last executing test programs: 5.440359585s ago: executing program 1 (id=18094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000000)='$', 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000040)=0x1, 0x4) 4.950291222s ago: executing program 1 (id=18097): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x2) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000000c0)={0x7fffffffffffeb3}) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000000c0)={0x7fffffffffffeb3}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write$6lowpan_enable(r7, &(0x7f0000000040)='1', 0x1) (async) write$6lowpan_enable(r7, &(0x7f0000000040)='1', 0x1) 4.903268381s ago: executing program 0 (id=18098): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x10}}, 0x8000000) 4.810684464s ago: executing program 0 (id=18100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x57}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000201030000000000000000000200000018000180140001800c000100ac1414bb080002080a0101010c001980080001"], 0x38}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002b0009002dbd7000fedbdf250500000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) 4.393797184s ago: executing program 3 (id=18105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000240)}, 0x20) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0xfffffffffffffed8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}, @typed={0x0, 0xd1, 0x0, 0x0, @ipv6=@private0}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x800, 0x70bd25, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) 3.763172254s ago: executing program 4 (id=18111): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0xe8, 0x10, 0x7, 0x3, {{0x9, 0x4, 0x2, 0x1f, 0x24, 0x67, 0x0, 0x80, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x27, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x19}, 0xef4}]}, @noop]}}}}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r2, @remote, @multicast2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000004010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) 3.697132381s ago: executing program 4 (id=18112): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000600)}, 0x2004010) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) r8 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6783bc330059b2b782a15c87d51216876b5358a472cb6a71759db27d3beb72", 0x1f}], 0x1, &(0x7f0000000680)=ANY=[], 0x150}, 0x40040) recvmsg(r8, 0x0, 0x10100) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000000)={r9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400fd001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.074255961s ago: executing program 1 (id=18113): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c0000001200ff095caba283ff04b8008000f0ffff000000060040150024001d001fc411a0b5a7bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b000000", 0x4c}], 0x1}, 0x80) (fail_nth: 2) 2.073143183s ago: executing program 3 (id=18114): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @loopback}}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=""/75, &(0x7f00000000c0)=0x4b) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="5db6b73d5013a328fc0505c093200874083e577bfccdf1535d5f8f33476fd56b83ac5e442c3c84ffd06550bbadd5e1c7ebb5c2ebd84b58aa68d94af2ff3a9843aed87f3dc4b3e360afaeafb87907", 0x4e}, {&(0x7f0000000180)="2e758bfe38fb4de3251992225e089079ada024550c094dbbef0978f01ec41205d2", 0x21}, {&(0x7f00000001c0)="7312b59917e24c712b9af6f70827db853e0c75335e84842705012b4c87bf6eb77cacdb6c42ef818dece94ac6a4ea117c3112db44ff3982029e1b369e259d9579ecee38c705b18ab3e4bb1041a8c527380fdfc4ef8a2c192a321c1f8f1f5b916916bb5fd9", 0x64}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000340)="e08b7b41f946179582563c479b005ace65e2d7e1a478157e00927b6cf2c31331d6ad3497dac7d0847ae8ad1ec2b779b3898623c24634895edb3853edb8fef04c3b8becbb9782a78d95186230aea395e2a459377cb6d6a454f9d2eb90096869e46e33f973b0ecee809114add46f0d9194ed4e0566d9449d5060c5743350fa66be9d1697048f03923786f43bbd8029674de1798ef8b1a49f3d2e1172b91af722f22e9db03d62d28997ae341a02509b5b14b5ee7acc87290b5fc8de02", 0xbb}, {&(0x7f0000000400)="ca62dbab7637bc34f2fd2cb3e87fda76d6728b35b647d7b5fab9b1aa211dbf48ad27cd3d00335b923ff390222edbc1f5e17877d12fbe7b85a378054645c476d5257689c7bffd3e4f111f97cb37e498b317ed3f65b2804324939e55f00eb8f4776d9dbee670c3cbef3fba69120fad7fce07126b59afd3b21165f5221062990dfa7e7f641439087d57753224027062cd7cee7a7954b61fd7b711c6e8268279ec0e7d0cb89fa529cbbcf117bd84e7c04c3535c038ffbe3c04c680d36f3bb19b487dd25b26ba00f87f68fdbe35afdcd93a3c0f2825ba90f0df82e1dd9271e7da737b9cdcd3f925e1d3", 0xe7}], 0x6, &(0x7f0000000580)=[@assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x110, 0x117, 0x2, 0xfb, "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"}, @iv={0x20, 0x117, 0x2, 0x8, "5d41350a75dbb777"}, @assoc={0x18, 0x117, 0x4, 0xec4}, @op={0x18}, @iv={0xf0, 0x117, 0x2, 0xdb, "2ab8e8a6514a9a89bf0dd795d7a5a59b2d3680dfd92cd170889b2c9867282ffe748a9c2394111252703309fb5c8e8a7d13baa1a156eebc044615b440d82c38c2dd9165fc593f66c1850f02c03affbbea855374a43f5868f062418964bda8e53261273a2ae29ec2e1ce1ac9e1c65b895488125ce4597353301ef9557ac69505c8046f5fc2128badb581b33180ca8ca714d1fe801c37ea574ae32bc08d34f7e134b35e311aae27615d4a7735b876d9d5f98da2842cde6394e7e39bc95e534b39e19ba304b9e570a78a73d3661e4049aa6acb6c0b1eb5676ed1429570"}], 0x268, 0x4000000}, 0x240458c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000004ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004a80)={&(0x7f0000000880)={0x41fc, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1668, 0x3, 0x0, 0x1, [{0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_USERDATA={0x96, 0x6, 0x1, 0x0, "ba9817f51f777a0085a8161fc5d65f96d50f3f89516a864a1580ce2137dc91a4f0f84f7b4921660562a4229029e5e9db4afecb13cdc114713b7da7c7a43216e5b7af30a93bc73a47af941fe000dbe9f9e5c54d8d78fd07c9c721a912a8b131aa72faa49e5de9bd28d1b1ab3e755bdcbbf6c1f466b983f1f275f6b98cd0a835ab50de38366159c0ff5e2f03d1dc5c181e2fdb"}, @NFTA_SET_ELEM_KEY={0x130, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe, 0x1, "c825d0d27c4cbaaa0231"}, @NFTA_DATA_VALUE={0x5e, 0x1, "73776d92dd261f31487a36da36512246d08759051e66400d50fcf06c4b19c3b87b5ee21f8cf43a8217cb885ba9cd9237851f173afc074e4cffb2366e5424a8bc03f621a392299a520bbc56bd1416253047083537ac899278b954"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x1488, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x338, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "386292789010c1cc636d10f090cbd09c97fc6e2bcfb91ea662f8ad5fb7bd76a0f26fd2fd6090ef6380530b30e3ab90508a6bb57b659f8e39"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xea, 0x1, "e42d535858ee8453f6d104616ffb6c9a6ad54e7475a9120905cd6201699f4e2596e04192f8120f322179598e8a9d6b71f77b8598979aa993855f37287d6e92831e6d54afa4d4c6973a0d830601c23570533e0c8d89631d61472c0ae8f638de7273c4d9274d74b9f775c09e474dcb7f66582637c1b8c65751b41970e69bc95c7552b64e8aec36dd767c6c6638842c9f1c16698285b885ef3eb8263b1baed5ce5ec8ebcf174eaa34d50a77d6ec516f64284be14b54cddac005add3874d70cf2b478a8b2fb05b6291fbce2262b872c3cf09b34ef08dec02d58857f39886d330e25303425529a732"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "90275df850ebdf3dc86f86aab01f87c09481fa74949f5b90848686c4639a6e848dfd9142fc5745b38114d517babfd3ba2d3bfc296d5874a1da3d034a146f25e3ec9e8ffdd6c563c39fb601c05a8a011e39705d5927bec8b769743edb759a0663e86e4450e582"}, @NFTA_DATA_VALUE={0xf4, 0x1, "44430c7b6bff54de3fca82974578689a76dda8ca2174ac0b8739246d42c7ba4e5c8421a610e59af0d5564799c30fbdf05a12c61822c3341ed09f0d23bd60fc8ca0dfc50ec2eb7962ad0da3d570570328f1a0d38f45b7ca45bb0fa0b8f8d8936bc7e0d64da7133e37301d797507cb245b093f9aff3c677d23c83cd560d05796f343fb57e3e71d1086ed3481a0be05588c83623f2c23bc9df0c9e679200d326aa27c9d8fda94fed5df8136cf0c9120c8752e041658c4f6f0f5e12f0930dff9fc30d66da03ce68e66309122ee25f4140de826ece14c14bcc59a95de50ef2673d59ef4a7f5841b141cfe8f59e4d1184e5ad5"}]}, @NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "07c3f6fea2f9d7e1336dd1657c2f58f61cc9"}]}, @NFTA_SET_ELEM_KEY={0x103c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0xe2, 0x6, 0x1, 0x0, "cc04d123cd257fd365b68d83a71bb99f00599c6d860eed78d3d96e51bbfbba3034e30c9e406a780eb3d3256141b4915b3a929f221fda3f7f673ba8d7aa00de5c0972a6cf18f6872a5638d3333146c932190a2cf778ee176701312d295876bd4d3b0a53340ad316b2bb81e2cc39ad8c82c4439706ca7db897440a076443ec42a147652910dfa11ce8e4bbba13c429cb7ce3eb22db7523adac715bb4d2d825650e74d14653f2fa79cfcbd49f3628952c86f99c8c8622ce8288d84205b0091b0381bf18f344ca1574e55b7e8a3783e8f2d241c68c555e71b353027a43c13f3d"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2b2c, 0x3, 0x0, 0x1, [{0x119c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_KEY={0x118c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "c7b888ef1a67ed23e7fff04c5936a52c174d15915e5af04ecc6d8bed10133de85c002e84388280995ee214834e477daba353993316d1e98995b2f476bc8b0cc6c32cf8f1706d289877e164423b2f94ae96a2f74171a1855dfe96d113c9801bd5aecab9e4534aea51a0f3897dc3654f674794d439f76fdfa3954ec8edeb89fe16cb25ef269671231eb684403441a6cd218c0277d417de99826b39b12da59d4df88f4fcf12f21b5ab986d0df179ea4f9d33527bda6da90a2bd27c9288fb5106a4839872cfa7588a5c06bdcdd1a6a0b4e7ee4eef57b3f91f74bbbeeee9a2c150b97980e67dfcedf6053bde18c84b0fa8f7de598f619014a28cac8e19d73de2ba4a08017eb12ded75c48005d8435c441215cf0bc5eb9c56829bfb1374176b290d6c0c89d9b718a72fc267e1d615f0f1bc584aa49b1333268b80897231138f180fbf6a0d65546397781fc796f547554a583d8ca9450c617f0418e4e05650b5df4cf9407320f7e4f5f1959376ce88c0f83b150b9bb68fa4ecc589e25c555ca3155c089fae7b6f41437ef47de3e2673edc9e5088871f5081d1d9c7a5789b8727b0ad8e72bb8f9f0c32f469bb3986309a362eb8802e384dae508ce153b699c19c52a27be17cc2d87239228e7c82f2e6c7bf8b1b2ad62980c9c91718a7c26f0a2443588326a06ca6b9eed3e68a66fc0c6bf92248068de6159da48af2b285d18b419dc818819721e18e784d3000dce91a78ee2ad64b9745bb62752bdb8c78a95081eb71462227d11bd2b78bc2b39f4f880b3c6fd5de2e3bb1de4eb5f10b98b55bbabd1a42f8ce52bc6b0feebe8ade79d5adcecf06a452999ea5f112c8475890cb468f0de4a9153846a2e0414298d3f51bf410221e6e11dc46ed840ade6c6c25af9a04c6b0d51e840a07ccf65b7803a48a311af0164dc931acdc5fdc084fad2b4e2fefa8fa8348162667646b5135bbbccf4a10fb96f8923fa6b91498c453285ac2c89bf389a53bbc7d724d05a6e09c4e6607e14926f53eb0625f70236be36901c19f6790e7cd89d892f7dbfb0270fbc5a314811561534e2dae14a386fa9a1579d65640c8ab4cf38f05475340135fc0775b65913b0b6b0d718f9a88a41fbca365d47b7f92ae6ece66ed13ecd122894a4a5ff146c36f95118f8514e22c47719278e2596bf5d966b49c38afd443f1df2451006b63a4f89c882fe2d11d9c8b4ca4b5b7b85808d7182313c78c2bc5a2ce2fabed0f6894dcf07f00d49d357c3c560ceb5034f18c3ea847c8f4fe1d5662b032822691466d11656021c720934d7fddb92723a230da6a13b32da544446fa39f44e48098782d35a3d84487956b8d40418c1c729e970a3c1a299a14acaaaa2c3b11a12bbaf3a0ff255bbb515a37d6e7f345e8e18b63f9d8c5609df1a5de64a15fd5d040ae3db8297eecda6a64c193907b1c82fd53c21f882cd2ed29d1190d42342056140c84f958c975312d65c434a3c9e99213ae180d1c783de5f3b8bd1720a2af8a3d93f69abd84984f20a62af578e4f8547e9349d9ea0ff1b83973e8c8a6ae7d9ed4eb8ba3fc674cda39dd2ac70677b0af929e237c369fce79ae6b1e5dad5825bf2e95d33e546e5dde763ca7f7421b77802dc880bec704d18ad38c28f82fdba594f69ca4d76a5cd409a733b41e620b759e4cd3bb9965efc82c9cd71f51d85e478ec4e271478ebcbd51d396570cb6fc20003b0fa66cc65aec1ef767e6be161436a80082c0a5785de66077a8a779069860c13b3081b4761da955c32e40935efba7d029fc7b8a37a2070d7a5181d6b44e8b23f02057284b61950331ded022d95c37dbcd0e5f69082a5c89964e69ed606a9ee31ea0001eae8485e2b37a6b7b2530085fa9f4e73ef24b28a04573ec290a99b471299534ee68476d2b370ca12d7674ba9b690fb8bb2d382dafdcdd0ae362cc2843f525b426e0ffe652119d2d3e26c6ff0c1523d92ee734014e04370f3e0a40ce0a2aae38819d12d53af2631dda809c65d771749be043d88456afb5a87079c25497fe52828e3e1ef90ca97b87a5ed965c75f9b088a435ee0fab0dba639a9e7d040f472cfb485fa1c074ddff6c09dae6981d1fa394736d455bb0bc2cd42304230f96ed020eff4db026db6e94ff1a39492a8762819d9319e63f6086567bc0610822db826ad6d59deacfac41beb12565f9230bbc784d9cdc23b61ca8ad5c10746578aa7a54188b7331b4612630e89618821bbaae12510f33fa4fe74cfb41537e6b28f9db1deec00452e92a5613d88d78d069f51f575d5e5d4511c79008a041a892f7a7ff3b1f40d800155780e5ea4d1783123c507a1f1cf0662113b7e5c1c108106902ba3d30e5a7252a04f6b15e2fe0b9dafb9e2138f6063551f5e11d5886cf78e0e47acb4e85e04590cdda988e5f2ee751397379f68ee58af932e9c4428e2dae35ff142d2ccf33f457be161c0800f2c43c32a52a5b4fb6ad8046b185f6be254266c5e590526b883ec02f3ce51503fea9b7f62381e9794c11c9ce1f22a35115aed7676b1e2af372d212dc3795a8442eb896f7cdf3a255925b3ca342a8cb782196096e1b52d513e7b842ad848f5b6224bb0d792d4b0980e969923c09cdb9ff2e894356fb2fc6d71cdd5003059d8ea04f164b52f6569826720b60537bd7ea9ccbf3f45a25768f98cff2585396603b79add07eb4b64ea4276b2489bb95fac35ab7b67630ec5088bda18648e48e2350f701106002f7a16c3330dfd56f78e2da58b9952af480c30fa13d635098f2824adf0b8a1459e423766bbe1de56daae57bf12b572b565f37a0e77edbed0ac0070269551caa5b22ed5c140345325be5155a1241c0de66d0ddbbf8528be872a9cf50875a9b29e83a8180a6340c957fe4e5658ec65331b648b6002788452e634996c880f76224c117e3c250e1828d1086ab3046c122c7ee14b94c01f762c01aa2aeb2965ec9a32901afd642593368feca68a26f853441ea8b3c4a4741103500c108e7f3385900b5e888c2e0cd5c4dd669716dffb861e1cdbdcd3c360141a7b2123d0d5095feffb0d263035bcc761ef100f280afef168ae918ceda17591f95afec8e80ebdcc37114434d6fbcb7e16d95dfdf86cf623a0a4b10e661608619fa2b7351605339138a4a4bde116cf64f3af0a1a2c3f361f322139503644e6bd3657653952293843d837bc07e44a14dafffa4f091d81a89be1f548853d2f3492d4a391d43453acc1cbc6c8819c3b22db481c98ff2562ff03b7f94a3890760ebc4da600863448476278cb5204f34e5a2817808378c14f63f2d6148fe44a306453930933c9eac330afd656d087008f2af77a98190996cd7e8b58f98c9641b5e712952a5e3ef6ca1094d2a656c64a586690aee54236469fda20fb06bd4038c45c2d038857c01b58cb84f59afb16012ce814de4ea6addb53ee69f5d0b03b786eb040f2393805c64a55aec9fb834125fc380fb5baf7da67dbf65102a6c441a147c9a07f463335e7fc5e5ad8cf091a90ce37bf67d76036dee3c472d7dbfb0cb76d15f4ea2d160dd2c61d3d0b7e862492adf72f58f0b6126efda59fa7e7fdc593bf62796947dc85188e92ae9b116f5f48703c31e8cc31be7ac0ecff7113d3f87baf1258e5d844bdad151aa149553b829e4b58ed132755584546fdb917ddbecd126b3c18f9c381f49f56a02d98884364a68b64b878525b886a0fdf3d954363ab4686b8e97ea4340f110b763029dca1a4a0a4f6b0699479b497e32f44af3732b6c8c3ddb977e27eafbf5516fc6d0d85f96546dc85fe0bf20bc4886bf702d7e690d621a21515887991d6403f899c85ebae9f9d02e7d0dfdfc32cbe9e99cd71ae47e6990d3b5fc1ca86599b60875d602f506fad1d8e7ee5dd4915e3837c77b4acdcdef1e2513b88fb310be842b46de5012b42733577e4fa3c3e17d0b885eb9c0a74c5083ff08a56b89f202bcadcb1eb1bd3c15e3e7852c645d5f10fb133524c20d67651d2dcd3a00148c4ad5225a416d1b50e4b140607eff271fde3344dc383a572c785088f447861a7827e8ad6f1d4e4a31726463b1248cd9f7647f18223e10d8094da1d395c0a278fdb17d1aa045dc400e76962010517a45971110f2e297414311baf6143576a1aadfdde45a810023b260523ebf439fa5b40fe2248ec11fcf2cf29ca99708f31d4ddcef537414dd35ee71f01191cad2f920f5e55cc9783281c2d6386b097122f1ed68d3c5370402438f9a04d2abb21a2f7102534bc5c8d1aa06715ccda2016d6a6f9a1e067791772caae08c606c0a0e135d684fa5138851e20799af3b428b01c0002896d7e81806fde2f70fd18f4aa8231207a177dcc82762cbd1b8bffbdbe85fc2dd250698a035c67b1a4ad1039b434d6e02c88202a009f238823233ffe331efcc4381a2040cb49a7381fbeb5607ffa8acfa5271e31beef997863799faf83efcde62d08f68d93934155f1d00c06058ec9a150c81642bed75540affac147d94ad5516e8bb3588365f6b37d739c756bacc360f4fb985d86cecf4d91423ce4b8bbeffa969e50e0745461995a8e8312c3eab93fecad32cc84b17fa56dd8ea97c1e13ea31ad586f67424ccbcd259371a2b8be3b5b9bd8103a772db00bd7d06a19e9f51b7663c312a6a121306aef251d92c09e16b810dd86a51fe02a1cfabdc1c481a720c17c384eebe71ccbf179cdb840890df2cc127064cf32fb6c5c97e3978b575088bbcda9fda2db2c79c6a39197da39ccf111055cde03eaf3845a286ff4cc1af65e2c86f3c8e0f02cb65fc599a24f9705c1494f19f0cdcd5be6d405eaf3fb7389aabfb7003cf1dd9c25bd6a1f1f276c9c4bff5df3c48d9b36ab7a7c3ade0a607d68d4ea2eeba588f8d638bc400c936cbbcd234a3d876dc29d7bd398602e1eecc5445de7ed189316b72e773d87e4e2d855a6541882173c282d4f57378c7df1cea7a9556bd58372a49b1670ecfd9f0af653bafb52903af6a8956e76b349d8f854638e194ff659105e298e124a971409cf9df4fdaae2942265ce23dd04863e00a01e6af60b94e263eb0e522a3e8c8894bdb2ad161e35b0716da9e3046c734edb326676d69159847702b295612f33a5b1aad862dbf78372cf5cd19dc68455930534a9671f278cfe453095d410ca947a02df686e9dc1aa7c1ac2f7c6558b0814b41f973e6811372207bbb052f6b595259c1e95914c3783d86464a97dee6d55fb07872f6960f5e6a3fa541640f65b8fc61147de703156fccef5a7b18b087cbc334e73390f5ed54e3a3c08361f77ceee681dc799cfa6dfcb08f79cae3d5601388013efb6b886e3715b40603d8c5c6807ecd6de58cca5e6cff170e7f8a6162cf17b33a85b6aa3b69828715613cd35b08a9083c48a72cdc2c5ceb60d5302a23608e2afb8cf476ee2a8f9d9688f53dcc535b26cbc440d35d9285d3d7bd5653fb8d80896b8a7e45a7e8d9cf2ce39770897ee1607897db212aea183fba4b2ce6d31995d8fa6b65ec6af0a2a13f09d3c8cfba1f863935b5177ecbe220e356aa2dece8c590bb9f029dad6008663279ef9301343589dc2025340d885f664f3181ceada5d108cfc97415ef62536a380de60217ff53024d478406ecdc3fa8eede8607966504be117a5faf7252fddbf225e1150922f0bca4444724e68d61c0797ef1a2552b2d9eba7624976a71cccd693b26b9765205feca03ba6068aa80ef6871bb7f89736025d44472da6c4d2758a79ce3162562994d7ef757ea4d13e05fb0ec1f755a5de997d5918e86abadb68d56d3bda403a1aebbaf56f135fe0f9d51206a7d69b6933377"}, @NFTA_DATA_VALUE={0xba, 0x1, "c9b01d88256423d57e30eea639346eab97435882cb02a4260e66a6b0786f20907b1e22532c5090455932d2dabb3f9a9332c9fe2246a410329b298720e415d1cdf120d1c9794d16b472116be571648008681f40d1a9355b3521e9af438e8e4aa5d0cf91788793c2e800ebb655f7338e268f483752ea4f47712fa74ce3b8767ebcc193b24c1f93b1dd0631b597633cc91a14aa0a6e8b39c68b6e31b5172ac93759addc7c7eae5cfba885ef87138ae810a7f71217001a0c"}, @NFTA_DATA_VALUE={0xc5, 0x1, "9acabfd3e92630cd80213786d475a2bb478849393c81d3c04c6be1e89680810fec453f31b7a0e212e39b6441dfc510718bfb835c3d2f5839a81db78ba3edb71bdf606d14c4a455f83043e93461a15d9d11b80390cdd830a7e987343a88b9b5a450759df132aca59556260a4d2f4aaf4edd549c7d7bdcf4527e4fb01e6f55bec650a9692a31c851f36012f86b5967eec8f442a857a1c8de271c75db973ddd9bea2a184c5ad89402d74133b43d9599808b64b87862e58a1abd5f5bac58c1fa561b41"}]}]}, {0x518, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VALUE={0x6, 0x1, "b868"}, @NFTA_DATA_VALUE={0xde, 0x1, "ad49820a4d4aa33b8925337d6b464368922e24234a86f38d6df97d523d34d4eef11f9d32ee9be2fc035a52ee916b2c7f7c6dafcd30b0e14c8067acc51d1a9e646242a7858a82f6733bfa2f8b3c3b1bf41433fb9532af408abffcf22d58c2b742acbd34c17e9ff7804e09179c52cfcf401e33f57c5f6ff163b8f576673957e54082630b58cfae0d944c913a8b1069637dabd1496412474b08cc4008be016116c54a37663a8bc07ad4137dd0d54abc8bf69143c66df5e533890d538a274e9702c4d1755a5c96be0e105c485a25bbc407261f4cba52aba796440c7f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VALUE={0x4f, 0x1, "77e1d67acb8ac81dc59144f299d220dfc706abe2309b9804c8affc421a2f273efab8e129ce7be0352df1b4843bf681ce687de0f7154de348fe80eb7cbcd4359e360404693df220fb0d6d34"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x24, 0x6, 0x1, 0x0, "35579f46597fed013c92bb22fbeb0f8560a5fa0874f70e0164b79ba4ec2e210c"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xa3, 0x6, 0x1, 0x0, "5872e4b3941e9aace37aa6a8f025e75edbd4a2a03bf4f7dca3ce2cca2eeaee43ac5ef408c261ae2bfe1e5ddd89a406b9bb53f080a7ffc8db38786f7aebaea7e42d9ad814e10cc7ce812fc8b1ea4cc81139767331437f35fae87349ec2a4fb351e5a7f677551b263309e5765949508d6bfb54019598319f65179810571104b043bd3df24fc92dae2847ba872177991e356ad72b13bb9c7ff9b119ac9d8c923a"}]}, {0x1474, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb7, 0x6, 0x1, 0x0, "86db84867703cd5de5c4ffa08ec69d4dbfba8b2e799ad635deb1efde3ecf029f04849716795d8e43e0da863a85ad705da5785a53a152356c831fa87e21672418409e393881d7f6f15a9951cc39b4cf9419fc3cadedd064b048d4b6f65c9b14dad2ed0af9bc3d30318b739c257d4bfece873d291776c6e6f9bdd1a8344b6d516f52a31e490357967fd8a4c18a08b2272f49c129ee06d0dd9b421bd19fe234f98626922cae22e63fd3da6c8640583fb057aa933c"}, @NFTA_SET_ELEM_KEY={0x78, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x31, 0x1, "4c24c41497942ca39f0c275da5300bdaf345a6b41a202f85d6d5316f28dd67326ffa4bcbc0bbcfa213b765b100"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_KEY_END={0x1150, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x71, 0x1, "0df92858a3328cdf408ccac6367803b0825867517fc8c83392df3fe19ce4f5e8672bd8d548120dbaf307210db19f97ed7b85efd5baaa2b422ba3a684125084db2d363f407ec8872d265c4fde56181598832e9f4c3582ce3e9f1c8663fa163fc50c0132afcdbeafdbe21fe11557"}, @NFTA_DATA_VALUE={0x95, 0x1, "085d8138cf09b43b0643bb6b311fc52a6964554a7a4f35853c37c5daa046b8e4de824fca7fa339410fa1db2ae82922cfbd03c8e14b5439bf1e70b2c7ef4190b44b5f7eba810e0aa0126afb6813f8354ba146822a1707f9f5393889566ea14ef90ad6a3be282e8a7da0d61a11eabafc46ae27d7aae446efdc1d03dcdbc0d1ebec1d38f18447120cdbd44ae16264525abbe5"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1cc, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x34b4}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5e54}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2d}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0xb4, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xa4, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5d, 0x3, "aa756519dd2055e620c022dff47ece13d0784e258149ac2b1da2b1c4ec597ce5e5eda566675a5f301f1bfe4582eae7d4b889d67b23c7c3d431994571c019d45b69384b4048ed629ec0275b8c9b5acd9e2a913a955ee3fa446f"}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa89}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x41fc}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000004b00), &(0x7f0000004b40)=0x4) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f0000004b80)="7e96c17206e3469dcb8683b2de449964d9b511e38cd5867e9f5fa7c74676ae11005c15473f2f12797197c27f11f4375c532ed04e3a369e3fb0a41235831e141f2758a712d81a81720e98fffa96ebab5a4517315db12fb16ec7925d9f563493940a32ef2288e40adfe63175adc7e24aec5609cc9fbb2223df9e73ec540f7bad2079827cfaa2") r4 = accept4(r0, &(0x7f0000004c40)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000004cc0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000004d00), &(0x7f0000004d40)=0x4) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004d80), 0x2, 0x0) sendfile(r5, r3, 0x0, 0x3) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000004e80)={&(0x7f0000004dc0)={0x10, 0x0, 0x0, 0x1d280080}, 0xc, &(0x7f0000004e40)={&(0x7f0000004e00)={0x2c, 0x140f, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000004ec0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004f40), r4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000005080)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005040)={&(0x7f0000004f80)={0x9c, r7, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_OPER_CLASS={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x179}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x84}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_MAC={0xa}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048001) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000005180)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040810}, 0x4050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005200), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000052c0)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005280)={&(0x7f0000005240)={0x2c, r9, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008810}, 0xc800) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000005300)=0x3, 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000005340)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000005440)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000005480)={{{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in=@multicast2, 0x4e20, 0xc5a0, 0x4e22, 0x1, 0x2, 0x80, 0x60, 0x3c, 0x0, r11}, {0xe0a, 0x0, 0x3, 0xfffffffffffffffa, 0x3, 0x5, 0x9, 0x5d}, {0x2, 0x5, 0x4, 0x1}, 0x7, 0x6e6bbf, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4d6, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3504, 0x3, 0x1, 0x8, 0x728, 0x1, 0x401}}, 0xe8) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000005640)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005600)={&(0x7f00000055c0)={0x3c, r7, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x3c}}, 0x840) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000006840)=@generic={&(0x7f0000006800)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000006880)={&(0x7f0000005680)="4e4337b35f969ec51ea8b7cce22207608accdab6bb48eec61aa790c5e7c959ae9ada959eb7819a9ee98ed30e299ffe30a2630c5ca1c35a97387b8d56cd0f2ff16c75323953acfd8d1e66eae87ab8a97b8e06919007322ae7ae45e56c11201eeafef64c5710a2383ac0426179fe1e0942352bb4d1d9b604cc6b74fac0599f307b06b5e4615a6a159591de50d494526d7b95673a8592e627282f3ddedd99f16993897fbb3ef3fa5ea3d7ea3cdb77df103d5be862020b346052f2aecbdf80", &(0x7f0000005740)=""/4096, &(0x7f0000006740)="2000728bbc9d2fb8440564f7319df3bc85e82d3016eeda9471a58dd5bfa8e0911e3558880a5381f6a6", &(0x7f0000006780)="6af6aa9c7cae2b829cdc3f7a4b5adfe336518a93b6d572564cf6837bfb7bef6228d5ccfe702f9f3f63bc7f168dc1e8f4cbfcfb87c30d6c74acb655aba9ee7944c994e28ad6e96fe1d92f9505bcee10234bf949d5a676a56b80d89f822b98c32f94090c4675c4f39ede11ee9e", 0x5, r12}, 0x38) 2.072652117s ago: executing program 0 (id=18115): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100000004"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000005780)=""/4097, 0x1001}, {&(0x7f0000000580)=""/151, 0x97}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000003580)=""/4088, 0xff8}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x2}, 0x7}], 0x7, 0x0, 0x0) 2.017097644s ago: executing program 4 (id=18116): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000000200)=""/209, 0xd1}], 0x4}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) 1.987568653s ago: executing program 2 (id=18117): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4460000010000104fcfffffffcdbdf270000146a", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) 1.9029811s ago: executing program 1 (id=18118): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000000)='$', 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x1, 0x4) 1.812693674s ago: executing program 1 (id=18119): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000e90001000200000008000006000100"/50], 0x38}}, 0x0) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000600)}, 0x2004010) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdb899e751115f52cf632ac37dadd38a87ce214e9d0d7833645c28dfa12c58e7631fe71b31d8445948ff8e8c46e896d2f0675c017c55c67a31d848f1a3dff63a6b02f88b1382d5eea84c6f428a8ebb3031181d49eb3cf25357dab5311b14b919b6823796655df4a6566bcb49cba5a3c41366e2e83c9c6ad186559b7493623eecbf7fe1e3a9ac4d2be303f43668ea57e49944a0b70e1a30b3f9b02feb3c30b12a3a868dfd7c17e4a42cd038c0868dd5f40157a2a705b7bc4ccdb2c04320ef9e900c54c4259e5b4d8"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) r8 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r9, @ANYBLOB="04002dbd7000fcdbdf2518000000940002800400040008000100070000000400040014000380000002000800000008000200ff0100000400040008000200d00200004c00038008000200060000000800010000000000080002000600000008000100fb070000080002000600000008000100ff0f00000800010002000000080001000600000008000200f8ffffff0400040008000200020000000800020001000000340003800800020025050000080002000000000008000100010000000800020003000000080002008100000008000100040000001400098008000100060000000800010006000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x400a054) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r12 = socket(0xb, 0x6, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r12, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x18, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) 1.768523416s ago: executing program 2 (id=18120): r0 = socket$netlink(0x10, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010409000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="2d0000008058", 0x6}], 0x1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2], 0x40}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000008c0)={0x0, 0x6, 0x0, [0x6, 0x9, 0x3, 0x3, 0x6], [0xc, 0x4, 0x6, 0x4, 0xe4, 0x455, 0xffffffff, 0x4, 0x36eec7eb, 0x3113, 0x4dd, 0x81, 0x4, 0x433d, 0x3, 0x7, 0x9, 0x7, 0x80, 0x3, 0xfffffffffffffff7, 0x80000000, 0x200000000, 0x4, 0xfffffffffffffff9, 0x3, 0x8, 0x9, 0x1d4, 0x0, 0x9, 0x9, 0x20000000000000, 0x5, 0x5, 0x73, 0x8, 0x402b3ca4, 0x2, 0x4, 0x3, 0x0, 0x3769, 0x2e, 0xfffffffffffffffc, 0x3, 0x9, 0x100000000, 0xfffffffffffff33a, 0x8, 0x46, 0x1, 0x0, 0xffffffff, 0x9, 0x80000001, 0x0, 0x4, 0x5, 0x1, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0xfffffffffffff001, 0xffffffffffffffff, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x3, 0x6, 0x800, 0x9, 0x5, 0x8000, 0x3, 0x81, 0x5, 0x7, 0x10, 0x80000001, 0x8000000000000001, 0x80, 0x3, 0x7, 0xfffffffffffffffe, 0x1, 0x3, 0x9, 0x3, 0x1, 0x3, 0x0, 0x9d59, 0x800, 0x3, 0xffffffffffffff1b, 0xffffffffffff1cff, 0x3, 0x2c, 0xfffffffffffffc01, 0x2, 0xd0e7, 0x9, 0x4a2a, 0x7, 0x57, 0x2, 0x101, 0x0, 0x100000000, 0x8, 0x5, 0xffffffff, 0x8, 0x2, 0x9, 0x1, 0x8, 0x10000, 0x5]}) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28040680) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) 1.718817069s ago: executing program 3 (id=18121): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x1, @mcast1}}}, &(0x7f0000000040)=0x84) 1.669625405s ago: executing program 0 (id=18122): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r1}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r1}, 0x38) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xac}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa3f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4a}]}, 0x60}, 0x1, 0x0, 0x0, 0x8014}, 0x20000000) r6 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e000"], 0x20000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r10 = accept4$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x40000) accept4$packet(r10, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14, 0x0) (async) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r11}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_delneigh={0x38, 0x1d, 0x2, 0x70bd30, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NDA_IFINDEX={0x8, 0x8, r11}]}, 0x38}}, 0x24000000) (async) bind$inet(r7, &(0x7f00000008c0)={0x2, 0x0, @local}, 0xffffffbe) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f000000a2c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x9, 0x8, 0x6, 0xffffffff, 0x2}, &(0x7f000000a380)=0x98) 1.646946982s ago: executing program 4 (id=18123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="bac906011331ccd703f55aee407e8b783f1274fac4191e42e65558b6d06ee2964c3f975a37ad578ee1a2577557f1f6542b46559b60ca768cecdf615c8d53b57c25f745e2e7a30b4f4235d5800a29c28b176b7ef8d306926e790a3807b0186df1a9a473c0eda428fbd085cc8246", 0x6d}, {&(0x7f0000000340)="a13ba351ba79a33ba3578f90ba20dc3a9731927ca6fd1ac0ba51da318c79f3001a11a41c7f1b35b5f72bfe11a85df61ffc5c6542b6cf1ae97badab5bdce74f4fdbae933c7247837514ae5e4fa482756a", 0x50}], 0x2}, 0x200c040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x568, 0x0, 0x1d0, 0x3c8, 0x2b0, 0x3c8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff000000], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x400000}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'wg0\x00', {}, {0xff}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xffff00, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0x912a97ef168388c6, 0xff, 0xffffff00], 'pim6reg0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x4c, 0xff, 0x4, 0x3}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x4, 0xfe, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="68000000000905040000000000000000020000000900010073790030000000001400028006000100000a0000050002000600000008000500000000002c0004800800010000000001200002800c000100cff8080060deb3e5706f6c69637930000800020000000002", 0x68}], 0x1}, 0x4080) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000600)={0x1f, 0x7, @none, 0xb, 0x1}, 0xe) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100200000000000006bda4d52a67a4c2a55893499ef0cc3f0333acd7498228e02a8cd15dbf77b6c1837986cf88ba9e3bb096a39ecc398f8d64057c6ee34055e25f84c1609e7477bab1f937bb237b75e65e34eca80c78e44a9a7cf36e9e63982f77b0b0030fd0bae7958476825e9119e103c42b717c76ffb93e2a6e2f5825d54255f6cf12c167cde46ed5b56353d50c1db98f753ada806061652a979d30f90fb08db1d0651b30c8175f9ec5a729ebd23df5c525fc6b696ea91f649da72448af1ce6e75141f4d4b7f54eb3090ad2e737a5c50c94761f362ba1555317c18bf73b7fb925e27ac248efa8d5cd7840fff29"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x24}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x1c, r3, 0x329, 0xfffffffc, 0x25dfdbfe, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000860}, 0x4008004) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000000c0), 0x4) 1.437907645s ago: executing program 3 (id=18124): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ca80)=[{{&(0x7f0000000000)=@ieee802154, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000500)="501d63b2dba6003c4fe872b183cf3c2a2fc84d2245521158619267c6ef2234eaab9fdc96376f0a78b8561a6603f87fbd061a58d9225d48b1cc892913a45c778eb39a38d529b1a28c7183e8c7e52951792f13711af95efbd8b00a2731", 0x5c}, {&(0x7f0000000640)="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", 0x57e}], 0x2}}], 0x2, 0x80) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x31, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, [@ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d1}}, @jmp={0x5, 0x1, 0xa, 0x3, 0x8, 0xffffffffffffffff, 0xfffffffffffffff0}, @ringbuf_query, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900, 0x0, '\x00', r3}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002", @ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000240)={r4, r8}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.372809133s ago: executing program 2 (id=18125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002700090025bd7000fddbdf2512000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (fail_nth: 3) 1.062043041s ago: executing program 2 (id=18126): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bind(r0, &(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f00000002c0)=@delchain={0xce0, 0x65, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0x9}, {0x10, 0x3}, {0xa, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xc70, 0x2, [@TCA_BASIC_EMATCHES={0x418, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x7c, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x10}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="f34b", @TCF_META_TYPE_VAR="310d000fac3705", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='T', @TCF_META_TYPE_VAR="b3605b", @TCF_META_TYPE_VAR="e4feddbb75935e4b72", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="14c871a4cfee1a", @TCF_META_TYPE_VAR="3af78b64376a3dab"]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="b15a68fe8915a8", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x4, 0x1}, {0x7, 0x8, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x3}, {0x9, 0x4, 0x2, 0xaaf}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0xa1f, 0x2, 0x5}, {0x7, 0xa, 0x0, "d72d707cc7ca304c0824"}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8dda}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1, 0x2, 0xc}, {0xcd8, 0x6, 0x2, "523b0ff279f8"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x19e8}, {0x3, 0x2, 0x5}}}]}, @TCA_EMATCH_TREE_LIST={0x184, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x98, 0x1, 0x0, 0x0, {{0xf0, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xce}, {0x8, 0x7d}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="5aec4b9e2108a507", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="de87bf77", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="253d8b1ea39ce89e15"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="55312fd1"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="0153b11a4d", @TCF_META_TYPE_VAR="f8eff0", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0x40, 0x2}, {0x5}}}]}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xfffb, 0x9, 0x7fff}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_IPT={0xa8, 0x1, 0x0, 0x0, {{0xfffa, 0x9, 0x10}, [@TCA_EM_IPT_MATCH_DATA={0x94, 0x5, "538e35edce390f8a562019813d0d3115844dade6c8eaa4ea2bb79233b776dc27712a8fe4f5e7bbfebaae69b19609aa38ca5122f9cda872e00f65b13ffe4eb661532b8a3519658f816c16f49107c797e5a47b818e6774a8d104a583db35befbcb9dd17c0b089907ce4d9fe81aeb5bf009acbfbb83466faa349f9dab164605b18bc9cf2a0520a9902d8016f2eb903b4285"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}]}, @TCA_EMATCH_TREE_LIST={0x19c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc4, 0x1, 0x0, 0x0, {{0xfd26, 0x4, 0x400}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="0260e0", @TCF_META_TYPE_VAR="1b", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="8b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x3, 0x2}, {0x7, 0xce}}}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_VAR="61fb1bcdf89bd837", @TCF_META_TYPE_VAR="e5f2a69fbf", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="241146b9386afe00", @TCF_META_TYPE_VAR="b7086992bb4076"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x10, 0x1}, {0x8000, 0xf, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="3a164737de5e202e0e", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="b469aae0ae286d382ed8", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="2cc9b4c06fe78f304f3b", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='c', @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc0c3, 0x80}, {0x7f, 0x4, 0x3}}}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x3}, {0xfffe, 0xa, 0x2, "145eb96624d6ab147d40"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x9}, {0x2, 0x1, 0x3}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc000, 0x1, 0x92}, {0x4, 0x6, 0x80c4, 0x5, 0x3, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x6807}, {0x1000, 0x8, 0x89, 0xfffffffd}}}, @TCF_EM_CONTAINER={0x74, 0x1, 0x0, 0x0, {{0x6, 0x0, 0xf}, "3f11de00c778fba294ef204a4a8385baebfce5233ea37429397f615f841c56b48cad0b501291c3ed4bf0c8d78728f4a50850000ff296aa1f0febf13a991556cc8c60eb915a6f4cd49d96a4084c40f3641b6fd2721e3c9e56827896526e6ce69c6a061c3f931c"}}]}]}, @TCA_BASIC_POLICE={0x84c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x1b6, 0x5, 0x1, 0x1, 0x5, 0x9, 0x1, 0x4, 0x9, 0x2, 0x1e, 0x6, 0x9, 0xfffffff7, 0xd, 0x10001, 0x9, 0x5, 0x80, 0x3, 0x80000000, 0xf1d7, 0x7, 0x7, 0x3, 0x443709e4, 0x2, 0x4, 0x7422a37c, 0x0, 0x1ff, 0x0, 0xfffff807, 0x9, 0x9, 0xd52, 0x1e, 0x7fff, 0xe, 0x5, 0x9, 0x7fff, 0x4, 0x6, 0x8, 0x6, 0x2, 0x0, 0xd3, 0x1, 0xff, 0x80000001, 0xe, 0xc6, 0x4, 0x2, 0x6, 0x7f, 0xefb3, 0x6, 0x6, 0xff42, 0xfffffeb2, 0xff, 0x9, 0x1ff, 0x7, 0x6, 0x9, 0x8, 0xffffff18, 0x9, 0x5, 0x0, 0x401, 0x1ff, 0x7, 0x7, 0x0, 0x1, 0x10, 0x1, 0x4, 0x7ff, 0x6, 0x6, 0x80, 0x4, 0xfff, 0x6, 0x8000, 0x6, 0xfffffffa, 0x101, 0x4, 0xad, 0x10001, 0xb66, 0x3, 0x9, 0xfffffffc, 0x80000001, 0x5, 0x6587e6dc, 0xb, 0x1, 0x9, 0x4, 0x7fff, 0xdd, 0x9, 0xe577, 0xa, 0x101, 0x8, 0x1000, 0xfffffff9, 0x2, 0x6, 0x5, 0x5, 0x5, 0x2, 0x5, 0x5, 0xe9a, 0x1ff, 0xfffffffa, 0x2, 0x66, 0x8, 0x3, 0x4, 0xb20a, 0x4, 0x10, 0x8, 0x5d53, 0x80000001, 0x1, 0x10, 0x3, 0x7, 0x77, 0xffffffff, 0x2, 0x0, 0x5474, 0x8, 0x100, 0x1057, 0x8, 0x23b, 0x1, 0xfffffffc, 0x9, 0x10000, 0xfffff001, 0x8, 0xfffffffd, 0x7, 0x1ff, 0x10, 0x1, 0x580, 0x1, 0x8, 0x7, 0xfffffffc, 0x401, 0xfa, 0x8, 0x51, 0x0, 0x1, 0x6, 0x6, 0x10, 0xffff8dd2, 0x7, 0x40, 0x34, 0x2, 0x8, 0xdcd2, 0xa68f, 0x3, 0x9, 0x7f, 0x7, 0x6, 0x5, 0x8, 0x8da, 0x81, 0x6, 0xff, 0x40000000, 0x4, 0x5, 0x0, 0x6, 0x1c76, 0x536, 0x6, 0x585, 0x2d9c, 0xffffffff, 0x6d63, 0x0, 0x4, 0xffffffff, 0x80, 0x7, 0x7d50, 0xfffffff8, 0x0, 0x3, 0x73, 0xce, 0x0, 0x0, 0xc, 0x7, 0xfffffff8, 0x6, 0x3, 0x8000, 0x9, 0xfffffffd, 0xe95f, 0x4, 0xb, 0xd, 0x25c97780, 0xe0, 0x8, 0x9, 0x7, 0x4, 0x9, 0x6a700, 0x4, 0x4, 0x8, 0x1, 0x8, 0x7, 0x849f, 0xfffffff9, 0x7d3, 0x4, 0xf, 0xb61, 0x6d4, 0xfffffff4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x4, 0x6, 0x80000001, 0x9, 0x0, 0x6, 0x7fff, 0x82e7, 0x6, 0x3, 0x8, 0x1, 0x6d17, 0x0, 0x3, 0xf, 0x9, 0x7, 0x4, 0x100000, 0x0, 0xfffff1cf, 0x4, 0x6, 0x1, 0x9ad, 0x80, 0x8, 0x496, 0x9, 0x29, 0x80, 0x4, 0x10001, 0xfffffffa, 0x750, 0xa, 0x9, 0x7fff, 0x6, 0x9, 0x2, 0x8, 0x4, 0x7, 0xffffff76, 0x9, 0x8, 0x1, 0x6, 0x9c, 0x4, 0x7f, 0x60, 0x6, 0x0, 0x5, 0x7, 0x4, 0x6, 0x1ff, 0x9, 0x5, 0x0, 0x5, 0x6, 0x1fffe0, 0x7fff, 0x80000001, 0x72f0000, 0x578, 0x9, 0xfffffff9, 0x3, 0x0, 0x101, 0x3, 0x2, 0x7ff, 0x2, 0x4, 0x9, 0x7fffffff, 0x5, 0x9, 0x1dbc22ef, 0x2, 0x101, 0x2, 0x4, 0x8, 0x400, 0x5a, 0x6, 0x0, 0x7fffffff, 0x9, 0x9, 0xffffff09, 0x0, 0x7fffffff, 0x6, 0x0, 0x5c, 0x4, 0x7ff, 0x3, 0xca9c, 0x7, 0x10, 0xc388, 0xda85, 0x4, 0x2, 0x800, 0x2, 0x80000001, 0x2000000, 0x4, 0x7, 0xfffffffb, 0xffffa620, 0x6, 0x5, 0x3, 0x2, 0x88, 0xefd, 0x8, 0x1, 0x1, 0x500000, 0x94980, 0x2, 0x5, 0x40, 0x7ff, 0x3, 0x4, 0x7, 0x0, 0x7, 0x8, 0xbaa7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x80, 0x7, 0x7fff, 0x1, 0x0, 0x45ee, 0x3, 0x3ff, 0x6, 0x2, 0x601, 0x1, 0xa3, 0x100, 0x8, 0x4, 0xfff, 0x7, 0x9, 0x4, 0x400, 0x1000, 0x0, 0x3, 0x200, 0x2, 0x1e8, 0x9, 0x3e, 0x8, 0xfff, 0x401, 0x9, 0x4, 0x9, 0xe8a7, 0x3, 0x10000, 0x0, 0xd12, 0x9, 0x2ddb, 0x9, 0x8, 0x1000, 0x1, 0x2, 0x4, 0x6, 0x2b19, 0x83, 0x1, 0x80000001, 0xd1b, 0x10000000, 0x1, 0x6, 0x5, 0x5f3, 0x0, 0x5, 0x5, 0x5, 0x4, 0x2, 0x9, 0xd763, 0xf, 0x1, 0x2, 0x0, 0x7985, 0x8, 0x2, 0x1c, 0x26, 0x7, 0x2, 0xffffffff, 0x10000, 0x2, 0x0, 0x5, 0x8a06, 0xd34, 0x7, 0xd4b, 0x0, 0xfffff5c1, 0x9, 0xbb7d, 0x7, 0x7, 0x4bfb, 0xffffffff, 0x2, 0x205, 0x7fffffff, 0x8, 0x7, 0x6, 0x7fff, 0x7, 0x9, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}, @filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}, @TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0xe}}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0xce0}}, 0x8080) 942.719441ms ago: executing program 4 (id=18127): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000040)=0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x800}, [@IFLA_GROUP={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x4008000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x7, 0x7ff0}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0xfff, 0x5, 0x1, 0xfffffff8}, 0x10) 730.81936ms ago: executing program 2 (id=18128): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005040)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) sendmsg$inet6(r0, &(0x7f0000003100)={&(0x7f0000000280)={0xa, 0x4e24, 0x6, @mcast2}, 0x1c, &(0x7f0000002fc0)=[{&(0x7f00000002c0)="800b5ec0eecae04ca62803e302c8ffdef835e1d17e4032ff837f166a5e075cd6ad5679096cfe2f517ef0d29d71fa9dcf3559774b920066ba00d338d201d9884a5be891dc2a8470863bd58394b3bf102715ebe84ebe8b1337fbe103eff0dc72ab90f661f3df370f023e145c658b5cd4420d64170e3632dd82bc892ba23b294fbdbe0f71611e3134a786a3e9fc8f28fccd66d063ad9904bff28a912261aed7db8835ec3ee4d6522c7f3fcb75e65a27da3d72485bb2fbc1ea5bdd155371a4e1fce6a52901e284dbfe945f0eb9d0065bf1dfc2ff4198c4c9c356", 0xd8}, {&(0x7f0000000c00)="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", 0x488}], 0x2, &(0x7f0000003080)=ANY=[@ANYBLOB="600000000000000029000000040000002b090000000000000401050740000000030e09070003000000000000000800000000000000050000000000000083f4ffffffffffffad020000000f3d46aa3c0000000000000000000000040000000100"], 0x60}, 0x44000) 592.597663ms ago: executing program 0 (id=18129): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000000)='$', 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x1, 0x4) 543.425208ms ago: executing program 3 (id=18130): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x7ffffffe, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x3, @remote}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000200020000840900020073797a310000000005000100070000002800074c7566f206a3046240fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="080005000b000000", @ANYRESHEX, @ANYRES64=r3], 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x68, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "3200000040000044fdff000000000000"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00'}) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x88, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc98}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x594e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc181}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x44000}, 0x20040084) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000a80)={0x0, 0x6}, &(0x7f0000000ac0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000f40)={0x0, @in6={{0xa, 0x4e22, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0x3ff, 0x4, 0x2, 0x5, 0x40, 0xca40, 0x9f}, &(0x7f0000001000)=0x9c) sendmmsg$inet_sctp(r9, &(0x7f0000001300)=[{&(0x7f0000000180)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000540)="da090dbde827923358571e0acace6dd5e2115b6d008073f0dd33c00375bcc7c38d860f3852db1c08469366fb2b43e7ce61bff5b65d3e97c3921432ec77025fc3542d6d38ef45816d98b30fedfe7583b5a221fa8c7be4060767a81ec70f0ef973ce25fa79685ba780e38354f2fd6b14a648eae4413c51a4b1594b2f96885306f99bb070ae6de0ee491aa99313", 0x8c}], 0x1, &(0x7f0000000680), 0x0, 0x880}, {&(0x7f00000006c0)=@in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000740)="d84d6087e4086e0bd48336bc47e81b8fb0dace4e769f16302631112324b4a2093facb2ffe0e4a93698cb48e8f786898b5ec7c2dbdbfa0b9b84d16be3b563bb801ae33fe55fc00921caa353ef1d51c1b1d03b9daeb383206062c55ad1a638d4e7b8ac26f1bd1e95a90b707b645958be1f1709fca68cb13647f6d154ee5d302573f4bd3991bfb1b7a95fa27b060310bfd688", 0x91}, {&(0x7f0000000800)="a6e9ba1b315ee8e4f21d821710ebd05f6d70025f69a12ea5545f8a859729c8fb6f06611076cfb44293c17ebef370146c10b42f4565163695c9f4194d40dd4477e013e1b13fa1d7993c6238bb2414c542257843053b02ca84db92555c76b093a7dcd71eb939455501c664e1c3e4171ac622d7b3dfca6546d151393d949946ac5bb8844737ca9a29d95b74774466ac58bd69d77a5db6cefbf2a93d0bdedb263ec07256e699b57ca9851da8a9d82197f4035b21638aa31b0f82ebe02832d3716493d7c256", 0xc3}, {&(0x7f0000000900)="9238b1285eb4a49bd689fcc845891bfbc07aa0af948f69090875aced3f749bd71d2a80f8773ccd4efd0b6e5c18e855a14c206ed9d05e637450e38bc0a3a90beae48a7293345f7c1bf9fd9eb0f7770358f11c3d4a3c8ce2df59a6427ecb6f60ea151f8288208efb53f08b88f615996252ecbc8926277ae93758e3cecfaae5a2a3aefa28de2605c4433c07cc0e801aa185234532f07125ba99987ae54772cf812008d1ec83b01d6c84aa077602d2982194ecd5e44ab8d3c1502cc10f0cbcf41b1b09f72a9d69d41ced4ca6f768f5f5a5ab8872f305", 0xd4}, {&(0x7f0000000a00)="b3dab5e3705b5855a9848fd229a515aedd12ec101be4a50cfbf5388b630b4e", 0x1f}], 0x4, &(0x7f0000000b00)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x6, 0x8001, 0x8, 0x8, 0xf3c, 0x8001, 0x80000000, r10}}, @authinfo={0x18, 0x84, 0x6, {0xca}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0xb0, 0x40080}, {&(0x7f0000000bc0)=@in6={0xa, 0x4e24, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="1ea9b10be7b4aee83606e3f08629b27989691663b40782118af805ebe7a7dc71afc55c307609474634801a0dd8124968d6d77f966308ac44d6bc3c763e52210b52b0d3eb44eaa9b161652db9d91a35977d44c5d52cc02ca0e5f6002e2675975a1f2e5f2127851cc64185efc32fd41eeb62fcbc9c6c26ef65868891cb89d2e6b59a7c7b4bd85a0b47", 0x88}, {&(0x7f0000000cc0)="cde37d98c5ba00ec4e97121ebbe7305324a370ae3ab61fc8223a2294fa7bdd7b3f40efd854e969ddbd5be2a56ef99284f969049ab8c94370e2ad5c2e5ca7373172faa2d242df978c293ae8e9a071a3c775c5472c55fdd8cb48e9a19cfe417f7d04044cc3aefe06cf67ee7d7586950267d955a794aeb7d8af24bd0dfe8f880755d7382e84f36ca91c45404731cae133a593e8fe2d0b6aa5a7609f41ea616a313b83b65708c686cf47e45105049b36c00810", 0xb1}, {&(0x7f0000000d80)="9b549260a6bedef2e49cb98a0b2023f4c5ba4dd8b11249afecee68323c3af3bbbabac277b547527ac6385fdb47a0f6f6b762f01be3d244f1a17148fcf196c7f6b3d737e1075540e73f9148979e877eee02be91a718b5ac77f894d38719c2d923434e2df4f1562332d2959d14c480fbc658be46f2", 0x74}, {&(0x7f0000000e00)="d0720d67ed9623e6fcd34a22f440c8a94e67dded687715b95745e2dbde3654aedc6256efd377412534f9d4b8b759e14a765c8abdccda6d31025a74e2070f01bdddb8072ad9d327dc8ca76d12b8d9eb", 0x4f}, {&(0x7f0000000e80)="af6d08e1", 0x4}], 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="20000000000000008400000008000000fc01000000000000000000000000000030000000000000008400000001000000eb00304e000200007f00000004000000ffffffff0400000009000000", @ANYRES32=r11, @ANYBLOB="2000000000000000840000000200000001800a8008000000f7ffffff", @ANYRES32=0x0, @ANYBLOB="1800000000000000100000000600"/24], 0x88, 0x240408c0}, {&(0x7f0000001100)=@in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000001140)="13bb90337c97346772e56baa2b98a39c0936ac05f7d81caba68d8be95a7a5a98c03875e653ee5c0379abd1973963014be3592e92bc73b086fa5f6e3c36eae55c3506011032fefd8c536fe3de95048cc23d1c3f699e1e038b863f081e18bd8bb29907978c1418986541b792f7d7ebcb30c56ea72bcd36fac0011bf743ee75c5a37297f0b5c1e62a9c7947787a835febfd8c2302e5227787d9dff9e56d458e8b439035b24c4d4190fdc753efb22a63ffc94a732d49fb77a4dd6b3030cfb8d6a1013a5f6885865af5eec1e462f5a996b00d", 0xd0}, {&(0x7f0000001240)="f8a11d860d417138fd2e836875dd6408588adc78207f90181e391cefb35d729ed29bfaa1a2626b11742aff6c2ecc900208c5c083198e01bed37a99048c98bd09f8116a00ac7d2c3db08c0777daf0b8", 0x4f}], 0x2, 0x0, 0x0, 0x4000}], 0x4, 0x24008005) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r6, 0x308, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r12 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000100)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfe}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="94", 0x1}], 0x2}, 0x0) 98.184292ms ago: executing program 2 (id=18131): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000400)=@ethtool_gstrings={0x1b, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00&'], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 97.707163ms ago: executing program 0 (id=18132): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000005780)=""/4097, 0x1001}, {&(0x7f0000000580)=""/151, 0x97}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000003580)=""/4088, 0xff8}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x2}, 0x7}], 0x7, 0x0, 0x0) 96.462014ms ago: executing program 3 (id=18133): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000000200)=""/209, 0xd1}], 0x4}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) 10.858761ms ago: executing program 4 (id=18134): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x1, @mcast1}}}, &(0x7f0000000040)=0x84) 0s ago: executing program 1 (id=18135): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001080)=0x1, 0x4) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580300000d14080028bd7000fbdbdf25080003000300000008003e000000000008", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x20048850}, 0x20004880) unshare(0x400) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close(0x3) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0100001000070000000000fddbdf25ff020000000000000000000000000001e00000020000000000000000000000004e240000004000010000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000004d62b000000640101000000000000000000000000000300000000000000000002000000000002000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000076a300000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a00040053000000000000004c001200657373e97628726663343330392870636d5f6261736528637472286165732d6165736e69292c67686173682d67656e652c7374726565626f673235000000006000000057e92c790bbbbda7c4c41c9989e56e4524cdcbbe714b71e9df40b8c3fa4bfa5d07c874bbc91e14d15ba189475d09ad262b3cf8f48cbd001db3db99cc4eb1463988b0dd41a2fd2b8e44cd63d186586fe01fc0e05f1c5d4d525d49fd7f29d511d408999f9b73ecdc8fe720790c0b40523c1645845f26510e72aa826569cd0672723d655f05f708c1c0c47564a2bb645d8af2fdcd843809281d617446fef0d69ae13b1ec12173f03c012c2123e8fedf19fbf0324014a7ac8bcbf899305edd2e90732b065b9855fa47cb7dc75400"/452], 0x13c}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @loopback}}}, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRES64=r5, @ANYRES64, @ANYRES32=r4, @ANYRES16=r5, @ANYRES8, @ANYRES32=r1], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110a9000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28c}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c65b2f8d10368521c03992f45eef80000000c00000002000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f00000002c0)=[{r8, 0x4008}, {r8, 0x400}], 0x2, 0x48000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001100)={0x4, {{0x2, 0x4e22, @broadcast}}}, 0x88) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="920e00e922b00000c9b168f32a556008a1bb9a41bd3d93ca9f31b36342653893c71497d935453e26c71cb317a3e4dcf4e76df5388554fc1fbc1352bb889db84161de49ca051e30cd3f1c00ccb834bf9e1eb7e3ad4cd41b5af1d9aa634a123d191a1c6c13b4f27f34a3c28092e68d75ff4b9db52750ac3d1a0f", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r8], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000020000000700000089010000", @ANYRES32=0x1, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="040000000100"/28], 0x50) kernel console output (not intermixed with test programs): 10/0x10 [ 2023.196655][ T1554] ? __fget_files+0x2a/0x420 [ 2023.196693][ T1554] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2023.196723][ T1554] bpf_prog_test_run+0x2c5/0x340 [ 2023.196750][ T1554] __sys_bpf+0xa22/0xd90 [ 2023.196780][ T1554] ? __pfx___sys_bpf+0x10/0x10 [ 2023.196813][ T1554] ? __fget_files+0x2a/0x420 [ 2023.196855][ T1554] ? ksys_write+0x242/0x270 [ 2023.196885][ T1554] ? __pfx_ksys_write+0x10/0x10 [ 2023.196918][ T1554] __x64_sys_bpf+0xba/0xd0 [ 2023.196941][ T1554] do_syscall_64+0x166/0x520 [ 2023.196964][ T1554] ? trace_irq_disable+0x3b/0x140 [ 2023.196982][ T1554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.197001][ T1554] ? clear_bhb_loop+0x70/0xc0 [ 2023.197025][ T1554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.197045][ T1554] RIP: 0033:0x7ff20ab9e159 [ 2023.197063][ T1554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2023.197079][ T1554] RSP: 002b:00007ff20bad2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2023.197100][ T1554] RAX: ffffffffffffffda RBX: 00007ff20ae25fa0 RCX: 00007ff20ab9e159 [ 2023.197113][ T1554] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 2023.197126][ T1554] RBP: 00007ff20bad2090 R08: 0000000000000000 R09: 0000000000000000 [ 2023.197136][ T1554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2023.197148][ T1554] R13: 00007ff20ae26038 R14: 00007ff20ae25fa0 R15: 00007ffe00db4f78 [ 2023.197179][ T1554] [ 2023.697051][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.777569][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2024.001523][ T1564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17337'. [ 2024.748052][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.819032][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2025.792386][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2025.857313][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2026.822501][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2026.896938][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2026.978847][ T1563] syzkaller0: left promiscuous mode [ 2026.979022][ T1563] syzkaller0: left allmulticast mode [ 2026.986894][T26420] bond32: (slave dummy0): failed to get link speed/duplex [ 2027.054306][ T1567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17338'. [ 2027.097084][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2027.105579][ T1567] 8021q: VLANs not supported on gre0 [ 2027.137209][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2027.170245][ T1574] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17342'. [ 2027.289565][ T1578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17342'. [ 2027.297362][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2027.374839][ T1567] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17338'. [ 2027.417094][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2027.527798][T14835] bond32: (slave dummy0): failed to get link speed/duplex [ 2027.575830][ T1589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17345'. [ 2027.648030][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2027.758622][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2027.862853][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2027.921799][ T1596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17349'. [ 2029.465878][ T1613] FAULT_INJECTION: forcing a failure. [ 2029.465878][ T1613] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.465911][ T1613] CPU: 0 UID: 0 PID: 1613 Comm: syz.3.17355 Not tainted syzkaller #0 PREEMPT(full) [ 2029.465933][ T1613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2029.465944][ T1613] Call Trace: [ 2029.465952][ T1613] [ 2029.465961][ T1613] dump_stack_lvl+0xe8/0x150 [ 2029.465994][ T1613] should_fail_ex+0x410/0x560 [ 2029.466022][ T1613] should_failslab+0xa8/0x100 [ 2029.466047][ T1613] ? __kernfs_new_node+0xe6/0x980 [ 2029.466068][ T1613] kmem_cache_alloc_noprof+0xa1/0x600 [ 2029.466096][ T1613] ? kstrdup+0x81/0x100 [ 2029.466116][ T1613] ? __kernfs_new_node+0xe6/0x980 [ 2029.466143][ T1613] __kernfs_new_node+0xe6/0x980 [ 2029.466173][ T1613] ? __pfx___kernfs_new_node+0x10/0x10 [ 2029.466193][ T1613] ? kernfs_root+0x1c/0x230 [ 2029.466227][ T1613] ? kernfs_root+0x1c/0x230 [ 2029.466245][ T1613] ? kernfs_root+0x1c/0x230 [ 2029.466261][ T1613] ? kernfs_root+0x1c/0x230 [ 2029.466285][ T1613] kernfs_new_node+0xea/0x140 [ 2029.466312][ T1613] kernfs_create_link+0xa7/0x200 [ 2029.466340][ T1613] sysfs_do_create_link_sd+0x83/0x110 [ 2029.466371][ T1613] device_add_class_symlinks+0x1cf/0x240 [ 2029.466397][ T1613] device_add+0x467/0xb80 [ 2029.466420][ T1613] netdev_register_kobject+0x197/0x350 [ 2029.466447][ T1613] register_netdevice+0x1433/0x1eb0 [ 2029.466490][ T1613] ? __pfx_register_netdevice+0x10/0x10 [ 2029.466526][ T1613] ? alloc_netdev_mqs+0xef9/0x12a0 [ 2029.466558][ T1613] register_netdev+0x40/0x60 [ 2029.466584][ T1613] gprs_attach+0x182/0x530 [ 2029.466607][ T1613] pep_setsockopt+0x328/0x4b0 [ 2029.466638][ T1613] ? __pfx_pep_setsockopt+0x10/0x10 [ 2029.466668][ T1613] ? sock_common_setsockopt+0x36/0xc0 [ 2029.466689][ T1613] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2029.466712][ T1613] do_sock_setsockopt+0x17c/0x1b0 [ 2029.466742][ T1613] __x64_sys_setsockopt+0x13d/0x1b0 [ 2029.466771][ T1613] do_syscall_64+0x166/0x520 [ 2029.466794][ T1613] ? trace_irq_disable+0x3b/0x140 [ 2029.466814][ T1613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.466833][ T1613] ? clear_bhb_loop+0x70/0xc0 [ 2029.466857][ T1613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.466875][ T1613] RIP: 0033:0x7f8bdf79e159 [ 2029.466894][ T1613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2029.466910][ T1613] RSP: 002b:00007f8be073e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2029.466932][ T1613] RAX: ffffffffffffffda RBX: 00007f8bdfa25fa0 RCX: 00007f8bdf79e159 [ 2029.466946][ T1613] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000003 [ 2029.466958][ T1613] RBP: 00007f8be073e090 R08: 0000000000000004 R09: 0000000000000000 [ 2029.466971][ T1613] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 2029.466983][ T1613] R13: 00007f8bdfa26038 R14: 00007f8bdfa25fa0 R15: 00007ffcde184828 [ 2029.467016][ T1613] [ 2029.985442][ T1628] netlink: 'syz.1.17357': attribute type 5 has an invalid length. [ 2029.985463][ T1628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17357'. [ 2030.112782][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17357'. [ 2030.162694][ T1638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17365'. [ 2031.211458][ T1680] netlink: 'syz.2.17376': attribute type 4 has an invalid length. [ 2031.515310][ T1700] x_tables: duplicate underflow at hook 1 [ 2031.664956][ T1706] FAULT_INJECTION: forcing a failure. [ 2031.664956][ T1706] name failslab, interval 1, probability 0, space 0, times 0 [ 2031.664988][ T1706] CPU: 0 UID: 0 PID: 1706 Comm: syz.0.17382 Not tainted syzkaller #0 PREEMPT(full) [ 2031.665010][ T1706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2031.665022][ T1706] Call Trace: [ 2031.665031][ T1706] [ 2031.665040][ T1706] dump_stack_lvl+0xe8/0x150 [ 2031.665071][ T1706] should_fail_ex+0x410/0x560 [ 2031.665099][ T1706] should_failslab+0xa8/0x100 [ 2031.665124][ T1706] __kvmalloc_node_noprof+0x176/0x820 [ 2031.665150][ T1706] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 2031.665176][ T1706] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 2031.665208][ T1706] bpf_jit_binary_pack_alloc+0x10a/0x300 [ 2031.665233][ T1706] ? __pfx_jit_fill_hole+0x10/0x10 [ 2031.665262][ T1706] bpf_int_jit_compile+0xa16/0x17e0 [ 2031.665305][ T1706] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 2031.665339][ T1706] ? rcu_is_watching+0x16/0xb0 [ 2031.665364][ T1706] ? trace_kmalloc+0x2a/0xf0 [ 2031.665390][ T1706] __bpf_prog_select_runtime+0x53e/0xbf0 [ 2031.665423][ T1706] bpf_check+0x23e7/0x2e10 [ 2031.665456][ T1706] ? ktime_get_with_offset+0x93/0x2d0 [ 2031.665481][ T1706] ? __pfx_bpf_check+0x10/0x10 [ 2031.665505][ T1706] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2031.665535][ T1706] bpf_prog_load+0x14d6/0x1c20 [ 2031.665578][ T1706] ? __pfx_bpf_prog_load+0x10/0x10 [ 2031.665626][ T1706] __sys_bpf+0xd0d/0xd90 [ 2031.665655][ T1706] ? __pfx___sys_bpf+0x10/0x10 [ 2031.665688][ T1706] ? __fget_files+0x2a/0x420 [ 2031.665731][ T1706] ? ksys_write+0x242/0x270 [ 2031.665761][ T1706] ? __pfx_ksys_write+0x10/0x10 [ 2031.665794][ T1706] __x64_sys_bpf+0xba/0xd0 [ 2031.665815][ T1706] do_syscall_64+0x166/0x520 [ 2031.665838][ T1706] ? trace_irq_disable+0x3b/0x140 [ 2031.665856][ T1706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2031.665875][ T1706] ? clear_bhb_loop+0x70/0xc0 [ 2031.665899][ T1706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2031.665918][ T1706] RIP: 0033:0x7f48d059e159 [ 2031.665937][ T1706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2031.665953][ T1706] RSP: 002b:00007f48d152b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2031.665975][ T1706] RAX: ffffffffffffffda RBX: 00007f48d0825fa0 RCX: 00007f48d059e159 [ 2031.665989][ T1706] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2031.666002][ T1706] RBP: 00007f48d152b090 R08: 0000000000000000 R09: 0000000000000000 [ 2031.666014][ T1706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2031.666025][ T1706] R13: 00007f48d0826038 R14: 00007f48d0825fa0 R15: 00007ffcbfbdd9e8 [ 2031.666055][ T1706] [ 2031.826663][T26412] net_ratelimit: 36 callbacks suppressed [ 2031.826680][T26412] bond32: (slave dummy0): link status up again after 0 ms [ 2031.846828][T26408] bond32: (slave dummy0): link status up again after 0 ms [ 2031.875695][T26408] bond32: (slave dummy0): link status up again after 0 ms [ 2031.886683][T26412] bond32: (slave dummy0): link status up again after 0 ms [ 2031.910909][T26408] bond32: (slave dummy0): link status up again after 0 ms [ 2031.926732][T26412] bond32: (slave dummy0): link status up again after 0 ms [ 2031.975950][T26302] bond32: (slave dummy0): link status up again after 0 ms [ 2031.991222][T26408] bond32: (slave dummy0): link status up again after 0 ms [ 2032.007403][T26408] bond32: (slave dummy0): link status up again after 0 ms [ 2032.028647][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2032.780406][ T1734] FAULT_INJECTION: forcing a failure. [ 2032.780406][ T1734] name failslab, interval 1, probability 0, space 0, times 0 [ 2032.780438][ T1734] CPU: 0 UID: 0 PID: 1734 Comm: syz.1.17388 Not tainted syzkaller #0 PREEMPT(full) [ 2032.780459][ T1734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2032.780479][ T1734] Call Trace: [ 2032.780488][ T1734] [ 2032.780496][ T1734] dump_stack_lvl+0xe8/0x150 [ 2032.780528][ T1734] should_fail_ex+0x410/0x560 [ 2032.780556][ T1734] should_failslab+0xa8/0x100 [ 2032.780582][ T1734] __kvmalloc_node_noprof+0x176/0x820 [ 2032.780605][ T1734] ? bpf_compute_postorder+0x87c/0x970 [ 2032.780625][ T1734] ? bpf_stack_liveness_init+0x29/0x90 [ 2032.780645][ T1734] ? bpf_stack_liveness_init+0x29/0x90 [ 2032.780687][ T1734] bpf_stack_liveness_init+0x29/0x90 [ 2032.780713][ T1734] bpf_check+0x24f6/0x2e10 [ 2032.780745][ T1734] ? ktime_get_with_offset+0x93/0x2d0 [ 2032.780770][ T1734] ? __pfx_bpf_check+0x10/0x10 [ 2032.780794][ T1734] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2032.780825][ T1734] bpf_prog_load+0x14d6/0x1c20 [ 2032.780859][ T1734] ? __pfx_bpf_prog_load+0x10/0x10 [ 2032.780906][ T1734] __sys_bpf+0xd0d/0xd90 [ 2032.780936][ T1734] ? __pfx___sys_bpf+0x10/0x10 [ 2032.780968][ T1734] ? __fget_files+0x2a/0x420 [ 2032.781012][ T1734] ? ksys_write+0x242/0x270 [ 2032.781042][ T1734] ? __pfx_ksys_write+0x10/0x10 [ 2032.781076][ T1734] __x64_sys_bpf+0xba/0xd0 [ 2032.781099][ T1734] do_syscall_64+0x166/0x520 [ 2032.781123][ T1734] ? trace_irq_disable+0x3b/0x140 [ 2032.781142][ T1734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2032.781162][ T1734] ? clear_bhb_loop+0x70/0xc0 [ 2032.781185][ T1734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2032.781204][ T1734] RIP: 0033:0x7ff20ab9e159 [ 2032.781220][ T1734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2032.781236][ T1734] RSP: 002b:00007ff20bad2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2032.781255][ T1734] RAX: ffffffffffffffda RBX: 00007ff20ae25fa0 RCX: 00007ff20ab9e159 [ 2032.781268][ T1734] RDX: 0000000000000094 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 2032.781280][ T1734] RBP: 00007ff20bad2090 R08: 0000000000000000 R09: 0000000000000000 [ 2032.781291][ T1734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2032.781301][ T1734] R13: 00007ff20ae26038 R14: 00007ff20ae25fa0 R15: 00007ffe00db4f78 [ 2032.781333][ T1734] [ 2033.201300][ T1729] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 2033.933378][ T1772] netlink: 'syz.4.17395': attribute type 1 has an invalid length. [ 2034.158460][ T1772] 8021q: adding VLAN 0 to HW filter on device bond36 [ 2034.251098][ T1775] bond35: (slave veth0_to_bond): Releasing backup interface [ 2034.251122][ T1775] bond35: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2034.355406][ T1775] bond36: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2034.451487][ T1776] bridge143: entered promiscuous mode [ 2034.487974][ T1776] bond36: (slave bridge143): Enslaving as an active interface with an up link [ 2035.489250][ T1816] syzkaller1: entered promiscuous mode [ 2035.489422][ T1816] syzkaller1: entered allmulticast mode [ 2035.779661][ T1838] netlink: 'syz.3.17409': attribute type 10 has an invalid length. [ 2036.158682][ T1850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17412'. [ 2036.379044][ T1862] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 2036.870553][ T1870] net_ratelimit: 48 callbacks suppressed [ 2036.870573][ T1870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2036.906404][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2037.006723][T14836] bond32: (slave dummy0): failed to get link speed/duplex [ 2037.081675][ T1884] netlink: 72 bytes leftover after parsing attributes in process `syz.4.17425'. [ 2037.114223][ T1892] FAULT_INJECTION: forcing a failure. [ 2037.114223][ T1892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2037.114255][ T1892] CPU: 0 UID: 0 PID: 1892 Comm: syz.2.17427 Not tainted syzkaller #0 PREEMPT(full) [ 2037.114276][ T1892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2037.114287][ T1892] Call Trace: [ 2037.114296][ T1892] [ 2037.114304][ T1892] dump_stack_lvl+0xe8/0x150 [ 2037.114339][ T1892] should_fail_ex+0x410/0x560 [ 2037.114366][ T1892] _copy_from_user+0x2d/0xb0 [ 2037.114392][ T1892] ___sys_sendmsg+0x1c6/0x360 [ 2037.114417][ T1892] ? __lock_acquire+0x747/0x2de0 [ 2037.114442][ T1892] ? __pfx____sys_sendmsg+0x10/0x10 [ 2037.114504][ T1892] ? __fget_files+0x2a/0x420 [ 2037.114529][ T1892] ? __fget_files+0x3a2/0x420 [ 2037.114564][ T1892] __x64_sys_sendmsg+0x1b1/0x290 [ 2037.114592][ T1892] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2037.114639][ T1892] do_syscall_64+0x166/0x520 [ 2037.114663][ T1892] ? trace_irq_disable+0x3b/0x140 [ 2037.114682][ T1892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.114702][ T1892] ? clear_bhb_loop+0x70/0xc0 [ 2037.114726][ T1892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.114746][ T1892] RIP: 0033:0x7fccfb39e159 [ 2037.114763][ T1892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2037.114779][ T1892] RSP: 002b:00007fccfc206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2037.114801][ T1892] RAX: ffffffffffffffda RBX: 00007fccfb625fa0 RCX: 00007fccfb39e159 [ 2037.114816][ T1892] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 2037.114828][ T1892] RBP: 00007fccfc206090 R08: 0000000000000000 R09: 0000000000000000 [ 2037.114841][ T1892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2037.114853][ T1892] R13: 00007fccfb626038 R14: 00007fccfb625fa0 R15: 00007fff55c09808 [ 2037.114885][ T1892] [ 2037.301235][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2037.307027][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2037.381175][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2037.417566][T26420] bond32: (slave dummy0): failed to get link speed/duplex [ 2037.529551][ T316] bond32: (slave dummy0): failed to get link speed/duplex [ 2037.548698][ T1902] FAULT_INJECTION: forcing a failure. [ 2037.548698][ T1902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2037.548727][ T1902] CPU: 0 UID: 0 PID: 1902 Comm: syz.3.17430 Not tainted syzkaller #0 PREEMPT(full) [ 2037.548749][ T1902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2037.548760][ T1902] Call Trace: [ 2037.548768][ T1902] [ 2037.548777][ T1902] dump_stack_lvl+0xe8/0x150 [ 2037.548808][ T1902] should_fail_ex+0x410/0x560 [ 2037.548836][ T1902] _copy_from_user+0x2d/0xb0 [ 2037.548861][ T1902] vmemdup_user+0x5e/0xd0 [ 2037.548883][ T1902] map_get_next_key+0x1c3/0x610 [ 2037.548907][ T1902] ? bpf_lsm_bpf+0x9/0x20 [ 2037.548933][ T1902] ? security_bpf+0x7e/0x2d0 [ 2037.548957][ T1902] __sys_bpf+0xb83/0xd90 [ 2037.548987][ T1902] ? __pfx___sys_bpf+0x10/0x10 [ 2037.549020][ T1902] ? __fget_files+0x2a/0x420 [ 2037.549073][ T1902] ? ksys_write+0x242/0x270 [ 2037.549103][ T1902] ? __pfx_ksys_write+0x10/0x10 [ 2037.549137][ T1902] __x64_sys_bpf+0xba/0xd0 [ 2037.549160][ T1902] do_syscall_64+0x166/0x520 [ 2037.549183][ T1902] ? trace_irq_disable+0x3b/0x140 [ 2037.549201][ T1902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.549221][ T1902] ? clear_bhb_loop+0x70/0xc0 [ 2037.549244][ T1902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.549264][ T1902] RIP: 0033:0x7f8bdf79e159 [ 2037.549282][ T1902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2037.549298][ T1902] RSP: 002b:00007f8be073e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2037.549319][ T1902] RAX: ffffffffffffffda RBX: 00007f8bdfa25fa0 RCX: 00007f8bdf79e159 [ 2037.549333][ T1902] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000004 [ 2037.549345][ T1902] RBP: 00007f8be073e090 R08: 0000000000000000 R09: 0000000000000000 [ 2037.549357][ T1902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2037.549369][ T1902] R13: 00007f8bdfa26038 R14: 00007f8bdfa25fa0 R15: 00007ffcde184828 [ 2037.549400][ T1902] [ 2037.638495][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2037.751049][T14836] bond32: (slave dummy0): failed to get link speed/duplex [ 2039.733990][ T1953] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 2039.838588][ T1955] syzkaller0: left promiscuous mode [ 2039.838612][ T1955] syzkaller0: left allmulticast mode [ 2040.560184][ T1981] FAULT_INJECTION: forcing a failure. [ 2040.560184][ T1981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2040.560215][ T1981] CPU: 0 UID: 0 PID: 1981 Comm: syz.0.17448 Not tainted syzkaller #0 PREEMPT(full) [ 2040.560236][ T1981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2040.560248][ T1981] Call Trace: [ 2040.560256][ T1981] [ 2040.560266][ T1981] dump_stack_lvl+0xe8/0x150 [ 2040.560298][ T1981] should_fail_ex+0x410/0x560 [ 2040.560325][ T1981] _copy_to_user+0x31/0xb0 [ 2040.560350][ T1981] bpf_test_finish+0x1cf/0x690 [ 2040.560389][ T1981] ? __pfx_bpf_test_finish+0x10/0x10 [ 2040.560424][ T1981] ? _copy_from_user+0x94/0xb0 [ 2040.560450][ T1981] ? bpf_test_init+0x113/0x150 [ 2040.560480][ T1981] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 2040.560526][ T1981] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2040.560560][ T1981] ? __fget_files+0x2a/0x420 [ 2040.560591][ T1981] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2040.560621][ T1981] bpf_prog_test_run+0x2c5/0x340 [ 2040.560648][ T1981] __sys_bpf+0xa22/0xd90 [ 2040.560678][ T1981] ? __pfx___sys_bpf+0x10/0x10 [ 2040.560711][ T1981] ? __fget_files+0x2a/0x420 [ 2040.560754][ T1981] ? ksys_write+0x242/0x270 [ 2040.560785][ T1981] ? __pfx_ksys_write+0x10/0x10 [ 2040.560818][ T1981] __x64_sys_bpf+0xba/0xd0 [ 2040.560841][ T1981] do_syscall_64+0x166/0x520 [ 2040.560870][ T1981] ? trace_irq_disable+0x3b/0x140 [ 2040.560889][ T1981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2040.560909][ T1981] ? clear_bhb_loop+0x70/0xc0 [ 2040.560932][ T1981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2040.560952][ T1981] RIP: 0033:0x7f48d059e159 [ 2040.560970][ T1981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2040.560986][ T1981] RSP: 002b:00007f48d152b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2040.561007][ T1981] RAX: ffffffffffffffda RBX: 00007f48d0825fa0 RCX: 00007f48d059e159 [ 2040.561021][ T1981] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 000000000000000a [ 2040.561034][ T1981] RBP: 00007f48d152b090 R08: 0000000000000000 R09: 0000000000000000 [ 2040.561047][ T1981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2040.561059][ T1981] R13: 00007f48d0826038 R14: 00007f48d0825fa0 R15: 00007ffcbfbdd9e8 [ 2040.561091][ T1981] [ 2041.289740][ T2001] syzkaller0: entered promiscuous mode [ 2041.289773][ T2001] syzkaller0: entered allmulticast mode [ 2041.424360][ T2014] FAULT_INJECTION: forcing a failure. [ 2041.424360][ T2014] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.424392][ T2014] CPU: 0 UID: 0 PID: 2014 Comm: syz.3.17458 Not tainted syzkaller #0 PREEMPT(full) [ 2041.424414][ T2014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2041.424426][ T2014] Call Trace: [ 2041.424434][ T2014] [ 2041.424442][ T2014] dump_stack_lvl+0xe8/0x150 [ 2041.424473][ T2014] should_fail_ex+0x410/0x560 [ 2041.424500][ T2014] should_failslab+0xa8/0x100 [ 2041.424526][ T2014] __kvmalloc_node_noprof+0x176/0x820 [ 2041.424548][ T2014] ? security_capable+0x7e/0x2c0 [ 2041.424571][ T2014] ? bpf_check+0x15a9/0x2e10 [ 2041.424591][ T2014] ? bpf_check+0x15a9/0x2e10 [ 2041.424618][ T2014] bpf_check+0x15a9/0x2e10 [ 2041.424650][ T2014] ? ktime_get_with_offset+0x93/0x2d0 [ 2041.424674][ T2014] ? __pfx_bpf_check+0x10/0x10 [ 2041.424697][ T2014] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2041.424725][ T2014] bpf_prog_load+0x14d6/0x1c20 [ 2041.424766][ T2014] ? __pfx_bpf_prog_load+0x10/0x10 [ 2041.424814][ T2014] __sys_bpf+0xd0d/0xd90 [ 2041.424842][ T2014] ? __pfx___sys_bpf+0x10/0x10 [ 2041.424875][ T2014] ? __fget_files+0x2a/0x420 [ 2041.424916][ T2014] ? ksys_write+0x242/0x270 [ 2041.424946][ T2014] ? __pfx_ksys_write+0x10/0x10 [ 2041.424979][ T2014] __x64_sys_bpf+0xba/0xd0 [ 2041.425002][ T2014] do_syscall_64+0x166/0x520 [ 2041.425025][ T2014] ? trace_irq_disable+0x3b/0x140 [ 2041.425044][ T2014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.425063][ T2014] ? clear_bhb_loop+0x70/0xc0 [ 2041.425087][ T2014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.425106][ T2014] RIP: 0033:0x7f8bdf79e159 [ 2041.425124][ T2014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2041.425141][ T2014] RSP: 002b:00007f8be073e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2041.425162][ T2014] RAX: ffffffffffffffda RBX: 00007f8bdfa25fa0 RCX: 00007f8bdf79e159 [ 2041.425176][ T2014] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 2041.425188][ T2014] RBP: 00007f8be073e090 R08: 0000000000000000 R09: 0000000000000000 [ 2041.425201][ T2014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2041.425212][ T2014] R13: 00007f8bdfa26038 R14: 00007f8bdfa25fa0 R15: 00007ffcde184828 [ 2041.425245][ T2014] [ 2041.701636][ T2017] FAULT_INJECTION: forcing a failure. [ 2041.701636][ T2017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2041.701668][ T2017] CPU: 0 UID: 0 PID: 2017 Comm: syz.3.17459 Not tainted syzkaller #0 PREEMPT(full) [ 2041.701690][ T2017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2041.701702][ T2017] Call Trace: [ 2041.701709][ T2017] [ 2041.701718][ T2017] dump_stack_lvl+0xe8/0x150 [ 2041.701762][ T2017] should_fail_ex+0x410/0x560 [ 2041.701790][ T2017] _copy_to_user+0x31/0xb0 [ 2041.701817][ T2017] simple_read_from_buffer+0xe1/0x170 [ 2041.701849][ T2017] proc_fail_nth_read+0x1bb/0x230 [ 2041.701878][ T2017] ? common_file_perm+0x20e/0x2b0 [ 2041.701904][ T2017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2041.701937][ T2017] ? rw_verify_area+0x24a/0x4c0 [ 2041.701967][ T2017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2041.701995][ T2017] vfs_read+0x213/0xa80 [ 2041.702028][ T2017] ? __pfx___mutex_lock+0x10/0x10 [ 2041.702054][ T2017] ? __pfx_vfs_read+0x10/0x10 [ 2041.702082][ T2017] ? __fget_files+0x2a/0x420 [ 2041.702110][ T2017] ? __fget_files+0x3a2/0x420 [ 2041.702134][ T2017] ? __fget_files+0x2a/0x420 [ 2041.702168][ T2017] ksys_read+0x150/0x270 [ 2041.702198][ T2017] ? __pfx_ksys_read+0x10/0x10 [ 2041.702225][ T2017] ? __pfx_sock_ioctl+0x10/0x10 [ 2041.702263][ T2017] do_syscall_64+0x166/0x520 [ 2041.702285][ T2017] ? trace_irq_disable+0x3b/0x140 [ 2041.702305][ T2017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.702325][ T2017] ? clear_bhb_loop+0x70/0xc0 [ 2041.702349][ T2017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.702368][ T2017] RIP: 0033:0x7f8bdf75e98e [ 2041.702386][ T2017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2041.702402][ T2017] RSP: 002b:00007f8be073dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2041.702423][ T2017] RAX: ffffffffffffffda RBX: 00007f8be073e6c0 RCX: 00007f8bdf75e98e [ 2041.702437][ T2017] RDX: 000000000000000f RSI: 00007f8be073e0a0 RDI: 0000000000000003 [ 2041.702449][ T2017] RBP: 00007f8be073e090 R08: 0000000000000000 R09: 0000000000000000 [ 2041.702461][ T2017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2041.702472][ T2017] R13: 00007f8bdfa26038 R14: 00007f8bdfa25fa0 R15: 00007ffcde184828 [ 2041.702503][ T2017] [ 2041.938353][T26420] net_ratelimit: 40 callbacks suppressed [ 2041.938373][T26420] bond32: (slave dummy0): failed to get link speed/duplex [ 2042.047095][T26302] bond32: (slave dummy0): failed to get link speed/duplex [ 2042.209966][ T2027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.210113][ T2027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.210875][ T2027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.210970][ T2027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.211037][ T2027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.211103][ T2027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.211169][ T2027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.211235][ T2027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.685146][ T2036] IPVS: Scheduler module ip_vs_sip not found [ 2042.919159][ T2036] IPVS: persistence engine module ip_vs_pe_ not found [ 2043.102340][ T2053] FAULT_INJECTION: forcing a failure. [ 2043.102340][ T2053] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2043.102451][ T2053] CPU: 0 UID: 0 PID: 2053 Comm: syz.4.17473 Not tainted syzkaller #0 PREEMPT(full) [ 2043.102474][ T2053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2043.102485][ T2053] Call Trace: [ 2043.102493][ T2053] [ 2043.102502][ T2053] dump_stack_lvl+0xe8/0x150 [ 2043.102535][ T2053] should_fail_ex+0x410/0x560 [ 2043.102564][ T2053] prepare_alloc_pages+0x223/0x600 [ 2043.102592][ T2053] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2043.102626][ T2053] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2043.102653][ T2053] ? __pfx_policy_nodemask+0x10/0x10 [ 2043.102678][ T2053] ? __pfx___css_rstat_updated+0x10/0x10 [ 2043.102709][ T2053] alloc_pages_mpol+0x21e/0x390 [ 2043.102740][ T2053] alloc_pages_noprof+0xb1/0x2b0 [ 2043.102767][ T2053] pte_alloc_one+0x22/0x370 [ 2043.102793][ T2053] do_pte_missing+0x13c8/0x34b0 [ 2043.102818][ T2053] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 2043.102845][ T2053] ? __pmd_alloc+0x40a/0x5c0 [ 2043.102874][ T2053] handle_mm_fault+0x1a53/0x3750 [ 2043.102911][ T2053] ? handle_mm_fault+0xf1/0x3750 [ 2043.102948][ T2053] ? __pfx_handle_mm_fault+0x10/0x10 [ 2043.102987][ T2053] ? __lock_acquire+0x747/0x2de0 [ 2043.103012][ T2053] ? lock_mm_and_find_vma+0xa7/0x340 [ 2043.103044][ T2053] do_user_addr_fault+0x746/0x1340 [ 2043.103081][ T2053] exc_page_fault+0x6a/0xc0 [ 2043.103107][ T2053] asm_exc_page_fault+0x26/0x30 [ 2043.103124][ T2053] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 2043.103154][ T2053] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 2043.103170][ T2053] RSP: 0018:ffffc90005297d58 EFLAGS: 00050212 [ 2043.103188][ T2053] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 2043.103202][ T2053] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: ffffc90005297dc0 [ 2043.103215][ T2053] RBP: ffffc90005297eb8 R08: ffffc90005297dcf R09: 1ffff92000a52fb9 [ 2043.103229][ T2053] R10: dffffc0000000000 R11: fffff52000a52fba R12: 00002000000002c0 [ 2043.103243][ T2053] R13: 1ffff92000a52fb4 R14: ffffc90005297dc0 R15: 00002000000002c0 [ 2043.103274][ T2053] _copy_from_user+0x7a/0xb0 [ 2043.103301][ T2053] __sys_connect+0x155/0x450 [ 2043.103328][ T2053] ? __pfx___sys_connect+0x10/0x10 [ 2043.103363][ T2053] ? __pfx_ksys_write+0x10/0x10 [ 2043.103399][ T2053] __x64_sys_connect+0x7a/0x90 [ 2043.103423][ T2053] do_syscall_64+0x166/0x520 [ 2043.103445][ T2053] ? trace_irq_disable+0x3b/0x140 [ 2043.103464][ T2053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.103483][ T2053] ? clear_bhb_loop+0x70/0xc0 [ 2043.103507][ T2053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.103526][ T2053] RIP: 0033:0x7f1c8739e159 [ 2043.103542][ T2053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2043.103556][ T2053] RSP: 002b:00007f1c8824d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2043.103575][ T2053] RAX: ffffffffffffffda RBX: 00007f1c87625fa0 RCX: 00007f1c8739e159 [ 2043.103588][ T2053] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2043.103600][ T2053] RBP: 00007f1c8824d090 R08: 0000000000000000 R09: 0000000000000000 [ 2043.103612][ T2053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2043.103629][ T2053] R13: 00007f1c87626038 R14: 00007f1c87625fa0 R15: 00007ffe8367e278 [ 2043.103662][ T2053] [ 2043.589539][ T2066] netlink: 'syz.4.17477': attribute type 2 has an invalid length. [ 2043.730400][ T2069] pimreg: entered allmulticast mode [ 2043.757616][ T2071] macvtap3: entered promiscuous mode [ 2043.757637][ T2071] macvtap3: entered allmulticast mode [ 2044.152970][ T2078] netlink: 'syz.2.17481': attribute type 4 has an invalid length. [ 2044.382694][ T2091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17485'. [ 2044.504919][ T2091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17485'. [ 2045.444605][ T2128] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2045.740316][ T2122] syzkaller0: entered promiscuous mode [ 2045.740338][ T2122] syzkaller0: entered allmulticast mode [ 2045.896207][ T2147] FAULT_INJECTION: forcing a failure. [ 2045.896207][ T2147] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.896241][ T2147] CPU: 0 UID: 0 PID: 2147 Comm: syz.3.17500 Not tainted syzkaller #0 PREEMPT(full) [ 2045.896262][ T2147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2045.896273][ T2147] Call Trace: [ 2045.896281][ T2147] [ 2045.896289][ T2147] dump_stack_lvl+0xe8/0x150 [ 2045.896321][ T2147] should_fail_ex+0x410/0x560 [ 2045.896349][ T2147] should_failslab+0xa8/0x100 [ 2045.896375][ T2147] __kvmalloc_node_noprof+0x176/0x820 [ 2045.896397][ T2147] ? __kmalloc_cache_noprof+0x321/0x600 [ 2045.896416][ T2147] ? bpf_int_jit_compile+0x5af/0x17e0 [ 2045.896443][ T2147] ? bpf_int_jit_compile+0x5af/0x17e0 [ 2045.896477][ T2147] bpf_int_jit_compile+0x5af/0x17e0 [ 2045.896523][ T2147] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 2045.896552][ T2147] ? rcu_is_watching+0x16/0xb0 [ 2045.896574][ T2147] ? trace_kmalloc+0x2a/0xf0 [ 2045.896598][ T2147] __bpf_prog_select_runtime+0x53e/0xbf0 [ 2045.896629][ T2147] bpf_check+0x23e7/0x2e10 [ 2045.896660][ T2147] ? ktime_get_with_offset+0x93/0x2d0 [ 2045.896683][ T2147] ? __pfx_bpf_check+0x10/0x10 [ 2045.896704][ T2147] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2045.896733][ T2147] bpf_prog_load+0x14d6/0x1c20 [ 2045.896767][ T2147] ? __pfx_bpf_prog_load+0x10/0x10 [ 2045.896816][ T2147] __sys_bpf+0xd0d/0xd90 [ 2045.896845][ T2147] ? __pfx___sys_bpf+0x10/0x10 [ 2045.896878][ T2147] ? __fget_files+0x2a/0x420 [ 2045.896929][ T2147] ? ksys_write+0x242/0x270 [ 2045.896959][ T2147] ? __pfx_ksys_write+0x10/0x10 [ 2045.896996][ T2147] __x64_sys_bpf+0xba/0xd0 [ 2045.897020][ T2147] do_syscall_64+0x166/0x520 [ 2045.897042][ T2147] ? trace_irq_disable+0x3b/0x140 [ 2045.897062][ T2147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.897082][ T2147] ? clear_bhb_loop+0x70/0xc0 [ 2045.897106][ T2147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.897125][ T2147] RIP: 0033:0x7f8bdf79e159 [ 2045.897144][ T2147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2045.897160][ T2147] RSP: 002b:00007f8be073e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2045.897181][ T2147] RAX: ffffffffffffffda RBX: 00007f8bdfa25fa0 RCX: 00007f8bdf79e159 [ 2045.897195][ T2147] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2045.897208][ T2147] RBP: 00007f8be073e090 R08: 0000000000000000 R09: 0000000000000000 [ 2045.897220][ T2147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2045.897232][ T2147] R13: 00007f8bdfa26038 R14: 00007f8bdfa25fa0 R15: 00007ffcde184828 [ 2045.897263][ T2147] [ 2046.407849][ T2159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17503'. [ 2046.812971][ T2186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17504'. [ 2047.143724][ C0] net_ratelimit: 1774 callbacks suppressed [ 2047.143749][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2047.144233][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2047.696694][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2048.186553][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2048.738272][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2048.900276][T10358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2049.219494][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2049.785010][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2050.267966][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2050.627204][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2050.680531][ T2159] bond0: (slave veth0_to_bond): Releasing backup interface [ 2050.680554][ T2159] bond0: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2050.803847][ T2193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17505'. [ 2050.971183][ T2181] ovs-s!: entered promiscuous mode [ 2051.317503][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.342077][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.362153][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.385231][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.408874][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.415271][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.440915][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.444528][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.478196][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.485298][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.511702][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.513745][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.515754][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.584560][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.592683][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.594758][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.596890][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.641473][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.643598][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.645625][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.678505][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.680557][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.682587][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.684549][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.730585][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.732716][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.734810][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.766774][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.769385][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.771406][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.773387][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.775405][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2051.841193][ T2205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2052.166959][T26408] net_ratelimit: 183 callbacks suppressed [ 2052.166980][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2052.284549][ T2241] vlan2: entered promiscuous mode [ 2052.284570][ T2241] macvlan0: entered promiscuous mode [ 2052.338160][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2052.476064][ T2241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17516'. [ 2052.477055][T26302] bond32: (slave dummy0): failed to get link speed/duplex [ 2052.656805][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2052.773708][ T2241] syzkaller0: entered promiscuous mode [ 2052.773730][ T2241] syzkaller0: entered allmulticast mode [ 2052.801821][ T2252] netlink: 'syz.1.17517': attribute type 10 has an invalid length. [ 2052.801841][ T2252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17517'. [ 2052.897040][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2052.987836][ T2261] ip_tables: iptables: counters copy to user failed while replacing table [ 2053.008351][ T2261] FAULT_INJECTION: forcing a failure. [ 2053.008351][ T2261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2053.008380][ T2261] CPU: 0 UID: 0 PID: 2261 Comm: syz.0.17520 Not tainted syzkaller #0 PREEMPT(full) [ 2053.008401][ T2261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2053.008413][ T2261] Call Trace: [ 2053.008421][ T2261] [ 2053.008429][ T2261] dump_stack_lvl+0xe8/0x150 [ 2053.008459][ T2261] should_fail_ex+0x410/0x560 [ 2053.008484][ T2261] _copy_from_user+0x2d/0xb0 [ 2053.008510][ T2261] generic_map_update_batch+0x6ba/0xae0 [ 2053.008551][ T2261] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2053.008580][ T2261] ? __fget_files+0x2a/0x420 [ 2053.008613][ T2261] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2053.008640][ T2261] bpf_map_do_batch+0x391/0x630 [ 2053.008670][ T2261] __sys_bpf+0xbe5/0xd90 [ 2053.008696][ T2261] ? __pfx___sys_bpf+0x10/0x10 [ 2053.008730][ T2261] ? __fget_files+0x2a/0x420 [ 2053.008772][ T2261] ? ksys_write+0x242/0x270 [ 2053.008803][ T2261] ? __pfx_ksys_write+0x10/0x10 [ 2053.008836][ T2261] __x64_sys_bpf+0xba/0xd0 [ 2053.008858][ T2261] do_syscall_64+0x166/0x520 [ 2053.008889][ T2261] ? trace_irq_disable+0x3b/0x140 [ 2053.008909][ T2261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2053.008928][ T2261] ? clear_bhb_loop+0x70/0xc0 [ 2053.008952][ T2261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2053.008971][ T2261] RIP: 0033:0x7f48d059e159 [ 2053.008989][ T2261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2053.009005][ T2261] RSP: 002b:00007f48d152b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2053.009025][ T2261] RAX: ffffffffffffffda RBX: 00007f48d0825fa0 RCX: 00007f48d059e159 [ 2053.009038][ T2261] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 2053.009051][ T2261] RBP: 00007f48d152b090 R08: 0000000000000000 R09: 0000000000000000 [ 2053.009064][ T2261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2053.009076][ T2261] R13: 00007f48d0826038 R14: 00007f48d0825fa0 R15: 00007ffcbfbdd9e8 [ 2053.009105][ T2261] [ 2053.187279][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2053.258138][ T2264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17522'. [ 2053.258719][ T2264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17522'. [ 2053.317781][T26302] bond32: (slave dummy0): failed to get link speed/duplex [ 2053.393315][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2053.427092][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2053.847956][ T2282] netlink: 220 bytes leftover after parsing attributes in process `syz.4.17528'. [ 2054.046081][ T316] tipc: Subscription rejected, illegal request [ 2054.362069][ T2307] bond15: Unable to set up delay as MII monitoring is disabled [ 2054.499611][ T2307] bond15 (unregistering): Released all slaves [ 2054.605614][ T2286] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2054.605649][ T2286] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 2054.605674][ T2286] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2054.605700][ T2286] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2054.605725][ T2286] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 2054.856197][ T2286] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2054.856241][ T2286] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 2054.856268][ T2286] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2054.856293][ T2286] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2054.856317][ T2286] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 2055.049165][ T2286] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2055.049199][ T2286] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 2055.049224][ T2286] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2055.049250][ T2286] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2055.049275][ T2286] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 2055.210605][ T2286] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2055.210641][ T2286] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 2055.210669][ T2286] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2055.215199][ T2286] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2055.215229][ T2286] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 2055.670385][ T2339] netlink: 'syz.0.17544': attribute type 1 has an invalid length. [ 2055.736482][T26412] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2055.737806][T26412] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 2055.737830][T26412] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 2055.737850][T26412] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2055.737869][T26412] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 2055.803662][ T2346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17544'. [ 2055.945052][T26408] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2055.945082][T26408] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 2055.945104][T26408] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 2055.945126][T26408] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2055.945148][T26408] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 2055.952658][T26408] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2055.952686][T26408] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 2055.952709][T26408] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 2055.952730][T26408] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2055.952752][T26408] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 2056.034574][T14836] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2056.034604][T14836] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 2056.034633][T14836] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 2056.034656][T14836] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2056.034678][T14836] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 2056.102455][ T2351] netlink: 'syz.4.17545': attribute type 4 has an invalid length. [ 2056.220832][ T2360] netlink: 'syz.0.17549': attribute type 1 has an invalid length. [ 2056.359838][ T2360] 8021q: adding VLAN 0 to HW filter on device bond50 [ 2056.389838][ T2362] bond49: (slave veth0_to_bond): Releasing backup interface [ 2056.389860][ T2362] bond49: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2056.479043][ T2362] bond50: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2056.664143][ T2365] bridge148: entered promiscuous mode [ 2056.700727][ T2365] bond50: (slave bridge148): Enslaving as an active interface with an up link [ 2056.724270][ T2372] netlink: 'syz.2.17550': attribute type 3 has an invalid length. [ 2057.617531][T29309] net_ratelimit: 32 callbacks suppressed [ 2057.617551][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2057.797840][T26302] bond32: (slave dummy0): failed to get link speed/duplex [ 2057.807343][ T2393] tipc: Enabled bearer , priority 26 [ 2057.906788][T26302] bond32: (slave dummy0): failed to get link speed/duplex [ 2058.017780][T26302] bond32: (slave dummy0): failed to get link speed/duplex [ 2058.089057][ T2402] FAULT_INJECTION: forcing a failure. [ 2058.089057][ T2402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2058.089086][ T2402] CPU: 1 UID: 0 PID: 2402 Comm: syz.0.17559 Not tainted syzkaller #0 PREEMPT(full) [ 2058.089107][ T2402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2058.089118][ T2402] Call Trace: [ 2058.089126][ T2402] [ 2058.089135][ T2402] dump_stack_lvl+0xe8/0x150 [ 2058.089166][ T2402] should_fail_ex+0x410/0x560 [ 2058.089192][ T2402] prepare_alloc_pages+0x223/0x600 [ 2058.089219][ T2402] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2058.089245][ T2402] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2058.089265][ T2402] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 2058.089289][ T2402] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2058.089314][ T2402] ? __pfx_policy_nodemask+0x10/0x10 [ 2058.089335][ T2402] ? __get_vm_area_node+0x155/0x2f0 [ 2058.089358][ T2402] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 2058.089384][ T2402] ? __vmalloc_noprof+0xd2/0x120 [ 2058.089413][ T2402] __alloc_pages_noprof+0x10/0x100 [ 2058.089435][ T2402] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 2058.089462][ T2402] ? alloc_pages_noprof+0x140/0x2b0 [ 2058.089490][ T2402] __kasan_populate_vmalloc+0xb7/0x1c0 [ 2058.089516][ T2402] alloc_vmap_area+0xd1a/0x1420 [ 2058.089556][ T2402] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2058.089579][ T2402] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 2058.089600][ T2402] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 2058.089619][ T2402] ? __get_vm_area_node+0x155/0x2f0 [ 2058.089649][ T2402] __get_vm_area_node+0x200/0x2f0 [ 2058.089682][ T2402] __vmalloc_node_range_noprof+0x343/0x1540 [ 2058.089710][ T2402] ? bpf_check+0x10ee/0x2e10 [ 2058.089758][ T2402] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2058.089784][ T2402] ? __kasan_kmalloc+0x93/0xb0 [ 2058.089806][ T2402] ? __kmalloc_cache_noprof+0x321/0x600 [ 2058.089826][ T2402] ? __kmalloc_cache_noprof+0x14d/0x600 [ 2058.089843][ T2402] ? bpf_diag_init+0x87/0x140 [ 2058.089863][ T2402] ? bpf_diag_init+0x87/0x140 [ 2058.089887][ T2402] ? bpf_check+0x10ee/0x2e10 [ 2058.089905][ T2402] __vmalloc_noprof+0xd2/0x120 [ 2058.089932][ T2402] ? bpf_check+0x10ee/0x2e10 [ 2058.089964][ T2402] bpf_check+0x10ee/0x2e10 [ 2058.089996][ T2402] ? ktime_get_with_offset+0x93/0x2d0 [ 2058.090020][ T2402] ? __pfx_bpf_check+0x10/0x10 [ 2058.090043][ T2402] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2058.090073][ T2402] bpf_prog_load+0x14d6/0x1c20 [ 2058.090107][ T2402] ? __pfx_bpf_prog_load+0x10/0x10 [ 2058.090155][ T2402] __sys_bpf+0xd0d/0xd90 [ 2058.090184][ T2402] ? __pfx___sys_bpf+0x10/0x10 [ 2058.090216][ T2402] ? __fget_files+0x2a/0x420 [ 2058.090259][ T2402] ? ksys_write+0x242/0x270 [ 2058.090291][ T2402] ? __pfx_ksys_write+0x10/0x10 [ 2058.090323][ T2402] __x64_sys_bpf+0xba/0xd0 [ 2058.090345][ T2402] do_syscall_64+0x166/0x520 [ 2058.090368][ T2402] ? trace_irq_disable+0x3b/0x140 [ 2058.090387][ T2402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.090406][ T2402] ? clear_bhb_loop+0x70/0xc0 [ 2058.090429][ T2402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.090447][ T2402] RIP: 0033:0x7f48d059e159 [ 2058.090465][ T2402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2058.090480][ T2402] RSP: 002b:00007f48d152b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2058.090500][ T2402] RAX: ffffffffffffffda RBX: 00007f48d0825fa0 RCX: 00007f48d059e159 [ 2058.090513][ T2402] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 2058.090526][ T2402] RBP: 00007f48d152b090 R08: 0000000000000000 R09: 0000000000000000 [ 2058.090538][ T2402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2058.090550][ T2402] R13: 00007f48d0826038 R14: 00007f48d0825fa0 R15: 00007ffcbfbdd9e8 [ 2058.090582][ T2402] [ 2058.094347][ T2402] syz.0.17559: vmalloc error: size 2312, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2058.094408][ T2402] CPU: 1 UID: 0 PID: 2402 Comm: syz.0.17559 Not tainted syzkaller #0 PREEMPT(full) [ 2058.094429][ T2402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2058.094440][ T2402] Call Trace: [ 2058.094447][ T2402] [ 2058.094455][ T2402] dump_stack_lvl+0xe8/0x150 [ 2058.094486][ T2402] warn_alloc+0x24d/0x270 [ 2058.094507][ T2402] ? lockdep_hardirqs_on+0x7b/0x110 [ 2058.094533][ T2402] ? __pfx_warn_alloc+0x10/0x10 [ 2058.094551][ T2402] ? kfree+0x1c5/0x650 [ 2058.094584][ T2402] ? __get_vm_area_node+0x219/0x2f0 [ 2058.094619][ T2402] __vmalloc_node_range_noprof+0x36b/0x1540 [ 2058.094676][ T2402] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2058.094702][ T2402] ? __kasan_kmalloc+0x93/0xb0 [ 2058.094728][ T2402] ? __kmalloc_cache_noprof+0x321/0x600 [ 2058.094747][ T2402] ? __kmalloc_cache_noprof+0x14d/0x600 [ 2058.094765][ T2402] ? bpf_diag_init+0x87/0x140 [ 2058.094787][ T2402] ? bpf_diag_init+0x87/0x140 [ 2058.094811][ T2402] ? bpf_check+0x10ee/0x2e10 [ 2058.094829][ T2402] __vmalloc_noprof+0xd2/0x120 [ 2058.094856][ T2402] ? bpf_check+0x10ee/0x2e10 [ 2058.094878][ T2402] bpf_check+0x10ee/0x2e10 [ 2058.094910][ T2402] ? ktime_get_with_offset+0x93/0x2d0 [ 2058.094935][ T2402] ? __pfx_bpf_check+0x10/0x10 [ 2058.094965][ T2402] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2058.094996][ T2402] bpf_prog_load+0x14d6/0x1c20 [ 2058.095030][ T2402] ? __pfx_bpf_prog_load+0x10/0x10 [ 2058.095078][ T2402] __sys_bpf+0xd0d/0xd90 [ 2058.095108][ T2402] ? __pfx___sys_bpf+0x10/0x10 [ 2058.095141][ T2402] ? __fget_files+0x2a/0x420 [ 2058.095185][ T2402] ? ksys_write+0x242/0x270 [ 2058.095214][ T2402] ? __pfx_ksys_write+0x10/0x10 [ 2058.095245][ T2402] __x64_sys_bpf+0xba/0xd0 [ 2058.095268][ T2402] do_syscall_64+0x166/0x520 [ 2058.095290][ T2402] ? trace_irq_disable+0x3b/0x140 [ 2058.095309][ T2402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.095329][ T2402] ? clear_bhb_loop+0x70/0xc0 [ 2058.095352][ T2402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.095371][ T2402] RIP: 0033:0x7f48d059e159 [ 2058.095388][ T2402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2058.095402][ T2402] RSP: 002b:00007f48d152b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2058.095422][ T2402] RAX: ffffffffffffffda RBX: 00007f48d0825fa0 RCX: 00007f48d059e159 [ 2058.095437][ T2402] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 2058.095449][ T2402] RBP: 00007f48d152b090 R08: 0000000000000000 R09: 0000000000000000 [ 2058.095461][ T2402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2058.095473][ T2402] R13: 00007f48d0826038 R14: 00007f48d0825fa0 R15: 00007ffcbfbdd9e8 [ 2058.095506][ T2402] [ 2058.095683][ T2402] Mem-Info: [ 2058.095692][ T2402] active_anon:11355 inactive_anon:4 isolated_anon:0 [ 2058.095692][ T2402] active_file:1 inactive_file:45265 isolated_file:0 [ 2058.095692][ T2402] unevictable:0 dirty:430 writeback:0 [ 2058.095692][ T2402] slab_reclaimable:18508 slab_unreclaimable:187409 [ 2058.095692][ T2402] mapped:30513 shmem:672 pagetables:1352 [ 2058.095692][ T2402] sec_pagetables:0 bounce:0 [ 2058.095692][ T2402] kernel_misc_reclaimable:0 [ 2058.095692][ T2402] free:1214492 free_pcp:10669 free_cma:0 [ 2058.095741][ T2402] Node 0 active_anon:45420kB inactive_anon:16kB active_file:4kB inactive_file:180852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122052kB dirty:1716kB writeback:0kB shmem:2688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19988kB pagetables:5280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2058.095792][ T2402] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2058.095840][ T2402] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.095892][ T2402] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 2058.095928][ T2402] Node 0 DMA32 free:909384kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:45420kB inactive_anon:16kB active_file:4kB inactive_file:180852kB unevictable:0kB writepending:1716kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:36884kB local_pcp:16912kB free_cma:0kB [ 2058.095987][ T2402] lowmem_reserve[]: 0 0 0 0 0 [ 2058.096020][ T2402] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.096070][ T2402] lowmem_reserve[]: 0 0 0 0 0 [ 2058.096103][ T2402] Node 1 Normal free:3933224kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:0kB free_cma:0kB [ 2058.096156][ T2402] lowmem_reserve[]: 0 0 0 0 0 [ 2058.096189][ T2402] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2058.096299][ T2402] Node 0 DMA32: 1904*4kB (UM) 735*8kB (UME) 509*16kB (UM) 292*32kB (UME) 160*64kB (ME) 154*128kB (UME) 48*256kB [ 2058.096670][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2058.111607][ T2402] (UM) 13*512kB (UME) 0*1024kB 3*2048kB (ME) 201*4096kB (UM) = 909320kB [ 2058.111665][ T2402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2058.111752][ T2402] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 959*4096kB (UM) = 3933276kB [ 2058.111893][ T2402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2058.111908][ T2402] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2058.111923][ T2402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2058.111938][ T2402] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2058.111959][ T2402] 45934 total pagecache pages [ 2058.111966][ T2402] 0 pages in swap cache [ 2058.111973][ T2402] Free swap = 124996kB [ 2058.111980][ T2402] Total swap = 124996kB [ 2058.111987][ T2402] 2097051 pages RAM [ 2058.111993][ T2402] 0 pages HighMem/MovableOnly [ 2058.112000][ T2402] 428705 pages reserved [ 2058.112006][ T2402] 0 pages cma reserved [ 2058.126763][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2058.240810][T26302] bond32: (slave dummy0): failed to get link speed/duplex [ 2058.655697][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.659773][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.140347][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2059.566144][ T2416] netlink: 'syz.1.17564': attribute type 2 has an invalid length. [ 2059.584144][ T2422] netlink: 'syz.3.17566': attribute type 3 has an invalid length. [ 2061.186493][ T2490] netlink: 'syz.3.17581': attribute type 1 has an invalid length. [ 2061.195731][ T2494] FAULT_INJECTION: forcing a failure. [ 2061.195731][ T2494] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.195758][ T2494] CPU: 1 UID: 0 PID: 2494 Comm: syz.1.17583 Not tainted syzkaller #0 PREEMPT(full) [ 2061.195779][ T2494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2061.195790][ T2494] Call Trace: [ 2061.195798][ T2494] [ 2061.195807][ T2494] dump_stack_lvl+0xe8/0x150 [ 2061.195839][ T2494] should_fail_ex+0x410/0x560 [ 2061.195864][ T2494] ? __alloc_skb+0x1db/0x7a0 [ 2061.195886][ T2494] should_failslab+0xa8/0x100 [ 2061.195911][ T2494] ? __alloc_skb+0x1db/0x7a0 [ 2061.195930][ T2494] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 2061.195960][ T2494] ? __alloc_skb+0x18d/0x7a0 [ 2061.195981][ T2494] ? __alloc_skb+0x1db/0x7a0 [ 2061.196010][ T2494] __alloc_skb+0x1db/0x7a0 [ 2061.196036][ T2494] netlink_sendmsg+0x5d4/0xb40 [ 2061.196062][ T2494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2061.196088][ T2494] ? apparmor_socket_sendmsg+0x98/0x360 [ 2061.196110][ T2494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2061.196128][ T2494] sock_sendmsg_nosec+0x13a/0x180 [ 2061.196150][ T2494] ____sys_sendmsg+0x54e/0x850 [ 2061.196181][ T2494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2061.196220][ T2494] ? import_iovec+0x73/0xa0 [ 2061.196245][ T2494] ___sys_sendmsg+0x2a5/0x360 [ 2061.196274][ T2494] ? __pfx____sys_sendmsg+0x10/0x10 [ 2061.196320][ T2494] ? vfs_write+0x9ce/0xba0 [ 2061.196360][ T2494] ? do_sys_openat2+0x14e/0x200 [ 2061.196389][ T2494] __x64_sys_sendmsg+0x1b1/0x290 [ 2061.196416][ T2494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2061.196460][ T2494] do_syscall_64+0x166/0x520 [ 2061.196483][ T2494] ? trace_irq_disable+0x3b/0x140 [ 2061.196501][ T2494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2061.196522][ T2494] ? clear_bhb_loop+0x70/0xc0 [ 2061.196544][ T2494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2061.196562][ T2494] RIP: 0033:0x7ff20ab9e159 [ 2061.196580][ T2494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2061.196595][ T2494] RSP: 002b:00007ff20bad2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2061.196615][ T2494] RAX: ffffffffffffffda RBX: 00007ff20ae25fa0 RCX: 00007ff20ab9e159 [ 2061.196629][ T2494] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 2061.196641][ T2494] RBP: 00007ff20bad2090 R08: 0000000000000000 R09: 0000000000000000 [ 2061.196653][ T2494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2061.196664][ T2494] R13: 00007ff20ae26038 R14: 00007ff20ae25fa0 R15: 00007ffe00db4f78 [ 2061.196696][ T2494] [ 2061.201596][ T2490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17581'. [ 2061.582564][ T2495] netlink: 'syz.0.17585': attribute type 1 has an invalid length. [ 2061.613749][ T2495] 8021q: adding VLAN 0 to HW filter on device bond51 [ 2061.705996][ T2510] )fl speed is unknown, defaulting to 1000 [ 2061.896070][ T2495] bond50: (slave veth0_to_bond): Releasing backup interface [ 2061.896094][ T2495] bond50: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2061.976386][ T2495] bond51: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2062.035305][ T2517] netlink: 'syz.1.17588': attribute type 1 has an invalid length. [ 2062.080069][ T2502] bridge149: entered promiscuous mode [ 2062.125110][ T2502] bond51: (slave bridge149): Enslaving as an active interface with an up link [ 2062.292179][ T2517] 8021q: adding VLAN 0 to HW filter on device bond55 [ 2062.389087][ T2518] bond47: (slave veth0_to_bond): Releasing backup interface [ 2062.426803][ T2518] bond55: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2062.477432][ T2520] bridge147: entered promiscuous mode [ 2062.486908][ T2520] bond55: (slave bridge147): Enslaving as an active interface with an up link [ 2062.598176][ T2510] lo speed is unknown, defaulting to 1000 [ 2062.672652][T26302] net_ratelimit: 25 callbacks suppressed [ 2062.672671][T26302] bond32: (slave dummy0): failed to get link speed/duplex [ 2062.804178][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2062.816975][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.113520][ T2555] block nbd9: server does not support multiple connections per device. [ 2063.113909][ T2555] block nbd9: shutting down sockets [ 2063.161148][ T2555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.162933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.228969][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2063.307235][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2063.347729][ T316] bond32: (slave dummy0): failed to get link speed/duplex [ 2063.549384][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2063.659074][ T6713] bond32: (slave dummy0): failed to get link speed/duplex [ 2063.879224][ T2571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17600'. [ 2063.913263][ T2571] nbd: couldn't find a device at index 0 [ 2064.178165][ T2583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17602'. [ 2064.304633][ T2596] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17605'. [ 2064.320895][ T2597] netlink: 'syz.0.17606': attribute type 83 has an invalid length. [ 2064.462127][ T2580] syzkaller0: entered promiscuous mode [ 2064.462150][ T2580] syzkaller0: entered allmulticast mode [ 2064.958415][ T2608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17610'. [ 2064.997316][ T2616] bond46: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 2065.015938][ T2616] bond46 (unregistering): Released all slaves [ 2065.132313][ T2628] netlink: 'syz.1.17616': attribute type 1 has an invalid length. [ 2065.362434][ T2628] bond56: entered promiscuous mode [ 2065.364543][ T2628] 8021q: adding VLAN 0 to HW filter on device bond56 [ 2065.438684][ T2634] 8021q: adding VLAN 0 to HW filter on device bond56 [ 2065.443366][ T2640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17617'. [ 2065.444209][ T2634] bond56: (slave gre3): The slave device specified does not support setting the MAC address [ 2065.444228][ T2634] bond56: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 2065.482081][ T2634] bond56: (slave gre3): making interface the new active one [ 2065.482105][ T2634] gre3: entered promiscuous mode [ 2065.499927][ T2634] bond56: (slave gre3): Enslaving as an active interface with an up link [ 2065.565698][ T2640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17617'. [ 2065.848131][ T2646] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2065.850467][ T2645] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2066.591285][ T2665] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17626'. [ 2066.762206][ T2679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17629'. [ 2066.832785][ T2690] netlink: 'syz.4.17630': attribute type 5 has an invalid length. [ 2066.832805][ T2690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17630'. [ 2066.991214][ T2690] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17630'. [ 2067.367158][ T2696] netlink: 'syz.4.17631': attribute type 1 has an invalid length. [ 2067.680936][ T2696] 8021q: adding VLAN 0 to HW filter on device bond37 [ 2067.775129][ T2699] bond36: (slave veth0_to_bond): Releasing backup interface [ 2067.775154][ T2699] bond36: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2067.854300][ T2699] bond37: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2067.866105][ T316] net_ratelimit: 30 callbacks suppressed [ 2067.866121][ T316] bond32: (slave dummy0): failed to get link speed/duplex [ 2067.974338][ T2704] bridge145: entered promiscuous mode [ 2067.988378][ T2704] bond37: (slave bridge145): Enslaving as an active interface with an up link [ 2068.006813][ T316] bond32: (slave dummy0): failed to get link speed/duplex [ 2068.016029][ T2714] netlink: 'syz.2.17634': attribute type 2 has an invalid length. [ 2068.024522][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.109415][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.130191][ T316] bond32: (slave dummy0): failed to get link speed/duplex [ 2068.163010][ T2714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17634'. [ 2068.163029][ T2714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17634'. [ 2068.163053][ T2714] netlink: 'syz.2.17634': attribute type 19 has an invalid length. [ 2068.163066][ T2714] netlink: 'syz.2.17634': attribute type 20 has an invalid length. [ 2068.168139][ T2714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17634'. [ 2068.168165][ T2714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17634'. [ 2068.168187][ T2714] netlink: 'syz.2.17634': attribute type 19 has an invalid length. [ 2068.168200][ T2714] netlink: 'syz.2.17634': attribute type 20 has an invalid length. [ 2068.237011][ T316] bond32: (slave dummy0): failed to get link speed/duplex [ 2068.297883][ T2723] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17636'. [ 2068.346777][T14836] bond32: (slave dummy0): failed to get link speed/duplex [ 2068.457578][ T6713] bond32: (slave dummy0): failed to get link speed/duplex [ 2068.496713][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2068.610729][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2068.649778][ T2731] gtp4: entered promiscuous mode [ 2068.649799][ T2731] gtp4: entered allmulticast mode [ 2068.677692][ T2732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17641'. [ 2071.321520][ T6713] tipc: Subscription rejected, illegal request [ 2071.454361][ T2849] netlink: 'syz.2.17668': attribute type 4 has an invalid length. [ 2072.082493][ T2875] __nla_validate_parse: 8 callbacks suppressed [ 2072.082512][ T2875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17675'. [ 2072.410133][ T6713] tipc: Subscription rejected, illegal request [ 2072.805041][ T2899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17682'. [ 2072.903047][ T2904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17683'. [ 2072.903073][ T2904] netlink: 'syz.2.17683': attribute type 1 has an invalid length. [ 2072.903089][ T2904] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17683'. [ 2072.953497][ T2904] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17683'. [ 2073.013048][ T2907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17682'. [ 2073.218133][T29309] net_ratelimit: 30 callbacks suppressed [ 2073.218155][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2073.698990][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2074.282621][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.738986][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2075.306449][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.785952][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2076.348788][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2076.816640][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2076.839771][ T2911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17685'. [ 2076.950111][ T6713] bond32: (slave dummy0): failed to get link speed/duplex [ 2077.258632][T14835] bond32: (slave dummy0): failed to get link speed/duplex [ 2077.286023][ T2923] FAULT_INJECTION: forcing a failure. [ 2077.286023][ T2923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.286053][ T2923] CPU: 0 UID: 0 PID: 2923 Comm: syz.2.17689 Not tainted syzkaller #0 PREEMPT(full) [ 2077.286075][ T2923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2077.286086][ T2923] Call Trace: [ 2077.286094][ T2923] [ 2077.286103][ T2923] dump_stack_lvl+0xe8/0x150 [ 2077.286135][ T2923] should_fail_ex+0x410/0x560 [ 2077.286163][ T2923] _copy_to_user+0x31/0xb0 [ 2077.286190][ T2923] map_get_next_key+0x4ac/0x610 [ 2077.286214][ T2923] ? map_get_next_key+0x27d/0x610 [ 2077.286239][ T2923] __sys_bpf+0xb83/0xd90 [ 2077.286269][ T2923] ? __pfx___sys_bpf+0x10/0x10 [ 2077.286303][ T2923] ? __fget_files+0x2a/0x420 [ 2077.286346][ T2923] ? ksys_write+0x242/0x270 [ 2077.286377][ T2923] ? __pfx_ksys_write+0x10/0x10 [ 2077.286409][ T2923] __x64_sys_bpf+0xba/0xd0 [ 2077.286432][ T2923] do_syscall_64+0x166/0x520 [ 2077.286455][ T2923] ? trace_irq_disable+0x3b/0x140 [ 2077.286474][ T2923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.286500][ T2923] ? clear_bhb_loop+0x70/0xc0 [ 2077.286523][ T2923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.286541][ T2923] RIP: 0033:0x7fccfb39e159 [ 2077.286557][ T2923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2077.286572][ T2923] RSP: 002b:00007fccfc206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2077.286593][ T2923] RAX: ffffffffffffffda RBX: 00007fccfb625fa0 RCX: 00007fccfb39e159 [ 2077.286607][ T2923] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000004 [ 2077.286619][ T2923] RBP: 00007fccfc206090 R08: 0000000000000000 R09: 0000000000000000 [ 2077.286631][ T2923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2077.286643][ T2923] R13: 00007fccfb626038 R14: 00007fccfb625fa0 R15: 00007fff55c09808 [ 2077.286674][ T2923] [ 2077.650422][ T2929] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.17690'. [ 2078.280836][T26408] net_ratelimit: 11 callbacks suppressed [ 2078.280857][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2078.387829][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2078.423247][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2078.484051][ T2961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17699'. [ 2078.544219][ T2970] netlink: 332 bytes leftover after parsing attributes in process `syz.1.17702'. [ 2078.544285][ T2970] netlink: 'syz.1.17702': attribute type 9 has an invalid length. [ 2078.544300][ T2970] netlink: 108 bytes leftover after parsing attributes in process `syz.1.17702'. [ 2078.544314][ T2970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17702'. [ 2078.596950][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2078.724640][ T2964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17700'. [ 2078.793501][ T2978] netlink: 'syz.0.17703': attribute type 1 has an invalid length. [ 2078.896679][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2078.901829][ T2983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17700'. [ 2078.907547][ T6713] bond32: (slave dummy0): failed to get link speed/duplex [ 2079.056132][ T2978] 8021q: adding VLAN 0 to HW filter on device bond53 [ 2079.077021][T14836] bond32: (slave dummy0): failed to get link speed/duplex [ 2079.136811][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2079.457592][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2079.459668][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2079.990621][ T3015] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2079.990658][ T3015] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2079.990697][ T3015] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2080.102383][ T3025] netlink: 'syz.3.17715': attribute type 2 has an invalid length. [ 2080.107448][ T3019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17716'. [ 2080.112590][ T3019] netlink: 'syz.2.17716': attribute type 49 has an invalid length. [ 2080.140264][ T3022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17718'. [ 2080.169834][ T3015] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2080.270246][ T3019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17716'. [ 2080.832984][ T3047] tipc: Enabling of bearer rejected, already enabled [ 2080.834576][ T3047] syzkaller0: entered promiscuous mode [ 2080.835271][ T3047] syzkaller0: entered allmulticast mode [ 2081.148619][ T3053] sch_tbf: burst 173 is lower than device syzkaller0 mtu (65589) ! [ 2081.201445][ T3052] sch_tbf: burst 173 is lower than device syzkaller0 mtu (65589) ! [ 2082.085327][ T3085] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 2082.275346][ T3087] macvtap3: entered promiscuous mode [ 2082.275369][ T3087] macvtap3: entered allmulticast mode [ 2083.287278][ T6713] net_ratelimit: 33 callbacks suppressed [ 2083.287300][ T6713] bond32: (slave dummy0): failed to get link speed/duplex [ 2083.396961][ T6713] bond32: (slave dummy0): failed to get link speed/duplex [ 2083.457112][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2083.518832][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2083.541518][ T3138] __nla_validate_parse: 7 callbacks suppressed [ 2083.541538][ T3138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17750'. [ 2083.638506][T11140] bond32: (slave dummy0): failed to get link speed/duplex [ 2083.752447][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2083.769852][ T3147] syzkaller0: entered promiscuous mode [ 2083.769873][ T3147] syzkaller0: entered allmulticast mode [ 2083.778409][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2083.858724][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2084.006701][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2084.097286][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2084.203172][ T3159] xt_cgroup: invalid path, errno=-2 [ 2084.611219][ T3173] bridge144: entered allmulticast mode [ 2085.063015][ T3189] x_tables: duplicate underflow at hook 1 [ 2085.063189][ T3187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17760'. [ 2085.063214][ T3187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17760'. [ 2085.188108][ T3190] x_tables: duplicate underflow at hook 1 [ 2085.764521][ T3187] gtp4: entered promiscuous mode [ 2085.764545][ T3187] gtp4: entered allmulticast mode [ 2086.114909][ T3229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17765'. [ 2086.114937][ T3229] nbd: couldn't find a device at index 0 [ 2086.115355][ T3229] netlink: 'syz.4.17765': attribute type 2 has an invalid length. [ 2086.172657][ T3233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17763'. [ 2086.244074][ T3235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17768'. [ 2086.588534][ T3246] netlink: 'syz.3.17771': attribute type 1 has an invalid length. [ 2086.685195][ T3246] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2086.712289][ T3248] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2086.761424][ T3246] bridge9: entered promiscuous mode [ 2086.772929][ T3246] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 2086.914966][ T3251] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17772'. [ 2087.122548][ T3256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17774'. [ 2087.331664][ T3251] netlink: 'syz.4.17772': attribute type 1 has an invalid length. [ 2087.440192][ T3272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17779'. [ 2088.014929][ T3284] netlink: 388 bytes leftover after parsing attributes in process `syz.2.17782'. [ 2088.297010][T26408] net_ratelimit: 346 callbacks suppressed [ 2088.302418][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2088.306055][ T3295] netlink: 'syz.3.17785': attribute type 5 has an invalid length. [ 2088.372331][ T3297] netlink: 'syz.2.17786': attribute type 2 has an invalid length. [ 2088.406658][ T6713] bond32: (slave dummy0): failed to get link speed/duplex [ 2088.517062][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2088.570149][ T3304] netlink: 'syz.4.17788': attribute type 1 has an invalid length. [ 2088.611099][ T3302] netlink: 'syz.0.17787': attribute type 1 has an invalid length. [ 2088.657352][ T3304] 8021q: adding VLAN 0 to HW filter on device bond38 [ 2088.669185][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2088.728556][ T3309] __nla_validate_parse: 2 callbacks suppressed [ 2088.728576][ T3309] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17790'. [ 2088.929616][ T3310] bond51: (slave veth0_to_bond): Releasing backup interface [ 2088.929640][ T3310] bond51: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2089.023317][ T3302] 8021q: adding VLAN 0 to HW filter on device bond54 [ 2089.041428][ T3308] bond37: (slave veth0_to_bond): Releasing backup interface [ 2089.041450][ T3308] bond37: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2089.073517][ T3308] bond38: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2089.092527][ T3304] bridge146: entered promiscuous mode [ 2089.102568][ T3304] bond38: (slave bridge146): Enslaving as an active interface with an up link [ 2089.107150][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2089.245825][ T3312] bridge150: entered promiscuous mode [ 2089.265410][ T3312] bond54: (slave bridge150): Enslaving as an active interface with an up link [ 2089.278964][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2089.296752][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2089.437871][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2089.546758][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2089.718961][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2090.195813][ T3352] netlink: 'syz.2.17799': attribute type 16 has an invalid length. [ 2090.195835][ T3352] netlink: 'syz.2.17799': attribute type 17 has an invalid length. [ 2090.366769][ T3360] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17801'. [ 2090.403487][ T3352] bond_slave_0: left promiscuous mode [ 2090.403509][ T3352] bond_slave_0: left allmulticast mode [ 2090.632083][ T3352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2090.775993][ T3352] geneve0: entered promiscuous mode [ 2090.968432][ T3352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2091.045126][ T3380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17807'. [ 2091.100146][ T3352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2091.105496][ T3352] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2091.130855][ T3352] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2091.132844][ T3352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2091.136380][ T3352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2091.182498][ T3352] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2091.184074][ T3352] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2091.504098][ T3352] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2091.548498][ T3352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2091.549851][ T3352] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2091.758443][T26412] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 2091.758476][T26412] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 2091.777176][T11142] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 2091.777206][T11142] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 2091.777713][T11142] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 2091.777736][T11142] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 2091.777768][T11142] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 2091.777790][T11142] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 2092.048420][ T3396] nbd9: detected capacity change from 0 to 63 [ 2092.536304][T20694] block nbd9: Receive control failed (result -104) [ 2092.587465][ T3412] netlink: 9 bytes leftover after parsing attributes in process `syz.4.17814'. [ 2092.664669][ T3411] netlink: 136 bytes leftover after parsing attributes in process `syz.1.17815'. [ 2093.438737][T26412] net_ratelimit: 20 callbacks suppressed [ 2093.438759][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2093.461517][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2093.519554][ T3429] netlink: 'syz.1.17823': attribute type 1 has an invalid length. [ 2093.577749][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2093.664801][ T3429] 8021q: adding VLAN 0 to HW filter on device bond58 [ 2093.711366][ T3434] bond55: (slave veth0_to_bond): Releasing backup interface [ 2093.711390][ T3434] bond55: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2093.782885][ T3434] bond58: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2093.835139][ T3439] netlink: 'syz.2.17826': attribute type 1 has an invalid length. [ 2094.064371][ T3439] 8021q: adding VLAN 0 to HW filter on device bond46 [ 2094.102222][ T3449] netlink: 9 bytes leftover after parsing attributes in process `syz.3.17828'. [ 2094.105406][ T3429] bridge148: entered promiscuous mode [ 2094.122567][ T3429] bond58: (slave bridge148): Enslaving as an active interface with an up link [ 2094.129521][T14836] bond32: (slave dummy0): failed to get link speed/duplex [ 2094.236402][ T3450] siw: device registration error -23 [ 2094.274803][ T3441] bond44: (slave veth0_to_bond): Releasing backup interface [ 2094.274827][ T3441] bond44: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2094.329470][ T3441] bond46: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2094.336483][ T3458] netlink: 5 bytes leftover after parsing attributes in process `syz.3.17828'. [ 2094.385974][ T3448] bridge145: entered promiscuous mode [ 2094.406384][ T3448] bond46: (slave bridge145): Enslaving as an active interface with an up link [ 2094.429646][ T3449] gretap0: entered promiscuous mode [ 2094.459090][ T3458] 0{X: renamed from gretap0 [ 2094.494260][ T3458] 0{X: left promiscuous mode [ 2094.494286][ T3458] 0{X: entered allmulticast mode [ 2094.497316][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2094.520174][ T3458] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 2094.608864][ T6713] bond32: (slave dummy0): failed to get link speed/duplex [ 2094.657792][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.779507][ T3470] netlink: 404 bytes leftover after parsing attributes in process `syz.3.17837'. [ 2094.857240][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2094.889807][T26408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2094.889828][T26408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2094.956111][ T3470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17837'. [ 2094.968514][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2095.069977][ T3477] tipc: Bearer : already 2 bearers with priority 26 [ 2095.069998][ T3477] tipc: Bearer : trying with adjusted priority [ 2095.070080][ T3477] tipc: Enabling of bearer rejected, failed to enable media [ 2095.420591][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17838'. [ 2095.450119][ T3486] bond28: (slave batadv0): Releasing active interface [ 2096.036422][ T3509] netlink: 84 bytes leftover after parsing attributes in process `syz.1.17848'. [ 2096.774116][T14836] tipc: Subscription rejected, illegal request [ 2096.858802][ T3531] FAULT_INJECTION: forcing a failure. [ 2096.858802][ T3531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2096.862123][ T3531] CPU: 0 UID: 0 PID: 3531 Comm: syz.1.17852 Not tainted syzkaller #0 PREEMPT(full) [ 2096.862150][ T3531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2096.862162][ T3531] Call Trace: [ 2096.862171][ T3531] [ 2096.862180][ T3531] dump_stack_lvl+0xe8/0x150 [ 2096.862214][ T3531] should_fail_ex+0x410/0x560 [ 2096.862242][ T3531] _copy_to_user+0x31/0xb0 [ 2096.862270][ T3531] simple_read_from_buffer+0xe1/0x170 [ 2096.862302][ T3531] proc_fail_nth_read+0x1bb/0x230 [ 2096.862331][ T3531] ? common_file_perm+0x20e/0x2b0 [ 2096.862357][ T3531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2096.862390][ T3531] ? rw_verify_area+0x24a/0x4c0 [ 2096.862419][ T3531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2096.862454][ T3531] vfs_read+0x213/0xa80 [ 2096.862488][ T3531] ? __pfx___mutex_lock+0x10/0x10 [ 2096.862514][ T3531] ? __pfx_vfs_read+0x10/0x10 [ 2096.862543][ T3531] ? __fget_files+0x2a/0x420 [ 2096.862575][ T3531] ? __fget_files+0x3a2/0x420 [ 2096.862600][ T3531] ? __fget_files+0x2a/0x420 [ 2096.862634][ T3531] ksys_read+0x150/0x270 [ 2096.862664][ T3531] ? __pfx_ksys_read+0x10/0x10 [ 2096.862704][ T3531] do_syscall_64+0x166/0x520 [ 2096.862726][ T3531] ? trace_irq_disable+0x3b/0x140 [ 2096.862745][ T3531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.862766][ T3531] ? clear_bhb_loop+0x70/0xc0 [ 2096.862789][ T3531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.862809][ T3531] RIP: 0033:0x7ff20ab5e98e [ 2096.862827][ T3531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2096.862842][ T3531] RSP: 002b:00007ff20ba8ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2096.862863][ T3531] RAX: ffffffffffffffda RBX: 00007ff20ba906c0 RCX: 00007ff20ab5e98e [ 2096.862878][ T3531] RDX: 000000000000000f RSI: 00007ff20ba900a0 RDI: 0000000000000008 [ 2096.862890][ T3531] RBP: 00007ff20ba90090 R08: 0000000000000000 R09: 0000000000000000 [ 2096.862902][ T3531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.862914][ T3531] R13: 00007ff20ae26218 R14: 00007ff20ae26180 R15: 00007ffe00db4f78 [ 2096.862947][ T3531] [ 2097.221236][ T3535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17857'. [ 2097.221970][ T3535] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17857'. [ 2097.401205][ T3542] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17859'. [ 2097.677623][ T3545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17861'. [ 2098.210484][ T3558] FAULT_INJECTION: forcing a failure. [ 2098.210484][ T3558] name failslab, interval 1, probability 0, space 0, times 0 [ 2098.210519][ T3558] CPU: 0 UID: 0 PID: 3558 Comm: syz.3.17864 Not tainted syzkaller #0 PREEMPT(full) [ 2098.210540][ T3558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2098.210555][ T3558] Call Trace: [ 2098.210564][ T3558] [ 2098.210573][ T3558] dump_stack_lvl+0xe8/0x150 [ 2098.210606][ T3558] should_fail_ex+0x410/0x560 [ 2098.210634][ T3558] should_failslab+0xa8/0x100 [ 2098.210657][ T3558] ? skb_clone+0x212/0x3a0 [ 2098.210684][ T3558] kmem_cache_alloc_noprof+0xa1/0x600 [ 2098.210716][ T3558] ? skb_clone+0x212/0x3a0 [ 2098.210749][ T3558] skb_clone+0x212/0x3a0 [ 2098.210778][ T3558] __netlink_deliver_tap+0x355/0x6e0 [ 2098.210825][ T3558] ? netlink_deliver_tap+0x2e/0x1b0 [ 2098.210855][ T3558] netlink_deliver_tap+0x19c/0x1b0 [ 2098.210885][ T3558] netlink_dump+0x95b/0xee0 [ 2098.210925][ T3558] ? __pfx_netlink_dump+0x10/0x10 [ 2098.210966][ T3558] ? netlink_recvmsg+0x5bf/0xa50 [ 2098.210983][ T3558] ? kmem_cache_free+0x182/0x650 [ 2098.211010][ T3558] netlink_recvmsg+0x683/0xa50 [ 2098.211039][ T3558] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2098.211056][ T3558] ? lock_acquire+0x115/0x350 [ 2098.211080][ T3558] ? __lock_acquire+0x747/0x2de0 [ 2098.211107][ T3558] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2098.211127][ T3558] sock_recvmsg_nosec+0x130/0x170 [ 2098.211151][ T3558] ____sys_recvmsg+0x3e3/0x4a0 [ 2098.211185][ T3558] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2098.211228][ T3558] ? import_iovec+0x73/0xa0 [ 2098.211256][ T3558] ___sys_recvmsg+0x213/0x5a0 [ 2098.211288][ T3558] ? __pfx____sys_recvmsg+0x10/0x10 [ 2098.211319][ T3558] ? lock_acquire+0x115/0x350 [ 2098.211370][ T3558] do_recvmmsg+0x31a/0x7f0 [ 2098.211405][ T3558] ? __pfx_do_recvmmsg+0x10/0x10 [ 2098.211445][ T3558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2098.211472][ T3558] ? __fget_files+0x3a2/0x420 [ 2098.211509][ T3558] __x64_sys_recvmmsg+0x198/0x250 [ 2098.211539][ T3558] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2098.211578][ T3558] do_syscall_64+0x166/0x520 [ 2098.211602][ T3558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2098.211622][ T3558] ? clear_bhb_loop+0x70/0xc0 [ 2098.211646][ T3558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2098.211665][ T3558] RIP: 0033:0x7f8bdf79e159 [ 2098.211683][ T3558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2098.211699][ T3558] RSP: 002b:00007f8be073e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2098.211720][ T3558] RAX: ffffffffffffffda RBX: 00007f8bdfa25fa0 RCX: 00007f8bdf79e159 [ 2098.211734][ T3558] RDX: 0000000000000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 2098.211746][ T3558] RBP: 00007f8be073e090 R08: 0000000000000000 R09: 0000000000000000 [ 2098.211758][ T3558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2098.211769][ T3558] R13: 00007f8bdfa26038 R14: 00007f8bdfa25fa0 R15: 00007ffcde184828 [ 2098.211803][ T3558] [ 2098.506031][T26412] net_ratelimit: 38 callbacks suppressed [ 2098.506053][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2098.607743][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2098.657157][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2098.723576][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2098.817407][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2098.820081][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2098.838226][T26412] bond32: (slave dummy0): failed to get link speed/duplex [ 2098.947968][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2099.086889][ T316] bond32: (slave dummy0): failed to get link speed/duplex [ 2099.171015][ T31] audit: type=1107 audit(1790088140.356:17): pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f 7' [ 2099.200372][ T316] bond32: (slave dummy0): failed to get link speed/duplex [ 2099.361304][ T3578] __nla_validate_parse: 1 callbacks suppressed [ 2099.361324][ T3578] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17873'. [ 2100.011023][ T3597] No such timeout policy "s " [ 2101.100277][ T3622] netlink: 'syz.1.17884': attribute type 21 has an invalid length. [ 2101.100299][ T3622] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17884'. [ 2101.131162][ T3622] netlink: 'syz.1.17884': attribute type 4 has an invalid length. [ 2101.131182][ T3622] netlink: 'syz.1.17884': attribute type 3 has an invalid length. [ 2101.131194][ T3622] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17884'. [ 2101.176568][ T3622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17884'. [ 2101.182828][ T3626] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17886'. [ 2101.478861][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17884'. [ 2102.258651][ T3649] vlan3: entered promiscuous mode [ 2102.258675][ T3649] bridge0: entered promiscuous mode [ 2103.537605][ T316] net_ratelimit: 26 callbacks suppressed [ 2103.537626][ T316] bond32: (slave dummy0): failed to get link speed/duplex [ 2103.647242][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2103.756722][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2103.856769][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2103.867345][ T316] bond32: (slave dummy0): failed to get link speed/duplex [ 2104.009772][T14835] bond32: (slave dummy0): failed to get link speed/duplex [ 2104.067063][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.119287][T14836] bond32: (slave dummy0): failed to get link speed/duplex [ 2104.226760][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2104.334472][ T3724] ip_tables: iptables: counters copy to user failed while replacing table [ 2104.983243][ T3733] netlink: 'syz.2.17919': attribute type 47 has an invalid length. [ 2105.600756][ T3750] FAULT_INJECTION: forcing a failure. [ 2105.600756][ T3750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2105.600790][ T3750] CPU: 0 UID: 0 PID: 3750 Comm: syz.1.17925 Not tainted syzkaller #0 PREEMPT(full) [ 2105.600817][ T3750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2105.600829][ T3750] Call Trace: [ 2105.600837][ T3750] [ 2105.600845][ T3750] dump_stack_lvl+0xe8/0x150 [ 2105.600879][ T3750] should_fail_ex+0x410/0x560 [ 2105.600906][ T3750] _copy_from_user+0x2d/0xb0 [ 2105.600932][ T3750] kstrtouint_from_user+0xd6/0x180 [ 2105.600957][ T3750] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2105.600987][ T3750] ? lock_acquire+0x115/0x350 [ 2105.601013][ T3750] proc_fail_nth_write+0x8e/0x210 [ 2105.601033][ T3750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2105.601061][ T3750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2105.601080][ T3750] vfs_write+0x296/0xba0 [ 2105.601118][ T3750] ? __pfx_vfs_write+0x10/0x10 [ 2105.601147][ T3750] ? __fget_files+0x2a/0x420 [ 2105.601177][ T3750] ? __fget_files+0x3a2/0x420 [ 2105.601201][ T3750] ? __fget_files+0x2a/0x420 [ 2105.601237][ T3750] ksys_write+0x150/0x270 [ 2105.601268][ T3750] ? __pfx_ksys_write+0x10/0x10 [ 2105.601308][ T3750] do_syscall_64+0x166/0x520 [ 2105.601331][ T3750] ? trace_irq_disable+0x3b/0x140 [ 2105.601350][ T3750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2105.601370][ T3750] ? clear_bhb_loop+0x70/0xc0 [ 2105.601394][ T3750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2105.601413][ T3750] RIP: 0033:0x7ff20ab5e98e [ 2105.601431][ T3750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2105.601448][ T3750] RSP: 002b:00007ff20bad1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2105.601468][ T3750] RAX: ffffffffffffffda RBX: 00007ff20bad26c0 RCX: 00007ff20ab5e98e [ 2105.601483][ T3750] RDX: 0000000000000001 RSI: 00007ff20bad20a0 RDI: 0000000000000004 [ 2105.601495][ T3750] RBP: 00007ff20bad2090 R08: 0000000000000000 R09: 0000000000000000 [ 2105.601507][ T3750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2105.601519][ T3750] R13: 00007ff20ae26038 R14: 00007ff20ae25fa0 R15: 00007ffe00db4f78 [ 2105.601552][ T3750] [ 2106.252575][ T3769] netlink: 'syz.0.17932': attribute type 1 has an invalid length. [ 2106.483030][ T3780] x_tables: duplicate entry at hook 1 [ 2106.595662][ T3774] gretap4: entered allmulticast mode [ 2106.642215][ T3774] bond55: (slave gretap4): making interface the new active one [ 2106.644161][ T3774] bond55: (slave gretap4): Enslaving as an active interface with an up link [ 2106.979460][ T3796] netlink: 'syz.4.17936': attribute type 1 has an invalid length. [ 2107.157643][ T3809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17940'. [ 2107.360618][ T3796] 8021q: adding VLAN 0 to HW filter on device bond39 [ 2107.392154][ T3801] bond38: (slave veth0_to_bond): Releasing backup interface [ 2107.392178][ T3801] bond38: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2107.419228][ T3801] bond39: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2107.472827][ T3804] bridge147: entered promiscuous mode [ 2107.493239][ T3804] bond39: (slave bridge147): Enslaving as an active interface with an up link [ 2107.548734][ T3816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17942'. [ 2107.609749][ T3816] xfrm2: entered promiscuous mode [ 2107.609769][ T3816] xfrm2: entered allmulticast mode [ 2107.610951][ T3816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17942'. [ 2107.919227][ T3813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17941'. [ 2108.598560][T14835] net_ratelimit: 35 callbacks suppressed [ 2108.598582][T14835] bond32: (slave dummy0): failed to get link speed/duplex [ 2108.706658][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2108.855332][T14835] bond32: (slave dummy0): failed to get link speed/duplex [ 2108.957374][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2109.029245][ T3870] netlink: 388 bytes leftover after parsing attributes in process `syz.2.17951'. [ 2109.058352][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2109.088002][T11140] bond32: (slave dummy0): failed to get link speed/duplex [ 2109.196792][T11140] bond32: (slave dummy0): failed to get link speed/duplex [ 2109.489875][T11142] bond32: (slave dummy0): failed to get link speed/duplex [ 2109.520783][ T3879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17954'. [ 2109.580958][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2109.607026][T26408] bond32: (slave dummy0): failed to get link speed/duplex [ 2110.063937][T11140] tipc: Subscription rejected, illegal request [ 2110.201028][ T3911] FAULT_INJECTION: forcing a failure. [ 2110.201028][ T3911] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.201059][ T3911] CPU: 0 UID: 0 PID: 3911 Comm: syz.4.17966 Not tainted syzkaller #0 PREEMPT(full) [ 2110.201081][ T3911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2110.201092][ T3911] Call Trace: [ 2110.201100][ T3911] [ 2110.201109][ T3911] dump_stack_lvl+0xe8/0x150 [ 2110.201141][ T3911] should_fail_ex+0x410/0x560 [ 2110.201169][ T3911] should_failslab+0xa8/0x100 [ 2110.201195][ T3911] __kmalloc_noprof+0xfe/0x720 [ 2110.201214][ T3911] ? bpf_test_init+0x9f/0x150 [ 2110.201241][ T3911] ? bpf_test_init+0x9f/0x150 [ 2110.201273][ T3911] bpf_test_init+0x9f/0x150 [ 2110.201305][ T3911] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 2110.201350][ T3911] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2110.201392][ T3911] ? __fget_files+0x2a/0x420 [ 2110.201423][ T3911] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2110.201453][ T3911] bpf_prog_test_run+0x2c5/0x340 [ 2110.201481][ T3911] __sys_bpf+0xa22/0xd90 [ 2110.201513][ T3911] ? __pfx___sys_bpf+0x10/0x10 [ 2110.201547][ T3911] ? __fget_files+0x2a/0x420 [ 2110.201589][ T3911] ? ksys_write+0x242/0x270 [ 2110.201618][ T3911] ? __pfx_ksys_write+0x10/0x10 [ 2110.201649][ T3911] __x64_sys_bpf+0xba/0xd0 [ 2110.201670][ T3911] do_syscall_64+0x166/0x520 [ 2110.201692][ T3911] ? trace_irq_disable+0x3b/0x140 [ 2110.201710][ T3911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2110.201727][ T3911] ? clear_bhb_loop+0x70/0xc0 [ 2110.201750][ T3911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2110.201769][ T3911] RIP: 0033:0x7f1c8739e159 [ 2110.201788][ T3911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2110.201804][ T3911] RSP: 002b:00007f1c8824d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2110.201826][ T3911] RAX: ffffffffffffffda RBX: 00007f1c87625fa0 RCX: 00007f1c8739e159 [ 2110.201840][ T3911] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 2110.201853][ T3911] RBP: 00007f1c8824d090 R08: 0000000000000000 R09: 0000000000000000 [ 2110.201866][ T3911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2110.201877][ T3911] R13: 00007f1c87626038 R14: 00007f1c87625fa0 R15: 00007ffe8367e278 [ 2110.201909][ T3911] [ 2111.134598][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17970'. [ 2111.500474][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17976'. [ 2111.700905][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17979'. [ 2111.700928][ T3955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17979'. [ 2111.700954][ T3955] netlink: 'syz.2.17979': attribute type 14 has an invalid length. [ 2111.703300][ T3955] netlink: 'syz.2.17979': attribute type 14 has an invalid length. [ 2112.398432][ T3975] __nla_validate_parse: 3 callbacks suppressed [ 2112.398452][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17983'. [ 2112.759171][ T3980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17984'. [ 2112.932290][ T3982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17985'. [ 2114.126950][ T3975] vlan0: left promiscuous mode [ 2114.126974][ T3975] geneve0: left promiscuous mode [ 2114.133223][ T3975] bridge15: left allmulticast mode [ 2114.133453][ T3975] ip6gre1: left allmulticast mode [ 2114.194071][ T6527] net_ratelimit: 654 callbacks suppressed [ 2114.194091][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.221758][ T3975] ip6tnl4: left allmulticast mode [ 2114.222260][ T3975] bridge124: left promiscuous mode [ 2114.222499][ T3975] bridge125: left promiscuous mode [ 2114.223282][ T3975] bridge127: left promiscuous mode [ 2114.256714][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2114.289400][ T3975] bond26: left promiscuous mode [ 2114.289423][ T3975] bond26: left allmulticast mode [ 2114.413129][ T3975] bridge135: left promiscuous mode [ 2114.500378][ T3975] ip6gre2: left promiscuous mode [ 2114.500403][ T3975] ip6gre2: left allmulticast mode [ 2114.540650][ T3975] veth13: left allmulticast mode [ 2114.566850][ T3975] bond34: left promiscuous mode [ 2114.568057][ T3975] xfrm1: left promiscuous mode [ 2114.568076][ T3975] xfrm1: left allmulticast mode [ 2114.572634][ T3975] bridge0: left promiscuous mode [ 2114.638380][ T3975] bridge143: left promiscuous mode [ 2114.693552][ T3975] bridge145: left promiscuous mode [ 2114.723965][ T3975] bridge146: left promiscuous mode [ 2114.749771][ T3975] bridge147: left promiscuous mode [ 2114.784637][ T3980] workqueue: Failed to create a rescuer kthread for wq "bond47": -EINTR [ 2114.799451][T26408] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2114.799484][T26408] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2114.799519][T26408] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 2114.799565][T26408] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2114.799589][T26408] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2114.799612][T26408] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 2114.799646][T26408] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2114.799669][T26408] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2114.799692][T26408] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 2114.799726][T26408] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2114.799749][T26408] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2114.799772][T26408] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 2115.033545][ T4009] ip_tables: iptables: counters copy to user failed while replacing table [ 2115.085840][ T4009] FAULT_INJECTION: forcing a failure. [ 2115.085840][ T4009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2115.085873][ T4009] CPU: 0 UID: 0 PID: 4009 Comm: syz.4.17989 Not tainted syzkaller #0 PREEMPT(full) [ 2115.085895][ T4009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2115.085911][ T4009] Call Trace: [ 2115.085919][ T4009] [ 2115.085928][ T4009] dump_stack_lvl+0xe8/0x150 [ 2115.085959][ T4009] should_fail_ex+0x410/0x560 [ 2115.085987][ T4009] _copy_from_user+0x2d/0xb0 [ 2115.086012][ T4009] generic_map_update_batch+0x668/0xae0 [ 2115.086053][ T4009] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2115.086081][ T4009] ? __fget_files+0x2a/0x420 [ 2115.086114][ T4009] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2115.086142][ T4009] bpf_map_do_batch+0x391/0x630 [ 2115.086171][ T4009] __sys_bpf+0xbe5/0xd90 [ 2115.086201][ T4009] ? __pfx___sys_bpf+0x10/0x10 [ 2115.086234][ T4009] ? __fget_files+0x2a/0x420 [ 2115.086277][ T4009] ? ksys_write+0x242/0x270 [ 2115.086307][ T4009] ? __pfx_ksys_write+0x10/0x10 [ 2115.086340][ T4009] __x64_sys_bpf+0xba/0xd0 [ 2115.086362][ T4009] do_syscall_64+0x166/0x520 [ 2115.086386][ T4009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2115.086406][ T4009] ? clear_bhb_loop+0x70/0xc0 [ 2115.086430][ T4009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2115.086449][ T4009] RIP: 0033:0x7f1c8739e159 [ 2115.086467][ T4009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2115.086482][ T4009] RSP: 002b:00007f1c8824d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2115.086511][ T4009] RAX: ffffffffffffffda RBX: 00007f1c87625fa0 RCX: 00007f1c8739e159 [ 2115.086524][ T4009] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 2115.086534][ T4009] RBP: 00007f1c8824d090 R08: 0000000000000000 R09: 0000000000000000 [ 2115.086546][ T4009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2115.086556][ T4009] R13: 00007f1c87626038 R14: 00007f1c87625fa0 R15: 00007ffe8367e278 [ 2115.086587][ T4009] [ 2115.237950][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2115.302041][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2116.104632][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2116.241459][ T4038] debugfs: '.P'G!D' already exists in 'ieee80211' [ 2116.261220][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2116.336814][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2116.362671][ T4042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17998'. [ 2116.362921][ T4042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17998'. [ 2116.382765][ T4042] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.17998'. [ 2116.391622][ T4042] netlink: 'syz.2.17998': attribute type 1 has an invalid length. [ 2116.391640][ T4042] netlink: 76 bytes leftover after parsing attributes in process `syz.2.17998'. [ 2116.441965][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17998'. [ 2116.441988][ T4042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17998'. [ 2117.002368][ T4059] netlink: 136 bytes leftover after parsing attributes in process `syz.2.18004'. [ 2117.297344][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2117.377962][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2118.006802][ T4103] bridge_slave_1: entered promiscuous mode [ 2118.474037][ T4116] __nla_validate_parse: 1 callbacks suppressed [ 2118.474055][ T4116] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18020'. [ 2119.061295][ T4136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18028'. [ 2119.104450][ T4140] FAULT_INJECTION: forcing a failure. [ 2119.104450][ T4140] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.104481][ T4140] CPU: 0 UID: 0 PID: 4140 Comm: syz.4.18030 Not tainted syzkaller #0 PREEMPT(full) [ 2119.104503][ T4140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2119.104515][ T4140] Call Trace: [ 2119.104522][ T4140] [ 2119.104531][ T4140] dump_stack_lvl+0xe8/0x150 [ 2119.104562][ T4140] should_fail_ex+0x410/0x560 [ 2119.104592][ T4140] should_failslab+0xa8/0x100 [ 2119.104617][ T4140] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 2119.104641][ T4140] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 2119.104661][ T4140] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 2119.104693][ T4140] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 2119.104716][ T4140] krealloc_node_align_noprof+0x19a/0x390 [ 2119.104736][ T4140] ? __kmalloc_cache_noprof+0x14d/0x600 [ 2119.104753][ T4140] ? bpf_diag_init+0x87/0x140 [ 2119.104776][ T4140] ? bpf_diag_init+0x87/0x140 [ 2119.104801][ T4140] kvrealloc_node_align_noprof+0x7b/0xf0 [ 2119.104827][ T4140] bpf_iarray_realloc+0x34/0xa0 [ 2119.104848][ T4140] bpf_check+0x13d4/0x2e10 [ 2119.104879][ T4140] ? ktime_get_with_offset+0x93/0x2d0 [ 2119.104902][ T4140] ? __pfx_bpf_check+0x10/0x10 [ 2119.104923][ T4140] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2119.104951][ T4140] bpf_prog_load+0x14d6/0x1c20 [ 2119.104985][ T4140] ? __pfx_bpf_prog_load+0x10/0x10 [ 2119.105033][ T4140] __sys_bpf+0xd0d/0xd90 [ 2119.105062][ T4140] ? __pfx___sys_bpf+0x10/0x10 [ 2119.105095][ T4140] ? __fget_files+0x2a/0x420 [ 2119.105139][ T4140] ? ksys_write+0x242/0x270 [ 2119.105170][ T4140] ? __pfx_ksys_write+0x10/0x10 [ 2119.105202][ T4140] __x64_sys_bpf+0xba/0xd0 [ 2119.105225][ T4140] do_syscall_64+0x166/0x520 [ 2119.105248][ T4140] ? trace_irq_disable+0x3b/0x140 [ 2119.105267][ T4140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2119.105287][ T4140] ? clear_bhb_loop+0x70/0xc0 [ 2119.105310][ T4140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2119.105329][ T4140] RIP: 0033:0x7f1c8739e159 [ 2119.105347][ T4140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2119.105364][ T4140] RSP: 002b:00007f1c8824d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2119.105385][ T4140] RAX: ffffffffffffffda RBX: 00007f1c87625fa0 RCX: 00007f1c8739e159 [ 2119.105399][ T4140] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 2119.105412][ T4140] RBP: 00007f1c8824d090 R08: 0000000000000000 R09: 0000000000000000 [ 2119.105424][ T4140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2119.105435][ T4140] R13: 00007f1c87626038 R14: 00007f1c87625fa0 R15: 00007ffe8367e278 [ 2119.105466][ T4140] [ 2119.381553][T29309] net_ratelimit: 2 callbacks suppressed [ 2119.381571][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2119.453440][ T4142] netlink: 'syz.2.18032': attribute type 11 has an invalid length. [ 2119.467335][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2119.660519][ T4142] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 2119.686164][ T4145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18031'. [ 2119.690666][ T4147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18031'. [ 2119.949622][ T4164] FAULT_INJECTION: forcing a failure. [ 2119.949622][ T4164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2119.949651][ T4164] CPU: 1 UID: 0 PID: 4164 Comm: syz.2.18036 Not tainted syzkaller #0 PREEMPT(full) [ 2119.949672][ T4164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2119.949683][ T4164] Call Trace: [ 2119.949691][ T4164] [ 2119.949699][ T4164] dump_stack_lvl+0xe8/0x150 [ 2119.949731][ T4164] should_fail_ex+0x410/0x560 [ 2119.949757][ T4164] _copy_to_user+0x31/0xb0 [ 2119.949783][ T4164] simple_read_from_buffer+0xe1/0x170 [ 2119.949812][ T4164] proc_fail_nth_read+0x1bb/0x230 [ 2119.949839][ T4164] ? common_file_perm+0x20e/0x2b0 [ 2119.949863][ T4164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2119.949894][ T4164] ? rw_verify_area+0x24a/0x4c0 [ 2119.949925][ T4164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2119.949953][ T4164] vfs_read+0x213/0xa80 [ 2119.949985][ T4164] ? __pfx___mutex_lock+0x10/0x10 [ 2119.950010][ T4164] ? __pfx_vfs_read+0x10/0x10 [ 2119.950039][ T4164] ? __fget_files+0x2a/0x420 [ 2119.950068][ T4164] ? __fget_files+0x3a2/0x420 [ 2119.950091][ T4164] ? __fget_files+0x2a/0x420 [ 2119.950132][ T4164] ksys_read+0x150/0x270 [ 2119.950162][ T4164] ? __pfx_ksys_read+0x10/0x10 [ 2119.950201][ T4164] do_syscall_64+0x166/0x520 [ 2119.950223][ T4164] ? trace_irq_disable+0x3b/0x140 [ 2119.950243][ T4164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2119.950262][ T4164] ? clear_bhb_loop+0x70/0xc0 [ 2119.950284][ T4164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2119.950302][ T4164] RIP: 0033:0x7fccfb35e98e [ 2119.950320][ T4164] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2119.950335][ T4164] RSP: 002b:00007fccfc205fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2119.950356][ T4164] RAX: ffffffffffffffda RBX: 00007fccfc2066c0 RCX: 00007fccfb35e98e [ 2119.950369][ T4164] RDX: 000000000000000f RSI: 00007fccfc2060a0 RDI: 0000000000000004 [ 2119.950381][ T4164] RBP: 00007fccfc206090 R08: 0000000000000000 R09: 0000000000000000 [ 2119.950393][ T4164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2119.950404][ T4164] R13: 00007fccfb626038 R14: 00007fccfb625fa0 R15: 00007fff55c09808 [ 2119.950436][ T4164] [ 2120.002402][ T4165] IPVS: set_ctl: invalid protocol: 7 127.0.0.1:21 [ 2120.417998][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.497069][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2120.668810][ T4193] syzkaller0: left promiscuous mode [ 2120.668832][ T4193] syzkaller0: left allmulticast mode [ 2120.692577][ T4193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18048'. [ 2120.868359][ T4199] xt_bpf: check failed: parse error [ 2120.893675][ T4199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2120.977432][ T4199] ip_tables: iptables: counters copy to user failed while replacing table [ 2121.457476][T29309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.537517][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2121.726054][ T4218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18059'. [ 2121.726076][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18059'. [ 2121.841879][ T4218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18059'. [ 2121.841902][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18059'. [ 2121.963139][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.964256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.505967][ T1993] block nbd9: Possible stuck request ffff888026d95080: control (read@0,1024B). Runtime 30 seconds [ 2122.510483][ T1993] block nbd9: Possible stuck request ffff888026d95240: control (read@1024,1024B). Runtime 30 seconds [ 2122.510516][ T1993] block nbd9: Possible stuck request ffff888026d95400: control (read@2048,1024B). Runtime 30 seconds [ 2122.510541][ T1993] block nbd9: Possible stuck request ffff888026d955c0: control (read@3072,1024B). Runtime 30 seconds [ 2123.219577][ T4277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18076'. [ 2123.481301][ T4288] __nla_validate_parse: 1 callbacks suppressed [ 2123.481321][ T4288] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18077'. [ 2124.089495][ T4307] ip6gretap0: entered promiscuous mode [ 2124.425216][ T4323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18093'. [ 2124.426244][ T4323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18093'. [ 2124.577394][ T4003] net_ratelimit: 5 callbacks suppressed [ 2124.577414][ T4003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2124.601648][ T4292] sctp: [Deprecated]: syz.4.18082 (pid 4292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2124.601648][ T4292] Use struct sctp_sack_info instead [ 2124.656736][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2124.688871][ T4332] netlink: 'syz.2.18095': attribute type 46 has an invalid length. [ 2125.204797][ T4354] gtp0: entered promiscuous mode [ 2125.204819][ T4354] gtp0: entered allmulticast mode [ 2125.617669][ T4003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2125.698358][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2125.698441][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2125.753180][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18108'. [ 2126.074880][ T4381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18111'. [ 2126.074934][ T4381] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 2126.307804][T26302] tipc: Subscription rejected, illegal request [ 2126.657244][ T4003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.736789][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2127.572272][ T4329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2127.573668][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18105'. [ 2127.727819][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.787282][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2128.142331][ T4403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18119'. [ 2128.142357][ T4403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18119'. [ 2128.252988][ T4413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18123'. [ 2128.258622][T14835] tipc: Subscription rejected, illegal request [ 2128.425981][ T4414] netlink: 'syz.0.18122': attribute type 1 has an invalid length. [ 2128.653586][ T4414] bond56: entered promiscuous mode [ 2128.665408][ T4414] 8021q: adding VLAN 0 to HW filter on device bond56 [ 2129.063142][ T4443] bond32: (slave dummy0): Removing an active aggregator [ 2129.073460][ T4443] bond32: (slave dummy0): Releasing backup interface [ 2129.172023][ T4443] bond39: (slave veth0_to_bond): Releasing backup interface [ 2129.172047][ T4443] bond39: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2129.242554][ T4443] bond1: (slave geneve2): Releasing active interface [ 2129.279192][ T4443] bond2: (slave erspan2): Releasing active interface [ 2129.294401][ T4443] bond10: (slave geneve6): Releasing active interface [ 2129.320654][ T4443] bond11: (slave ip6erspan0): Releasing active interface [ 2129.339568][ T4443] bond12: (slave bridge115): Releasing backup interface [ 2129.354743][ T4443] bond14: (slave gretap0): Releasing active interface [ 2129.375010][ T4443] bond18: (slave bridge124): Releasing backup interface [ 2129.383176][ T4443] bond19: (slave bridge125): Releasing backup interface [ 2129.414994][ T4443] bond28: (slave veth9): Releasing active interface [ 2129.442217][ T4443] bond29: (slave bridge135): Releasing backup interface [ 2129.464130][ T4443] bond32: (slave veth11): Releasing backup interface [ 2129.480500][ T4443] bond33: (slave veth13): Releasing backup interface [ 2129.493992][ T4443] bond35: (slave bridge0): Releasing backup interface [ 2129.508660][ T4443] bond36: (slave bridge143): Releasing backup interface [ 2129.521507][ T4443] bond37: (slave bridge145): Releasing backup interface [ 2129.559752][ T4443] bond38: (slave bridge146): Releasing backup interface [ 2129.574435][ T4443] bond39: (slave bridge147): Releasing backup interface [ 2129.780785][ T4003] net_ratelimit: 5 callbacks suppressed [ 2129.780804][ T4003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2129.859056][ T4459] [ 2129.861428][ T4459] ====================================================== [ 2129.868442][ T4459] WARNING: possible circular locking dependency detected [ 2129.875466][ T4459] syzkaller #0 Not tainted [ 2129.879875][ T4459] ------------------------------------------------------ [ 2129.886885][ T4459] syz.2.18131/4459 is trying to acquire lock: [ 2129.892942][ T4459] ffffffff8ee90160 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 2129.902088][ T4459] [ 2129.902088][ T4459] but task is already holding lock: [ 2129.909447][ T4459] ffff8880471ab6b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 2129.918950][ T4459] [ 2129.918950][ T4459] which lock already depends on the new lock. [ 2129.918950][ T4459] [ 2129.929346][ T4459] [ 2129.929346][ T4459] the existing dependency chain (in reverse order) is: [ 2129.938355][ T4459] [ 2129.938355][ T4459] -> #8 (&mm->mmap_lock){++++}-{4:4}: [ 2129.945917][ T4459] __might_fault+0xcb/0x130 [ 2129.950953][ T4459] _copy_from_user+0x28/0xb0 [ 2129.956070][ T4459] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 2129.962567][ T4459] ip_generic_getfrag+0x149/0x2d0 [ 2129.968108][ T4459] __ip6_append_data+0x3b26/0x40c0 [ 2129.973750][ T4459] ip6_append_data+0x108/0x270 [ 2129.979040][ T4459] rawv6_sendmsg+0x1298/0x18c0 [ 2129.984329][ T4459] sock_sendmsg_nosec+0x10e/0x180 [ 2129.989870][ T4459] ____sys_sendmsg+0x54e/0x850 [ 2129.995167][ T4459] ___sys_sendmsg+0x2a5/0x360 [ 2130.000373][ T4459] __x64_sys_sendmsg+0x1b1/0x290 [ 2130.005842][ T4459] do_syscall_64+0x166/0x520 [ 2130.010948][ T4459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2130.017354][ T4459] [ 2130.017354][ T4459] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 2130.025080][ T4459] lock_sock_nested+0x41/0x100 [ 2130.030356][ T4459] tls_sw_sendmsg+0x15f/0x2b50 [ 2130.035734][ T4459] sock_sendmsg_nosec+0x90/0x180 [ 2130.041197][ T4459] sock_write_iter+0x2de/0x3e0 [ 2130.046492][ T4459] do_iter_readv_writev+0x612/0x8c0 [ 2130.052210][ T4459] vfs_writev+0x343/0x990 [ 2130.057059][ T4459] do_writev+0x154/0x2e0 [ 2130.061830][ T4459] do_syscall_64+0x166/0x520 [ 2130.066949][ T4459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2130.073361][ T4459] [ 2130.073361][ T4459] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 2130.080830][ T4459] __mutex_lock+0x19d/0x1550 [ 2130.085950][ T4459] tls_sw_sendmsg+0x13a/0x2b50 [ 2130.091240][ T4459] sock_sendmsg_nosec+0x90/0x180 [ 2130.096694][ T4459] sock_sendmsg+0x1ca/0x2d0 [ 2130.101719][ T4459] __sock_xmit+0x245/0x4f0 [ 2130.106762][ T4459] nbd_disconnect+0x3ad/0x560 [ 2130.111948][ T4459] nbd_disconnect_and_put+0x32/0x280 [ 2130.117743][ T4459] nbd_genl_disconnect+0x4af/0x590 [ 2130.123369][ T4459] genl_family_rcv_msg_doit+0x233/0x340 [ 2130.129445][ T4459] genl_rcv_msg+0x614/0x7a0 [ 2130.134473][ T4459] netlink_rcv_skb+0x226/0x4a0 [ 2130.139771][ T4459] genl_rcv+0x28/0x40 [ 2130.144279][ T4459] netlink_unicast+0x7bd/0x940 [ 2130.149565][ T4459] netlink_sendmsg+0x813/0xb40 [ 2130.154851][ T4459] sock_sendmsg_nosec+0x13a/0x180 [ 2130.160398][ T4459] ____sys_sendmsg+0x54e/0x850 [ 2130.165691][ T4459] ___sys_sendmsg+0x2a5/0x360 [ 2130.170899][ T4459] __x64_sys_sendmsg+0x1b1/0x290 [ 2130.176373][ T4459] do_syscall_64+0x166/0x520 [ 2130.181504][ T4459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2130.187928][ T4459] [ 2130.187928][ T4459] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 2130.195587][ T4459] __mutex_lock+0x19d/0x1550 [ 2130.200709][ T4459] nbd_queue_rq+0x373/0xff0 [ 2130.205733][ T4459] blk_mq_dispatch_rq_list+0x499/0x1990 [ 2130.211893][ T4459] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 2130.218804][ T4459] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2130.225318][ T4459] blk_mq_run_work_fn+0x16c/0x300 [ 2130.230875][ T4459] process_scheduled_works+0xc3d/0x1630 [ 2130.236950][ T4459] worker_thread+0xa47/0xfb0 [ 2130.242072][ T4459] kthread+0x38b/0x480 [ 2130.246664][ T4459] ret_from_fork+0x514/0xb70 [ 2130.251771][ T4459] ret_from_fork_asm+0x1a/0x30 [ 2130.257060][ T4459] [ 2130.257060][ T4459] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 2130.264266][ T4459] __mutex_lock+0x19d/0x1550 [ 2130.269382][ T4459] nbd_queue_rq+0xc1/0xff0 [ 2130.274311][ T4459] blk_mq_dispatch_rq_list+0x499/0x1990 [ 2130.280367][ T4459] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 2130.287206][ T4459] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2130.293701][ T4459] blk_mq_run_work_fn+0x16c/0x300 [ 2130.299238][ T4459] process_scheduled_works+0xc3d/0x1630 [ 2130.305300][ T4459] worker_thread+0xa47/0xfb0 [ 2130.310405][ T4459] kthread+0x38b/0x480 [ 2130.314985][ T4459] ret_from_fork+0x514/0xb70 [ 2130.320093][ T4459] ret_from_fork_asm+0x1a/0x30 [ 2130.325376][ T4459] [ 2130.325376][ T4459] -> #3 (set->srcu){.+.+}-{0:0}: [ 2130.332484][ T4459] __synchronize_srcu+0xc9/0x2f0 [ 2130.337927][ T4459] elevator_switch+0x1e8/0x7b0 [ 2130.343280][ T4459] elevator_change+0x2fa/0x480 [ 2130.348555][ T4459] elevator_set_default+0x375/0x440 [ 2130.354263][ T4459] blk_register_queue+0x3f3/0x4e0 [ 2130.359850][ T4459] __add_disk+0x6b8/0xdb0 [ 2130.364697][ T4459] add_disk_fwnode+0x100/0x3a0 [ 2130.369972][ T4459] nbd_dev_add+0x733/0xb60 [ 2130.374894][ T4459] nbd_init+0x168/0x1f0 [ 2130.379640][ T4459] do_one_initcall+0x250/0x870 [ 2130.384923][ T4459] do_initcall_level+0x10a/0x1a0 [ 2130.390452][ T4459] do_initcalls+0x59/0xa0 [ 2130.395291][ T4459] kernel_init_freeable+0x29d/0x3e0 [ 2130.401000][ T4459] kernel_init+0x22/0x1d0 [ 2130.405838][ T4459] ret_from_fork+0x514/0xb70 [ 2130.410932][ T4459] ret_from_fork_asm+0x1a/0x30 [ 2130.416210][ T4459] [ 2130.416210][ T4459] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 2130.424012][ T4459] __mutex_lock+0x19d/0x1550 [ 2130.429114][ T4459] elevator_change+0x1af/0x480 [ 2130.434385][ T4459] elevator_set_none+0xb5/0x140 [ 2130.439739][ T4459] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 2130.446053][ T4459] nbd_start_device+0x189/0xb30 [ 2130.451405][ T4459] nbd_genl_connect+0x167d/0x1cd0 [ 2130.456933][ T4459] genl_family_rcv_msg_doit+0x233/0x340 [ 2130.462987][ T4459] genl_rcv_msg+0x614/0x7a0 [ 2130.467997][ T4459] netlink_rcv_skb+0x226/0x4a0 [ 2130.473275][ T4459] genl_rcv+0x28/0x40 [ 2130.477762][ T4459] netlink_unicast+0x7bd/0x940 [ 2130.483039][ T4459] netlink_sendmsg+0x813/0xb40 [ 2130.488304][ T4459] sock_sendmsg_nosec+0x13a/0x180 [ 2130.493830][ T4459] ____sys_sendmsg+0x54e/0x850 [ 2130.499103][ T4459] ___sys_sendmsg+0x2a5/0x360 [ 2130.504289][ T4459] __x64_sys_sendmsg+0x1b1/0x290 [ 2130.509732][ T4459] do_syscall_64+0x166/0x520 [ 2130.514875][ T4459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2130.521292][ T4459] [ 2130.521292][ T4459] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 2130.529889][ T4459] blk_alloc_queue+0x544/0x690 [ 2130.535172][ T4459] __blk_mq_alloc_disk+0x194/0x390 [ 2130.540795][ T4459] nbd_dev_add+0x494/0xb60 [ 2130.545723][ T4459] nbd_init+0x168/0x1f0 [ 2130.550400][ T4459] do_one_initcall+0x250/0x870 [ 2130.555684][ T4459] do_initcall_level+0x10a/0x1a0 [ 2130.561139][ T4459] do_initcalls+0x59/0xa0 [ 2130.565981][ T4459] kernel_init_freeable+0x29d/0x3e0 [ 2130.571691][ T4459] kernel_init+0x22/0x1d0 [ 2130.576536][ T4459] ret_from_fork+0x514/0xb70 [ 2130.581634][ T4459] ret_from_fork_asm+0x1a/0x30 [ 2130.586925][ T4459] [ 2130.586925][ T4459] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 2130.594126][ T4459] __lock_acquire+0x164c/0x2de0 [ 2130.599484][ T4459] lock_acquire+0x115/0x350 [ 2130.604496][ T4459] fs_reclaim_acquire+0x71/0x100 [ 2130.609940][ T4459] prepare_alloc_pages+0x149/0x600 [ 2130.615556][ T4459] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2130.621869][ T4459] alloc_pages_mpol+0x21e/0x390 [ 2130.627236][ T4459] folio_alloc_mpol_noprof+0x39/0x160 [ 2130.633149][ T4459] vma_alloc_folio_noprof+0xe1/0x1e0 [ 2130.638955][ T4459] do_pte_missing+0x173a/0x34b0 [ 2130.644317][ T4459] handle_mm_fault+0x1a53/0x3750 [ 2130.649768][ T4459] do_user_addr_fault+0x746/0x1340 [ 2130.655388][ T4459] exc_page_fault+0x6a/0xc0 [ 2130.660404][ T4459] asm_exc_page_fault+0x26/0x30 [ 2130.665764][ T4459] rep_movs_alternative+0x4a/0xa0 [ 2130.671304][ T4459] _copy_to_user+0x8a/0xb0 [ 2130.676226][ T4459] ethtool_get_strings+0x7aa/0x8d0 [ 2130.681846][ T4459] dev_ethtool+0x19f3/0x29c0 [ 2130.686940][ T4459] dev_ioctl+0x392/0x1150 [ 2130.691775][ T4459] sock_do_ioctl+0x23e/0x320 [ 2130.696869][ T4459] sock_ioctl+0x57a/0x7e0 [ 2130.701707][ T4459] __se_sys_ioctl+0xfc/0x170 [ 2130.706803][ T4459] do_syscall_64+0x166/0x520 [ 2130.711898][ T4459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2130.718295][ T4459] [ 2130.718295][ T4459] other info that might help us debug this: [ 2130.718295][ T4459] [ 2130.728509][ T4459] Chain exists of: [ 2130.728509][ T4459] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 2130.728509][ T4459] [ 2130.741097][ T4459] Possible unsafe locking scenario: [ 2130.741097][ T4459] [ 2130.748530][ T4459] CPU0 CPU1 [ 2130.753875][ T4459] ---- ---- [ 2130.759225][ T4459] rlock(&mm->mmap_lock); [ 2130.763641][ T4459] lock(sk_lock-AF_INET6); [ 2130.770642][ T4459] lock(&mm->mmap_lock); [ 2130.777472][ T4459] lock(fs_reclaim); [ 2130.781434][ T4459] [ 2130.781434][ T4459] *** DEADLOCK *** [ 2130.781434][ T4459] [ 2130.789553][ T4459] locks held by syz.2.18131/4459: 2, last CPU#0: [ 2130.795858][ T4459] #0: ffff888028194e70 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_ethtool+0x47e/0x29c0 [ 2130.806035][ T4459] #1: ffff8880471ab6b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 2130.815942][ T4459] [ 2130.815942][ T4459] stack backtrace: [ 2130.821813][ T4459] CPU: 0 UID: 0 PID: 4459 Comm: syz.2.18131 Not tainted syzkaller #0 PREEMPT(full) [ 2130.831164][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2130.841199][ T4459] Call Trace: [ 2130.844463][ T4459] [ 2130.847383][ T4459] dump_stack_lvl+0xe8/0x150 [ 2130.851968][ T4459] print_circular_bug+0x2e2/0x300 [ 2130.856984][ T4459] check_noncircular+0x12f/0x150 [ 2130.861914][ T4459] __lock_acquire+0x164c/0x2de0 [ 2130.866753][ T4459] ? __update_page_owner_handle+0x5a/0x580 [ 2130.872553][ T4459] ? __update_page_owner_handle+0x5a/0x580 [ 2130.878344][ T4459] ? __update_page_owner_handle+0x512/0x580 [ 2130.884225][ T4459] lock_acquire+0x115/0x350 [ 2130.888712][ T4459] ? prepare_alloc_pages+0x149/0x600 [ 2130.893989][ T4459] ? __page_table_check_zero+0x6c/0x430 [ 2130.899521][ T4459] fs_reclaim_acquire+0x71/0x100 [ 2130.904444][ T4459] ? prepare_alloc_pages+0x149/0x600 [ 2130.909712][ T4459] prepare_alloc_pages+0x149/0x600 [ 2130.914809][ T4459] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2130.920602][ T4459] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2130.926917][ T4459] ? __pfx_policy_nodemask+0x10/0x10 [ 2130.932199][ T4459] ? __lock_acquire+0x747/0x2de0 [ 2130.937134][ T4459] alloc_pages_mpol+0x21e/0x390 [ 2130.941979][ T4459] folio_alloc_mpol_noprof+0x39/0x160 [ 2130.947350][ T4459] vma_alloc_folio_noprof+0xe1/0x1e0 [ 2130.952640][ T4459] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2130.958529][ T4459] ? lock_acquire+0x115/0x350 [ 2130.963196][ T4459] do_pte_missing+0x173a/0x34b0 [ 2130.968041][ T4459] handle_mm_fault+0x1a53/0x3750 [ 2130.972972][ T4459] ? handle_mm_fault+0xf1/0x3750 [ 2130.977922][ T4459] ? __pfx_handle_mm_fault+0x10/0x10 [ 2130.983208][ T4459] ? lock_mm_and_find_vma+0xa7/0x340 [ 2130.988490][ T4459] do_user_addr_fault+0x746/0x1340 [ 2130.993593][ T4459] exc_page_fault+0x6a/0xc0 [ 2130.998088][ T4459] asm_exc_page_fault+0x26/0x30 [ 2131.002923][ T4459] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 2131.008722][ T4459] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 2131.028315][ T4459] RSP: 0018:ffffc900035cf948 EFLAGS: 00050206 [ 2131.034367][ T4459] RAX: ffffffff84df0001 RBX: 0000000000000fa0 RCX: 00000000000003ac [ 2131.042320][ T4459] RDX: 0000000000000000 RSI: ffffc900031e0bf4 RDI: 0000200000001000 [ 2131.050274][ T4459] RBP: ffffc900035cfa50 R08: ffffc900031e0f9f R09: 1ffff9200063c1f3 [ 2131.058229][ T4459] R10: dffffc0000000000 R11: fffff5200063c1f4 R12: 00002000000013ac [ 2131.066185][ T4459] R13: 00007ffffffff000 R14: ffffc900031e0000 R15: 000020000000040c [ 2131.074145][ T4459] ? _copy_from_user+0x81/0xb0 [ 2131.078902][ T4459] _copy_to_user+0x8a/0xb0 [ 2131.083306][ T4459] ethtool_get_strings+0x7aa/0x8d0 [ 2131.088408][ T4459] ? __pfx_ethtool_get_strings+0x10/0x10 [ 2131.094027][ T4459] ? dev_get_by_name+0x21/0x200 [ 2131.098873][ T4459] dev_ethtool+0x19f3/0x29c0 [ 2131.103452][ T4459] ? __lock_acquire+0x747/0x2de0 [ 2131.108381][ T4459] ? __pfx_dev_ethtool+0x10/0x10 [ 2131.113307][ T4459] ? kasan_quarantine_put+0xbb/0x1f0 [ 2131.118577][ T4459] ? lock_acquire+0x115/0x350 [ 2131.123242][ T4459] ? dev_load+0x21/0x1f0 [ 2131.127469][ T4459] ? dev_load+0x21/0x1f0 [ 2131.131699][ T4459] dev_ioctl+0x392/0x1150 [ 2131.136033][ T4459] sock_do_ioctl+0x23e/0x320 [ 2131.140627][ T4459] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2131.145744][ T4459] ? hook_file_ioctl+0x1f2/0x600 [ 2131.150693][ T4459] sock_ioctl+0x57a/0x7e0 [ 2131.155027][ T4459] ? __pfx_sock_ioctl+0x10/0x10 [ 2131.159871][ T4459] ? __fget_files+0x2a/0x420 [ 2131.164457][ T4459] ? __fget_files+0x3a2/0x420 [ 2131.169125][ T4459] ? __fget_files+0x2a/0x420 [ 2131.173712][ T4459] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2131.178651][ T4459] ? __pfx_sock_ioctl+0x10/0x10 [ 2131.183500][ T4459] __se_sys_ioctl+0xfc/0x170 [ 2131.188082][ T4459] do_syscall_64+0x166/0x520 [ 2131.192668][ T4459] ? trace_irq_disable+0x3b/0x140 [ 2131.197678][ T4459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2131.203743][ T4459] ? clear_bhb_loop+0x70/0xc0 [ 2131.208405][ T4459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2131.214291][ T4459] RIP: 0033:0x7fccfb39e159 [ 2131.218707][ T4459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2131.238312][ T4459] RSP: 002b:00007fccfc206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2131.246726][ T4459] RAX: ffffffffffffffda RBX: 00007fccfb625fa0 RCX: 00007fccfb39e159 [ 2131.254685][ T4459] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000005 [ 2131.262639][ T4459] RBP: 00007fccfb43506b R08: 0000000000000000 R09: 0000000000000000 [ 2131.270594][ T4459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2131.278547][ T4459] R13: 00007fccfb626038 R14: 00007fccfb625fa0 R15: 00007fff55c09808 [ 2131.286515][ T4459] [ 2131.290262][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2131.292799][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2131.313237][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2131.337748][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18131'. [ 2132.338059][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2132.343065][ T4003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.377279][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2133.379054][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2134.428066][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2134.429200][ T4003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2135.297237][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2135.457370][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2135.459963][ T4003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2136.498068][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2136.502496][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2137.537359][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2137.539074][ T4003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.578135][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2138.580517][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.617358][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node