last executing test programs: 7.213784043s ago: executing program 1 (id=6331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000010000000000000803000000002e05"], 0x0, 0x28, 0x0, 0x1}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 6.227485325s ago: executing program 1 (id=6334): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 5.194762961s ago: executing program 1 (id=6342): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000002400000008000900000000000800080000000000080006"], 0x4c}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) accept(r3, 0x0, 0x0) connect$unix(r4, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf2510"], 0x18}, 0x1, 0x0, 0x0, 0xc005}, 0x404c810) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x6}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r7, r9}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r7, r6}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) 4.4932103s ago: executing program 2 (id=6350): pread64(0xffffffffffffffff, 0x0, 0x0, 0x36) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="4b000ffd096c1b77cd99b1000009c4b8210037", 0x13}, {&(0x7f0000000380)}], 0x2}}], 0x1, 0x40c0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) (async) r1 = socket(0x10, 0x3, 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000002600)=""/99, &(0x7f0000002680)=0x63) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c012}, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8, 0x1, 0x0, 0x46}, &(0x7f0000000180)=0x40) 4.273670836s ago: executing program 2 (id=6351): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000ac0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0x8}, {0x3, 0x3}, {0x2, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0xf}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048000}, 0x2000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x800, 0x3, 0x5}) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) close(0x4) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) connect$rxrpc(r3, &(0x7f0000000640)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x1f) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r3, 0xc040583f, &(0x7f00000003c0)={{@align=0x35, {0x45, 0xc, 0xfff}}, {{[0x0, 0x6, 0x9ac, 0x9054]}, 0x0, 0x3, 0x9, 0x0, &(0x7f00000002c0)=[{{@_ha_fsid={[0x3, 0xfffffffe]}, {0x0, 0xffff, 0x8000, 0xa01}}, 0x7ff, 0x0, 'vlan1\x00'}, {{@align=0x57ec, {0x6, 0x2, 0x61, 0x80}}, 0x4, 0x0, 'veth0_virt_wifi\x00'}, {{@align=0x7fffffff, {0x7, 0x8, 0x0, 0x662}}, 0x80000000, 0x0, '*\x00'}, {{@align=0x4, {0x6, 0x9, 0x69f, 0x8000000000000001}}, 0x1, 0x0, 'NETMAP\x00'}]}}) r6 = socket$netlink(0x10, 0x3, 0xc) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)="35053fc3d87aa8d9d9a35b186c43e74571fa511464ea39d66c2efb3f1fb1d665adce11edd145b8d00981c2adac49fb3a6efea55c12bfb7de103121aa9a72086507", 0x41}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800) recvmmsg(r10, &(0x7f0000001140), 0x700, 0x2, 0x0) close(r7) recvmsg$unix(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/158, 0x9e}], 0x1, &(0x7f0000000880)}, 0x10121) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x120, 0x0, 0x148, 0x120, 0x148, 0x3a0, 0x240, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e1d, 0x4e20, 0x8, 0x2, 0x5f4a, 0x100, 0xa22}}}, {{@ip={@multicast1, @multicast1=0xe000003f, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x60}, 0x0, 0x260, 0x280, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x7, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x0, 'syz1\x00', 0x5}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x0, 0x3b8, 0xffffffff, 0x2c0, 0x1c8, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, &(0x7f0000000080), {[{{@ip={@broadcast, @rand_addr=0x64010102, 0xffffffff, 0xffffff00, 'dvmrp0\x00', 'dvmrp0\x00', {}, {0xff}, 0x33, 0x2, 0x7}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1, 0x1}}, @common=@ttl={{0x28}, {0x2, 0x8}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @multicast2, @local, @gre_key=0x1, @gre_key=0x9}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'dvmrp1\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x11, @rand_addr=0x64010100, @local, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x3c}, 0xff000000, 0xffffff00, 'veth0_virt_wifi\x00', 'vlan1\x00', {0xff}, {0xff}, 0x62, 0x2, 0x2b}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "b150"}}, @common=@ttl={{0x28}, {0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x12, @multicast1, @remote, @port=0x4e21, @port=0x4e23}}}}, {{@ip={@rand_addr=0x64010104, @dev={0xac, 0x14, 0x14, 0x25}, 0xff, 0x0, 'wg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x5c, 0x1, 0x74}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0xc, 0x1ff, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x5}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @local, @multicast2, @icmp_id=0x65, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@delqdisc={0x2c, 0x25, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0x2, 0xfff3}, {0xf, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010080}, 0x40880) 4.103030749s ago: executing program 1 (id=6353): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{&(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f00000002c0)="9dfdaab638c83cf986aaa45e5baee1202e5b26625ac496a3f93ea09ee0092d8e276a17b777c972245d8210c334a491ac8afa79f10f3a3d55e3b6140e285ac22f4b0db33d50cb87e293e0badb6432a156e912b74ed8cd0b19c7e5d7e99584218e9bdb7116c69461b04bed45ee95fee8724eb24df911e5ac7b39cbd5c34dab7f88626bf5d68e954b9795a0892338c16dcfe4b2c8319674e854b8b50579131ee4a55f0a5381f6536a85ab70beea9116c8a67a538ce6a836f7be3c2c87700b87b495774ed1855c5e6f4600e60b963536887f", 0xd0}, {&(0x7f0000000540)="30ad2570f655a17687c230da03a97dbc677efea9789f0c962ad3e8c2105c1cd21415d49c300f8f72956c35ff04c8b43d26f48ee538c4d073c63c0fed7330901b548244d4b19eca98b505246e6593fa3cf849cfd804829eff384e1bc79189c48073c92ac85f7eced87f5658d85b9b36d60a6221e867d0db09c2a67fec69e8fa2da99c7c6f3695ef856abccc56b7f0eb5a4e", 0x91}, {&(0x7f0000000600)="3d92389dbebc", 0x6}, {&(0x7f0000000640)="d62e8d75604f7efd526c202a79739ff636855a7fb11b0f00aed63fa13eb12b0856d079775b910dfb15b822db3fdd13c0eb3552dc74b26c0b32898dfd02be172e25401cb3a76acaa8badccd9d0738f7982e27142f682d26cc24a3bdf14f6f3a32679abd588dad793edc704b5224b2c0682015c1e68afeeb759974b86a82d24573a923e0d59c4bbfe4f9e9f051c834786d46196396e1e559bd39989f3dcb5aa44733930690da468e181ae5f033fe513c2db8f243ebf0f136ef95642f5ab15da6a22dad2c72bab196fe2e5bf56d2b97edd58d920818c8", 0xd5}, {&(0x7f0000000740)="6d7693b1d038a7e60ccab85f08509f7044106a0f701d50896793b1", 0x1b}], 0x5}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000800)="4de0189eec8513164db513f939007c32d67ec8eaee1340eee6053fd274db7f622f54cf0b2029f0af7669baee71f2b7c3e467fb01e176160a0ec9", 0x3a}, {&(0x7f0000000880)="a0dbd094860de034fcd2a3842aa980cb34f00a732282244db2099657e347091b1596ffcb639cf0ab464a7c21251514a86098fa660a9dcff89c9e5d704bedd9450fde659384139181a41be947585a7253a32b9eeecb896677a47dfda4d72807d16b55b8d4816791daf3c0d2000cccd8a495e9c0", 0x73}, {&(0x7f0000000900)="7ff01b95051862ef4a8c8ffe257c266a86d173d64a22f11060e88b900becf28b8c60501fea15ab716329350bc586c956eea749f25fa71eed651120aae00b00e7cf3d6f9b49f0aceeee886340b8d6a61e5d91801a82e833ab458a13c179ef52058704807f4f0f9784ecfdbb9e7b6b259a8f7b77d7c062b02f0832f2a957e286ada867bb5fc6bad88ba25641cec0858be7e76aca7144b3ab45b2180890603a5152639825e82df2e6c1b0be5e6c8ec830836df923e1970cb832c5066d81b62a45d63be6e2cb", 0xc4}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="373258f460b46a7d5471180c0cb96a73acd74c693e5ee9990ef1648458ae", 0x1e}, {&(0x7f0000001f00)="e5df6501884ea74bc4f08a84aba4d4788639e728a10184ba01b2b49280eaf3257f452a2bb9804ff264ce41a9b3e81d1aeec036c525769fdc045348ef6782f85153a615", 0x43}], 0x6}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000002000)}, {&(0x7f0000002040)="d4c1063ca478adacf1f65a5458", 0xd}], 0x2, &(0x7f00000020c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe2c}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x16, 0x3, 0x0, [{@remote, 0xffff}, {@rand_addr=0x64010102, 0x81}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0xa, [{@loopback, 0x2}, {@broadcast}, {@local, 0x9}]}, @generic={0x3, 0x5, "d35096"}, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x851}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xca}}], 0xc0}}, {{&(0x7f0000002180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002580)=[{&(0x7f00000021c0)="ef07fbc5bf0ba9f1e5cf321a5a0e4abf8697f96f2551a7596900182b076e640ef4302a445c9ae6b216f3ca1c6fac2650b99d13ec7589cdddead19a7d6caf9bcbcefbc34ad67e6c0dc585f3ab06926b383035d1382dc3c139f1a01e008a0b7e1a3f2ad9012aa3db7fd853125085e3c6ddb068b4996f02c8c846f86edaf1ed66a0d8b8e85eed3e79d8bf57d6", 0x8b}, {&(0x7f0000002280)="59d1ea6d5748d742f9ed6839d5b15f3e7125e9be05c5a4c259ba046e83c24a96904246d7e9d7fae356bbbabd46bee52a7f77238f568a2f23df83a122bf148f6b1c3ebdb4b557217768eadb0723189f9b2d44db9687b7f892d111", 0x5a}, {&(0x7f0000002300)="decaad6c3c9b773ff3eb8bbf81de5eed726b3e4a23c70de9513c06203b58243a43420bac1bef2d87b816978b0f9c3909313ef45da1419e24e0f31ad73577a032701f6723ce8b49a2425069545126c2cb1785ad0a0feac78f7770ce38d32b2eb67ae26d37e9731a", 0x67}, {&(0x7f0000002380)="5a2a11e23e0c2d932f336cbdea3784edbf43ac2d171f642ab5c5fe69328ea743d457c49df341d2864b083d7d8d6d08e15f694ac0984c14f0b66b153b32b3a0e5f84b4d9ac5937bf078064bc745c1af1e933e1c2a4794dd9b31c7568c2e2c09d2c6fd8a5693aa5aac695d5c9ae17afbea52de85d807b3700d04b994a4f136f3bfd930a22b72c17be677846c57acab6e5f9ca0183d8cec1c5b02cf96fa4ddd360552fbf0ba1f3309b17aff8b33a539606adbb20efc8481ede8f15e2c2105f4ec23a49a44c28b09cd9b8d7fde6134497b171664585d", 0xd4}, {&(0x7f0000002480)="81d5b7635f6cb2120d2fd9ac1dec9f1c249faa830dee60f6a604df67d4ea446ba394a81348112f8592c2a125c2b769683e82f926f16edf7ebe7e4c0fe01558663bdeeeba04b65a5cd59419adac454226d38ec3b92f9376eb412a876db8680fb17fad9cc2da9079e291af3d541b5a15b8c38b823910fe7c891f520610d28d709a0e5bb13680997dee73e0cc30bd49471fe8194b0680652f57acae46d6de69e3303e72470ec54f7ae9feb31a257e47e2a55e74a5914d8d50233138b2eff902ea8dd540486ed9aef582b1588a0852123e4b5bcc27b955ff1381f85e0c00", 0xdc}], 0x5, &(0x7f0000002600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x60}}, {{&(0x7f0000002680)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002bc0)=[{&(0x7f00000026c0)='@', 0x1}, {&(0x7f0000002700)="a978ae1a93fae723aaa5de41a33384ca6ac990dc46fa4ce14c826586bec6c15dafa9eeb8702131626c8cb3fef949fdfaab74eb9ee9537827f6164a8ee948ea46975b98802f5828964e77acca904edfb6628df65c4f02d1d6c654967bae30837f945f89bd87896a08eab1ca826882d1d5f826fb74f653cfb151e44964e84fdfba04ca41c76f21b71e6aaeb78cf947dcae72d4ad18b5380e0c722c0472e3c9203c6a7c47afc49b32575c4967fddbbdca5bd25bc989e0c3002e361b7d854cb58d7eda05dc8b10b39b5e1415ef75", 0xcc}, {&(0x7f0000002800)="f0d97c2222b3e78208e547f6e9639309998de7fe9e5827dc18678622476f757fb3506cd1fc0e73f16a4ffd41a453ae28fc8710bd2423e83e85ec0792993fcc4d9d27ab484514e0d71e29fca0cefbc2678e7be4c91c10eb33ad4c273473824247af45a1081bd976151e851127f7c08553ca9638f3ca001d9df33f0c7aa2eb9d52c7c86c12fcdf9c0b3ba37d5159e77cedfbda023879693d63c87ccb33fd4f9974ee2328079c0598b9ef9aac52ef4520eb3a137b20226564334e70d0305945fea746f5e2b9fccc267b14f3ffc764383f8a02810198674749aff94e9cb4722a4bd9d1bb1719098a55", 0xe7}, {&(0x7f0000002900)="0b86bc1835d2821f5dde0399de408a4e88218e58d926278c36b7130caa318ad1f4e22032fe9706d8f3c829a31916dab5938ecdc7cc763ad7002f0c63a7a2c6161aa147c5b6572411c51163499cc3159c88af319d5699b5d2c8592bfed1ddc13744929beb510a98f9f4d3019b14f358168709a12d39a4e52fbda20f7e2c6867f10ebda13fc485afc7ad0b8ad75006382f8839635e4126ec034e04305d17aa08e6c00eba036d69fb407786a5f6c7c0b5e082bff48d6c4757c46bdf7e74b61faf4ae151f1c411f6249812e078bd37fb267c4eaa4b39421a97afff190975de8c2964ba5f1aa230453fa18d", 0xe9}, {&(0x7f0000002a00)="f4bdc98ba0ca58b317f5ec90775ee86a191f754ee41763a3aecb6d3145d4a093f45dffc6b38eef3eea0bcaa91ad2d4576990926f98ed0add38932af1cdfe2734c4c89b388980dc670fac0adb850c7e62b1258907ba", 0x55}, {&(0x7f0000002a80)="e808e1b71eb0f4a796fffe0f7e187c048f112a80db4ef2264acaf930190efbe62ad474bbae5469df9a30f2d626ba47ebd341e4151c1687e91e1dd9a00d716c3437d231cd2d5bfa375b45cfed13562d16be78d61b98a919fdc9bb5635702c8d12863eaefdc07227189c9c961078594d87500a91a788bd9b86cde5e9b28151bab7f5fac33c8e87ef6aa8636cd67f55d3340cc13cc6a02dba", 0x97}, {&(0x7f0000002b40)="8037a3456bd18c0db0d0a2c9192713d2cb36df5d4bb7f5f70dacb3894185602f6147dcfab1d4a012d0eec9f1c825cde19b4181e267fc189cee9639e2da394de4f8ac18a3d30f2a251f46c93c38398ab801639ff23208", 0x56}], 0x7}}], 0x5, 0x4020) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f00000000c0), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000840)="7dc6c1e4019550edc59b2d768d0b", 0x0, 0x2f02, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.881934367s ago: executing program 3 (id=6355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x30bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x104, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf0, 0x1, [@m_ife={0xec, 0x1, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_METALST={0x6c, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x1f, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x104}}, 0x0) unshare(0x20000400) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000003940)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xff, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001280)=[@dstopts={{0x18, 0x29, 0x37, {0x2c}}}, @dstopts={{0x18, 0x29, 0x37, {0x16}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x26}}], 0x48}}], 0x1, 0x11) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r7, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x8c, r7, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x50}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x8c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000001840)={r9, @in6={{0xa, 0x4e22, 0x1, @remote, 0x4}}}, 0x84) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48011}, 0x0) socket$inet(0x2, 0x2, 0x0) 3.874112796s ago: executing program 0 (id=6356): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0xa}, {0xfff3, 0x10}}}, 0x24}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x5) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x6e2a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe0) listen(r0, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(0xffffffffffffffff, 0x101) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004810) shutdown(r0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="0232e6", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x33, 0x0, &(0x7f0000000640)) socket$nl_route(0x10, 0x3, 0x0) 3.720224818s ago: executing program 4 (id=6357): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x8c1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa100000000000007010000faffffffb702000008000000b70300000280007f720000000000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000180), 0x4) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091119a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x0, 0x24008004) sendmsg$key(r9, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x3) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'tunl0\x00'}) recvmsg(r10, &(0x7f0000002840)={&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/253, 0xfd}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/223, 0xdf}, {&(0x7f0000002540)=""/107, 0x6b}, {&(0x7f00000025c0)=""/178, 0xb2}], 0x9, &(0x7f0000002740)=""/247, 0xf7}, 0x40012140) 3.706478376s ago: executing program 3 (id=6358): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0xa}, {0xfff3, 0x10}}}, 0x24}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x5) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x6e2a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES64=r0, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xe0) listen(r1, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(0xffffffffffffffff, 0x101) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004810) shutdown(r1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000280)="0232e6", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x33, 0x0, &(0x7f0000000640)) socket$nl_route(0x10, 0x3, 0x0) 3.521971161s ago: executing program 3 (id=6359): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001980)=0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7fff}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x84}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, 0x0, 0x0) close(0x3) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x314}], 0x1}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r9, 0x0, 0x0, 0xc190, &(0x7f0000000040)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (fail_nth: 2) 3.478939805s ago: executing program 0 (id=6360): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x3}, 0x20004000) 3.327447025s ago: executing program 0 (id=6361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x1020) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.164027692s ago: executing program 3 (id=6362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x1020) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000400"], 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.005329622s ago: executing program 2 (id=6363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x1020) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.344344898s ago: executing program 4 (id=6364): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000001240)=ANY=[@ANYBLOB], 0x128}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000003700000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000001080)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f00000010c0)=0x2000, 0x4) r12 = openat$cgroup_ro(r10, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) readv(r12, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 2.245953982s ago: executing program 1 (id=6365): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x1020) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.675352445s ago: executing program 3 (id=6366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x262000, 0x0) vmsplice(r0, &(0x7f0000000800)=[{0x0}, {0x0, 0x9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x100000000000027d, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'pimreg\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket(0x10, 0x6, 0xfffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES64=r1, @ANYRESOCT], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000900000073110a000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x30}, 0x4000000) r4 = socket(0x10, 0x80003, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r7, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8], 0x24}}, 0x0) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000300)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) r10 = socket$nl_audit(0x10, 0x3, 0x9) splice(r5, 0x0, r10, 0x0, 0x2, 0x8) write(r4, &(0x7f0000000440)="24067a5a73cc88e73ef9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000480001002abd7007ffdbdf250a008000669e0fe4ea", @ANYRES32=0x0, @ANYBLOB='\r\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4048491}, 0x24004810) 1.674066337s ago: executing program 4 (id=6367): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x26, 0x301, 0x70bd29, 0x25dfdbfd, {0x20}, [@nested={0x10, 0x131, 0x0, 0x1, [@nested={0xc, 0x15f, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @binary="4245fbf0"}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) read$alg(r3, 0x0, 0x0) write$cgroup_devices(r3, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="93ec8b5d94e00000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r4, 0x5a2d4000) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0xc) connect$vsock_stream(r5, &(0x7f0000000100), 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) close(r8) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001014d9ec2904000000000000080001000000000000000000000000004407e9233a69"], 0x20}, 0x1, 0x0, 0x0, 0x20006905}, 0x4004080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0x1000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000300), &(0x7f0000000340)='%pS \x00'}, 0xffffffffffffff39) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000f40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)={0x6c0, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x35c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2a4, 0xe, 0x0, 0x1, [{0x62, 0x0, "e4a700684307b4944db760acf1078fce3c36dd9e4a27164aae8786c88c1e90852be4248637467d0a210e7855db5892b7c85f754712245c5d27297c589b809800785f5c354895e58366a50e732ad93f6b82c8970bf6fa8db29594e50c255c"}, {0xd9, 0x0, "236685d08ae75ff1f23de7a86ab90c674cff1db083fd0ecd603639d4e91a80347e9e58017878c726308ea18709be950197033afbc68f190d54c292cb644f7862665f5cd78c95f48997af1475aaa601790bf77501cc57e63e8781fa2d401162364e0c3db68bb1834f7116e82d2423fb6b97134a20d4551c212a89891ad07a9a6773736fec135f40881e2e70149710156081d468788797d8f7ac2ffe6fa1c02b81311e0fc9c279182ac79bcab63307d18d2fb77ebb8874c482e2d539dd0270a61df66ef500ab3e7e209f6101ab7f11dacd8b1823d772"}, {0xb2, 0x0, "5d19420c7f6a986d21e914b2a406d32548bc156a443e7ad82012dc732d63d36abccdec9c9e7dc7466f411ff199b1d1477654a312fbfc9eb0a17b26175c7590590d6dd234d44fcace2e625e0fe36cbd4bb859d5d12efa78130fc7faea8562a71a4ff56d5fead05de3621d40b72bb56c638552f95727d74b08640e25a042d0f12b29600965e7cf8543bb9047ccc56641ffb4a904ce500f04a7a2fb4e7cb2e753375846982c5af6573aa97735780288"}, {0x3e, 0x0, "f18b9eade5de61073ad2116625c4b0da87f3439b90d6dec0128ec14536f7edda4737d7da4f1834bb3344119f79479b7649de0f0171874bd2cfb2"}, {0x37, 0x0, "70fe19ff761ad6f7def8fa9c5466fff40c76809f743150f9becf797aa88425b43a03734f0b4319aa60013e9f4130ba76b6c1d2"}, {0x4}, {0x2e, 0x0, "4445269b9678860816e8d3fe747ba4a567da7ff2da731c0fbd6d34fc73e1412d4a3dd0d9eef58591350e"}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x94, 0xd, 0x0, 0x1, [{0x4}, {0x8c, 0x0, "266b3986247f30e254ecd626f99b71bcebdb8fb2b76011aa576d4cddbdfb3da1091e1c041fe25e863a4139e2a3c4211b8ce77da23f46bfc6a838d3cf4e0d3342c67473081b9a89b3a71d66e7ad9b07c60ca64e2afa30da7980a5463e0a0f990ac7180327cf4e865e08dff5825a994448e80c131c40f569830347caa2aba066b9d4f74df8fe70710e"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x1dc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xe}, @NL80211_NAN_FUNC_SRF={0x1d0, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "8e1c47a6c8ed659602fd05514e71c2577155d5a96ff2807be3bd23a305f9784afcc6ea2dc1eefd8cd55cb076283105f2bbd0ebdb9d898a9ffb6118e20b39ccb695eadaa5d33eac8642f6a0d96ffb0d9315f7e968064f4d822c8612541fa827d6ee80ce409819680cb0cdc3c6d5a377f7f3046cc52d39a9147151470e24292fe73e8e75551ff86471934abb6aeb1f580c5ca095ce0eac3d5ff4875fc90e688acb7f82a75d375c97517262bc9a694a2105a98ca1ebfb0a49a75a01638eebd4a8857b989dab33381d45d5a17bc22a63972876fbb8c9468ea48c1810af619c8052971a52f96d58d26150812f88fc2c60f01e7a7b2644fe5ad7981cf5e54f214143"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}, @NL80211_NAN_SRF_MAC_ADDRS={0x88, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9a}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xd7}]}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "bf4e5c66fb1b"}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x134, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x12c, 0xe, 0x0, 0x1, [{0xd4, 0x0, "4b913629dee4590f5fa88a4e4afd2f670d332167878037f8838860cb930100521a49caf8f689a076090ed47010e4dc532c02c04b4f99317bcedadde9662bb1fee5e16438d1da6d2b279906effb3b639306104a5e78d48cf9479f7de3346aa369429e2de17222d7d7f404665bd29404d8d074bb20317bc7b818089abf6bc6595ba54b5ef018d315caf07efd11bf4f198d6ccf7a74e2bd6c765f83b4d723be3132640c2b02e5a5588cf1f9071bfc4473d5ef37e1defa67bff890b51e618793db04588b22f4ce4c5868e5fd054328eb84ef"}, {0x52, 0x0, "6ed63326810c9ea3b5904329839e1cad0b18435eaaf771ee9eeb8d766dd649cdb42dca90fb58467966e4b12f945a313a707f59d170cc512f640dcade3526e317e70353ed354a10b80c88cd32bb16"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}]}, 0x6c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r11, 0x1, 0x19, 0x0, &(0x7f0000000280)) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r1) 1.257786983s ago: executing program 0 (id=6368): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000063010800000000029500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.25564461s ago: executing program 2 (id=6369): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x894, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x2, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x1, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x75b, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3bf0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x9, 0x3, 0xa088, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xaa84911, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x9, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0xf, 0x0, 0x7c, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x894}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r6, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)={0x2c, r9, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x8, 0x8, 0x28, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0xdfd, 0x7}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x0, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1, 0x0, 0x80000000, 0x3}}) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd4, r9, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a0100010073797a310000000008000540000000020900fffffc0800034000000130140000001100010000000000000000000100000a00"/108], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 746.101781ms ago: executing program 4 (id=6370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x30bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x104, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf0, 0x1, [@m_ife={0xec, 0x1, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_METALST={0x6c, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x1f, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x104}}, 0x0) unshare(0x20000400) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000003940)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xff, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001280)=[@dstopts={{0x18, 0x29, 0x37, {0x2c}}}, @dstopts={{0x18, 0x29, 0x37, {0x16}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x26}}], 0x48}}], 0x1, 0x11) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r7, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x8c, r7, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x50}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x8c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000001840)={r10, @in6={{0xa, 0x4e22, 0x1, @remote, 0x4}}}, 0x84) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48011}, 0x0) socket$inet(0x2, 0x2, 0x0) 623.596224ms ago: executing program 1 (id=6371): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xf}, {0x0}], 0x4}, 0x20004000) 591.996813ms ago: executing program 0 (id=6372): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b", 0x8) 458.189916ms ago: executing program 3 (id=6373): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="e80000000d0a010800000000000000000a0008010900020073797a31000000000900010073797a3100000000bc000380b8000080080003"], 0xe8}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff4fba}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 444.779136ms ago: executing program 0 (id=6374): r0 = socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) r4 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x2017be01}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x9c28}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1f, 0x1, 0x5, 0x0, 0xffffff8b}, 0xc) 414.570557ms ago: executing program 2 (id=6375): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989"], 0x1000f) 312.935206ms ago: executing program 4 (id=6376): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='bridge_slave_0\x00', 0x10) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x4, @empty, 0x6, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x30}}, {{&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x7f, 0x8, "74dd403071c3073a9c84d5c7d21958613b4ad9b4529ae91845b7305f675764c0c05838ac6cd218a4ca3a7db10a0264c7d3652a29da6a67e701c6f39c484eee", 0x32}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="d9a00ca954f7da546eea4903031a8d8a384e6d1bfd6da2a0cb482b7697efd011f23e0ce0c73783431f59208cb9", 0x2d}, {&(0x7f0000000440)="e1a69b81764653d31e508fc163d610ca55e7b2823e4252c232fde9581c3db36dc85b3cd58096a705d98b9f0c84ff62fe44dae287c17d5c53", 0x38}, {&(0x7f00000004c0)="cc86644dcb35c57780b7725ca98bd69c9e3454026bb9370a71e220a45babe30e4f9d36fd35ef42aa7f51c10bff02d72662e6daac23dd7666bb16c6885f3809d4165b2d1554f5de7a5c43d0139f2ba18824b988077ad142281c2d97beeb22245c204701b36761be3f0942fd19be2eaea06733f68cc92f309e877fabf6b2d912278af9b0c52c660b9890c035010dc17d7723a647187db59a1c1a4863685596c904e9cea9f157d59e89049734d8fb94a30251c9965842b6384cee4dc45cf6", 0xbd}, {&(0x7f0000000600)="e4176f4b7be17df4b0cc6ff62ca07818d3c496d58dd1ce4ee045dde2bb20225bf7284b34e7a7bb6178d9d8878df2d2b922782e3b9b929b1d7a97a03863ca80bab1595d6ec40f39eaade15a3356e5c9a26211a25dc9defb260e7483aaf577b1c88fd8ce4231659caa49123f621ba8c6ce9d5af48a85bfb0f635d4ea1c1b9d6246fbb3b8d8e0481eda4c6fd10641fedd48f649c4b769c53807d46c441bbea1ad852ad91847e7f7dc33d23d7139f24761d59c3f7572f26f17759380376cbf4b", 0xbe}], 0x4}}, {{&(0x7f0000000700)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000900)="8c41f112558ace7a7b1dd19a60abea8cf0dcd7d6a67e46c608d26b6b591155e66aa5c612d945a5f409a54994ec5395db64082408f81b2a60d2a7fd70b4418e293dfb1deea1fe1030916d6f88c2bf8aec5b4ed8badb45a254dbb49bdc8bc5e454888a9a5f491f1ec9590724251be845cf348d4eab11b8fbea48afc1987a8d9f5295486fac37ed04de4531aa5a6adb0ec1eca450", 0x93}, {&(0x7f00000009c0)="e722db923fcbc9d91af20048ad0dbe5bc27a378377eba2ff9c789ad140537a90f7c113f2f466d1b4961917aaf3effe751e1704e0ba7660eec72869dbc656a6d887f7fd220aea281ebb71b95f6fe9554b2e41f1be65585dce2488c00de99dc94c605454fc75aba4f40b675dc269122b4f6bb072a7d3d1dd6df9f56b6d8910eda2f99f80bd1bafe357f4ae445aa210dd7beb8ae2c67418f083eb6e2d519ca245ab82172efbecab6988920a4e57773c7d8b9b61cc92f3e1c86d21ab3dd9e9eba555f1cdc921f80416209912ce53", 0xcc}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002540)="4e58b7481e3494e8ed0640a37f0209cd8932d8ee1f25dfd2df5fd413c4c952fc4e55722fd907b791b019225ec34795fa8979139157da950dacbc3a78366d231247269c19898603db688488fa3280204b4a04fda83088f6a1435d51", 0x5b}, {&(0x7f00000025c0)="ea450a6c72de1cf10c1a67261d08c87f5a1c6262dd82647f2f2618f4de3b593ffd91aa9753c2ddc6b3cc463279614d7054a2c4748c443abb60d9b92b8b5233b870b5e5418f3e4b0913faa9ade1650b7122cd2774dba874411f6f85881f4cfcc710a6cf2b8d7e019343b004911a4ce611add1b344d8c269a88b9255ee206539a75e66afb0ed5df7d7284eee1514b49be542fa5505c7c42a0766d8f771ab1f8ecdfb0fa92e42e65406199880f6fef1e5b9", 0xb0}], 0x6}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x30}}], 0x5, 0x0) shutdown(r0, 0x0) write(r0, &(0x7f0000000100)="993c8ea83229bdfb6cd043d009", 0xd) (fail_nth: 2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x29, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'hsr0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x5e4}}, 0x24040100) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r3, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000000)=@ethtool_cmd={0x3c, 0x6, 0xc, 0x8, 0x8, 0x8, 0x0, 0x0, 0xf7, 0x2, 0x805, 0xf, 0x5, 0xfe, 0xf, 0x9, [0xfffffff7, 0x1]}}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x1000010, 0x1) bind$xdp(0xffffffffffffffff, &(0x7f0000001400)={0x2c, 0x1a}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044800}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) 261.438618ms ago: executing program 2 (id=6377): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000001240)=ANY=[@ANYBLOB], 0x128}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000003700000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000001080)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f00000010c0)=0x2000, 0x4) r12 = openat$cgroup_ro(r10, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) readv(r12, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 0s ago: executing program 4 (id=6378): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000b1d4000039459cc397f5685942d30f85c5e3c0974e4958a7fe59f75d52c0b9b642d80f7533eec2b33c8f22d6ba033cced1e9c0ff694f2f1a3da50cdba5654fbc07203724bb7b5be15bc278d8f972909879fda6cc844a567514078011d2d70df26b29ea6e1aa815ce51eef2a9ffaf3e231ccfa9ce4f58da4458d202fd6ccd6e911fcb2091e275ccad25922457f6660e5d020d52efd0b8c09d359f24a05f32ae48a644172c8e5f6f0b"], &(0x7f00000000c0)='syzkaller\x00', 0x9034, 0xa2, &(0x7f00000002c0)=""/162, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x9, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x4, 0x4, 0x6, 0xe}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x4e24, 0x9, @mcast1, 0x55}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000040", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), r10) sendmsg$NLBL_MGMT_C_REMOVE(r10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7100fcdbdf25020000000b0001005c5b3a57"], 0x20}}, 0x4c880) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r10, &(0x7f0000001340)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001300)={&(0x7f0000000e80)={0x430, r12, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e404618}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a4e083f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x511533f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ad993a7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26954623}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf633ba0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9d841b4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x412a855d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50a7cb0d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd330abe}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f3fe0c7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e3cef1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a3fa2ab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c49d189}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6be8b6b1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d45be36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23681620}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b5be599}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3327808}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c326575}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x601adbc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10673a8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4686268b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7af0b6cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63f36c99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x363fc72d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x197d3580}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64c3d239}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xba19335}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46c7523e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ff75b79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x550c070b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x293ea568}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8dec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x581e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f6d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74854b92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b88cec3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d2e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7399ed7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc42c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x228cb9b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76174de4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4876f34f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18fb5ad8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x438c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f6f7d04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19c5ffd2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb3f8ca1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4faa1062}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4806}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe92e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8464}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda84}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xced0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x171ff33}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dfbf008}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x753c7b008a227ba8}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x2}]}]}, 0x430}}, 0x4081) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x2002, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r14], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000b9fc0b0438c2707000000020000000000"], 0x0, 0x1a, 0x0, 0x1}, 0x28) kernel console output (not intermixed with test programs): an invalid length. [ 973.308683][T25455] netlink: 'syz.1.5611': attribute type 3 has an invalid length. [ 973.308704][T25455] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5611'. [ 973.317102][T25454] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5611'. [ 973.353070][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.374243][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5608'. [ 973.409502][T25446] IPVS: Scheduler module ip_vs_ not found [ 974.785852][ T5621] net_ratelimit: 200 callbacks suppressed [ 974.785876][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.845513][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.845739][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.846014][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.861484][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.861749][T25487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.038994][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 975.080539][T25494] netlink: 'syz.3.5619': attribute type 1 has an invalid length. [ 975.159686][T24897] openvswitch: cpu_id mismatch with handler threads [ 975.187975][T25494] bond1: entered promiscuous mode [ 975.188580][T25494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.368961][T25494] ipvlan2: entered allmulticast mode [ 975.368988][T25494] bond1: entered allmulticast mode [ 975.399650][T25500] ipvlan3: entered allmulticast mode [ 975.517182][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 975.538744][T25505] bond1: (slave bridge1): making interface the new active one [ 975.538772][T25505] bridge1: entered promiscuous mode [ 975.539005][T25505] bridge1: entered allmulticast mode [ 975.568431][T25505] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 975.605525][T24897] openvswitch: cpu_id mismatch with handler threads [ 975.642319][T25519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5625'. [ 975.642348][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5625'. [ 975.720933][T25512] IPVS: Scheduler module ip_vs_ not found [ 975.826954][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.881746][T25520] __nla_validate_parse: 3 callbacks suppressed [ 975.881771][T25520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5623'. [ 975.881798][T25520] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 975.942140][T25532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 975.961325][T25532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 976.058841][T25534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5630'. [ 976.058950][T25534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5630'. [ 976.320360][T25539] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 976.510049][T25539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5631'. [ 976.800754][T25548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5632'. [ 976.800891][T25548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.860444][T25548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.012036][T25552] tipc: Enabling of bearer rejected, already enabled [ 977.025477][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 977.322560][T25564] tipc: Enabling of bearer rejected, failed to enable media [ 977.468716][T25571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5640'. [ 977.471105][T25566] IPVS: Scheduler module ip_vs_ not found [ 977.552121][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5642'. [ 977.571592][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5642'. [ 978.447984][T25599] tipc: Enabling of bearer rejected, already enabled [ 979.079149][T25622] sctp: [Deprecated]: syz.4.5656 (pid 25622) Use of int in maxseg socket option. [ 979.079149][T25622] Use struct sctp_assoc_value instead [ 979.361256][T25635] IPVS: Scheduler module ip_vs_ not found [ 979.428734][T25644] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:21 [ 979.441853][T25647] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 979.457976][T25642] tipc: Enabling of bearer rejected, already enabled [ 979.529829][T25651] IPVS: stopping master sync thread 25647 ... [ 979.796978][T25652] net_ratelimit: 121 callbacks suppressed [ 979.797004][T25652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.797472][T25652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.799458][T25652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.799941][T25652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.800895][T25652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.802605][T25652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.803205][T25652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.804551][T25652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.808593][T25652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.811091][T25652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.544906][ C1] openvswitch: cpu_id mismatch with handler threads [ 980.948404][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 981.117915][T25682] __nla_validate_parse: 4 callbacks suppressed [ 981.117941][T25682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5675'. [ 981.117960][T25682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5675'. [ 981.480876][T25696] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5680'. [ 981.480909][T25696] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5680'. [ 981.480925][T25696] netlink: 'syz.1.5680': attribute type 6 has an invalid length. [ 981.480940][T25696] netlink: 'syz.1.5680': attribute type 5 has an invalid length. [ 981.480954][T25696] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5680'. [ 981.654463][T25709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5678'. [ 981.654600][T25694] IPVS: Scheduler module ip_vs_ not found [ 981.957125][T25715] bond4: option updelay: invalid value (18446744073709518847) [ 981.957156][T25715] bond4: option updelay: allowed values 0 - 2147483647 [ 981.973918][T25715] bond4 (unregistering): Released all slaves [ 982.933721][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5687'. [ 983.099888][T25745] netlink: 'syz.3.5689': attribute type 1 has an invalid length. [ 983.099916][T25745] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5689'. [ 983.308579][T25756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5693'. [ 984.664279][T25806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5702'. [ 984.928178][T25821] sctp: [Deprecated]: syz.3.5705 (pid 25821) Use of int in maxseg socket option. [ 984.928178][T25821] Use struct sctp_assoc_value instead [ 984.996219][ C0] net_ratelimit: 103 callbacks suppressed [ 984.996246][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 985.147034][T25827] IPVS: Scheduler module ip_vs_ not found [ 985.172431][T25827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.172775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.188286][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.289801][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 985.374882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.380662][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.425010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.505051][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.887621][T25825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.059435][T25856] sctp: [Deprecated]: syz.4.5715 (pid 25856) Use of int in maxseg socket option. [ 986.059435][T25856] Use struct sctp_assoc_value instead [ 986.481766][T25882] __nla_validate_parse: 12 callbacks suppressed [ 986.481791][T25882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5723'. [ 986.481808][T25882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5723'. [ 986.486117][T25882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5723'. [ 986.486140][T25882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5723'. [ 986.785141][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 986.976394][T25889] x_tables: duplicate underflow at hook 2 [ 987.161699][T25896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5728'. [ 987.460628][T25899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5730'. [ 987.489176][T25899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5730'. [ 987.489732][T25899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5730'. [ 987.669309][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5732'. [ 987.752969][T25902] IPVS: Scheduler module ip_vs_ not found [ 987.763578][T25899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5730'. [ 990.249761][T25972] IPVS: Scheduler module ip_vs_ not found [ 990.343722][T25958] net_ratelimit: 213 callbacks suppressed [ 990.343745][T25958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.343937][T25958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.385098][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.945209][T26003] netlink: 'syz.0.5756': attribute type 10 has an invalid length. [ 990.974229][T26003] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.990837][T26003] bond0: (slave team0): Enslaving as an active interface with an up link [ 991.244541][T26007] Cannot find set identified by id 65534 to match [ 991.336702][T26009] bridge_slave_0: left allmulticast mode [ 991.336735][T26009] bridge_slave_0: left promiscuous mode [ 991.340525][T26009] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.380732][T26009] bridge_slave_1: left allmulticast mode [ 991.380762][T26009] bridge_slave_1: left promiscuous mode [ 991.381045][T26009] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.410861][T26009] bond0: (slave bond_slave_0): Releasing backup interface [ 991.425555][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.428039][T26009] bond0: (slave bond_slave_1): Releasing backup interface [ 991.449394][T26009] team0: Port device team_slave_0 removed [ 991.459462][T26009] team0: Port device team_slave_1 removed [ 991.460061][T26009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.460083][T26009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.462392][T26009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.462414][T26009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.478763][T26009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 991.562444][T26011] team0: Mode changed to "loadbalance" [ 991.566798][T26012] __nla_validate_parse: 22 callbacks suppressed [ 991.566818][T26012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5761'. [ 991.566833][T26012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5761'. [ 991.608673][T24896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.929196][T26033] IPVS: lc: FWM 3 0x00000003 - no destination available [ 992.392548][T26045] IPVS: Scheduler module ip_vs_ not found [ 992.408991][T26045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5769'. [ 992.465102][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.993086][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5774'. [ 992.993114][T26062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5774'. [ 993.018129][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5774'. [ 993.018157][T26062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5774'. [ 993.025217][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 993.109890][T26066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.110047][T26066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.227630][T26069] tipc: Enabling of bearer rejected, already enabled [ 993.330337][T26072] veth1_to_team: entered promiscuous mode [ 993.342309][T26072] veth1_to_team: left promiscuous mode [ 993.594510][T26072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5778'. [ 993.993506][T26088] netlink: 'syz.2.5782': attribute type 12 has an invalid length. [ 993.993536][T26088] netlink: 'syz.2.5782': attribute type 29 has an invalid length. [ 993.993551][T26088] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5782'. [ 994.686137][T26102] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 994.695421][T24896] openvswitch: cpu_id mismatch with handler threads [ 994.706862][T26102] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 994.777837][T24896] openvswitch: cpu_id mismatch with handler threads [ 995.041039][T26105] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5786'. [ 995.589168][T13583] net_ratelimit: 200 callbacks suppressed [ 995.589194][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.617300][T26128] IPVS: Scheduler module ip_vs_ not found [ 995.735070][T26135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.735209][T26135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.793861][T26137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.142360][T26142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.142566][T26142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.163011][T26142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.172759][T26142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.172959][T26142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.194459][T26142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.229305][T26174] veth1_to_team: entered promiscuous mode [ 997.247325][T26174] veth1_to_team: left promiscuous mode [ 997.518926][T26174] __nla_validate_parse: 5 callbacks suppressed [ 997.518949][T26174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5801'. [ 997.679732][T26180] netlink: 'syz.0.5803': attribute type 1 has an invalid length. [ 997.794836][T26180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 997.824920][ C1] openvswitch: cpu_id mismatch with handler threads [ 997.954086][T26186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5802'. [ 997.954118][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5802'. [ 997.963907][T26186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5802'. [ 997.963931][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5802'. [ 998.234389][T26194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5808'. [ 999.337632][T26230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5816'. [ 999.465918][T26235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'. [ 999.465946][T26235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5818'. [ 999.466875][T26235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'. [ 1000.715160][T24898] net_ratelimit: 201 callbacks suppressed [ 1000.715186][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.796593][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.027777][ T1974] block nbd1: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 300 seconds [ 1001.027825][ T1974] block nbd1: Possible stuck request ffff888026f001c0: control (read@1024,1024B). Runtime 300 seconds [ 1001.027852][ T1974] block nbd1: Possible stuck request ffff888026f00380: control (read@2048,1024B). Runtime 300 seconds [ 1001.027887][ T1974] block nbd1: Possible stuck request ffff888026f00540: control (read@3072,1024B). Runtime 300 seconds [ 1001.722309][T26296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1001.825060][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.642565][T15070] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1002.660190][T15070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1002.663085][T15070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1002.688647][T15070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1002.694878][T15070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1002.868939][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.999527][T26311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.999720][T26311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.999977][T26311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.002440][T26311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.002647][T26311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.014245][T26325] __nla_validate_parse: 2 callbacks suppressed [ 1003.014265][T26325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5838'. [ 1004.096839][ T42] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.096886][ T42] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.403486][ T42] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.403519][ T42] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.713797][ T42] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.713837][ T42] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.785291][ T5631] Bluetooth: hci1: command tx timeout [ 1004.904595][ T42] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.920165][ T42] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.751822][T26393] net_ratelimit: 187 callbacks suppressed [ 1005.751921][T26393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.752496][T26393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.752747][T26393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.766993][T26393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.767170][T26393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.768176][T26393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.772487][T26393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.798704][T26393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.799023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.838642][T26395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.232375][ T42] bridge_slave_1: left allmulticast mode [ 1006.232409][ T42] bridge_slave_1: left promiscuous mode [ 1006.232874][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.330600][ T42] bridge_slave_0: left allmulticast mode [ 1006.330633][ T42] bridge_slave_0: left promiscuous mode [ 1006.330873][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.497570][ T42] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1006.502597][ T42] batman_adv: batadv0: Interface deactivated: gretap1 [ 1006.866482][ T5631] Bluetooth: hci1: command tx timeout [ 1006.976401][ T42] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1006.980341][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5855'. [ 1007.077092][T26426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5854'. [ 1007.319024][ T42] batman_adv: batadv0: Removing interface: gretap1 [ 1007.553614][ T42] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1007.553647][ T42] bridge1 (unregistering): left promiscuous mode [ 1007.553666][ T42] bridge1 (unregistering): left allmulticast mode [ 1007.628847][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.647309][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.651573][ T42] bond0 (unregistering): Released all slaves [ 1007.721394][ T42] bond1 (unregistering): Released all slaves [ 1007.779383][ T42] bond2 (unregistering): Released all slaves [ 1007.822139][ T42] bond3 (unregistering): (slave veth5): Releasing active interface [ 1007.830949][ T42] bond3 (unregistering): Released all slaves [ 1007.875355][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1008.103662][ T42] tipc: Disabling bearer [ 1008.103805][ T42] tipc: Left network mode [ 1008.870165][T26463] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5861'. [ 1008.946867][ T5631] Bluetooth: hci1: command tx timeout [ 1009.515491][T26316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.515633][T26316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.515805][T26316] bridge_slave_0: entered allmulticast mode [ 1009.517054][T26496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1009.526943][T26316] bridge_slave_0: entered promiscuous mode [ 1009.533505][T26316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.533878][T26496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1009.535087][T26316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.535259][T26316] bridge_slave_1: entered allmulticast mode [ 1009.538090][T26316] bridge_slave_1: entered promiscuous mode [ 1009.579935][T26496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1009.579961][T26496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1009.694347][T26316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.782444][ T42] hsr_slave_0: left promiscuous mode [ 1009.787583][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.787610][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.831389][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.831429][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.951962][ T42] veth1_macvtap: left promiscuous mode [ 1009.952013][ T42] veth0_macvtap: left promiscuous mode [ 1009.952172][ T42] veth1_vlan: left promiscuous mode [ 1010.918685][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1010.933651][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1011.035664][ T5631] Bluetooth: hci1: command tx timeout [ 1011.087052][T26316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.124886][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1011.185029][T13583] net_ratelimit: 342 callbacks suppressed [ 1011.185052][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.189043][T26316] team0: Port device team_slave_0 added [ 1011.309473][T26316] team0: Port device team_slave_1 added [ 1011.407732][T26316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.407753][T26316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.407779][T26316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.457125][T26316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.457144][T26316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.457167][T26316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.493643][T26539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5871'. [ 1011.734148][T26551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.907585][T26556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5878'. [ 1011.909759][T26316] hsr_slave_0: entered promiscuous mode [ 1011.919033][T26316] hsr_slave_1: entered promiscuous mode [ 1011.984100][ T42] IPVS: stop unused estimator thread 0... [ 1012.225221][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.323870][T26561] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5879'. [ 1012.513962][T26568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5880'. [ 1012.639330][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.639641][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.641889][T26568] FAULT_INJECTION: forcing a failure. [ 1012.641889][T26568] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.641931][T26568] CPU: 1 UID: 0 PID: 26568 Comm: syz.3.5880 Not tainted syzkaller #0 PREEMPT(full) [ 1012.641956][T26568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1012.641970][T26568] Call Trace: [ 1012.641980][T26568] [ 1012.641990][T26568] dump_stack_lvl+0xe8/0x150 [ 1012.642028][T26568] should_fail_ex+0x410/0x560 [ 1012.642060][T26568] should_failslab+0xa8/0x100 [ 1012.642095][T26568] __kmalloc_cache_noprof+0xa3/0x600 [ 1012.642121][T26568] ? kobject_uevent_env+0x289/0x9e0 [ 1012.642145][T26568] ? kobject_uevent_env+0x289/0x9e0 [ 1012.642169][T26568] ? __pfx___up_read+0x10/0x10 [ 1012.642200][T26568] kobject_uevent_env+0x289/0x9e0 [ 1012.642233][T26568] __kobject_del+0xd1/0x310 [ 1012.642258][T26568] kobject_put+0x23a/0x550 [ 1012.642296][T26568] netdev_queue_update_kobjects+0x5c9/0x6b0 [ 1012.642360][T26568] netif_set_real_num_tx_queues+0x265/0xa30 [ 1012.642403][T26568] __tun_detach+0xf05/0x1900 [ 1012.642455][T26568] tun_chr_close+0x10a/0x1c0 [ 1012.642478][T26568] ? __pfx_tun_chr_close+0x10/0x10 [ 1012.642502][T26568] __fput+0x418/0xa50 [ 1012.642539][T26568] fput_close_sync+0x11f/0x240 [ 1012.642566][T26568] ? __pfx_fput_close_sync+0x10/0x10 [ 1012.642607][T26568] __x64_sys_close+0x7e/0x110 [ 1012.642637][T26568] do_syscall_64+0x166/0x520 [ 1012.642665][T26568] ? trace_irq_disable+0x3b/0x140 [ 1012.642696][T26568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.642719][T26568] ? clear_bhb_loop+0x70/0xc0 [ 1012.642746][T26568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.642768][T26568] RIP: 0033:0x7f036ab9e159 [ 1012.642790][T26568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.642809][T26568] RSP: 002b:00007f036ba8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1012.642833][T26568] RAX: ffffffffffffffda RBX: 00007f036ae25fa0 RCX: 00007f036ab9e159 [ 1012.642850][T26568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1012.642864][T26568] RBP: 00007f036ba8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.642878][T26568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.642891][T26568] R13: 00007f036ae26038 R14: 00007f036ae25fa0 R15: 00007ffd81307af8 [ 1012.642927][T26568] [ 1012.705301][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.738165][T24896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.876768][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.279409][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.413082][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1014.305013][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.417302][T26647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5893'. [ 1015.944994][T26316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1015.952790][T26316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1015.960939][T26316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1015.993106][T26316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1015.996290][T26316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1016.013180][T26316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1016.030668][T26316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1016.048540][T26316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1016.385155][ T5621] net_ratelimit: 2 callbacks suppressed [ 1016.385178][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.474323][T26316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.618946][T26316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.659896][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.660020][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.695729][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.695854][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.930210][T26707] netlink: 'syz.3.5901': attribute type 10 has an invalid length. [ 1017.029342][T24896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.224602][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5902'. [ 1017.235054][T26717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5902'. [ 1017.237296][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5902'. [ 1017.237321][T26717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5902'. [ 1017.425116][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.686714][T26727] netlink: 'syz.1.5904': attribute type 1 has an invalid length. [ 1017.868094][T26727] bond1: entered promiscuous mode [ 1017.868631][T26727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1017.901870][T26730] macvtap1: entered allmulticast mode [ 1017.902238][T26737] tipc: Enabling of bearer rejected, already enabled [ 1017.937598][T26738] bond1: (slave bridge3): making interface the new active one [ 1017.937628][T26738] bridge3: entered promiscuous mode [ 1017.941324][T26738] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 1018.466538][T13585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.512178][T26772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5911'. [ 1018.553024][T26759] IPVS: Scheduler module ip_vs_ not found [ 1018.651237][T26759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.651573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.796043][T26316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.854966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.858049][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.904857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.947951][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.230943][T26797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5916'. [ 1019.494879][T26806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5916'. [ 1020.071491][T26806] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1020.100536][T26806] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1020.559930][T26823] tipc: Enabling of bearer rejected, already enabled [ 1020.570240][T26316] veth0_vlan: entered promiscuous mode [ 1020.596744][T26316] veth1_vlan: entered promiscuous mode [ 1020.763667][T26316] veth0_macvtap: entered promiscuous mode [ 1020.794510][T26316] veth1_macvtap: entered promiscuous mode [ 1020.911763][T26836] FAULT_INJECTION: forcing a failure. [ 1020.911763][T26836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.911801][T26836] CPU: 0 UID: 0 PID: 26836 Comm: syz.3.5923 Not tainted syzkaller #0 PREEMPT(full) [ 1020.911824][T26836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1020.911837][T26836] Call Trace: [ 1020.911856][T26836] [ 1020.911867][T26836] dump_stack_lvl+0xe8/0x150 [ 1020.911908][T26836] should_fail_ex+0x410/0x560 [ 1020.911938][T26836] _copy_from_user+0x2d/0xb0 [ 1020.911966][T26836] __sys_bpf+0x2e7/0xd90 [ 1020.911999][T26836] ? __pfx___sys_bpf+0x10/0x10 [ 1020.912034][T26836] ? __fget_files+0x2a/0x420 [ 1020.912080][T26836] ? ksys_write+0x242/0x270 [ 1020.912113][T26836] ? __pfx_ksys_write+0x10/0x10 [ 1020.912149][T26836] __x64_sys_bpf+0xba/0xd0 [ 1020.912175][T26836] do_syscall_64+0x166/0x520 [ 1020.912200][T26836] ? trace_irq_disable+0x3b/0x140 [ 1020.912220][T26836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.912242][T26836] ? clear_bhb_loop+0x70/0xc0 [ 1020.912267][T26836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.912288][T26836] RIP: 0033:0x7f036ab9e159 [ 1020.912309][T26836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.912327][T26836] RSP: 002b:00007f036ba8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1020.912359][T26836] RAX: ffffffffffffffda RBX: 00007f036ae25fa0 RCX: 00007f036ab9e159 [ 1020.912375][T26836] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 0000000000000000 [ 1020.912389][T26836] RBP: 00007f036ba8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.912401][T26836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.912414][T26836] R13: 00007f036ae26038 R14: 00007f036ae25fa0 R15: 00007ffd81307af8 [ 1020.912447][T26836] [ 1020.944198][T26316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.998683][T26316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.128719][ T83] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.128768][ T83] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.128803][ T83] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.128836][ T83] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.229788][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5922'. [ 1021.498902][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.498928][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.589104][T13583] net_ratelimit: 7 callbacks suppressed [ 1021.589129][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.650274][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.650298][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.950132][T26863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5928'. [ 1021.986785][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.001250][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.001427][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.001636][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.050910][T26870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5928'. [ 1022.090784][T26872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.101715][T26872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.102039][T26872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.102299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.108445][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.131132][T26870] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1022.266348][T26877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5929'. [ 1022.832809][T26870] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1022.975131][T26873] tipc: Enabling of bearer rejected, already enabled [ 1023.222668][T26901] netlink: 'syz.1.5934': attribute type 1 has an invalid length. [ 1023.340374][T26912] FAULT_INJECTION: forcing a failure. [ 1023.340374][T26912] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.340427][T26912] CPU: 1 UID: 0 PID: 26912 Comm: syz.2.5937 Not tainted syzkaller #0 PREEMPT(full) [ 1023.340451][T26912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1023.340463][T26912] Call Trace: [ 1023.340472][T26912] [ 1023.340482][T26912] dump_stack_lvl+0xe8/0x150 [ 1023.340520][T26912] should_fail_ex+0x410/0x560 [ 1023.340552][T26912] should_failslab+0xa8/0x100 [ 1023.340581][T26912] __kmalloc_noprof+0xfe/0x720 [ 1023.340600][T26912] ? rcu_is_watching+0x16/0xb0 [ 1023.340627][T26912] ? tomoyo_realpath_from_path+0xef/0x640 [ 1023.340673][T26912] ? tomoyo_realpath_from_path+0xef/0x640 [ 1023.340708][T26912] tomoyo_realpath_from_path+0xef/0x640 [ 1023.340746][T26912] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1023.340771][T26912] tomoyo_path_number_perm+0x246/0x5f0 [ 1023.340798][T26912] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1023.340820][T26912] ? __lock_acquire+0x747/0x2de0 [ 1023.340860][T26912] ? hook_file_ioctl+0x1f2/0x600 [ 1023.340907][T26912] ? __fget_files+0x2a/0x420 [ 1023.340937][T26912] ? __fget_files+0x2a/0x420 [ 1023.340963][T26912] ? __fget_files+0x3a2/0x420 [ 1023.340987][T26912] ? __fget_files+0x2a/0x420 [ 1023.341019][T26912] security_file_ioctl+0xc3/0x2a0 [ 1023.341053][T26912] __se_sys_ioctl+0x47/0x170 [ 1023.341076][T26912] do_syscall_64+0x166/0x520 [ 1023.341103][T26912] ? trace_irq_disable+0x3b/0x140 [ 1023.341122][T26912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.341143][T26912] ? clear_bhb_loop+0x70/0xc0 [ 1023.341169][T26912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.341187][T26912] RIP: 0033:0x7fb30199e159 [ 1023.341255][T26912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.341272][T26912] RSP: 002b:00007fb30283a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.341300][T26912] RAX: ffffffffffffffda RBX: 00007fb301c25fa0 RCX: 00007fb30199e159 [ 1023.341316][T26912] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 1023.341330][T26912] RBP: 00007fb30283a090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.341343][T26912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.341355][T26912] R13: 00007fb301c26038 R14: 00007fb301c25fa0 R15: 00007fff4b359a78 [ 1023.341388][T26912] [ 1023.341427][T26912] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1023.973040][T26931] tipc: Enabling of bearer rejected, already enabled [ 1024.050891][T26936] FAULT_INJECTION: forcing a failure. [ 1024.050891][T26936] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.050929][T26936] CPU: 1 UID: 0 PID: 26936 Comm: syz.2.5945 Not tainted syzkaller #0 PREEMPT(full) [ 1024.050953][T26936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1024.050966][T26936] Call Trace: [ 1024.050976][T26936] [ 1024.050986][T26936] dump_stack_lvl+0xe8/0x150 [ 1024.051027][T26936] should_fail_ex+0x410/0x560 [ 1024.051058][T26936] should_failslab+0xa8/0x100 [ 1024.051086][T26936] __kmalloc_noprof+0xfe/0x720 [ 1024.051109][T26936] ? kernfs_fop_write_iter+0x157/0x540 [ 1024.051134][T26936] ? kernfs_fop_write_iter+0x157/0x540 [ 1024.051168][T26936] kernfs_fop_write_iter+0x157/0x540 [ 1024.051209][T26936] vfs_write+0x612/0xba0 [ 1024.051251][T26936] ? __pfx_vfs_write+0x10/0x10 [ 1024.051294][T26936] ? __fget_files+0x2a/0x420 [ 1024.051333][T26936] ksys_write+0x150/0x270 [ 1024.051363][T26936] ? __pfx_ksys_write+0x10/0x10 [ 1024.051403][T26936] do_syscall_64+0x166/0x520 [ 1024.051429][T26936] ? trace_irq_disable+0x3b/0x140 [ 1024.051449][T26936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.051469][T26936] ? clear_bhb_loop+0x70/0xc0 [ 1024.051495][T26936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.051514][T26936] RIP: 0033:0x7fb30199e159 [ 1024.051535][T26936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.051552][T26936] RSP: 002b:00007fb30283a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1024.051575][T26936] RAX: ffffffffffffffda RBX: 00007fb301c25fa0 RCX: 00007fb30199e159 [ 1024.051589][T26936] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000005 [ 1024.051602][T26936] RBP: 00007fb30283a090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.051615][T26936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.051628][T26936] R13: 00007fb301c26038 R14: 00007fb301c25fa0 R15: 00007fff4b359a78 [ 1024.051664][T26936] [ 1024.204922][T26938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5946'. [ 1024.345823][T26944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5946'. [ 1024.803065][T26944] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1024.833762][T26944] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1025.058224][T26956] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5952'. [ 1025.190891][T26954] gretap1: entered promiscuous mode [ 1025.353178][T26962] bond4 (unregistering): Released all slaves [ 1026.246756][T27013] x_tables: duplicate underflow at hook 2 [ 1026.595754][T27008] net_ratelimit: 479 callbacks suppressed [ 1026.595780][T27008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.596565][T27008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.598699][T27008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.601197][T27008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.603512][T27008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.604420][T27008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.606881][T27008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.609483][T27008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.610828][T27008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.611717][T27008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.226014][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5974'. [ 1028.290960][T27047] ovs-dp0: entered promiscuous mode [ 1028.336678][T27047] ovs-dp0: left promiscuous mode [ 1028.846138][T27074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5984'. [ 1029.293038][T27094] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5989'. [ 1029.869603][T27106] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5993'. [ 1030.103789][T27110] tipc: Enabling of bearer rejected, already enabled [ 1030.350749][T15070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1030.362567][T15070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1030.377169][T15070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1030.385082][T15070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1030.406501][T15070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1031.106813][ C1] openvswitch: cpu_id mismatch with handler threads [ 1031.109023][ T1974] block nbd1: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 330 seconds [ 1031.109067][ T1974] block nbd1: Possible stuck request ffff888026f001c0: control (read@1024,1024B). Runtime 330 seconds [ 1031.109095][ T1974] block nbd1: Possible stuck request ffff888026f00380: control (read@2048,1024B). Runtime 330 seconds [ 1031.109121][ T1974] block nbd1: Possible stuck request ffff888026f00540: control (read@3072,1024B). Runtime 330 seconds [ 1031.301334][ T2988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.301376][ T2988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.516873][ T2988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.526083][ T2988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.781502][ T2988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.781542][ T2988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.795123][T27161] net_ratelimit: 852 callbacks suppressed [ 1031.795153][T27161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.795286][T27161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.888407][T27163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.987707][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.006081][T27167] IPVS: Scheduler module ip_vs_ not found [ 1032.007018][ T2988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.007054][ T2988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.060316][T27167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6006'. [ 1032.108253][T27173] tipc: Enabling of bearer rejected, already enabled [ 1032.356135][T27181] veth1_to_team: entered promiscuous mode [ 1032.372851][T27181] veth1_to_team: left promiscuous mode [ 1032.465243][ T5631] Bluetooth: hci5: command tx timeout [ 1032.596462][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6011'. [ 1032.619960][T27192] netlink: 'syz.2.6011': attribute type 1 has an invalid length. [ 1032.921169][T27192] bridge2: entered promiscuous mode [ 1033.025951][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.554229][T27214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.064939][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.152001][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.550746][ T5631] Bluetooth: hci5: command tx timeout [ 1035.106830][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.144991][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.626828][ T5631] Bluetooth: hci5: command tx timeout [ 1036.845483][T13583] net_ratelimit: 1 callbacks suppressed [ 1036.845508][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.868771][T27227] tipc: Enabling of bearer rejected, already enabled [ 1037.089628][T27234] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 1037.190294][T13585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.200468][T24898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.417649][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6023'. [ 1037.587828][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.160626][ T2988] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1038.160657][ T2988] bridge1 (unregistering): left promiscuous mode [ 1038.160670][ T2988] bridge1 (unregistering): left allmulticast mode [ 1038.178964][ T2988] bond0 (unregistering): Released all slaves [ 1038.196138][ T2988] bond2 (unregistering): Released all slaves [ 1038.227162][T13585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.229748][ T2988] bond1 (unregistering): Released all slaves [ 1038.435890][T27247] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1038.442139][T27247] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1038.462455][T27249] netlink: 268 bytes leftover after parsing attributes in process `syz.4.6024'. [ 1038.462620][T27250] netlink: 268 bytes leftover after parsing attributes in process `syz.4.6024'. [ 1038.462923][ T2988] : left promiscuous mode [ 1038.710186][ T5631] Bluetooth: hci5: command tx timeout [ 1038.720958][ T2988] tipc: Disabling bearer [ 1038.721078][ T2988] tipc: Left network mode [ 1038.840367][T27113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.840576][T27113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.840733][T27113] bridge_slave_0: entered allmulticast mode [ 1038.842912][T27113] bridge_slave_0: entered promiscuous mode [ 1038.846203][T27113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.846373][T27113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.846516][T27113] bridge_slave_1: entered allmulticast mode [ 1038.848289][T27113] bridge_slave_1: entered promiscuous mode [ 1038.981105][T27113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.018676][T27113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.285444][T13585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.366340][T27284] netlink: 516 bytes leftover after parsing attributes in process `syz.4.6030'. [ 1039.383945][T27113] team0: Port device team_slave_0 added [ 1039.409562][T27113] team0: Port device team_slave_1 added [ 1039.414156][T27284] xt_REDIRECT: bad MAP_IPS. [ 1039.741183][T27113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.741203][T27113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.741228][T27113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.809728][T27113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.809746][T27113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.809772][T27113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.225781][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.316463][T13585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.414342][ T2988] hsr_slave_0: left promiscuous mode [ 1040.420240][ T2988] hsr_slave_1: left promiscuous mode [ 1040.469928][ T2988] veth1_macvtap: left promiscuous mode [ 1040.469972][ T2988] veth0_macvtap: left promiscuous mode [ 1040.470107][ T2988] veth1_vlan: left promiscuous mode [ 1040.470179][ T2988] veth0_vlan: left promiscuous mode [ 1041.195985][T27299] syzkaller0: entered promiscuous mode [ 1041.196015][T27299] syzkaller0: entered allmulticast mode [ 1041.198822][T27301] syzkaller0: left promiscuous mode [ 1041.198846][T27301] syzkaller0: left allmulticast mode [ 1041.201423][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1041.367226][T13585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.398245][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.266062][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.425915][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.478666][T13585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.504792][ T4986] udevd[4986]: worker [16403] /devices/virtual/block/nbd1 timeout; kill it [ 1044.504912][ T4986] udevd[4986]: seq 24831 '/devices/virtual/block/nbd1' killed [ 1044.651723][T27337] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1044.651774][T27337] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1044.651795][T27337] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1044.676467][T27113] hsr_slave_0: entered promiscuous mode [ 1044.678288][T27113] hsr_slave_1: entered promiscuous mode [ 1044.678986][T27113] debugfs: 'hsr0' already exists in 'hsr' [ 1044.679005][T27113] Cannot create hsr debugfs directory [ 1045.007329][T27352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6040'. [ 1045.181939][T27352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6040'. [ 1045.281620][T27352] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1045.307202][T27352] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1045.325505][T27359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.325717][T27359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.325953][T27359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.341738][T27359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.341922][T27359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.342829][T27359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.538455][ T2988] IPVS: stop unused estimator thread 0... [ 1046.444392][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1046.700057][T27400] tipc: Enabling of bearer rejected, already enabled [ 1047.134806][T27408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1047.212704][T27417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6053'. [ 1047.244229][ T1172] IPVS: starting estimator thread 0... [ 1047.278628][T27422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6055'. [ 1047.335859][T27423] IPVS: using max 32 ests per chain, 76800 per kthread [ 1047.597977][T13585] net_ratelimit: 204 callbacks suppressed [ 1047.598000][T13585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.618540][T27425] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6055'. [ 1047.718311][T27113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1047.758656][T27113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1047.759638][T27113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1047.783882][T27113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1047.801457][T27113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1047.821257][T27113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1047.823110][T27113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1047.846718][T27113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1048.390901][T27113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.459874][T27113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.498041][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.498165][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.507606][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.507715][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.625054][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.953709][T27439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.953982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.954219][T27439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.988822][T27439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.989205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.021685][T27439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6059'. [ 1049.021712][T27439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6059'. [ 1049.021732][T27439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6059'. [ 1049.022456][T27439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.022797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.057253][T27439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.246366][T27484] netlink: 'syz.4.6062': attribute type 1 has an invalid length. [ 1049.371680][T27484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6062'. [ 1049.467691][T27486] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1049.511034][T27484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1050.086431][T27507] __nla_validate_parse: 2 callbacks suppressed [ 1050.086455][T27507] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6067'. [ 1050.448109][T27113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.571196][T27538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6074'. [ 1050.571229][T27538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6074'. [ 1050.808872][T27113] veth0_vlan: entered promiscuous mode [ 1050.827857][T27113] veth1_vlan: entered promiscuous mode [ 1051.070416][T27113] veth0_macvtap: entered promiscuous mode [ 1051.093553][T27113] veth1_macvtap: entered promiscuous mode [ 1051.240251][T27113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.284150][T27113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.366478][ T7864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.367591][ T7864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.367632][ T7864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.367667][ T7864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.722665][ T7864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.722688][ T7864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.797719][ T7864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.797737][ T7864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.058159][T27582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1052.058203][T27582] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1052.165351][T27586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6081'. [ 1052.512366][T15070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1052.523350][T15070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1052.524319][T15070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1052.536777][T15070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1052.537398][T15070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1052.785057][ T5621] net_ratelimit: 18 callbacks suppressed [ 1052.785081][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.448566][T27633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6094'. [ 1053.448596][T27633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6094'. [ 1053.733161][T27626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1053.791009][T27633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.825693][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.826899][T27633] bond2: (slave bond0): making interface the new active one [ 1053.846673][T27626] netlink: 'syz.4.6094': attribute type 2 has an invalid length. [ 1053.846697][T27626] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6094'. [ 1053.870862][T27633] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1053.955125][T27637] bond2 (unregistering): (slave bond0): Releasing active interface [ 1053.997120][T27637] bond2 (unregistering): Released all slaves [ 1054.189176][T27626] : entered promiscuous mode [ 1054.286876][ T7864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.286916][ T7864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.360023][T27648] netlink: 'syz.0.6096': attribute type 12 has an invalid length. [ 1054.360054][T27648] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6096'. [ 1054.361369][T27651] netlink: 'syz.0.6096': attribute type 12 has an invalid length. [ 1054.549650][ T7864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.549689][ T7864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.625113][T15070] Bluetooth: hci3: command tx timeout [ 1054.649254][T27654] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1054.664860][T27654] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1054.843023][ T7864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.843062][ T7864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.868794][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.425398][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.425548][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.796592][ T7864] bridge_slave_1: left allmulticast mode [ 1055.796624][ T7864] bridge_slave_1: left promiscuous mode [ 1055.797109][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.819593][T27705] __nla_validate_parse: 3 callbacks suppressed [ 1055.819614][T27705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6106'. [ 1055.819751][T27707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6106'. [ 1055.862156][ T7864] bridge_slave_0: left allmulticast mode [ 1055.862190][ T7864] bridge_slave_0: left promiscuous mode [ 1055.864037][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.906455][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.948691][T27713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6106'. [ 1056.018965][ T7864] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1056.228720][ T7864] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1056.580742][ T7864] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 1056.580771][ T7864] bridge3 (unregistering): left promiscuous mode [ 1056.601683][ T7864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.603152][ T7864] bond0 (unregistering): Released all slaves [ 1056.631564][ T7864] bond1 (unregistering): Released all slaves [ 1056.705094][T15070] Bluetooth: hci3: command tx timeout [ 1056.947965][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.013395][ T7864] ovs-s!: left promiscuous mode [ 1057.090734][ T7864] : left promiscuous mode [ 1057.316164][ T7864] tipc: Disabling bearer [ 1057.316305][ T7864] tipc: Left network mode [ 1057.478283][T27753] Bluetooth: MGMT ver 1.23 [ 1057.486510][T27747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6109'. [ 1057.985176][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.237947][T27754] netlink: 'syz.2.6112': attribute type 13 has an invalid length. [ 1058.237970][T27754] netlink: 'syz.2.6112': attribute type 12 has an invalid length. [ 1058.434120][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1058.467909][T24896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.617356][T27770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6113'. [ 1058.627799][T27602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.632921][T27602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.633104][T27602] bridge_slave_0: entered allmulticast mode [ 1058.640697][T27602] bridge_slave_0: entered promiscuous mode [ 1058.653791][T27602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.653911][T27602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.654067][T27602] bridge_slave_1: entered allmulticast mode [ 1058.676309][T27602] bridge_slave_1: entered promiscuous mode [ 1058.785783][T15070] Bluetooth: hci3: command tx timeout [ 1058.902047][T27602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.917547][T27602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.024932][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.173180][ T7864] hsr_slave_0: left promiscuous mode [ 1059.174435][ T7864] hsr_slave_1: left promiscuous mode [ 1059.188737][ T7864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.188764][ T7864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.193112][ T7864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.193135][ T7864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.262793][ T7864] veth1_to_team: left promiscuous mode [ 1059.263073][ T7864] veth1_macvtap: left promiscuous mode [ 1059.263103][ T7864] veth0_macvtap: left promiscuous mode [ 1059.263239][ T7864] veth1_vlan: left promiscuous mode [ 1060.071465][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.156432][ T7864] team0 (unregistering): Port device team_slave_1 removed [ 1060.190132][ T7864] team0 (unregistering): Port device team_slave_0 removed [ 1060.402309][T27602] team0: Port device team_slave_0 added [ 1060.432468][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1060.442397][T27602] team0: Port device team_slave_1 added [ 1060.592904][T27602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.592924][T27602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.592952][T27602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.593899][T27830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.636600][T27833] FAULT_INJECTION: forcing a failure. [ 1060.636600][T27833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.636633][T27833] CPU: 1 UID: 0 PID: 27833 Comm: syz.0.6126 Not tainted syzkaller #0 PREEMPT(full) [ 1060.636654][T27833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1060.636665][T27833] Call Trace: [ 1060.636674][T27833] [ 1060.636682][T27833] dump_stack_lvl+0xe8/0x150 [ 1060.636719][T27833] should_fail_ex+0x410/0x560 [ 1060.636753][T27833] _copy_from_user+0x2d/0xb0 [ 1060.636780][T27833] ___sys_sendmsg+0x1c6/0x360 [ 1060.636809][T27833] ? __lock_acquire+0x747/0x2de0 [ 1060.636837][T27833] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.636867][T27833] ? kstrtouint+0x6e/0xe0 [ 1060.636911][T27833] ? __fget_files+0x2a/0x420 [ 1060.636937][T27833] ? __fget_files+0x3a2/0x420 [ 1060.636972][T27833] __sys_sendmmsg+0x273/0x4d0 [ 1060.637002][T27833] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1060.637036][T27833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1060.637079][T27833] ? ksys_write+0x242/0x270 [ 1060.637110][T27833] ? __pfx_ksys_write+0x10/0x10 [ 1060.637143][T27833] __x64_sys_sendmmsg+0xa0/0xc0 [ 1060.637171][T27833] do_syscall_64+0x166/0x520 [ 1060.637194][T27833] ? trace_irq_disable+0x3b/0x140 [ 1060.637215][T27833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.637236][T27833] ? clear_bhb_loop+0x70/0xc0 [ 1060.637259][T27833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.637276][T27833] RIP: 0033:0x7f8f42d9e159 [ 1060.637295][T27833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.637311][T27833] RSP: 002b:00007f8f43c96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1060.637331][T27833] RAX: ffffffffffffffda RBX: 00007f8f43026090 RCX: 00007f8f42d9e159 [ 1060.637345][T27833] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1060.637357][T27833] RBP: 00007f8f43c96090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.637369][T27833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.637381][T27833] R13: 00007f8f43026128 R14: 00007f8f43026090 R15: 00007ffdbcc0b128 [ 1060.637410][T27833] [ 1060.722795][T27602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.722814][T27602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.722838][T27602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.867665][T15070] Bluetooth: hci3: command tx timeout [ 1061.053262][T27602] hsr_slave_0: entered promiscuous mode [ 1061.054412][T27602] hsr_slave_1: entered promiscuous mode [ 1061.055274][T27602] debugfs: 'hsr0' already exists in 'hsr' [ 1061.055298][T27602] Cannot create hsr debugfs directory [ 1061.105224][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.183385][T27840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6128'. [ 1061.211555][ T1974] block nbd1: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 360 seconds [ 1061.211602][ T1974] block nbd1: Possible stuck request ffff888026f001c0: control (read@1024,1024B). Runtime 360 seconds [ 1061.211629][ T1974] block nbd1: Possible stuck request ffff888026f00380: control (read@2048,1024B). Runtime 360 seconds [ 1061.211655][ T1974] block nbd1: Possible stuck request ffff888026f00540: control (read@3072,1024B). Runtime 360 seconds [ 1061.219654][ T7864] IPVS: stop unused estimator thread 0... [ 1061.507637][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.542977][T27854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.543163][T27854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.543396][T27854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.579123][T27854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.185518][ T5724] net_ratelimit: 203 callbacks suppressed [ 1063.185545][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.315362][T27602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1063.326224][T27602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.346241][T27602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1063.354538][T27602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.416566][T27602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1063.433503][T27602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1063.434547][T27602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1063.471061][T27602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.633030][T27602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.719110][T27602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.771135][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.771284][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.828147][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.828272][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.192041][T27927] xt_hashlimit: size too large, truncated to 1048576 [ 1064.229507][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.572731][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.691736][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6152'. [ 1064.729431][T27945] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1064.731329][T27945] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1065.030590][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.296780][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.529471][T27971] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6157'. [ 1065.548466][T27973] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1065.677175][T27974] IPVS: stopping master sync thread 27973 ... [ 1065.772350][T27602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.107298][T27602] veth0_vlan: entered promiscuous mode [ 1066.153039][T27602] veth1_vlan: entered promiscuous mode [ 1066.261556][T27602] veth0_macvtap: entered promiscuous mode [ 1066.277020][T27602] veth1_macvtap: entered promiscuous mode [ 1066.300958][T27602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.314543][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.343355][T27602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.509718][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.517338][ T1172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.517904][ T1172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.518227][ T1172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.552894][T28002] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1066.552932][T28002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1066.770360][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.770387][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.802114][T27984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.802309][T27984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.984095][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.984122][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.201798][T28056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6172'. [ 1068.201841][T28056] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6172'. [ 1068.301680][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1068.303787][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1068.321125][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1068.336249][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1068.339686][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1068.385459][T27571] net_ratelimit: 188 callbacks suppressed [ 1068.385483][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.428102][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.969918][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.969960][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.215935][ T30] audit: type=1800 audit(1790316821.326:16): pid=28115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6182" name="blkio.bfq.time_recursive" dev="tmpfs" ino=157 res=0 errno=0 [ 1070.344461][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1070.344502][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.475379][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.475583][ T5631] Bluetooth: hci4: command tx timeout [ 1070.550100][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1070.550141][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.624989][T24896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.813835][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1070.813876][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.913938][T28138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6184'. [ 1070.913978][T28138] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6184'. [ 1071.545103][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.011323][T28163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'. [ 1072.362356][T28168] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6191'. [ 1072.553721][ T5631] Bluetooth: hci4: command tx timeout [ 1072.625161][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.670266][T24896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.700146][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.627397][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.633081][ T5631] Bluetooth: hci4: command tx timeout [ 1074.711661][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.116148][T28159] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1075.116196][T28159] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1075.116216][T28159] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1075.276448][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1075.493590][T28182] netlink: 'syz.1.6195': attribute type 49 has an invalid length. [ 1075.572223][ T50] bridge_slave_1: left allmulticast mode [ 1075.572253][ T50] bridge_slave_1: left promiscuous mode [ 1075.572476][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.607515][ T50] bridge_slave_0: left allmulticast mode [ 1075.607546][ T50] bridge_slave_0: left promiscuous mode [ 1075.609342][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.613381][T28177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6193'. [ 1075.687120][ T50] pimreg: left allmulticast mode [ 1075.715305][ T50] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1075.978423][ T50] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1076.714753][ T5631] Bluetooth: hci4: command tx timeout [ 1077.109409][ T50] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1077.109451][ T50] bridge1 (unregistering): left promiscuous mode [ 1077.109470][ T50] bridge1 (unregistering): left allmulticast mode [ 1077.148045][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.150224][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.151586][ T50] bond0 (unregistering): Released all slaves [ 1077.179566][ T50] bond1 (unregistering): Released all slaves [ 1077.217582][T28201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6197'. [ 1077.217623][T28201] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6197'. [ 1077.278457][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1077.439645][T28062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.439997][T28062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.440179][T28062] bridge_slave_0: entered allmulticast mode [ 1077.443949][T28062] bridge_slave_0: entered promiscuous mode [ 1077.486825][T28062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.486965][T28062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.487149][T28062] bridge_slave_1: entered allmulticast mode [ 1077.489032][T28062] bridge_slave_1: entered promiscuous mode [ 1077.523053][ T50] : left promiscuous mode [ 1077.573163][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6203'. [ 1077.631589][ T2988] IPVS: starting estimator thread 0... [ 1077.654578][ T50] tipc: Disabling bearer [ 1077.668351][ T50] tipc: Left network mode [ 1077.687859][T28062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.702570][T28062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.736389][T28239] IPVS: using max 35 ests per chain, 84000 per kthread [ 1077.953116][T28062] team0: Port device team_slave_0 added [ 1077.977354][T28062] team0: Port device team_slave_1 added [ 1078.270822][T28062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.270843][T28062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.270870][T28062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.398167][T28062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.398188][T28062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.398213][T28062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.590871][T28266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6209'. [ 1078.745241][T28258] IPVS: Scheduler module ip_vs_ not found [ 1078.955706][T28062] hsr_slave_0: entered promiscuous mode [ 1078.961547][T28062] hsr_slave_1: entered promiscuous mode [ 1078.967235][T28062] debugfs: 'hsr0' already exists in 'hsr' [ 1078.967259][T28062] Cannot create hsr debugfs directory [ 1079.019958][ T50] hsr_slave_0: left promiscuous mode [ 1079.023781][ T50] hsr_slave_1: left promiscuous mode [ 1079.037386][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.037413][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.162548][ T50] veth1_macvtap: left promiscuous mode [ 1079.162594][ T50] veth0_macvtap: left promiscuous mode [ 1079.162751][ T50] veth1_vlan: left promiscuous mode [ 1079.162827][ T50] veth0_vlan: left promiscuous mode [ 1079.975608][T28276] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 1079.982005][T28276] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1080.220467][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1080.241099][T28276] vda: unable to read partition table [ 1080.262176][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1080.561190][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1080.637222][T28306] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1081.073060][T28322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1081.089693][ T50] IPVS: stop unused estimator thread 0... [ 1081.794551][T28340] veth1_to_team: entered promiscuous mode [ 1081.820940][T28340] veth1_to_team: left promiscuous mode [ 1082.792544][T28371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1082.896359][T28374] netlink: 'syz.4.6231': attribute type 16 has an invalid length. [ 1082.896405][T28374] netlink: 'syz.4.6231': attribute type 17 has an invalid length. [ 1085.861701][T28374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.183944][ T2988] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1086.184247][ T2988] bond1: (slave veth3): making interface the new active one [ 1086.229233][ T2988] bond1: active interface up! [ 1086.257072][ T7864] openvswitch: cpu_id mismatch with handler threads [ 1086.824422][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6236'. [ 1086.856993][T28405] IPVS: Scheduler module ip_vs_ not found [ 1087.021171][T28062] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1087.047580][T28062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1087.050995][T28062] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1087.075855][T28062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1087.082350][T28062] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1087.129690][T28062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1087.137942][T28062] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1087.162380][T28062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1087.286975][ T50] openvswitch: cpu_id mismatch with handler threads [ 1087.287414][ T50] openvswitch: cpu_id mismatch with handler threads [ 1087.608270][T28062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.680861][T28062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.730250][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.730380][ T7864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.784943][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.785071][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.866099][T24897] openvswitch: cpu_id mismatch with handler threads [ 1088.130470][T28453] FAULT_INJECTION: forcing a failure. [ 1088.130470][T28453] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.130506][T28453] CPU: 0 UID: 0 PID: 28453 Comm: syz.1.6243 Not tainted syzkaller #0 PREEMPT(full) [ 1088.130528][T28453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1088.130540][T28453] Call Trace: [ 1088.130549][T28453] [ 1088.130559][T28453] dump_stack_lvl+0xe8/0x150 [ 1088.130593][T28453] should_fail_ex+0x410/0x560 [ 1088.130623][T28453] should_failslab+0xa8/0x100 [ 1088.130649][T28453] ? skb_clone+0x212/0x3a0 [ 1088.130683][T28453] kmem_cache_alloc_noprof+0xa1/0x600 [ 1088.130714][T28453] ? skb_clone+0x212/0x3a0 [ 1088.130747][T28453] skb_clone+0x212/0x3a0 [ 1088.130775][T28453] __netlink_deliver_tap+0x355/0x6e0 [ 1088.130808][T28453] ? netlink_deliver_tap+0x2e/0x1b0 [ 1088.130829][T28453] netlink_deliver_tap+0x19c/0x1b0 [ 1088.130852][T28453] netlink_unicast+0x781/0x940 [ 1088.130895][T28453] netlink_sendmsg+0x813/0xb40 [ 1088.130927][T28453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.130958][T28453] ? apparmor_socket_sendmsg+0x98/0x360 [ 1088.130984][T28453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.131002][T28453] sock_sendmsg_nosec+0x13a/0x180 [ 1088.131027][T28453] ____sys_sendmsg+0x54e/0x850 [ 1088.131063][T28453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1088.131103][T28453] ? import_iovec+0x73/0xa0 [ 1088.131134][T28453] ___sys_sendmsg+0x2a5/0x360 [ 1088.131161][T28453] ? __lock_acquire+0x747/0x2de0 [ 1088.131190][T28453] ? __pfx____sys_sendmsg+0x10/0x10 [ 1088.131262][T28453] ? __fget_files+0x2a/0x420 [ 1088.131298][T28453] ? __fget_files+0x3a2/0x420 [ 1088.131340][T28453] __x64_sys_sendmsg+0x1b1/0x290 [ 1088.131372][T28453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1088.131426][T28453] do_syscall_64+0x166/0x520 [ 1088.131454][T28453] ? trace_irq_disable+0x3b/0x140 [ 1088.131475][T28453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.131498][T28453] ? clear_bhb_loop+0x70/0xc0 [ 1088.131525][T28453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.131546][T28453] RIP: 0033:0x7f3c1039e159 [ 1088.131567][T28453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.131584][T28453] RSP: 002b:00007f3c111af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.131609][T28453] RAX: ffffffffffffffda RBX: 00007f3c10625fa0 RCX: 00007f3c1039e159 [ 1088.131625][T28453] RDX: 0000000000000010 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1088.131639][T28453] RBP: 00007f3c111af090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.131653][T28453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.131665][T28453] R13: 00007f3c10626038 R14: 00007f3c10625fa0 R15: 00007ffe0a55fe58 [ 1088.131701][T28453] [ 1088.460315][T28458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6245'. [ 1088.460360][T28458] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6245'. [ 1088.501054][ T83] IPVS: starting estimator thread 0... [ 1088.590287][T28459] IPVS: using max 25 ests per chain, 60000 per kthread [ 1088.730331][T28472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6242'. [ 1088.730357][T28472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6242'. [ 1088.824033][T28473] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1088.824147][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1089.643052][T28513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6252'. [ 1089.663516][T28501] IPVS: Scheduler module ip_vs_ not found [ 1090.073852][T28062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.229526][T28062] veth0_vlan: entered promiscuous mode [ 1090.264761][T28062] veth1_vlan: entered promiscuous mode [ 1090.395451][T28062] veth0_macvtap: entered promiscuous mode [ 1090.437527][T28062] veth1_macvtap: entered promiscuous mode [ 1090.788202][T28062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.811429][T28062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.933295][T26987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.940984][ T1172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.941031][ T1172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.941061][ T1172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.981444][T28540] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6254'. [ 1091.146572][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.146597][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.268830][ T1974] block nbd1: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 390 seconds [ 1091.268892][ T1974] block nbd1: Possible stuck request ffff888026f001c0: control (read@1024,1024B). Runtime 390 seconds [ 1091.268920][ T1974] block nbd1: Possible stuck request ffff888026f00380: control (read@2048,1024B). Runtime 390 seconds [ 1091.268946][ T1974] block nbd1: Possible stuck request ffff888026f00540: control (read@3072,1024B). Runtime 390 seconds [ 1091.329630][T28559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6259'. [ 1091.392838][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.392863][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.425544][ C1] openvswitch: cpu_id mismatch with handler threads [ 1091.562507][T28559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6259'. [ 1091.601580][T28559] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1091.630739][T28559] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1092.054583][T28578] sctp: [Deprecated]: syz.2.6170 (pid 28578) Use of int in maxseg socket option. [ 1092.054583][T28578] Use struct sctp_assoc_value instead [ 1092.055980][T28578] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6170'. [ 1092.492060][T28598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6267'. [ 1092.558814][T28597] IPVS: Scheduler module ip_vs_ not found [ 1092.621460][T15070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1092.639528][T15070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1092.649135][T28601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6266'. [ 1092.650195][T15070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1092.672954][T15070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1092.673849][T15070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1094.659346][T28657] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6276'. [ 1094.698888][T28664] veth1_to_team: entered promiscuous mode [ 1094.701324][T28664] veth1_to_team: left promiscuous mode [ 1094.787578][ T5631] Bluetooth: hci2: command tx timeout [ 1095.155202][T28678] IPVS: Scheduler module ip_vs_ not found [ 1095.203617][T28678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6281'. [ 1096.875904][ T5631] Bluetooth: hci2: command tx timeout [ 1098.956105][ T5631] Bluetooth: hci2: command tx timeout [ 1099.140805][T28687] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1099.140874][T28687] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1099.140894][T28687] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1099.181667][T28704] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6286'. [ 1099.406853][T28725] syzkaller1: entered promiscuous mode [ 1099.406881][T28725] syzkaller1: entered allmulticast mode [ 1099.437486][T28728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1099.443383][T28725] netlink: 558 bytes leftover after parsing attributes in process `syz.4.6288'. [ 1099.584862][ C1] openvswitch: cpu_id mismatch with handler threads [ 1099.620572][T28739] netlink: 'syz.3.6292': attribute type 1 has an invalid length. [ 1099.620669][T28735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6291'. [ 1099.620705][T28735] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6291'. [ 1099.621971][T28602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.622192][T28602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.622368][T28602] bridge_slave_0: entered allmulticast mode [ 1099.636704][T28602] bridge_slave_0: entered promiscuous mode [ 1099.678922][T28732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1099.813113][T28744] IPVS: Scheduler module ip_vs_ not found [ 1099.822125][T28739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1099.850235][T28737] macvlan2: entered promiscuous mode [ 1099.850262][T28737] macvlan2: entered allmulticast mode [ 1099.851483][T28737] bond1: entered promiscuous mode [ 1099.852275][T28737] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1099.863031][T28737] bond1: left promiscuous mode [ 1099.879229][T28748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6293'. [ 1099.896749][T28602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.896946][T28602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.897121][T28602] bridge_slave_1: entered allmulticast mode [ 1099.898439][T28602] bridge_slave_1: entered promiscuous mode [ 1099.974405][T28602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.991905][T28602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.043459][T28602] team0: Port device team_slave_0 added [ 1100.053278][T28602] team0: Port device team_slave_1 added [ 1100.199142][T28751] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6295'. [ 1100.201405][T28602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.201423][T28602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.201450][T28602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.203563][T28751] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6295'. [ 1100.203741][T28602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.203753][T28602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.203775][T28602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.337610][T28751] netlink: 'syz.2.6295': attribute type 11 has an invalid length. [ 1100.491251][T28602] hsr_slave_0: entered promiscuous mode [ 1100.492996][T28602] hsr_slave_1: entered promiscuous mode [ 1100.496124][T28602] debugfs: 'hsr0' already exists in 'hsr' [ 1100.496146][T28602] Cannot create hsr debugfs directory [ 1100.817363][T28770] netlink: 'syz.1.6300': attribute type 1 has an invalid length. [ 1100.817392][T28770] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6300'. [ 1100.877791][T28772] netlink: 'syz.2.6301': attribute type 5 has an invalid length. [ 1101.001436][T28602] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.001479][T28602] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.035540][ T5631] Bluetooth: hci2: command tx timeout [ 1101.322969][T28602] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.323009][T28602] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.596929][T28602] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.596969][T28602] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.613866][T28789] IPVS: Scheduler module ip_vs_ not found [ 1101.796778][T28602] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.796819][T28602] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.129846][T28815] FAULT_INJECTION: forcing a failure. [ 1102.129846][T28815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.129879][T28815] CPU: 1 UID: 0 PID: 28815 Comm: syz.4.6313 Not tainted syzkaller #0 PREEMPT(full) [ 1102.129898][T28815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1102.129909][T28815] Call Trace: [ 1102.129917][T28815] [ 1102.129925][T28815] dump_stack_lvl+0xe8/0x150 [ 1102.129954][T28815] should_fail_ex+0x410/0x560 [ 1102.129979][T28815] _copy_from_user+0x2d/0xb0 [ 1102.130003][T28815] __copy_msghdr+0x390/0x590 [ 1102.130031][T28815] ___sys_sendmsg+0x213/0x360 [ 1102.130053][T28815] ? __lock_acquire+0x747/0x2de0 [ 1102.130080][T28815] ? __pfx____sys_sendmsg+0x10/0x10 [ 1102.130108][T28815] ? kstrtouint+0x6e/0xe0 [ 1102.130150][T28815] ? __fget_files+0x2a/0x420 [ 1102.130172][T28815] ? __fget_files+0x3a2/0x420 [ 1102.130214][T28815] __sys_sendmmsg+0x273/0x4d0 [ 1102.130243][T28815] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1102.130275][T28815] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1102.130314][T28815] ? ksys_write+0x242/0x270 [ 1102.130339][T28815] ? __pfx_ksys_write+0x10/0x10 [ 1102.130370][T28815] __x64_sys_sendmmsg+0xa0/0xc0 [ 1102.130395][T28815] do_syscall_64+0x166/0x520 [ 1102.130416][T28815] ? trace_irq_disable+0x3b/0x140 [ 1102.130436][T28815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.130456][T28815] ? clear_bhb_loop+0x70/0xc0 [ 1102.130478][T28815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.130495][T28815] RIP: 0033:0x7f562a99e159 [ 1102.130513][T28815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.130530][T28815] RSP: 002b:00007f5628bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1102.130553][T28815] RAX: ffffffffffffffda RBX: 00007f562ac25fa0 RCX: 00007f562a99e159 [ 1102.130568][T28815] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 1102.130581][T28815] RBP: 00007f5628bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.130594][T28815] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 1102.130607][T28815] R13: 00007f562ac26038 R14: 00007f562ac25fa0 R15: 00007ffd4dbec7f8 [ 1102.130638][T28815] [ 1102.223535][T28816] ip_tables: iptables: counters copy to user failed while replacing table [ 1102.225085][T28819] ip_tables: iptables: counters copy to user failed while replacing table [ 1102.941272][T28602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1102.959316][T28602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1102.960378][T28602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1102.985225][T28602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1102.989405][T28602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1103.021082][T28602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1103.023785][T28602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1103.057486][T28602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1103.487503][T28602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.526815][T28602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.552920][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.553047][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.584263][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.584382][ T7864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.874420][T28873] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 2216 [ 1104.218467][T28880] IPVS: Scheduler module ip_vs_ not found [ 1104.242362][T28880] __nla_validate_parse: 7 callbacks suppressed [ 1104.242387][T28880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6324'. [ 1105.429475][T28910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6332'. [ 1105.429509][T28910] netlink: 'syz.3.6332': attribute type 6 has an invalid length. [ 1105.429534][T28910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6332'. [ 1105.713200][T28602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.790658][T28928] sctp: [Deprecated]: syz.2.6335 (pid 28928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1105.790658][T28928] Use struct sctp_sack_info instead [ 1105.816408][T28928] openvswitch: netlink: Missing key (keys=50, expected=80) [ 1105.932046][T28602] veth0_vlan: entered promiscuous mode [ 1105.960189][T28602] veth1_vlan: entered promiscuous mode [ 1106.090375][T28602] veth0_macvtap: entered promiscuous mode [ 1106.101680][T28602] veth1_macvtap: entered promiscuous mode [ 1106.121929][T28602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.141540][T28602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.278787][T26987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.287805][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.288739][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.306709][T26987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.387818][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.387842][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.517127][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.517152][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.591029][T28943] IPVS: Scheduler module ip_vs_ not found [ 1106.647297][T28949] FAULT_INJECTION: forcing a failure. [ 1106.647297][T28949] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.647332][T28949] CPU: 0 UID: 0 PID: 28949 Comm: syz.3.6344 Not tainted syzkaller #0 PREEMPT(full) [ 1106.647355][T28949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1106.647376][T28949] Call Trace: [ 1106.647385][T28949] [ 1106.647400][T28949] dump_stack_lvl+0xe8/0x150 [ 1106.647435][T28949] should_fail_ex+0x410/0x560 [ 1106.647465][T28949] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1106.647488][T28949] should_failslab+0xa8/0x100 [ 1106.647515][T28949] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1106.647563][T28949] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1106.647596][T28949] ? sock_alloc_inode+0x2c/0x1a0 [ 1106.647614][T28949] ? sock_alloc_inode+0x2c/0x1a0 [ 1106.647640][T28949] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1106.647660][T28949] sock_alloc_inode+0x2c/0x1a0 [ 1106.647681][T28949] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1106.647700][T28949] alloc_inode+0x6a/0x1b0 [ 1106.647733][T28949] __sock_create+0x12d/0x9d0 [ 1106.647767][T28949] mptcp_subflow_create_socket+0xfd/0x810 [ 1106.647903][T28949] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1106.647938][T28949] ? look_up_lock_class+0x57/0x110 [ 1106.647969][T28949] __mptcp_nmpc_sk+0x155/0x770 [ 1106.647993][T28949] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1106.648025][T28949] mptcp_connect+0x6e/0x7f0 [ 1106.648057][T28949] __inet_stream_connect+0x258/0xe00 [ 1106.648112][T28949] ? do_raw_spin_lock+0x12b/0x2f0 [ 1106.648143][T28949] ? __pfx___inet_stream_connect+0x10/0x10 [ 1106.648170][T28949] ? inet_stream_connect+0x51/0xa0 [ 1106.648194][T28949] ? __local_bh_enable_ip+0xd6/0x140 [ 1106.648228][T28949] inet_stream_connect+0x66/0xa0 [ 1106.648253][T28949] __sys_connect+0x316/0x450 [ 1106.648281][T28949] ? __pfx___sys_connect+0x10/0x10 [ 1106.648320][T28949] ? __pfx_ksys_write+0x10/0x10 [ 1106.648359][T28949] __x64_sys_connect+0x7a/0x90 [ 1106.648385][T28949] do_syscall_64+0x166/0x520 [ 1106.648411][T28949] ? trace_irq_disable+0x3b/0x140 [ 1106.648432][T28949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.648454][T28949] ? clear_bhb_loop+0x70/0xc0 [ 1106.648479][T28949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.648500][T28949] RIP: 0033:0x7fdfdf39e159 [ 1106.648529][T28949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.648547][T28949] RSP: 002b:00007fdfe0345028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1106.648571][T28949] RAX: ffffffffffffffda RBX: 00007fdfdf625fa0 RCX: 00007fdfdf39e159 [ 1106.648587][T28949] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1106.648600][T28949] RBP: 00007fdfe0345090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.648613][T28949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.648625][T28949] R13: 00007fdfdf626038 R14: 00007fdfdf625fa0 R15: 00007ffcc34ba998 [ 1106.648658][T28949] [ 1106.648694][T28949] socket: no more sockets [ 1106.671338][T28945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6342'. [ 1106.721257][T28952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6345'. [ 1106.767831][ T50] IPVS: starting estimator thread 0... [ 1106.875285][T28955] IPVS: using max 29 ests per chain, 69600 per kthread [ 1107.239313][T28975] FAULT_INJECTION: forcing a failure. [ 1107.239313][T28975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.239350][T28975] CPU: 1 UID: 0 PID: 28975 Comm: syz.4.6349 Not tainted syzkaller #0 PREEMPT(full) [ 1107.239373][T28975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1107.239385][T28975] Call Trace: [ 1107.239395][T28975] [ 1107.239404][T28975] dump_stack_lvl+0xe8/0x150 [ 1107.239440][T28975] should_fail_ex+0x410/0x560 [ 1107.239471][T28975] _copy_from_iter+0x1d3/0x1660 [ 1107.239501][T28975] ? __alloc_skb+0x27a/0x7a0 [ 1107.239529][T28975] ? __alloc_skb+0x27a/0x7a0 [ 1107.239554][T28975] ? __alloc_skb+0x27a/0x7a0 [ 1107.239580][T28975] ? __pfx__copy_from_iter+0x10/0x10 [ 1107.239602][T28975] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1107.239632][T28975] ? __alloc_skb+0x27a/0x7a0 [ 1107.239655][T28975] ? __alloc_skb+0x27a/0x7a0 [ 1107.239686][T28975] ? netlink_sendmsg+0x650/0xb40 [ 1107.239707][T28975] ? skb_put+0x112/0x210 [ 1107.239734][T28975] netlink_sendmsg+0x6c0/0xb40 [ 1107.239765][T28975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.239794][T28975] ? apparmor_socket_sendmsg+0x98/0x360 [ 1107.239819][T28975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.239839][T28975] sock_sendmsg_nosec+0x13a/0x180 [ 1107.239865][T28975] sock_write_iter+0x2de/0x3e0 [ 1107.239887][T28975] ? __pfx_sock_write_iter+0x10/0x10 [ 1107.239927][T28975] do_iter_readv_writev+0x612/0x8c0 [ 1107.239962][T28975] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1107.239999][T28975] ? bpf_lsm_file_permission+0x9/0x20 [ 1107.240062][T28975] ? security_file_permission+0x75/0x260 [ 1107.240093][T28975] ? rw_verify_area+0x203/0x4c0 [ 1107.240135][T28975] vfs_writev+0x343/0x990 [ 1107.240174][T28975] ? __pfx_vfs_writev+0x10/0x10 [ 1107.240212][T28975] ? __fget_files+0x2a/0x420 [ 1107.240244][T28975] ? __fget_files+0x3a2/0x420 [ 1107.240270][T28975] ? __fget_files+0x2a/0x420 [ 1107.240304][T28975] do_writev+0x154/0x2e0 [ 1107.240331][T28975] ? __pfx_do_writev+0x10/0x10 [ 1107.240367][T28975] do_syscall_64+0x166/0x520 [ 1107.240395][T28975] ? trace_irq_disable+0x3b/0x140 [ 1107.240413][T28975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.240435][T28975] ? clear_bhb_loop+0x70/0xc0 [ 1107.240459][T28975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.240479][T28975] RIP: 0033:0x7f562a99e159 [ 1107.240499][T28975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.240517][T28975] RSP: 002b:00007f5628bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1107.240541][T28975] RAX: ffffffffffffffda RBX: 00007f562ac25fa0 RCX: 00007f562a99e159 [ 1107.240556][T28975] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 000000000000000b [ 1107.240570][T28975] RBP: 00007f5628bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.240583][T28975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.240596][T28975] R13: 00007f562ac26038 R14: 00007f562ac25fa0 R15: 00007ffd4dbec7f8 [ 1107.240627][T28975] [ 1107.792046][T28987] xt_REDIRECT: bad MAP_IPS. [ 1107.848988][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6355'. [ 1107.849034][T28990] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6355'. [ 1107.894487][T28993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6356'. [ 1107.894519][T28993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6356'. [ 1107.969967][T28993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6356'. [ 1107.985595][ T5895] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1107.986591][ T5895] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1107.986626][ T5895] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1107.986657][ T5895] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.134749][T29001] FAULT_INJECTION: forcing a failure. [ 1108.134749][T29001] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.134786][T29001] CPU: 1 UID: 0 PID: 29001 Comm: syz.3.6359 Not tainted syzkaller #0 PREEMPT(full) [ 1108.134809][T29001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1108.134822][T29001] Call Trace: [ 1108.134831][T29001] [ 1108.134840][T29001] dump_stack_lvl+0xe8/0x150 [ 1108.134876][T29001] should_fail_ex+0x410/0x560 [ 1108.134906][T29001] should_failslab+0xa8/0x100 [ 1108.134935][T29001] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1108.134960][T29001] ? __get_vm_area_node+0x155/0x2f0 [ 1108.135009][T29001] ? __get_vm_area_node+0x155/0x2f0 [ 1108.135044][T29001] __get_vm_area_node+0x155/0x2f0 [ 1108.135080][T29001] __vmalloc_node_range_noprof+0x343/0x1540 [ 1108.135112][T29001] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1108.135138][T29001] ? __lock_acquire+0x747/0x2de0 [ 1108.135196][T29001] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1108.135237][T29001] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1108.135259][T29001] __vmalloc_noprof+0xd2/0x120 [ 1108.135288][T29001] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1108.135315][T29001] bpf_prog_alloc_no_stats+0x47/0x560 [ 1108.135337][T29001] ? bpf_prog_alloc+0x2a/0x1a0 [ 1108.135363][T29001] bpf_prog_alloc+0x3c/0x1a0 [ 1108.135390][T29001] bpf_prog_load+0x7f8/0x1c20 [ 1108.135430][T29001] ? __pfx_bpf_prog_load+0x10/0x10 [ 1108.135481][T29001] __sys_bpf+0xd0d/0xd90 [ 1108.135514][T29001] ? __pfx___sys_bpf+0x10/0x10 [ 1108.135554][T29001] ? __fget_files+0x2a/0x420 [ 1108.135601][T29001] ? ksys_write+0x242/0x270 [ 1108.135635][T29001] ? __pfx_ksys_write+0x10/0x10 [ 1108.135671][T29001] __x64_sys_bpf+0xba/0xd0 [ 1108.135696][T29001] do_syscall_64+0x166/0x520 [ 1108.135724][T29001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.135745][T29001] ? clear_bhb_loop+0x70/0xc0 [ 1108.135772][T29001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.135792][T29001] RIP: 0033:0x7fdfdf39e159 [ 1108.135813][T29001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.135831][T29001] RSP: 002b:00007fdfe0345028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1108.135855][T29001] RAX: ffffffffffffffda RBX: 00007fdfdf625fa0 RCX: 00007fdfdf39e159 [ 1108.135870][T29001] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1108.135884][T29001] RBP: 00007fdfe0345090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.135897][T29001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.135909][T29001] R13: 00007fdfdf626038 R14: 00007fdfdf625fa0 R15: 00007ffcc34ba998 [ 1108.135944][T29001] [ 1108.135983][T29001] syz.3.6359: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1108.136047][T29001] CPU: 1 UID: 0 PID: 29001 Comm: syz.3.6359 Not tainted syzkaller #0 PREEMPT(full) [ 1108.136069][T29001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1108.136080][T29001] Call Trace: [ 1108.136088][T29001] [ 1108.136097][T29001] dump_stack_lvl+0xe8/0x150 [ 1108.136127][T29001] warn_alloc+0x24d/0x270 [ 1108.136148][T29001] ? __kasan_kmalloc+0x22/0xb0 [ 1108.136184][T29001] ? __pfx_warn_alloc+0x10/0x10 [ 1108.136205][T29001] ? __get_vm_area_node+0x155/0x2f0 [ 1108.136240][T29001] ? __get_vm_area_node+0x2a9/0x2f0 [ 1108.136277][T29001] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1108.136308][T29001] ? __lock_acquire+0x747/0x2de0 [ 1108.136357][T29001] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1108.136399][T29001] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1108.136421][T29001] __vmalloc_noprof+0xd2/0x120 [ 1108.136450][T29001] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1108.136477][T29001] bpf_prog_alloc_no_stats+0x47/0x560 [ 1108.136499][T29001] ? bpf_prog_alloc+0x2a/0x1a0 [ 1108.136531][T29001] bpf_prog_alloc+0x3c/0x1a0 [ 1108.136563][T29001] bpf_prog_load+0x7f8/0x1c20 [ 1108.136601][T29001] ? __pfx_bpf_prog_load+0x10/0x10 [ 1108.136654][T29001] __sys_bpf+0xd0d/0xd90 [ 1108.136686][T29001] ? __pfx___sys_bpf+0x10/0x10 [ 1108.136722][T29001] ? __fget_files+0x2a/0x420 [ 1108.136769][T29001] ? ksys_write+0x242/0x270 [ 1108.136802][T29001] ? __pfx_ksys_write+0x10/0x10 [ 1108.136838][T29001] __x64_sys_bpf+0xba/0xd0 [ 1108.136864][T29001] do_syscall_64+0x166/0x520 [ 1108.136891][T29001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.136912][T29001] ? clear_bhb_loop+0x70/0xc0 [ 1108.136937][T29001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.136956][T29001] RIP: 0033:0x7fdfdf39e159 [ 1108.136974][T29001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.136989][T29001] RSP: 002b:00007fdfe0345028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1108.137009][T29001] RAX: ffffffffffffffda RBX: 00007fdfdf625fa0 RCX: 00007fdfdf39e159 [ 1108.137024][T29001] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1108.137038][T29001] RBP: 00007fdfe0345090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.137049][T29001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.137061][T29001] R13: 00007fdfdf626038 R14: 00007fdfdf625fa0 R15: 00007ffcc34ba998 [ 1108.137092][T29001] [ 1108.137239][T29001] Mem-Info: [ 1108.137250][T29001] active_anon:6725 inactive_anon:0 isolated_anon:0 [ 1108.137250][T29001] active_file:1 inactive_file:44527 isolated_file:0 [ 1108.137250][T29001] unevictable:0 dirty:567 writeback:0 [ 1108.137250][T29001] slab_reclaimable:10998 slab_unreclaimable:102370 [ 1108.137250][T29001] mapped:31330 shmem:517 pagetables:1276 [ 1108.137250][T29001] sec_pagetables:0 bounce:0 [ 1108.137250][T29001] kernel_misc_reclaimable:0 [ 1108.137250][T29001] free:1281091 free_pcp:12374 free_cma:0 [ 1108.137297][T29001] Node 0 active_anon:26900kB inactive_anon:0kB active_file:4kB inactive_file:177900kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125320kB dirty:2268kB writeback:0kB shmem:2068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14252kB pagetables:4928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1108.137347][T29001] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1108.137397][T29001] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1108.137452][T29001] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1108.137492][T29001] Node 0 DMA32 free:1169872kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26900kB inactive_anon:0kB active_file:4kB inactive_file:177900kB unevictable:0kB writepending:2268kB zspages:0kB present:3129332kB managed:2546852kB mlocked:0kB bounce:0kB free_pcp:49496kB local_pcp:27500kB free_cma:0kB [ 1108.137547][T29001] lowmem_reserve[]: 0 0 0 0 0 [ 1108.137585][T29001] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1108.137636][T29001] lowmem_reserve[]: 0 0 0 0 0 [ 1108.137678][T29001] Node 1 Normal free:3939132kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1108.137732][T29001] lowmem_reserve[]: 0 0 0 0 0 [ 1108.137769][T29001] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1108.137887][T29001] Node 0 DMA32: 710*4kB (UE) 931*8kB (UME) 580*16kB (UME) 827*32kB (UME) 520*64kB (UME) 180*128kB (UM) 54*256kB (UM) 32*512kB (UME) 17*1024kB (UM) 4*2048kB (UME) 247*4096kB (UM) = 1169872kB [ 1108.138049][T29001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1108.138150][T29001] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 6*16kB (UM) 2*32kB (UM) 4*64kB (UM) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3939132kB [ 1108.138313][T29001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1108.138331][T29001] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1108.138346][T29001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1108.138362][T29001] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1108.138378][T29001] 45041 total pagecache pages [ 1108.138387][T29001] 0 pages in swap cache [ 1108.138394][T29001] Free swap = 124996kB [ 1108.138403][T29001] Total swap = 124996kB [ 1108.138412][T29001] 2097051 pages RAM [ 1108.138420][T29001] 0 pages HighMem/MovableOnly [ 1108.138429][T29001] 428722 pages reserved [ 1108.138436][T29001] 0 pages cma reserved [ 1111.000977][T29049] __nla_validate_parse: 1 callbacks suppressed [ 1111.001001][T29049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6369'. [ 1111.152219][T29054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1111.152266][T29054] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1111.314058][T29060] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6373'. [ 1111.314087][T29060] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6373'. [ 1111.399979][T29061] pim6reg: entered allmulticast mode [ 1111.463997][T29063] FAULT_INJECTION: forcing a failure. [ 1111.463997][T29063] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.464035][T29063] CPU: 0 UID: 0 PID: 29063 Comm: syz.4.6376 Not tainted syzkaller #0 PREEMPT(full) [ 1111.464058][T29063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1111.464071][T29063] Call Trace: [ 1111.464081][T29063] [ 1111.464091][T29063] dump_stack_lvl+0xe8/0x150 [ 1111.464128][T29063] should_fail_ex+0x410/0x560 [ 1111.464158][T29063] ? __alloc_skb+0x1db/0x7a0 [ 1111.464185][T29063] should_failslab+0xa8/0x100 [ 1111.464210][T29063] ? __alloc_skb+0x1db/0x7a0 [ 1111.464231][T29063] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1111.464261][T29063] ? __alloc_skb+0x18d/0x7a0 [ 1111.464287][T29063] ? __alloc_skb+0x1db/0x7a0 [ 1111.464331][T29063] __alloc_skb+0x1db/0x7a0 [ 1111.464362][T29063] _sctp_make_chunk+0x59/0x290 [ 1111.464473][T29063] sctp_make_datafrag_empty+0x12a/0x240 [ 1111.464497][T29063] ? __kasan_kmalloc+0x93/0xb0 [ 1111.464524][T29063] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1111.464549][T29063] ? sctp_datamsg_from_user+0x88/0xef0 [ 1111.464568][T29063] ? sctp_datamsg_from_user+0x88/0xef0 [ 1111.464594][T29063] ? sctp_auth_send_cid+0x69/0x250 [ 1111.464642][T29063] sctp_datamsg_from_user+0x735/0xef0 [ 1111.464687][T29063] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 1111.464789][T29063] ? do_raw_spin_lock+0x12b/0x2f0 [ 1111.464822][T29063] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1111.464854][T29063] ? sctp_sendmsg+0xbb8/0x2d00 [ 1111.464904][T29063] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 1111.464937][T29063] sctp_sendmsg+0x1bb5/0x2d00 [ 1111.464979][T29063] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1111.465010][T29063] ? aa_file_perm+0x4ed/0x15f0 [ 1111.465039][T29063] ? aa_file_perm+0x18b/0x15f0 [ 1111.465082][T29063] ? aa_sock_msg_perm+0xf5/0x210 [ 1111.465107][T29063] ? sock_rps_record_flow+0x19/0x350 [ 1111.465134][T29063] ? inet_sendmsg+0x298/0x320 [ 1111.465153][T29063] ? apparmor_socket_sendmsg+0x98/0x360 [ 1111.465179][T29063] ? __pfx_inet_sendmsg+0x10/0x10 [ 1111.465200][T29063] sock_sendmsg_nosec+0x10e/0x180 [ 1111.465225][T29063] sock_write_iter+0x2de/0x3e0 [ 1111.465250][T29063] ? __pfx_sock_write_iter+0x10/0x10 [ 1111.465281][T29063] ? bpf_lsm_file_permission+0x9/0x20 [ 1111.465309][T29063] ? security_file_permission+0x75/0x260 [ 1111.465341][T29063] vfs_write+0x612/0xba0 [ 1111.465383][T29063] ? __pfx_vfs_write+0x10/0x10 [ 1111.465426][T29063] ? __fget_files+0x2a/0x420 [ 1111.465465][T29063] ksys_write+0x150/0x270 [ 1111.465499][T29063] ? __pfx_ksys_write+0x10/0x10 [ 1111.465543][T29063] do_syscall_64+0x166/0x520 [ 1111.465571][T29063] ? trace_irq_disable+0x3b/0x140 [ 1111.465592][T29063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.465614][T29063] ? clear_bhb_loop+0x70/0xc0 [ 1111.465641][T29063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.465661][T29063] RIP: 0033:0x7f562a99e159 [ 1111.465682][T29063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.465700][T29063] RSP: 002b:00007f5628bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1111.465734][T29063] RAX: ffffffffffffffda RBX: 00007f562ac25fa0 RCX: 00007f562a99e159 [ 1111.465750][T29063] RDX: 000000000000000d RSI: 0000200000000100 RDI: 0000000000000003 [ 1111.465763][T29063] RBP: 00007f5628bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.465777][T29063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.465789][T29063] R13: 00007f562ac26038 R14: 00007f562ac25fa0 R15: 00007ffd4dbec7f8 [ 1111.465826][T29063] [ 1111.692094][T29070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6378'. [ 1111.692116][T29070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6378'. [ 1111.852210][T29059] ------------[ cut here ]------------ [ 1111.852228][T29059] len > ((int)(~0U >> 1)) [ 1111.852238][T29059] WARNING: ./include/linux/skbuff.h:2847 at ipgre_xmit+0x91b/0xcb0, CPU#0: syz.0.6374/29059 [ 1111.859110][T29072] netlink: 'syz.4.6378': attribute type 2 has an invalid length. [ 1111.859252][T29072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6378'. [ 1111.890846][T29059] Modules linked in: [ 1111.896285][T29059] CPU: 0 UID: 0 PID: 29059 Comm: syz.0.6374 Not tainted syzkaller #0 PREEMPT(full) [ 1111.905899][T29059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1111.916042][T29059] RIP: 0010:ipgre_xmit+0x91b/0xcb0 [ 1111.921207][T29059] Code: 48 3b 84 24 80 00 00 00 0f 85 42 01 00 00 31 c0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc c2 7b 01 cc e8 96 95 59 f7 90 <0f> 0b 90 e9 4b f8 ff ff 44 89 ff 44 89 e6 e8 92 97 59 f7 45 39 e7 [ 1111.940932][T29059] RSP: 0018:ffffc9000469f200 EFLAGS: 00010287 [ 1111.947089][T29059] RAX: ffffffff8a6e466a RBX: 0000000000000000 RCX: 0000000000080000 [ 1111.955146][T29059] RDX: ffffc9000fbeb000 RSI: 0000000000000fdd RDI: 0000000000000fde [ 1111.963234][T29059] RBP: ffffc9000469f2d0 R08: ffff888039e81f40 R09: 0000000000000002 [ 1111.971282][T29059] R10: 0000000000004888 R11: ffffffff8a6e3d50 R12: dffffc0000000000 [ 1111.979318][T29059] R13: ffff888022ec8000 R14: ffff88807432bdc0 R15: 00000000ffffff40 [ 1111.987368][T29059] FS: 00007f46396f16c0(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 1111.996589][T29059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1112.003253][T29059] CR2: 000000110c2c9b82 CR3: 0000000029b18000 CR4: 00000000003526f0 [ 1112.011408][T29059] Call Trace: [ 1112.014746][T29059] [ 1112.017713][T29059] ? __pfx_ipgre_xmit+0x10/0x10 [ 1112.022654][T29059] ? validate_xmit_xfrm+0x5d/0x1120 [ 1112.028127][T29059] ? rcu_is_watching+0x16/0xb0 [ 1112.032978][T29059] ? __dev_direct_xmit+0x33c/0x730 [ 1112.038189][T29059] __dev_direct_xmit+0x4b6/0x730 [ 1112.043186][T29059] ? __pfx___dev_direct_xmit+0x10/0x10 [ 1112.048777][T29059] ? do_raw_spin_unlock+0xf5/0x200 [ 1112.053932][T29059] ? skb_put+0x112/0x210 [ 1112.058298][T29059] xsk_generic_xmit+0x272b/0x4730 [ 1112.063366][T29059] ? __lock_acquire+0x747/0x2de0 [ 1112.068411][T29059] ? xsk_generic_xmit+0x107/0x4730 [ 1112.073567][T29059] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 1112.079015][T29059] ? xsk_poll+0xa6/0x670 [ 1112.083301][T29059] ? xsk_poll+0xa6/0x670 [ 1112.088009][T29059] xsk_poll+0x326/0x670 [ 1112.092203][T29059] ? xsk_poll+0xa6/0x670 [ 1112.096517][T29059] sock_poll+0x338/0x3f0 [ 1112.100805][T29059] ? __pfx_sock_poll+0x10/0x10 [ 1112.105647][T29059] do_select+0x1067/0x17f0 [ 1112.110663][T29059] ? do_select+0xbf1/0x17f0 [ 1112.115382][T29059] ? __pfx_do_select+0x10/0x10 [ 1112.120211][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.125081][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.129798][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.134520][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.139306][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.144026][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.148890][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.153613][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.158404][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.163121][T29059] core_sys_select+0x86d/0xb40 [ 1112.167959][T29059] ? __pfx_core_sys_select+0x10/0x10 [ 1112.173375][T29059] ? __pfx_set_user_sigmask+0x10/0x10 [ 1112.178813][T29059] __se_sys_pselect6+0x267/0x320 [ 1112.183781][T29059] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1112.189386][T29059] ? __x64_sys_pselect6+0x21/0xf0 [ 1112.194440][T29059] do_syscall_64+0x166/0x520 [ 1112.199077][T29059] ? trace_irq_disable+0x3b/0x140 [ 1112.204125][T29059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.210244][T29059] ? clear_bhb_loop+0x70/0xc0 [ 1112.214998][T29059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.221103][T29059] RIP: 0033:0x7f463879e159 [ 1112.225626][T29059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.245486][T29059] RSP: 002b:00007f46396f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1112.253943][T29059] RAX: ffffffffffffffda RBX: 00007f4638a25fa0 RCX: 00007f463879e159 [ 1112.262073][T29059] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1112.270282][T29059] RBP: 00007f463883506b R08: 0000000000000000 R09: 0000000000000000 [ 1112.278429][T29059] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 1112.286559][T29059] R13: 00007f4638a26038 R14: 00007f4638a25fa0 R15: 00007fffe87da458 [ 1112.294563][T29059] [ 1112.297721][T29059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1112.305030][T29059] CPU: 0 UID: 0 PID: 29059 Comm: syz.0.6374 Not tainted syzkaller #0 PREEMPT(full) [ 1112.314418][T29059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1112.324488][T29059] Call Trace: [ 1112.327798][T29059] [ 1112.330736][T29059] vpanic+0x56d/0xa60 [ 1112.334920][T29059] ? __pfx__printk+0x10/0x10 [ 1112.339685][T29059] ? __pfx_vpanic+0x10/0x10 [ 1112.344194][T29059] ? is_bpf_text_address+0x292/0x2b0 [ 1112.349482][T29059] ? is_bpf_text_address+0x26/0x2b0 [ 1112.354696][T29059] panic+0xc5/0xd0 [ 1112.358429][T29059] ? __pfx_panic+0x10/0x10 [ 1112.362995][T29059] __warn+0x315/0x4c0 [ 1112.367074][T29059] ? ipgre_xmit+0x91b/0xcb0 [ 1112.371607][T29059] ? ipgre_xmit+0x91b/0xcb0 [ 1112.376254][T29059] __report_bug+0x276/0x570 [ 1112.380849][T29059] ? ipgre_xmit+0x91b/0xcb0 [ 1112.385363][T29059] ? __pfx___report_bug+0x10/0x10 [ 1112.390434][T29059] ? __alloc_skb+0x27a/0x7a0 [ 1112.395063][T29059] ? rcu_is_watching+0x16/0xb0 [ 1112.399860][T29059] ? __alloc_skb+0x27a/0x7a0 [ 1112.404493][T29059] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1112.409915][T29059] ? ipgre_xmit+0x91b/0xcb0 [ 1112.414452][T29059] report_bug+0x16b/0x220 [ 1112.418891][T29059] ? ipgre_xmit+0x91b/0xcb0 [ 1112.423423][T29059] ? ipgre_xmit+0x91d/0xcb0 [ 1112.428030][T29059] handle_bug+0x9c/0x200 [ 1112.432304][T29059] exc_invalid_op+0x1a/0x50 [ 1112.436826][T29059] asm_exc_invalid_op+0x1a/0x20 [ 1112.441721][T29059] RIP: 0010:ipgre_xmit+0x91b/0xcb0 [ 1112.446945][T29059] Code: 48 3b 84 24 80 00 00 00 0f 85 42 01 00 00 31 c0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc c2 7b 01 cc e8 96 95 59 f7 90 <0f> 0b 90 e9 4b f8 ff ff 44 89 ff 44 89 e6 e8 92 97 59 f7 45 39 e7 [ 1112.466657][T29059] RSP: 0018:ffffc9000469f200 EFLAGS: 00010287 [ 1112.472840][T29059] RAX: ffffffff8a6e466a RBX: 0000000000000000 RCX: 0000000000080000 [ 1112.480830][T29059] RDX: ffffc9000fbeb000 RSI: 0000000000000fdd RDI: 0000000000000fde [ 1112.488826][T29059] RBP: ffffc9000469f2d0 R08: ffff888039e81f40 R09: 0000000000000002 [ 1112.496881][T29059] R10: 0000000000004888 R11: ffffffff8a6e3d50 R12: dffffc0000000000 [ 1112.504861][T29059] R13: ffff888022ec8000 R14: ffff88807432bdc0 R15: 00000000ffffff40 [ 1112.513116][T29059] ? __pfx_ipgre_xmit+0x10/0x10 [ 1112.518082][T29059] ? ipgre_xmit+0x91a/0xcb0 [ 1112.522631][T29059] ? __pfx_ipgre_xmit+0x10/0x10 [ 1112.527527][T29059] ? validate_xmit_xfrm+0x5d/0x1120 [ 1112.532923][T29059] ? rcu_is_watching+0x16/0xb0 [ 1112.537727][T29059] ? __dev_direct_xmit+0x33c/0x730 [ 1112.542872][T29059] __dev_direct_xmit+0x4b6/0x730 [ 1112.547939][T29059] ? __pfx___dev_direct_xmit+0x10/0x10 [ 1112.553432][T29059] ? do_raw_spin_unlock+0xf5/0x200 [ 1112.558649][T29059] ? skb_put+0x112/0x210 [ 1112.563001][T29059] xsk_generic_xmit+0x272b/0x4730 [ 1112.568039][T29059] ? __lock_acquire+0x747/0x2de0 [ 1112.573047][T29059] ? xsk_generic_xmit+0x107/0x4730 [ 1112.578191][T29059] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 1112.583592][T29059] ? xsk_poll+0xa6/0x670 [ 1112.587857][T29059] ? xsk_poll+0xa6/0x670 [ 1112.592241][T29059] xsk_poll+0x326/0x670 [ 1112.596420][T29059] ? xsk_poll+0xa6/0x670 [ 1112.600696][T29059] sock_poll+0x338/0x3f0 [ 1112.604955][T29059] ? __pfx_sock_poll+0x10/0x10 [ 1112.609732][T29059] do_select+0x1067/0x17f0 [ 1112.614358][T29059] ? do_select+0xbf1/0x17f0 [ 1112.618901][T29059] ? __pfx_do_select+0x10/0x10 [ 1112.623694][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.628477][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.633170][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.637874][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.642563][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.647344][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.652037][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.656739][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.661532][T29059] ? __pfx_pollwake+0x10/0x10 [ 1112.666243][T29059] core_sys_select+0x86d/0xb40 [ 1112.671072][T29059] ? __pfx_core_sys_select+0x10/0x10 [ 1112.676390][T29059] ? __pfx_set_user_sigmask+0x10/0x10 [ 1112.681910][T29059] __se_sys_pselect6+0x267/0x320 [ 1112.686964][T29059] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1112.692441][T29059] ? __x64_sys_pselect6+0x21/0xf0 [ 1112.697480][T29059] do_syscall_64+0x166/0x520 [ 1112.702087][T29059] ? trace_irq_disable+0x3b/0x140 [ 1112.707119][T29059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.713288][T29059] ? clear_bhb_loop+0x70/0xc0 [ 1112.717980][T29059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.723884][T29059] RIP: 0033:0x7f463879e159 [ 1112.728316][T29059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.748107][T29059] RSP: 002b:00007f46396f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1112.756628][T29059] RAX: ffffffffffffffda RBX: 00007f4638a25fa0 RCX: 00007f463879e159 [ 1112.764614][T29059] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1112.772605][T29059] RBP: 00007f463883506b R08: 0000000000000000 R09: 0000000000000000 [ 1112.780598][T29059] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 1112.788598][T29059] R13: 00007f4638a26038 R14: 00007f4638a25fa0 R15: 00007fffe87da458 [ 1112.796613][T29059] [ 1112.800018][T29059] Kernel Offset: disabled [ 1112.804349][T29059] Rebooting in 86400 seconds..