10618] Bluetooth: hci0: command tx timeout [ 1140.475395][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.690609][T19092] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17645'. [ 1140.710378][T15322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.718694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.861199][T19106] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1140.875927][T19097] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.17647'. [ 1140.984494][T19101] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1142.151872][T19177] virt_wifi0 speed is unknown, defaulting to 1000 [ 1142.174971][T19177] lo speed is unknown, defaulting to 1000 [ 1142.210076][T19181] FAULT_INJECTION: forcing a failure. [ 1142.210076][T19181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.244074][T19181] CPU: 0 UID: 0 PID: 19181 Comm: syz.4.17675 Not tainted syzkaller #0 PREEMPT(full) [ 1142.244098][T19181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1142.244107][T19181] Call Trace: [ 1142.244115][T19181] [ 1142.244122][T19181] dump_stack_lvl+0xe8/0x150 [ 1142.244151][T19181] should_fail_ex+0x40c/0x560 [ 1142.244174][T19181] _copy_to_user+0x31/0xb0 [ 1142.244193][T19181] move_addr_to_user+0x13a/0x210 [ 1142.244221][T19181] ____sys_recvmsg+0x245/0x4a0 [ 1142.244250][T19181] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1142.244281][T19181] ? import_iovec+0x73/0xa0 [ 1142.244303][T19181] ___sys_recvmsg+0x213/0x5a0 [ 1142.244328][T19181] ? __pfx____sys_recvmsg+0x10/0x10 [ 1142.244354][T19181] ? __fget_files+0x2a/0x420 [ 1142.244405][T19181] do_recvmmsg+0x31a/0x7f0 [ 1142.244435][T19181] ? __pfx_do_recvmmsg+0x10/0x10 [ 1142.244469][T19181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1142.244493][T19181] ? __fget_files+0x3a2/0x420 [ 1142.244526][T19181] __x64_sys_recvmmsg+0x198/0x250 [ 1142.244552][T19181] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1142.244582][T19181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.244601][T19181] do_syscall_64+0x174/0x580 [ 1142.244622][T19181] ? trace_irq_disable+0x3b/0x140 [ 1142.244644][T19181] ? clear_bhb_loop+0x40/0x90 [ 1142.244666][T19181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.244683][T19181] RIP: 0033:0x7fc786b9de99 [ 1142.244700][T19181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.244716][T19181] RSP: 002b:00007fc787b43028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1142.244736][T19181] RAX: ffffffffffffffda RBX: 00007fc786e25fa0 RCX: 00007fc786b9de99 [ 1142.244749][T19181] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 1142.244761][T19181] RBP: 00007fc787b43090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.244772][T19181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1142.244783][T19181] R13: 00007fc786e26038 R14: 00007fc786e25fa0 R15: 00007fff6f5beeb8 [ 1142.244814][T19181] [ 1143.115527][T19217] FAULT_INJECTION: forcing a failure. [ 1143.115527][T19217] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.155332][T19219] syz_tun: tun_net_xmit 86 [ 1143.163693][T19217] CPU: 0 UID: 0 PID: 19217 Comm: syz.2.17690 Not tainted syzkaller #0 PREEMPT(full) [ 1143.163727][T19217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1143.163738][T19217] Call Trace: [ 1143.163746][T19217] [ 1143.163754][T19217] dump_stack_lvl+0xe8/0x150 [ 1143.163788][T19217] should_fail_ex+0x40c/0x560 [ 1143.163817][T19217] should_failslab+0xa8/0x100 [ 1143.163847][T19217] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1143.163873][T19217] ? dst_alloc+0x105/0x170 [ 1143.163995][T19217] ? dst_alloc+0x105/0x170 [ 1143.164018][T19217] ? fib_lookup+0x76/0x440 [ 1143.164094][T19217] dst_alloc+0x105/0x170 [ 1143.164121][T19217] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1143.164149][T19217] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1143.164169][T19217] ip_route_output_key_hash+0x18d/0x2a0 [ 1143.164191][T19217] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1143.164213][T19217] ? __pfx_kernel_text_address+0x1/0x10 [ 1143.164242][T19217] tcp_v4_connect+0x6fd/0x1950 [ 1143.164263][T19217] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1143.164295][T19217] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1143.164326][T19217] __inet_stream_connect+0x258/0xe00 [ 1143.164356][T19217] ? rcu_is_watching+0x15/0xb0 [ 1143.164374][T19217] ? __pfx___inet_stream_connect+0x10/0x10 [ 1143.164393][T19217] ? __kasan_kmalloc+0x93/0xb0 [ 1143.164420][T19217] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1143.164445][T19217] ? __kmalloc_cache_noprof+0x150/0x660 [ 1143.164468][T19217] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1143.164497][T19217] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1143.164526][T19217] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 1143.164550][T19217] ? tcp_sendmsg_locked+0x5c1/0x55c0 [ 1143.164580][T19217] ? register_lock_class+0x31/0x2e0 [ 1143.164609][T19217] ? __lock_acquire+0x683/0x2cf0 [ 1143.164647][T19217] ? smc_switch_to_fallback+0xabc/0xd30 [ 1143.164675][T19217] ? __mutex_unlock_slowpath+0x731/0x900 [ 1143.164715][T19217] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1143.164746][T19217] ? tcp_sendmsg+0x21/0x50 [ 1143.164767][T19217] ? __local_bh_enable_ip+0xd0/0x130 [ 1143.164795][T19217] tcp_sendmsg+0x2f/0x50 [ 1143.164817][T19217] smc_sendmsg+0x250/0x4d0 [ 1143.164842][T19217] ? __pfx_smc_sendmsg+0x10/0x10 [ 1143.164861][T19217] sock_sendmsg_nosec+0x13a/0x180 [ 1143.164891][T19217] ____sys_sendmsg+0x54e/0x850 [ 1143.164919][T19217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1143.164952][T19217] ? import_iovec+0x73/0xa0 [ 1143.164985][T19217] ___sys_sendmsg+0x2a5/0x360 [ 1143.165006][T19217] ? __lock_acquire+0x683/0x2cf0 [ 1143.165035][T19217] ? __pfx____sys_sendmsg+0x10/0x10 [ 1143.165093][T19217] ? __fget_files+0x2a/0x420 [ 1143.165118][T19217] ? __fget_files+0x3a2/0x420 [ 1143.165152][T19217] __x64_sys_sendmsg+0x1b1/0x290 [ 1143.165178][T19217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1143.165217][T19217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.165238][T19217] do_syscall_64+0x174/0x580 [ 1143.165260][T19217] ? trace_irq_disable+0x3b/0x140 [ 1143.165284][T19217] ? clear_bhb_loop+0x40/0x90 [ 1143.165306][T19217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.165325][T19217] RIP: 0033:0x7fe77139de99 [ 1143.165342][T19217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.165358][T19217] RSP: 002b:00007fe7721b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1143.165376][T19217] RAX: ffffffffffffffda RBX: 00007fe771625fa0 RCX: 00007fe77139de99 [ 1143.165389][T19217] RDX: 00000000200048cc RSI: 00002000000007c0 RDI: 0000000000000003 [ 1143.165401][T19217] RBP: 00007fe7721b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.165412][T19217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.165422][T19217] R13: 00007fe771626038 R14: 00007fe771625fa0 R15: 00007ffeeafe9998 [ 1143.165452][T19217] [ 1143.551641][T15320] net_ratelimit: 2 callbacks suppressed [ 1143.551660][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.599354][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.665873][T15302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.684047][T10056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.697390][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.941350][T19236] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.17699'. [ 1144.229256][ C1] syz_tun: tun_net_xmit 86 [ 1144.248882][T19251] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.17705'. [ 1144.457878][T19256] FAULT_INJECTION: forcing a failure. [ 1144.457878][T19256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.499209][T19256] CPU: 1 UID: 0 PID: 19256 Comm: syz.3.17707 Not tainted syzkaller #0 PREEMPT(full) [ 1144.499235][T19256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1144.499247][T19256] Call Trace: [ 1144.499254][T19256] [ 1144.499263][T19256] dump_stack_lvl+0xe8/0x150 [ 1144.499295][T19256] should_fail_ex+0x40c/0x560 [ 1144.499324][T19256] _copy_from_user+0x2d/0xb0 [ 1144.499344][T19256] do_sock_getsockopt+0x200/0x7e0 [ 1144.499371][T19256] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1144.499408][T19256] ? __fget_files+0x3a2/0x420 [ 1144.499433][T19256] ? __fget_files+0x2a/0x420 [ 1144.499465][T19256] __x64_sys_getsockopt+0x1a4/0x240 [ 1144.499502][T19256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.499523][T19256] do_syscall_64+0x174/0x580 [ 1144.499546][T19256] ? trace_irq_disable+0x3b/0x140 [ 1144.499571][T19256] ? clear_bhb_loop+0x40/0x90 [ 1144.499594][T19256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.499613][T19256] RIP: 0033:0x7f91f099de99 [ 1144.499631][T19256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.499648][T19256] RSP: 002b:00007f91f1797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1144.499668][T19256] RAX: ffffffffffffffda RBX: 00007f91f0c25fa0 RCX: 00007f91f099de99 [ 1144.499683][T19256] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 1144.499695][T19256] RBP: 00007f91f1797090 R08: 0000200000000080 R09: 0000000000000000 [ 1144.499708][T19256] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 1144.499721][T19256] R13: 00007f91f0c26038 R14: 00007f91f0c25fa0 R15: 00007fff08058588 [ 1144.499752][T19256] [ 1144.827689][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.929916][T19277] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.17711'. [ 1144.950256][T19280] netlink: 1748 bytes leftover after parsing attributes in process `syz.0.17714'. [ 1145.195912][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.204280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.269384][ C1] syz_tun: tun_net_xmit 86 [ 1145.353784][T19295] tap0: tun_chr_ioctl cmd 2147767507 [ 1145.428684][T19295] xt_limit: Overflow, try lower: 268435456/134217728 [ 1145.496039][T19299] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.17722'. [ 1145.625588][T19308] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.17726'. [ 1145.640884][T19309] x_tables: duplicate underflow at hook 2 [ 1145.652452][T19309] netlink: 'syz.0.17727': attribute type 4 has an invalid length. [ 1145.669666][T19309] netlink: 'syz.0.17727': attribute type 4 has an invalid length. [ 1145.738162][T19311] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.17728'. [ 1145.834312][T15302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.842695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.060272][T19325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17735'. [ 1146.092987][T19325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17735'. [ 1146.300790][T19329] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.17737'. [ 1147.287968][T19369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.295605][T19369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.858716][T19424] bridge1: entered promiscuous mode [ 1147.866187][T19424] bridge1: entered allmulticast mode [ 1148.632322][T19466] Bluetooth: MGMT ver 1.23 [ 1148.975341][T13626] net_ratelimit: 5 callbacks suppressed [ 1148.975358][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.017259][T19485] virt_wifi0 speed is unknown, defaulting to 1000 [ 1149.030398][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.038521][T15302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.053139][T10085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.064584][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.113986][T19485] lo speed is unknown, defaulting to 1000 [ 1150.156163][T19502] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1150.164385][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.559889][T19562] __nla_validate_parse: 4 callbacks suppressed [ 1150.559907][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17820'. [ 1150.952547][T15324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.961305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.970209][T15322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.978510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.725750][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17847'. [ 1151.873000][T19633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17850'. [ 1151.933074][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17852'. [ 1151.967042][T19641] netlink: 'syz.3.17852': attribute type 22 has an invalid length. [ 1151.981302][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17852'. [ 1152.090756][T19648] netlink: 'syz.4.17855': attribute type 1 has an invalid length. [ 1152.186220][T19648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1152.212841][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17852'. [ 1152.225497][T19641] netlink: 'syz.3.17852': attribute type 22 has an invalid length. [ 1152.239476][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17852'. [ 1152.443197][T19663] FAULT_INJECTION: forcing a failure. [ 1152.443197][T19663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.550178][T19663] CPU: 1 UID: 0 PID: 19663 Comm: syz.2.17858 Not tainted syzkaller #0 PREEMPT(full) [ 1152.550205][T19663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1152.550216][T19663] Call Trace: [ 1152.550224][T19663] [ 1152.550233][T19663] dump_stack_lvl+0xe8/0x150 [ 1152.550266][T19663] should_fail_ex+0x40c/0x560 [ 1152.550303][T19663] _copy_from_user+0x2d/0xb0 [ 1152.550327][T19663] do_tcp_getsockopt+0x221/0x2980 [ 1152.550434][T19663] ? __lock_acquire+0x683/0x2cf0 [ 1152.550467][T19663] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1152.550503][T19663] ? update_se+0x90/0x1020 [ 1152.550546][T19663] ? wakeup_preempt_fair+0x745/0xb10 [ 1152.550583][T19663] ? do_raw_spin_unlock+0xf5/0x210 [ 1152.550608][T19663] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1152.550639][T19663] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1152.550660][T19663] ? lockdep_hardirqs_on+0x7a/0x110 [ 1152.550689][T19663] tcp_getsockopt+0x83/0x130 [ 1152.550723][T19663] mptcp_getsockopt+0x15e3/0x1ed0 [ 1152.550753][T19663] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1152.550770][T19663] ? process_measurement+0x7b2/0x1c10 [ 1152.550839][T19663] ? up_write+0x19f/0x4a0 [ 1152.550864][T19663] ? process_measurement+0x14fb/0x1c10 [ 1152.550895][T19663] ? kasan_quarantine_put+0xbb/0x1f0 [ 1152.550924][T19663] ? __lock_acquire+0x683/0x2cf0 [ 1152.550956][T19663] ? __lock_acquire+0x683/0x2cf0 [ 1152.550996][T19663] ? unwind_next_frame+0x8f/0x2550 [ 1152.551021][T19663] ? __lock_acquire+0x683/0x2cf0 [ 1152.551059][T19663] ? __lock_acquire+0x683/0x2cf0 [ 1152.551092][T19663] ? aa_file_perm+0x18b/0x15f0 [ 1152.551118][T19663] ? aa_label_sk_perm+0x532/0x6e0 [ 1152.551146][T19663] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1152.551169][T19663] ? _parse_integer_limit+0x192/0x1e0 [ 1152.551200][T19663] ? __lock_acquire+0x683/0x2cf0 [ 1152.551228][T19663] ? kstrtouint+0x6e/0xe0 [ 1152.551270][T19663] ? __might_fault+0xaf/0x130 [ 1152.551302][T19663] ? __might_fault+0xaf/0x130 [ 1152.551340][T19663] ? sock_common_getsockopt+0x2d/0xb0 [ 1152.551369][T19663] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1152.551398][T19663] do_sock_getsockopt+0x51d/0x7e0 [ 1152.551424][T19663] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1152.551459][T19663] ? __fget_files+0x3a2/0x420 [ 1152.551483][T19663] ? __fget_files+0x2a/0x420 [ 1152.551514][T19663] __x64_sys_getsockopt+0x1a4/0x240 [ 1152.551540][T19663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.551560][T19663] do_syscall_64+0x174/0x580 [ 1152.551580][T19663] ? trace_irq_disable+0x3b/0x140 [ 1152.551605][T19663] ? clear_bhb_loop+0x40/0x90 [ 1152.551627][T19663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.551645][T19663] RIP: 0033:0x7fe77139de99 [ 1152.551664][T19663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.551681][T19663] RSP: 002b:00007fe76f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1152.551701][T19663] RAX: ffffffffffffffda RBX: 00007fe771626180 RCX: 00007fe77139de99 [ 1152.551715][T19663] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 1152.551726][T19663] RBP: 00007fe76f5f6090 R08: 0000200000000080 R09: 0000000000000000 [ 1152.551738][T19663] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 1152.551750][T19663] R13: 00007fe771626218 R14: 00007fe771626180 R15: 00007ffeeafe9998 [ 1152.551781][T19663] [ 1153.083540][T19680] netlink: 308 bytes leftover after parsing attributes in process `syz.3.17867'. [ 1153.355579][T19704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.363246][T19704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.442024][T19699] Bluetooth: MGMT ver 1.23 [ 1153.796415][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17884'. [ 1153.806519][T19728] FAULT_INJECTION: forcing a failure. [ 1153.806519][T19728] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.821692][T19728] CPU: 0 UID: 0 PID: 19728 Comm: syz.2.17884 Not tainted syzkaller #0 PREEMPT(full) [ 1153.821716][T19728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1153.821728][T19728] Call Trace: [ 1153.821735][T19728] [ 1153.821743][T19728] dump_stack_lvl+0xe8/0x150 [ 1153.821777][T19728] should_fail_ex+0x40c/0x560 [ 1153.821807][T19728] should_failslab+0xa8/0x100 [ 1153.821838][T19728] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1153.821864][T19728] ? skb_clone+0x212/0x3a0 [ 1153.821885][T19728] ? skb_clone+0x212/0x3a0 [ 1153.821915][T19728] skb_clone+0x212/0x3a0 [ 1153.821941][T19728] __netlink_deliver_tap+0x413/0x860 [ 1153.821977][T19728] ? netlink_deliver_tap+0x2e/0x1b0 [ 1153.822002][T19728] netlink_deliver_tap+0x19c/0x1b0 [ 1153.822026][T19728] netlink_unicast+0x77f/0x940 [ 1153.822059][T19728] netlink_sendmsg+0x813/0xb40 [ 1153.822091][T19728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.822125][T19728] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1153.822151][T19728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.822173][T19728] sock_sendmsg_nosec+0x13a/0x180 [ 1153.822205][T19728] ____sys_sendmsg+0x54e/0x850 [ 1153.822233][T19728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1153.822266][T19728] ? import_iovec+0x73/0xa0 [ 1153.822299][T19728] ___sys_sendmsg+0x2a5/0x360 [ 1153.822320][T19728] ? __lock_acquire+0x683/0x2cf0 [ 1153.822352][T19728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1153.822380][T19728] ? kstrtouint+0x6e/0xe0 [ 1153.822433][T19728] ? __fget_files+0x2a/0x420 [ 1153.822458][T19728] ? __fget_files+0x3a2/0x420 [ 1153.822495][T19728] __sys_sendmmsg+0x273/0x4d0 [ 1153.822522][T19728] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1153.822553][T19728] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1153.822592][T19728] ? ksys_write+0x242/0x270 [ 1153.822614][T19728] ? __pfx_ksys_write+0x10/0x10 [ 1153.822639][T19728] __x64_sys_sendmmsg+0xa0/0xc0 [ 1153.822662][T19728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.822683][T19728] do_syscall_64+0x174/0x580 [ 1153.822705][T19728] ? trace_irq_disable+0x3b/0x140 [ 1153.822731][T19728] ? clear_bhb_loop+0x40/0x90 [ 1153.822755][T19728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.822775][T19728] RIP: 0033:0x7fe77139de99 [ 1153.822793][T19728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.822810][T19728] RSP: 002b:00007fe7721b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1153.822830][T19728] RAX: ffffffffffffffda RBX: 00007fe771625fa0 RCX: 00007fe77139de99 [ 1153.822845][T19728] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1153.822858][T19728] RBP: 00007fe7721b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.822871][T19728] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 1153.822883][T19728] R13: 00007fe771626038 R14: 00007fe771625fa0 R15: 00007ffeeafe9998 [ 1153.822917][T19728] [ 1153.823000][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17884'. [ 1153.876821][T19730] netlink: 'syz.1.17883': attribute type 32 has an invalid length. [ 1154.152765][ T1693] block nbd3: Possible stuck request ffff888027d4e000: control (read@0,1024B). Runtime 270 seconds [ 1154.157903][T15323] net_ratelimit: 5 callbacks suppressed [ 1154.157919][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.165455][ T1693] block nbd3: Possible stuck request ffff888027d4e1c0: control (read@1024,1024B). Runtime 270 seconds [ 1154.190659][ T1693] block nbd3: Possible stuck request ffff888027d4e380: control (read@2048,1024B). Runtime 270 seconds [ 1154.216699][ T1693] block nbd3: Possible stuck request ffff888027d4e540: control (read@3072,1024B). Runtime 270 seconds [ 1154.309543][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.454603][T19755] netlink: 'syz.2.17894': attribute type 22 has an invalid length. [ 1154.468224][T19755] netlink: 'syz.2.17894': attribute type 22 has an invalid length. [ 1154.802058][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.812880][T10056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.821711][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.043225][T19791] digital: digital_start_poll: Unknown protocol [ 1155.294667][T19805] netlink: 'syz.3.17911': attribute type 11 has an invalid length. [ 1155.909329][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.198271][T19841] __nla_validate_parse: 6 callbacks suppressed [ 1156.198289][T19841] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.17926'. [ 1156.228114][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1156.245653][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1156.259637][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1156.273590][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1156.289872][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1156.437220][T19851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17929'. [ 1156.582454][T19855] netlink: 'syz.2.17930': attribute type 1 has an invalid length. [ 1156.713338][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.721536][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.729649][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.733733][T15320] wlan1: Trigger new scan to find an IBSS to join [ 1156.738114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.829961][T19855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1156.877309][T19858] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1156.916495][T19862] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1156.932487][T19862] bond1: (slave batadv1): making interface the new active one [ 1156.941697][T19862] batadv1: entered promiscuous mode [ 1156.947910][T19862] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1157.141270][T15322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.168933][T15322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1157.186655][T15322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.258393][T19870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.266096][T19870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.404163][T19844] virt_wifi0 speed is unknown, defaulting to 1000 [ 1157.415022][T19844] lo speed is unknown, defaulting to 1000 [ 1157.668666][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17936'. [ 1157.800253][T15322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.821569][T15322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1157.828522][T19894] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.17938'. [ 1157.849470][T15322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.887100][T19889] bond0: left allmulticast mode [ 1157.895039][T19889] bond_slave_0: left allmulticast mode [ 1157.900951][T19889] bond_slave_1: left allmulticast mode [ 1158.058909][T19899] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.17940'. [ 1158.150308][T15322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.171888][T15322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1158.194290][T15322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.365301][T15322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.375863][T15322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1158.402431][ T5628] Bluetooth: hci1: command tx timeout [ 1158.410957][T15322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.679864][T19844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.699758][T19844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.716021][T19844] bridge_slave_0: entered allmulticast mode [ 1158.725949][T19844] bridge_slave_0: entered promiscuous mode [ 1158.736131][T19844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.743520][T19844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.751578][T19844] bridge_slave_1: entered allmulticast mode [ 1158.764478][T19844] bridge_slave_1: entered promiscuous mode [ 1158.840338][T19929] FAULT_INJECTION: forcing a failure. [ 1158.840338][T19929] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.875176][T19929] CPU: 1 UID: 0 PID: 19929 Comm: syz.2.17948 Not tainted syzkaller #0 PREEMPT(full) [ 1158.875202][T19929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1158.875213][T19929] Call Trace: [ 1158.875221][T19929] [ 1158.875230][T19929] dump_stack_lvl+0xe8/0x150 [ 1158.875263][T19929] should_fail_ex+0x40c/0x560 [ 1158.875293][T19929] should_failslab+0xa8/0x100 [ 1158.875322][T19929] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1158.875347][T19929] ? dst_alloc+0x105/0x170 [ 1158.875369][T19929] ? dst_alloc+0x105/0x170 [ 1158.875393][T19929] ? fib_lookup+0x76/0x440 [ 1158.875425][T19929] dst_alloc+0x105/0x170 [ 1158.875453][T19929] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1158.875483][T19929] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1158.875505][T19929] ip_route_output_key_hash+0x18d/0x2a0 [ 1158.875527][T19929] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1158.875552][T19929] ? call_rcu+0x64b/0x8b0 [ 1158.875572][T19929] ? lockdep_hardirqs_on+0x7a/0x110 [ 1158.875601][T19929] ip_route_output_flow+0x2a/0x150 [ 1158.875627][T19929] ? security_sk_classify_flow+0x6d/0x150 [ 1158.875731][T19929] tcp_v4_connect+0x7b4/0x1950 [ 1158.875753][T19929] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1158.875791][T19929] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1158.875825][T19929] __inet_stream_connect+0x258/0xe00 [ 1158.875864][T19929] ? rcu_is_watching+0x15/0xb0 [ 1158.875884][T19929] ? __pfx___inet_stream_connect+0x10/0x10 [ 1158.875903][T19929] ? __kasan_kmalloc+0x93/0xb0 [ 1158.875931][T19929] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1158.875956][T19929] ? __kmalloc_cache_noprof+0x150/0x660 [ 1158.875981][T19929] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1158.876012][T19929] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1158.876042][T19929] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 1158.876068][T19929] ? tcp_sendmsg_locked+0x5c1/0x55c0 [ 1158.876099][T19929] ? register_lock_class+0x31/0x2e0 [ 1158.876131][T19929] ? __lock_acquire+0x683/0x2cf0 [ 1158.876170][T19929] ? smc_switch_to_fallback+0xabc/0xd30 [ 1158.876197][T19929] ? __mutex_unlock_slowpath+0x731/0x900 [ 1158.876232][T19929] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1158.876262][T19929] ? tcp_sendmsg+0x21/0x50 [ 1158.876287][T19929] ? __local_bh_enable_ip+0xd0/0x130 [ 1158.876316][T19929] tcp_sendmsg+0x2f/0x50 [ 1158.876338][T19929] smc_sendmsg+0x250/0x4d0 [ 1158.876362][T19929] ? __pfx_smc_sendmsg+0x10/0x10 [ 1158.876382][T19929] sock_sendmsg_nosec+0x13a/0x180 [ 1158.876412][T19929] ____sys_sendmsg+0x54e/0x850 [ 1158.876440][T19929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.876474][T19929] ? import_iovec+0x73/0xa0 [ 1158.876508][T19929] ___sys_sendmsg+0x2a5/0x360 [ 1158.876529][T19929] ? __lock_acquire+0x683/0x2cf0 [ 1158.876560][T19929] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.876621][T19929] ? __fget_files+0x2a/0x420 [ 1158.876646][T19929] ? __fget_files+0x3a2/0x420 [ 1158.876683][T19929] __x64_sys_sendmsg+0x1b1/0x290 [ 1158.876708][T19929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1158.876751][T19929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.876771][T19929] do_syscall_64+0x174/0x580 [ 1158.876792][T19929] ? trace_irq_disable+0x3b/0x140 [ 1158.876816][T19929] ? clear_bhb_loop+0x40/0x90 [ 1158.876846][T19929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.876865][T19929] RIP: 0033:0x7fe77139de99 [ 1158.876883][T19929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.876899][T19929] RSP: 002b:00007fe7721b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.876918][T19929] RAX: ffffffffffffffda RBX: 00007fe771625fa0 RCX: 00007fe77139de99 [ 1158.876932][T19929] RDX: 00000000200048cc RSI: 00002000000007c0 RDI: 0000000000000003 [ 1158.876945][T19929] RBP: 00007fe7721b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.876957][T19929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.876968][T19929] R13: 00007fe771626038 R14: 00007fe771625fa0 R15: 00007ffeeafe9998 [ 1158.876999][T19929] [ 1159.261907][T13626] net_ratelimit: 4 callbacks suppressed [ 1159.261923][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.293236][T19844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.411197][T19844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.560233][T19938] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.17951'. [ 1159.585088][T15322] bridge_slave_1: left allmulticast mode [ 1159.595513][T15322] bridge_slave_1: left promiscuous mode [ 1159.602033][T15322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.611865][T15322] bridge_slave_0: left allmulticast mode [ 1159.618390][T15322] bridge_slave_0: left promiscuous mode [ 1159.624747][T15322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.749789][T15308] wlan1: Trigger new scan to find an IBSS to join [ 1159.909700][T15308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.917873][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.928022][T10056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.947181][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.968172][T15322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.979005][T15322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.994573][T15322] bond0 (unregistering): Released all slaves [ 1160.004771][T15322] bond1 (unregistering): Released all slaves [ 1160.018860][T15322] bond2 (unregistering): Released all slaves [ 1160.067016][T19844] team0: Port device team_slave_0 added [ 1160.097751][T19844] team0: Port device team_slave_1 added [ 1160.218113][T15322] tipc: Disabling bearer [ 1160.230976][T15322] tipc: Left network mode [ 1160.250249][T19844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.273412][T19844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.320917][T19844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.350431][T19844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.379876][T19844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.446176][T19844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.471427][ T5628] Bluetooth: hci1: command tx timeout [ 1161.029768][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.230538][T19844] hsr_slave_0: entered promiscuous mode [ 1161.245288][T19844] hsr_slave_1: entered promiscuous mode [ 1161.260143][T19844] debugfs: 'hsr0' already exists in 'hsr' [ 1161.268051][T19844] Cannot create hsr debugfs directory [ 1161.394528][T20001] FAULT_INJECTION: forcing a failure. [ 1161.394528][T20001] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.409319][T20001] CPU: 1 UID: 0 PID: 20001 Comm: syz.3.17967 Not tainted syzkaller #0 PREEMPT(full) [ 1161.409342][T20001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1161.409353][T20001] Call Trace: [ 1161.409361][T20001] [ 1161.409369][T20001] dump_stack_lvl+0xe8/0x150 [ 1161.409401][T20001] should_fail_ex+0x40c/0x560 [ 1161.409430][T20001] should_failslab+0xa8/0x100 [ 1161.409459][T20001] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1161.409482][T20001] ? __kernfs_new_node+0xe6/0x980 [ 1161.409506][T20001] ? __kernfs_new_node+0xe6/0x980 [ 1161.409533][T20001] __kernfs_new_node+0xe6/0x980 [ 1161.409564][T20001] ? __pfx___kernfs_new_node+0x10/0x10 [ 1161.409591][T20001] ? kernfs_root+0x1c/0x230 [ 1161.409619][T20001] ? kernfs_root+0x1c/0x230 [ 1161.409642][T20001] ? kernfs_root+0x1c/0x230 [ 1161.409664][T20001] ? kernfs_root+0x1c/0x230 [ 1161.409695][T20001] kernfs_new_node+0xea/0x140 [ 1161.409727][T20001] kernfs_create_link+0xa7/0x200 [ 1161.409753][T20001] sysfs_do_create_link_sd+0x83/0x110 [ 1161.409781][T20001] device_add_class_symlinks+0xb6/0x240 [ 1161.409807][T20001] device_add+0x467/0xb80 [ 1161.409830][T20001] device_create+0x269/0x300 [ 1161.409859][T20001] ? timer_init_key+0x161/0x2c0 [ 1161.409885][T20001] ? __pfx_device_create+0x10/0x10 [ 1161.409909][T20001] ? ieee80211_roc_setup+0x119/0x1d0 [ 1161.409941][T20001] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1161.409969][T20001] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 1161.410000][T20001] ? __pfx___nla_validate_parse+0x10/0x10 [ 1161.410054][T20001] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1161.410074][T20001] ? trace_kmalloc+0x2a/0xf0 [ 1161.410108][T20001] hwsim_new_radio_nl+0xd8b/0xf90 [ 1161.410150][T20001] genl_family_rcv_msg_doit+0x233/0x340 [ 1161.410182][T20001] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1161.410217][T20001] ? bpf_lsm_capable+0x9/0x20 [ 1161.410237][T20001] ? security_capable+0x7e/0x2c0 [ 1161.410260][T20001] genl_rcv_msg+0x614/0x7a0 [ 1161.410289][T20001] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1161.410311][T20001] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1161.410335][T20001] ? __pfx_ref_tracker_free+0x10/0x10 [ 1161.410366][T20001] netlink_rcv_skb+0x226/0x4a0 [ 1161.410386][T20001] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1161.410409][T20001] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1161.410442][T20001] ? down_read+0x2be/0x330 [ 1161.410467][T20001] genl_rcv+0x28/0x40 [ 1161.410488][T20001] netlink_unicast+0x7bb/0x940 [ 1161.410516][T20001] netlink_sendmsg+0x813/0xb40 [ 1161.410545][T20001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1161.410568][T20001] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1161.410591][T20001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1161.410609][T20001] sock_sendmsg_nosec+0x13a/0x180 [ 1161.410634][T20001] ____sys_sendmsg+0x54e/0x850 [ 1161.410659][T20001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1161.410686][T20001] ? import_iovec+0x73/0xa0 [ 1161.410713][T20001] ___sys_sendmsg+0x2a5/0x360 [ 1161.410731][T20001] ? __lock_acquire+0x683/0x2cf0 [ 1161.410756][T20001] ? __pfx____sys_sendmsg+0x10/0x10 [ 1161.410809][T20001] ? __fget_files+0x2a/0x420 [ 1161.410830][T20001] ? __fget_files+0x3a2/0x420 [ 1161.410860][T20001] __x64_sys_sendmsg+0x1b1/0x290 [ 1161.410882][T20001] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1161.410918][T20001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.410936][T20001] do_syscall_64+0x174/0x580 [ 1161.410956][T20001] ? trace_irq_disable+0x3b/0x140 [ 1161.410977][T20001] ? clear_bhb_loop+0x40/0x90 [ 1161.410997][T20001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.411014][T20001] RIP: 0033:0x7f91f099de99 [ 1161.411037][T20001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.411051][T20001] RSP: 002b:00007f91f1797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1161.411069][T20001] RAX: ffffffffffffffda RBX: 00007f91f0c25fa0 RCX: 00007f91f099de99 [ 1161.411081][T20001] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 1161.411091][T20001] RBP: 00007f91f1797090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.411102][T20001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.411111][T20001] R13: 00007f91f0c26038 R14: 00007f91f0c25fa0 R15: 00007fff08058588 [ 1161.411140][T20001] [ 1162.051641][T20009] x_tables: duplicate underflow at hook 2 [ 1162.063513][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1162.071827][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.227440][T20016] netlink: 'syz.3.17970': attribute type 4 has an invalid length. [ 1162.280546][T20005] netlink: 'syz.3.17970': attribute type 4 has an invalid length. [ 1162.471063][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.479422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.549790][ T5628] Bluetooth: hci1: command tx timeout [ 1162.709597][T15320] wlan1: Creating new IBSS network, BSSID 7e:b9:19:ab:78:af [ 1162.986971][T15322] hsr_slave_0: left promiscuous mode [ 1163.064217][T15322] hsr_slave_1: left promiscuous mode [ 1163.070924][T15322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.078940][T15322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.097182][T15322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.107378][T15322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.115088][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.136496][T15322] veth1_macvtap: left promiscuous mode [ 1163.142390][T15322] veth0_macvtap: left promiscuous mode [ 1163.148064][T15322] veth1_vlan: left promiscuous mode [ 1163.153934][T15322] veth0_vlan: left promiscuous mode [ 1163.530575][T15322] team0 (unregistering): Port device team_slave_1 removed [ 1163.547984][T15322] team0 (unregistering): Port device team_slave_0 removed [ 1163.645255][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1163.865436][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17981'. [ 1164.631425][ T5628] Bluetooth: hci1: command tx timeout [ 1164.814864][T20118] netlink: 'syz.2.17991': attribute type 1 has an invalid length. [ 1164.834894][T20118] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17991'. [ 1165.190864][T13628] net_ratelimit: 3 callbacks suppressed [ 1165.190881][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.261077][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17994'. [ 1165.380211][T15322] IPVS: stop unused estimator thread 0... [ 1165.673167][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.682200][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.690332][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.700791][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.869715][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17998'. [ 1165.896729][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17998'. [ 1166.281670][T20169] batman_adv: batadv0: Adding interface: macvtap1 [ 1166.291413][T20169] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.318460][T15303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.318666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.341599][T20169] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1166.596667][T19844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1166.707598][T20189] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.18005'. [ 1166.792171][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.867517][T19844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1166.922864][T19844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1166.961065][T19844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1166.996033][T19844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1167.039638][T19844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1167.060043][T19844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1167.083854][T19844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1167.375904][T19844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.440680][T19844] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.469763][T15308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.476982][T15308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.543066][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.550257][T15303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.829488][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.230497][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.493048][T15322] batadv1: left promiscuous mode [ 1168.594107][T19844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.125953][T19844] veth0_vlan: entered promiscuous mode [ 1169.178378][T19844] veth1_vlan: entered promiscuous mode [ 1169.287360][T19844] veth0_macvtap: entered promiscuous mode [ 1169.300963][T19844] veth1_macvtap: entered promiscuous mode [ 1169.325706][T19844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.375660][T19844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.454417][T15322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.489630][T15322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.524918][T15322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.549162][T15322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.666993][T20321] x_tables: duplicate underflow at hook 2 [ 1169.914796][T15322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.941448][T15322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.001695][T20329] tipc: Started in network mode [ 1170.014832][T20329] tipc: Node identity 2ed9cadf6fc9, cluster identity 4711 [ 1170.039354][T20329] tipc: Enabled bearer , priority 0 [ 1170.051785][T15306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.064844][T15306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.096775][T20338] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18029'. [ 1170.108457][T20328] tipc: Disabling bearer [ 1170.312085][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18039'. [ 1170.515469][T20353] syzkaller1: entered promiscuous mode [ 1170.655704][T20353] syzkaller1: entered allmulticast mode [ 1170.855800][T20367] IPVS: set_ctl: invalid protocol: 103 172.20.20.56:20004 [ 1170.950404][T13626] net_ratelimit: 5 callbacks suppressed [ 1170.950420][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.075040][T20381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18051'. [ 1171.166772][T20385] netlink: 424 bytes leftover after parsing attributes in process `syz.2.18053'. [ 1171.429810][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.438707][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.447720][T10056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.457476][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.734700][T20417] xt_CONNSECMARK: invalid mode: 0 [ 1171.778004][T20417] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1171.794183][T20417] bond2 (unregistering): Released all slaves [ 1171.858409][T20423] FAULT_INJECTION: forcing a failure. [ 1171.858409][T20423] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.892654][T20425] FAULT_INJECTION: forcing a failure. [ 1171.892654][T20425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.894492][T20423] CPU: 0 UID: 0 PID: 20423 Comm: syz.4.18067 Not tainted syzkaller #0 PREEMPT(full) [ 1171.894515][T20423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1171.894527][T20423] Call Trace: [ 1171.894535][T20423] [ 1171.894542][T20423] dump_stack_lvl+0xe8/0x150 [ 1171.894575][T20423] should_fail_ex+0x40c/0x560 [ 1171.894603][T20423] should_failslab+0xa8/0x100 [ 1171.894633][T20423] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 1171.894660][T20423] ? __lock_acquire+0x683/0x2cf0 [ 1171.894686][T20423] ? __kernfs_new_node+0xa9/0x980 [ 1171.894710][T20423] ? __kernfs_new_node+0xa9/0x980 [ 1171.894743][T20423] kstrdup+0x42/0x100 [ 1171.894771][T20423] __kernfs_new_node+0xa9/0x980 [ 1171.894807][T20423] ? __pfx___kernfs_new_node+0x10/0x10 [ 1171.894835][T20423] ? kernfs_root+0x1c/0x230 [ 1171.894866][T20423] ? kernfs_root+0x1c/0x230 [ 1171.894890][T20423] ? kernfs_root+0x1c/0x230 [ 1171.894912][T20423] ? kernfs_root+0x1c/0x230 [ 1171.894943][T20423] kernfs_new_node+0xea/0x140 [ 1171.894973][T20423] kernfs_create_link+0xa7/0x200 [ 1171.894998][T20423] sysfs_do_create_link_sd+0x83/0x110 [ 1171.895025][T20423] device_add_class_symlinks+0x1cf/0x240 [ 1171.895050][T20423] device_add+0x467/0xb80 [ 1171.895072][T20423] device_create+0x269/0x300 [ 1171.895107][T20423] ? timer_init_key+0x161/0x2c0 [ 1171.895131][T20423] ? __pfx_device_create+0x10/0x10 [ 1171.895154][T20423] ? ieee80211_roc_setup+0x119/0x1d0 [ 1171.895185][T20423] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1171.895212][T20423] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 1171.895242][T20423] ? __pfx___nla_validate_parse+0x10/0x10 [ 1171.895284][T20423] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1171.895302][T20423] ? trace_kmalloc+0x2a/0xf0 [ 1171.895334][T20423] hwsim_new_radio_nl+0xd8b/0xf90 [ 1171.895376][T20423] genl_family_rcv_msg_doit+0x233/0x340 [ 1171.895412][T20423] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1171.895452][T20423] ? bpf_lsm_capable+0x9/0x20 [ 1171.895474][T20423] ? security_capable+0x7e/0x2c0 [ 1171.895503][T20423] genl_rcv_msg+0x614/0x7a0 [ 1171.895536][T20423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1171.895561][T20423] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1171.895589][T20423] ? __pfx_ref_tracker_free+0x10/0x10 [ 1171.895625][T20423] netlink_rcv_skb+0x226/0x4a0 [ 1171.895649][T20423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1171.895676][T20423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1171.895713][T20423] ? down_read+0x2be/0x330 [ 1171.895742][T20423] genl_rcv+0x28/0x40 [ 1171.895766][T20423] netlink_unicast+0x7bb/0x940 [ 1171.895797][T20423] netlink_sendmsg+0x813/0xb40 [ 1171.895830][T20423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1171.895856][T20423] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1171.895882][T20423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1171.895903][T20423] sock_sendmsg_nosec+0x13a/0x180 [ 1171.895933][T20423] ____sys_sendmsg+0x54e/0x850 [ 1171.895960][T20423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1171.895990][T20423] ? import_iovec+0x73/0xa0 [ 1171.896022][T20423] ___sys_sendmsg+0x2a5/0x360 [ 1171.896042][T20423] ? __lock_acquire+0x683/0x2cf0 [ 1171.896072][T20423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1171.896136][T20423] ? __fget_files+0x2a/0x420 [ 1171.896160][T20423] ? __fget_files+0x3a2/0x420 [ 1171.896194][T20423] __x64_sys_sendmsg+0x1b1/0x290 [ 1171.896219][T20423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1171.896259][T20423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.896280][T20423] do_syscall_64+0x174/0x580 [ 1171.896300][T20423] ? trace_irq_disable+0x3b/0x140 [ 1171.896324][T20423] ? clear_bhb_loop+0x40/0x90 [ 1171.896347][T20423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.896365][T20423] RIP: 0033:0x7f262879de99 [ 1171.896383][T20423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.896398][T20423] RSP: 002b:00007f26296ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.896418][T20423] RAX: ffffffffffffffda RBX: 00007f2628a25fa0 RCX: 00007f262879de99 [ 1171.896431][T20423] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 1171.896443][T20423] RBP: 00007f26296ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.896455][T20423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1171.896467][T20423] R13: 00007f2628a26038 R14: 00007f2628a25fa0 R15: 00007ffcaf125d08 [ 1171.896497][T20423] [ 1171.917804][T20425] CPU: 1 UID: 0 PID: 20425 Comm: syz.2.18069 Not tainted syzkaller #0 PREEMPT(full) [ 1171.917828][T20425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1171.917839][T20425] Call Trace: [ 1171.917847][T20425] [ 1171.917855][T20425] dump_stack_lvl+0xe8/0x150 [ 1171.917888][T20425] should_fail_ex+0x40c/0x560 [ 1171.917916][T20425] _copy_from_user+0x2d/0xb0 [ 1171.917935][T20425] csum_and_copy_from_iter_full+0x712/0x1fb0 [ 1171.917975][T20425] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1171.918001][T20425] ? capable+0x88/0xe0 [ 1171.918027][T20425] ? alloc_pages_mpol+0x24a/0x380 [ 1171.918058][T20425] ip_generic_getfrag+0x149/0x2d0 [ 1171.918081][T20425] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1171.918100][T20425] ? skb_page_frag_refill+0x119/0x460 [ 1171.918132][T20425] __ip6_append_data+0x2252/0x40c0 [ 1171.918159][T20425] ? __lock_acquire+0x683/0x2cf0 [ 1171.918201][T20425] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1171.918242][T20425] ? __pfx___ip6_append_data+0x10/0x10 [ 1171.918271][T20425] ? __pfx_ip6_mtu+0x10/0x10 [ 1171.918304][T20425] ip6_make_skb+0x2af/0x320 [ 1171.918322][T20425] ? sk_dst_check+0x25/0x480 [ 1171.918347][T20425] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1171.918370][T20425] ? __pfx_ip6_make_skb+0x10/0x10 [ 1171.918407][T20425] ? ip6_sk_dst_lookup_flow+0x856/0xa50 [ 1171.918436][T20425] ? udpv6_sendmsg+0x194d/0x2610 [ 1171.918464][T20425] udpv6_sendmsg+0x1dfb/0x2610 [ 1171.918505][T20425] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1171.918528][T20425] ? rcu_is_watching+0x15/0xb0 [ 1171.918547][T20425] ? __up_read+0x29c/0x930 [ 1171.918609][T20425] ? inet_send_prepare+0x5b/0x260 [ 1171.918630][T20425] ? inet6_sendmsg+0xe4/0x120 [ 1171.918653][T20425] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1171.918677][T20425] sock_sendmsg_nosec+0x90/0x180 [ 1171.918705][T20425] ____sys_sendmsg+0x54e/0x850 [ 1171.918731][T20425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1171.918761][T20425] ? import_iovec+0x73/0xa0 [ 1171.918791][T20425] ___sys_sendmsg+0x2a5/0x360 [ 1171.918812][T20425] ? __lock_acquire+0x683/0x2cf0 [ 1171.918841][T20425] ? __pfx____sys_sendmsg+0x10/0x10 [ 1171.918866][T20425] ? kstrtouint+0x6e/0xe0 [ 1171.918912][T20425] ? __fget_files+0x2a/0x420 [ 1171.918937][T20425] ? __fget_files+0x3a2/0x420 [ 1171.918970][T20425] __sys_sendmmsg+0x273/0x4d0 [ 1171.918997][T20425] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1171.919028][T20425] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1171.919063][T20425] ? ksys_write+0x242/0x270 [ 1171.919085][T20425] ? __pfx_ksys_write+0x10/0x10 [ 1171.919109][T20425] __x64_sys_sendmmsg+0xa0/0xc0 [ 1171.919131][T20425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.919150][T20425] do_syscall_64+0x174/0x580 [ 1171.919171][T20425] ? trace_irq_disable+0x3b/0x140 [ 1171.919196][T20425] ? clear_bhb_loop+0x40/0x90 [ 1171.919218][T20425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.919237][T20425] RIP: 0033:0x7fe77139de99 [ 1171.919254][T20425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.919270][T20425] RSP: 002b:00007fe7721b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1171.919290][T20425] RAX: ffffffffffffffda RBX: 00007fe771625fa0 RCX: 00007fe77139de99 [ 1171.919303][T20425] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 1171.919316][T20425] RBP: 00007fe7721b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.919328][T20425] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 1171.919339][T20425] R13: 00007fe771626038 R14: 00007fe771625fa0 R15: 00007ffeeafe9998 [ 1171.919369][T20425] [ 1172.195074][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.698664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.729802][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.752064][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.990370][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.801344][T20443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1176.095520][T20484] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.18089'. [ 1176.138331][T20483] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.18088'. [ 1176.198792][T20488] x_tables: duplicate underflow at hook 2 [ 1176.251271][T20488] netlink: 'syz.3.18092': attribute type 4 has an invalid length. [ 1176.266973][T20488] netlink: 'syz.3.18092': attribute type 4 has an invalid length. [ 1176.454301][T20501] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.18098'. [ 1176.576117][T20508] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.18103'. [ 1176.791633][T20523] vlan3: entered promiscuous mode [ 1176.875082][T13628] net_ratelimit: 5 callbacks suppressed [ 1176.875098][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.983337][T20514] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.18104'. [ 1177.022953][T20527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.030710][T20527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.126119][T20538] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.18113'. [ 1177.198577][T15303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.213798][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.222887][T15308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.231022][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.057660][T10618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1178.078128][T10618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1178.113628][T10618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1178.133544][T10618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1178.148723][T10618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1178.312882][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.472631][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.481081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.596313][T20590] netlink: 'syz.4.18132': attribute type 2 has an invalid length. [ 1178.615175][T20590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18132'. [ 1178.635837][T20590] FAULT_INJECTION: forcing a failure. [ 1178.635837][T20590] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.660322][T20590] CPU: 0 UID: 0 PID: 20590 Comm: syz.4.18132 Not tainted syzkaller #0 PREEMPT(full) [ 1178.660347][T20590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1178.660358][T20590] Call Trace: [ 1178.660366][T20590] [ 1178.660374][T20590] dump_stack_lvl+0xe8/0x150 [ 1178.660407][T20590] should_fail_ex+0x40c/0x560 [ 1178.660436][T20590] should_failslab+0xa8/0x100 [ 1178.660466][T20590] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1178.660491][T20590] ? skb_clone+0x212/0x3a0 [ 1178.660512][T20590] ? skb_clone+0x212/0x3a0 [ 1178.660540][T20590] skb_clone+0x212/0x3a0 [ 1178.660566][T20590] __netlink_deliver_tap+0x413/0x860 [ 1178.660602][T20590] ? netlink_deliver_tap+0x2e/0x1b0 [ 1178.660625][T20590] netlink_deliver_tap+0x19c/0x1b0 [ 1178.660649][T20590] netlink_sendskb+0x68/0x140 [ 1178.660672][T20590] netlink_rcv_skb+0x2a4/0x4a0 [ 1178.660695][T20590] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1178.660725][T20590] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1178.660760][T20590] ? netlink_deliver_tap+0x2e/0x1b0 [ 1178.660782][T20590] ? netlink_deliver_tap+0x2e/0x1b0 [ 1178.660810][T20590] netlink_unicast+0x7bb/0x940 [ 1178.660841][T20590] netlink_sendmsg+0x813/0xb40 [ 1178.660873][T20590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1178.660901][T20590] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1178.660927][T20590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1178.660949][T20590] sock_sendmsg_nosec+0x13a/0x180 [ 1178.660979][T20590] ____sys_sendmsg+0x54e/0x850 [ 1178.661006][T20590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1178.661037][T20590] ? import_iovec+0x73/0xa0 [ 1178.661068][T20590] ___sys_sendmsg+0x2a5/0x360 [ 1178.661089][T20590] ? __lock_acquire+0x683/0x2cf0 [ 1178.661119][T20590] ? __pfx____sys_sendmsg+0x10/0x10 [ 1178.661176][T20590] ? __fget_files+0x2a/0x420 [ 1178.661201][T20590] ? __fget_files+0x3a2/0x420 [ 1178.661237][T20590] __x64_sys_sendmsg+0x1b1/0x290 [ 1178.661262][T20590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1178.661301][T20590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.661322][T20590] do_syscall_64+0x174/0x580 [ 1178.661343][T20590] ? trace_irq_disable+0x3b/0x140 [ 1178.661369][T20590] ? clear_bhb_loop+0x40/0x90 [ 1178.661392][T20590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.661410][T20590] RIP: 0033:0x7f262879de99 [ 1178.661428][T20590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.661443][T20590] RSP: 002b:00007f26296ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.661463][T20590] RAX: ffffffffffffffda RBX: 00007f2628a25fa0 RCX: 00007f262879de99 [ 1178.661477][T20590] RDX: 0000000000048008 RSI: 0000200000000000 RDI: 0000000000000005 [ 1178.661489][T20590] RBP: 00007f26296ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.661501][T20590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.661513][T20590] R13: 00007f2628a26038 R14: 00007f2628a25fa0 R15: 00007ffcaf125d08 [ 1178.661544][T20590] [ 1179.148188][T20571] virt_wifi0 speed is unknown, defaulting to 1000 [ 1179.195436][T20571] lo speed is unknown, defaulting to 1000 [ 1179.274381][T20602] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.18137'. [ 1179.349768][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.752349][T15308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.808165][T20571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.833127][T20571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.841488][T20571] bridge_slave_0: entered allmulticast mode [ 1179.857140][T20571] bridge_slave_0: entered promiscuous mode [ 1179.867279][T20571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.875032][T20571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.882345][T20571] bridge_slave_1: entered allmulticast mode [ 1179.900054][T20571] bridge_slave_1: entered promiscuous mode [ 1179.988804][T20571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.049629][T20571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.148650][T20571] team0: Port device team_slave_0 added [ 1180.165935][T20571] team0: Port device team_slave_1 added [ 1180.210947][T20571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.217953][T20571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.244018][ T5628] Bluetooth: hci2: command tx timeout [ 1180.307766][T20571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.323924][T20571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.332190][T20571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.358841][T20571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.373000][T20657] netlink: 188 bytes leftover after parsing attributes in process `syz.2.18149'. [ 1180.392351][T20658] x_tables: duplicate underflow at hook 2 [ 1180.546782][T20571] hsr_slave_0: entered promiscuous mode [ 1180.553391][T20571] hsr_slave_1: entered promiscuous mode [ 1180.592695][T20571] debugfs: 'hsr0' already exists in 'hsr' [ 1180.603578][T20571] Cannot create hsr debugfs directory [ 1180.838612][T20660] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.18153'. [ 1181.065901][T20571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1181.084885][T20571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.225632][T20668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18157'. [ 1181.270516][T20668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18157'. [ 1181.345314][T20571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1181.362056][T20571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.522616][T20571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1181.540805][T20571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.656892][T20571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1181.667514][T20571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.714571][T20688] batman_adv: batadv0: Adding interface: macvtap1 [ 1181.721491][T20688] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.756963][T20688] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1181.969522][T20571] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1181.979752][T20571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1181.987637][T20571] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1181.998656][T20571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1182.006643][T20571] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1182.030299][T20571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1182.039934][T20571] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1182.052882][T20571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1182.153405][T20571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.208216][T20710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18169'. [ 1182.228295][T20571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.242859][T15321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.250018][T15321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.280121][T15321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.287309][T15321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.313885][ T5628] Bluetooth: hci2: command tx timeout [ 1182.551235][T13626] net_ratelimit: 5 callbacks suppressed [ 1182.551253][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.608395][T20726] FAULT_INJECTION: forcing a failure. [ 1182.608395][T20726] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.648385][T20726] CPU: 1 UID: 0 PID: 20726 Comm: syz.0.18175 Not tainted syzkaller #0 PREEMPT(full) [ 1182.648412][T20726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1182.648424][T20726] Call Trace: [ 1182.648431][T20726] [ 1182.648440][T20726] dump_stack_lvl+0xe8/0x150 [ 1182.648478][T20726] should_fail_ex+0x40c/0x560 [ 1182.648506][T20726] should_failslab+0xa8/0x100 [ 1182.648536][T20726] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1182.648558][T20726] ? kstrdup+0x81/0x100 [ 1182.648584][T20726] ? __kernfs_new_node+0xe6/0x980 [ 1182.648610][T20726] ? __kernfs_new_node+0xe6/0x980 [ 1182.648644][T20726] __kernfs_new_node+0xe6/0x980 [ 1182.648683][T20726] ? __pfx___kernfs_new_node+0x10/0x10 [ 1182.648719][T20726] ? kernfs_root+0x1c/0x230 [ 1182.648751][T20726] ? kernfs_root+0x1c/0x230 [ 1182.648775][T20726] ? kernfs_root+0x1c/0x230 [ 1182.648799][T20726] ? kernfs_root+0x1c/0x230 [ 1182.648829][T20726] kernfs_new_node+0xea/0x140 [ 1182.648861][T20726] kernfs_create_link+0xa7/0x200 [ 1182.648885][T20726] sysfs_do_create_link_sd+0x83/0x110 [ 1182.648915][T20726] device_add_class_symlinks+0x1cf/0x240 [ 1182.648942][T20726] device_add+0x467/0xb80 [ 1182.648969][T20726] device_create+0x269/0x300 [ 1182.648997][T20726] ? timer_init_key+0x161/0x2c0 [ 1182.649021][T20726] ? __pfx_device_create+0x10/0x10 [ 1182.649042][T20726] ? ieee80211_roc_setup+0x119/0x1d0 [ 1182.649075][T20726] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1182.649103][T20726] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 1182.649135][T20726] ? __pfx___nla_validate_parse+0x10/0x10 [ 1182.649180][T20726] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1182.649199][T20726] ? trace_kmalloc+0x2a/0xf0 [ 1182.649232][T20726] hwsim_new_radio_nl+0xd8b/0xf90 [ 1182.649277][T20726] genl_family_rcv_msg_doit+0x233/0x340 [ 1182.649315][T20726] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1182.649355][T20726] ? bpf_lsm_capable+0x9/0x20 [ 1182.649378][T20726] ? security_capable+0x7e/0x2c0 [ 1182.649403][T20726] genl_rcv_msg+0x614/0x7a0 [ 1182.649434][T20726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1182.649459][T20726] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1182.649487][T20726] ? __pfx_ref_tracker_free+0x10/0x10 [ 1182.649522][T20726] netlink_rcv_skb+0x226/0x4a0 [ 1182.649544][T20726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1182.649572][T20726] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1182.649609][T20726] ? down_read+0x2be/0x330 [ 1182.649639][T20726] genl_rcv+0x28/0x40 [ 1182.649664][T20726] netlink_unicast+0x7bb/0x940 [ 1182.649704][T20726] netlink_sendmsg+0x813/0xb40 [ 1182.649736][T20726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1182.649764][T20726] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1182.649790][T20726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1182.649812][T20726] sock_sendmsg_nosec+0x13a/0x180 [ 1182.649843][T20726] ____sys_sendmsg+0x54e/0x850 [ 1182.649870][T20726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1182.649902][T20726] ? import_iovec+0x73/0xa0 [ 1182.649935][T20726] ___sys_sendmsg+0x2a5/0x360 [ 1182.649956][T20726] ? __lock_acquire+0x683/0x2cf0 [ 1182.649988][T20726] ? __pfx____sys_sendmsg+0x10/0x10 [ 1182.650048][T20726] ? __fget_files+0x2a/0x420 [ 1182.650074][T20726] ? __fget_files+0x3a2/0x420 [ 1182.650109][T20726] __x64_sys_sendmsg+0x1b1/0x290 [ 1182.650135][T20726] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1182.650177][T20726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.650198][T20726] do_syscall_64+0x174/0x580 [ 1182.650221][T20726] ? trace_irq_disable+0x3b/0x140 [ 1182.650247][T20726] ? clear_bhb_loop+0x40/0x90 [ 1182.650272][T20726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.650291][T20726] RIP: 0033:0x7fbb1b39de99 [ 1182.650310][T20726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.650326][T20726] RSP: 002b:00007fbb1c1f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1182.650346][T20726] RAX: ffffffffffffffda RBX: 00007fbb1b625fa0 RCX: 00007fbb1b39de99 [ 1182.650361][T20726] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 1182.650374][T20726] RBP: 00007fbb1c1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.650386][T20726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1182.650398][T20726] R13: 00007fbb1b626038 R14: 00007fbb1b625fa0 R15: 00007ffc1b2f33e8 [ 1182.650429][T20726] [ 1183.079753][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.089227][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.099574][T13617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.133296][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.427209][T20571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.514978][T20571] veth0_vlan: entered promiscuous mode [ 1183.547969][T20571] veth1_vlan: entered promiscuous mode [ 1183.591366][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.599912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.655412][T20571] veth0_macvtap: entered promiscuous mode [ 1183.678807][T20754] syzkaller0: entered promiscuous mode [ 1183.690795][T20754] syzkaller0: entered allmulticast mode [ 1183.717461][T20571] veth1_macvtap: entered promiscuous mode [ 1183.747346][T20571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.768049][T20571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.784785][T15303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.805654][T15303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.844449][T15303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.854132][T15320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.117669][T15308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.129844][T15308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.161702][T13628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.174157][T20765] virt_wifi0 speed is unknown, defaulting to 1000 [ 1184.191425][T15322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.202847][T15322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.214385][T20765] lo speed is unknown, defaulting to 1000 [ 1184.231120][ T1693] block nbd3: Possible stuck request ffff888027d4e000: control (read@0,1024B). Runtime 300 seconds [ 1184.243210][ T1693] block nbd3: Possible stuck request ffff888027d4e1c0: control (read@1024,1024B). Runtime 300 seconds [ 1184.256435][ T1693] block nbd3: Possible stuck request ffff888027d4e380: control (read@2048,1024B). Runtime 300 seconds [ 1184.268704][ T1693] block nbd3: Possible stuck request ffff888027d4e540: control (read@3072,1024B). Runtime 300 seconds [ 1184.390019][ T5628] Bluetooth: hci2: command tx timeout [ 1184.466029][T20776] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18187'. [ 1185.050813][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18197'. [ 1185.196126][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.511059][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.469277][ T5628] Bluetooth: hci2: command tx timeout [ 1188.040870][T20801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1188.315014][T13619] net_ratelimit: 5 callbacks suppressed [ 1188.315032][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.512870][T20841] x_tables: duplicate underflow at hook 2 [ 1188.548259][T20841] netlink: 'syz.0.18215': attribute type 4 has an invalid length. [ 1188.590927][T20841] netlink: 'syz.0.18215': attribute type 4 has an invalid length. [ 1188.710446][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.042120][T20860] rdma_rxe: rxe_newlink: failed to add lo [ 1189.351232][T15308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.359725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.371682][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.858028][T20903] netlink: 'syz.3.18241': attribute type 2 has an invalid length. [ 1189.890626][T20903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18241'. [ 1189.901146][T20903] FAULT_INJECTION: forcing a failure. [ 1189.901146][T20903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1189.917541][T20903] CPU: 1 UID: 0 PID: 20903 Comm: syz.3.18241 Not tainted syzkaller #0 PREEMPT(full) [ 1189.917563][T20903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1189.917574][T20903] Call Trace: [ 1189.917581][T20903] [ 1189.917589][T20903] dump_stack_lvl+0xe8/0x150 [ 1189.917622][T20903] should_fail_ex+0x40c/0x560 [ 1189.917651][T20903] _copy_to_user+0x31/0xb0 [ 1189.917677][T20903] simple_read_from_buffer+0xe1/0x170 [ 1189.917709][T20903] proc_fail_nth_read+0x1bb/0x230 [ 1189.917749][T20903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1189.917779][T20903] ? rw_verify_area+0x24a/0x4c0 [ 1189.917810][T20903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1189.917836][T20903] vfs_read+0x213/0xa80 [ 1189.917860][T20903] ? __pfx___mutex_lock+0x10/0x10 [ 1189.917885][T20903] ? __pfx_vfs_read+0x10/0x10 [ 1189.917906][T20903] ? __fget_files+0x2a/0x420 [ 1189.917936][T20903] ? __fget_files+0x3a2/0x420 [ 1189.917961][T20903] ? __fget_files+0x2a/0x420 [ 1189.917994][T20903] ksys_read+0x150/0x270 [ 1189.918015][T20903] ? __pfx_ksys_read+0x10/0x10 [ 1189.918041][T20903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.918060][T20903] do_syscall_64+0x174/0x580 [ 1189.918082][T20903] ? trace_irq_disable+0x3b/0x140 [ 1189.918106][T20903] ? clear_bhb_loop+0x40/0x90 [ 1189.918130][T20903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.918149][T20903] RIP: 0033:0x7f95f2d5e6ce [ 1189.918167][T20903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1189.918184][T20903] RSP: 002b:00007f95f3bb7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1189.918205][T20903] RAX: ffffffffffffffda RBX: 00007f95f3bb86c0 RCX: 00007f95f2d5e6ce [ 1189.918218][T20903] RDX: 000000000000000f RSI: 00007f95f3bb80a0 RDI: 0000000000000006 [ 1189.918230][T20903] RBP: 00007f95f3bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.918242][T20903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.918253][T20903] R13: 00007f95f3026038 R14: 00007f95f3025fa0 R15: 00007ffe534a3328 [ 1189.918286][T20903] [ 1190.365847][T20921] x_tables: duplicate underflow at hook 2 [ 1190.397840][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.467432][T20925] netlink: 'syz.3.18248': attribute type 1 has an invalid length. [ 1190.479438][T20925] netlink: 224 bytes leftover after parsing attributes in process `syz.3.18248'. [ 1190.488858][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18248'. [ 1190.558951][T15303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.567474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.743957][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18251'. [ 1190.885786][ T5628] block nbd5: Receive control failed (result -1) [ 1191.127451][T20956] netlink: 'syz.2.18258': attribute type 1 has an invalid length. [ 1191.202477][T20962] FAULT_INJECTION: forcing a failure. [ 1191.202477][T20962] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.217936][T20962] CPU: 0 UID: 0 PID: 20962 Comm: syz.3.18263 Not tainted syzkaller #0 PREEMPT(full) [ 1191.217962][T20962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1191.217982][T20962] Call Trace: [ 1191.217991][T20962] [ 1191.217999][T20962] dump_stack_lvl+0xe8/0x150 [ 1191.218034][T20962] should_fail_ex+0x40c/0x560 [ 1191.218064][T20962] should_failslab+0xa8/0x100 [ 1191.218095][T20962] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1191.218120][T20962] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 1191.218141][T20962] ? __inet_hash_connect+0x1631/0x25a0 [ 1191.218167][T20962] ? __inet_hash_connect+0x1631/0x25a0 [ 1191.218199][T20962] __inet_hash_connect+0x1631/0x25a0 [ 1191.218240][T20962] ? __inet_hash_connect+0x5ce/0x25a0 [ 1191.218271][T20962] ? __pfx___inet_hash_connect+0x10/0x10 [ 1191.218294][T20962] ? lockdep_hardirqs_on+0x7a/0x110 [ 1191.218323][T20962] ? inet_hash_connect+0xf1/0x380 [ 1191.218354][T20962] tcp_v4_connect+0xcee/0x1950 [ 1191.218375][T20962] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1191.218412][T20962] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1191.218445][T20962] __inet_stream_connect+0x258/0xe00 [ 1191.218472][T20962] ? rcu_is_watching+0x15/0xb0 [ 1191.218492][T20962] ? __pfx___inet_stream_connect+0x10/0x10 [ 1191.218510][T20962] ? __kasan_kmalloc+0x93/0xb0 [ 1191.218538][T20962] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1191.218562][T20962] ? __kmalloc_cache_noprof+0x150/0x660 [ 1191.218585][T20962] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1191.218615][T20962] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1191.218645][T20962] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 1191.218670][T20962] ? tcp_sendmsg_locked+0x5c1/0x55c0 [ 1191.218701][T20962] ? register_lock_class+0x31/0x2e0 [ 1191.218731][T20962] ? __lock_acquire+0x683/0x2cf0 [ 1191.218770][T20962] ? smc_switch_to_fallback+0xabc/0xd30 [ 1191.218797][T20962] ? __mutex_unlock_slowpath+0x731/0x900 [ 1191.218827][T20962] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1191.218855][T20962] ? tcp_sendmsg+0x21/0x50 [ 1191.218879][T20962] ? __local_bh_enable_ip+0xd0/0x130 [ 1191.218907][T20962] tcp_sendmsg+0x2f/0x50 [ 1191.218929][T20962] smc_sendmsg+0x250/0x4d0 [ 1191.218953][T20962] ? __pfx_smc_sendmsg+0x10/0x10 [ 1191.218979][T20962] sock_sendmsg_nosec+0x13a/0x180 [ 1191.219011][T20962] ____sys_sendmsg+0x54e/0x850 [ 1191.219037][T20962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1191.219067][T20962] ? import_iovec+0x73/0xa0 [ 1191.219098][T20962] ___sys_sendmsg+0x2a5/0x360 [ 1191.219118][T20962] ? __lock_acquire+0x683/0x2cf0 [ 1191.219148][T20962] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.219205][T20962] ? __fget_files+0x2a/0x420 [ 1191.219230][T20962] ? __fget_files+0x3a2/0x420 [ 1191.219264][T20962] __x64_sys_sendmsg+0x1b1/0x290 [ 1191.219287][T20962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1191.219325][T20962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.219345][T20962] do_syscall_64+0x174/0x580 [ 1191.219367][T20962] ? trace_irq_disable+0x3b/0x140 [ 1191.219391][T20962] ? clear_bhb_loop+0x40/0x90 [ 1191.219415][T20962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.219434][T20962] RIP: 0033:0x7f95f2d9de99 [ 1191.219452][T20962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.219468][T20962] RSP: 002b:00007f95f3bb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.219487][T20962] RAX: ffffffffffffffda RBX: 00007f95f3025fa0 RCX: 00007f95f2d9de99 [ 1191.219500][T20962] RDX: 00000000200048cc RSI: 00002000000007c0 RDI: 0000000000000003 [ 1191.219512][T20962] RBP: 00007f95f3bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.219523][T20962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.219535][T20962] R13: 00007f95f3026038 R14: 00007f95f3025fa0 R15: 00007ffe534a3328 [ 1191.219569][T20962] [ 1191.235317][T20956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1191.288560][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.497814][T20980] FAULT_INJECTION: forcing a failure. [ 1191.497814][T20980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.502739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.543761][T20980] CPU: 1 UID: 0 PID: 20980 Comm: syz.3.18265 Not tainted syzkaller #0 PREEMPT(full) [ 1191.543785][T20980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1191.543796][T20980] Call Trace: [ 1191.543805][T20980] [ 1191.543813][T20980] dump_stack_lvl+0xe8/0x150 [ 1191.543847][T20980] should_fail_ex+0x40c/0x560 [ 1191.543875][T20980] _copy_from_user+0x2d/0xb0 [ 1191.543894][T20980] ___sys_sendmsg+0x1c6/0x360 [ 1191.543916][T20980] ? __lock_acquire+0x683/0x2cf0 [ 1191.543945][T20980] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.543999][T20980] ? __fget_files+0x2a/0x420 [ 1191.544024][T20980] ? __fget_files+0x3a2/0x420 [ 1191.544058][T20980] __x64_sys_sendmsg+0x1b1/0x290 [ 1191.544083][T20980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1191.544121][T20980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.544142][T20980] do_syscall_64+0x174/0x580 [ 1191.544163][T20980] ? trace_irq_disable+0x3b/0x140 [ 1191.544188][T20980] ? clear_bhb_loop+0x40/0x90 [ 1191.544209][T20980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.544228][T20980] RIP: 0033:0x7f95f2d9de99 [ 1191.544248][T20980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.544263][T20980] RSP: 002b:00007f95f3b97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.544284][T20980] RAX: ffffffffffffffda RBX: 00007f95f3026090 RCX: 00007f95f2d9de99 [ 1191.544297][T20980] RDX: 0000000014008080 RSI: 00002000000013c0 RDI: 0000000000000003 [ 1191.544309][T20980] RBP: 00007f95f3b97090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.544321][T20980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.544332][T20980] R13: 00007f95f3026128 R14: 00007f95f3026090 R15: 00007ffe534a3328 [ 1191.544362][T20980] [ 1191.841409][T20960] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1192.066308][T20995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18272'. [ 1192.110939][T20997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18273'. [ 1192.797429][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18288'. [ 1193.371105][T21039] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.18293'. [ 1193.634738][T21056] FAULT_INJECTION: forcing a failure. [ 1193.634738][T21056] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.690156][T21056] CPU: 0 UID: 0 PID: 21056 Comm: syz.2.18301 Not tainted syzkaller #0 PREEMPT(full) [ 1193.690182][T21056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1193.690193][T21056] Call Trace: [ 1193.690200][T21056] [ 1193.690208][T21056] dump_stack_lvl+0xe8/0x150 [ 1193.690238][T21056] should_fail_ex+0x40c/0x560 [ 1193.690265][T21056] should_failslab+0xa8/0x100 [ 1193.690294][T21056] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1193.690318][T21056] ? kstrdup+0x81/0x100 [ 1193.690342][T21056] ? __kernfs_new_node+0xe6/0x980 [ 1193.690366][T21056] ? __kernfs_new_node+0xe6/0x980 [ 1193.690400][T21056] __kernfs_new_node+0xe6/0x980 [ 1193.690445][T21056] ? __pfx___kernfs_new_node+0x10/0x10 [ 1193.690472][T21056] ? kernfs_root+0x1c/0x230 [ 1193.690505][T21056] ? kernfs_root+0x1c/0x230 [ 1193.690529][T21056] ? kernfs_root+0x1c/0x230 [ 1193.690551][T21056] ? kernfs_root+0x1c/0x230 [ 1193.690580][T21056] kernfs_new_node+0xea/0x140 [ 1193.690612][T21056] kernfs_create_link+0xa7/0x200 [ 1193.690636][T21056] sysfs_do_create_link_sd+0x83/0x110 [ 1193.690664][T21056] device_add_class_symlinks+0x1cf/0x240 [ 1193.690689][T21056] device_add+0x467/0xb80 [ 1193.690713][T21056] device_create+0x269/0x300 [ 1193.690739][T21056] ? timer_init_key+0x161/0x2c0 [ 1193.690763][T21056] ? __pfx_device_create+0x10/0x10 [ 1193.690789][T21056] ? ieee80211_roc_setup+0x119/0x1d0 [ 1193.690819][T21056] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1193.690846][T21056] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 1193.690877][T21056] ? __pfx___nla_validate_parse+0x10/0x10 [ 1193.690918][T21056] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1193.690936][T21056] ? trace_kmalloc+0x2a/0xf0 [ 1193.690967][T21056] hwsim_new_radio_nl+0xd8b/0xf90 [ 1193.691012][T21056] genl_family_rcv_msg_doit+0x233/0x340 [ 1193.691045][T21056] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1193.691085][T21056] ? bpf_lsm_capable+0x9/0x20 [ 1193.691109][T21056] ? security_capable+0x7e/0x2c0 [ 1193.691135][T21056] genl_rcv_msg+0x614/0x7a0 [ 1193.691168][T21056] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1193.691194][T21056] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1193.691222][T21056] ? __pfx_ref_tracker_free+0x10/0x10 [ 1193.691257][T21056] netlink_rcv_skb+0x226/0x4a0 [ 1193.691281][T21056] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1193.691309][T21056] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1193.691347][T21056] ? down_read+0x2be/0x330 [ 1193.691377][T21056] genl_rcv+0x28/0x40 [ 1193.691400][T21056] netlink_unicast+0x7bb/0x940 [ 1193.691438][T21056] netlink_sendmsg+0x813/0xb40 [ 1193.691472][T21056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1193.691499][T21056] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1193.691524][T21056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1193.691546][T21056] sock_sendmsg_nosec+0x13a/0x180 [ 1193.691576][T21056] ____sys_sendmsg+0x54e/0x850 [ 1193.691604][T21056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1193.691635][T21056] ? import_iovec+0x73/0xa0 [ 1193.691667][T21056] ___sys_sendmsg+0x2a5/0x360 [ 1193.691686][T21056] ? __lock_acquire+0x683/0x2cf0 [ 1193.691716][T21056] ? __pfx____sys_sendmsg+0x10/0x10 [ 1193.691774][T21056] ? __fget_files+0x2a/0x420 [ 1193.691799][T21056] ? __fget_files+0x3a2/0x420 [ 1193.691836][T21056] __x64_sys_sendmsg+0x1b1/0x290 [ 1193.691861][T21056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1193.691898][T21056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.691919][T21056] do_syscall_64+0x174/0x580 [ 1193.691941][T21056] ? trace_irq_disable+0x3b/0x140 [ 1193.691966][T21056] ? clear_bhb_loop+0x40/0x90 [ 1193.691986][T21056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.692005][T21056] RIP: 0033:0x7fe77139de99 [ 1193.692023][T21056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.692040][T21056] RSP: 002b:00007fe7721b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1193.692061][T21056] RAX: ffffffffffffffda RBX: 00007fe771625fa0 RCX: 00007fe77139de99 [ 1193.692074][T21056] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 1193.692084][T21056] RBP: 00007fe7721b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.692096][T21056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1193.692107][T21056] R13: 00007fe771626038 R14: 00007fe771625fa0 R15: 00007ffeeafe9998 [ 1193.692139][T21056] [ 1193.880788][T15303] net_ratelimit: 2 callbacks suppressed [ 1193.880805][T15303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.115078][T21065] FAULT_INJECTION: forcing a failure. [ 1194.115078][T21065] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.153764][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.158078][T21065] CPU: 0 UID: 0 PID: 21065 Comm: syz.4.18306 Not tainted syzkaller #0 PREEMPT(full) [ 1194.158102][T21065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1194.158113][T21065] Call Trace: [ 1194.158121][T21065] [ 1194.158133][T21065] dump_stack_lvl+0xe8/0x150 [ 1194.158166][T21065] should_fail_ex+0x40c/0x560 [ 1194.158194][T21065] should_failslab+0xa8/0x100 [ 1194.158224][T21065] __kmalloc_noprof+0xfe/0x720 [ 1194.158248][T21065] ? enqueue_to_backlog+0x6ab/0xef0 [ 1194.158274][T21065] ? ___neigh_create+0x6d2/0x22b0 [ 1194.158300][T21065] ? ___neigh_create+0x6d2/0x22b0 [ 1194.158333][T21065] ___neigh_create+0x6d2/0x22b0 [ 1194.158370][T21065] ? __ipv6_neigh_lookup_noref+0x4de/0x6c0 [ 1194.158391][T21065] ? lockdep_hardirqs_on+0x7a/0x110 [ 1194.158422][T21065] ip6_finish_output2+0x6d6/0x13c0 [ 1194.158442][T21065] ? ip6_mtu+0x38c/0x490 [ 1194.158473][T21065] ? ip6_output+0x11e/0x540 [ 1194.158498][T21065] ip6_output+0x337/0x540 [ 1194.158528][T21065] ip6_mr_output+0x53e/0x1170 [ 1194.158562][T21065] ? ip6_mr_output+0x1f3/0x1170 [ 1194.158590][T21065] ? __pfx_ip6_mr_output+0x10/0x10 [ 1194.158619][T21065] ? __ip6_local_out+0x15c/0x940 [ 1194.158643][T21065] ? __ip6_local_out+0x8f8/0x940 [ 1194.158663][T21065] ? __ip6_local_out+0x15c/0x940 [ 1194.158694][T21065] ? __pfx___ip6_local_out+0x10/0x10 [ 1194.158732][T21065] ? ip6_local_out+0x16e/0x190 [ 1194.158749][T21065] ? ip6_send_skb+0x10a/0x380 [ 1194.158778][T21065] ip6_send_skb+0x1cd/0x380 [ 1194.158808][T21065] udp_v6_send_skb+0xab2/0x13a0 [ 1194.158850][T21065] udpv6_sendmsg+0x1e44/0x2610 [ 1194.158892][T21065] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1194.158915][T21065] ? rcu_is_watching+0x15/0xb0 [ 1194.158934][T21065] ? __up_read+0x29c/0x930 [ 1194.158995][T21065] ? inet_send_prepare+0x5b/0x260 [ 1194.159017][T21065] ? inet6_sendmsg+0xe4/0x120 [ 1194.159040][T21065] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1194.159061][T21065] sock_sendmsg_nosec+0x90/0x180 [ 1194.159090][T21065] ____sys_sendmsg+0x54e/0x850 [ 1194.159117][T21065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1194.159148][T21065] ? import_iovec+0x73/0xa0 [ 1194.159180][T21065] ___sys_sendmsg+0x2a5/0x360 [ 1194.159200][T21065] ? __lock_acquire+0x683/0x2cf0 [ 1194.159229][T21065] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.159256][T21065] ? kstrtouint+0x6e/0xe0 [ 1194.159306][T21065] ? __fget_files+0x2a/0x420 [ 1194.159331][T21065] ? __fget_files+0x3a2/0x420 [ 1194.159364][T21065] __sys_sendmmsg+0x273/0x4d0 [ 1194.159391][T21065] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1194.159423][T21065] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1194.159460][T21065] ? ksys_write+0x242/0x270 [ 1194.159482][T21065] ? __pfx_ksys_write+0x10/0x10 [ 1194.159508][T21065] __x64_sys_sendmmsg+0xa0/0xc0 [ 1194.159530][T21065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.159551][T21065] do_syscall_64+0x174/0x580 [ 1194.159572][T21065] ? trace_irq_disable+0x3b/0x140 [ 1194.159596][T21065] ? clear_bhb_loop+0x40/0x90 [ 1194.159619][T21065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.159638][T21065] RIP: 0033:0x7f262879de99 [ 1194.159656][T21065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.159672][T21065] RSP: 002b:00007f26296ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1194.159698][T21065] RAX: ffffffffffffffda RBX: 00007f2628a25fa0 RCX: 00007f262879de99 [ 1194.159711][T21065] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 1194.159724][T21065] RBP: 00007f26296ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.159735][T21065] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000002 [ 1194.159747][T21065] R13: 00007f2628a26038 R14: 00007f2628a25fa0 R15: 00007ffcaf125d08 [ 1194.159778][T21065] [ 1194.566418][T21075] syzkaller0: entered promiscuous mode [ 1194.579371][T21075] syzkaller0: entered allmulticast mode [ 1194.909557][T21093] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.18314'. [ 1195.107884][T21096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.115493][T21096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.138450][T15308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.146816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.189295][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.336780][T21104] netlink: 'syz.2.18317': attribute type 1 has an invalid length. [ 1195.359927][T21104] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18317'. [ 1195.727946][T21129] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.18326'. [ 1196.145466][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18333'. [ 1196.175778][T21145] FAULT_INJECTION: forcing a failure. [ 1196.175778][T21145] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.194461][T21145] CPU: 1 UID: 0 PID: 21145 Comm: syz.0.18333 Not tainted syzkaller #0 PREEMPT(full) [ 1196.194486][T21145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1196.194498][T21145] Call Trace: [ 1196.194506][T21145] [ 1196.194514][T21145] dump_stack_lvl+0xe8/0x150 [ 1196.194547][T21145] should_fail_ex+0x40c/0x560 [ 1196.194576][T21145] should_failslab+0xa8/0x100 [ 1196.194606][T21145] __kmalloc_noprof+0xfe/0x720 [ 1196.194633][T21145] ? fib6_info_alloc+0x30/0xf0 [ 1196.194657][T21145] ? fib6_info_alloc+0x30/0xf0 [ 1196.194687][T21145] fib6_info_alloc+0x30/0xf0 [ 1196.194712][T21145] ip6_route_info_create+0x149/0x890 [ 1196.194746][T21145] ip6_route_add+0x49/0x1b0 [ 1196.194775][T21145] inet6_rtm_newroute+0x267/0x1a30 [ 1196.194808][T21145] ? kasan_quarantine_put+0xbb/0x1f0 [ 1196.194832][T21145] ? lockdep_hardirqs_on+0x7a/0x110 [ 1196.194858][T21145] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1196.194881][T21145] ? nlmon_xmit+0xb0/0x100 [ 1196.194907][T21145] ? kmem_cache_free+0x182/0x650 [ 1196.194943][T21145] ? __lock_acquire+0x683/0x2cf0 [ 1196.194974][T21145] ? __dev_queue_xmit+0x29b/0x3820 [ 1196.195001][T21145] ? __local_bh_enable_ip+0xd0/0x130 [ 1196.195025][T21145] ? lockdep_hardirqs_on+0x7a/0x110 [ 1196.195082][T21145] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1196.195105][T21145] rtnetlink_rcv_msg+0x802/0xc00 [ 1196.195130][T21145] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1196.195150][T21145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1196.195168][T21145] ? ref_tracker_free+0x689/0x830 [ 1196.195196][T21145] ? __pfx_ref_tracker_free+0x10/0x10 [ 1196.195231][T21145] netlink_rcv_skb+0x226/0x4a0 [ 1196.195255][T21145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1196.195277][T21145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1196.195311][T21145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1196.195333][T21145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1196.195360][T21145] netlink_unicast+0x7bb/0x940 [ 1196.195392][T21145] netlink_sendmsg+0x813/0xb40 [ 1196.195424][T21145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.195451][T21145] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1196.195478][T21145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.195500][T21145] sock_sendmsg_nosec+0x13a/0x180 [ 1196.195529][T21145] ____sys_sendmsg+0x54e/0x850 [ 1196.195556][T21145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1196.195591][T21145] ? import_iovec+0x73/0xa0 [ 1196.195623][T21145] ___sys_sendmsg+0x2a5/0x360 [ 1196.195644][T21145] ? __lock_acquire+0x683/0x2cf0 [ 1196.195675][T21145] ? __pfx____sys_sendmsg+0x10/0x10 [ 1196.195703][T21145] ? kstrtouint+0x6e/0xe0 [ 1196.195752][T21145] ? __fget_files+0x2a/0x420 [ 1196.195777][T21145] ? __fget_files+0x3a2/0x420 [ 1196.195813][T21145] __sys_sendmmsg+0x273/0x4d0 [ 1196.195841][T21145] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1196.195872][T21145] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1196.195910][T21145] ? ksys_write+0x242/0x270 [ 1196.195931][T21145] ? __pfx_ksys_write+0x10/0x10 [ 1196.195957][T21145] __x64_sys_sendmmsg+0xa0/0xc0 [ 1196.195980][T21145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.196000][T21145] do_syscall_64+0x174/0x580 [ 1196.196021][T21145] ? trace_irq_disable+0x3b/0x140 [ 1196.196046][T21145] ? clear_bhb_loop+0x40/0x90 [ 1196.196075][T21145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.196094][T21145] RIP: 0033:0x7fbb1b39de99 [ 1196.196112][T21145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.196128][T21145] RSP: 002b:00007fbb1c1f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1196.196147][T21145] RAX: ffffffffffffffda RBX: 00007fbb1b625fa0 RCX: 00007fbb1b39de99 [ 1196.196161][T21145] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1196.196174][T21145] RBP: 00007fbb1c1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.196187][T21145] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 1196.196199][T21145] R13: 00007fbb1b626038 R14: 00007fbb1b625fa0 R15: 00007ffc1b2f33e8 [ 1196.196230][T21145] [ 1196.591844][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.628463][T21149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18336'. [ 1196.650289][T15308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.658613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.762288][T21157] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.18339'. [ 1196.869966][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.878335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.045531][T21171] netlink: 'syz.3.18343': attribute type 3 has an invalid length. [ 1197.083678][T21174] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18344'. [ 1197.155482][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18347'. [ 1197.210054][T21181] xt_l2tp: invalid flags combination: 8 [ 1197.223210][T21181] netlink: 'syz.2.18347': attribute type 1 has an invalid length. [ 1197.245146][T21183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18348'. [ 1197.258968][T21183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18348'. [ 1197.864004][T21208] syzkaller0: entered promiscuous mode [ 1197.875215][T21208] syzkaller0: entered allmulticast mode [ 1198.112130][T21219] bond0: entered allmulticast mode [ 1198.117316][T21219] bond_slave_0: entered allmulticast mode [ 1198.124425][T21219] bond_slave_1: entered allmulticast mode [ 1199.598021][T15323] net_ratelimit: 2 callbacks suppressed [ 1199.598038][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.606092][T21303] batadv0: entered promiscuous mode [ 1199.618867][T21303] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1199.657309][T21303] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1199.679754][T21303] batadv0: left promiscuous mode [ 1199.708769][T21309] FAULT_INJECTION: forcing a failure. [ 1199.708769][T21309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.724727][T21309] CPU: 1 UID: 0 PID: 21309 Comm: syz.0.18402 Not tainted syzkaller #0 PREEMPT(full) [ 1199.724750][T21309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1199.724762][T21309] Call Trace: [ 1199.724769][T21309] [ 1199.724776][T21309] dump_stack_lvl+0xe8/0x150 [ 1199.724808][T21309] should_fail_ex+0x40c/0x560 [ 1199.724835][T21309] _copy_from_iter+0x4ff/0x1660 [ 1199.724870][T21309] ? __pfx__copy_from_iter+0x10/0x10 [ 1199.724903][T21309] ? l2cap_sock_alloc_skb_cb+0x28e/0x490 [ 1199.724925][T21309] ? skb_put+0x112/0x210 [ 1199.724946][T21309] l2cap_skbuff_fromiovec+0x9f/0x520 [ 1199.724974][T21309] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1199.724996][T21309] ? skb_put+0x112/0x210 [ 1199.725018][T21309] l2cap_chan_send+0x3e5/0x22f0 [ 1199.725049][T21309] ? bt_sock_wait_ready+0x4f8/0x600 [ 1199.725079][T21309] ? l2cap_sock_sendmsg+0x324/0x4d0 [ 1199.725102][T21309] ? __pfx_l2cap_chan_send+0x10/0x10 [ 1199.725131][T21309] ? l2cap_sock_sendmsg+0x2ce/0x4d0 [ 1199.725153][T21309] ? l2cap_sock_sendmsg+0x2ce/0x4d0 [ 1199.725173][T21309] ? __local_bh_enable_ip+0xd0/0x130 [ 1199.725201][T21309] l2cap_sock_sendmsg+0x33a/0x4d0 [ 1199.725224][T21309] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 1199.725259][T21309] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1199.725286][T21309] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 1199.725306][T21309] sock_sendmsg_nosec+0x13a/0x180 [ 1199.725335][T21309] ____sys_sendmsg+0x54e/0x850 [ 1199.725363][T21309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1199.725393][T21309] ? import_iovec+0x73/0xa0 [ 1199.725423][T21309] ___sys_sendmsg+0x2a5/0x360 [ 1199.725444][T21309] ? __lock_acquire+0x683/0x2cf0 [ 1199.725473][T21309] ? __pfx____sys_sendmsg+0x10/0x10 [ 1199.725499][T21309] ? kstrtouint+0x6e/0xe0 [ 1199.725543][T21309] ? __fget_files+0x2a/0x420 [ 1199.725566][T21309] ? __fget_files+0x3a2/0x420 [ 1199.725601][T21309] __sys_sendmmsg+0x273/0x4d0 [ 1199.725629][T21309] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1199.725660][T21309] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1199.725696][T21309] ? ksys_write+0x242/0x270 [ 1199.725716][T21309] ? __pfx_ksys_write+0x10/0x10 [ 1199.725738][T21309] __x64_sys_sendmmsg+0xa0/0xc0 [ 1199.725756][T21309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.725772][T21309] do_syscall_64+0x174/0x580 [ 1199.725790][T21309] ? trace_irq_disable+0x3b/0x140 [ 1199.725810][T21309] ? clear_bhb_loop+0x40/0x90 [ 1199.725828][T21309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.725846][T21309] RIP: 0033:0x7fbb1b39de99 [ 1199.725861][T21309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.725874][T21309] RSP: 002b:00007fbb1c1f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1199.725891][T21309] RAX: ffffffffffffffda RBX: 00007fbb1b625fa0 RCX: 00007fbb1b39de99 [ 1199.725902][T21309] RDX: 0000000000000001 RSI: 00002000000057c0 RDI: 0000000000000004 [ 1199.725912][T21309] RBP: 00007fbb1c1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.725922][T21309] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1199.725931][T21309] R13: 00007fbb1b626038 R14: 00007fbb1b625fa0 R15: 00007ffc1b2f33e8 [ 1199.725956][T21309] [ 1199.746536][T21304] batadv0: entered promiscuous mode [ 1199.771489][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.851763][T21304] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1200.091503][T21304] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1200.105591][T21304] batadv0: left promiscuous mode [ 1200.458452][T21339] FAULT_INJECTION: forcing a failure. [ 1200.458452][T21339] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.480362][T21339] CPU: 1 UID: 0 PID: 21339 Comm: syz.0.18414 Not tainted syzkaller #0 PREEMPT(full) [ 1200.480387][T21339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1200.480398][T21339] Call Trace: [ 1200.480406][T21339] [ 1200.480415][T21339] dump_stack_lvl+0xe8/0x150 [ 1200.480448][T21339] should_fail_ex+0x40c/0x560 [ 1200.480478][T21339] should_failslab+0xa8/0x100 [ 1200.480507][T21339] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1200.480532][T21339] ? skb_clone+0x212/0x3a0 [ 1200.480553][T21339] ? skb_clone+0x212/0x3a0 [ 1200.480582][T21339] skb_clone+0x212/0x3a0 [ 1200.480608][T21339] __netlink_deliver_tap+0x413/0x860 [ 1200.480643][T21339] ? netlink_deliver_tap+0x2e/0x1b0 [ 1200.480668][T21339] netlink_deliver_tap+0x19c/0x1b0 [ 1200.480691][T21339] netlink_dump+0x95b/0xee0 [ 1200.480725][T21339] ? __pfx_netlink_dump+0x10/0x10 [ 1200.480759][T21339] ? netlink_recvmsg+0x5bf/0xa50 [ 1200.480781][T21339] ? kmem_cache_free+0x182/0x650 [ 1200.480816][T21339] netlink_recvmsg+0x683/0xa50 [ 1200.480838][T21339] ? __might_fault+0xaf/0x130 [ 1200.480869][T21339] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1200.480897][T21339] ? __lock_acquire+0x683/0x2cf0 [ 1200.480931][T21339] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1200.480954][T21339] sock_recvmsg_nosec+0x130/0x170 [ 1200.480983][T21339] ____sys_recvmsg+0x3e3/0x4a0 [ 1200.481015][T21339] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1200.481055][T21339] ? import_iovec+0x73/0xa0 [ 1200.481087][T21339] ___sys_recvmsg+0x213/0x5a0 [ 1200.481116][T21339] ? __pfx____sys_recvmsg+0x10/0x10 [ 1200.481144][T21339] ? __fget_files+0x2a/0x420 [ 1200.481208][T21339] do_recvmmsg+0x31a/0x7f0 [ 1200.481241][T21339] ? __pfx_do_recvmmsg+0x10/0x10 [ 1200.481277][T21339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1200.481303][T21339] ? __fget_files+0x3a2/0x420 [ 1200.481340][T21339] __x64_sys_recvmmsg+0x198/0x250 [ 1200.481367][T21339] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1200.481400][T21339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.481421][T21339] do_syscall_64+0x174/0x580 [ 1200.481444][T21339] ? trace_irq_disable+0x3b/0x140 [ 1200.481469][T21339] ? clear_bhb_loop+0x40/0x90 [ 1200.481493][T21339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.481512][T21339] RIP: 0033:0x7fbb1b39de99 [ 1200.481530][T21339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.481546][T21339] RSP: 002b:00007fbb1c1f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1200.481566][T21339] RAX: ffffffffffffffda RBX: 00007fbb1b625fa0 RCX: 00007fbb1b39de99 [ 1200.481580][T21339] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 1200.481592][T21339] RBP: 00007fbb1c1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.481605][T21339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1200.481616][T21339] R13: 00007fbb1b626038 R14: 00007fbb1b625fa0 R15: 00007ffc1b2f33e8 [ 1200.481649][T21339] [ 1200.832752][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.886121][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.894507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.161329][T21364] __nla_validate_parse: 7 callbacks suppressed [ 1201.161348][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18424'. [ 1201.213202][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18424'. [ 1201.259756][T21367] netlink: 'syz.3.18420': attribute type 1 has an invalid length. [ 1201.910691][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.987106][T21402] rdma_rxe: rxe_newlink: failed to add lo [ 1202.151614][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.160041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.182198][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.190527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.250778][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18443'. [ 1202.352836][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18447'. [ 1202.405406][ T29] audit: type=1107 audit(1785171005.114:17): pid=21427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1202.628510][T21436] virt_wifi0 speed is unknown, defaulting to 1000 [ 1202.637263][T21436] lo speed is unknown, defaulting to 1000 [ 1203.071692][T21458] syzkaller0: entered promiscuous mode [ 1203.083420][T21458] syzkaller0: entered allmulticast mode [ 1203.296516][T21465] rdma_rxe: rxe_newlink: failed to add lo [ 1204.108118][T21507] rdma_rxe: rxe_newlink: failed to add lo [ 1204.388173][T21526] x_tables: duplicate underflow at hook 2 [ 1204.415751][T21523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1204.446613][T21523] lo speed is unknown, defaulting to 1000 [ 1204.550799][T21535] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.18489'. [ 1205.031194][T13626] net_ratelimit: 2 callbacks suppressed [ 1205.031222][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.242882][T21566] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.18501'. [ 1205.324820][T21568] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.18502'. [ 1205.418268][T21571] netlink: 'syz.0.18500': attribute type 1 has an invalid length. [ 1205.472354][T21571] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1205.822476][T21588] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.18510'. [ 1205.826398][T21593] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.18512'. [ 1206.079701][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.094023][T21591] syzkaller1: entered allmulticast mode [ 1206.274240][T21614] FAULT_INJECTION: forcing a failure. [ 1206.274240][T21614] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.287030][T21614] CPU: 0 UID: 0 PID: 21614 Comm: syz.2.18520 Not tainted syzkaller #0 PREEMPT(full) [ 1206.287055][T21614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1206.287066][T21614] Call Trace: [ 1206.287074][T21614] [ 1206.287083][T21614] dump_stack_lvl+0xe8/0x150 [ 1206.287117][T21614] should_fail_ex+0x40c/0x560 [ 1206.287147][T21614] should_failslab+0xa8/0x100 [ 1206.287177][T21614] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1206.287201][T21614] ? dst_alloc+0x105/0x170 [ 1206.287224][T21614] ? dst_alloc+0x105/0x170 [ 1206.287248][T21614] ? fib_lookup+0x76/0x440 [ 1206.287281][T21614] dst_alloc+0x105/0x170 [ 1206.287311][T21614] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1206.287341][T21614] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1206.287364][T21614] ip_route_output_key_hash+0x18d/0x2a0 [ 1206.287388][T21614] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1206.287407][T21614] ? call_rcu+0x64b/0x8b0 [ 1206.287442][T21614] ip_route_output_flow+0x2a/0x150 [ 1206.287475][T21614] tcp_v4_connect+0xd86/0x1950 [ 1206.287497][T21614] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1206.287535][T21614] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1206.287570][T21614] __inet_stream_connect+0x258/0xe00 [ 1206.287600][T21614] ? rcu_is_watching+0x15/0xb0 [ 1206.287619][T21614] ? __pfx___inet_stream_connect+0x10/0x10 [ 1206.287639][T21614] ? __kasan_kmalloc+0x93/0xb0 [ 1206.287667][T21614] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1206.287693][T21614] ? __kmalloc_cache_noprof+0x150/0x660 [ 1206.287724][T21614] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1206.287756][T21614] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1206.287786][T21614] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 1206.287811][T21614] ? tcp_sendmsg_locked+0x5c1/0x55c0 [ 1206.287843][T21614] ? register_lock_class+0x31/0x2e0 [ 1206.287875][T21614] ? __lock_acquire+0x683/0x2cf0 [ 1206.287914][T21614] ? smc_switch_to_fallback+0xabc/0xd30 [ 1206.287942][T21614] ? __mutex_unlock_slowpath+0x731/0x900 [ 1206.287977][T21614] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1206.288008][T21614] ? tcp_sendmsg+0x21/0x50 [ 1206.288033][T21614] ? __local_bh_enable_ip+0xd0/0x130 [ 1206.288062][T21614] tcp_sendmsg+0x2f/0x50 [ 1206.288085][T21614] smc_sendmsg+0x250/0x4d0 [ 1206.288110][T21614] ? __pfx_smc_sendmsg+0x10/0x10 [ 1206.288130][T21614] sock_sendmsg_nosec+0x13a/0x180 [ 1206.288160][T21614] ____sys_sendmsg+0x54e/0x850 [ 1206.288189][T21614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1206.288220][T21614] ? import_iovec+0x73/0xa0 [ 1206.288253][T21614] ___sys_sendmsg+0x2a5/0x360 [ 1206.288274][T21614] ? __lock_acquire+0x683/0x2cf0 [ 1206.288304][T21614] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.288362][T21614] ? __fget_files+0x2a/0x420 [ 1206.288390][T21614] ? __fget_files+0x3a2/0x420 [ 1206.288427][T21614] __x64_sys_sendmsg+0x1b1/0x290 [ 1206.288453][T21614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1206.288494][T21614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.288515][T21614] do_syscall_64+0x174/0x580 [ 1206.288538][T21614] ? trace_irq_disable+0x3b/0x140 [ 1206.288562][T21614] ? clear_bhb_loop+0x40/0x90 [ 1206.288586][T21614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.288605][T21614] RIP: 0033:0x7fe77139de99 [ 1206.288624][T21614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.288640][T21614] RSP: 002b:00007fe7721b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1206.288660][T21614] RAX: ffffffffffffffda RBX: 00007fe771625fa0 RCX: 00007fe77139de99 [ 1206.288674][T21614] RDX: 00000000200048cc RSI: 00002000000007c0 RDI: 0000000000000003 [ 1206.288686][T21614] RBP: 00007fe7721b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.288704][T21614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1206.288716][T21614] R13: 00007fe771626038 R14: 00007fe771625fa0 R15: 00007ffeeafe9998 [ 1206.288749][T21614] [ 1206.660043][T15323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.668363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.006035][T21634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1207.113448][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.152044][T21646] rdma_rxe: rxe_newlink: failed to add lo [ 1207.915136][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.924720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.937156][T21690] netlink: 'syz.2.18548': attribute type 11 has an invalid length. [ 1207.972778][T21690] netlink: 'syz.2.18548': attribute type 4 has an invalid length. [ 1208.149921][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.195645][T21707] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.18550'. [ 1208.731039][T21717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18538'. [ 1208.735631][T21723] [ 1208.742346][T21723] ====================================================== [ 1208.749362][T21723] WARNING: possible circular locking dependency detected [ 1208.756398][T21723] syzkaller #0 Not tainted [ 1208.760806][T21723] ------------------------------------------------------ [ 1208.767804][T21723] syz.3.18555/21723 is trying to acquire lock: [ 1208.773938][T21723] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 1208.783065][T21723] [ 1208.783065][T21723] but task is already holding lock: [ 1208.790424][T21723] ffff8880835983b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1208.799932][T21723] [ 1208.799932][T21723] which lock already depends on the new lock. [ 1208.799932][T21723] [ 1208.810316][T21723] [ 1208.810316][T21723] the existing dependency chain (in reverse order) is: [ 1208.819318][T21723] [ 1208.819318][T21723] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1208.826871][T21723] __might_fault+0xcb/0x130 [ 1208.831893][T21723] _copy_from_user+0x28/0xb0 [ 1208.836992][T21723] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 1208.843504][T21723] ip_generic_getfrag+0x149/0x2d0 [ 1208.849063][T21723] __ip6_append_data+0x3b26/0x40c0 [ 1208.854708][T21723] ip6_append_data+0x108/0x270 [ 1208.859990][T21723] rawv6_sendmsg+0x1298/0x18c0 [ 1208.865358][T21723] sock_sendmsg_nosec+0x10e/0x180 [ 1208.870915][T21723] ____sys_sendmsg+0x54e/0x850 [ 1208.876204][T21723] ___sys_sendmsg+0x2a5/0x360 [ 1208.881388][T21723] __x64_sys_sendmsg+0x1b1/0x290 [ 1208.886868][T21723] do_syscall_64+0x174/0x580 [ 1208.891968][T21723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.898367][T21723] [ 1208.898367][T21723] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1208.906602][T21723] lock_sock_nested+0x41/0x100 [ 1208.911877][T21723] inet_shutdown+0x6a/0x390 [ 1208.916889][T21723] nbd_mark_nsock_dead+0x2cb/0x550 [ 1208.922579][T21723] recv_work+0x1cee/0x1e10 [ 1208.927505][T21723] process_scheduled_works+0xa8e/0x14e0 [ 1208.933556][T21723] worker_thread+0xa47/0xfb0 [ 1208.938649][T21723] kthread+0x388/0x470 [ 1208.943258][T21723] ret_from_fork+0x514/0xb70 [ 1208.948356][T21723] ret_from_fork_asm+0x1a/0x30 [ 1208.953623][T21723] [ 1208.953623][T21723] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1208.961278][T21723] __mutex_lock+0x19d/0x1550 [ 1208.966387][T21723] nbd_queue_rq+0x373/0x1150 [ 1208.971494][T21723] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1208.977639][T21723] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1208.984534][T21723] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1208.991028][T21723] blk_mq_run_work_fn+0x16c/0x300 [ 1208.996558][T21723] process_scheduled_works+0xa8e/0x14e0 [ 1209.002611][T21723] worker_thread+0xa47/0xfb0 [ 1209.007730][T21723] kthread+0x388/0x470 [ 1209.012313][T21723] ret_from_fork+0x514/0xb70 [ 1209.017425][T21723] ret_from_fork_asm+0x1a/0x30 [ 1209.022701][T21723] [ 1209.022701][T21723] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1209.029902][T21723] __mutex_lock+0x19d/0x1550 [ 1209.035006][T21723] nbd_queue_rq+0xc1/0x1150 [ 1209.040020][T21723] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1209.046081][T21723] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1209.052947][T21723] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1209.059448][T21723] blk_mq_run_work_fn+0x16c/0x300 [ 1209.064987][T21723] process_scheduled_works+0xa8e/0x14e0 [ 1209.071048][T21723] worker_thread+0xa47/0xfb0 [ 1209.076162][T21723] kthread+0x388/0x470 [ 1209.080777][T21723] ret_from_fork+0x514/0xb70 [ 1209.085890][T21723] ret_from_fork_asm+0x1a/0x30 [ 1209.091170][T21723] [ 1209.091170][T21723] -> #3 (set->srcu){.+.+}-{0:0}: [ 1209.098285][T21723] __synchronize_srcu+0xc9/0x2f0 [ 1209.103740][T21723] elevator_switch+0x1e8/0x7b0 [ 1209.109292][T21723] elevator_change+0x2fa/0x480 [ 1209.114583][T21723] elevator_set_default+0x375/0x440 [ 1209.120298][T21723] blk_register_queue+0x3f3/0x4e0 [ 1209.125884][T21723] __add_disk+0x6cb/0xe30 [ 1209.130722][T21723] add_disk_fwnode+0x100/0x3a0 [ 1209.135994][T21723] nbd_dev_add+0x733/0xb60 [ 1209.140917][T21723] nbd_init+0x15f/0x1e0 [ 1209.145639][T21723] do_one_initcall+0x250/0x870 [ 1209.150918][T21723] do_initcall_level+0x10a/0x1a0 [ 1209.156380][T21723] do_initcalls+0x59/0xa0 [ 1209.161220][T21723] kernel_init_freeable+0x29d/0x3e0 [ 1209.166931][T21723] kernel_init+0x1d/0x1d0 [ 1209.171774][T21723] ret_from_fork+0x514/0xb70 [ 1209.176875][T21723] ret_from_fork_asm+0x1a/0x30 [ 1209.182148][T21723] [ 1209.182148][T21723] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1209.190572][T21723] __mutex_lock+0x19d/0x1550 [ 1209.195675][T21723] elevator_change+0x1af/0x480 [ 1209.200971][T21723] elevator_set_none+0xb5/0x140 [ 1209.206351][T21723] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1209.212674][T21723] nbd_start_device+0x189/0xb30 [ 1209.218033][T21723] nbd_genl_connect+0x1597/0x1c10 [ 1209.223565][T21723] genl_family_rcv_msg_doit+0x233/0x340 [ 1209.229630][T21723] genl_rcv_msg+0x614/0x7a0 [ 1209.234647][T21723] netlink_rcv_skb+0x226/0x4a0 [ 1209.239922][T21723] genl_rcv+0x28/0x40 [ 1209.244418][T21723] netlink_unicast+0x7bb/0x940 [ 1209.249717][T21723] netlink_sendmsg+0x813/0xb40 [ 1209.255008][T21723] sock_sendmsg_nosec+0x13a/0x180 [ 1209.260545][T21723] ____sys_sendmsg+0x54e/0x850 [ 1209.265816][T21723] ___sys_sendmsg+0x2a5/0x360 [ 1209.270999][T21723] __x64_sys_sendmsg+0x1b1/0x290 [ 1209.276445][T21723] do_syscall_64+0x174/0x580 [ 1209.281543][T21723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.287950][T21723] [ 1209.287950][T21723] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1209.296555][T21723] blk_alloc_queue+0x544/0x690 [ 1209.301837][T21723] __blk_mq_alloc_disk+0x194/0x390 [ 1209.307450][T21723] nbd_dev_add+0x494/0xb60 [ 1209.312367][T21723] nbd_init+0x15f/0x1e0 [ 1209.317028][T21723] do_one_initcall+0x250/0x870 [ 1209.322302][T21723] do_initcall_level+0x10a/0x1a0 [ 1209.327749][T21723] do_initcalls+0x59/0xa0 [ 1209.332586][T21723] kernel_init_freeable+0x29d/0x3e0 [ 1209.338293][T21723] kernel_init+0x1d/0x1d0 [ 1209.343133][T21723] ret_from_fork+0x514/0xb70 [ 1209.348234][T21723] ret_from_fork_asm+0x1a/0x30 [ 1209.353502][T21723] [ 1209.353502][T21723] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1209.360720][T21723] __lock_acquire+0x1520/0x2cf0 [ 1209.366099][T21723] lock_acquire+0x106/0x350 [ 1209.371132][T21723] fs_reclaim_acquire+0x71/0x100 [ 1209.376579][T21723] prepare_alloc_pages+0x15b/0x650 [ 1209.382199][T21723] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1209.388516][T21723] alloc_pages_mpol+0x212/0x380 [ 1209.393881][T21723] folio_alloc_mpol_noprof+0x39/0x160 [ 1209.399770][T21723] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1209.405567][T21723] do_wp_page+0x1163/0x4c70 [ 1209.410578][T21723] handle_mm_fault+0x1490/0x3080 [ 1209.416020][T21723] do_user_addr_fault+0x744/0x1340 [ 1209.421643][T21723] exc_page_fault+0x6a/0xc0 [ 1209.426662][T21723] asm_exc_page_fault+0x26/0x30 [ 1209.432021][T21723] rep_movs_alternative+0x4a/0xa0 [ 1209.437636][T21723] _copy_to_iter+0x49d/0x1810 [ 1209.442821][T21723] seq_read_iter+0xaae/0xca0 [ 1209.447932][T21723] seq_read+0x367/0x480 [ 1209.452594][T21723] vfs_read+0x213/0xa80 [ 1209.457256][T21723] ksys_read+0x150/0x270 [ 1209.462001][T21723] do_syscall_64+0x174/0x580 [ 1209.467100][T21723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.473510][T21723] [ 1209.473510][T21723] other info that might help us debug this: [ 1209.473510][T21723] [ 1209.483728][T21723] Chain exists of: [ 1209.483728][T21723] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1209.483728][T21723] [ 1209.496327][T21723] Possible unsafe locking scenario: [ 1209.496327][T21723] [ 1209.503769][T21723] CPU0 CPU1 [ 1209.509117][T21723] ---- ---- [ 1209.514469][T21723] rlock(&mm->mmap_lock); [ 1209.518876][T21723] lock(sk_lock-AF_INET6); [ 1209.525887][T21723] lock(&mm->mmap_lock); [ 1209.532721][T21723] lock(fs_reclaim); [ 1209.536688][T21723] [ 1209.536688][T21723] *** DEADLOCK *** [ 1209.536688][T21723] [ 1209.544811][T21723] 3 locks held by syz.3.18555/21723: [ 1209.550080][T21723] #0: ffff88807fc02630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1209.559130][T21723] #1: ffff888053227758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1209.567924][T21723] #2: ffff8880835983b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1209.577835][T21723] [ 1209.577835][T21723] stack backtrace: [ 1209.583705][T21723] CPU: 1 UID: 0 PID: 21723 Comm: syz.3.18555 Not tainted syzkaller #0 PREEMPT(full) [ 1209.583723][T21723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1209.583732][T21723] Call Trace: [ 1209.583741][T21723] [ 1209.583749][T21723] dump_stack_lvl+0xe8/0x150 [ 1209.583772][T21723] print_circular_bug+0x2e1/0x300 [ 1209.583790][T21723] check_noncircular+0x12e/0x150 [ 1209.583808][T21723] __lock_acquire+0x1520/0x2cf0 [ 1209.583832][T21723] ? rcu_is_watching+0x15/0xb0 [ 1209.583852][T21723] ? prepare_alloc_pages+0x15b/0x650 [ 1209.583872][T21723] lock_acquire+0x106/0x350 [ 1209.583891][T21723] ? prepare_alloc_pages+0x15b/0x650 [ 1209.583913][T21723] ? ktime_get+0x1f5/0x220 [ 1209.583934][T21723] fs_reclaim_acquire+0x71/0x100 [ 1209.583954][T21723] ? prepare_alloc_pages+0x15b/0x650 [ 1209.583974][T21723] prepare_alloc_pages+0x15b/0x650 [ 1209.583996][T21723] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1209.584019][T21723] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1209.584042][T21723] ? __pfx_policy_nodemask+0x10/0x10 [ 1209.584065][T21723] ? preempt_schedule_thunk+0x16/0x40 [ 1209.584084][T21723] alloc_pages_mpol+0x212/0x380 [ 1209.584108][T21723] folio_alloc_mpol_noprof+0x39/0x160 [ 1209.584132][T21723] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1209.584155][T21723] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1209.584182][T21723] do_wp_page+0x1163/0x4c70 [ 1209.584199][T21723] ? lockdep_hardirqs_on+0x7a/0x110 [ 1209.584221][T21723] ? __pfx_do_wp_page+0x10/0x10 [ 1209.584236][T21723] ? do_raw_spin_lock+0x12b/0x2f0 [ 1209.584254][T21723] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1209.584270][T21723] ? lock_acquire+0x221/0x350 [ 1209.584292][T21723] handle_mm_fault+0x1490/0x3080 [ 1209.584314][T21723] ? handle_mm_fault+0xec/0x3080 [ 1209.584333][T21723] ? __pfx_handle_mm_fault+0x10/0x10 [ 1209.584354][T21723] ? __lock_acquire+0x683/0x2cf0 [ 1209.584376][T21723] ? lock_mm_and_find_vma+0xa7/0x340 [ 1209.584396][T21723] do_user_addr_fault+0x744/0x1340 [ 1209.584424][T21723] exc_page_fault+0x6a/0xc0 [ 1209.584442][T21723] asm_exc_page_fault+0x26/0x30 [ 1209.584463][T21723] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1209.584487][T21723] Code: 61 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1209.584501][T21723] RSP: 0018:ffffc90005d778f8 EFLAGS: 00050206 [ 1209.584515][T21723] RAX: ffffffff84d13701 RBX: ffff888054142000 RCX: 000000000000004f [ 1209.584526][T21723] RDX: 0000000000000000 RSI: ffff888054142000 RDI: 0000200000006b80 [ 1209.584537][T21723] RBP: ffffc90005d77a78 R08: ffff88805414204e R09: 1ffff1100a828409 [ 1209.584548][T21723] R10: dffffc0000000000 R11: ffffed100a82840a R12: dffffc0000000000 [ 1209.584560][T21723] R13: 0000000000000000 R14: ffffc90005d77be0 R15: 000000000000004f [ 1209.584573][T21723] ? _copy_to_iter+0x391/0x1810 [ 1209.584598][T21723] _copy_to_iter+0x49d/0x1810 [ 1209.584618][T21723] ? kasan_quarantine_put+0xbb/0x1f0 [ 1209.584642][T21723] ? __pfx__copy_to_iter+0x10/0x10 [ 1209.584662][T21723] ? proc_cgroup_show+0x6ec/0x740 [ 1209.584684][T21723] ? proc_cgroup_show+0x6e/0x740 [ 1209.584707][T21723] ? proc_single_show+0x15b/0x190 [ 1209.584727][T21723] seq_read_iter+0xaae/0xca0 [ 1209.584749][T21723] seq_read+0x367/0x480 [ 1209.584768][T21723] ? __pfx_seq_read+0x10/0x10 [ 1209.584794][T21723] ? rw_verify_area+0x24a/0x4c0 [ 1209.584818][T21723] ? __pfx_seq_read+0x10/0x10 [ 1209.584833][T21723] vfs_read+0x213/0xa80 [ 1209.584848][T21723] ? __pfx___mutex_lock+0x10/0x10 [ 1209.584867][T21723] ? __pfx_vfs_read+0x10/0x10 [ 1209.584880][T21723] ? __fget_files+0x2a/0x420 [ 1209.584902][T21723] ? __fget_files+0x3a2/0x420 [ 1209.584921][T21723] ? __fget_files+0x2a/0x420 [ 1209.584944][T21723] ksys_read+0x150/0x270 [ 1209.584959][T21723] ? __pfx_ksys_read+0x10/0x10 [ 1209.584976][T21723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.584991][T21723] do_syscall_64+0x174/0x580 [ 1209.585009][T21723] ? trace_irq_disable+0x3b/0x140 [ 1209.585028][T21723] ? clear_bhb_loop+0x40/0x90 [ 1209.585045][T21723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.585060][T21723] RIP: 0033:0x7f95f2d9de99 [ 1209.585074][T21723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.585087][T21723] RSP: 002b:00007f95f3bb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1209.585102][T21723] RAX: ffffffffffffffda RBX: 00007f95f3025fa0 RCX: 00007f95f2d9de99 [ 1209.585113][T21723] RDX: 00000000000000cf RSI: 0000200000006b80 RDI: 0000000000000009 [ 1209.585123][T21723] RBP: 00007f95f2e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1209.585133][T21723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.585142][T21723] R13: 00007f95f3026038 R14: 00007f95f3025fa0 R15: 00007ffe534a3328 [ 1209.585159][T21723] [ 1210.057821][T13626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.121814][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.760912][T15322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.769136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.152620][T10079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.202756][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.680135][T15308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.688354][T15320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.696748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.240239][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.310203][ T1693] block nbd3: Possible stuck request ffff888027d4e000: control (read@0,1024B). Runtime 330 seconds [ 1214.321103][ T1693] block nbd3: Possible stuck request ffff888027d4e1c0: control (read@1024,1024B). Runtime 330 seconds [ 1214.332397][ T1693] block nbd3: Possible stuck request ffff888027d4e380: control (read@2048,1024B). Runtime 330 seconds [ 1214.343411][ T1693] block nbd3: Possible stuck request ffff888027d4e540: control (read@3072,1024B). Runtime 330 seconds [ 1215.283075][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.230151][T15322] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1216.314422][T13619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.362316][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.510056][T15322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.518315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.395946][T10079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog