last executing test programs: 3.648467017s ago: executing program 3 (id=1296): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 3.479560775s ago: executing program 0 (id=1297): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f00000011c0)=0x1, 0x4) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0xa, 0x4) socket(0x29, 0x5, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r5, 0x64e98, 0x16ac1}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x371f}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) listen(r3, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x4}, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 3.263380173s ago: executing program 2 (id=1298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001800800014000000003", @ANYRESOCT=r1], 0x140}}, 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) 3.198281147s ago: executing program 4 (id=1299): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f7c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48005}, 0x4004011) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f7c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48005}, 0x4004011) 2.96286989s ago: executing program 4 (id=1300): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e51c020000000000c500fcff0000000085000000d300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40004}, 0x94) 2.734514661s ago: executing program 4 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 2.62303128s ago: executing program 2 (id=1302): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x85dd, @loopback, 0x8040}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2.622648233s ago: executing program 3 (id=1303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xb85c}, &(0x7f0000000100)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x600, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000a6c000000060a0b04000000000000000002000009400004803c0001800b000100657874686472000088150280080004400000000308000740000000170800064000000001050002000000000008000340fffffffd0900010073797a300000000009"], 0x94}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x64, r4, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@pci, {0x8, 0x3, 0x4000001}}}]}, 0xfde3}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004810) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0xa, 0x3, 0x0, 0xa, 0x6, 0x6, 0x6, 0x0, r1}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x8010, 0x4) writev(r0, &(0x7f0000002d00)=[{&(0x7f0000001c40)="332d1570dc7dbbde10e5fb4330a935762991030d7d7713aa9ad620e0d418ca6a5ef44f346148fba94d12248c3aa766", 0x2f}, {&(0x7f0000000300)="5e3f72bb29f64a885c8159b5bc5247454c42f376801092dbf2bd51d6368119a016ee6e0688b381ed5f5ef83c6227c32859ecfd29a3a7e916804fa0e4f189a5a64cde1594601ec665f955c1ee2d68247e2b1b904ab3bb4dae053e5a05da06b85e5682d42288ddf571cd3d2b66d148282cc155af98c2d72091316327229f5c4a35052bd10f3950fbfee075", 0x8a}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="c7", 0x1}, {&(0x7f0000000180)="b0fcf9971c29f40c76f7997c8185e1eab88d4361a15b9b0be0e6e27f0878705c2ddb8a0f290cfd3cdedecb4aa4f6441467a8755a00945a8139fc525402274ff75e8172420fab280488a7c7954452a14d063a22dc5a734f5eb009ff1f8d31cf81f5f795f70d0eaa0368f4536aea0f2e841d0eccfbd94cc0e168361587ed935ad1534163def444237520d7e0451a65fdf1e88659897fec1a9f2ca958dece76c16d2e16533b1d4c1c94712806065dfe142650", 0xb1}, {&(0x7f00000003c0)="c6616a2e77e50fe2447baf142f4afd4cf0a27c6d0aa3848d7564f90255857301fd7b185a51a85c5493a784fb9c1f895214da0832b10d7c7ae09dbc91b31dbcbb49a9dcaf21804e0b78dd7c9e28ad5c36874d99502667b1d0db6e1acd924f2fd3d6806b90c24844949a873213c36546fcffaa0149e2b144afa3170693d7229e00f98d013fcd54a5237187ec63e8d20302414f916a07b4481f9ce9300e8331b0c759e86a3876126269a24838d6abd049c3363bdb659f", 0xb5}, {&(0x7f0000001d00)="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", 0x1000}], 0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) 2.511794828s ago: executing program 1 (id=1304): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4c14) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500ffff240007801800018014050000000000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000897f41bd7cef593db051cd4c1a4cc0a555b8f15793ae4ab0e47e7d06a84b7e7e8251088b0e7ae06c1c1732099fb22284ce66f9754ef632"], 0x4c}}, 0x4000080) 2.348094087s ago: executing program 4 (id=1305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000600)={0xfdf9, 0x8, 0x1f}, 0x8) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c) recvmmsg(r2, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000140, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000380)=0x6, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@loopback, @dev, 0x0}, &(0x7f00000001c0)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000003c0)={@local, @multicast2, 0x0, 0x6, [@multicast2, @private=0xa010101, @empty, @private=0x8, @rand_addr=0x64010102, @rand_addr=0x64010102]}, 0x28) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x308, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004844}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c000004f141801c00018006000600800a00000e00150077697265677561726400000004000280"], 0x38}}, 0xc000) socket$inet6(0xa, 0xe, 0x6) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r8, 0x2, {0x2, 0xff, 0x2}, 0x1}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r9}, 0x38) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030a0000002cbd7000fedbdf25030006000017660002004e22ac1414bb0000001000000000030005000000000002004e21ac1e03010000000000000000020013"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d40)={0xbf0, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xbc0, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf16}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @remote, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x2a4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "799cd48fd3dffeedc16eddef47738c6369eda52c6196294141d03614283bfb7a"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2db10fd2601f26a39e8ee975bf8f4cafbf1ef0f8c88aa6faa042c6d827133c53"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_ALLOWEDIPS={0x218, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}, {0x764, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x26c, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xf}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4d8, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x9}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "68a0495e1d07f2a68d09855e3f1001d293b2c5011e100d62d77683d9dd251f2c"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf000}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a24edcc5bf86bff7f5d721cea5b5e75df901fb2fcfb77145a0f3cae46745c49"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3cd80953838606045a0f325c30817568bac14968c100157e83922ae028d222db"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0xbf0}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 2.317208081s ago: executing program 0 (id=1306): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.300209133s ago: executing program 1 (id=1307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xd0901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x421}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x5, 0x9, 0x1, 0x2, 0x8, 0x6, 0x0, 0x4d74, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x207, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0xb, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0xffffffff, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0xffffffff, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x468}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0xfff2, 0x8}, {0x4, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2008085}, 0x20000041) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) (async) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) 1.874730401s ago: executing program 1 (id=1308): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b119e0000000000850ff2e502000000850000000000000095000007000000009500a50500004dd0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b119e0000000000850ff2e502000000850000000000000095000007000000009500a50500004dd0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000140)="0c2ed4", 0x3, 0x40000, &(0x7f0000000340)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140)="0c2ed4", 0x3, 0x40000, &(0x7f0000000340)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000040)=""/7, 0xbbe5, 0x0, 0x0, 0x4f, 0x0, 0x0, 0xe23cfb1e8561df4f, 0x0, 0x72a}, 0x94) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b80)={{0xffffffffffffffff, &(0x7f0000000540)='@^\x00', 0x10800, 0x0, 0x4, 0x0, 0x0}, 0x1, &(0x7f0000000b00)=[{0x3, 0x4, 0x0, &(0x7f0000000940), 0x0, 0x8}]}) socket$kcm(0x10, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1d, 0x0, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x240000c0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$packet(0x11, 0x3, 0x300) r8 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 1.728476782s ago: executing program 0 (id=1309): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f00000011c0)=0x1, 0x4) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0xa, 0x4) socket(0x29, 0x5, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r6, 0x64e98, 0x16ac1}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x371f}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) listen(r3, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r8, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @rand_addr=' \x01\x00', 0x2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x29, 0x37, "f1ba"}], 0x18}}], 0x1, 0x4000000) write(r4, &(0x7f0000001200)="2000000012005f0214f9f4070000fbe40a0000000000fefa4a81592a5e2f844fe4fbe7e865c245a1589da6287320ca9da83132f0c80a95610edcd607cdbe3fec62abf5085b10f2f55e1d913148b6e9a6ed450557ec48f4ab4a68d7b439f77d50f25386598e72be53119a2f483d22fe4883589ceb2a59066aa6ab04a2c21de4a6d4533450dc030bd95f3e444fee6c041725b20441c97ad58328195b5a5e5eac", 0x9f) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x4}, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 1.569157629s ago: executing program 2 (id=1310): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$tipc(r3, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r4, 0xda90) (async) r5 = accept4(r4, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000180), &(0x7f0000000080)=0x8) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) close(0x4) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) (async) bind$tipc(r2, 0x0, 0x0) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x40}, 0x20) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc04000000000000"], 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) close(r2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b40000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="5e2e0900000000008400128009000100766c616e00000000740002800600010004000000100003800c0001000700000001000000580004800c00010001800000040000000300011cfeffffff010000003c00010000000008faffffff0c0001008b000000100000000c0001000d000000020000000c00010001000000000000000c000100840000000000000308000500", @ANYRES32=r9], 0xb4}, 0x1, 0x0, 0x0, 0x600}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6389}, 0x1c) 1.422232418s ago: executing program 2 (id=1311): r0 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x3ff) r3 = epoll_create1(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000180)={0xa11, 0x1000, 0xc200, 0x8000, 0x1, 0x7fffffff, 0x8, 0x4}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001480)={0x4000000a}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2400c0d1) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {0x3801000000000000}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) r6 = socket$inet6(0xa, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x4c, r8, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x4c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r9, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r9, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r9, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'veth1\x00', @multicast}) 1.250102802s ago: executing program 1 (id=1312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2d, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r2, 0x1, 0x7, 0xe}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0xd4, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7f}, {0xc, 0x90, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40d5}, 0x44) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$team(&(0x7f0000000140), r5) socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000c00), 0x0, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r7, 0x0, 0x0) recvmsg(r7, 0x0, 0x10002) pipe(&(0x7f00000000c0)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r9, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r10], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {0xffff, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 1.080398421s ago: executing program 0 (id=1313): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x17}, 0x94) 1.030458326s ago: executing program 3 (id=1314): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000110000100100146c00000001000000001b000014000000000000001001000002"], 0x30}, 0x0) 997.7234ms ago: executing program 4 (id=1315): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x5, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x28a2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xbf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9e93}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x10}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x81}}, @qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x4}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}]}, 0xb8}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) close(0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x14, 0x4, 0x8, 0xb, 0xc}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r7, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x801) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x12, 0xffffffffffffffff, 0x2963b000) 880.237069ms ago: executing program 0 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 767.047168ms ago: executing program 3 (id=1317): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4c14) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500ffff240007801800018014050000000000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000897f41bd7cef593db051cd4c1a4cc0a555b8f15793ae4ab0e47e7d06a84b7e7e8251088b0e7ae06c1c1732099fb22284ce66f9754ef632"], 0x4c}}, 0x4000080) 683.494393ms ago: executing program 3 (id=1318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x4d74, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0xffffffff, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x468}}, 0x0) (async, rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async, rerun: 64) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) (async) socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 32) 555.356168ms ago: executing program 0 (id=1319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c00028008000140000000130800024000000000080004400000009b080003400000000108000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x44800) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x24008881) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x38, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xa, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r6, 0x10, 0xfffffffd, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xffffffff, 0x16}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x8000) r11 = getpid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r12 = syz_open_procfs$namespace(0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r12}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4880) 538.120008ms ago: executing program 1 (id=1320): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) sendto$inet6(r1, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @remote}}}, &(0x7f0000000300)=0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4) setsockopt$inet6_int(r3, 0x29, 0xfd, &(0x7f0000000040)=0x1f2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0xbe, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x2004809c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r4, 0x2000) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) ioctl$NS_GET_USERNS(r7, 0x8008b70d, 0x0) 522.904331ms ago: executing program 2 (id=1321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (fail_nth: 4) 466.275608ms ago: executing program 4 (id=1322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'macvtap0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x7, 0xfa, 0xa4, 0x3, 0x401, 0x6, 0x1, 0x1, 0x5, 0x2, 0xb6, 0x0, 0x3, 0x7fffffff, 0x7ff, 0x7fff, 0x1, 0x7ff, 0x2, 0x3, 0x8, 0xffffcb2a}}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000001d0000000800e95a", @ANYRES32=0x0, @ANYBLOB="38002f800c0002000000000000000000280003801c0003800600010000000000080002000200000006000300a3aa0000080001"], 0x54}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) shutdown(r3, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000100)={r2, &(0x7f0000000380)='\x7f[g\xd8C\xc39\xfdo\x91\x06*|O\xb0g\\\xda\x91\xa9\xe2\x8c\x81\x8c\xd6\xff\xff\xff\x7f\x00\x00\x00\x00Y2\x02\x82r`n8u\xd8\xb9\x05Pj\x84u\xc6\xc2\xf9U\xcd\x8d\xec\xc8\xa1C\xc6P:\xc1\xdcp\xb8\xfd\xccw&\x9eC\xaa\x86j>\x80\\\x1153', 0x541600, &(0x7f00000001c0)={@align=0x5, {0xcd, 0x5, 0x8, 0x6f}}, 0xd1c1, 0x0, &(0x7f0000000240)=0x8000}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x7, 0xc, 0x0, 0x1, 0x3, 0x9, 0x7, 0x1}, &(0x7f00000003c0)=0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r6], 0x5c}}, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000851}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 233.717349ms ago: executing program 2 (id=1323): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}, {0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}], 0x40) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x6) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80800) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x2, 0x80065c9}, 0xc) syz_emit_ethernet(0x8e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606dd31800580600fc010000000000000000000000000002fe8000000000000040000000000000aa08004001a1d81c45165e3d55eca5329e5fb78955f933c1c3204d80570c31a8042b020000005a412e8fe4ead33169b276f87216a9a6e5b2185004199c37e670c27333f6fe1ec996151e57bb54729eb637be8b2197", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000c90780000fe0cf9894870669d7821c47113126171cffc515318c1c852cc0ce8dbc955050e0000000100000000fffffffa13129829e5b8831b669841f72541c6efc9102206c6592e7d"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000fcff00020000200900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x9212, @mcast2, 0x7}}, 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd70395cdbdf987000000008000300", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r9 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) 63.968243ms ago: executing program 1 (id=1324): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x151da000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x1e, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000f9250000000000000274973200001c110100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000d6f61e420ff88500000086000000184b0000ffffffff000000000000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="000000000000000300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) ioctl(r0, 0x4574f538, &(0x7f0000001640)="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") mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0xc1, 0x0, &(0x7f00000004c0)="f8020416000000000009005386ddb44b501c817ea08344bd8700883df057d8f81905e3d0dd65598770cff05f580000000000000000007eabffe64b755976e9eb418895d4a4d067e4707d45bda6ddec30d02d471ddae3b80a3169ae561517edb3c31b8fce614342c7d533d35c40e2c97d64ec6ded5bdc95f5a90e7d82d281f4b78d7969359a00066139d0fcb81a5978aeed331543816100a26e692ebc6f8f94d69f860458ab3eca52749486f0cf14306086e3bb36acb815dcffd57fcf4184ab1b0b", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000154000000030a010200000000000000000100ffff0900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310020000038000000050a4f010000000000000000010020000c00024000000000000000010900010073797a31000000000c000480080001400000000514000000110001000000"], 0xdc}}, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000280)=0x1080, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES16=r5, @ANYRES16=r0, @ANYRES32=r8, @ANYRESOCT=r3], 0x2c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000040000002cfd652e8de49a3a1914d06c25204b06a056e66ed21c64e6c00cb8f1fd7b8cd51864887be14d0fc48c26f37786dc6dd76c181ecd885b1885924cc79bbc381714cdff93a3f816190d8dccd74bc94de422c1e596dfcab48d4e223f5a1894cdaf4d9975934cb11410", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000200"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000957cb6a5b4a3b67dc49d43e9ced4362e095570be03d130b7149b9760cb4305cad335042817427c37a855398dd3252f3bbb6855a0671415626fb12a4516ce570a59ac924505d35067e03efc301bd43cae9f5973eaba0c320536e28f965fdeff9faf3a32994a64aa"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) 0s ago: executing program 3 (id=1325): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x11, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x58}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x57}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, &(0x7f0000000100), 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x4, 0x3, 0xc}, {0x0, 0x5, 0xc, 0xa}, {0x3, 0x4, 0x1, 0x4}, {0x3, 0x5, 0x5, 0xc}, {0x0, 0x2, 0x0, 0x1}], 0x10, 0x8}, 0x94) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000800)={&(0x7f0000000300)=0x919, 0x4b, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f00000007c0)}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x800006, 0x100010, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000000, 0x10010, 0xffffffffffffffff, 0x80000000) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "af", "dd"}}}}}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r0}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r4, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x7875c637d38d5f83, 0xc, 0x7f, 0x4fb, 0x11, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x80, 0x81, 0x7ff}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000d40)={0x0, r2}, 0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000f00)={{r3, &(0x7f0000000a00)='\x00', 0x200, &(0x7f0000000c80)={@align=0x6, {0x0, 0x5, 0x34750000, 0x10001}}, 0x5, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8}, {[0x6, 0x10, 0x3, 0x80000000]}, 0x3, 0xb7, &(0x7f0000000e40)=""/183}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x9, &(0x7f0000000980)=@raw=[@jmp={0x5, 0x1, 0x0, 0x8, 0x9, 0x1, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000a40)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0xf, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c00), &(0x7f0000000c40)=[{0x5, 0x3, 0xc, 0x9}, {0x3, 0xffffffff, 0x3, 0x8}, {0x4, 0x2, 0x10, 0x6}], 0x10, 0xf}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): clear_bhb_loop+0x40/0x90 [ 166.857053][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.857074][ T7663] RIP: 0033:0x7f79dd79ce59 [ 166.857094][ T7663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.857111][ T7663] RSP: 002b:00007f79de60c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 166.857133][ T7663] RAX: ffffffffffffffda RBX: 00007f79dda15fa0 RCX: 00007f79dd79ce59 [ 166.857149][ T7663] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 166.857162][ T7663] RBP: 00007f79de60c090 R08: 0000200000000080 R09: 000000000000001c [ 166.857175][ T7663] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 166.857187][ T7663] R13: 00007f79dda16038 R14: 00007f79dda15fa0 R15: 00007fff211eb688 [ 166.857221][ T7663] [ 167.179336][ T7666] dvmrp0: left allmulticast mode [ 167.188924][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.306108][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.330406][ T7670] netlink: 3 bytes leftover after parsing attributes in process `syz.1.519'. [ 167.369297][ T7670] 1ªX¹¦À: renamed from 60ªX¹¦À (while UP) [ 167.382815][ T7670] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 167.505771][ T7672] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.656882][ T7681] vlan2: entered promiscuous mode [ 167.980047][ T7692] IPv6: sit1: Disabled Multicast RS [ 168.251967][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.392359][ T7703] FAULT_INJECTION: forcing a failure. [ 168.392359][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.427947][ T7703] CPU: 1 UID: 0 PID: 7703 Comm: syz.4.534 Not tainted syzkaller #0 PREEMPT(full) [ 168.427978][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.427991][ T7703] Call Trace: [ 168.427999][ T7703] [ 168.428008][ T7703] dump_stack_lvl+0xe8/0x150 [ 168.428039][ T7703] should_fail_ex+0x412/0x560 [ 168.428073][ T7703] _copy_from_user+0x2d/0xb0 [ 168.428107][ T7703] ___sys_sendmsg+0x1c6/0x360 [ 168.428139][ T7703] ? __lock_acquire+0x6b5/0x2cf0 [ 168.428168][ T7703] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.428239][ T7703] ? __fget_files+0x2a/0x420 [ 168.428264][ T7703] ? __fget_files+0x3a0/0x420 [ 168.428301][ T7703] __x64_sys_sendmsg+0x1bd/0x2a0 [ 168.428339][ T7703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.428391][ T7703] ? __pfx_ksys_write+0x10/0x10 [ 168.428432][ T7703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.428455][ T7703] do_syscall_64+0x15f/0xf80 [ 168.428475][ T7703] ? trace_irq_disable+0x3b/0x140 [ 168.428508][ T7703] ? clear_bhb_loop+0x40/0x90 [ 168.428535][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.428556][ T7703] RIP: 0033:0x7f79dd79ce59 [ 168.428576][ T7703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.428594][ T7703] RSP: 002b:00007f79de60c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.428617][ T7703] RAX: ffffffffffffffda RBX: 00007f79dda15fa0 RCX: 00007f79dd79ce59 [ 168.428632][ T7703] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 168.428645][ T7703] RBP: 00007f79de60c090 R08: 0000000000000000 R09: 0000000000000000 [ 168.428658][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.428670][ T7703] R13: 00007f79dda16038 R14: 00007f79dda15fa0 R15: 00007fff211eb688 [ 168.428704][ T7703] [ 168.710466][ T7711] dvmrp0: left allmulticast mode [ 168.716739][ T7713] netlink: 'syz.2.535': attribute type 39 has an invalid length. [ 168.835019][ T7711] netlink: 3 bytes leftover after parsing attributes in process `syz.3.536'. [ 168.889195][ T7718] FAULT_INJECTION: forcing a failure. [ 168.889195][ T7718] name failslab, interval 1, probability 0, space 0, times 0 [ 168.909793][ T7711] 0ªX¹¦À: renamed from 61ªX¹¦À (while UP) [ 168.923400][ T7718] CPU: 0 UID: 0 PID: 7718 Comm: syz.0.539 Not tainted syzkaller #0 PREEMPT(full) [ 168.923429][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.923442][ T7718] Call Trace: [ 168.923450][ T7718] [ 168.923459][ T7718] dump_stack_lvl+0xe8/0x150 [ 168.923491][ T7718] should_fail_ex+0x412/0x560 [ 168.923526][ T7718] should_failslab+0xa8/0x100 [ 168.923560][ T7718] ? skb_clone+0x212/0x3a0 [ 168.923580][ T7718] kmem_cache_alloc_noprof+0x87/0x650 [ 168.923610][ T7718] ? __netlink_lookup+0xc6/0x8b0 [ 168.923650][ T7718] skb_clone+0x212/0x3a0 [ 168.923675][ T7718] __netlink_deliver_tap+0x404/0x850 [ 168.923720][ T7718] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.923754][ T7718] netlink_deliver_tap+0x19c/0x1b0 [ 168.923787][ T7718] netlink_unicast+0x730/0x8e0 [ 168.923835][ T7718] netlink_sendmsg+0x813/0xb40 [ 168.923878][ T7718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.923915][ T7718] ? aa_sock_msg_perm+0xf1/0x1b0 [ 168.923955][ T7718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.923989][ T7718] ____sys_sendmsg+0x972/0x9f0 [ 168.924023][ T7718] ? __might_fault+0xaf/0x130 [ 168.924057][ T7718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.924100][ T7718] ? import_iovec+0x73/0xa0 [ 168.924136][ T7718] ___sys_sendmsg+0x2a5/0x360 [ 168.924171][ T7718] ? __lock_acquire+0x6b5/0x2cf0 [ 168.924200][ T7718] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.924272][ T7718] ? __fget_files+0x2a/0x420 [ 168.924298][ T7718] ? __fget_files+0x3a0/0x420 [ 168.924337][ T7718] __x64_sys_sendmsg+0x1bd/0x2a0 [ 168.924373][ T7718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.924418][ T7718] ? __pfx_ksys_write+0x10/0x10 [ 168.924460][ T7718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.924485][ T7718] do_syscall_64+0x15f/0xf80 [ 168.924506][ T7718] ? trace_irq_disable+0x3b/0x140 [ 168.924540][ T7718] ? clear_bhb_loop+0x40/0x90 [ 168.924567][ T7718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.924590][ T7718] RIP: 0033:0x7f8c3979ce59 [ 168.924610][ T7718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.924629][ T7718] RSP: 002b:00007f8c3a5c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.924652][ T7718] RAX: ffffffffffffffda RBX: 00007f8c39a15fa0 RCX: 00007f8c3979ce59 [ 168.924668][ T7718] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 168.924681][ T7718] RBP: 00007f8c3a5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 168.924694][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.924706][ T7718] R13: 00007f8c39a16038 R14: 00007f8c39a15fa0 R15: 00007ffc86952bf8 [ 168.924742][ T7718] [ 169.223163][ T7711] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 169.267869][ T7704] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.284880][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.386668][ T7724] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 169.598790][ T7724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.635160][ T7743] FAULT_INJECTION: forcing a failure. [ 169.635160][ T7743] name failslab, interval 1, probability 0, space 0, times 0 [ 169.648007][ T7743] CPU: 1 UID: 0 PID: 7743 Comm: syz.2.549 Not tainted syzkaller #0 PREEMPT(full) [ 169.648033][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.648044][ T7743] Call Trace: [ 169.648052][ T7743] [ 169.648060][ T7743] dump_stack_lvl+0xe8/0x150 [ 169.648086][ T7743] should_fail_ex+0x412/0x560 [ 169.648117][ T7743] should_failslab+0xa8/0x100 [ 169.648146][ T7743] __kmalloc_cache_noprof+0x88/0x660 [ 169.648170][ T7743] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 169.648186][ T7743] ? sctp_v6_cmp_addr+0x15/0xd0 [ 169.648202][ T7743] ? sctp_add_bind_addr+0x8c/0x370 [ 169.648235][ T7743] sctp_add_bind_addr+0x8c/0x370 [ 169.648269][ T7743] sctp_copy_local_addr_list+0x314/0x4f0 [ 169.648306][ T7743] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 169.648340][ T7743] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 169.648376][ T7743] ? sctp_v6_is_any+0x64/0x80 [ 169.648399][ T7743] ? sctp_copy_one_addr+0x93/0x360 [ 169.648437][ T7743] sctp_bind_addr_copy+0xb3/0x3c0 [ 169.648472][ T7743] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 169.648506][ T7743] sctp_connect_new_asoc+0x2ff/0x6b0 [ 169.648536][ T7743] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 169.648571][ T7743] ? __local_bh_enable_ip+0xd0/0x130 [ 169.648592][ T7743] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 169.648624][ T7743] ? security_sctp_bind_connect+0x7e/0x2c0 [ 169.648652][ T7743] sctp_sendmsg+0x1528/0x2c10 [ 169.648705][ T7743] ? __pfx_sctp_sendmsg+0x10/0x10 [ 169.648741][ T7743] ? aa_sk_perm+0x6d5/0x900 [ 169.648768][ T7743] ? __might_fault+0xaf/0x130 [ 169.648804][ T7743] ? __pfx_aa_sk_perm+0x10/0x10 [ 169.648834][ T7743] ? sock_rps_record_flow+0x19/0x350 [ 169.648856][ T7743] ? __pfx_inet_sendmsg+0x10/0x10 [ 169.648881][ T7743] ? inet_sendmsg+0x2f4/0x370 [ 169.648904][ T7743] ? __pfx_inet_sendmsg+0x10/0x10 [ 169.648929][ T7743] __sys_sendto+0x5de/0x710 [ 169.648963][ T7743] ? __pfx___sys_sendto+0x10/0x10 [ 169.648990][ T7743] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 169.649027][ T7743] ? __fget_files+0x3a0/0x420 [ 169.649065][ T7743] ? ksys_write+0x242/0x270 [ 169.649100][ T7743] ? __pfx_ksys_write+0x10/0x10 [ 169.649138][ T7743] __x64_sys_sendto+0xde/0x100 [ 169.649170][ T7743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.649194][ T7743] do_syscall_64+0x15f/0xf80 [ 169.649214][ T7743] ? trace_irq_disable+0x3b/0x140 [ 169.649248][ T7743] ? clear_bhb_loop+0x40/0x90 [ 169.649275][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.649297][ T7743] RIP: 0033:0x7f4e80b9ce59 [ 169.649318][ T7743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.649336][ T7743] RSP: 002b:00007f4e819b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 169.649359][ T7743] RAX: ffffffffffffffda RBX: 00007f4e80e15fa0 RCX: 00007f4e80b9ce59 [ 169.649379][ T7743] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 169.649392][ T7743] RBP: 00007f4e819b3090 R08: 0000200000000080 R09: 000000000000001c [ 169.649407][ T7743] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 169.649419][ T7743] R13: 00007f4e80e16038 R14: 00007f4e80e15fa0 R15: 00007ffdb4304cc8 [ 169.649456][ T7743] [ 170.331310][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.485586][ T5629] Bluetooth: hci0: command 0x0401 tx timeout [ 170.541386][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.660377][ T7755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.862574][ T7764] netlink: 3 bytes leftover after parsing attributes in process `syz.2.554'. [ 171.765141][ T1012] net_ratelimit: 3 callbacks suppressed [ 171.765162][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.146030][ T7764] 0ªX¹¦À: renamed from 61ªX¹¦À (while UP) [ 172.154330][ T7764] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 172.409363][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.424154][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.522798][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 172.596726][ T7785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.620983][ T7785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.643159][ T7785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.663473][ T7785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.687874][ T7787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.564'. [ 172.709000][ T7778] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 172.751063][ T7778] bond2 (unregistering): Released all slaves [ 172.778972][ T7785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.793646][ T7785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.166383][ T7813] dvmrp0: entered allmulticast mode [ 173.239113][ T7819] netlink: 3 bytes leftover after parsing attributes in process `syz.3.569'. [ 173.421740][ T7822] FAULT_INJECTION: forcing a failure. [ 173.421740][ T7822] name failslab, interval 1, probability 0, space 0, times 0 [ 173.435253][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.1.570 Not tainted syzkaller #0 PREEMPT(full) [ 173.435283][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.435297][ T7822] Call Trace: [ 173.435305][ T7822] [ 173.435315][ T7822] dump_stack_lvl+0xe8/0x150 [ 173.435347][ T7822] should_fail_ex+0x412/0x560 [ 173.435383][ T7822] should_failslab+0xa8/0x100 [ 173.435420][ T7822] __kmalloc_cache_noprof+0x88/0x660 [ 173.435452][ T7822] ? sctp_add_bind_addr+0x8c/0x370 [ 173.435493][ T7822] sctp_add_bind_addr+0x8c/0x370 [ 173.435531][ T7822] sctp_copy_local_addr_list+0x314/0x4f0 [ 173.435569][ T7822] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 173.435604][ T7822] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 173.435641][ T7822] ? sctp_v6_is_any+0x64/0x80 [ 173.435664][ T7822] ? sctp_copy_one_addr+0x93/0x360 [ 173.435702][ T7822] sctp_bind_addr_copy+0xb3/0x3c0 [ 173.435737][ T7822] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 173.435772][ T7822] sctp_connect_new_asoc+0x2ff/0x6b0 [ 173.435802][ T7822] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 173.435837][ T7822] ? __local_bh_enable_ip+0xd0/0x130 [ 173.435868][ T7822] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 173.435900][ T7822] ? security_sctp_bind_connect+0x7e/0x2c0 [ 173.435929][ T7822] sctp_sendmsg+0x1528/0x2c10 [ 173.435970][ T7822] ? __pfx_sctp_sendmsg+0x10/0x10 [ 173.436002][ T7822] ? aa_sk_perm+0x6d5/0x900 [ 173.436028][ T7822] ? __might_fault+0xaf/0x130 [ 173.436064][ T7822] ? __pfx_aa_sk_perm+0x10/0x10 [ 173.436095][ T7822] ? sock_rps_record_flow+0x19/0x350 [ 173.436117][ T7822] ? __pfx_inet_sendmsg+0x10/0x10 [ 173.436142][ T7822] ? inet_sendmsg+0x2f4/0x370 [ 173.436165][ T7822] ? __pfx_inet_sendmsg+0x10/0x10 [ 173.436188][ T7822] __sys_sendto+0x5de/0x710 [ 173.436222][ T7822] ? __pfx___sys_sendto+0x10/0x10 [ 173.436249][ T7822] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 173.436286][ T7822] ? __fget_files+0x3a0/0x420 [ 173.436325][ T7822] ? ksys_write+0x242/0x270 [ 173.436360][ T7822] ? __pfx_ksys_write+0x10/0x10 [ 173.436398][ T7822] __x64_sys_sendto+0xde/0x100 [ 173.436429][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.436453][ T7822] do_syscall_64+0x15f/0xf80 [ 173.436472][ T7822] ? trace_irq_disable+0x3b/0x140 [ 173.436505][ T7822] ? clear_bhb_loop+0x40/0x90 [ 173.436532][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.436553][ T7822] RIP: 0033:0x7ffb8099ce59 [ 173.436573][ T7822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.436591][ T7822] RSP: 002b:00007ffb817ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 173.436613][ T7822] RAX: ffffffffffffffda RBX: 00007ffb80c15fa0 RCX: 00007ffb8099ce59 [ 173.436629][ T7822] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 173.436643][ T7822] RBP: 00007ffb817ad090 R08: 0000200000000080 R09: 000000000000001c [ 173.436657][ T7822] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 173.436671][ T7822] R13: 00007ffb80c16038 R14: 00007ffb80c15fa0 R15: 00007ffe31e24138 [ 173.436706][ T7822] [ 173.790707][ T7792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.121437][ T7829] netlink: 80 bytes leftover after parsing attributes in process `syz.1.572'. [ 175.300480][ T7819] 1ªX¹¦À: renamed from 60ªX¹¦À (while UP) [ 175.793500][ T7865] tipc: Can't bind to reserved service type 3 [ 175.832419][ T7863] dvmrp0: entered allmulticast mode [ 176.038084][ T7874] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 176.294136][ T7879] dvmrp0: left allmulticast mode [ 176.365896][ T7881] netlink: 3 bytes leftover after parsing attributes in process `syz.2.585'. [ 176.381816][ T7881] 1ªX¹¦À: renamed from 60ªX¹¦À (while UP) [ 176.823814][ T7894] netlink: 'syz.3.588': attribute type 5 has an invalid length. [ 176.844886][ T7900] netlink: 364 bytes leftover after parsing attributes in process `syz.0.589'. [ 176.856462][ T7901] FAULT_INJECTION: forcing a failure. [ 176.856462][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.892063][ T202] net_ratelimit: 111 callbacks suppressed [ 176.892082][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.909491][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.919016][ T7901] CPU: 1 UID: 0 PID: 7901 Comm: syz.1.590 Not tainted syzkaller #0 PREEMPT(full) [ 176.919045][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.919058][ T7901] Call Trace: [ 176.919067][ T7901] [ 176.919076][ T7901] dump_stack_lvl+0xe8/0x150 [ 176.919106][ T7901] should_fail_ex+0x412/0x560 [ 176.919136][ T7901] _copy_to_user+0x31/0xb0 [ 176.919167][ T7901] simple_read_from_buffer+0xe1/0x170 [ 176.919199][ T7901] proc_fail_nth_read+0x1bb/0x230 [ 176.919236][ T7901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.919267][ T7901] ? rw_verify_area+0x2a6/0x4d0 [ 176.919298][ T7901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.919328][ T7901] vfs_read+0x20c/0xa70 [ 176.919364][ T7901] ? __pfx___mutex_lock+0x10/0x10 [ 176.919388][ T7901] ? __pfx_vfs_read+0x10/0x10 [ 176.919420][ T7901] ? __fget_files+0x2a/0x420 [ 176.919452][ T7901] ? __fget_files+0x3a0/0x420 [ 176.919476][ T7901] ? __fget_files+0x2a/0x420 [ 176.919533][ T7901] ksys_read+0x150/0x270 [ 176.919567][ T7901] ? __pfx_ksys_read+0x10/0x10 [ 176.919605][ T7901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.919629][ T7901] do_syscall_64+0x15f/0xf80 [ 176.919649][ T7901] ? trace_irq_disable+0x3b/0x140 [ 176.919681][ T7901] ? clear_bhb_loop+0x40/0x90 [ 176.919708][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.919730][ T7901] RIP: 0033:0x7ffb8095d68e [ 176.919750][ T7901] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.919768][ T7901] RSP: 002b:00007ffb817acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.919790][ T7901] RAX: ffffffffffffffda RBX: 00007ffb817ad6c0 RCX: 00007ffb8095d68e [ 176.919805][ T7901] RDX: 000000000000000f RSI: 00007ffb817ad0a0 RDI: 0000000000000004 [ 176.919818][ T7901] RBP: 00007ffb817ad090 R08: 0000000000000000 R09: 0000000000000000 [ 176.919831][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.919843][ T7901] R13: 00007ffb80c16038 R14: 00007ffb80c15fa0 R15: 00007ffe31e24138 [ 176.919878][ T7901] [ 177.791921][ T7924] trusted_key: syz.3.594 sent an empty control message without MSG_MORE. [ 177.929827][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.080417][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 178.176930][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.591706][ T7929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.644687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.808583][ T6144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.980643][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.315526][ T7943] tls_set_device_offload: netdev not found [ 179.329521][ T7944] netlink: 3 bytes leftover after parsing attributes in process `syz.3.597'. [ 179.347848][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 179.360069][ T7944] 0ªX¹¦À: renamed from 61ªX¹¦À (while UP) [ 179.410638][ T7944] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 179.428089][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.479771][ T7951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.541257][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.599'. [ 179.570355][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.153735][ T7962] xt_hashlimit: size too large, truncated to 1048576 [ 180.284479][ T7966] FAULT_INJECTION: forcing a failure. [ 180.284479][ T7966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.345961][ T7966] CPU: 1 UID: 0 PID: 7966 Comm: syz.1.607 Not tainted syzkaller #0 PREEMPT(full) [ 180.345991][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.346005][ T7966] Call Trace: [ 180.346014][ T7966] [ 180.346023][ T7966] dump_stack_lvl+0xe8/0x150 [ 180.346054][ T7966] should_fail_ex+0x412/0x560 [ 180.346089][ T7966] _copy_to_user+0x31/0xb0 [ 180.346133][ T7966] simple_read_from_buffer+0xe1/0x170 [ 180.346167][ T7966] proc_fail_nth_read+0x1bb/0x230 [ 180.346200][ T7966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.346233][ T7966] ? rw_verify_area+0x2a6/0x4d0 [ 180.346266][ T7966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.346297][ T7966] vfs_read+0x20c/0xa70 [ 180.346333][ T7966] ? __pfx___mutex_lock+0x10/0x10 [ 180.346357][ T7966] ? __pfx_vfs_read+0x10/0x10 [ 180.346389][ T7966] ? __fget_files+0x2a/0x420 [ 180.346420][ T7966] ? __fget_files+0x3a0/0x420 [ 180.346445][ T7966] ? __fget_files+0x2a/0x420 [ 180.346482][ T7966] ksys_read+0x150/0x270 [ 180.346517][ T7966] ? __pfx_ksys_read+0x10/0x10 [ 180.346558][ T7966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.346581][ T7966] do_syscall_64+0x15f/0xf80 [ 180.346601][ T7966] ? trace_irq_disable+0x3b/0x140 [ 180.346635][ T7966] ? clear_bhb_loop+0x40/0x90 [ 180.346662][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.346683][ T7966] RIP: 0033:0x7ffb8095d68e [ 180.346703][ T7966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.346723][ T7966] RSP: 002b:00007ffb817acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.346745][ T7966] RAX: ffffffffffffffda RBX: 00007ffb817ad6c0 RCX: 00007ffb8095d68e [ 180.346762][ T7966] RDX: 000000000000000f RSI: 00007ffb817ad0a0 RDI: 0000000000000004 [ 180.346775][ T7966] RBP: 00007ffb817ad090 R08: 0000000000000000 R09: 0000000000000000 [ 180.346789][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.346802][ T7966] R13: 00007ffb80c16038 R14: 00007ffb80c15fa0 R15: 00007ffe31e24138 [ 180.346838][ T7966] [ 180.683469][ T7975] FAULT_INJECTION: forcing a failure. [ 180.683469][ T7975] name failslab, interval 1, probability 0, space 0, times 0 [ 180.752986][ T7975] CPU: 0 UID: 0 PID: 7975 Comm: syz.0.611 Not tainted syzkaller #0 PREEMPT(full) [ 180.753017][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.753031][ T7975] Call Trace: [ 180.753039][ T7975] [ 180.753049][ T7975] dump_stack_lvl+0xe8/0x150 [ 180.753080][ T7975] should_fail_ex+0x412/0x560 [ 180.753112][ T7975] ? sock_alloc_inode+0x2c/0x190 [ 180.753139][ T7975] should_failslab+0xa8/0x100 [ 180.753177][ T7975] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 180.753215][ T7975] ? __pfx_sock_alloc_inode+0x10/0x10 [ 180.753240][ T7975] sock_alloc_inode+0x2c/0x190 [ 180.753266][ T7975] ? __pfx_sock_alloc_inode+0x10/0x10 [ 180.753289][ T7975] alloc_inode+0x6a/0x1b0 [ 180.753316][ T7975] __sock_create+0x12d/0x9d0 [ 180.753354][ T7975] udp_sock_create4+0xca/0x480 [ 180.753381][ T7975] ? __pfx_udp_sock_create4+0x10/0x10 [ 180.753419][ T7975] rxrpc_lookup_local+0xd1e/0x1520 [ 180.753452][ T7975] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 180.753492][ T7975] ? rxrpc_sendmsg+0x136/0x710 [ 180.753525][ T7975] ? __local_bh_enable_ip+0xd0/0x130 [ 180.753554][ T7975] rxrpc_sendmsg+0x399/0x710 [ 180.753595][ T7975] ____sys_sendmsg+0x972/0x9f0 [ 180.753628][ T7975] ? __might_fault+0xaf/0x130 [ 180.753671][ T7975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.753715][ T7975] ? import_iovec+0x73/0xa0 [ 180.753751][ T7975] ___sys_sendmsg+0x2a5/0x360 [ 180.753784][ T7975] ? __lock_acquire+0x6b5/0x2cf0 [ 180.753813][ T7975] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.753887][ T7975] ? __fget_files+0x2a/0x420 [ 180.753917][ T7975] ? __fget_files+0x3a0/0x420 [ 180.753956][ T7975] __x64_sys_sendmsg+0x1bd/0x2a0 [ 180.753993][ T7975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.754037][ T7975] ? __pfx_ksys_write+0x10/0x10 [ 180.754079][ T7975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.754104][ T7975] do_syscall_64+0x15f/0xf80 [ 180.754124][ T7975] ? trace_irq_disable+0x3b/0x140 [ 180.754157][ T7975] ? clear_bhb_loop+0x40/0x90 [ 180.754184][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.754206][ T7975] RIP: 0033:0x7f8c3979ce59 [ 180.754227][ T7975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.754246][ T7975] RSP: 002b:00007f8c3a5c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.754269][ T7975] RAX: ffffffffffffffda RBX: 00007f8c39a15fa0 RCX: 00007f8c3979ce59 [ 180.754285][ T7975] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 180.754298][ T7975] RBP: 00007f8c3a5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 180.754311][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.754324][ T7975] R13: 00007f8c39a16038 R14: 00007f8c39a15fa0 R15: 00007ffc86952bf8 [ 180.754360][ T7975] [ 181.056559][ T7980] dvmrp0: left allmulticast mode [ 181.184916][ T7983] dvmrp0: entered allmulticast mode [ 181.209763][ T7989] netlink: 3 bytes leftover after parsing attributes in process `syz.4.612'. [ 181.239722][ T7989] 1ªX¹¦À: renamed from 60ªX¹¦À (while UP) [ 181.589461][ T8000] vlan2: entered promiscuous mode [ 181.866454][ T8018] netlink: 'syz.2.622': attribute type 2 has an invalid length. [ 181.976137][ T8018] netlink: 'syz.2.622': attribute type 2 has an invalid length. [ 182.024863][ T35] net_ratelimit: 110 callbacks suppressed [ 182.024882][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.165199][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.311532][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 182.438993][ T8031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.627'. [ 182.460444][ T8031] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.627'. [ 182.463042][ T8035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.626'. [ 182.624814][ T8038] netlink: 3 bytes leftover after parsing attributes in process `syz.1.628'. [ 182.645566][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.205305][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.925176][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.934032][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.244752][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.847335][ T8038] 0ªX¹¦À: renamed from 61ªX¹¦À (while UP) [ 184.883320][ T8038] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 185.159037][ T8052] FAULT_INJECTION: forcing a failure. [ 185.159037][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 185.215349][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.4.633 Not tainted syzkaller #0 PREEMPT(full) [ 185.215379][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.215393][ T8052] Call Trace: [ 185.215401][ T8052] [ 185.215411][ T8052] dump_stack_lvl+0xe8/0x150 [ 185.215442][ T8052] should_fail_ex+0x412/0x560 [ 185.215477][ T8052] should_failslab+0xa8/0x100 [ 185.215514][ T8052] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 185.215546][ T8052] ? __alloc_skb+0x1d0/0x7d0 [ 185.215574][ T8052] ? __local_bh_enable_ip+0xd0/0x130 [ 185.215603][ T8052] __alloc_skb+0x1d0/0x7d0 [ 185.215638][ T8052] tipc_nl_compat_dumpit+0x34d/0x7b0 [ 185.215679][ T8052] tipc_nl_compat_recv+0x899/0xcf0 [ 185.215713][ T8052] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 185.215741][ T8052] ? __mutex_trylock_common+0x158/0x260 [ 185.215769][ T8052] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 185.215798][ T8052] ? __pfx_tipc_nl_compat_node_dump+0x10/0x10 [ 185.215831][ T8052] ? __pfx___mutex_trylock_common+0x10/0x10 [ 185.215873][ T8052] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 185.215909][ T8052] genl_family_rcv_msg_doit+0x22a/0x330 [ 185.215943][ T8052] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.215995][ T8052] genl_rcv_msg+0x61c/0x7a0 [ 185.216027][ T8052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.216051][ T8052] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 185.216082][ T8052] ? __pfx_ref_tracker_free+0x10/0x10 [ 185.216111][ T8052] ? __asan_memcpy+0x40/0x70 [ 185.216136][ T8052] ? __skb_clone+0x63/0x7a0 [ 185.216178][ T8052] netlink_rcv_skb+0x232/0x4b0 [ 185.216211][ T8052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.216238][ T8052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.216287][ T8052] ? down_read+0x270/0x2e0 [ 185.216310][ T8052] ? genl_rcv+0xd/0x40 [ 185.216335][ T8052] genl_rcv+0x28/0x40 [ 185.216357][ T8052] netlink_unicast+0x75c/0x8e0 [ 185.216400][ T8052] netlink_sendmsg+0x813/0xb40 [ 185.216446][ T8052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.216483][ T8052] ? aa_sock_msg_perm+0xf1/0x1b0 [ 185.216514][ T8052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.216548][ T8052] ____sys_sendmsg+0x972/0x9f0 [ 185.216581][ T8052] ? __might_fault+0xaf/0x130 [ 185.216617][ T8052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.216661][ T8052] ? import_iovec+0x73/0xa0 [ 185.216697][ T8052] ___sys_sendmsg+0x2a5/0x360 [ 185.216729][ T8052] ? __lock_acquire+0x6b5/0x2cf0 [ 185.216758][ T8052] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.216838][ T8052] ? __fget_files+0x2a/0x420 [ 185.216864][ T8052] ? __fget_files+0x3a0/0x420 [ 185.216902][ T8052] __x64_sys_sendmsg+0x1bd/0x2a0 [ 185.216939][ T8052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.216985][ T8052] ? __pfx_ksys_write+0x10/0x10 [ 185.217026][ T8052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.217050][ T8052] do_syscall_64+0x15f/0xf80 [ 185.217070][ T8052] ? trace_irq_disable+0x3b/0x140 [ 185.217104][ T8052] ? clear_bhb_loop+0x40/0x90 [ 185.217136][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.217158][ T8052] RIP: 0033:0x7f79dd79ce59 [ 185.217178][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.217197][ T8052] RSP: 002b:00007f79de60c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.217220][ T8052] RAX: ffffffffffffffda RBX: 00007f79dda15fa0 RCX: 00007f79dd79ce59 [ 185.217237][ T8052] RDX: 0000000004004014 RSI: 00002000000014c0 RDI: 0000000000000003 [ 185.217251][ T8052] RBP: 00007f79de60c090 R08: 0000000000000000 R09: 0000000000000000 [ 185.217265][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.217277][ T8052] R13: 00007f79dda16038 R14: 00007f79dda15fa0 R15: 00007fff211eb688 [ 185.217314][ T8052] [ 185.634533][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.659779][ T8054] dvmrp0: entered allmulticast mode [ 185.871683][ T8066] netlink: 'syz.1.636': attribute type 6 has an invalid length. [ 186.000823][ T8066] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.636'. [ 186.024163][ T8074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.639'. [ 186.323451][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.643'. [ 186.341580][ T29] audit: type=1800 audit(1778642667.130:3): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.640" name="memory.events" dev="tmpfs" ino=568 res=0 errno=0 [ 186.352460][ T8085] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 186.374087][ T8088] netlink: 'syz.2.642': attribute type 2 has an invalid length. [ 186.417891][ T8088] netlink: 'syz.2.642': attribute type 2 has an invalid length. [ 186.511883][ T8095] veth0: entered promiscuous mode [ 186.562786][ T8094] veth0: left promiscuous mode [ 187.492991][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 187.684673][ T42] net_ratelimit: 2 callbacks suppressed [ 187.684693][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.768357][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.851341][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.656'. [ 187.880172][ T8140] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 188.107118][ T8149] dvmrp0: left allmulticast mode [ 188.208071][ T8157] netlink: 3 bytes leftover after parsing attributes in process `syz.3.660'. [ 188.236898][ T8158] netlink: 'syz.0.658': attribute type 2 has an invalid length. [ 188.253423][ T8159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.256435][ T8158] netlink: 'syz.0.658': attribute type 2 has an invalid length. [ 188.262690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.274829][ T8157] 1ªX¹¦À: renamed from 60ªX¹¦À (while UP) [ 188.345926][ T8157] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 188.406037][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.429903][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 188.439834][ T8164] netlink: 'syz.2.662': attribute type 5 has an invalid length. [ 188.448144][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.662'. [ 188.487950][ T8163] dvmrp0: entered allmulticast mode [ 188.536890][ T8164] geneve3: entered promiscuous mode [ 188.559898][ T8164] geneve3: entered allmulticast mode [ 188.580404][ T202] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 188.599709][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 188.620613][ T202] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 188.650538][ T202] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 188.684275][ T202] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 188.708397][ T8167] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.663'. [ 188.734842][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.893168][ T8177] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 189.179955][ T8185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.669'. [ 189.213260][ T8185] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 189.484345][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.831744][ T8213] hsr0: entered promiscuous mode [ 189.852393][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 190.246303][ T8227] FAULT_INJECTION: forcing a failure. [ 190.246303][ T8227] name failslab, interval 1, probability 0, space 0, times 0 [ 190.297183][ T8227] CPU: 0 UID: 0 PID: 8227 Comm: syz.1.680 Not tainted syzkaller #0 PREEMPT(full) [ 190.297215][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.297229][ T8227] Call Trace: [ 190.297237][ T8227] [ 190.297247][ T8227] dump_stack_lvl+0xe8/0x150 [ 190.297279][ T8227] should_fail_ex+0x412/0x560 [ 190.297315][ T8227] should_failslab+0xa8/0x100 [ 190.297351][ T8227] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 190.297383][ T8227] ? __alloc_skb+0x1d0/0x7d0 [ 190.297411][ T8227] ? __local_bh_enable_ip+0xd0/0x130 [ 190.297439][ T8227] __alloc_skb+0x1d0/0x7d0 [ 190.297474][ T8227] __tipc_nl_compat_dumpit+0x1a4/0xbe0 [ 190.297526][ T8227] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 190.297579][ T8227] ? rcu_is_watching+0x15/0xb0 [ 190.297631][ T8227] ? __asan_memset+0x22/0x50 [ 190.297659][ T8227] ? __nlmsg_put+0xef/0x1b0 [ 190.297694][ T8227] tipc_nl_compat_dumpit+0x566/0x7b0 [ 190.297733][ T8227] tipc_nl_compat_recv+0x899/0xcf0 [ 190.297767][ T8227] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 190.297795][ T8227] ? __mutex_trylock_common+0x158/0x260 [ 190.297824][ T8227] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 190.297845][ T8227] ? __pfx_tipc_nl_compat_node_dump+0x10/0x10 [ 190.297878][ T8227] ? __pfx___mutex_trylock_common+0x10/0x10 [ 190.297920][ T8227] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 190.297954][ T8227] genl_family_rcv_msg_doit+0x22a/0x330 [ 190.297987][ T8227] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.298038][ T8227] genl_rcv_msg+0x61c/0x7a0 [ 190.298071][ T8227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.298094][ T8227] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 190.298127][ T8227] ? __pfx_ref_tracker_free+0x10/0x10 [ 190.298170][ T8227] netlink_rcv_skb+0x232/0x4b0 [ 190.298207][ T8227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.298234][ T8227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.298282][ T8227] ? down_read+0x270/0x2e0 [ 190.298312][ T8227] ? genl_rcv+0xd/0x40 [ 190.298337][ T8227] genl_rcv+0x28/0x40 [ 190.298358][ T8227] netlink_unicast+0x75c/0x8e0 [ 190.298398][ T8227] netlink_sendmsg+0x813/0xb40 [ 190.298441][ T8227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.298478][ T8227] ? aa_sock_msg_perm+0xf1/0x1b0 [ 190.298509][ T8227] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.298543][ T8227] ____sys_sendmsg+0x972/0x9f0 [ 190.298577][ T8227] ? __might_fault+0xaf/0x130 [ 190.298620][ T8227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.298664][ T8227] ? import_iovec+0x73/0xa0 [ 190.298700][ T8227] ___sys_sendmsg+0x2a5/0x360 [ 190.298732][ T8227] ? __lock_acquire+0x6b5/0x2cf0 [ 190.298762][ T8227] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.298838][ T8227] ? __fget_files+0x2a/0x420 [ 190.298864][ T8227] ? __fget_files+0x3a0/0x420 [ 190.298903][ T8227] __x64_sys_sendmsg+0x1bd/0x2a0 [ 190.298941][ T8227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.298986][ T8227] ? __pfx_ksys_write+0x10/0x10 [ 190.299028][ T8227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.299053][ T8227] do_syscall_64+0x15f/0xf80 [ 190.299073][ T8227] ? trace_irq_disable+0x3b/0x140 [ 190.299107][ T8227] ? clear_bhb_loop+0x40/0x90 [ 190.299134][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.299156][ T8227] RIP: 0033:0x7ffb8099ce59 [ 190.299177][ T8227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.299197][ T8227] RSP: 002b:00007ffb817ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.299220][ T8227] RAX: ffffffffffffffda RBX: 00007ffb80c15fa0 RCX: 00007ffb8099ce59 [ 190.299236][ T8227] RDX: 0000000004004014 RSI: 00002000000014c0 RDI: 0000000000000003 [ 190.299250][ T8227] RBP: 00007ffb817ad090 R08: 0000000000000000 R09: 0000000000000000 [ 190.299263][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.299277][ T8227] R13: 00007ffb80c16038 R14: 00007ffb80c15fa0 R15: 00007ffe31e24138 [ 190.299313][ T8227] [ 190.780433][ T8236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.681'. [ 191.682200][ T8266] syzkaller0: entered promiscuous mode [ 191.709310][ T8266] syzkaller0: entered allmulticast mode [ 192.048800][ T8282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.057066][ T8282] IPv6: NLM_F_CREATE should be set when creating new route [ 192.065002][ T8282] IPv6: NLM_F_CREATE should be set when creating new route [ 192.072351][ T8282] IPv6: NLM_F_CREATE should be set when creating new route [ 192.496891][ T8302] __nla_validate_parse: 1 callbacks suppressed [ 192.496918][ T8302] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.698'. [ 192.724773][ T5740] net_ratelimit: 9 callbacks suppressed [ 192.724793][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.884708][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.895486][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.703'. [ 193.526942][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.538308][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.546844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.889357][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.713'. [ 193.926655][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.178045][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.187152][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.194951][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.804110][ T8363] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.719'. [ 194.965997][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.319047][ T8375] FAULT_INJECTION: forcing a failure. [ 195.319047][ T8375] name failslab, interval 1, probability 0, space 0, times 0 [ 195.368841][ T8375] CPU: 1 UID: 0 PID: 8375 Comm: syz.4.720 Not tainted syzkaller #0 PREEMPT(full) [ 195.368873][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.368887][ T8375] Call Trace: [ 195.368896][ T8375] [ 195.368905][ T8375] dump_stack_lvl+0xe8/0x150 [ 195.368937][ T8375] should_fail_ex+0x412/0x560 [ 195.368972][ T8375] should_failslab+0xa8/0x100 [ 195.369007][ T8375] ? skb_clone+0x212/0x3a0 [ 195.369029][ T8375] kmem_cache_alloc_noprof+0x87/0x650 [ 195.369075][ T8375] skb_clone+0x212/0x3a0 [ 195.369101][ T8375] __netlink_deliver_tap+0x404/0x850 [ 195.369147][ T8375] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.369181][ T8375] netlink_deliver_tap+0x19c/0x1b0 [ 195.369213][ T8375] netlink_sendskb+0x68/0x140 [ 195.369245][ T8375] ctrl_getfamily+0x4c8/0x5c0 [ 195.369271][ T8375] ? __pfx_ctrl_getfamily+0x10/0x10 [ 195.369296][ T8375] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 195.369330][ T8375] genl_family_rcv_msg_doit+0x22a/0x330 [ 195.369356][ T8375] ? __asan_memcpy+0x40/0x70 [ 195.369386][ T8375] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 195.369438][ T8375] genl_rcv_msg+0x61c/0x7a0 [ 195.369469][ T8375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.369493][ T8375] ? __pfx_ctrl_getfamily+0x10/0x10 [ 195.369517][ T8375] ? __pfx_ref_tracker_free+0x10/0x10 [ 195.369545][ T8375] ? __asan_memcpy+0x40/0x70 [ 195.369572][ T8375] ? __skb_clone+0x63/0x7a0 [ 195.369614][ T8375] netlink_rcv_skb+0x232/0x4b0 [ 195.369648][ T8375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.369675][ T8375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.369725][ T8375] ? down_read+0x270/0x2e0 [ 195.369748][ T8375] ? genl_rcv+0xd/0x40 [ 195.369773][ T8375] genl_rcv+0x28/0x40 [ 195.369795][ T8375] netlink_unicast+0x75c/0x8e0 [ 195.369837][ T8375] netlink_sendmsg+0x813/0xb40 [ 195.369884][ T8375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.369920][ T8375] ? aa_sock_msg_perm+0xf1/0x1b0 [ 195.369953][ T8375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.369983][ T8375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.370017][ T8375] __sys_sendto+0x672/0x710 [ 195.370059][ T8375] ? __pfx___sys_sendto+0x10/0x10 [ 195.370120][ T8375] ? exc_page_fault+0x6a/0xc0 [ 195.370159][ T8375] ? do_user_addr_fault+0xc6f/0x1340 [ 195.370189][ T8375] __x64_sys_sendto+0xde/0x100 [ 195.370221][ T8375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.370245][ T8375] do_syscall_64+0x15f/0xf80 [ 195.370264][ T8375] ? trace_irq_disable+0x3b/0x140 [ 195.370303][ T8375] ? clear_bhb_loop+0x40/0x90 [ 195.370331][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.370353][ T8375] RIP: 0033:0x7f79dd75d68e [ 195.370374][ T8375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.370393][ T8375] RSP: 002b:00007f79de60ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 195.370416][ T8375] RAX: ffffffffffffffda RBX: 00007f79de60c6c0 RCX: 00007f79dd75d68e [ 195.370433][ T8375] RDX: 0000000000000020 RSI: 00007f79de60b000 RDI: 0000000000000007 [ 195.370446][ T8375] RBP: 0000000000000000 R08: 00007f79de60af04 R09: 000000000000000c [ 195.370460][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 195.370473][ T8375] R13: 00007f79de60af58 R14: 00007f79de60b000 R15: 0000000000000000 [ 195.370509][ T8375] [ 195.451587][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.703312][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.262037][ T8402] netlink: 164 bytes leftover after parsing attributes in process `syz.2.731'. [ 196.522108][ T8408] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.732'. [ 197.680775][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 197.750306][ T8439] vlan0: entered promiscuous mode [ 198.086440][ T5825] net_ratelimit: 2 callbacks suppressed [ 198.086460][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.155545][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.743'. [ 198.212941][ T8454] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 198.386275][ T8459] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.744'. [ 198.484831][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.128083][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.273513][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.281900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.292598][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.395073][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 199.603459][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.755'. [ 199.749138][ T8509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.758'. [ 199.787363][ T8509] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 199.927720][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.165350][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.797847][ T8537] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.766'. [ 202.122877][ T8583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.778'. [ 202.134586][ T8583] netlink: 19 bytes leftover after parsing attributes in process `syz.2.778'. [ 202.143586][ T8583] netlink: 19 bytes leftover after parsing attributes in process `syz.2.778'. [ 202.338059][ T8589] netlink: 'syz.0.781': attribute type 9 has an invalid length. [ 202.367822][ T8589] xfrm0: entered allmulticast mode [ 202.622178][ T8598] macsec2: entered promiscuous mode [ 202.634011][ T8598] dummy0: entered promiscuous mode [ 202.653219][ T8598] macsec2: entered allmulticast mode [ 202.671166][ T8598] dummy0: entered allmulticast mode [ 202.804908][ T8598] dummy0: left allmulticast mode [ 202.898192][ T5358] dummy0: left promiscuous mode [ 202.941081][ T8607] macsec1: entered promiscuous mode [ 202.955299][ T8607] dummy0: entered promiscuous mode [ 202.975455][ T8607] macsec1: entered allmulticast mode [ 202.990234][ T8607] dummy0: entered allmulticast mode [ 203.033903][ T8607] dummy0: left allmulticast mode [ 203.140809][ T5358] dummy0: left promiscuous mode [ 203.287083][ T42] net_ratelimit: 6 callbacks suppressed [ 203.287101][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.573511][ T8631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.581923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.698892][ T8637] __nla_validate_parse: 3 callbacks suppressed [ 203.698914][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.796'. [ 204.047913][ T8647] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.799'. [ 204.169383][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 204.251683][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.325264][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.943498][ T8675] bond1: option lacp_active: invalid value (8) [ 204.953642][ T8675] bond1 (unregistering): Released all slaves [ 205.049984][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.367953][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.685685][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.326274][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.334490][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.884265][ T8649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.109769][ T8683] FAULT_INJECTION: forcing a failure. [ 207.109769][ T8683] name failslab, interval 1, probability 0, space 0, times 0 [ 207.150949][ T8683] CPU: 0 UID: 0 PID: 8683 Comm: syz.3.810 Not tainted syzkaller #0 PREEMPT(full) [ 207.150977][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.150991][ T8683] Call Trace: [ 207.151000][ T8683] [ 207.151009][ T8683] dump_stack_lvl+0xe8/0x150 [ 207.151040][ T8683] should_fail_ex+0x412/0x560 [ 207.151074][ T8683] should_failslab+0xa8/0x100 [ 207.151108][ T8683] ? skb_clone+0x212/0x3a0 [ 207.151129][ T8683] kmem_cache_alloc_noprof+0x87/0x650 [ 207.151168][ T8683] skb_clone+0x212/0x3a0 [ 207.151193][ T8683] __netlink_deliver_tap+0x404/0x850 [ 207.151239][ T8683] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.151274][ T8683] netlink_deliver_tap+0x19c/0x1b0 [ 207.151307][ T8683] netlink_sendskb+0x68/0x140 [ 207.151339][ T8683] netlink_rcv_skb+0x2b6/0x4b0 [ 207.151381][ T8683] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.151408][ T8683] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.151458][ T8683] ? down_read+0x270/0x2e0 [ 207.151481][ T8683] ? genl_rcv+0xd/0x40 [ 207.151505][ T8683] genl_rcv+0x28/0x40 [ 207.151527][ T8683] netlink_unicast+0x75c/0x8e0 [ 207.151569][ T8683] netlink_sendmsg+0x813/0xb40 [ 207.151612][ T8683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.151649][ T8683] ? aa_sock_msg_perm+0xf1/0x1b0 [ 207.151680][ T8683] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.151710][ T8683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.151744][ T8683] __sys_sendto+0x672/0x710 [ 207.151778][ T8683] ? __pfx___sys_sendto+0x10/0x10 [ 207.151839][ T8683] ? exc_page_fault+0x6a/0xc0 [ 207.151877][ T8683] ? do_user_addr_fault+0xc6f/0x1340 [ 207.151906][ T8683] __x64_sys_sendto+0xde/0x100 [ 207.151938][ T8683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.151962][ T8683] do_syscall_64+0x15f/0xf80 [ 207.151982][ T8683] ? trace_irq_disable+0x3b/0x140 [ 207.152015][ T8683] ? clear_bhb_loop+0x40/0x90 [ 207.152042][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.152064][ T8683] RIP: 0033:0x7fa27f35d68e [ 207.152085][ T8683] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 207.152104][ T8683] RSP: 002b:00007fa27d5f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 207.152126][ T8683] RAX: ffffffffffffffda RBX: 00007fa27d5f66c0 RCX: 00007fa27f35d68e [ 207.152142][ T8683] RDX: 0000000000000020 RSI: 00007fa27d5f5000 RDI: 0000000000000007 [ 207.152156][ T8683] RBP: 0000000000000000 R08: 00007fa27d5f4f04 R09: 000000000000000c [ 207.152170][ T8683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 207.152183][ T8683] R13: 00007fa27d5f4f58 R14: 00007fa27d5f5000 R15: 0000000000000000 [ 207.152218][ T8683] [ 207.154302][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.809'. [ 207.451113][ T8686] macsec1: entered promiscuous mode [ 207.470965][ T8686] dummy0: entered promiscuous mode [ 207.484799][ T8686] macsec1: entered allmulticast mode [ 207.495778][ T8686] dummy0: entered allmulticast mode [ 207.519298][ T8686] dummy0: left allmulticast mode [ 207.593116][ T24] dummy0: left promiscuous mode [ 207.785363][ T8694] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.812'. [ 207.927533][ T8710] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 208.080830][ T8715] netlink: 'syz.4.817': attribute type 2 has an invalid length. [ 208.108129][ T8715] netlink: 'syz.4.817': attribute type 2 has an invalid length. [ 208.222669][ T8718] dvmrp0: left allmulticast mode [ 208.503724][ T42] net_ratelimit: 4 callbacks suppressed [ 208.503743][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.941737][ T8744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.949070][ T8744] IPv6: NLM_F_CREATE should be set when creating new route [ 208.956396][ T8744] IPv6: NLM_F_CREATE should be set when creating new route [ 209.052648][ T8746] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.829'. [ 209.172923][ T8758] sctp: [Deprecated]: syz.2.832 (pid 8758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.172923][ T8758] Use struct sctp_sack_info instead [ 209.208102][ T8749] netlink: 'syz.0.830': attribute type 2 has an invalid length. [ 209.226937][ T8749] netlink: 'syz.0.830': attribute type 2 has an invalid length. [ 209.366215][ T8762] FAULT_INJECTION: forcing a failure. [ 209.366215][ T8762] name failslab, interval 1, probability 0, space 0, times 0 [ 209.379538][ T8762] CPU: 0 UID: 0 PID: 8762 Comm: syz.1.834 Not tainted syzkaller #0 PREEMPT(full) [ 209.379566][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.379579][ T8762] Call Trace: [ 209.379588][ T8762] [ 209.379598][ T8762] dump_stack_lvl+0xe8/0x150 [ 209.379629][ T8762] should_fail_ex+0x412/0x560 [ 209.379663][ T8762] should_failslab+0xa8/0x100 [ 209.379697][ T8762] ? skb_clone+0x212/0x3a0 [ 209.379719][ T8762] kmem_cache_alloc_noprof+0x87/0x650 [ 209.379747][ T8762] ? dev_queue_xmit_nit+0x2d/0xad0 [ 209.379788][ T8762] skb_clone+0x212/0x3a0 [ 209.379806][ T8762] ? dev_queue_xmit_nit+0x268/0xad0 [ 209.379840][ T8762] dev_queue_xmit_nit+0x29a/0xad0 [ 209.379871][ T8762] ? dev_queue_xmit_nit+0x2d/0xad0 [ 209.379915][ T8762] dev_hard_start_xmit+0x1c1/0x830 [ 209.379955][ T8762] __dev_queue_xmit+0x14d9/0x3950 [ 209.379976][ T8762] ? netlink_sendmsg+0x813/0xb40 [ 209.380017][ T8762] ? __dev_queue_xmit+0x2b6/0x3950 [ 209.380057][ T8762] ? __pfx___dev_queue_xmit+0x10/0x10 [ 209.380092][ T8762] ? __copy_skb_header+0xa3/0x4a0 [ 209.380134][ T8762] ? __asan_memcpy+0x40/0x70 [ 209.380159][ T8762] ? __skb_clone+0x63/0x7a0 [ 209.380198][ T8762] ? __skb_clone+0x483/0x7a0 [ 209.380239][ T8762] ? skb_clone+0x246/0x3a0 [ 209.380264][ T8762] __netlink_deliver_tap+0x5ad/0x850 [ 209.380311][ T8762] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.380345][ T8762] netlink_deliver_tap+0x19c/0x1b0 [ 209.380380][ T8762] netlink_sendskb+0x68/0x140 [ 209.380412][ T8762] netlink_rcv_skb+0x2b6/0x4b0 [ 209.380444][ T8762] ? __pfx_genl_rcv_msg+0x10/0x10 [ 209.380471][ T8762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.380521][ T8762] ? down_read+0x270/0x2e0 [ 209.380546][ T8762] ? genl_rcv+0xd/0x40 [ 209.380572][ T8762] genl_rcv+0x28/0x40 [ 209.380594][ T8762] netlink_unicast+0x75c/0x8e0 [ 209.380636][ T8762] netlink_sendmsg+0x813/0xb40 [ 209.380680][ T8762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.380716][ T8762] ? aa_sock_msg_perm+0xf1/0x1b0 [ 209.380748][ T8762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.380778][ T8762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.380812][ T8762] __sys_sendto+0x672/0x710 [ 209.380846][ T8762] ? __pfx___sys_sendto+0x10/0x10 [ 209.380907][ T8762] ? exc_page_fault+0x6a/0xc0 [ 209.380945][ T8762] ? do_user_addr_fault+0xc6f/0x1340 [ 209.380974][ T8762] __x64_sys_sendto+0xde/0x100 [ 209.381006][ T8762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.381030][ T8762] do_syscall_64+0x15f/0xf80 [ 209.381049][ T8762] ? trace_irq_disable+0x3b/0x140 [ 209.381082][ T8762] ? clear_bhb_loop+0x40/0x90 [ 209.381117][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.381139][ T8762] RIP: 0033:0x7ffb8095d68e [ 209.381160][ T8762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.381179][ T8762] RSP: 002b:00007ffb817abe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 209.381202][ T8762] RAX: ffffffffffffffda RBX: 00007ffb817ad6c0 RCX: 00007ffb8095d68e [ 209.381218][ T8762] RDX: 0000000000000020 RSI: 00007ffb817ac000 RDI: 0000000000000007 [ 209.381232][ T8762] RBP: 0000000000000000 R08: 00007ffb817abf04 R09: 000000000000000c [ 209.381245][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 209.381258][ T8762] R13: 00007ffb817abf58 R14: 00007ffb817ac000 R15: 0000000000000000 [ 209.381294][ T8762] [ 209.724534][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.758643][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.926137][ T8767] netlink: 'syz.4.836': attribute type 4 has an invalid length. [ 209.937867][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.835'. [ 210.113537][ T8771] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 210.252336][ T8771] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 210.302468][ T8771] macvlan2: entered promiscuous mode [ 210.308776][ T8771] macvlan2: entered allmulticast mode [ 210.315613][ T8771] bond1: entered promiscuous mode [ 210.320823][ T8771] bridge1: entered promiscuous mode [ 210.329408][ T8771] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.343232][ T8771] bond1: left promiscuous mode [ 210.349689][ T8771] bridge1: left promiscuous mode [ 210.712766][ T8797] dvmrp0: left allmulticast mode [ 210.808666][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.817535][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.997650][ T8800] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.845'. [ 211.245136][ T8812] netlink: 'syz.4.847': attribute type 2 has an invalid length. [ 211.268941][ T8812] netlink: 'syz.4.847': attribute type 2 has an invalid length. [ 211.447320][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.855411][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.996362][ T8832] vlan2: entered promiscuous mode [ 212.088055][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.099030][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.155405][ T8843] dvmrp0: entered allmulticast mode [ 212.176503][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 212.182548][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 212.182615][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 212.191633][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 212.902827][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.280688][ T8884] netlink: 'syz.3.861': attribute type 2 has an invalid length. [ 213.298068][ T8884] netlink: 'syz.3.861': attribute type 2 has an invalid length. [ 213.757101][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 213.796254][ T8904] xt_hashlimit: size too large, truncated to 1048576 [ 213.952361][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.045959][ T8917] dvmrp0: left allmulticast mode [ 214.191410][ T8897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.867'. [ 214.662727][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.798965][ T8943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.807800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.894940][ T8942] netlink: 'syz.3.877': attribute type 2 has an invalid length. [ 214.926095][ T8942] netlink: 'syz.3.877': attribute type 2 has an invalid length. [ 214.981898][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.171306][ T8956] tipc: Enabling of bearer rejected, already enabled [ 215.331979][ T8960] vlan0: entered promiscuous mode [ 215.537292][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 215.832604][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 216.053260][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.207696][ T8988] FAULT_INJECTION: forcing a failure. [ 216.207696][ T8988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.223758][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.4.888 Not tainted syzkaller #0 PREEMPT(full) [ 216.223788][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.223802][ T8988] Call Trace: [ 216.223810][ T8988] [ 216.223820][ T8988] dump_stack_lvl+0xe8/0x150 [ 216.223856][ T8988] should_fail_ex+0x412/0x560 [ 216.223891][ T8988] _copy_to_iter+0x1e4/0x17d0 [ 216.223925][ T8988] ? do_raw_spin_lock+0x12b/0x2f0 [ 216.223967][ T8988] ? __pfx__copy_to_iter+0x10/0x10 [ 216.223996][ T8988] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 216.224036][ T8988] ? lockdep_hardirqs_on+0x7a/0x110 [ 216.224070][ T8988] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 216.224101][ T8988] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 216.224132][ T8988] __skb_datagram_iter+0xf8/0x980 [ 216.224155][ T8988] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 216.224188][ T8988] skb_copy_datagram_iter+0xb5/0x240 [ 216.224215][ T8988] netlink_recvmsg+0x2c3/0xa50 [ 216.224258][ T8988] ? __pfx_netlink_recvmsg+0x10/0x10 [ 216.224297][ T8988] ? aa_sock_msg_perm+0xf1/0x1b0 [ 216.224326][ T8988] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 216.224358][ T8988] ? security_socket_recvmsg+0x7e/0x2c0 [ 216.224392][ T8988] ? __pfx_netlink_recvmsg+0x10/0x10 [ 216.224424][ T8988] sock_recvmsg+0x172/0x1b0 [ 216.224453][ T8988] __sys_recvfrom+0x240/0x3c0 [ 216.224490][ T8988] ? __pfx___sys_recvfrom+0x10/0x10 [ 216.224549][ T8988] ? exc_page_fault+0x6a/0xc0 [ 216.224586][ T8988] ? do_user_addr_fault+0xc6f/0x1340 [ 216.224615][ T8988] __x64_sys_recvfrom+0xde/0x100 [ 216.224648][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.224671][ T8988] do_syscall_64+0x15f/0xf80 [ 216.224691][ T8988] ? trace_irq_disable+0x3b/0x140 [ 216.224724][ T8988] ? clear_bhb_loop+0x40/0x90 [ 216.224751][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.224773][ T8988] RIP: 0033:0x7f79dd75d68e [ 216.224793][ T8988] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.224811][ T8988] RSP: 002b:00007f79de60aee8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 216.224835][ T8988] RAX: ffffffffffffffda RBX: 00007f79de60c6c0 RCX: 00007f79dd75d68e [ 216.224851][ T8988] RDX: 0000000000001000 RSI: 00007f79de60b000 RDI: 0000000000000007 [ 216.224865][ T8988] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 216.224878][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240 [ 216.224891][ T8988] R13: 00007f79de60afb0 R14: 000000000000000c R15: 0000000000000000 [ 216.224925][ T8988] [ 216.565068][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.668330][ T8983] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 216.702833][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.710098][ T4567] bridge0: port 2(bridge_slave_1) entered listening state [ 217.040164][ T9009] gretap1: entered promiscuous mode [ 217.125954][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.208231][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.229991][ T9023] netlink: 'syz.2.893': attribute type 2 has an invalid length. [ 217.277803][ T9023] netlink: 'syz.2.893': attribute type 2 has an invalid length. [ 217.388741][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 217.479356][ T9028] macvtap1: entered promiscuous mode [ 217.501874][ T9028] macvtap1: entered allmulticast mode [ 217.535024][ T9028] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 217.659260][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.711181][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 217.863259][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 217.972215][ T9049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.900'. [ 218.678468][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.903'. [ 218.678468][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.903'. [ 219.207320][ T5825] net_ratelimit: 4 callbacks suppressed [ 219.207341][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.768858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.769843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.790263][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.127243][ T9021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.251400][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.274973][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.424012][ T9115] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 220.452105][ T9118] FAULT_INJECTION: forcing a failure. [ 220.452105][ T9118] name failslab, interval 1, probability 0, space 0, times 0 [ 220.468670][ T9121] netlink: 'syz.0.907': attribute type 2 has an invalid length. [ 220.505334][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: syz.3.906 Not tainted syzkaller #0 PREEMPT(full) [ 220.505364][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.505378][ T9118] Call Trace: [ 220.505387][ T9118] [ 220.505396][ T9118] dump_stack_lvl+0xe8/0x150 [ 220.505426][ T9118] should_fail_ex+0x412/0x560 [ 220.505460][ T9118] should_failslab+0xa8/0x100 [ 220.505496][ T9118] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 220.505527][ T9118] ? __alloc_skb+0x186/0x7d0 [ 220.505555][ T9118] ? __alloc_skb+0x1d0/0x7d0 [ 220.505581][ T9118] ? __local_bh_enable_ip+0xd0/0x130 [ 220.505609][ T9118] __alloc_skb+0x1d0/0x7d0 [ 220.505643][ T9118] netlink_sendmsg+0x5d4/0xb40 [ 220.505692][ T9118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.505728][ T9118] ? aa_sock_msg_perm+0xf1/0x1b0 [ 220.505775][ T9118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.505813][ T9118] ____sys_sendmsg+0x972/0x9f0 [ 220.505846][ T9118] ? __might_fault+0xaf/0x130 [ 220.505881][ T9118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.505924][ T9118] ? import_iovec+0x73/0xa0 [ 220.505967][ T9118] ___sys_sendmsg+0x2a5/0x360 [ 220.505999][ T9118] ? __lock_acquire+0x6b5/0x2cf0 [ 220.506028][ T9118] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.506098][ T9118] ? __fget_files+0x2a/0x420 [ 220.506124][ T9118] ? __fget_files+0x3a0/0x420 [ 220.506177][ T9118] __x64_sys_sendmsg+0x1bd/0x2a0 [ 220.506214][ T9118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.506255][ T9118] ? __pfx_ksys_write+0x10/0x10 [ 220.506294][ T9118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.506317][ T9118] do_syscall_64+0x15f/0xf80 [ 220.506337][ T9118] ? trace_irq_disable+0x3b/0x140 [ 220.506369][ T9118] ? clear_bhb_loop+0x40/0x90 [ 220.506395][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.506416][ T9118] RIP: 0033:0x7fa27f39ce59 [ 220.506436][ T9118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.506454][ T9118] RSP: 002b:00007fa27d5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.506477][ T9118] RAX: ffffffffffffffda RBX: 00007fa27f616090 RCX: 00007fa27f39ce59 [ 220.506494][ T9118] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000006 [ 220.506507][ T9118] RBP: 00007fa27d5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 220.506521][ T9118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.506533][ T9118] R13: 00007fa27f616128 R14: 00007fa27f616090 R15: 00007ffdae9af948 [ 220.506566][ T9118] [ 220.512668][ T9121] netlink: 'syz.0.907': attribute type 2 has an invalid length. [ 220.777631][ T9128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.785976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.877534][ T9123] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 220.900682][ T9126] macvlan2: entered promiscuous mode [ 220.907854][ T9126] macvlan2: entered allmulticast mode [ 220.914291][ T9126] bond4: entered promiscuous mode [ 220.921765][ T9126] bridge2: entered promiscuous mode [ 220.928726][ T9126] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 220.944937][ T9126] bond4: left promiscuous mode [ 220.956426][ T9126] bridge2: left promiscuous mode [ 221.244012][ T9142] netlink: 'syz.3.913': attribute type 16 has an invalid length. [ 221.253440][ T9142] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.913'. [ 221.296430][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.471105][ T9152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.917'. [ 221.615578][ T4567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.733285][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.920'. [ 222.122334][ T9178] xt_hashlimit: size too large, truncated to 1048576 [ 222.307821][ T9189] netlink: 'syz.3.925': attribute type 4 has an invalid length. [ 222.387105][ T9191] netlink: 'syz.3.925': attribute type 4 has an invalid length. [ 224.176783][ T9213] netlink: 25 bytes leftover after parsing attributes in process `syz.1.930'. [ 224.236257][ T9215] netlink: 'syz.1.930': attribute type 13 has an invalid length. [ 224.254125][ T9215] netlink: 'syz.1.930': attribute type 17 has an invalid length. [ 224.405131][ T24] net_ratelimit: 4 callbacks suppressed [ 224.405153][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.452015][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.015930][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.186998][ T9215] gretap0: refused to change device tx_queue_len [ 226.218585][ T9215] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 226.422089][ T9233] vlan2: entered promiscuous mode [ 226.521532][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.571735][ T9238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.580116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.690146][ T9238] dvmrp0: entered allmulticast mode [ 226.805193][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.823727][ T9245] dvmrp0: entered allmulticast mode [ 226.846680][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 227.207155][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.942'. [ 227.551299][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.692489][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 227.729958][ T9278] macsec1: entered promiscuous mode [ 227.739446][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.750779][ T9278] dummy0: entered promiscuous mode [ 227.763044][ T9278] macsec1: entered allmulticast mode [ 227.779832][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 227.791038][ T9278] dummy0: entered allmulticast mode [ 227.821574][ T9278] dummy0: left allmulticast mode [ 227.883105][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.949'. [ 227.884041][ T5733] dummy0: left promiscuous mode [ 227.904042][ T9287] sctp: [Deprecated]: syz.1.951 (pid 9287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.904042][ T9287] Use struct sctp_sack_info instead [ 227.923269][ T9287] sctp: [Deprecated]: syz.1.951 (pid 9287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.923269][ T9287] Use struct sctp_sack_info instead [ 227.970358][ T9283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.149264][ T9291] vlan2: entered promiscuous mode [ 228.247335][ T9298] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 228.282836][ T9298] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 228.319397][ T9298] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 228.343238][ T9298] netlink: 264 bytes leftover after parsing attributes in process `syz.3.959'. [ 228.357117][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 228.613446][ T9309] syzkaller0: entered promiscuous mode [ 228.634501][ T9309] syzkaller0: entered allmulticast mode [ 229.187507][ T9336] netlink: 180 bytes leftover after parsing attributes in process `syz.4.974'. [ 229.201670][ T9336] netlink: 48 bytes leftover after parsing attributes in process `syz.4.974'. [ 229.514864][ T9347] xt_hashlimit: size too large, truncated to 1048576 [ 229.607411][ T24] net_ratelimit: 40 callbacks suppressed [ 229.607431][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.672929][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.770378][ T9387] FAULT_INJECTION: forcing a failure. [ 230.770378][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 230.798110][ T9387] CPU: 1 UID: 0 PID: 9387 Comm: syz.3.978 Not tainted syzkaller #0 PREEMPT(full) [ 230.798141][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.798155][ T9387] Call Trace: [ 230.798164][ T9387] [ 230.798173][ T9387] dump_stack_lvl+0xe8/0x150 [ 230.798205][ T9387] should_fail_ex+0x412/0x560 [ 230.798244][ T9387] should_failslab+0xa8/0x100 [ 230.798281][ T9387] __kmalloc_noprof+0xe8/0x760 [ 230.798312][ T9387] ? __netlink_dump_start+0xfe/0x7e0 [ 230.798343][ T9387] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 230.798376][ T9387] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 230.798412][ T9387] genl_start+0x180/0x6c0 [ 230.798436][ T9387] ? netlink_lookup+0x30/0x200 [ 230.798473][ T9387] __netlink_dump_start+0x469/0x7e0 [ 230.798514][ T9387] genl_family_rcv_msg_dumpit+0x213/0x310 [ 230.798544][ T9387] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 230.798569][ T9387] ? genl_get_cmd+0x6cb/0x960 [ 230.798594][ T9387] ? __pfx___mutex_lock+0x10/0x10 [ 230.798617][ T9387] ? __pfx_genl_start+0x10/0x10 [ 230.798639][ T9387] ? __pfx_genl_dumpit+0x10/0x10 [ 230.798662][ T9387] ? __pfx_genl_done+0x10/0x10 [ 230.798689][ T9387] ? __lock_acquire+0x6b5/0x2cf0 [ 230.798724][ T9387] genl_rcv_msg+0x5e8/0x7a0 [ 230.798757][ T9387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.798781][ T9387] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 230.798811][ T9387] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 230.798860][ T9387] netlink_rcv_skb+0x232/0x4b0 [ 230.798893][ T9387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.798920][ T9387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.798978][ T9387] ? down_read+0x270/0x2e0 [ 230.798999][ T9387] ? genl_rcv+0xd/0x40 [ 230.799025][ T9387] genl_rcv+0x28/0x40 [ 230.799047][ T9387] netlink_unicast+0x75c/0x8e0 [ 230.799089][ T9387] netlink_sendmsg+0x813/0xb40 [ 230.799132][ T9387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.799168][ T9387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.799199][ T9387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.799232][ T9387] ____sys_sendmsg+0x972/0x9f0 [ 230.799265][ T9387] ? __might_fault+0xaf/0x130 [ 230.799301][ T9387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.799344][ T9387] ? import_iovec+0x73/0xa0 [ 230.799381][ T9387] ___sys_sendmsg+0x2a5/0x360 [ 230.799412][ T9387] ? __lock_acquire+0x6b5/0x2cf0 [ 230.799442][ T9387] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.799516][ T9387] ? __fget_files+0x2a/0x420 [ 230.799542][ T9387] ? __fget_files+0x3a0/0x420 [ 230.799581][ T9387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 230.799619][ T9387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.799664][ T9387] ? __pfx_ksys_write+0x10/0x10 [ 230.799706][ T9387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.799730][ T9387] do_syscall_64+0x15f/0xf80 [ 230.799750][ T9387] ? trace_irq_disable+0x3b/0x140 [ 230.799783][ T9387] ? clear_bhb_loop+0x40/0x90 [ 230.799810][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.799833][ T9387] RIP: 0033:0x7fa27f39ce59 [ 230.799853][ T9387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.799872][ T9387] RSP: 002b:00007fa27d5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.799895][ T9387] RAX: ffffffffffffffda RBX: 00007fa27f616090 RCX: 00007fa27f39ce59 [ 230.799912][ T9387] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000006 [ 230.799945][ T9387] RBP: 00007fa27d5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 230.799958][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.799971][ T9387] R13: 00007fa27f616128 R14: 00007fa27f616090 R15: 00007ffdae9af948 [ 230.800025][ T9387] [ 231.068010][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.473726][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 231.698435][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.706689][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.715441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.798605][ T9419] netlink: 'syz.3.987': attribute type 16 has an invalid length. [ 232.569613][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.701896][ T9460] vlan2: entered promiscuous mode [ 232.730346][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.891477][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.992'. [ 233.044845][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.063617][ T9472] netlink: 25 bytes leftover after parsing attributes in process `syz.0.996'. [ 233.122018][ T9472] netlink: 'syz.0.996': attribute type 13 has an invalid length. [ 233.155091][ T9472] netlink: 'syz.0.996': attribute type 17 has an invalid length. [ 233.198411][ T9472] gretap0: refused to change device tx_queue_len [ 233.241824][ T9472] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 233.536354][ T9491] Bluetooth: MGMT ver 1.23 [ 233.667840][ T9498] dvmrp0: entered allmulticast mode [ 233.724657][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 233.812191][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 234.821555][ T24] net_ratelimit: 4 callbacks suppressed [ 234.821591][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.874177][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.086371][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.310130][ T9583] bridge1: entered promiscuous mode [ 236.354934][ T9583] bridge1: entered allmulticast mode [ 236.413197][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 236.437752][ T9583] team0: Port device bridge1 added [ 236.628236][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1020'. [ 236.706626][ T9583] bridge2: entered promiscuous mode [ 236.730716][ T9583] bridge2: entered allmulticast mode [ 236.764080][ T9583] team0: Port device bridge2 added [ 236.838075][ T9595] bridge0: port 1(team0) entered blocking state [ 236.872099][ T9595] bridge0: port 1(team0) entered disabled state [ 236.906724][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.923872][ T9595] team0: entered allmulticast mode [ 236.944745][ T9595] team_slave_0: entered allmulticast mode [ 236.972048][ T9595] team_slave_1: entered allmulticast mode [ 237.062402][ T9595] team0: entered promiscuous mode [ 237.080042][ T9595] team_slave_0: entered promiscuous mode [ 237.090283][ T9595] team_slave_1: entered promiscuous mode [ 237.108910][ T9595] bridge0: port 1(team0) entered blocking state [ 237.115955][ T9595] bridge0: port 1(team0) entered forwarding state [ 237.147382][ T9601] netlink: 'syz.4.1021': attribute type 32 has an invalid length. [ 237.403561][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1026'. [ 237.617548][ T9637] FAULT_INJECTION: forcing a failure. [ 237.617548][ T9637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.664862][ T9637] CPU: 0 UID: 0 PID: 9637 Comm: syz.4.1030 Not tainted syzkaller #0 PREEMPT(full) [ 237.664892][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.664906][ T9637] Call Trace: [ 237.664915][ T9637] [ 237.664924][ T9637] dump_stack_lvl+0xe8/0x150 [ 237.664954][ T9637] should_fail_ex+0x412/0x560 [ 237.664990][ T9637] _copy_from_user+0x2d/0xb0 [ 237.665024][ T9637] alg_setkey+0xb8/0x190 [ 237.665057][ T9637] alg_setsockopt+0x3da/0x4a0 [ 237.665086][ T9637] ? __pfx_alg_setsockopt+0x10/0x10 [ 237.665117][ T9637] do_sock_setsockopt+0x17c/0x1b0 [ 237.665155][ T9637] __x64_sys_setsockopt+0x13d/0x1b0 [ 237.665190][ T9637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.665214][ T9637] do_syscall_64+0x15f/0xf80 [ 237.665238][ T9637] ? clear_bhb_loop+0x40/0x90 [ 237.665265][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.665287][ T9637] RIP: 0033:0x7f79dd79ce59 [ 237.665308][ T9637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.665327][ T9637] RSP: 002b:00007f79de60c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.665350][ T9637] RAX: ffffffffffffffda RBX: 00007f79dda15fa0 RCX: 00007f79dd79ce59 [ 237.665366][ T9637] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 237.665379][ T9637] RBP: 00007f79de60c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.665393][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.665406][ T9637] R13: 00007f79dda16038 R14: 00007f79dda15fa0 R15: 00007fff211eb688 [ 237.665441][ T9637] [ 237.924909][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.950755][ T9643] tipc: Started in network mode [ 237.969083][ T9643] tipc: Node identity 729eee5f0e6e, cluster identity 4711 [ 237.982447][ T9643] tipc: Enabled bearer , priority 0 [ 237.991422][ T9643] syzkaller0: entered promiscuous mode [ 237.997743][ T9643] syzkaller0: entered allmulticast mode [ 238.037888][ T9643] netlink: 'syz.2.1033': attribute type 3 has an invalid length. [ 238.318788][ T9641] tipc: Resetting bearer [ 238.325433][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.334068][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.442452][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1035'. [ 238.519036][ T9641] tipc: Disabling bearer [ 238.568029][ T9657] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1035'. [ 238.826482][ T9663] xt_hashlimit: size too large, truncated to 1048576 [ 238.969257][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.984809][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.390743][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1041'. [ 239.697057][ T9691] x_tables: duplicate underflow at hook 1 [ 239.703887][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 239.727366][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 240.010589][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.229248][ T9718] macsec1: entered promiscuous mode [ 240.239957][ T9718] dummy0: entered promiscuous mode [ 240.260399][ T9718] macsec1: entered allmulticast mode [ 240.282407][ T9718] dummy0: entered allmulticast mode [ 240.316747][ T9718] dummy0: left allmulticast mode [ 240.333607][ T9724] xt_hashlimit: size too large, truncated to 1048576 [ 240.404605][ T24] dummy0: left promiscuous mode [ 240.425098][ T9729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.433459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.448044][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.544856][ T9719] bridge_slave_0 (unregistering): left allmulticast mode [ 240.589462][ T9719] bridge_slave_0 (unregistering): left promiscuous mode [ 240.606832][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.812143][ T9728] veth1: entered promiscuous mode [ 240.840836][ T9728] veth1: entered allmulticast mode [ 240.892642][ T9751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1064'. [ 240.922793][ T9738] syzkaller1: entered promiscuous mode [ 240.940114][ T9743] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1064'. [ 240.953399][ T9738] syzkaller1: entered allmulticast mode [ 240.976865][ T9743] openvswitch: netlink: Key type 769 is out of range max 32 [ 241.045377][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.229960][ T9757] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1068'. [ 241.260240][ T9757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1068'. [ 241.366963][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.921971][ T9789] netlink: 'syz.2.1078': attribute type 2 has an invalid length. [ 241.954946][ T9789] netlink: 'syz.2.1078': attribute type 2 has an invalid length. [ 242.046989][ T9795] xt_hashlimit: size too large, truncated to 1048576 [ 242.084893][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.401025][ T9802] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 242.441735][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 242.450837][ T9804] netlink: 'syz.0.1081': attribute type 5 has an invalid length. [ 243.128910][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.700227][ T9802] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 243.946362][ T9819] netlink: 'syz.1.1086': attribute type 7 has an invalid length. [ 244.087302][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.096267][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.192552][ T9827] __nla_validate_parse: 2 callbacks suppressed [ 244.192574][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 244.408633][ T9835] netlink: 'syz.4.1090': attribute type 2 has an invalid length. [ 244.445832][ T9835] netlink: 'syz.4.1090': attribute type 2 has an invalid length. [ 244.519452][ T9841] vlan2: entered promiscuous mode [ 244.599499][ T9838] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1092'. [ 244.824302][ T9848] xt_hashlimit: size too large, truncated to 1048576 [ 244.891099][ T9856] syzkaller1: entered promiscuous mode [ 244.918647][ T9856] syzkaller1: entered allmulticast mode [ 245.001949][ T9860] netlink: 105 bytes leftover after parsing attributes in process `syz.1.1100'. [ 245.226532][ T5733] net_ratelimit: 4 callbacks suppressed [ 245.226551][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.317769][ T9874] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 245.557862][ T9881] vlan0: entered promiscuous mode [ 245.670905][ T9891] netlink: 'syz.2.1106': attribute type 2 has an invalid length. [ 245.699506][ T9891] netlink: 'syz.2.1106': attribute type 2 has an invalid length. [ 246.197544][ T9910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 246.245315][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.311859][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 246.823652][ T9940] netlink: 'syz.1.1124': attribute type 2 has an invalid length. [ 246.846881][ T9940] netlink: 'syz.1.1124': attribute type 2 has an invalid length. [ 246.930832][ T9945] tipc: Started in network mode [ 246.942429][ T9945] tipc: Node identity @, cluster identity 4711 [ 246.966179][ T9945] tipc: Enabling of bearer rejected, failed to enable media [ 247.125779][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.288205][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.425945][ T9962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.434293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.553108][ T9966] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1131'. [ 247.570998][ T9965] netlink: 'syz.3.1132': attribute type 21 has an invalid length. [ 247.587586][ T9965] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.603745][ T9965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.611105][ T9965] IPv6: NLM_F_CREATE should be set when creating new route [ 247.618457][ T9965] IPv6: NLM_F_CREATE should be set when creating new route [ 247.625748][ T9965] IPv6: NLM_F_CREATE should be set when creating new route [ 247.730907][ T9972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1133'. [ 248.158681][ T9981] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.1136'. [ 248.199093][ T9985] Cannot find map_set index 2 as target [ 248.207594][ T9981] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 248.325377][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.370381][ T9994] netlink: 'syz.0.1139': attribute type 2 has an invalid length. [ 248.398563][ T9994] netlink: 'syz.0.1139': attribute type 2 has an invalid length. [ 248.537937][T10001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.913488][T10014] syzkaller0: entered promiscuous mode [ 248.959256][T10014] syzkaller0: entered allmulticast mode [ 249.222881][T10021] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1147'. [ 250.088484][T10047] netlink: 'syz.1.1155': attribute type 2 has an invalid length. [ 250.105110][T10047] netlink: 'syz.1.1155': attribute type 2 has an invalid length. [ 250.135878][T10048] netlink: 'syz.2.1156': attribute type 16 has an invalid length. [ 250.154614][T10048] netlink: 'syz.2.1156': attribute type 17 has an invalid length. [ 250.408241][ T5824] net_ratelimit: 5 callbacks suppressed [ 250.408265][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.572740][T10048] 1ªX¹¦À: left allmulticast mode [ 250.610473][T10048] veth1: left promiscuous mode [ 250.630645][T10048] veth1: left allmulticast mode [ 250.693114][T10067] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1161'. [ 250.705967][T10048] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 250.769414][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.776663][ T6566] bridge0: port 2(bridge_slave_1) entered listening state [ 251.012427][T10074] macsec1: entered promiscuous mode [ 251.026533][T10074] dummy0: entered promiscuous mode [ 251.042308][T10074] macsec1: entered allmulticast mode [ 251.059753][T10074] dummy0: entered allmulticast mode [ 251.080609][T10074] dummy0: left allmulticast mode [ 251.165773][ T5725] dummy0: left promiscuous mode [ 251.346311][T10086] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1164'. [ 251.362000][T10084] netlink: 'syz.4.1165': attribute type 15 has an invalid length. [ 251.434897][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1165'. [ 251.446308][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.571702][T10088] vlan2: entered promiscuous mode [ 251.656384][T10095] FAULT_INJECTION: forcing a failure. [ 251.656384][T10095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.686422][T10095] CPU: 0 UID: 0 PID: 10095 Comm: syz.2.1170 Not tainted syzkaller #0 PREEMPT(full) [ 251.686452][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.686472][T10095] Call Trace: [ 251.686480][T10095] [ 251.686490][T10095] dump_stack_lvl+0xe8/0x150 [ 251.686525][T10095] should_fail_ex+0x412/0x560 [ 251.686558][T10095] _copy_from_user+0x2d/0xb0 [ 251.686598][T10095] ___sys_sendmsg+0x1c6/0x360 [ 251.686640][T10095] ? __lock_acquire+0x6b5/0x2cf0 [ 251.686668][T10095] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.686738][T10095] ? __fget_files+0x2a/0x420 [ 251.686764][T10095] ? __fget_files+0x3a0/0x420 [ 251.686800][T10095] __x64_sys_sendmsg+0x1bd/0x2a0 [ 251.686837][T10095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.686880][T10095] ? __pfx_ksys_write+0x10/0x10 [ 251.686919][T10095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.686941][T10095] do_syscall_64+0x15f/0xf80 [ 251.686961][T10095] ? trace_irq_disable+0x3b/0x140 [ 251.686999][T10095] ? clear_bhb_loop+0x40/0x90 [ 251.687027][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.687048][T10095] RIP: 0033:0x7f4e80b9ce59 [ 251.687068][T10095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.687086][T10095] RSP: 002b:00007f4e819b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.687109][T10095] RAX: ffffffffffffffda RBX: 00007f4e80e15fa0 RCX: 00007f4e80b9ce59 [ 251.687129][T10095] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000004 [ 251.687144][T10095] RBP: 00007f4e819b3090 R08: 0000000000000000 R09: 0000000000000000 [ 251.687157][T10095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.687170][T10095] R13: 00007f4e80e16038 R14: 00007f4e80e15fa0 R15: 00007ffdb4304cc8 [ 251.687221][T10095] [ 252.034995][T10104] sit1: entered allmulticast mode [ 252.063457][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 252.110559][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1172'. [ 252.150904][T10109] xt_hashlimit: size too large, truncated to 1048576 [ 252.200254][T10113] veth1: entered promiscuous mode [ 252.225487][T10113] veth1: entered allmulticast mode [ 252.466079][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 252.496008][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.729576][T10131] macsec2: entered promiscuous mode [ 252.736279][T10131] dummy0: entered promiscuous mode [ 252.743266][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1178'. [ 252.748228][T10131] macsec2: entered allmulticast mode [ 252.758370][T10131] dummy0: entered allmulticast mode [ 252.766612][T10131] dummy0: left allmulticast mode [ 252.794717][ T5725] dummy0: left promiscuous mode [ 252.884982][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.982923][T10138] vlan2: entered promiscuous mode [ 253.132672][T10142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1185'. [ 253.370105][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 253.539504][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.065291][T10181] vlan2: entered promiscuous mode [ 254.416417][T10198] __nla_validate_parse: 2 callbacks suppressed [ 254.416436][T10198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'. [ 254.586765][T10201] smc: net device lo applied user defined pnetid SYZ2 [ 254.674656][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.685555][T10203] smc: net device lo erased user defined pnetid SYZ2 [ 254.885942][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.980971][T10201] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 255.000442][T10201] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 255.251990][ T202] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.274810][ T202] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.295246][ T202] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.314411][ T202] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.331723][ T202] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.363098][ T202] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.400921][ T202] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.418710][ T202] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.606608][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.611922][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.616062][ T6566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.627786][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.687268][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.003092][T10228] syzkaller0: entered promiscuous mode [ 256.015578][T10228] syzkaller0: entered allmulticast mode [ 256.315018][T10252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.323941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.725192][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.768510][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.934754][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.587164][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 258.622810][T10273] macvtap2: entered promiscuous mode [ 258.634788][T10273] team0: entered promiscuous mode [ 258.655912][T10273] macvtap2: entered allmulticast mode [ 258.672362][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 258.682727][T10273] team0: entered allmulticast mode [ 258.696334][T10273] team_slave_0: entered allmulticast mode [ 258.716629][T10273] team_slave_1: entered allmulticast mode [ 258.752102][T10273] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 258.804473][T10274] team0: left allmulticast mode [ 258.814118][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.828752][T10274] team_slave_0: left allmulticast mode [ 258.836993][T10274] team_slave_1: left allmulticast mode [ 258.855997][T10274] team0: left promiscuous mode [ 258.894134][T10274] macvtap2: left promiscuous mode [ 258.906791][T10274] macvtap2: left allmulticast mode [ 259.342314][T10306] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1240'. [ 259.481516][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.581325][T10317] nbd: nbd0 already in use [ 259.589477][T10317] block nbd0: NBD_DISCONNECT [ 259.604573][T10317] block nbd0: Send disconnect failed -32 [ 259.621752][T10317] block nbd0: shutting down sockets [ 259.681471][T10320] FAULT_INJECTION: forcing a failure. [ 259.681471][T10320] name failslab, interval 1, probability 0, space 0, times 0 [ 259.722234][T10320] CPU: 0 UID: 0 PID: 10320 Comm: syz.0.1244 Not tainted syzkaller #0 PREEMPT(full) [ 259.722265][T10320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.722279][T10320] Call Trace: [ 259.722288][T10320] [ 259.722297][T10320] dump_stack_lvl+0xe8/0x150 [ 259.722328][T10320] should_fail_ex+0x412/0x560 [ 259.722363][T10320] should_failslab+0xa8/0x100 [ 259.722407][T10320] __kmalloc_noprof+0xe8/0x760 [ 259.722438][T10320] ? __netlink_dump_start+0xfe/0x7e0 [ 259.722477][T10320] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 259.722511][T10320] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 259.722547][T10320] genl_start+0x180/0x6c0 [ 259.722570][T10320] ? netlink_lookup+0x30/0x200 [ 259.722608][T10320] __netlink_dump_start+0x469/0x7e0 [ 259.722648][T10320] genl_family_rcv_msg_dumpit+0x213/0x310 [ 259.722678][T10320] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 259.722703][T10320] ? genl_get_cmd+0x6cb/0x960 [ 259.722729][T10320] ? __pfx___mutex_lock+0x10/0x10 [ 259.722756][T10320] ? __pfx_genl_start+0x10/0x10 [ 259.722777][T10320] ? __pfx_genl_dumpit+0x10/0x10 [ 259.722799][T10320] ? __pfx_genl_done+0x10/0x10 [ 259.722825][T10320] ? __lock_acquire+0x6b5/0x2cf0 [ 259.722860][T10320] genl_rcv_msg+0x5e8/0x7a0 [ 259.722893][T10320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.722917][T10320] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 259.722948][T10320] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 259.722997][T10320] netlink_rcv_skb+0x232/0x4b0 [ 259.723030][T10320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.723057][T10320] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.723107][T10320] ? down_read+0x270/0x2e0 [ 259.723128][T10320] ? genl_rcv+0xd/0x40 [ 259.723153][T10320] genl_rcv+0x28/0x40 [ 259.723175][T10320] netlink_unicast+0x75c/0x8e0 [ 259.723216][T10320] netlink_sendmsg+0x813/0xb40 [ 259.723258][T10320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.723294][T10320] ? aa_sock_msg_perm+0xf1/0x1b0 [ 259.723326][T10320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.723359][T10320] ____sys_sendmsg+0x972/0x9f0 [ 259.723400][T10320] ? __might_fault+0xaf/0x130 [ 259.723436][T10320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.723480][T10320] ? import_iovec+0x73/0xa0 [ 259.723517][T10320] ___sys_sendmsg+0x2a5/0x360 [ 259.723549][T10320] ? __lock_acquire+0x6b5/0x2cf0 [ 259.723578][T10320] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.723652][T10320] ? __fget_files+0x2a/0x420 [ 259.723678][T10320] ? __fget_files+0x3a0/0x420 [ 259.723716][T10320] __x64_sys_sendmsg+0x1bd/0x2a0 [ 259.723753][T10320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.723798][T10320] ? __pfx_ksys_write+0x10/0x10 [ 259.723838][T10320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.723868][T10320] do_syscall_64+0x15f/0xf80 [ 259.723888][T10320] ? trace_irq_disable+0x3b/0x140 [ 259.723921][T10320] ? clear_bhb_loop+0x40/0x90 [ 259.723948][T10320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.723971][T10320] RIP: 0033:0x7f8c3979ce59 [ 259.723991][T10320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.724010][T10320] RSP: 002b:00007f8c3a5c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.724033][T10320] RAX: ffffffffffffffda RBX: 00007f8c39a15fa0 RCX: 00007f8c3979ce59 [ 259.724049][T10320] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000004 [ 259.724062][T10320] RBP: 00007f8c3a5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 259.724076][T10320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.724089][T10320] R13: 00007f8c39a16038 R14: 00007f8c39a15fa0 R15: 00007ffc86952bf8 [ 259.724124][T10320] [ 260.726673][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 260.886400][ T42] net_ratelimit: 3 callbacks suppressed [ 260.886419][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.900537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.989854][T10354] FAULT_INJECTION: forcing a failure. [ 260.989854][T10354] name failslab, interval 1, probability 0, space 0, times 0 [ 261.008572][T10354] CPU: 0 UID: 0 PID: 10354 Comm: syz.0.1256 Not tainted syzkaller #0 PREEMPT(full) [ 261.008603][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.008617][T10354] Call Trace: [ 261.008627][T10354] [ 261.008636][T10354] dump_stack_lvl+0xe8/0x150 [ 261.008668][T10354] should_fail_ex+0x412/0x560 [ 261.008706][T10354] should_failslab+0xa8/0x100 [ 261.008742][T10354] __kmalloc_cache_noprof+0x88/0x660 [ 261.008773][T10354] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 261.008799][T10354] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 261.008826][T10354] ? genl_start+0x1c9/0x6c0 [ 261.008856][T10354] genl_start+0x1c9/0x6c0 [ 261.008879][T10354] ? netlink_lookup+0x30/0x200 [ 261.008917][T10354] __netlink_dump_start+0x469/0x7e0 [ 261.008958][T10354] genl_family_rcv_msg_dumpit+0x213/0x310 [ 261.008989][T10354] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 261.009014][T10354] ? genl_get_cmd+0x6cb/0x960 [ 261.009041][T10354] ? __pfx___mutex_lock+0x10/0x10 [ 261.009065][T10354] ? __pfx_genl_start+0x10/0x10 [ 261.009087][T10354] ? __pfx_genl_dumpit+0x10/0x10 [ 261.009109][T10354] ? __pfx_genl_done+0x10/0x10 [ 261.009135][T10354] ? __lock_acquire+0x6b5/0x2cf0 [ 261.009170][T10354] genl_rcv_msg+0x5e8/0x7a0 [ 261.009203][T10354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.009228][T10354] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 261.009258][T10354] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 261.009303][T10354] netlink_rcv_skb+0x232/0x4b0 [ 261.009336][T10354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.009370][T10354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.009420][T10354] ? down_read+0x270/0x2e0 [ 261.009442][T10354] ? genl_rcv+0xd/0x40 [ 261.009468][T10354] genl_rcv+0x28/0x40 [ 261.009489][T10354] netlink_unicast+0x75c/0x8e0 [ 261.009531][T10354] netlink_sendmsg+0x813/0xb40 [ 261.009575][T10354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.009612][T10354] ? aa_sock_msg_perm+0xf1/0x1b0 [ 261.009645][T10354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.009678][T10354] ____sys_sendmsg+0x972/0x9f0 [ 261.009712][T10354] ? __might_fault+0xaf/0x130 [ 261.009749][T10354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.009794][T10354] ? import_iovec+0x73/0xa0 [ 261.009834][T10354] ___sys_sendmsg+0x2a5/0x360 [ 261.009866][T10354] ? __lock_acquire+0x6b5/0x2cf0 [ 261.009896][T10354] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.009973][T10354] ? __fget_files+0x2a/0x420 [ 261.009999][T10354] ? __fget_files+0x3a0/0x420 [ 261.010039][T10354] __x64_sys_sendmsg+0x1bd/0x2a0 [ 261.010077][T10354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.010122][T10354] ? __pfx_ksys_write+0x10/0x10 [ 261.010166][T10354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.010190][T10354] do_syscall_64+0x15f/0xf80 [ 261.010216][T10354] ? trace_irq_disable+0x3b/0x140 [ 261.010249][T10354] ? clear_bhb_loop+0x40/0x90 [ 261.010278][T10354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.010300][T10354] RIP: 0033:0x7f8c3979ce59 [ 261.010322][T10354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.010342][T10354] RSP: 002b:00007f8c3a5c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.010390][T10354] RAX: ffffffffffffffda RBX: 00007f8c39a15fa0 RCX: 00007f8c3979ce59 [ 261.010405][T10354] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000004 [ 261.010418][T10354] RBP: 00007f8c3a5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 261.010430][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.010441][T10354] R13: 00007f8c39a16038 R14: 00007f8c39a15fa0 R15: 00007ffc86952bf8 [ 261.010474][T10354] [ 261.369773][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.378258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.388460][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.588648][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 261.683460][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 261.873532][T10373] tipc: Started in network mode [ 261.886981][T10373] tipc: Node identity 56706828c156, cluster identity 4711 [ 261.910732][T10373] tipc: Enabled bearer , priority 0 [ 261.924831][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.933247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.946687][T10380] syzkaller0: entered promiscuous mode [ 261.966490][T10380] syzkaller0: entered allmulticast mode [ 262.085509][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'. [ 262.103354][T10384] bridge0: port 1(erspan0) entered blocking state [ 262.112281][T10384] bridge0: port 1(erspan0) entered disabled state [ 262.119205][T10384] erspan0: entered allmulticast mode [ 262.130930][T10384] erspan0: entered promiscuous mode [ 262.140244][T10389] erspan0: left allmulticast mode [ 262.145988][T10389] erspan0: left promiscuous mode [ 262.156321][T10389] bridge0: port 1(erspan0) entered disabled state [ 262.214113][T10391] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.238207][T10372] tipc: Resetting bearer [ 262.248966][T10385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1265'. [ 262.266827][T10387] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1267'. [ 262.319538][T10372] tipc: Disabling bearer [ 262.377012][T10387] 0ªX¹¦À: renamed from 61ªX¹¦À (while UP) [ 262.392587][T10397] FAULT_INJECTION: forcing a failure. [ 262.392587][T10397] name failslab, interval 1, probability 0, space 0, times 0 [ 262.408067][T10387] 0ªX¹¦À: entered allmulticast mode [ 262.419694][T10387] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 262.435624][T10397] CPU: 0 UID: 0 PID: 10397 Comm: syz.4.1269 Not tainted syzkaller #0 PREEMPT(full) [ 262.435652][T10397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.435665][T10397] Call Trace: [ 262.435674][T10397] [ 262.435683][T10397] dump_stack_lvl+0xe8/0x150 [ 262.435714][T10397] should_fail_ex+0x412/0x560 [ 262.435749][T10397] should_failslab+0xa8/0x100 [ 262.435786][T10397] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 262.435819][T10397] ? __alloc_skb+0x1d0/0x7d0 [ 262.435848][T10397] ? __local_bh_enable_ip+0xd0/0x130 [ 262.435877][T10397] __alloc_skb+0x1d0/0x7d0 [ 262.435912][T10397] netlink_dump+0x1d8/0xe10 [ 262.435958][T10397] ? __pfx_netlink_dump+0x10/0x10 [ 262.436005][T10397] ? genl_start+0x499/0x6c0 [ 262.436038][T10397] __netlink_dump_start+0x5cb/0x7e0 [ 262.436079][T10397] genl_family_rcv_msg_dumpit+0x213/0x310 [ 262.436111][T10397] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 262.436136][T10397] ? genl_get_cmd+0x6cb/0x960 [ 262.436162][T10397] ? __pfx___mutex_lock+0x10/0x10 [ 262.436186][T10397] ? __pfx_genl_start+0x10/0x10 [ 262.436208][T10397] ? __pfx_genl_dumpit+0x10/0x10 [ 262.436230][T10397] ? __pfx_genl_done+0x10/0x10 [ 262.436261][T10397] ? __lock_acquire+0x6b5/0x2cf0 [ 262.436296][T10397] genl_rcv_msg+0x5e8/0x7a0 [ 262.436329][T10397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.436354][T10397] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 262.436385][T10397] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 262.436435][T10397] netlink_rcv_skb+0x232/0x4b0 [ 262.436469][T10397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.436495][T10397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.436546][T10397] ? down_read+0x270/0x2e0 [ 262.436568][T10397] ? genl_rcv+0xd/0x40 [ 262.436600][T10397] genl_rcv+0x28/0x40 [ 262.436623][T10397] netlink_unicast+0x75c/0x8e0 [ 262.436665][T10397] netlink_sendmsg+0x813/0xb40 [ 262.436709][T10397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.436747][T10397] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.436779][T10397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.436813][T10397] ____sys_sendmsg+0x972/0x9f0 [ 262.436848][T10397] ? __might_fault+0xaf/0x130 [ 262.436884][T10397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.436928][T10397] ? import_iovec+0x73/0xa0 [ 262.436965][T10397] ___sys_sendmsg+0x2a5/0x360 [ 262.436998][T10397] ? __lock_acquire+0x6b5/0x2cf0 [ 262.437026][T10397] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.437100][T10397] ? __fget_files+0x2a/0x420 [ 262.437126][T10397] ? __fget_files+0x3a0/0x420 [ 262.437165][T10397] __x64_sys_sendmsg+0x1bd/0x2a0 [ 262.437204][T10397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.437249][T10397] ? __pfx_ksys_write+0x10/0x10 [ 262.437291][T10397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.437316][T10397] do_syscall_64+0x15f/0xf80 [ 262.437339][T10397] ? clear_bhb_loop+0x40/0x90 [ 262.437366][T10397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.437388][T10397] RIP: 0033:0x7f79dd79ce59 [ 262.437409][T10397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.437428][T10397] RSP: 002b:00007f79de60c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.437451][T10397] RAX: ffffffffffffffda RBX: 00007f79dda15fa0 RCX: 00007f79dd79ce59 [ 262.437467][T10397] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000004 [ 262.437482][T10397] RBP: 00007f79de60c090 R08: 0000000000000000 R09: 0000000000000000 [ 262.437496][T10397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.437509][T10397] R13: 00007f79dda16038 R14: 00007f79dda15fa0 R15: 00007fff211eb688 [ 262.437546][T10397] [ 262.967023][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.975480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.011525][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 263.040061][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 263.179157][T10406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1271'. [ 263.213606][T10413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1270'. [ 263.365579][T10416] TCP: TCP_TX_DELAY enabled [ 263.766431][T10435] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 263.805614][T10435] netlink: 'syz.0.1285': attribute type 2 has an invalid length. [ 263.815385][T10435] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 264.166221][T10457] Bluetooth: MGMT ver 1.23 [ 264.229297][T10460] netlink: 'syz.1.1294': attribute type 13 has an invalid length. [ 264.243247][T10460] netlink: 'syz.1.1294': attribute type 17 has an invalid length. [ 264.360688][T10460] bridge0: left promiscuous mode [ 264.373133][T10460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.383619][T10460] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.401655][T10460] 0ªX¹¦À: left allmulticast mode [ 264.425128][T10460] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 264.434704][T10448] nbd0: detected capacity change from 0 to 63 [ 264.469139][ T5629] block nbd0: Receive control failed (result -32) [ 264.478156][ T5627] block nbd0: Receive control failed (result -32) [ 264.490962][ T5724] block nbd0: Send control failed (result -32) [ 264.516220][ T5724] block nbd0: Request send failed, requeueing [ 264.557572][T10460] veth1: left promiscuous mode [ 264.594511][T10460] veth1: left allmulticast mode [ 264.610934][ T25] block nbd0: Dead connection, failed to find a fallback [ 264.619899][ T25] block nbd0: shutting down sockets [ 264.626510][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.638419][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.662701][ T5724] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.684989][ T5724] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.696490][ T5724] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.707373][ T5724] Buffer I/O error on dev nbd0, logical block 2, async page read [ 264.715669][ T5724] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.725063][ T5724] Buffer I/O error on dev nbd0, logical block 3, async page read [ 264.733213][ T5724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.742962][ T5724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.751173][ T5724] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.760612][ T5724] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.768680][ T5724] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.826801][ T5724] Buffer I/O error on dev nbd0, logical block 2, async page read [ 264.850649][ T5724] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.878678][ T5724] Buffer I/O error on dev nbd0, logical block 3, async page read [ 264.903621][ T5724] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.919799][T10460] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 264.934586][ T5724] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.946029][ T5724] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.963242][T10460] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_1 [ 264.977435][ T5724] Buffer I/O error on dev nbd0, logical block 1, async page read [ 265.021526][ T5724] ldm_validate_partition_table(): Disk read failed. [ 265.033945][T10460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.048413][ T5724] Dev nbd0: unable to read RDB block 0 [ 265.087718][ T5724] nbd0: unable to read partition table [ 265.096870][T10460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.158748][ T5724] ldm_validate_partition_table(): Disk read failed. [ 265.200578][ T5724] Dev nbd0: unable to read RDB block 0 [ 265.212975][ T5724] nbd0: unable to read partition table [ 265.230629][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.237890][ T9454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.379848][T10475] 1ªX¹¦À: renamed from 60ªX¹¦À (while UP) [ 265.633621][T10498] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 265.766222][T10499] vlan2: entered promiscuous mode [ 265.951178][T10501] sock: sock_timestamping_bind_phc: sock not bind to device [ 266.249054][T10521] dvmrp0: left allmulticast mode [ 266.340707][T10519] __nla_validate_parse: 5 callbacks suppressed [ 266.340727][T10519] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1309'. [ 266.461938][T10519] 0ªX¹¦À: renamed from 61ªX¹¦À (while UP) [ 266.513271][T10519] net_ratelimit: 117 callbacks suppressed [ 266.513290][T10519] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 266.535655][T10529] xt_hashlimit: size too large, truncated to 1048576 [ 266.706930][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 266.789528][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 266.842564][T10533] macvtap1: entered promiscuous mode [ 266.871930][T10533] team0: entered promiscuous mode [ 266.895837][T10533] team_slave_0: entered promiscuous mode [ 266.915662][T10533] team_slave_1: entered promiscuous mode [ 266.947279][T10533] macvtap1: entered allmulticast mode [ 266.959600][T10533] team0: entered allmulticast mode [ 266.971732][T10533] team_slave_0: entered allmulticast mode [ 266.980384][T10533] team_slave_1: entered allmulticast mode [ 266.988088][T10533] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 267.002322][T10534] team0: left allmulticast mode [ 267.032272][T10534] team_slave_0: left allmulticast mode [ 267.059713][T10534] team_slave_1: left allmulticast mode [ 267.071245][T10547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1317'. [ 267.081163][T10534] team0: left promiscuous mode [ 267.096709][T10534] macvtap1: left promiscuous mode [ 267.111614][T10534] macvtap1: left allmulticast mode [ 267.124989][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.133353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.143047][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.151422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.182886][ T5824] team_slave_0: left promiscuous mode [ 267.188432][ T5824] team_slave_1: left promiscuous mode [ 267.313165][T10552] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 267.428352][T10562] FAULT_INJECTION: forcing a failure. [ 267.428352][T10562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.466796][T10562] CPU: 0 UID: 0 PID: 10562 Comm: syz.2.1321 Not tainted syzkaller #0 PREEMPT(full) [ 267.466827][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.466841][T10562] Call Trace: [ 267.466849][T10562] [ 267.466859][T10562] dump_stack_lvl+0xe8/0x150 [ 267.466889][T10562] should_fail_ex+0x412/0x560 [ 267.466923][T10562] _copy_from_iter+0x1d3/0x1670 [ 267.466958][T10562] ? rcu_is_watching+0x15/0xb0 [ 267.466993][T10562] ? __pfx__copy_from_iter+0x10/0x10 [ 267.467031][T10562] ? netlink_sendmsg+0x650/0xb40 [ 267.467060][T10562] ? skb_put+0x11b/0x210 [ 267.467096][T10562] netlink_sendmsg+0x6c0/0xb40 [ 267.467140][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.467178][T10562] ? aa_sock_msg_perm+0xf1/0x1b0 [ 267.467207][T10562] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.467240][T10562] ____sys_sendmsg+0x972/0x9f0 [ 267.467273][T10562] ? __might_fault+0xaf/0x130 [ 267.467309][T10562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.467353][T10562] ? import_iovec+0x73/0xa0 [ 267.467389][T10562] ___sys_sendmsg+0x2a5/0x360 [ 267.467421][T10562] ? __lock_acquire+0x6b5/0x2cf0 [ 267.467450][T10562] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.467523][T10562] ? __fget_files+0x2a/0x420 [ 267.467548][T10562] ? __fget_files+0x3a0/0x420 [ 267.467587][T10562] __x64_sys_sendmsg+0x1bd/0x2a0 [ 267.467624][T10562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.467669][T10562] ? __pfx_ksys_write+0x10/0x10 [ 267.467718][T10562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.467739][T10562] do_syscall_64+0x15f/0xf80 [ 267.467758][T10562] ? trace_irq_disable+0x3b/0x140 [ 267.467788][T10562] ? clear_bhb_loop+0x40/0x90 [ 267.467813][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.467833][T10562] RIP: 0033:0x7f4e80b9ce59 [ 267.467852][T10562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.467869][T10562] RSP: 002b:00007f4e819b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.467891][T10562] RAX: ffffffffffffffda RBX: 00007f4e80e15fa0 RCX: 00007f4e80b9ce59 [ 267.467906][T10562] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 267.467918][T10562] RBP: 00007f4e819b3090 R08: 0000000000000000 R09: 0000000000000000 [ 267.467930][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.467942][T10562] R13: 00007f4e80e16038 R14: 00007f4e80e15fa0 R15: 00007ffdb4304cc8 [ 267.467973][T10562] [ 267.764813][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.781899][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.897166][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 267.932831][T10554] [ 267.935325][T10554] ====================================================== [ 267.942379][T10554] WARNING: possible circular locking dependency detected [ 267.949446][T10554] syzkaller #0 Not tainted [ 267.953894][T10554] ------------------------------------------------------ [ 267.960949][T10554] syz.0.1319/10554 is trying to acquire lock: [ 267.967134][T10554] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 267.977761][T10554] [ 267.977761][T10554] but task is already holding lock: [ 267.985162][T10554] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 267.994824][T10554] [ 267.994824][T10554] which lock already depends on the new lock. [ 267.994824][T10554] [ 268.005264][T10554] [ 268.005264][T10554] the existing dependency chain (in reverse order) is: [ 268.014314][T10554] [ 268.014314][T10554] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 268.022455][T10554] down_write+0x96/0x200 [ 268.027274][T10554] kernfs_add_one+0x41/0x5c0 [ 268.032440][T10554] kernfs_create_dir_ns+0xde/0x130 [ 268.038118][T10554] internal_create_group+0x425/0x1180 [ 268.044056][T10554] cpuhp_invoke_callback+0x445/0x860 [ 268.049903][T10554] cpuhp_issue_call+0x430/0x7a0 [ 268.055317][T10554] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 268.061948][T10554] __cpuhp_setup_state+0x3f/0x60 [ 268.067447][T10554] do_one_initcall+0x250/0x870 [ 268.072773][T10554] do_initcall_level+0x104/0x190 [ 268.078276][T10554] do_initcalls+0x59/0xa0 [ 268.083254][T10554] kernel_init_freeable+0x2a6/0x3e0 [ 268.089020][T10554] kernel_init+0x1d/0x1d0 [ 268.093923][T10554] ret_from_fork+0x514/0xb70 [ 268.099068][T10554] ret_from_fork_asm+0x1a/0x30 [ 268.104396][T10554] [ 268.104396][T10554] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 268.112258][T10554] [ 268.112258][T10554] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 268.120046][T10554] cpus_read_lock+0x42/0x160 [ 268.125191][T10554] static_key_slow_inc+0x12/0x30 [ 268.130690][T10554] ipv6_flowlabel_opt+0x1b94/0x28e0 [ 268.136459][T10554] do_ipv6_setsockopt+0xd9f/0x3150 [ 268.142141][T10554] ipv6_setsockopt+0x59/0x170 [ 268.147367][T10554] do_sock_setsockopt+0x17c/0x1b0 [ 268.152961][T10554] __x64_sys_setsockopt+0x13d/0x1b0 [ 268.158733][T10554] do_syscall_64+0x15f/0xf80 [ 268.163873][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.170317][T10554] [ 268.170317][T10554] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 268.178087][T10554] lock_sock_nested+0x41/0x100 [ 268.183412][T10554] inet_shutdown+0x6a/0x390 [ 268.188481][T10554] nbd_mark_nsock_dead+0x2e9/0x560 [ 268.194153][T10554] sock_shutdown+0x15e/0x260 [ 268.199293][T10554] nbd_clear_sock+0x24/0x170 [ 268.204434][T10554] nbd_config_put+0x2dd/0x580 [ 268.209670][T10554] nbd_genl_connect+0x19d5/0x1cf0 [ 268.215251][T10554] genl_family_rcv_msg_doit+0x22a/0x330 [ 268.221359][T10554] genl_rcv_msg+0x61c/0x7a0 [ 268.226412][T10554] netlink_rcv_skb+0x232/0x4b0 [ 268.231743][T10554] genl_rcv+0x28/0x40 [ 268.236288][T10554] netlink_unicast+0x75c/0x8e0 [ 268.241614][T10554] netlink_sendmsg+0x813/0xb40 [ 268.247030][T10554] ____sys_sendmsg+0x972/0x9f0 [ 268.252352][T10554] ___sys_sendmsg+0x2a5/0x360 [ 268.257589][T10554] __x64_sys_sendmsg+0x1bd/0x2a0 [ 268.263091][T10554] do_syscall_64+0x15f/0xf80 [ 268.268233][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.274769][T10554] [ 268.274769][T10554] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 268.282453][T10554] __mutex_lock+0x1a3/0x1550 [ 268.287599][T10554] nbd_queue_rq+0x37b/0x1100 [ 268.292743][T10554] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 268.298852][T10554] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 268.305732][T10554] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 268.312264][T10554] blk_mq_run_hw_queue+0x348/0x4f0 [ 268.317919][T10554] blk_mq_dispatch_list+0xd16/0xe10 [ 268.323670][T10554] blk_mq_flush_plug_list+0x48d/0x570 [ 268.329588][T10554] __blk_flush_plug+0x3ed/0x4d0 [ 268.334988][T10554] __submit_bio+0x28d/0x580 [ 268.340032][T10554] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 268.346206][T10554] block_read_full_folio+0x599/0x830 [ 268.352041][T10554] filemap_read_folio+0x137/0x3b0 [ 268.357627][T10554] do_read_cache_folio+0x358/0x590 [ 268.363286][T10554] read_part_sector+0xb6/0x2b0 [ 268.368610][T10554] adfspart_check_ICS+0xb1/0x960 [ 268.374110][T10554] bdev_disk_changed+0x817/0x1770 [ 268.379685][T10554] blkdev_get_whole+0x380/0x510 [ 268.385086][T10554] bdev_open+0x31e/0xd30 [ 268.389879][T10554] blkdev_open+0x470/0x610 [ 268.394840][T10554] do_dentry_open+0x785/0x14e0 [ 268.400142][T10554] vfs_open+0x3b/0x340 [ 268.404750][T10554] path_openat+0x2e08/0x3860 [ 268.409912][T10554] do_file_open+0x23e/0x4a0 [ 268.414970][T10554] do_sys_openat2+0x113/0x200 [ 268.420188][T10554] __x64_sys_openat+0x138/0x170 [ 268.425587][T10554] do_syscall_64+0x15f/0xf80 [ 268.430729][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.437174][T10554] [ 268.437174][T10554] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 268.444444][T10554] __mutex_lock+0x1a3/0x1550 [ 268.449614][T10554] nbd_queue_rq+0xc6/0x1100 [ 268.454661][T10554] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 268.460756][T10554] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 268.467644][T10554] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 268.474206][T10554] blk_mq_run_hw_queue+0x348/0x4f0 [ 268.479875][T10554] blk_mq_dispatch_list+0xd16/0xe10 [ 268.485638][T10554] blk_mq_flush_plug_list+0x48d/0x570 [ 268.491575][T10554] __blk_flush_plug+0x3ed/0x4d0 [ 268.497000][T10554] __submit_bio+0x28d/0x580 [ 268.502050][T10554] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 268.508243][T10554] block_read_full_folio+0x599/0x830 [ 268.514076][T10554] filemap_read_folio+0x137/0x3b0 [ 268.519828][T10554] do_read_cache_folio+0x358/0x590 [ 268.525500][T10554] read_part_sector+0xb6/0x2b0 [ 268.530816][T10554] adfspart_check_ICS+0xb1/0x960 [ 268.536311][T10554] bdev_disk_changed+0x817/0x1770 [ 268.541893][T10554] blkdev_get_whole+0x380/0x510 [ 268.547305][T10554] bdev_open+0x31e/0xd30 [ 268.552101][T10554] blkdev_open+0x470/0x610 [ 268.557062][T10554] do_dentry_open+0x785/0x14e0 [ 268.562374][T10554] vfs_open+0x3b/0x340 [ 268.566991][T10554] path_openat+0x2e08/0x3860 [ 268.572132][T10554] do_file_open+0x23e/0x4a0 [ 268.577185][T10554] do_sys_openat2+0x113/0x200 [ 268.582443][T10554] __x64_sys_openat+0x138/0x170 [ 268.587859][T10554] do_syscall_64+0x15f/0xf80 [ 268.592994][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.599431][T10554] [ 268.599431][T10554] -> #4 (set->srcu){.+.+}-{0:0}: [ 268.606592][T10554] __synchronize_srcu+0xca/0x300 [ 268.612080][T10554] elevator_switch+0x1e8/0x7a0 [ 268.617394][T10554] elevator_change+0x2cc/0x450 [ 268.622738][T10554] elevator_set_default+0x36c/0x430 [ 268.628493][T10554] blk_register_queue+0x3e9/0x4e0 [ 268.634067][T10554] __add_disk+0x677/0xd50 [ 268.638941][T10554] add_disk_fwnode+0xfb/0x480 [ 268.644167][T10554] nbd_dev_add+0x72c/0xb50 [ 268.649127][T10554] nbd_init+0x168/0x1f0 [ 268.653829][T10554] do_one_initcall+0x250/0x870 [ 268.659149][T10554] do_initcall_level+0x104/0x190 [ 268.664648][T10554] do_initcalls+0x59/0xa0 [ 268.669537][T10554] kernel_init_freeable+0x2a6/0x3e0 [ 268.675296][T10554] kernel_init+0x1d/0x1d0 [ 268.680176][T10554] ret_from_fork+0x514/0xb70 [ 268.685313][T10554] ret_from_fork_asm+0x1a/0x30 [ 268.690679][T10554] [ 268.690679][T10554] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 268.698550][T10554] __mutex_lock+0x1a3/0x1550 [ 268.703688][T10554] elevator_change+0x1b3/0x450 [ 268.709006][T10554] elevator_set_none+0xb5/0x140 [ 268.714407][T10554] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 268.720758][T10554] nbd_start_device+0x17f/0xb10 [ 268.726149][T10554] nbd_genl_connect+0x165b/0x1cf0 [ 268.731706][T10554] genl_family_rcv_msg_doit+0x22a/0x330 [ 268.737789][T10554] genl_rcv_msg+0x61c/0x7a0 [ 268.742831][T10554] netlink_rcv_skb+0x232/0x4b0 [ 268.748138][T10554] genl_rcv+0x28/0x40 [ 268.752655][T10554] netlink_unicast+0x75c/0x8e0 [ 268.757958][T10554] netlink_sendmsg+0x813/0xb40 [ 268.763264][T10554] ____sys_sendmsg+0x972/0x9f0 [ 268.768574][T10554] ___sys_sendmsg+0x2a5/0x360 [ 268.773793][T10554] __x64_sys_sendmsg+0x1bd/0x2a0 [ 268.779279][T10554] do_syscall_64+0x15f/0xf80 [ 268.784407][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.790844][T10554] [ 268.790844][T10554] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 268.799471][T10554] blk_alloc_queue+0x546/0x680 [ 268.804783][T10554] __blk_mq_alloc_disk+0x197/0x390 [ 268.810432][T10554] nbd_dev_add+0x499/0xb50 [ 268.815381][T10554] nbd_init+0x168/0x1f0 [ 268.820074][T10554] do_one_initcall+0x250/0x870 [ 268.825374][T10554] do_initcall_level+0x104/0x190 [ 268.830860][T10554] do_initcalls+0x59/0xa0 [ 268.835736][T10554] kernel_init_freeable+0x2a6/0x3e0 [ 268.841477][T10554] kernel_init+0x1d/0x1d0 [ 268.846350][T10554] ret_from_fork+0x514/0xb70 [ 268.851473][T10554] ret_from_fork_asm+0x1a/0x30 [ 268.856777][T10554] [ 268.856777][T10554] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 268.864008][T10554] fs_reclaim_acquire+0x71/0x100 [ 268.869489][T10554] kmem_cache_alloc_noprof+0x40/0x650 [ 268.875414][T10554] __kernfs_iattrs+0xdf/0x320 [ 268.880630][T10554] kernfs_iop_setattr+0xea/0x3f0 [ 268.886106][T10554] notify_change+0xc1a/0xf40 [ 268.891234][T10554] do_truncate+0x1c2/0x250 [ 268.896196][T10554] path_openat+0x2f89/0x3860 [ 268.901332][T10554] do_file_open+0x23e/0x4a0 [ 268.906380][T10554] do_sys_openat2+0x113/0x200 [ 268.911606][T10554] __x64_sys_openat+0x138/0x170 [ 268.916995][T10554] do_syscall_64+0x15f/0xf80 [ 268.922121][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.928550][T10554] [ 268.928550][T10554] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 268.937081][T10554] __lock_acquire+0x15a5/0x2cf0 [ 268.942475][T10554] lock_acquire+0x106/0x350 [ 268.947609][T10554] down_write+0x96/0x200 [ 268.952393][T10554] kernfs_unlink_sibling+0x71/0x180 [ 268.958143][T10554] kernfs_rename_ns+0x4a6/0x830 [ 268.963546][T10554] sysfs_rename_link_ns+0x16e/0x1b0 [ 268.969336][T10554] device_rename+0x110/0x210 [ 268.974496][T10554] __dev_change_net_namespace+0x15d3/0x20a0 [ 268.980931][T10554] cfg802154_switch_netns+0xbf/0x3d0 [ 268.986756][T10554] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 268.992761][T10554] genl_family_rcv_msg_doit+0x22a/0x330 [ 268.998846][T10554] genl_rcv_msg+0x61c/0x7a0 [ 269.003891][T10554] netlink_rcv_skb+0x232/0x4b0 [ 269.009193][T10554] genl_rcv+0x28/0x40 [ 269.013707][T10554] netlink_unicast+0x75c/0x8e0 [ 269.019009][T10554] netlink_sendmsg+0x813/0xb40 [ 269.024320][T10554] ____sys_sendmsg+0x972/0x9f0 [ 269.029633][T10554] ___sys_sendmsg+0x2a5/0x360 [ 269.034854][T10554] __x64_sys_sendmsg+0x1bd/0x2a0 [ 269.040340][T10554] do_syscall_64+0x15f/0xf80 [ 269.045463][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.051894][T10554] [ 269.051894][T10554] other info that might help us debug this: [ 269.051894][T10554] [ 269.062131][T10554] Chain exists of: [ 269.062131][T10554] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 269.062131][T10554] [ 269.076577][T10554] Possible unsafe locking scenario: [ 269.076577][T10554] [ 269.084039][T10554] CPU0 CPU1 [ 269.089422][T10554] ---- ---- [ 269.094805][T10554] lock(&root->kernfs_rwsem); [ 269.099591][T10554] lock(cpuhp_state_mutex); [ 269.106714][T10554] lock(&root->kernfs_rwsem); [ 269.114015][T10554] lock(&root->kernfs_iattr_rwsem); [ 269.119318][T10554] [ 269.119318][T10554] *** DEADLOCK *** [ 269.119318][T10554] [ 269.127476][T10554] 4 locks held by syz.0.1319/10554: [ 269.132688][T10554] #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 269.140895][T10554] #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 269.149884][T10554] #2: ffffffff8fdd0300 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0x9d0 [ 269.159225][T10554] #3: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 269.169260][T10554] [ 269.169260][T10554] stack backtrace: [ 269.175166][T10554] CPU: 1 UID: 0 PID: 10554 Comm: syz.0.1319 Not tainted syzkaller #0 PREEMPT(full) [ 269.175187][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.175199][T10554] Call Trace: [ 269.175207][T10554] [ 269.175215][T10554] dump_stack_lvl+0xe8/0x150 [ 269.175237][T10554] print_circular_bug+0x2e1/0x300 [ 269.175264][T10554] check_noncircular+0x12e/0x150 [ 269.175291][T10554] __lock_acquire+0x15a5/0x2cf0 [ 269.175313][T10554] ? __lock_acquire+0x6b5/0x2cf0 [ 269.175333][T10554] ? __lock_acquire+0x6b5/0x2cf0 [ 269.175355][T10554] ? kernfs_unlink_sibling+0x71/0x180 [ 269.175382][T10554] lock_acquire+0x106/0x350 [ 269.175400][T10554] ? kernfs_unlink_sibling+0x71/0x180 [ 269.175433][T10554] down_write+0x96/0x200 [ 269.175453][T10554] ? kernfs_unlink_sibling+0x71/0x180 [ 269.175484][T10554] ? __pfx_down_write+0x10/0x10 [ 269.175503][T10554] ? kernfs_root+0x1c/0x230 [ 269.175525][T10554] ? kernfs_root+0x1c/0x230 [ 269.175546][T10554] ? kernfs_root+0x1c/0x230 [ 269.175569][T10554] ? kernfs_root+0x1ea/0x230 [ 269.175592][T10554] kernfs_unlink_sibling+0x71/0x180 [ 269.175622][T10554] kernfs_rename_ns+0x4a6/0x830 [ 269.175653][T10554] sysfs_rename_link_ns+0x16e/0x1b0 [ 269.175679][T10554] device_rename+0x110/0x210 [ 269.175703][T10554] __dev_change_net_namespace+0x15d3/0x20a0 [ 269.175730][T10554] ? kernel_text_address+0xa5/0xe0 [ 269.175759][T10554] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 269.175779][T10554] ? arch_stack_walk+0xfb/0x150 [ 269.175806][T10554] ? stack_trace_save+0xa9/0x100 [ 269.175834][T10554] ? __pfx_stack_trace_save+0x10/0x10 [ 269.175863][T10554] ? check_path+0x21/0x40 [ 269.175884][T10554] ? check_noncircular+0xda/0x150 [ 269.175908][T10554] ? add_lock_to_list+0xc7/0x100 [ 269.175932][T10554] ? lockdep_unlock+0x5d/0xd0 [ 269.175947][T10554] ? __lock_acquire+0x146e/0x2cf0 [ 269.175978][T10554] ? do_raw_spin_lock+0x12b/0x2f0 [ 269.176009][T10554] ? get_net_ns_by_pid+0x21/0x3e0 [ 269.176035][T10554] cfg802154_switch_netns+0xbf/0x3d0 [ 269.176061][T10554] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 269.176091][T10554] genl_family_rcv_msg_doit+0x22a/0x330 [ 269.176113][T10554] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 269.176142][T10554] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 269.176168][T10554] ? bpf_lsm_capable+0x9/0x20 [ 269.176185][T10554] ? security_capable+0x7e/0x2c0 [ 269.176211][T10554] genl_rcv_msg+0x61c/0x7a0 [ 269.176233][T10554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.176252][T10554] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 269.176277][T10554] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 269.176304][T10554] ? __pfx_nl802154_post_doit+0x10/0x10 [ 269.176336][T10554] netlink_rcv_skb+0x232/0x4b0 [ 269.176362][T10554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.176382][T10554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.176415][T10554] ? down_read+0x270/0x2e0 [ 269.176432][T10554] ? genl_rcv+0xd/0x40 [ 269.176451][T10554] genl_rcv+0x28/0x40 [ 269.176474][T10554] netlink_unicast+0x75c/0x8e0 [ 269.176502][T10554] netlink_sendmsg+0x813/0xb40 [ 269.176533][T10554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.176562][T10554] ? aa_sock_msg_perm+0xf1/0x1b0 [ 269.176587][T10554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.176613][T10554] ____sys_sendmsg+0x972/0x9f0 [ 269.176641][T10554] ? __might_fault+0xaf/0x130 [ 269.176666][T10554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.176697][T10554] ? import_iovec+0x73/0xa0 [ 269.176726][T10554] ___sys_sendmsg+0x2a5/0x360 [ 269.176752][T10554] ? __lock_acquire+0x6b5/0x2cf0 [ 269.176773][T10554] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.176803][T10554] ? futex_wait+0x2a2/0x390 [ 269.176839][T10554] ? __fget_files+0x2a/0x420 [ 269.176861][T10554] ? __fget_files+0x3a0/0x420 [ 269.176887][T10554] __x64_sys_sendmsg+0x1bd/0x2a0 [ 269.176916][T10554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.176948][T10554] ? rcu_is_watching+0x15/0xb0 [ 269.176975][T10554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.176993][T10554] do_syscall_64+0x15f/0xf80 [ 269.177010][T10554] ? trace_irq_disable+0x3b/0x140 [ 269.177037][T10554] ? clear_bhb_loop+0x40/0x90 [ 269.177057][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.177075][T10554] RIP: 0033:0x7f8c3979ce59 [ 269.177092][T10554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.177108][T10554] RSP: 002b:00007f8c3a5c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.177127][T10554] RAX: ffffffffffffffda RBX: 00007f8c39a15fa0 RCX: 00007f8c3979ce59 [ 269.177140][T10554] RDX: 0000000000004880 RSI: 00002000000005c0 RDI: 0000000000000005 [ 269.177152][T10554] RBP: 00007f8c39832d6f R08: 0000000000000000 R09: 0000000000000000 [ 269.177163][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.177174][T10554] R13: 00007f8c39a16038 R14: 00007f8c39a15fa0 R15: 00007ffc86952bf8 [ 269.177196][T10554] [ 272.245218][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.884906][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.893161][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.901513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.909904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.524863][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.365612][ T9454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog