last executing test programs: 16m6.98838677s ago: executing program 2 (id=6726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70b52a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1020}]}, 0x24}, 0x1, 0x0, 0x60000000, 0x10}, 0x4000000) 16m2.303934124s ago: executing program 2 (id=6732): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x155}}]}}}]}, 0x58}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x122, 0x880, 0x0, 0x0) 15m58.300674523s ago: executing program 2 (id=6738): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/64, 0x40}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000040)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x4, 0x0, 0x0, 0x1008}, 0x72}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x4000000000000aa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008000) 15m53.52392255s ago: executing program 2 (id=6743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a310000000014000000110001"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x200}]}}}]}, 0x40}}, 0x0) 15m48.950804314s ago: executing program 2 (id=6750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 15m43.278556643s ago: executing program 2 (id=6760): socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)="c18c2b249ecaddc074e3109075c76aefed935caf064a3fc337a6907eba189e366c245aadf6f875459170083cf027ea740ece126400b4256bd3c8a3e02d833a040dbbf048b1dba673fff315fee0e5103c17588b5811f0f4a56847312de4fa82e00137672caa57083690fa44ba17101ba3b97b67e1361fa8d4b6978acf929c4b1d4be7242b41abcf932a9c4b692915139f087eda57ab88814c2fb55dd2f277aff2cfc43898396243336d65584720b61a18691551072e47ef894233cbf36e80332e35aef6989196aa0f7b7d996a693b20d7", 0xd0}, {&(0x7f0000000300)="2fed313af74100e3f16999236782003d5ae18a612a963192cf3d77c3cefe0194e0677bffb8577b5b64d96e1fe345aae84c14cddf0183f06e4c697204f0d576369f7900e3d608b74341d56701220947d8c42b3c0d99ea10a7ff6cd230c5e416adf4e3fb21da773cc4dcacee1325b3e9f4f502529c3e86440326070279ebe1e599c989b0cd9a068fa681cb791d331cce3d87280cc25803f174aeea1c46d9466233524c4e1a016918b2daafeb05fb96d1b953abfd01e720425236509e4e516c99c92e166299385a524a2fa2ee792f16a47519dbfb0ce301f6c2482dbf5732aa354d2b25d94da2af396ffa93d9f644dd4ba4", 0xf0}], 0x2}, 0x810) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000010000b90ff6b20000060a090400000000000000000200000028000480240001800b00010072656a65637400001400028005000200cf00000008000140000000020900010073797afa3e61cf9e92e5b80073797a3200000000140000001100010000000000000000007d926fb40b49b06bb77a85b290d9d8673071dfd71cac3473102ea847449988d80b986bcf"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0xb0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb45}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'macvlan0\x00', 0x6}) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)="c18c2b249ecaddc074e3109075c76aefed935caf064a3fc337a6907eba189e366c245aadf6f875459170083cf027ea740ece126400b4256bd3c8a3e02d833a040dbbf048b1dba673fff315fee0e5103c17588b5811f0f4a56847312de4fa82e00137672caa57083690fa44ba17101ba3b97b67e1361fa8d4b6978acf929c4b1d4be7242b41abcf932a9c4b692915139f087eda57ab88814c2fb55dd2f277aff2cfc43898396243336d65584720b61a18691551072e47ef894233cbf36e80332e35aef6989196aa0f7b7d996a693b20d7", 0xd0}, {&(0x7f0000000300)="2fed313af74100e3f16999236782003d5ae18a612a963192cf3d77c3cefe0194e0677bffb8577b5b64d96e1fe345aae84c14cddf0183f06e4c697204f0d576369f7900e3d608b74341d56701220947d8c42b3c0d99ea10a7ff6cd230c5e416adf4e3fb21da773cc4dcacee1325b3e9f4f502529c3e86440326070279ebe1e599c989b0cd9a068fa681cb791d331cce3d87280cc25803f174aeea1c46d9466233524c4e1a016918b2daafeb05fb96d1b953abfd01e720425236509e4e516c99c92e166299385a524a2fa2ee792f16a47519dbfb0ce301f6c2482dbf5732aa354d2b25d94da2af396ffa93d9f644dd4ba4", 0xf0}], 0x2}, 0x810) (async) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000010000b90ff6b20000060a090400000000000000000200000028000480240001800b00010072656a65637400001400028005000200cf00000008000140000000020900010073797afa3e61cf9e92e5b80073797a3200000000140000001100010000000000000000007d926fb40b49b06bb77a85b290d9d8673071dfd71cac3473102ea847449988d80b986bcf"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0xb0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb45}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'macvlan0\x00', 0x6}) (async) 15m28.035823652s ago: executing program 32 (id=6760): socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)="c18c2b249ecaddc074e3109075c76aefed935caf064a3fc337a6907eba189e366c245aadf6f875459170083cf027ea740ece126400b4256bd3c8a3e02d833a040dbbf048b1dba673fff315fee0e5103c17588b5811f0f4a56847312de4fa82e00137672caa57083690fa44ba17101ba3b97b67e1361fa8d4b6978acf929c4b1d4be7242b41abcf932a9c4b692915139f087eda57ab88814c2fb55dd2f277aff2cfc43898396243336d65584720b61a18691551072e47ef894233cbf36e80332e35aef6989196aa0f7b7d996a693b20d7", 0xd0}, {&(0x7f0000000300)="2fed313af74100e3f16999236782003d5ae18a612a963192cf3d77c3cefe0194e0677bffb8577b5b64d96e1fe345aae84c14cddf0183f06e4c697204f0d576369f7900e3d608b74341d56701220947d8c42b3c0d99ea10a7ff6cd230c5e416adf4e3fb21da773cc4dcacee1325b3e9f4f502529c3e86440326070279ebe1e599c989b0cd9a068fa681cb791d331cce3d87280cc25803f174aeea1c46d9466233524c4e1a016918b2daafeb05fb96d1b953abfd01e720425236509e4e516c99c92e166299385a524a2fa2ee792f16a47519dbfb0ce301f6c2482dbf5732aa354d2b25d94da2af396ffa93d9f644dd4ba4", 0xf0}], 0x2}, 0x810) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000010000b90ff6b20000060a090400000000000000000200000028000480240001800b00010072656a65637400001400028005000200cf00000008000140000000020900010073797afa3e61cf9e92e5b80073797a3200000000140000001100010000000000000000007d926fb40b49b06bb77a85b290d9d8673071dfd71cac3473102ea847449988d80b986bcf"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0xb0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb45}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'macvlan0\x00', 0x6}) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)="c18c2b249ecaddc074e3109075c76aefed935caf064a3fc337a6907eba189e366c245aadf6f875459170083cf027ea740ece126400b4256bd3c8a3e02d833a040dbbf048b1dba673fff315fee0e5103c17588b5811f0f4a56847312de4fa82e00137672caa57083690fa44ba17101ba3b97b67e1361fa8d4b6978acf929c4b1d4be7242b41abcf932a9c4b692915139f087eda57ab88814c2fb55dd2f277aff2cfc43898396243336d65584720b61a18691551072e47ef894233cbf36e80332e35aef6989196aa0f7b7d996a693b20d7", 0xd0}, {&(0x7f0000000300)="2fed313af74100e3f16999236782003d5ae18a612a963192cf3d77c3cefe0194e0677bffb8577b5b64d96e1fe345aae84c14cddf0183f06e4c697204f0d576369f7900e3d608b74341d56701220947d8c42b3c0d99ea10a7ff6cd230c5e416adf4e3fb21da773cc4dcacee1325b3e9f4f502529c3e86440326070279ebe1e599c989b0cd9a068fa681cb791d331cce3d87280cc25803f174aeea1c46d9466233524c4e1a016918b2daafeb05fb96d1b953abfd01e720425236509e4e516c99c92e166299385a524a2fa2ee792f16a47519dbfb0ce301f6c2482dbf5732aa354d2b25d94da2af396ffa93d9f644dd4ba4", 0xf0}], 0x2}, 0x810) (async) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000010000b90ff6b20000060a090400000000000000000200000028000480240001800b00010072656a65637400001400028005000200cf00000008000140000000020900010073797afa3e61cf9e92e5b80073797a3200000000140000001100010000000000000000007d926fb40b49b06bb77a85b290d9d8673071dfd71cac3473102ea847449988d80b986bcf"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0xb0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb45}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'macvlan0\x00', 0x6}) (async) 6m22.086588008s ago: executing program 5 (id=7613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000013006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 6m10.763435183s ago: executing program 5 (id=7630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="10030000001b0000000208008000"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x98, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@union={0x6, 0x6, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x0, 0xf1c}, {0x4, 0x2, 0x7}, {0x7, 0x1, 0xfffffffe}, {0xd, 0x5, 0x7}, {0xc, 0x2, 0x1}, {0x5, 0x1, 0x3}]}]}, {0x0, [0x7f]}}, &(0x7f00000008c0)=""/119, 0x6f, 0x77, 0x1, 0xa, 0x10000}, 0x28) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000003c0)={0x2}, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'sh\x00', 0x1, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x4, 0xcd}}, 0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000240)=0x1) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x410, 0x120, 0x0, 0x148, 0x120, 0x148, 0x3a0, 0x240, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e1d, 0x4e20, 0x8, 0x2, 0x5f4a, 0x100, 0xa22}}}, {{@ip={@multicast1, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x60}, 0x0, 0x260, 0x280, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x7, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x0, 'syz1\x00', 0x5}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x10001) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m7.107905291s ago: executing program 5 (id=7640): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) 6m3.105702491s ago: executing program 5 (id=7647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, 0x0, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b906, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040f4}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x1, 0x4088, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x3, 0x6, @remote}, 0x14) 6m3.019768217s ago: executing program 1 (id=7648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) 6m1.950188136s ago: executing program 1 (id=7651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x17, 0x40, 0xb, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x800}, @eol, @md5sig={0x13, 0x12, "c8651cedc09be42aa500"}, @generic={0x1, 0x11, "7da26b4a0b65c0b8ca531b9f2378b6"}, @mss={0x2, 0x4, 0x1ff}, @fastopen={0x22, 0x5, "39cdb4"}, @timestamp={0x8, 0xa, 0x1, 0x7}]}}}}}}}, 0x0) 6m1.184993683s ago: executing program 1 (id=7654): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcf1fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe092302f5fb9887db5fdb899b64442c11a5c77671df9188f524169816d192902fb5ed"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8, 0xfffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 6m0.907258247s ago: executing program 5 (id=7657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x9, r3}, 0x38) write(r2, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) r4 = socket$inet6(0xa, 0x2, 0x0) close(r3) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x2005, 0x4) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0xfffa, @local}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f00000003c0)={0x5, 0x1, 0x1ff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) 5m58.839692351s ago: executing program 1 (id=7661): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) 5m58.234103893s ago: executing program 5 (id=7662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4880) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 5m58.165083344s ago: executing program 1 (id=7663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x17, 0x40, 0xb, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x800}, @eol, @md5sig={0x13, 0x12, "c8651cedc09be42aa500"}, @generic={0x1, 0x11, "7da26b4a0b65c0b8ca531b9f2378b6"}, @mss={0x2, 0x4, 0x1ff}, @fastopen={0x22, 0x5, "39cdb4"}, @timestamp={0x8, 0xa, 0x1, 0x7}]}}}}}}}, 0x0) 5m57.391313538s ago: executing program 1 (id=7666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, 0x0, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b906, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040f4}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x1, 0x4088, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x3, 0x6, @remote}, 0x14) 5m42.921385407s ago: executing program 33 (id=7662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4880) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 5m41.919221314s ago: executing program 34 (id=7666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, 0x0, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b906, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040f4}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x1, 0x4088, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x3, 0x6, @remote}, 0x14) 5m18.702410301s ago: executing program 4 (id=7723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x1234, 0x33}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x5c, 0x1, {{'sha1\x00'}, 0x80, 0x60, "00112233445566778899aabbccddeeff"}}]}, 0x14c}}, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x24, 0x33, 0x40, @remote, @local, {[], "3b040000000012340000000100"/36}}}, 0x4c) 5m15.981360855s ago: executing program 4 (id=7726): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100004000000000000000000000000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m13.506377902s ago: executing program 4 (id=7727): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x844) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) 5m13.0057187s ago: executing program 4 (id=7730): socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) 5m11.437951264s ago: executing program 4 (id=7733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x24, 0x33, 0x40, @remote, @local, {[], "3b040000000012340000000100"/36}}}, 0x4c) 5m9.386696279s ago: executing program 4 (id=7736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000600)=""/4080, 0xff0}, {&(0x7f0000001600)=""/123, 0x7b}], 0x2}, 0xbb8e}], 0x1, 0x20, 0x0) 4m53.739833739s ago: executing program 35 (id=7736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000600)=""/4080, 0xff0}, {&(0x7f0000001600)=""/123, 0x7b}], 0x2}, 0xbb8e}], 0x1, 0x20, 0x0) 44.972596716s ago: executing program 6 (id=8209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5e729bd7000fbdbb50f040000000c0001800800030001"], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000002380)=0x1024) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000080)="a336183f91ab4b17149a18fed7ac5c47b6cc9becf598bab4c0d8c8f5678e4dea3e9bf1557d42bdbc960d46f787c1926306e1dacaf54f676c1677ceba0cf82ebd70296abfb1bce6f6d1832b45eba9a3a14e46120484980554d3d7813d059134a9353da39a8c485328bff11eef0300f11bcddedb6b69b30bbacac631bfaeb05571a125bccc1ef49f6a29375beb9c808e70d9f0d91faf377decf621e3a450839f12ad07331e1a3aa2a45e8d5e0f342ae12b520a9a24564cc908", &(0x7f0000000140)=""/157}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x991c}]}}]}, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 42.179951622s ago: executing program 6 (id=8214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r4}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x43}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) recvmsg$can_bcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40002163) 41.182215713s ago: executing program 0 (id=8217): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0281bb9f7200254b9cd956c0", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffa6}, 0x10122) 41.11394832s ago: executing program 7 (id=8218): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x2d, 0xb, 0x1, 0x0, {0x6}}, 0x14}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="800007000a0002000180c200000300f505000500"], 0x30}}, 0x48080) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x6ad534972b9e09b2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48014}, 0xc0040d1) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20000880) 40.630329192s ago: executing program 6 (id=8219): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) 39.912041721s ago: executing program 0 (id=8221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000c800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) 39.910955726s ago: executing program 6 (id=8222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e, 0x2400}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) 39.81909201s ago: executing program 7 (id=8223): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) (async, rerun: 64) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) (rerun: 64) r7 = socket$inet6(0xa, 0x5, 0x0) (async, rerun: 64) r8 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r8, 0x8) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) (rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x84, @ipv4={'\x00', '\xff\xff', @empty}, 0x7fffffff}, @in={0x2, 0x4e22, @loopback}], 0x17) (rerun: 32) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x170, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xbe00}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6da}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb840}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000d0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000002800018014000400ff01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000900)={0x260, r11, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x3a}}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4d3e, 0x273f, 0x8c30, 0x81, 0x8, 0xfffc, 0x6, 0x65]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x5, 0x3}, {0x3, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x3, 0x2}, {0x3, 0x2}, {0x4, 0x8}, {0x7, 0x4}, {0x0, 0x8}, {}, {0x1, 0x6}, {0x6, 0x4}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x3}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0xa}, {0x3, 0x3}, {0x3, 0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x6}, {0x3, 0x5}, {0x6, 0x8}, {0x5, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x7, 0xa}, {0x0, 0x6}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x3}, {0x0, 0x2}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x2}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x2}, {0x1, 0x9}, {0x5, 0x5}, {}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x1, 0x6, 0x5, 0x2, 0x2, 0x60, 0x12, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd85f, 0xeca1, 0x3fb, 0x1, 0x4, 0xf001, 0x1, 0x9]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x8, 0x3, 0x2, 0xfff5, 0x3d5d, 0xdf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfef7, 0x5, 0x6, 0x5, 0x1a8, 0x5, 0x3ff, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x98, 0x9, 0x1, 0xc93, 0x80, 0x9, 0x4, 0x7]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x5}, {0x4}, {0x6, 0x3}, {0x7, 0x3}, {0x3}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x9}, {0x5}, {0x7, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x1}, {0x2}, {0x2, 0x4}, {0x3}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0xa}, {0x4, 0x7}, {0x7, 0x3}, {0x5, 0x3}, {0x2, 0xa}, {}, {0x3, 0xa}, {0x7, 0x3}, {}, {0x2, 0x4}, {0x6, 0x3}, {0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x9}, {0x5, 0x5}, {0x4, 0x4}, {0x0, 0x9}, {0x2, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0xa}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x2}, {0x4, 0x4}, {0x2, 0x6}, {0x5, 0x5}, {0x4, 0x6}, {0x5, 0x2}, {}, {0x1, 0xa}, {0x5, 0x1}, {0x6, 0xa}, {0x0, 0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x8}, {0x6, 0x4}, {0x0, 0x6}, {0x3}, {0x3, 0x2}, {0x3, 0x2}, {0x5, 0x9}, {0x5, 0x4}, {0x5, 0x9}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xdbfbf15e370174cd, 0x5, 0x60, 0x60, 0x60, 0x5]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x3, 0x156, 0x8000, 0x5, 0x5, 0xc]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x8}, {0x3, 0x5}, {0x3, 0x3}, {}, {0x4, 0x9}, {0x2, 0x6}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0xa}, {0x7}, {0x4, 0x1}, {0x7, 0xa}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x24, 0x2, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004) 39.160528556s ago: executing program 0 (id=8224): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x991c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 38.15509218s ago: executing program 3 (id=8226): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)="350ed1871726b5ad4f44da88d4e6d6b1f17217c38a3418909a508cec60ec73e2ab286245ded56fd4bb93db8cef041ac8901cf7fa0171bc6c8778368c89776f4a0bb5446d423e805f9626dfd56a936915f5b671523b633ec3be455e31904a4d4bf66fe47a151ac5d3f27e6652cade7078194ce7dcdf18081557b930dcbcd11dddb73025102dca2baef0fb96fc6ce652ec419dbf21c2f339f1565073f97d7839dffd2ab6c5165a0c19268fd0339ea230703346ddf0c71ca2112ecbb107ab6c5fe95fa98a5b8a", 0xc5}], 0x1}}], 0x1, 0x20002090) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESDEC=r1], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0x32600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), 0x0}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r3, 0x8927, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_flags=0x1000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 37.090269309s ago: executing program 7 (id=8227): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 36.91115585s ago: executing program 3 (id=8228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) (fail_nth: 5) 36.697944089s ago: executing program 7 (id=8229): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x8000008, 0x8, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x401}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000340)={@sco={0x1f, @none}, {&(0x7f0000000280)=""/72, 0x48}, &(0x7f0000000300), 0x23}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001300", @ANYRES32=0x0, @ANYBLOB="04ff028051f5a018cbb142710b3d662aa0821c75d9d69923bda58269312480275990daac1dbc397f34ef5ac36ed21bc9dedd5df225a155a8debe09c15468a471f836df1da03f10a27c16d6b63350a437f33c21aedba64f5459ee05c3c86c9a67f34d6c34d2f8edc7680f42375079721b5fb7725d6cc7d2cd2d672ffa1fcadf6ecc1f72868f789eb3525ee7b2ed42be532f9ebc219019657fa33ff02b92042637dc4c18e53a32102e7d6766bf4728d49334380c4c55cf135c1934ef205e"], 0x30}}, 0xc044) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.sectors\x00', 0x0, 0x0) 35.982489654s ago: executing program 3 (id=8230): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @loopback, 0x64}, 0x72) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a9a938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x92}], 0x1}, 0x7101}], 0x1, 0x4001c00) 35.619030141s ago: executing program 3 (id=8231): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x44, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x10e, 0x0, 0x0, @fd}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d6, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) write(r2, 0x0, 0x0) 25.126159241s ago: executing program 6 (id=8232): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @private}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="140000b6ae00250e010000000000000004000080"], 0x14}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@private2, @local, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1, 0x3ff, 0x7, 0x100, 0x2, 0x2850107, r3}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0xa00}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 25.104145597s ago: executing program 0 (id=8233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0xfffffff4}, 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) 25.085447503s ago: executing program 7 (id=8234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000040800014000000009540001800a00001472656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24004804) 24.602045072s ago: executing program 3 (id=8235): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x20008050) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xa9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x2, 0xffffff84, 0x0, 0x401, 0x9, 0xaf, 0x9f0, {0x0, @in6={{0xa, 0x4e21, 0x6, @loopback, 0x8}}, 0x2, 0x8, 0x0, 0x5, 0x5}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r1, 0x1, 0x8001, 0x3, 0x4, 0x3, 0x7, 0x8, {r2, @in6={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}, 0xf8cf}}, 0x3, 0xfffffffb, 0xf, 0x400, 0x1}}, &(0x7f0000000480)=0xb0) 24.475603925s ago: executing program 0 (id=8236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x8c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffb, 0x26}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x24048800) 24.257636138s ago: executing program 7 (id=8237): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)="350ed1871726b5ad4f44da88d4e6d6b1f17217c38a3418909a508cec60ec73e2ab286245ded56fd4bb93db8cef041ac8901cf7fa0171bc6c8778368c89776f4a0bb5446d423e805f9626dfd56a936915f5b671523b633ec3be455e31904a4d4bf66fe47a151ac5d3f27e6652cade7078194ce7dcdf18081557b930dcbcd11dddb73025102dca2baef0fb96fc6ce652ec419dbf21c2f339f1565073f97d7839dffd2ab6c5165a0c19268fd0339ea230703346ddf0c71ca2112ecbb107ab6c5fe95fa98a5b8a", 0xc5}], 0x1}}], 0x1, 0x20002090) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESDEC=r1], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0x32600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), 0x0}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r3, 0x8927, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_flags=0x1000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 24.053564636s ago: executing program 3 (id=8238): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23.858164566s ago: executing program 0 (id=8239): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000008008000f0fffeffe809000000ffd9dd000000100001000c0808004149224e06040800", 0x58}], 0x1) 23.670166275s ago: executing program 6 (id=8240): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x2f, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0xd, 0x0, @opaque="6b8b836832"}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0xfffffff9, @local, 0x7ff}, 0x1c, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@rthdr={{0x78, 0x29, 0x39, {0x33, 0xc, 0x2, 0x7, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dstopts_2292={{0x1118, 0x29, 0x4, {0x84, 0x21f, '\x00', [@generic={0x8, 0x1000, "89a896b14c65e3070762ba53ae84613a88a489b4d545b3f369e7535912646acefeb7c2f29e6fee3ef443dab7fcdbdbb0208330aaccec7ff7e2dc46b702b6d00a4b4f1b9c0ddf08d587e7a6970ddb343528c5b09067d050281b89b7a95311ec6863aaeec886c1b4be936a92f2630e855c40b4b240338d57f391b0aba009761e658aa0faaff6a13787f8625db2c7f23f09531a6cb605c6f3e01824e33dfdb619a31f1628b3449d380121505b233e086a61ea06c82751917905f99867b278adef10077323f993547ffca578b07e9b2dd35e09f241510293425cff21b7b3a995352dea8ec222ba7fdb01a34c0928a6623a7399d6f3fcb7550ee3559a67cac5ef7278bd2e49a31905bf6cb9cf8d51c98158969a485a719ee31c519f7780eb7fd49921737b5e3b610551384e9e32c8b6576fe53d81a5f10e6ac3d8cead3065ccf9ad9e622dfc9ada2efac870ebd02c6a90d85c90f49d0d9834874beaf6d12d010538f6e85d1c07c6d1a19842054406d551138f52b0115a60cc85d9a8b24f32af016b9f16bd99a036000d451c1ffc234a3ab59ea73f0545e409538c9db5b41e501078a849c7429a27f162236d4253f7188cd71ba5c1dae511d6f170bbe9c326fbc1805a690e972c87370677d9c7455f4e282953e51f066d0a157760003cc23d1da3ee92e2522047709023c36f658532edc8811e0829bf5c91acf6637d02b5f0bd748b439bc1892be45231f6740a887d71e8ded4e74f5265c0346859e4feb5560ea48458b91f2b13cda7bc3c8b7a5fc0fc816f768cc81d5e4d524ba1d34784e850d4febbfaa4bd95b19ea07a4f3f7860ae7f87bc4e39d324e54de09bc98a02e89dc198610526a6e9727c3c8fada44980b16240c19b7112f24c79c40a7f965f576a3f20114615a2b0ca4e0a7a1c82694c0d8bb28c234768658db5f7f02163d7ffd91b4501edc3dc1325eddeda74434dc1fa8445a06dfa58aa6b77197dac24eca70804f43bc6938a60a6c59484db4edc2635811dc10e1c4fcab9de2b972884674ed56d8db4f4dfcefc0f419d6fc25eef892f5dac41ac4f09250d64713ce753a383e9066ca13531dc03f9c9ae17b4d825f4f927d5764964e9dabd5d572b8edcbd002a61f9e6480b49e6b93f300ed1947d5084e2038e4afb712ea71003bc5e422d095532af59054febd7dd2953efeedd6f2a4b8a489791eda074ebc082f614b70a3e4f20f844eb98dcec2aa5b9996a56dbcc69f55833aa609844cc8ecddc072d90c8544b84b33df9ac73f89db113a9b15e15aed9255d92ec06b11b8d26d9274de83545ba2914b91fe24294877e68dbf2904190b278d6f68ad07548ac38c8d046714ec7327a2dfd89021e7c0c0f5c82f12ac1f81c9446ecd8eeea2c2c9e3d372b808b27a020347fa8bd85cbc62348b725a7b2898b0b35f4fa25b30562ce3a25777c3f9aa705f609efe930167088df7f3b4abb0fc12211630f17eddaea3a6a0177ff21b57a813f84e1907011c3d531f2d43b0c2854b5df054e7853fb30a0314a93d19af47274e5e06b42e2bfcad37322e3751bd1d751b883c4ab7c84d38dd0f1a3ce2d9ed6cee4591a1884c71db6f6019d357c272ef5e0943efd9c2092fe9e981fadea70ee4d1252d67466eb89cb595766ee8d4ac4c2117c5a57fac5433f855b2d9aafeaad951f014f81b84fbb087619a0ad97b5cd77774d8c44c78f752247f2ddda2d0328137dfd9c7442f1853ce66d1ac622b107f4169f0f7b4e9740178ef2e1489500192dda5c8e88b93837a6bbc0a0778d16da2c447be70e4a3bc2b645ac8f2481cdce8df8f8d00d4aa1e43d437e723877c3df4772f0619955a830ed34036be253c004fde8a5ed6fbdb36e6f16b8dd9e34a2d33b905cd3ab494f3d5afdb55a231179b608a9bfd44b889599a06290391d00f7a0b42035ea9150473007bbc6c5665f223e7887ea5fc8a54632eb42a91798c755744c184842f5d6e21f4845d3bf9e60de21153eebdd24b6dc51a0cf32157031cd737c980dc3041b76ef45299b856f43bffa1ec8606732342419322d62ca58e53a3245270ca2c46d79d2b21d2e24dffdb8ae11630f29796e6c490f8d9dcea944225c5bbedd95e040d1bf614314fde31b6e36bb310f4c8374ec4954c04051f7f76e2577c0c76340a3465f11ce08a8d6bd483feee5635e29a2d2b92b92373cd1b53345a48383c94655f7daac0e89efc100a93e0d45fcf2801561b78c70252e2cdb6f544be9c194d79cea52aba7413869c6d4c307bb3819597610728612225d0cac9d84ebfca3e48850ea63d3c5d90d79b7a8fd97be101f1aa8c0cf0f86f6108176204450db96014da390809cedb9a8384d41d6b4d1f9d8b30799b7503b1a0eccc6b494001a8c643020e77c82ea6304b064a441595d0450a6c3e64962670d11a0411a11b2a18d0ce4b608b1e924d130f8f7bb09169f4225278b8a30c9b4ba63a1072bad8ea5a20cc69a016be7a7ad4bb91a33706eae9452fbccca9d18b9a9028a2ddf3047378b664749b72cceafeeda01e1a50445790f491b905f4fd62a6fb6408b8ac0b73b72a825b918f4011d6f1269d5dd47c3a11ff70c38db33c01a28501273079e54ad557841185678467f526ec42df59c2fa778494d10d3910e6c48b9c680a0010783a246649439c7b832a147dfda7a2a7de4cdb12e293427a6523812843d97f06f881fa974c2d8ad0313f1d863427a1d2df6c905bf0111009654cb58dddb217d6711a4a5220244f4b506953d20467dbd3ebfefd8ecc5b987df12248005a80559628e4795a0edf3ed05292d7471c37f93989c0156b12ae8f4f3933c69f74d6c07215ee237fb09aad3759c7458c37f2841ec7a83c6c2a3eba13a1abd1d7c868db0097c71996d72bc10c7b43e18454a27fdf9a89fbe9b6b62ea59317a46c03b14eb2b511cd3b69562126c044f4fb3f83a9c23c665ec16920327829fec19578c313906a1370038def83c77d4180b6b81a9c2cf64f9d8ec2e61aa3987d0496633536c5cf70ab8ed946fe46016141e770fc08ee76be1cbe9364e6459f06e72fc13201fad01ad14072603e1363042fa122d7ba4366c7aa0bed67a651e28421eb4d397c506ef8aa0a1a953bda7d88d341eb19e2938a02afe1b3275cb06d863a2e9bdcb69bae2a37728d7298d4db91f9d37ada59c1772ad623d60bc0373fb39afea9108cf6f2f9d4ff941ab84e1ad3b75b7392420d91b37953e94c1fb0e8fab401f7814285b79deb3e7aa1f6e8c9d1f6d8221c8e70d0dcc185c53bc1f78d4c6df59605cda9f86b48474a41d4c0f2a61723e7b442a8a6d76435f40c52cc62668f056dea6c842c5d32c8617fdebcf2feaa5348bfd9fe79bf333cd037b10f620d7a3394bb1f1fa5bcb4122a45a305a2862d12b0b3798e66c4026484ce3460fd0cc54aa02cf77ca59130785022b4f82c903d847da5ae3c0cdf9ba4ce259c4fc5e80556d1acbd0518be5bcb8144ec0e47097064ba96fc76d7f38d8b0753b6129ef9154b5beb3a5addae78f9255f92dfda81f437d64e7484d8893d2a15dffd0e085cba4dacf9e1424371b2224150ebf1664d49df165af36c538345c500a4142d9ac051950d8b68b317dc0599783897701a4cdcb869d3652e74b51cb79a031ff81b11e2415877a2a7555a26c055040c148a54937a2d9f3f576a0dc66af5c9810df4b9459c0aa8366896ca5724d0a133bc83b7f2b707e209243c58c95cf71b938068c4d672cc13b071c593460a5891443c534391dee6149aa9a9a1967ac848eb461d56f220d3ff663ea0240f6bbab5e4f4a5e20804de49ff23d2f45299a882aaeee6ee35b6579136184f8cd3298441fd199146aebd616dd9b354b64d1eb1abf8847b5bafd399e16ccbe7837266c205a9c783e0d0963754d9a118fa6d0c6e0ba531e6b1b1c569d84944afb9c9bf9a43f3500227fded15673d4819fd7daf89f7a2ce858828871892bb62550d9d606a4c8e81a67e124caee02ee2b5c7bdc8b0d4e904f6547b6885106f1348bc27aa2a32e7eb8a14e56d2ba24919d23b7e0ccc153b3bc825534c9aba9632414efd5a75ae17abe1bc04c92e4cb5c81c001e4070e0522cb737c9ea484a77b0b2279733fefe045d625facf88f4a94914e87190b361a88c178c13937d4a3ce8314f1f8d0bcad09edfc347ad9e526a80d061459f3780d72576b24e765ff3ade1b7105ccc419873f9ddd91417e66319fafc772b9a35135515f170b7a4378808d8f6008c8675464a19b0a986e6087037fc39fe9e80725066696d4593b80b32ec17f324972cd3f2303c1c214463f7b180456243b5e97e53693b948178edf99d27c55f665c8fee475f5f9d7f5fce32e05098355e28894c4206f2d8acbb96e37e94afc913ec0e31853b4b386fa8c41b6f9a5479c85e64d7a1730e048445292570cf49c8b946dcf5da8169189120469978e16e9b597140e0e99cbb26c43411244970fdda41199967908606c6983f023bdbd78ec75cedf21471ee61f7f5491057021e1e9eb75476e1f423f13261c3b66c7140b3880db5ceeaa4daafe9741c085822b8f3ed76d393a94bbc9f61f5debef57f85f0a744a62c3dfad079862a4040d9216a355330d8d0244a571b4a2b8da5068033a2721068390a04faabee1fcc9425ffd321ff79f55a2bd1a0b1c78dc5e09caa242a47394e31b4fda01faaff7ca9dc0a12053d2f764e2e9d24024fff6d4e04d6395c11c43848a9aecfa714577c986d49ad0e116d8495aaa6de7f30e6b51e0b3018a53e70e3b2efebd859b7548cff619f04e5501664570917d7743184621780994551e89f933e7b700769c29b1a91cfc52f07bf743077e4a9d2b62208e8ffff27389c5a561da5a6b621d56b0e4fc75441cc0b1a89d6909642f0a702464b1ccb7b94bc425698213834a7df7387958c6215d465c778e35d28cc1e99cbaac0afec237f39b4ee5adaa1af6d8713dd9383439cfa911320b7e61b1d40a79f81fac834826b7f1dc5c18b32cdd66ea75dbe0af0426864f1919d7403dba2da6f36cd6ae69080a48245192cda02f61663160324d4498cdc3ba3058fc928f67df8bf16630cf5050f7c68caac6284b3157207a3a4d60cae2f5d9e4aae8ef4c780519b3e8509a445e60dafedf7e6110f4bc5c49ec151f8470cc9d69cb7a52028f57bfbb783b0e2e466280600e2aa72526bf6a9715cb4a75fa4b7452f8285dbd0a4e9216a4c72205e6566e8fe7dbaea9baa63dd9ecb7d94d601af46644f2be102594414d26a37ef9646d478eeae320950f42b476f718d9bc45c7588328efcb99ec07194ce2f05448470be38b8c347c587455effbbe5f85d215a7bce88c16b27b5341f52e0cf5e1a2bc2ee0013cb580a7f379ce99251cb53a10a37713ba27f55bf08d06b142b7c31f5f171a7608818de8b8c4e8b3e258c9e836d1a55d8c37796a2580c42d5f9a3593a3420e2cf438a99a27da838ffef84772a59405439eff6b9a0fd40ffadaa240aaf213fc5d855b289a0b6a01d2f6385ddc6455f020918c886c2d7d88aa43a6b76228e45180751b4453fd2f4f8a5938ec3e721969f542f80ce74a26a63f77533ed047169ef8dd9305582e4fc66bad7961f2e6fd2ea7da923986acc9018fcaafc9539157193f9543a043bb9add013340a3cd4e65d39d0f7c5097e81788e5eef0ad2ecadfc08c7adfe0323615c8b259ef4354b43e5efb09c6c197ca94e46febb0c30f97bb098742e788cfd21426f1a34112b26464bc491a90e48b1817de7055dcd5f0fe360cf9373d72735329065f876405096bc6955058954377856370e3b2b490cd8375b75"}, @generic={0x43, 0xc5, "18969eeb4d54d8c8eb61cb4041fea3013471eff6481e01e06bbdcc28475bff0a9eec8c6ea1b3dd3adb3055630fec6d8816f30581488a792fe41abf9d26eedcaf7884f8525d324ba8d079abc337920a5bb28894d2648a604bb6b333e4e6aa0e07ce81e21d620fb39d1bcdf7d6d47f3aecc37cdb063c1fbfe264ba33e42f902fd94da243a103eb0e4a9e7462f9b7b56454c417eea2fdec5d1b7b691875742ae9ea13976a77a4f22c8a4c89cea70c83c6d897be539ab12ce46c6a8708c4df87ed127c4fe332a8"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra, @calipso={0x7, 0x8, {0x2, 0x0, 0x3, 0x4}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xe, "1289f9a43cbc6922a44c34941248"}]}}}], 0x1190}}], 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000440)={0x1, 0x1, 0x9, 0x0, 0x8}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r6, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r7, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000013c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x28, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x21}}}}}, 0x28}}, 0x880) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xb, 0xc, 0xffff, 0xffff7fff, 0x8, 0x1, 0xd, 0x4000006}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'wg2\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x1622, {{0x15, 0x4, 0x1, 0x10, 0x54, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @generic={0x86, 0x2}, @timestamp_prespec={0x44, 0xc, 0xbf, 0x3, 0x2, [{@local, 0x8}]}, @noop, @ssrr={0x89, 0x2b, 0xad, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @loopback, @local, @loopback, @local]}]}}}}}) sendmsg$IPSET_CMD_SWAP(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xd1}, 0x20000000) 0s ago: executing program 36 (id=8239): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000008008000f0fffeffe809000000ffd9dd000000100001000c0808004149224e06040800", 0x58}], 0x1) kernel console output (not intermixed with test programs): 59 [ 1587.481398][T27428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.481417][T27428] RSP: 002b:00007f6a7de41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1587.481443][T27428] RAX: ffffffffffffffda RBX: 00007f6a7d225fa0 RCX: 00007f6a7cf9e159 [ 1587.481459][T27428] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 1587.481474][T27428] RBP: 00007f6a7de41090 R08: 0000000000000008 R09: 0000000000000000 [ 1587.481488][T27428] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1587.481512][T27428] R13: 00007f6a7d226038 R14: 00007f6a7d225fa0 R15: 00007ffedc95e0b8 [ 1587.481552][T27428] [ 1588.084682][ T7854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.344844][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.345000][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.666022][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.040370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.152899][T27474] FAULT_INJECTION: forcing a failure. [ 1591.152899][T27474] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.152961][T27474] CPU: 1 UID: 0 PID: 27474 Comm: syz.7.7826 Not tainted syzkaller #0 PREEMPT(full) [ 1591.152987][T27474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1591.153000][T27474] Call Trace: [ 1591.153009][T27474] [ 1591.153018][T27474] dump_stack_lvl+0xe8/0x150 [ 1591.153056][T27474] should_fail_ex+0x410/0x560 [ 1591.153093][T27474] ? __alloc_skb+0x1db/0x7a0 [ 1591.153125][T27474] should_failslab+0xa8/0x100 [ 1591.153154][T27474] ? __alloc_skb+0x1db/0x7a0 [ 1591.153182][T27474] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1591.153217][T27474] ? __alloc_skb+0x1db/0x7a0 [ 1591.153255][T27474] __alloc_skb+0x1db/0x7a0 [ 1591.153292][T27474] tcp_stream_alloc_skb+0x3f/0x580 [ 1591.153436][T27474] tcp_sendmsg_locked+0x14a9/0x5640 [ 1591.153487][T27474] ? __lock_acquire+0x6df/0x2e50 [ 1591.153544][T27474] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1591.153583][T27474] ? tcp_sendmsg+0x21/0x50 [ 1591.153620][T27474] ? __local_bh_enable_ip+0xd6/0x140 [ 1591.153655][T27474] tcp_sendmsg+0x2f/0x50 [ 1591.153685][T27474] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1591.153761][T27474] sock_sendmsg_nosec+0x90/0x180 [ 1591.153793][T27474] ____sys_sendmsg+0x54e/0x850 [ 1591.153823][T27474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1591.153855][T27474] ? import_iovec+0x73/0xa0 [ 1591.153883][T27474] ___sys_sendmsg+0x2a5/0x360 [ 1591.153904][T27474] ? __lock_acquire+0x6df/0x2e50 [ 1591.153930][T27474] ? __pfx____sys_sendmsg+0x10/0x10 [ 1591.153960][T27474] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1591.154042][T27474] ? __fget_files+0x2a/0x420 [ 1591.154070][T27474] ? __fget_files+0x3a2/0x420 [ 1591.154109][T27474] __sys_sendmmsg+0x273/0x4d0 [ 1591.154140][T27474] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1591.154175][T27474] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1591.154227][T27474] ? rcu_is_watching+0x16/0xb0 [ 1591.154262][T27474] __x64_sys_sendmmsg+0xa0/0xc0 [ 1591.154288][T27474] do_syscall_64+0x166/0x520 [ 1591.154318][T27474] ? trace_irq_disable+0x3b/0x140 [ 1591.154339][T27474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.154370][T27474] ? clear_bhb_loop+0x70/0xc0 [ 1591.154397][T27474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.154419][T27474] RIP: 0033:0x7f6b9b99e159 [ 1591.154441][T27474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.154460][T27474] RSP: 002b:00007f6b9c843028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1591.154484][T27474] RAX: ffffffffffffffda RBX: 00007f6b9bc25fa0 RCX: 00007f6b9b99e159 [ 1591.154501][T27474] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1591.154515][T27474] RBP: 00007f6b9c843090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.154529][T27474] R10: 0000000004000801 R11: 0000000000000246 R12: 0000000000000001 [ 1591.154543][T27474] R13: 00007f6b9bc26038 R14: 00007f6b9bc25fa0 R15: 00007ffd668d9e38 [ 1591.154579][T27474] [ 1592.293115][T27473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7825'. [ 1593.390174][T27495] FAULT_INJECTION: forcing a failure. [ 1593.390174][T27495] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.390232][T27495] CPU: 1 UID: 0 PID: 27495 Comm: syz.7.7828 Not tainted syzkaller #0 PREEMPT(full) [ 1593.390258][T27495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1593.390271][T27495] Call Trace: [ 1593.390280][T27495] [ 1593.390289][T27495] dump_stack_lvl+0xe8/0x150 [ 1593.390327][T27495] should_fail_ex+0x410/0x560 [ 1593.390364][T27495] ? __alloc_skb+0x1db/0x7a0 [ 1593.390394][T27495] should_failslab+0xa8/0x100 [ 1593.390421][T27495] ? __alloc_skb+0x1db/0x7a0 [ 1593.390448][T27495] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1593.390479][T27495] ? __alloc_skb+0x18d/0x7a0 [ 1593.390509][T27495] ? __alloc_skb+0x1db/0x7a0 [ 1593.390552][T27495] __alloc_skb+0x1db/0x7a0 [ 1593.390587][T27495] netlink_sendmsg+0x5d4/0xb40 [ 1593.390625][T27495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.390659][T27495] ? apparmor_socket_sendmsg+0x98/0x360 [ 1593.390696][T27495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.390721][T27495] sock_sendmsg_nosec+0x13a/0x180 [ 1593.390753][T27495] ____sys_sendmsg+0x54e/0x850 [ 1593.390784][T27495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1593.390816][T27495] ? import_iovec+0x73/0xa0 [ 1593.390844][T27495] ___sys_sendmsg+0x2a5/0x360 [ 1593.390866][T27495] ? __lock_acquire+0x6df/0x2e50 [ 1593.390893][T27495] ? __pfx____sys_sendmsg+0x10/0x10 [ 1593.390962][T27495] ? __fget_files+0x2a/0x420 [ 1593.390990][T27495] ? __fget_files+0x3a2/0x420 [ 1593.391028][T27495] __x64_sys_sendmsg+0x1b1/0x290 [ 1593.391055][T27495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1593.391101][T27495] do_syscall_64+0x166/0x520 [ 1593.391131][T27495] ? trace_irq_disable+0x3b/0x140 [ 1593.391153][T27495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.391175][T27495] ? clear_bhb_loop+0x70/0xc0 [ 1593.391202][T27495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.391224][T27495] RIP: 0033:0x7f6b9b99e159 [ 1593.391245][T27495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.391263][T27495] RSP: 002b:00007f6b9c822028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1593.391287][T27495] RAX: ffffffffffffffda RBX: 00007f6b9bc26090 RCX: 00007f6b9b99e159 [ 1593.391303][T27495] RDX: 000000000000c080 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1593.391317][T27495] RBP: 00007f6b9c822090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.391331][T27495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.391344][T27495] R13: 00007f6b9bc26128 R14: 00007f6b9bc26090 R15: 00007ffd668d9e38 [ 1593.391378][T27495] [ 1593.565566][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.294041][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1594.408533][ T7854] bridge_slave_1: left allmulticast mode [ 1594.408582][ T7854] bridge_slave_1: left promiscuous mode [ 1594.408837][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.464295][ T7854] bridge_slave_0: left allmulticast mode [ 1594.476801][ T7854] bridge_slave_0: left promiscuous mode [ 1594.477082][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.538775][ T7854] lo: left allmulticast mode [ 1595.890037][ T7854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.937353][ T7854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.965196][ T7854] bond0 (unregistering): Released all slaves [ 1596.239105][T27510] syzkaller1: entered promiscuous mode [ 1596.239150][T27510] syzkaller1: entered allmulticast mode [ 1596.284620][T27515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7832'. [ 1596.859698][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.673252][T27512] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1597.707159][T27512] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1598.615105][T27512] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1598.625813][T27512] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1598.765405][T27512] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1598.765452][T27512] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1599.163183][T27543] FAULT_INJECTION: forcing a failure. [ 1599.163183][T27543] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.163239][T27543] CPU: 1 UID: 0 PID: 27543 Comm: syz.7.7839 Not tainted syzkaller #0 PREEMPT(full) [ 1599.163263][T27543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1599.163276][T27543] Call Trace: [ 1599.163286][T27543] [ 1599.163295][T27543] dump_stack_lvl+0xe8/0x150 [ 1599.163331][T27543] should_fail_ex+0x410/0x560 [ 1599.163367][T27543] ? __alloc_skb+0x1db/0x7a0 [ 1599.163399][T27543] should_failslab+0xa8/0x100 [ 1599.163425][T27543] ? __alloc_skb+0x1db/0x7a0 [ 1599.163453][T27543] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1599.163484][T27543] ? __alloc_skb+0x18d/0x7a0 [ 1599.163515][T27543] ? __alloc_skb+0x1db/0x7a0 [ 1599.163552][T27543] __alloc_skb+0x1db/0x7a0 [ 1599.163588][T27543] netlink_sendmsg+0x5d4/0xb40 [ 1599.163625][T27543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1599.163659][T27543] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1599.163693][T27543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1599.163718][T27543] sock_sendmsg_nosec+0x13a/0x180 [ 1599.163749][T27543] ____sys_sendmsg+0x54e/0x850 [ 1599.163778][T27543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1599.163810][T27543] ? import_iovec+0x73/0xa0 [ 1599.163842][T27543] ___sys_sendmsg+0x2a5/0x360 [ 1599.163864][T27543] ? __lock_acquire+0x6df/0x2e50 [ 1599.163891][T27543] ? __pfx____sys_sendmsg+0x10/0x10 [ 1599.163951][T27543] ? __fget_files+0x2a/0x420 [ 1599.163989][T27543] ? __fget_files+0x3a2/0x420 [ 1599.164027][T27543] __x64_sys_sendmsg+0x1b1/0x290 [ 1599.164053][T27543] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1599.164099][T27543] do_syscall_64+0x166/0x520 [ 1599.164129][T27543] ? trace_irq_disable+0x3b/0x140 [ 1599.164149][T27543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.164172][T27543] ? clear_bhb_loop+0x70/0xc0 [ 1599.164198][T27543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.164219][T27543] RIP: 0033:0x7f6b9b99e159 [ 1599.164239][T27543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.164258][T27543] RSP: 002b:00007f6b9c843028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1599.164282][T27543] RAX: ffffffffffffffda RBX: 00007f6b9bc25fa0 RCX: 00007f6b9b99e159 [ 1599.164298][T27543] RDX: 00000000200000c0 RSI: 0000200000000700 RDI: 0000000000000003 [ 1599.164312][T27543] RBP: 00007f6b9c843090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.164326][T27543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.164339][T27543] R13: 00007f6b9bc26038 R14: 00007f6b9bc25fa0 R15: 00007ffd668d9e38 [ 1599.164373][T27543] [ 1599.936477][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.372642][T27512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1600.372691][T27512] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1600.472274][T27108] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1600.544320][T27108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1600.579521][T27108] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1600.700754][T27108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1600.731899][T27108] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1600.824473][T27108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1600.860005][T27108] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1600.951238][T27108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1601.539721][T27020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.586509][T27562] xt_REDIRECT: bad MAP_IPS. [ 1602.338016][ T7854] hsr_slave_0: left promiscuous mode [ 1602.368871][ T7854] hsr_slave_1: left promiscuous mode [ 1602.387364][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.395356][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.423468][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.436301][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.580994][ T7854] veth1_macvtap: left promiscuous mode [ 1602.596208][ T7854] veth0_macvtap: left promiscuous mode [ 1602.603794][ T7854] veth1_vlan: left promiscuous mode [ 1602.611091][ T7854] veth0_vlan: left promiscuous mode [ 1603.092084][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.154743][T27588] netlink: 516 bytes leftover after parsing attributes in process `syz.0.7845'. [ 1603.362556][T27590] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1604.568465][ T7854] team0 (unregistering): Port device team_slave_1 removed [ 1604.720181][ T7854] team0 (unregistering): Port device team_slave_0 removed [ 1605.282572][T23443] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1605.297501][T23443] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1605.326666][T23443] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1605.338159][T23443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1605.347459][T23443] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1605.416214][T25689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1605.432165][T25689] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1605.447539][T25689] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1605.460109][T25689] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1605.468050][T25689] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1605.752784][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1606.252068][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.441627][T27108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.519677][T25689] Bluetooth: hci3: command tx timeout [ 1607.773225][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.773313][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.801307][T27108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.027061][T22537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.027204][T22537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1608.105703][ T260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.105854][ T260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1608.874818][T27630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7851'. [ 1609.322437][T27630] veth0_macvtap: left promiscuous mode [ 1609.331141][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.599722][T25689] Bluetooth: hci3: command tx timeout [ 1610.897686][T27642] syzkaller1: entered promiscuous mode [ 1611.002161][T27654] FAULT_INJECTION: forcing a failure. [ 1611.002161][T27654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1611.017937][T27654] CPU: 1 UID: 0 PID: 27654 Comm: syz.0.7853 Not tainted syzkaller #0 PREEMPT(full) [ 1611.017971][T27654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1611.017984][T27654] Call Trace: [ 1611.017994][T27654] [ 1611.018005][T27654] dump_stack_lvl+0xe8/0x150 [ 1611.018043][T27654] should_fail_ex+0x410/0x560 [ 1611.018081][T27654] _copy_from_user+0x2d/0xb0 [ 1611.018106][T27654] ____sys_sendmsg+0x303/0x850 [ 1611.018137][T27654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1611.018170][T27654] ? import_iovec+0x73/0xa0 [ 1611.018197][T27654] ___sys_sendmsg+0x2a5/0x360 [ 1611.018217][T27654] ? __lock_acquire+0x6df/0x2e50 [ 1611.018254][T27654] ? __pfx____sys_sendmsg+0x10/0x10 [ 1611.018314][T27654] ? __fget_files+0x2a/0x420 [ 1611.018341][T27654] ? __fget_files+0x3a2/0x420 [ 1611.018379][T27654] __x64_sys_sendmsg+0x1b1/0x290 [ 1611.018405][T27654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1611.018452][T27654] do_syscall_64+0x166/0x520 [ 1611.018482][T27654] ? trace_irq_disable+0x3b/0x140 [ 1611.018507][T27654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.018530][T27654] ? clear_bhb_loop+0x70/0xc0 [ 1611.018555][T27654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.018577][T27654] RIP: 0033:0x7ff1c859e159 [ 1611.018598][T27654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.018616][T27654] RSP: 002b:00007ff1c954e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1611.018640][T27654] RAX: ffffffffffffffda RBX: 00007ff1c8825fa0 RCX: 00007ff1c859e159 [ 1611.018657][T27654] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1611.018671][T27654] RBP: 00007ff1c954e090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.018685][T27654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1611.018697][T27654] R13: 00007ff1c8826038 R14: 00007ff1c8825fa0 R15: 00007ffd5b0868e8 [ 1611.018731][T27654] [ 1611.679624][T25689] Bluetooth: hci3: command tx timeout [ 1612.451715][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.570073][T27669] netlink: 'syz.7.7857': attribute type 10 has an invalid length. [ 1613.093646][T27669] team0: Port device veth0_macvtap added [ 1613.361982][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1613.715917][T27685] syzkaller1: entered promiscuous mode [ 1613.715972][T27685] syzkaller1: entered allmulticast mode [ 1613.759664][T25689] Bluetooth: hci3: command tx timeout [ 1614.156851][T27692] FAULT_INJECTION: forcing a failure. [ 1614.156851][T27692] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.177237][T27692] CPU: 1 UID: 0 PID: 27692 Comm: syz.3.7861 Not tainted syzkaller #0 PREEMPT(full) [ 1614.177267][T27692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1614.177280][T27692] Call Trace: [ 1614.177289][T27692] [ 1614.177299][T27692] dump_stack_lvl+0xe8/0x150 [ 1614.177346][T27692] should_fail_ex+0x410/0x560 [ 1614.177385][T27692] should_failslab+0xa8/0x100 [ 1614.177412][T27692] __kvmalloc_node_noprof+0x176/0x820 [ 1614.177433][T27692] ? do_ipt_set_ctl+0x962/0xe20 [ 1614.177465][T27692] ? do_sock_setsockopt+0x17c/0x1b0 [ 1614.177485][T27692] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1614.177504][T27692] ? do_syscall_64+0x166/0x520 [ 1614.177534][T27692] ? translate_table+0x193/0x1f80 [ 1614.177563][T27692] ? translate_table+0x193/0x1f80 [ 1614.177597][T27692] translate_table+0x193/0x1f80 [ 1614.177647][T27692] ? __pfx_translate_table+0x10/0x10 [ 1614.177677][T27692] ? lock_acquire+0x115/0x350 [ 1614.177722][T27692] ? _copy_from_user+0x94/0xb0 [ 1614.177751][T27692] do_ipt_set_ctl+0xa53/0xe20 [ 1614.177791][T27692] ? rcu_is_watching+0x16/0xb0 [ 1614.177816][T27692] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1614.177864][T27692] ? __mutex_unlock_slowpath+0x731/0x900 [ 1614.177903][T27692] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1614.177948][T27692] nf_setsockopt+0x26f/0x290 [ 1614.177974][T27692] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1614.178006][T27692] do_sock_setsockopt+0x17c/0x1b0 [ 1614.178037][T27692] __x64_sys_setsockopt+0x13d/0x1b0 [ 1614.178065][T27692] do_syscall_64+0x166/0x520 [ 1614.178094][T27692] ? trace_irq_disable+0x3b/0x140 [ 1614.178115][T27692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.178138][T27692] ? clear_bhb_loop+0x70/0xc0 [ 1614.178165][T27692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.178186][T27692] RIP: 0033:0x7f6a7cf9e159 [ 1614.178208][T27692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.178227][T27692] RSP: 002b:00007f6a7de41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1614.178252][T27692] RAX: ffffffffffffffda RBX: 00007f6a7d225fa0 RCX: 00007f6a7cf9e159 [ 1614.178268][T27692] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1614.178282][T27692] RBP: 00007f6a7de41090 R08: 00000000000004c0 R09: 0000000000000000 [ 1614.178296][T27692] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 1614.178318][T27692] R13: 00007f6a7d226038 R14: 00007f6a7d225fa0 R15: 00007ffedc95e0b8 [ 1614.178354][T27692] [ 1615.528557][T27713] netlink: 'syz.3.7862': attribute type 13 has an invalid length. [ 1615.551182][T27717] netlink: 'syz.3.7862': attribute type 13 has an invalid length. [ 1615.613770][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.737789][T27713] gretap0: refused to change device tx_queue_len [ 1616.738247][T27713] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1616.797767][T27717] gretap0: refused to change device tx_queue_len [ 1616.798222][T27717] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1617.322220][T23443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1617.352293][T23443] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1617.367111][T23443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1617.389747][T23443] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1617.401234][T23443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1618.258951][T27741] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7866'. [ 1618.559631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.559864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.560055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.560225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.560396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.560563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.560729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.602409][T25689] Bluetooth: hci0: command tx timeout [ 1620.617657][T27767] ieee802154 phy0 wpan0: encryption failed: -22 [ 1620.831597][T27772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7871'. [ 1620.992390][ T5724] net_ratelimit: 2 callbacks suppressed [ 1620.992483][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.703780][T25689] Bluetooth: hci0: command tx timeout [ 1623.425129][T27804] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7878'. [ 1623.679675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.762091][T25689] Bluetooth: hci0: command tx timeout [ 1624.032506][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.314854][ T7854] bridge_slave_1: left allmulticast mode [ 1624.314905][ T7854] bridge_slave_1: left promiscuous mode [ 1624.315176][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.348256][ T7854] bridge_slave_0: left allmulticast mode [ 1624.355847][ T7854] bridge_slave_0: left promiscuous mode [ 1624.363841][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.382722][T27816] FAULT_INJECTION: forcing a failure. [ 1624.382722][T27816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1624.396575][T27816] CPU: 1 UID: 0 PID: 27816 Comm: syz.3.7881 Not tainted syzkaller #0 PREEMPT(full) [ 1624.396606][T27816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1624.396619][T27816] Call Trace: [ 1624.396628][T27816] [ 1624.396637][T27816] dump_stack_lvl+0xe8/0x150 [ 1624.396675][T27816] should_fail_ex+0x410/0x560 [ 1624.396714][T27816] _copy_from_iter+0x1d3/0x1660 [ 1624.396745][T27816] ? __alloc_skb+0x27a/0x7a0 [ 1624.396779][T27816] ? __alloc_skb+0x27a/0x7a0 [ 1624.396811][T27816] ? __alloc_skb+0x27a/0x7a0 [ 1624.396842][T27816] ? __pfx__copy_from_iter+0x10/0x10 [ 1624.396871][T27816] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1624.396901][T27816] ? __alloc_skb+0x27a/0x7a0 [ 1624.396929][T27816] ? __alloc_skb+0x27a/0x7a0 [ 1624.396965][T27816] ? netlink_sendmsg+0x650/0xb40 [ 1624.396991][T27816] ? skb_put+0x112/0x210 [ 1624.397013][T27816] netlink_sendmsg+0x6c0/0xb40 [ 1624.397050][T27816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1624.397084][T27816] ? apparmor_socket_sendmsg+0x98/0x360 [ 1624.397120][T27816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1624.397144][T27816] sock_sendmsg_nosec+0x13a/0x180 [ 1624.397176][T27816] ____sys_sendmsg+0x54e/0x850 [ 1624.397206][T27816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1624.397239][T27816] ? import_iovec+0x73/0xa0 [ 1624.397266][T27816] ___sys_sendmsg+0x2a5/0x360 [ 1624.397288][T27816] ? __lock_acquire+0x6df/0x2e50 [ 1624.397315][T27816] ? __pfx____sys_sendmsg+0x10/0x10 [ 1624.397343][T27816] ? kstrtouint+0x6e/0xe0 [ 1624.397398][T27816] ? __fget_files+0x2a/0x420 [ 1624.397424][T27816] ? __fget_files+0x3a2/0x420 [ 1624.397462][T27816] __sys_sendmmsg+0x273/0x4d0 [ 1624.397504][T27816] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1624.397537][T27816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1624.397584][T27816] ? ksys_write+0x242/0x270 [ 1624.397619][T27816] ? __pfx_ksys_write+0x10/0x10 [ 1624.397655][T27816] __x64_sys_sendmmsg+0xa0/0xc0 [ 1624.397681][T27816] do_syscall_64+0x166/0x520 [ 1624.397710][T27816] ? trace_irq_disable+0x3b/0x140 [ 1624.397731][T27816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.397753][T27816] ? clear_bhb_loop+0x70/0xc0 [ 1624.397779][T27816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.397801][T27816] RIP: 0033:0x7f6a7cf9e159 [ 1624.397823][T27816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.397841][T27816] RSP: 002b:00007f6a7de20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1624.397866][T27816] RAX: ffffffffffffffda RBX: 00007f6a7d226090 RCX: 00007f6a7cf9e159 [ 1624.397881][T27816] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1624.397897][T27816] RBP: 00007f6a7de20090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.397910][T27816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.397923][T27816] R13: 00007f6a7d226128 R14: 00007f6a7d226090 R15: 00007ffedc95e0b8 [ 1624.397957][T27816] [ 1624.873795][T27817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1625.839816][T23443] Bluetooth: hci0: command tx timeout [ 1626.227726][ T7854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.314072][ T7854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1626.355864][ T7854] bond0 (unregistering): Released all slaves [ 1626.835430][T27604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.846770][T27604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.855131][T27604] bridge_slave_0: entered allmulticast mode [ 1626.874313][T27604] bridge_slave_0: entered promiscuous mode [ 1627.062602][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.190214][T27604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.190359][T27604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.190574][T27604] bridge_slave_1: entered allmulticast mode [ 1627.235735][T27604] bridge_slave_1: entered promiscuous mode [ 1627.459012][ T7854] hsr_slave_0: left promiscuous mode [ 1627.477038][ T7854] hsr_slave_1: left promiscuous mode [ 1627.478208][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1627.498622][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.180549][ T7854] team0 (unregistering): Port device team_slave_1 removed [ 1629.264644][ T7854] team0 (unregistering): Port device team_slave_0 removed [ 1630.116309][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.504666][T27604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.600261][T27604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.106008][T27604] team0: Port device team_slave_0 added [ 1631.142016][T27604] team0: Port device team_slave_1 added [ 1631.495666][T27604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.495723][T27604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.495769][T27604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.579149][T27604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.579685][T27604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.579734][T27604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.493117][T27604] hsr_slave_0: entered promiscuous mode [ 1632.548337][T27604] hsr_slave_1: entered promiscuous mode [ 1632.559874][T27604] debugfs: 'hsr0' already exists in 'hsr' [ 1632.565926][T27604] Cannot create hsr debugfs directory [ 1633.952895][T19994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.333197][T27908] netlink: 'syz.7.7905': attribute type 1 has an invalid length. [ 1635.745605][T27931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7908'. [ 1636.271029][T27731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.283052][T27731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.295083][T27731] bridge_slave_0: entered allmulticast mode [ 1636.305113][T27731] bridge_slave_0: entered promiscuous mode [ 1636.321098][T27731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.330513][T27731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.337863][T27731] bridge_slave_1: entered allmulticast mode [ 1636.349872][T27731] bridge_slave_1: entered promiscuous mode [ 1636.398305][T27731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1636.412075][T27731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1636.829861][T27731] team0: Port device team_slave_0 added [ 1636.840402][T27731] team0: Port device team_slave_1 added [ 1637.035002][T27908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1637.055871][T27928] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7907'. [ 1637.063822][T19994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.806682][T27731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.806720][T27731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.806767][T27731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.874109][T27731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.882932][T27731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.882970][T27731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.902311][T27952] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1638.971162][T27731] hsr_slave_0: entered promiscuous mode [ 1638.997042][T27731] hsr_slave_1: entered promiscuous mode [ 1639.009719][T27731] debugfs: 'hsr0' already exists in 'hsr' [ 1639.036752][T27731] Cannot create hsr debugfs directory [ 1640.121251][T19994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.384801][T27965] openvswitch: netlink: IP tunnel dst address not specified [ 1640.485817][T27962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7917'. [ 1640.615521][ T7854] bridge_slave_1: left allmulticast mode [ 1640.615571][ T7854] bridge_slave_1: left promiscuous mode [ 1640.615837][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.667106][ T7854] bridge_slave_0: left allmulticast mode [ 1640.667156][ T7854] bridge_slave_0: left promiscuous mode [ 1640.667414][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.031222][ T7854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.056393][ T7854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.074239][ T7854] bond0 (unregistering): Released all slaves [ 1642.189121][T27971] FAULT_INJECTION: forcing a failure. [ 1642.189121][T27971] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.203598][T27971] CPU: 1 UID: 0 PID: 27971 Comm: syz.3.7921 Not tainted syzkaller #0 PREEMPT(full) [ 1642.203630][T27971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1642.203643][T27971] Call Trace: [ 1642.203652][T27971] [ 1642.203672][T27971] dump_stack_lvl+0xe8/0x150 [ 1642.203711][T27971] should_fail_ex+0x410/0x560 [ 1642.203747][T27971] ? __alloc_skb+0x1db/0x7a0 [ 1642.203778][T27971] should_failslab+0xa8/0x100 [ 1642.203805][T27971] ? __alloc_skb+0x1db/0x7a0 [ 1642.203833][T27971] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1642.203864][T27971] ? __alloc_skb+0x18d/0x7a0 [ 1642.203900][T27971] ? __alloc_skb+0x1db/0x7a0 [ 1642.203937][T27971] __alloc_skb+0x1db/0x7a0 [ 1642.203972][T27971] netlink_ack+0x136/0xb30 [ 1642.204005][T27971] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1642.204037][T27971] ? __pfx_nl802154_post_doit+0x10/0x10 [ 1642.204156][T27971] netlink_rcv_skb+0x2a4/0x4a0 [ 1642.204184][T27971] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1642.204217][T27971] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1642.204260][T27971] ? down_read+0x2be/0x330 [ 1642.204287][T27971] genl_rcv+0x28/0x40 [ 1642.204316][T27971] netlink_unicast+0x7bd/0x940 [ 1642.204377][T27971] netlink_sendmsg+0x813/0xb40 [ 1642.204414][T27971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1642.204450][T27971] ? apparmor_socket_sendmsg+0x98/0x360 [ 1642.204485][T27971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1642.204508][T27971] sock_sendmsg_nosec+0x13a/0x180 [ 1642.204540][T27971] ____sys_sendmsg+0x54e/0x850 [ 1642.204570][T27971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1642.204605][T27971] ? import_iovec+0x73/0xa0 [ 1642.204633][T27971] ___sys_sendmsg+0x2a5/0x360 [ 1642.204655][T27971] ? __lock_acquire+0x6df/0x2e50 [ 1642.204683][T27971] ? __pfx____sys_sendmsg+0x10/0x10 [ 1642.204747][T27971] ? __fget_files+0x2a/0x420 [ 1642.204774][T27971] ? __fget_files+0x3a2/0x420 [ 1642.204813][T27971] __x64_sys_sendmsg+0x1b1/0x290 [ 1642.204849][T27971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1642.204897][T27971] do_syscall_64+0x166/0x520 [ 1642.204927][T27971] ? trace_irq_disable+0x3b/0x140 [ 1642.204946][T27971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.204968][T27971] ? clear_bhb_loop+0x70/0xc0 [ 1642.205003][T27971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.205025][T27971] RIP: 0033:0x7f6a7cf9e159 [ 1642.205047][T27971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1642.205065][T27971] RSP: 002b:00007f6a7de41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1642.205090][T27971] RAX: ffffffffffffffda RBX: 00007f6a7d225fa0 RCX: 00007f6a7cf9e159 [ 1642.205106][T27971] RDX: 0000000000000040 RSI: 0000200000000d80 RDI: 0000000000000004 [ 1642.205120][T27971] RBP: 00007f6a7de41090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.205134][T27971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.205147][T27971] R13: 00007f6a7d226038 R14: 00007f6a7d225fa0 R15: 00007ffedc95e0b8 [ 1642.205182][T27971] [ 1643.162200][T27983] FAULT_INJECTION: forcing a failure. [ 1643.162200][T27983] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.162258][T27983] CPU: 1 UID: 0 PID: 27983 Comm: syz.3.7923 Not tainted syzkaller #0 PREEMPT(full) [ 1643.162284][T27983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1643.162297][T27983] Call Trace: [ 1643.162306][T27983] [ 1643.162316][T27983] dump_stack_lvl+0xe8/0x150 [ 1643.162353][T27983] should_fail_ex+0x410/0x560 [ 1643.162390][T27983] ? __alloc_skb+0x1db/0x7a0 [ 1643.162421][T27983] should_failslab+0xa8/0x100 [ 1643.162449][T27983] ? __alloc_skb+0x1db/0x7a0 [ 1643.162477][T27983] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1643.162510][T27983] ? __alloc_skb+0x1db/0x7a0 [ 1643.162547][T27983] __alloc_skb+0x1db/0x7a0 [ 1643.162582][T27983] tcp_stream_alloc_skb+0x3f/0x580 [ 1643.162619][T27983] tcp_sendmsg_locked+0x14a9/0x5640 [ 1643.162670][T27983] ? __lock_acquire+0x6df/0x2e50 [ 1643.162725][T27983] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1643.162765][T27983] ? tcp_sendmsg+0x21/0x50 [ 1643.162797][T27983] ? __local_bh_enable_ip+0xd6/0x140 [ 1643.162830][T27983] tcp_sendmsg+0x2f/0x50 [ 1643.162860][T27983] ? __pfx_inet_sendmsg+0x10/0x10 [ 1643.162975][T27983] sock_sendmsg_nosec+0x10e/0x180 [ 1643.163016][T27983] __sys_sendto+0x408/0x5a0 [ 1643.163077][T27983] ? ksys_write+0x1e6/0x270 [ 1643.163112][T27983] ? __pfx___sys_sendto+0x10/0x10 [ 1643.163141][T27983] ? __mutex_unlock_slowpath+0x731/0x900 [ 1643.163205][T27983] ? __pfx_ksys_write+0x10/0x10 [ 1643.163241][T27983] __x64_sys_sendto+0xde/0x100 [ 1643.163267][T27983] do_syscall_64+0x166/0x520 [ 1643.163296][T27983] ? trace_irq_disable+0x3b/0x140 [ 1643.163317][T27983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.163339][T27983] ? clear_bhb_loop+0x70/0xc0 [ 1643.163366][T27983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.163388][T27983] RIP: 0033:0x7f6a7cf9e159 [ 1643.163409][T27983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.163427][T27983] RSP: 002b:00007f6a7de41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1643.163451][T27983] RAX: ffffffffffffffda RBX: 00007f6a7d225fa0 RCX: 00007f6a7cf9e159 [ 1643.163467][T27983] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 0000000000000003 [ 1643.163481][T27983] RBP: 00007f6a7de41090 R08: 0000000000000000 R09: 0000000000000000 [ 1643.163495][T27983] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 1643.163508][T27983] R13: 00007f6a7d226038 R14: 00007f6a7d225fa0 R15: 00007ffedc95e0b8 [ 1643.163543][T27983] [ 1643.727842][T27990] x_tables: duplicate underflow at hook 1 [ 1643.848298][ T7854] hsr_slave_0: left promiscuous mode [ 1643.863830][ T7854] hsr_slave_1: left promiscuous mode [ 1643.879907][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.894314][T19994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.907498][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1644.686212][ T7854] team0 (unregistering): Port device team_slave_1 removed [ 1644.745738][ T7854] team0 (unregistering): Port device team_slave_0 removed [ 1645.477616][T27999] syz_tun: refused to change device tx_queue_len [ 1645.898797][T28003] sctp: [Deprecated]: syz.7.7928 (pid 28003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1645.898797][T28003] Use struct sctp_sack_info instead [ 1646.453183][T27604] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1646.584638][T27604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1647.058640][T19994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.917281][T27604] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1647.980673][T27604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1648.043761][T27604] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1648.233211][T27604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1648.234268][T27604] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1648.297212][T27604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1650.191914][T19994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.771894][T28086] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1652.581799][T27604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1652.785477][T27604] 8021q: adding VLAN 0 to HW filter on device team0 [ 1652.897830][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.897983][ T7855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1652.983876][T27396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.984018][T27396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1653.255751][T27091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.296510][T28121] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1654.554837][T28131] nbd7: detected capacity change from 0 to 63 [ 1654.619722][T28131] block nbd7: NBD_DISCONNECT [ 1654.798115][T28131] block nbd7: Disconnected due to user request. [ 1654.805422][ T1971] blk_print_req_error: 69 callbacks suppressed [ 1654.805467][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1654.805503][ T1971] buffer_io_error: 138 callbacks suppressed [ 1654.805520][ T1971] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1654.805568][ T1971] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1654.805599][ T1971] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1654.805619][ T1971] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1654.805640][ T1971] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1654.856556][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1654.856595][ T1971] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1654.856614][ T1971] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1654.856631][ T1971] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1654.856647][ T1971] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1654.864957][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1654.864991][ T1971] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1654.865009][ T1971] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1654.883195][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1654.894396][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1654.894962][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1654.911968][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1654.932734][T27731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1654.933750][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1654.944693][T27337] ldm_validate_partition_table(): Disk read failed. [ 1654.944891][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1654.954738][T28131] block nbd7: shutting down sockets [ 1655.103556][T27731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1655.130141][T27731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1655.161515][T28131] FAULT_INJECTION: forcing a failure. [ 1655.161515][T28131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.161570][T28131] CPU: 1 UID: 0 PID: 28131 Comm: syz.7.7949 Not tainted syzkaller #0 PREEMPT(full) [ 1655.161595][T28131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1655.161609][T28131] Call Trace: [ 1655.161618][T28131] [ 1655.161628][T28131] dump_stack_lvl+0xe8/0x150 [ 1655.161669][T28131] should_fail_ex+0x410/0x560 [ 1655.161708][T28131] _copy_to_user+0x31/0xb0 [ 1655.161735][T28131] simple_read_from_buffer+0xe1/0x170 [ 1655.161771][T28131] proc_fail_nth_read+0x1bb/0x230 [ 1655.161810][T28131] ? common_file_perm+0x20e/0x2b0 [ 1655.161837][T28131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1655.161872][T28131] ? rw_verify_area+0x24a/0x4c0 [ 1655.161903][T28131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1655.161954][T28131] vfs_read+0x213/0xa80 [ 1655.161989][T28131] ? __pfx___mutex_lock+0x10/0x10 [ 1655.162022][T28131] ? __pfx_vfs_read+0x10/0x10 [ 1655.162054][T28131] ? __fget_files+0x2a/0x420 [ 1655.162085][T28131] ? __fget_files+0x3a2/0x420 [ 1655.162111][T28131] ? __fget_files+0x2a/0x420 [ 1655.162148][T28131] ksys_read+0x150/0x270 [ 1655.162181][T28131] ? __pfx_ksys_read+0x10/0x10 [ 1655.162223][T28131] do_syscall_64+0x166/0x520 [ 1655.162251][T28131] ? trace_irq_disable+0x3b/0x140 [ 1655.162272][T28131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.162294][T28131] ? clear_bhb_loop+0x70/0xc0 [ 1655.162320][T28131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.162342][T28131] RIP: 0033:0x7f6b9b95e98e [ 1655.162363][T28131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1655.162382][T28131] RSP: 002b:00007f6b9c842fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1655.162407][T28131] RAX: ffffffffffffffda RBX: 00007f6b9c8436c0 RCX: 00007f6b9b95e98e [ 1655.162423][T28131] RDX: 000000000000000f RSI: 00007f6b9c8430a0 RDI: 0000000000000007 [ 1655.162437][T28131] RBP: 00007f6b9c843090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.162451][T28131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.162464][T28131] R13: 00007f6b9bc26038 R14: 00007f6b9bc25fa0 R15: 00007ffd668d9e38 [ 1655.162500][T28131] [ 1655.219954][T27337] Dev nbd7: unable to read RDB block 0 [ 1655.477643][T27731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1655.513553][T27337] nbd7: unable to read partition table [ 1655.573191][T27731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1655.654473][T27731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1655.682768][T27731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1655.755573][T27337] ldm_validate_partition_table(): Disk read failed. [ 1655.796402][T27337] Dev nbd7: unable to read RDB block 0 [ 1655.806937][T27731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1655.822819][T27337] nbd7: unable to read partition table [ 1656.414548][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.916672][T28160] FAULT_INJECTION: forcing a failure. [ 1656.916672][T28160] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.916729][T28160] CPU: 1 UID: 0 PID: 28160 Comm: syz.7.7953 Not tainted syzkaller #0 PREEMPT(full) [ 1656.916754][T28160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1656.916768][T28160] Call Trace: [ 1656.916777][T28160] [ 1656.916786][T28160] dump_stack_lvl+0xe8/0x150 [ 1656.916823][T28160] should_fail_ex+0x410/0x560 [ 1656.916861][T28160] should_failslab+0xa8/0x100 [ 1656.916889][T28160] __kmalloc_cache_noprof+0xa3/0x600 [ 1656.916921][T28160] ? tc_chain_notify+0x25f/0x2e0 [ 1656.917026][T28160] ? tcf_proto_create+0x65/0x330 [ 1656.917051][T28160] ? tcf_proto_create+0x65/0x330 [ 1656.917086][T28160] tcf_proto_create+0x65/0x330 [ 1656.917119][T28160] tc_new_tfilter+0x13a6/0x1810 [ 1656.917172][T28160] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1656.917215][T28160] ? lock_acquire+0x115/0x350 [ 1656.917254][T28160] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1656.917279][T28160] rtnetlink_rcv_msg+0x802/0xc00 [ 1656.917345][T28160] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1656.917376][T28160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1656.917405][T28160] ? ref_tracker_free+0x689/0x830 [ 1656.917431][T28160] ? __pfx_ref_tracker_free+0x10/0x10 [ 1656.917463][T28160] netlink_rcv_skb+0x226/0x4a0 [ 1656.917491][T28160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1656.917525][T28160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1656.917564][T28160] ? netlink_deliver_tap+0x2e/0x1b0 [ 1656.917589][T28160] ? netlink_deliver_tap+0x2e/0x1b0 [ 1656.917621][T28160] netlink_unicast+0x7bd/0x940 [ 1656.917656][T28160] netlink_sendmsg+0x813/0xb40 [ 1656.917693][T28160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1656.917727][T28160] ? apparmor_socket_sendmsg+0x98/0x360 [ 1656.917762][T28160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1656.917787][T28160] sock_sendmsg_nosec+0x13a/0x180 [ 1656.917818][T28160] ____sys_sendmsg+0x54e/0x850 [ 1656.917847][T28160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1656.917881][T28160] ? import_iovec+0x73/0xa0 [ 1656.917908][T28160] ___sys_sendmsg+0x2a5/0x360 [ 1656.917930][T28160] ? __lock_acquire+0x6df/0x2e50 [ 1656.917963][T28160] ? __pfx____sys_sendmsg+0x10/0x10 [ 1656.918024][T28160] ? __fget_files+0x2a/0x420 [ 1656.918051][T28160] ? __fget_files+0x3a2/0x420 [ 1656.918088][T28160] __x64_sys_sendmsg+0x1b1/0x290 [ 1656.918115][T28160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1656.918162][T28160] do_syscall_64+0x166/0x520 [ 1656.918192][T28160] ? trace_irq_disable+0x3b/0x140 [ 1656.918214][T28160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.918236][T28160] ? clear_bhb_loop+0x70/0xc0 [ 1656.918263][T28160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.918284][T28160] RIP: 0033:0x7f6b9b99e159 [ 1656.918305][T28160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.918323][T28160] RSP: 002b:00007f6b9c843028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1656.918348][T28160] RAX: ffffffffffffffda RBX: 00007f6b9bc25fa0 RCX: 00007f6b9b99e159 [ 1656.918365][T28160] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000003 [ 1656.918379][T28160] RBP: 00007f6b9c843090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.918393][T28160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.918406][T28160] R13: 00007f6b9bc26038 R14: 00007f6b9bc25fa0 R15: 00007ffd668d9e38 [ 1656.918440][T28160] [ 1658.227054][T27731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.398517][T27731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.490054][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.490200][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.627958][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.628111][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1659.023658][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1659.701335][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.292631][T28192] syzkaller0: entered promiscuous mode [ 1660.292676][T28192] syzkaller0: entered allmulticast mode [ 1661.636270][T28214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7966'. [ 1661.992729][T27604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1662.989925][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.023893][T27731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1665.173957][T28263] openvswitch: netlink: Actions may not be safe on all matching packets [ 1665.548121][T28265] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1665.628695][T28265] syzkaller0: entered promiscuous mode [ 1665.628749][T28265] syzkaller0: entered allmulticast mode [ 1666.052176][T19994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.358627][T25689] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1666.375430][T25689] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1666.387780][T25689] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1666.401483][T25689] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1666.426995][T25689] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1667.586238][T28286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7979'. [ 1667.662671][T28284] FAULT_INJECTION: forcing a failure. [ 1667.662671][T28284] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.662728][T28284] CPU: 1 UID: 0 PID: 28284 Comm: syz.0.7979 Not tainted syzkaller #0 PREEMPT(full) [ 1667.662753][T28284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1667.662766][T28284] Call Trace: [ 1667.662775][T28284] [ 1667.662785][T28284] dump_stack_lvl+0xe8/0x150 [ 1667.662822][T28284] should_fail_ex+0x410/0x560 [ 1667.662858][T28284] ? __alloc_skb+0x1db/0x7a0 [ 1667.662890][T28284] should_failslab+0xa8/0x100 [ 1667.662917][T28284] ? __alloc_skb+0x1db/0x7a0 [ 1667.662945][T28284] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1667.662976][T28284] ? __alloc_skb+0x18d/0x7a0 [ 1667.663007][T28284] ? __alloc_skb+0x1db/0x7a0 [ 1667.663044][T28284] __alloc_skb+0x1db/0x7a0 [ 1667.663079][T28284] netlink_sendmsg+0x5d4/0xb40 [ 1667.663117][T28284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1667.663152][T28284] ? apparmor_socket_sendmsg+0x98/0x360 [ 1667.663195][T28284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1667.663220][T28284] sock_sendmsg_nosec+0x13a/0x180 [ 1667.663252][T28284] ____sys_sendmsg+0x54e/0x850 [ 1667.663281][T28284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1667.663315][T28284] ? import_iovec+0x73/0xa0 [ 1667.663341][T28284] ___sys_sendmsg+0x2a5/0x360 [ 1667.663363][T28284] ? __lock_acquire+0x6df/0x2e50 [ 1667.663389][T28284] ? __pfx____sys_sendmsg+0x10/0x10 [ 1667.663450][T28284] ? __fget_files+0x2a/0x420 [ 1667.663477][T28284] ? __fget_files+0x3a2/0x420 [ 1667.663514][T28284] __x64_sys_sendmsg+0x1b1/0x290 [ 1667.663540][T28284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1667.663587][T28284] do_syscall_64+0x166/0x520 [ 1667.663624][T28284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.663646][T28284] ? clear_bhb_loop+0x70/0xc0 [ 1667.663672][T28284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.663692][T28284] RIP: 0033:0x7ff1c859e159 [ 1667.663714][T28284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.663732][T28284] RSP: 002b:00007ff1c954e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1667.663757][T28284] RAX: ffffffffffffffda RBX: 00007ff1c8825fa0 RCX: 00007ff1c859e159 [ 1667.663772][T28284] RDX: 0000000004004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 1667.663787][T28284] RBP: 00007ff1c954e090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.663801][T28284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1667.663815][T28284] R13: 00007ff1c8826038 R14: 00007ff1c8825fa0 R15: 00007ffd5b0868e8 [ 1667.663848][T28284] [ 1668.566301][T25689] Bluetooth: hci2: command tx timeout [ 1668.995905][T27731] veth0_vlan: entered promiscuous mode [ 1669.141105][T28308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7980'. [ 1669.173587][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.222616][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.222714][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.737869][T27731] veth1_vlan: entered promiscuous mode [ 1670.655666][T23443] Bluetooth: hci2: command tx timeout [ 1671.462167][T27731] veth0_macvtap: entered promiscuous mode [ 1671.592262][T27731] veth1_macvtap: entered promiscuous mode [ 1672.719506][T23443] Bluetooth: hci2: command tx timeout [ 1672.935877][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.946600][T27731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1674.109577][T27731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1674.781885][ T9478] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.799447][T23443] Bluetooth: hci2: command tx timeout [ 1675.631303][T22537] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.646922][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.664315][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.862882][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.884269][ T7854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.895739][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.316746][T25689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1678.340933][T25689] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1678.357680][T25689] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1678.384875][T25689] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1678.395699][T25689] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1678.581295][T28396] nbd: must specify a device to reconfigure [ 1678.993160][T26941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.703401][T28407] netlink: 288 bytes leftover after parsing attributes in process `syz.7.7994'. [ 1679.958332][T17984] bridge_slave_1: left allmulticast mode [ 1679.958384][T17984] bridge_slave_1: left promiscuous mode [ 1679.958646][T17984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.042952][T17984] bridge_slave_0: left allmulticast mode [ 1680.059051][T17984] bridge_slave_0: left promiscuous mode [ 1680.059661][T17984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.562458][T23443] Bluetooth: hci3: command tx timeout [ 1680.835495][T28421] x_tables: duplicate entry at hook 3 [ 1682.089829][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.322362][T17984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1682.466166][T17984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.526062][T17984] bond0 (unregistering): Released all slaves [ 1682.622070][T28412] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1682.638723][T28415] syzkaller0: entered promiscuous mode [ 1682.638769][T28415] syzkaller0: entered allmulticast mode [ 1682.640486][T23443] Bluetooth: hci3: command tx timeout [ 1683.535962][T17984] hsr_slave_0: left promiscuous mode [ 1683.547593][T17984] hsr_slave_1: left promiscuous mode [ 1683.548701][T17984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.583575][T17984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.911546][T28451] netlink: 'syz.0.8005': attribute type 2 has an invalid length. [ 1683.986206][T28451] netlink: 'syz.0.8005': attribute type 2 has an invalid length. [ 1683.986254][T28451] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.8005'. [ 1684.542713][T28463] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1684.719572][T23443] Bluetooth: hci3: command tx timeout [ 1685.046905][T28467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8006'. [ 1685.273477][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.771727][T17984] team0 (unregistering): Port device team_slave_1 removed [ 1685.816014][T17984] team0 (unregistering): Port device team_slave_0 removed [ 1686.398118][T28450] syz_tun: entered allmulticast mode [ 1686.398427][T28450] syz_tun: left allmulticast mode [ 1686.799541][T23443] Bluetooth: hci3: command tx timeout [ 1686.932540][T28271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.950946][T28271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.961426][T28271] bridge_slave_0: entered allmulticast mode [ 1687.007498][T28271] bridge_slave_0: entered promiscuous mode [ 1687.053388][T28271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.062182][T28271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.062382][T28271] bridge_slave_1: entered allmulticast mode [ 1687.064518][T28271] bridge_slave_1: entered promiscuous mode [ 1687.405395][T28482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8008'. [ 1687.476263][T28271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1687.770635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.770859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.771035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.771216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.771378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.771538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.771709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.879791][T28271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.893600][T28485] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 1688.297161][T28271] team0: Port device team_slave_0 added [ 1688.320109][T28271] team0: Port device team_slave_1 added [ 1688.407109][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.678310][T28493] FAULT_INJECTION: forcing a failure. [ 1688.678310][T28493] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.694589][T28493] CPU: 1 UID: 0 PID: 28493 Comm: syz.0.8012 Not tainted syzkaller #0 PREEMPT(full) [ 1688.694623][T28493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1688.694637][T28493] Call Trace: [ 1688.694647][T28493] [ 1688.694657][T28493] dump_stack_lvl+0xe8/0x150 [ 1688.694697][T28493] should_fail_ex+0x410/0x560 [ 1688.694736][T28493] should_failslab+0xa8/0x100 [ 1688.694762][T28493] ? skb_clone+0x212/0x3a0 [ 1688.694786][T28493] kmem_cache_alloc_noprof+0xa1/0x600 [ 1688.694820][T28493] ? skb_clone+0x212/0x3a0 [ 1688.694851][T28493] skb_clone+0x212/0x3a0 [ 1688.694878][T28493] __netlink_deliver_tap+0x413/0x860 [ 1688.694919][T28493] ? netlink_deliver_tap+0x2e/0x1b0 [ 1688.694946][T28493] netlink_deliver_tap+0x19c/0x1b0 [ 1688.694974][T28493] netlink_unicast+0x781/0x940 [ 1688.695009][T28493] netlink_sendmsg+0x813/0xb40 [ 1688.695046][T28493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1688.695081][T28493] ? apparmor_socket_sendmsg+0x98/0x360 [ 1688.695116][T28493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1688.695141][T28493] sock_sendmsg_nosec+0x13a/0x180 [ 1688.695201][T28493] ____sys_sendmsg+0x54e/0x850 [ 1688.695231][T28493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1688.695265][T28493] ? import_iovec+0x73/0xa0 [ 1688.695294][T28493] ___sys_sendmsg+0x2a5/0x360 [ 1688.695321][T28493] ? __lock_acquire+0x6df/0x2e50 [ 1688.695349][T28493] ? __pfx____sys_sendmsg+0x10/0x10 [ 1688.695411][T28493] ? __fget_files+0x2a/0x420 [ 1688.695437][T28493] ? __fget_files+0x3a2/0x420 [ 1688.695475][T28493] __x64_sys_sendmsg+0x1b1/0x290 [ 1688.695503][T28493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1688.695551][T28493] do_syscall_64+0x166/0x520 [ 1688.695581][T28493] ? trace_irq_disable+0x3b/0x140 [ 1688.695602][T28493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.695624][T28493] ? clear_bhb_loop+0x70/0xc0 [ 1688.695651][T28493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.695671][T28493] RIP: 0033:0x7ff1c859e159 [ 1688.695692][T28493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.695711][T28493] RSP: 002b:00007ff1c954e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.695737][T28493] RAX: ffffffffffffffda RBX: 00007ff1c8825fa0 RCX: 00007ff1c859e159 [ 1688.695752][T28493] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1688.695766][T28493] RBP: 00007ff1c954e090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.695780][T28493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.695794][T28493] R13: 00007ff1c8826038 R14: 00007ff1c8825fa0 R15: 00007ffd5b0868e8 [ 1688.695829][T28493] [ 1689.151771][T28271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1689.151811][T28271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.151860][T28271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1689.299719][T28495] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8010'. [ 1689.398591][T28271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1689.398631][T28271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.398679][T28271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1690.246075][T28513] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8014'. [ 1690.423174][ T9478] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.668334][T28507] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8013'. [ 1690.678777][T28514] syz_tun: entered allmulticast mode [ 1690.696331][T28508] syz_tun: left allmulticast mode [ 1690.960195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.960437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.960655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.960858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.961036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.961207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.961386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.961576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.597656][T28527] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1691.627602][ T9478] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.746414][T28271] hsr_slave_0: entered promiscuous mode [ 1691.758838][T28271] hsr_slave_1: entered promiscuous mode [ 1691.778806][T28271] debugfs: 'hsr0' already exists in 'hsr' [ 1691.789118][T28271] Cannot create hsr debugfs directory [ 1691.810928][T28524] FAULT_INJECTION: forcing a failure. [ 1691.810928][T28524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.810991][T28524] CPU: 1 UID: 0 PID: 28524 Comm: syz.7.8016 Not tainted syzkaller #0 PREEMPT(full) [ 1691.811017][T28524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1691.811030][T28524] Call Trace: [ 1691.811039][T28524] [ 1691.811048][T28524] dump_stack_lvl+0xe8/0x150 [ 1691.811085][T28524] should_fail_ex+0x410/0x560 [ 1691.811123][T28524] _copy_from_iter+0x1d3/0x1660 [ 1691.811168][T28524] ? __alloc_skb+0x27a/0x7a0 [ 1691.811200][T28524] ? __alloc_skb+0x27a/0x7a0 [ 1691.811232][T28524] ? __alloc_skb+0x27a/0x7a0 [ 1691.811262][T28524] ? __pfx__copy_from_iter+0x10/0x10 [ 1691.811292][T28524] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1691.811322][T28524] ? __alloc_skb+0x27a/0x7a0 [ 1691.811350][T28524] ? __alloc_skb+0x27a/0x7a0 [ 1691.811386][T28524] ? netlink_sendmsg+0x650/0xb40 [ 1691.811410][T28524] ? skb_put+0x112/0x210 [ 1691.811434][T28524] netlink_sendmsg+0x6c0/0xb40 [ 1691.811470][T28524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1691.811504][T28524] ? apparmor_socket_sendmsg+0x98/0x360 [ 1691.811539][T28524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1691.811569][T28524] sock_sendmsg_nosec+0x13a/0x180 [ 1691.811600][T28524] ____sys_sendmsg+0x54e/0x850 [ 1691.811630][T28524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1691.811663][T28524] ? import_iovec+0x73/0xa0 [ 1691.811690][T28524] ___sys_sendmsg+0x2a5/0x360 [ 1691.811712][T28524] ? __lock_acquire+0x6df/0x2e50 [ 1691.811738][T28524] ? __pfx____sys_sendmsg+0x10/0x10 [ 1691.811759][T28524] ? __lock_acquire+0x6df/0x2e50 [ 1691.811785][T28524] ? kstrtouint+0x6e/0xe0 [ 1691.811854][T28524] __sys_sendmmsg+0x273/0x4d0 [ 1691.811884][T28524] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1691.811926][T28524] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1691.811974][T28524] ? ksys_write+0x242/0x270 [ 1691.812008][T28524] ? __pfx_ksys_write+0x10/0x10 [ 1691.812052][T28524] __x64_sys_sendmmsg+0xa0/0xc0 [ 1691.812078][T28524] do_syscall_64+0x166/0x520 [ 1691.812108][T28524] ? trace_irq_disable+0x3b/0x140 [ 1691.812129][T28524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.812160][T28524] ? clear_bhb_loop+0x70/0xc0 [ 1691.812186][T28524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.812206][T28524] RIP: 0033:0x7f6b9b99e159 [ 1691.812226][T28524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.812244][T28524] RSP: 002b:00007f6b9c822028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1691.812269][T28524] RAX: ffffffffffffffda RBX: 00007f6b9bc26090 RCX: 00007f6b9b99e159 [ 1691.812285][T28524] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1691.812301][T28524] RBP: 00007f6b9c822090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.812315][T28524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1691.812328][T28524] R13: 00007f6b9bc26128 R14: 00007f6b9bc26090 R15: 00007ffd668d9e38 [ 1691.812362][T28524] [ 1691.883416][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.277212][T28529] FAULT_INJECTION: forcing a failure. [ 1692.277212][T28529] name failslab, interval 1, probability 0, space 0, times 0 [ 1692.277268][T28529] CPU: 1 UID: 0 PID: 28529 Comm: syz.0.8018 Not tainted syzkaller #0 PREEMPT(full) [ 1692.277293][T28529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1692.277307][T28529] Call Trace: [ 1692.277316][T28529] [ 1692.277326][T28529] dump_stack_lvl+0xe8/0x150 [ 1692.277363][T28529] should_fail_ex+0x410/0x560 [ 1692.277401][T28529] should_failslab+0xa8/0x100 [ 1692.277429][T28529] __kvmalloc_node_noprof+0x176/0x820 [ 1692.277454][T28529] ? __pfx_hsr_dev_setup+0x10/0x10 [ 1692.277576][T28529] ? alloc_netdev_mqs+0x8fb/0x12a0 [ 1692.277602][T28529] ? alloc_netdev_mqs+0x8fb/0x12a0 [ 1692.277636][T28529] alloc_netdev_mqs+0x8fb/0x12a0 [ 1692.277662][T28529] ? __pfx_hsr_dev_setup+0x10/0x10 [ 1692.277691][T28529] rtnl_create_link+0x321/0xd70 [ 1692.277724][T28529] rtnl_newlink_create+0x258/0x7b0 [ 1692.277755][T28529] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1692.277781][T28529] ? __pfx___mutex_lock+0x10/0x10 [ 1692.277820][T28529] ? ns_capable+0x89/0xe0 [ 1692.277853][T28529] rtnl_newlink+0x166d/0x1c30 [ 1692.277891][T28529] ? __pfx_rtnl_newlink+0x10/0x10 [ 1692.277910][T28529] ? do_syscall_64+0x166/0x520 [ 1692.277938][T28529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.278006][T28529] ? kasan_quarantine_put+0xbb/0x1f0 [ 1692.278048][T28529] ? lockdep_hardirqs_on+0x7b/0x110 [ 1692.278082][T28529] ? nlmon_xmit+0xb0/0x100 [ 1692.278180][T28529] ? kmem_cache_free+0x182/0x650 [ 1692.278214][T28529] ? __lock_acquire+0x6df/0x2e50 [ 1692.278241][T28529] ? __dev_queue_xmit+0x29b/0x3820 [ 1692.278295][T28529] ? __local_bh_enable_ip+0xd6/0x140 [ 1692.278323][T28529] ? lockdep_hardirqs_on+0x7b/0x110 [ 1692.278352][T28529] ? __dev_queue_xmit+0x29b/0x3820 [ 1692.278375][T28529] ? __local_bh_enable_ip+0xd6/0x140 [ 1692.278400][T28529] ? __dev_queue_xmit+0x29b/0x3820 [ 1692.278433][T28529] ? lock_acquire+0x115/0x350 [ 1692.278472][T28529] ? __pfx_rtnl_newlink+0x10/0x10 [ 1692.278491][T28529] rtnetlink_rcv_msg+0x802/0xc00 [ 1692.278526][T28529] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1692.278555][T28529] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1692.278584][T28529] ? ref_tracker_free+0x689/0x830 [ 1692.278609][T28529] ? __pfx_ref_tracker_free+0x10/0x10 [ 1692.278643][T28529] netlink_rcv_skb+0x226/0x4a0 [ 1692.278672][T28529] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1692.278706][T28529] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1692.278745][T28529] ? netlink_deliver_tap+0x2e/0x1b0 [ 1692.278770][T28529] ? netlink_deliver_tap+0x2e/0x1b0 [ 1692.278802][T28529] netlink_unicast+0x7bd/0x940 [ 1692.278838][T28529] netlink_sendmsg+0x813/0xb40 [ 1692.278875][T28529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1692.278910][T28529] ? apparmor_socket_sendmsg+0x98/0x360 [ 1692.278945][T28529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1692.278970][T28529] sock_sendmsg_nosec+0x13a/0x180 [ 1692.279002][T28529] ____sys_sendmsg+0x54e/0x850 [ 1692.279040][T28529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1692.279075][T28529] ? import_iovec+0x73/0xa0 [ 1692.279103][T28529] ___sys_sendmsg+0x2a5/0x360 [ 1692.279126][T28529] ? __lock_acquire+0x6df/0x2e50 [ 1692.279148][T28529] ? __pfx____sys_sendmsg+0x10/0x10 [ 1692.279210][T28529] ? __fget_files+0x2a/0x420 [ 1692.279238][T28529] ? __fget_files+0x3a2/0x420 [ 1692.279277][T28529] __x64_sys_sendmsg+0x1b1/0x290 [ 1692.279304][T28529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1692.279352][T28529] do_syscall_64+0x166/0x520 [ 1692.279381][T28529] ? trace_irq_disable+0x3b/0x140 [ 1692.279402][T28529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.279424][T28529] ? clear_bhb_loop+0x70/0xc0 [ 1692.279450][T28529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.279472][T28529] RIP: 0033:0x7ff1c859e159 [ 1692.279495][T28529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.279513][T28529] RSP: 002b:00007ff1c954e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1692.279535][T28529] RAX: ffffffffffffffda RBX: 00007ff1c8825fa0 RCX: 00007ff1c859e159 [ 1692.279548][T28529] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000004 [ 1692.279560][T28529] RBP: 00007ff1c954e090 R08: 0000000000000000 R09: 0000000000000000 [ 1692.279571][T28529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1692.279584][T28529] R13: 00007ff1c8826038 R14: 00007ff1c8825fa0 R15: 00007ffd5b0868e8 [ 1692.279620][T28529] [ 1693.406487][ T9478] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.956257][T28548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8022'. [ 1694.430058][T28557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8024'. [ 1694.959633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.883005][T28577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8027'. [ 1695.906622][ T9478] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.038452][T28563] syz_tun: entered allmulticast mode [ 1696.057490][T28563] syz_tun: left allmulticast mode [ 1696.141208][T28582] x_tables: duplicate underflow at hook 2 [ 1696.201707][T28574] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1697.879057][T28600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8032'. [ 1697.910771][T28601] net_ratelimit: 8 callbacks suppressed [ 1697.928226][T28601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1698.099414][T28597] nbd: nbd3 already in use [ 1698.145973][T27091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.119582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.119811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.120004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.120180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.120384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.120581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.120749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.120918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.307934][T28614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8036'. [ 1699.308003][T28614] netlink: 'syz.3.8036': attribute type 5 has an invalid length. [ 1699.308027][T28614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8036'. [ 1699.369564][T28616] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1699.381982][T28616] batman_adv: batadv0: Adding interface: gretap1 [ 1699.392943][T28616] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.423590][T28616] batman_adv: batadv0: Interface activated: gretap1 [ 1699.604973][T28394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.605139][T28394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.605317][T28394] bridge_slave_0: entered allmulticast mode [ 1699.648328][T28394] bridge_slave_0: entered promiscuous mode [ 1699.676100][T28394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.685691][T28394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.685894][T28394] bridge_slave_1: entered allmulticast mode [ 1699.722811][T28394] bridge_slave_1: entered promiscuous mode [ 1700.973461][ T9478] bridge_slave_1: left allmulticast mode [ 1700.973514][ T9478] bridge_slave_1: left promiscuous mode [ 1700.973774][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.026892][ T9478] bridge_slave_0: left allmulticast mode [ 1701.039470][ T9478] bridge_slave_0: left promiscuous mode [ 1701.041464][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.656326][T28646] netlink: 'syz.7.8040': attribute type 33 has an invalid length. [ 1701.760572][T28652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8041'. [ 1701.771965][T28652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8041'. [ 1702.306970][T28656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8043'. [ 1702.376926][ T9478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.415458][ T9478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.433772][ T9478] bond0 (unregistering): Released all slaves [ 1702.543878][T28394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.757533][T28646] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1702.826856][T28646] bond1 (unregistering): Released all slaves [ 1703.170237][T28394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.514129][T28665] netlink: 'syz.7.8046': attribute type 10 has an invalid length. [ 1703.645487][ T9478] hsr_slave_0: left promiscuous mode [ 1703.656719][ T9478] hsr_slave_1: left promiscuous mode [ 1703.666423][ T9478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1703.674297][ T9478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1703.693328][ T9478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1703.704295][ T9478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.790202][ T9478] veth1_macvtap: left promiscuous mode [ 1703.797585][ T9478] veth0_macvtap: left promiscuous mode [ 1703.805833][ T9478] veth1_vlan: left promiscuous mode [ 1703.813641][ T9478] veth0_vlan: left promiscuous mode [ 1704.239515][ C1] net_ratelimit: 1 callbacks suppressed [ 1704.239571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.316851][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.104199][ T9478] team0 (unregistering): Port device team_slave_1 removed [ 1706.232232][ T9478] team0 (unregistering): Port device team_slave_0 removed [ 1707.105613][T28665] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 1707.118093][T28665] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 1707.176148][T28394] team0: Port device team_slave_0 added [ 1707.519512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.519723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.519913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.520084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.520257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.520451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.520634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.639965][T28394] team0: Port device team_slave_1 added [ 1708.121570][T28394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1708.121610][T28394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.121657][T28394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.203938][T28394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.203980][T28394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.204028][T28394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1708.712362][T28714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8052'. [ 1708.712411][T28714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8052'. [ 1708.950491][T28723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8053'. [ 1709.001893][T28725] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8053'. [ 1709.429389][T27091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.824630][T28394] hsr_slave_0: entered promiscuous mode [ 1709.878497][T28394] hsr_slave_1: entered promiscuous mode [ 1709.892897][T28394] debugfs: 'hsr0' already exists in 'hsr' [ 1709.892946][T28394] Cannot create hsr debugfs directory [ 1710.280211][T28737] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8056'. [ 1711.068564][T28750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8059'. [ 1711.077991][T28750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8059'. [ 1711.688720][T28750] gretap3: entered promiscuous mode [ 1711.696142][T28750] gretap3: entered allmulticast mode [ 1712.024402][T28271] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1712.071604][T28271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1712.108843][T28271] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1712.216445][T28271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1712.256842][T28271] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1712.357575][T28766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8062'. [ 1712.367143][T28766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8062'. [ 1712.418661][T28271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1712.530857][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.639526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.808630][T28271] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1712.892732][T28271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1715.309586][T28811] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8068'. [ 1715.373090][T28271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.754659][T28271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.806199][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.164042][T22533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.164194][T22533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.232630][T22533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.232776][T22533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.929090][T28828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8072'. [ 1716.940618][T28828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8072'. [ 1717.714478][T28832] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1719.505950][T28856] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8078'. [ 1719.736098][T28394] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1719.801963][T28394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1719.865659][T28394] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1719.997742][T28394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1720.036245][T28394] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1720.135031][T28394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1720.185982][T28394] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1720.302808][T28394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1720.354591][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.041038][T28873] FAULT_INJECTION: forcing a failure. [ 1721.041038][T28873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1721.041099][T28873] CPU: 1 UID: 0 PID: 28873 Comm: syz.3.8075 Not tainted syzkaller #0 PREEMPT(full) [ 1721.041125][T28873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1721.041138][T28873] Call Trace: [ 1721.041148][T28873] [ 1721.041157][T28873] dump_stack_lvl+0xe8/0x150 [ 1721.041200][T28873] should_fail_ex+0x410/0x560 [ 1721.041242][T28873] prepare_alloc_pages+0x223/0x600 [ 1721.041275][T28873] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1721.041303][T28873] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1721.041474][T28873] ? __pfx_policy_nodemask+0x10/0x10 [ 1721.041499][T28873] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1721.041531][T28873] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 1721.041564][T28873] alloc_pages_mpol+0x21e/0x390 [ 1721.041595][T28873] alloc_pages_noprof+0xb1/0x2b0 [ 1721.041623][T28873] alloc_skb_with_frags+0x264/0x760 [ 1721.041659][T28873] tls_decrypt_sg+0x3e8/0x3110 [ 1721.041762][T28873] ? __asan_memcpy+0x40/0x70 [ 1721.041790][T28873] ? skb_copy_header+0x2e/0x2c0 [ 1721.041814][T28873] ? __pfx_tls_decrypt_sg+0x10/0x10 [ 1721.041837][T28873] ? skb_copy_header+0x2e/0x2c0 [ 1721.041859][T28873] ? tls_strp_load_anchor_with_queue+0x1ea/0x380 [ 1721.041909][T28873] ? __pfx_tls_strp_load_anchor_with_queue+0x10/0x10 [ 1721.041938][T28873] ? __pfx_tls_strp_check_rcv+0x10/0x10 [ 1721.041964][T28873] ? tls_strp_msg_load+0x36c/0x7c0 [ 1721.041994][T28873] ? tls_rx_rec_wait+0x97e/0xaa0 [ 1721.042026][T28873] tls_rx_one_record+0x209/0x1950 [ 1721.042062][T28873] ? __pfx_tls_rx_rec_wait+0x10/0x10 [ 1721.042087][T28873] ? __pfx_tls_rx_one_record+0x10/0x10 [ 1721.042113][T28873] ? tls_sw_recvmsg+0x19d/0x1420 [ 1721.042192][T28873] tls_sw_recvmsg+0x885/0x1420 [ 1721.042230][T28873] ? lock_acquire+0x71/0x350 [ 1721.042273][T28873] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 1721.042305][T28873] ? inet6_recvmsg+0x10a/0x490 [ 1721.042333][T28873] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1721.042358][T28873] ? security_socket_recvmsg+0x7e/0x2c0 [ 1721.042387][T28873] ? __pfx_inet6_recvmsg+0x10/0x10 [ 1721.042414][T28873] sock_recvmsg+0xfa/0x1e0 [ 1721.042454][T28873] __sys_recvfrom+0x231/0x3a0 [ 1721.042477][T28873] ? ksys_write+0x1e6/0x270 [ 1721.042513][T28873] ? __pfx___sys_recvfrom+0x10/0x10 [ 1721.042532][T28873] ? __mutex_unlock_slowpath+0x731/0x900 [ 1721.042600][T28873] ? __pfx_ksys_write+0x10/0x10 [ 1721.042639][T28873] __x64_sys_recvfrom+0xde/0x100 [ 1721.042664][T28873] do_syscall_64+0x166/0x520 [ 1721.042694][T28873] ? trace_irq_disable+0x3b/0x140 [ 1721.042715][T28873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.042739][T28873] ? clear_bhb_loop+0x70/0xc0 [ 1721.042766][T28873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.042789][T28873] RIP: 0033:0x7f6a7cf9e159 [ 1721.042813][T28873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.042832][T28873] RSP: 002b:00007f6a7de20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1721.042857][T28873] RAX: ffffffffffffffda RBX: 00007f6a7d226090 RCX: 00007f6a7cf9e159 [ 1721.042875][T28873] RDX: fffffffffffffdab RSI: 0000200000002800 RDI: 0000000000000004 [ 1721.042890][T28873] RBP: 00007f6a7de20090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.042905][T28873] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 1721.042918][T28873] R13: 00007f6a7d226128 R14: 00007f6a7d226090 R15: 00007ffedc95e0b8 [ 1721.042952][T28873] [ 1721.726894][T28878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8081'. [ 1721.726944][T28878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8081'. [ 1721.928701][T28394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1722.047049][T28394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1722.093459][T22533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.093610][T22533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1722.178057][T22533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.178202][T22533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1722.772929][T28884] nbd7: detected capacity change from 0 to 63 [ 1722.806455][T23443] block nbd7: Receive control failed (result -32) [ 1722.893264][ T1971] block nbd7: Dead connection, failed to find a fallback [ 1722.893314][ T1971] block nbd7: shutting down sockets [ 1722.893347][ T1971] blk_print_req_error: 49 callbacks suppressed [ 1722.893367][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1722.893401][ T1971] buffer_io_error: 138 callbacks suppressed [ 1722.893417][ T1971] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1722.937056][ T1971] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1722.937108][ T1971] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1722.955013][ T1971] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1722.955065][ T1971] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1722.974449][ T1971] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1722.974504][ T1971] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1722.994083][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1722.994140][ T1971] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1723.012208][ T1971] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1723.012290][ T1971] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1723.045835][ T1971] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 1723.045894][ T1971] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1723.045931][ T1971] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1723.071686][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1723.071724][ T1971] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1723.071742][ T1971] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1723.104601][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1723.114720][ T1971] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1723.135347][T27608] ldm_validate_partition_table(): Disk read failed. [ 1723.154249][T27608] Dev nbd7: unable to read RDB block 0 [ 1723.176438][T27608] nbd7: unable to read partition table [ 1724.159567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.159800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.159992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.160163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.160333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.160503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.160672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.676138][T28271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.815544][T28905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8088'. [ 1724.865059][T27608] ldm_validate_partition_table(): Disk read failed. [ 1724.883951][T27608] Dev nbd7: unable to read RDB block 0 [ 1724.904681][T27608] nbd7: unable to read partition table [ 1724.929668][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.019596][T28914] syzkaller1: entered promiscuous mode [ 1726.025501][T28914] syzkaller1: entered allmulticast mode [ 1726.750705][T28923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1726.766594][T28923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1726.777416][T28923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1726.806958][T28923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1726.840548][T28923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1727.282537][T28929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'. [ 1727.446452][T28929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'. [ 1727.446503][T28929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'. [ 1728.041922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.367314][T28394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1728.969334][T23443] Bluetooth: hci0: command tx timeout [ 1729.279519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.391180][T28394] veth0_vlan: entered promiscuous mode [ 1729.473062][T28394] veth1_vlan: entered promiscuous mode [ 1729.705652][T28394] veth0_macvtap: entered promiscuous mode [ 1729.744384][T28394] veth1_macvtap: entered promiscuous mode [ 1729.844451][T28394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1729.894010][T28394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1730.029501][T24138] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.029570][T24138] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.029625][T24138] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.029665][T24138] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.643765][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.643854][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.040166][T23443] Bluetooth: hci0: command tx timeout [ 1731.202600][T28921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.212242][T28921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.222570][T28921] bridge_slave_0: entered allmulticast mode [ 1731.245731][T28921] bridge_slave_0: entered promiscuous mode [ 1731.310317][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.507508][T28921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.507654][T28921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.507841][T28921] bridge_slave_1: entered allmulticast mode [ 1731.552246][T28921] bridge_slave_1: entered promiscuous mode [ 1731.649827][T28965] netlink: 'syz.3.8094': attribute type 1 has an invalid length. [ 1731.908413][T28921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.048095][T28978] netlink: 88 bytes leftover after parsing attributes in process `syz.7.8097'. [ 1732.146965][T28979] netlink: 88 bytes leftover after parsing attributes in process `syz.7.8097'. [ 1732.403040][T28921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.122837][T23443] Bluetooth: hci0: command tx timeout [ 1733.251813][T28921] team0: Port device team_slave_0 added [ 1734.512149][T27091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.925243][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.933406][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.965978][T28921] team0: Port device team_slave_1 added [ 1735.200464][T23443] Bluetooth: hci0: command tx timeout [ 1736.015780][T28921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.025707][T28921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.052733][T28921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.547413][T28921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.561289][T28921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.598836][T28921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.569420][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.683332][T28923] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1738.733410][T28923] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1738.745563][T28923] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1738.760568][T28923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1738.786953][T28923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1739.208958][T29038] syz_tun: entered allmulticast mode [ 1739.209365][T29038] syz_tun: left allmulticast mode [ 1739.257778][T28921] hsr_slave_0: entered promiscuous mode [ 1739.284357][T28921] hsr_slave_1: entered promiscuous mode [ 1739.285370][T28921] debugfs: 'hsr0' already exists in 'hsr' [ 1739.285426][T28921] Cannot create hsr debugfs directory [ 1740.679455][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.884112][T28923] Bluetooth: hci2: command tx timeout [ 1741.748781][T29068] nbd: nbd7 already in use [ 1742.973599][T28923] Bluetooth: hci2: command tx timeout [ 1743.595868][T12636] bridge_slave_1: left allmulticast mode [ 1743.595920][T12636] bridge_slave_1: left promiscuous mode [ 1743.596173][T12636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.708392][T12636] bridge_slave_0: left allmulticast mode [ 1743.736770][T12636] bridge_slave_0: left promiscuous mode [ 1743.737050][T12636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.882753][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.907809][T29094] netlink: 'syz.0.8116': attribute type 1 has an invalid length. [ 1745.044523][T28923] Bluetooth: hci2: command tx timeout [ 1745.687786][T12636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1745.755727][T12636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1745.807842][T12636] bond0 (unregistering): Released all slaves [ 1746.073121][T29094] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1746.379372][T12636] hsr_slave_0: left promiscuous mode [ 1746.468106][T12636] hsr_slave_1: left promiscuous mode [ 1746.469448][T12636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1746.504932][T12636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1747.119834][T28923] Bluetooth: hci2: command tx timeout [ 1748.137199][T12636] team0 (unregistering): Port device team_slave_1 removed [ 1748.261982][T12636] team0 (unregistering): Port device team_slave_0 removed [ 1748.335840][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.551114][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.192555][T29173] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8126'. [ 1752.808100][T12636] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.165840][T29180] FAULT_INJECTION: forcing a failure. [ 1753.165840][T29180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1753.165907][T29180] CPU: 1 UID: 0 PID: 29180 Comm: syz.0.8128 Not tainted syzkaller #0 PREEMPT(full) [ 1753.165933][T29180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1753.165946][T29180] Call Trace: [ 1753.165955][T29180] [ 1753.165965][T29180] dump_stack_lvl+0xe8/0x150 [ 1753.166001][T29180] should_fail_ex+0x410/0x560 [ 1753.166037][T29180] _copy_from_user+0x2d/0xb0 [ 1753.166074][T29180] ___sys_sendmsg+0x1c6/0x360 [ 1753.166098][T29180] ? __lock_acquire+0x6df/0x2e50 [ 1753.166125][T29180] ? __pfx____sys_sendmsg+0x10/0x10 [ 1753.166185][T29180] ? __fget_files+0x2a/0x420 [ 1753.166213][T29180] ? __fget_files+0x3a2/0x420 [ 1753.166265][T29180] __x64_sys_sendmsg+0x1b1/0x290 [ 1753.166292][T29180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1753.166348][T29180] do_syscall_64+0x166/0x520 [ 1753.166379][T29180] ? trace_irq_disable+0x3b/0x140 [ 1753.166400][T29180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.166422][T29180] ? clear_bhb_loop+0x70/0xc0 [ 1753.166448][T29180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.166469][T29180] RIP: 0033:0x7ff1c859e159 [ 1753.166489][T29180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1753.166508][T29180] RSP: 002b:00007ff1c954e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1753.166533][T29180] RAX: ffffffffffffffda RBX: 00007ff1c8825fa0 RCX: 00007ff1c859e159 [ 1753.166549][T29180] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 1753.166570][T29180] RBP: 00007ff1c954e090 R08: 0000000000000000 R09: 0000000000000000 [ 1753.166583][T29180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.166596][T29180] R13: 00007ff1c8826038 R14: 00007ff1c8825fa0 R15: 00007ffd5b0868e8 [ 1753.166630][T29180] [ 1754.931463][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.021783][T29198] Dead loop on virtual device ip6_vti0 (net 287), fix it urgently! [ 1755.065747][T12636] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.687536][T12636] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.520488][T29219] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8136'. [ 1756.552201][T12636] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.800068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.800331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.800590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.800794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.800993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.801195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.801405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.163726][T29043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.163877][T29043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.164079][T29043] bridge_slave_0: entered allmulticast mode [ 1757.205114][T29043] bridge_slave_0: entered promiscuous mode [ 1757.241887][T29043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.242018][T29043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.242210][T29043] bridge_slave_1: entered allmulticast mode [ 1757.285380][T29043] bridge_slave_1: entered promiscuous mode [ 1757.305529][T28921] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1757.369097][T28921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1757.378593][T28921] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1757.454496][T28921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1757.697542][T28921] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1757.782852][T28921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1757.794249][T28921] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1757.828514][T28921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1758.030398][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.171187][T29043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1758.278692][T29225] vxcan3: entered allmulticast mode [ 1758.328098][T29223] xt_esp: unknown flags DD [ 1758.365540][T29043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1758.788490][T29043] team0: Port device team_slave_0 added [ 1758.804438][T29043] team0: Port device team_slave_1 added [ 1759.072091][T29240] netlink: 'syz.3.8141': attribute type 83 has an invalid length. [ 1759.494624][T29043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.494664][T29043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.494708][T29043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1759.622655][T12636] bridge_slave_1: left allmulticast mode [ 1759.630233][T12636] bridge_slave_1: left promiscuous mode [ 1759.637999][T12636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.693359][T12636] bridge_slave_0: left allmulticast mode [ 1759.708509][T12636] bridge_slave_0: left promiscuous mode [ 1759.708825][T12636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.012402][T12636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1761.046059][T12636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1761.068716][T12636] bond0 (unregistering): Released all slaves [ 1761.180321][T29043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1761.189748][T29043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1761.219163][T29043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1761.371814][T29252] xfrm1: entered allmulticast mode [ 1761.773444][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.919867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.974297][T29273] tipc: MTU too low for tipc bearer [ 1763.082282][T29043] hsr_slave_0: entered promiscuous mode [ 1763.106904][T29043] hsr_slave_1: entered promiscuous mode [ 1763.134214][T29043] debugfs: 'hsr0' already exists in 'hsr' [ 1763.145680][T29043] Cannot create hsr debugfs directory [ 1763.392627][T12636] hsr_slave_0: left promiscuous mode [ 1763.407166][T12636] hsr_slave_1: left promiscuous mode [ 1763.416612][T12636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1763.426676][T12636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1763.448302][T12636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1763.459357][T12636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1763.529047][T12636] veth1_macvtap: left promiscuous mode [ 1763.543169][T12636] veth0_macvtap: left promiscuous mode [ 1763.543354][T12636] veth1_vlan: left promiscuous mode [ 1763.543440][T12636] veth0_vlan: left promiscuous mode [ 1763.636627][T29282] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8151'. [ 1765.091191][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.254816][T12636] team0 (unregistering): Port device team_slave_1 removed [ 1765.383489][T12636] team0 (unregistering): Port device team_slave_0 removed [ 1767.301643][T29318] FAULT_INJECTION: forcing a failure. [ 1767.301643][T29318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.301699][T29318] CPU: 1 UID: 0 PID: 29318 Comm: syz.7.8159 Not tainted syzkaller #0 PREEMPT(full) [ 1767.301724][T29318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1767.301737][T29318] Call Trace: [ 1767.301746][T29318] [ 1767.301756][T29318] dump_stack_lvl+0xe8/0x150 [ 1767.301797][T29318] should_fail_ex+0x410/0x560 [ 1767.301836][T29318] _copy_to_user+0x31/0xb0 [ 1767.301863][T29318] simple_read_from_buffer+0xe1/0x170 [ 1767.301897][T29318] proc_fail_nth_read+0x1bb/0x230 [ 1767.301929][T29318] ? common_file_perm+0x20e/0x2b0 [ 1767.301957][T29318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1767.301992][T29318] ? rw_verify_area+0x24a/0x4c0 [ 1767.302025][T29318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1767.302054][T29318] vfs_read+0x213/0xa80 [ 1767.302091][T29318] ? __pfx___mutex_lock+0x10/0x10 [ 1767.302124][T29318] ? __pfx_vfs_read+0x10/0x10 [ 1767.302156][T29318] ? __fget_files+0x2a/0x420 [ 1767.302188][T29318] ? __fget_files+0x3a2/0x420 [ 1767.302214][T29318] ? __fget_files+0x2a/0x420 [ 1767.302260][T29318] ksys_read+0x150/0x270 [ 1767.302294][T29318] ? __pfx_ksys_read+0x10/0x10 [ 1767.302335][T29318] do_syscall_64+0x166/0x520 [ 1767.302364][T29318] ? trace_irq_disable+0x3b/0x140 [ 1767.302385][T29318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.302407][T29318] ? clear_bhb_loop+0x70/0xc0 [ 1767.302434][T29318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.302455][T29318] RIP: 0033:0x7f6b9b95e98e [ 1767.302476][T29318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1767.302494][T29318] RSP: 002b:00007f6b9c842fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1767.302518][T29318] RAX: ffffffffffffffda RBX: 00007f6b9c8436c0 RCX: 00007f6b9b95e98e [ 1767.302534][T29318] RDX: 000000000000000f RSI: 00007f6b9c8430a0 RDI: 0000000000000007 [ 1767.302547][T29318] RBP: 00007f6b9c843090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.302561][T29318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.302574][T29318] R13: 00007f6b9bc26038 R14: 00007f6b9bc25fa0 R15: 00007ffd668d9e38 [ 1767.302610][T29318] [ 1768.546563][T29329] lo: entered allmulticast mode [ 1768.567905][T29327] lo: left allmulticast mode [ 1768.623015][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.174595][T28921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1769.308389][T28921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1769.587657][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.587845][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.626779][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.626923][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.824090][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8163'. [ 1771.696644][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.183584][T29043] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1774.236368][T29043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1774.266742][T29043] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1774.378049][T29043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1774.422795][T29043] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1774.498956][T29043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1774.502180][T29043] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1774.625530][T29043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1775.065560][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.018466][T29043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.155186][T29043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.215365][T12636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.215508][T12636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.340223][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.340374][ T7853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.256626][T29426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.372712][T28921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.020168][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.034271][T28921] veth0_vlan: entered promiscuous mode [ 1781.122145][T28921] veth1_vlan: entered promiscuous mode [ 1781.384381][T28921] veth0_macvtap: entered promiscuous mode [ 1781.455420][T28921] veth1_macvtap: entered promiscuous mode [ 1781.707461][T28921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.799012][T28921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1782.050815][T17984] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.051012][T17984] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.051074][T17984] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.051119][T17984] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.187134][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.471193][T29043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1783.489351][ T5278] eql: remember to turn off Van-Jacobson compression on your slave devices [ 1784.319077][T29515] syzkaller0: entered promiscuous mode [ 1784.319533][T29515] syzkaller0: entered allmulticast mode [ 1784.465216][T29515] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8194'. [ 1784.883630][T22045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.883684][T22045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.651068][T29539] FAULT_INJECTION: forcing a failure. [ 1785.651068][T29539] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.651126][T29539] CPU: 1 UID: 0 PID: 29539 Comm: syz.0.8198 Not tainted syzkaller #0 PREEMPT(full) [ 1785.651152][T29539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1785.651171][T29539] Call Trace: [ 1785.651180][T29539] [ 1785.651190][T29539] dump_stack_lvl+0xe8/0x150 [ 1785.651227][T29539] should_fail_ex+0x410/0x560 [ 1785.651265][T29539] should_failslab+0xa8/0x100 [ 1785.651293][T29539] __kvmalloc_node_noprof+0x176/0x820 [ 1785.651318][T29539] ? __kvmalloc_node_noprof+0x345/0x820 [ 1785.651339][T29539] ? sort_subprogs_topo+0xf5/0xf20 [ 1785.651361][T29539] ? sort_subprogs_topo+0xf5/0xf20 [ 1785.651392][T29539] sort_subprogs_topo+0xf5/0xf20 [ 1785.651415][T29539] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 1785.651461][T29539] bpf_check+0x25a5/0x2e10 [ 1785.651496][T29539] ? ktime_get_with_offset+0x93/0x2d0 [ 1785.651523][T29539] ? __pfx_bpf_check+0x10/0x10 [ 1785.651548][T29539] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1785.651581][T29539] bpf_prog_load+0x14d6/0x1c20 [ 1785.651619][T29539] ? __pfx_bpf_prog_load+0x10/0x10 [ 1785.651671][T29539] __sys_bpf+0xd0d/0xd90 [ 1785.651704][T29539] ? __pfx___sys_bpf+0x10/0x10 [ 1785.651739][T29539] ? __fget_files+0x2a/0x420 [ 1785.651794][T29539] ? ksys_write+0x242/0x270 [ 1785.651838][T29539] ? __pfx_ksys_write+0x10/0x10 [ 1785.651874][T29539] __x64_sys_bpf+0xba/0xd0 [ 1785.651899][T29539] do_syscall_64+0x166/0x520 [ 1785.651930][T29539] ? trace_irq_disable+0x3b/0x140 [ 1785.651950][T29539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.651980][T29539] ? clear_bhb_loop+0x70/0xc0 [ 1785.652006][T29539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.652028][T29539] RIP: 0033:0x7ff1c859e159 [ 1785.652050][T29539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.652068][T29539] RSP: 002b:00007ff1c954e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1785.652093][T29539] RAX: ffffffffffffffda RBX: 00007ff1c8825fa0 RCX: 00007ff1c859e159 [ 1785.652109][T29539] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1785.652123][T29539] RBP: 00007ff1c954e090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.652138][T29539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1785.652151][T29539] R13: 00007ff1c8826038 R14: 00007ff1c8825fa0 R15: 00007ffd5b0868e8 [ 1785.652185][T29539] [ 1786.203884][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1786.212738][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1786.604736][T29043] veth0_vlan: entered promiscuous mode [ 1786.722316][T29043] veth1_vlan: entered promiscuous mode [ 1786.774624][T19994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.294426][T29043] veth0_macvtap: entered promiscuous mode [ 1787.357743][T29043] veth1_macvtap: entered promiscuous mode [ 1787.673768][T29043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1787.833450][T29043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.070675][T27396] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.071721][T27396] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.071786][T27396] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.071829][T27396] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.463892][T23443] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1788.493120][T23443] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1788.506883][T23443] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1788.531926][T23443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1788.550775][T23443] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1789.302971][T27396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.303055][T27396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.865736][T27396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.865777][T27396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.522178][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.640644][T23443] Bluetooth: hci3: command tx timeout [ 1792.100274][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.100361][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.730886][T23443] Bluetooth: hci3: command tx timeout [ 1792.999474][T29608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8205'. [ 1793.435238][T29613] nbd: must specify at least one socket [ 1793.555880][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.836057][T15636] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.809578][T23443] Bluetooth: hci3: command tx timeout [ 1795.185286][T29634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8210'. [ 1795.522421][T15636] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.614800][T15636] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.644642][T29659] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8215'. [ 1796.668482][T29661] netlink: 27 bytes leftover after parsing attributes in process `syz.6.8214'. [ 1796.880486][T23443] Bluetooth: hci3: command tx timeout [ 1797.672075][T15636] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.704947][T29676] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8218'. [ 1797.835239][T29678] lo: entered allmulticast mode [ 1797.891842][T29677] lo: left allmulticast mode [ 1798.330114][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.608814][T29683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8220'. [ 1799.607168][T29683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8220'. [ 1800.774263][T29699] syzkaller0: entered promiscuous mode [ 1800.780519][T29699] syzkaller0: entered allmulticast mode [ 1801.184091][T29719] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8227'. [ 1801.429752][T19994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.510574][T29722] FAULT_INJECTION: forcing a failure. [ 1801.510574][T29722] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.528027][T29722] CPU: 1 UID: 0 PID: 29722 Comm: syz.3.8228 Not tainted syzkaller #0 PREEMPT(full) [ 1801.528061][T29722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1801.528075][T29722] Call Trace: [ 1801.528085][T29722] [ 1801.528095][T29722] dump_stack_lvl+0xe8/0x150 [ 1801.528132][T29722] should_fail_ex+0x410/0x560 [ 1801.528171][T29722] should_failslab+0xa8/0x100 [ 1801.528201][T29722] ? skb_clone+0x212/0x3a0 [ 1801.528226][T29722] kmem_cache_alloc_noprof+0xa1/0x600 [ 1801.528259][T29722] ? skb_clone+0x212/0x3a0 [ 1801.528290][T29722] skb_clone+0x212/0x3a0 [ 1801.528318][T29722] __netlink_deliver_tap+0x413/0x860 [ 1801.528358][T29722] ? netlink_deliver_tap+0x2e/0x1b0 [ 1801.528386][T29722] netlink_deliver_tap+0x19c/0x1b0 [ 1801.528413][T29722] netlink_unicast+0x781/0x940 [ 1801.528449][T29722] netlink_sendmsg+0x813/0xb40 [ 1801.528483][T29722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1801.528517][T29722] ? apparmor_socket_sendmsg+0x98/0x360 [ 1801.528545][T29722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1801.528563][T29722] sock_sendmsg_nosec+0x13a/0x180 [ 1801.528599][T29722] ____sys_sendmsg+0x54e/0x850 [ 1801.528628][T29722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1801.528662][T29722] ? import_iovec+0x73/0xa0 [ 1801.528690][T29722] ___sys_sendmsg+0x2a5/0x360 [ 1801.528712][T29722] ? __lock_acquire+0x6df/0x2e50 [ 1801.528739][T29722] ? __pfx____sys_sendmsg+0x10/0x10 [ 1801.528803][T29722] ? __fget_files+0x2a/0x420 [ 1801.528831][T29722] ? __fget_files+0x3a2/0x420 [ 1801.528868][T29722] __x64_sys_sendmsg+0x1b1/0x290 [ 1801.528895][T29722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1801.528944][T29722] do_syscall_64+0x166/0x520 [ 1801.528974][T29722] ? trace_irq_disable+0x3b/0x140 [ 1801.528994][T29722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.529026][T29722] ? clear_bhb_loop+0x70/0xc0 [ 1801.529053][T29722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.529075][T29722] RIP: 0033:0x7f6a7cf9e159 [ 1801.529095][T29722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.529113][T29722] RSP: 002b:00007f6a7de41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1801.529136][T29722] RAX: ffffffffffffffda RBX: 00007f6a7d225fa0 RCX: 00007f6a7cf9e159 [ 1801.529152][T29722] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1801.529166][T29722] RBP: 00007f6a7de41090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.529180][T29722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1801.529193][T29722] R13: 00007f6a7d226038 R14: 00007f6a7d225fa0 R15: 00007ffedc95e0b8 [ 1801.529229][T29722] [ 1802.088894][T29724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8229'. [ 1802.088945][T29724] openvswitch: netlink: Flow actions attr not present in new flow. [ 1802.674531][T29728] netlink: get zone limit has 8 unknown bytes [ 1804.525617][ T4944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.544888][T25658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.631625][ T4944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1813.175569][T29729] : renamed from bond0 (while UP) [ 1813.781582][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.079690][ T4944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.777330][T15636] bridge_slave_1: left allmulticast mode [ 1818.810854][T15636] bridge_slave_1: left promiscuous mode [ 1818.871848][T15636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.231514][ T4944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.960420][ T4944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.722446][T15636] bridge_slave_0: left allmulticast mode [ 1841.037776][T15636] bridge_slave_0: left promiscuous mode [ 1841.097449][T15636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.205623][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1856.214154][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1871.310325][T25689] Bluetooth: hci2: command 0x0406 tx timeout [ 1871.919157][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1915.468933][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.489515][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1929.364776][T29560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.368142][T28923] Bluetooth: hci3: command tx timeout [ 1961.969438][ T32] INFO: task dhcpcd:5278 blocked for more than 145 seconds. [ 1961.979941][ T32] Not tainted syzkaller #0 [ 1961.991117][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1962.001622][ T32] task:dhcpcd state:D stack:21672 pid:5278 tgid:5278 ppid:5277 task_flags:0x400140 flags:0x00080000 [ 1962.023872][ T32] Call Trace: [ 1962.036183][ T32] [ 1962.047610][ T32] __schedule+0x17db/0x58f0 [ 1962.059717][ T32] ? __pfx___schedule+0x10/0x10 [ 1962.071427][ T32] ? schedule+0x90/0x2b0 [ 1962.083274][ T32] schedule+0x164/0x2b0 [ 1962.094707][ T32] schedule_preempt_disabled+0x13/0x30 [ 1962.106000][ T32] __mutex_lock+0x7c1/0x1550 [ 1962.118114][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1962.129668][ T32] ? rtnl_dumpit+0x92/0x200 [ 1962.141553][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1962.152955][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 1962.164208][ T32] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1962.186426][ T32] ? __alloc_skb+0x1db/0x7a0 [ 1962.197898][ T32] ? netlink_dump+0x19c/0xee0 [ 1962.210005][ T32] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1962.221555][ T32] rtnl_dumpit+0x92/0x200 [ 1962.235164][ T32] netlink_dump+0x711/0xee0 [ 1962.246461][ T32] ? __netlink_lookup+0xc6/0x8b0 [ 1962.257947][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 1962.269934][ T32] ? netlink_lookup+0x30/0x200 [ 1962.281271][ T32] ? netlink_lookup+0x30/0x200 [ 1967.307573][ T32] __netlink_dump_start+0x589/0x7b0 [ 1967.307631][ T32] rtnetlink_rcv_msg+0xa48/0xc00 [ 1967.307663][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1967.307692][ T32] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1967.307714][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1967.307746][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1967.307777][ T32] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1967.307808][ T32] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1967.307844][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1967.307872][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1967.307905][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1967.307947][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1967.307973][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1967.308005][ T32] netlink_unicast+0x7bd/0x940 [ 1967.308052][ T32] netlink_sendmsg+0x813/0xb40 [ 1967.308091][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1967.308127][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1967.308166][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1967.318319][ T32] sock_sendmsg_nosec+0x13a/0x180