last executing test programs: 3.811409211s ago: executing program 2 (id=4042): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="0078d10fabd871bb1f20000300000400000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="17090010000000000000010008000500070000000000080009000000000008000a0000000000060002000000000014001f00"/66], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r10 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)={0x14, 0x8013, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) 3.236440652s ago: executing program 0 (id=4049): vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="087e19", 0x3}], 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="d220dd96c717ab96f0ded75d88a8", 0x0, 0x2c7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x3e) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/17, @ANYRESHEX=r1, @ANYRESHEX=0x0], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002", 0x2d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bind$netrom(r3, &(0x7f0000000200)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x48) 3.043649617s ago: executing program 0 (id=4053): syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c80)={0xffffffffffffffff}, 0x4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.931343167s ago: executing program 0 (id=4055): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0\x00', 0x2000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "dd"}]}], {0x14}}, 0x88}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) r4 = socket(0x840000000002, 0x3, 0x100) sendmsg$inet6(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c00)="6b4606f83113c281f3d3bb6e17bee9d98a871800158d90b939ec6c3d6807f38ab9f77a298080afae2afbf25cb26248ae59966cb04fd88b867ef66cc5b5c1460dddb52d03c9aecc78f0863b5019758c25a1a0be8439a093", 0x57}, {&(0x7f0000000c80)="6cdced671f6ae67fe25246", 0xb}, {&(0x7f0000000cc0)}, {&(0x7f0000000d80)="e9fd9f7adcdbbf4a9c54bcbc84ec00efdbda5814b0649cd0ab7560e3f17ccbf90a481ad70027b1935924f74715246980671a3a1a892767d7812e8c8a88718bd2c67a801b0f3a927e0dc2fb71ac98fc32f929f16211c0f85ca7521dc72cd25bbfee8da98bcf24cd4117f6114a011130474dcccedf76077e6757339ae0133cf92ccc5a8ace82cddacd96ce1592377b80481472fce202714d992f679fbf6d3a5521c220831a403485af4e47198740b31603e3a35ff36906adf2595db0f6f6bb8a92222eb1f52fd27158e441ba35c70ed6e53e207bb4d041d04c6c572597", 0xdc}, {&(0x7f0000000e80)="81f6cff699babcda", 0x8}, {&(0x7f0000000ec0)="08259633bae989e227962424145da8db6f78faffd29e7e546f7ace5e8b99340bbe5f940dda9f282537e94929e560101c41c809e15f4b409959820eb0982b12b0770867dc27a8973e1ada4ea9a1e33e3b41bd6c54c06a65461edf106e14513e5f2d16ad41107aebc60b47ceae17519efa4bde982e27c2c7519537680af20b1f2846f0839be919a8c81731a4cf395bd2d12ffeb63f7a383ad785c65aa088ff16055d95d370ef5b747ab3213b321db2591d4c0bfefd30428f2150b110063bfb66a75726fbbd53caaee7c223d8c46d26420f1828f31da17d234e", 0xd8}, {&(0x7f0000000fc0)="bc4c8ad70217f38f84086fd0a880d345fc4945518a597ec0a0a485fbe2508855a1bd01c48cfbfc0d4d6b0fe01042aa6ed255805fdeef58be83eeb79aa096c8ece16753a20661b32d3a3c2e910e95510fd45a02cf40ba16807f30c5f253571867eb7d97f9c6277ba7503e56758b74d6b2e95ecd70063e123bdb88844582f6cade6b341ae6e03f91d564beef18000e85534d781843741ba099e71df9788b40e8228ef8b4a55bb6cfcb991d029d2065459c04da9d817f0b376c4f95f462c39f175856629380ca1845221fbfe25374f20eedc178092da290", 0xd6}], 0x7, &(0x7f0000001140)=[@rthdrdstopts={{0xa8, 0x29, 0x37, {0x84, 0x11, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0xd, 0x6, [0x0, 0x262, 0x7, 0x1]}}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x31}}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0xff, 0x7, [0x180000, 0x0, 0x863, 0x7, 0xf, 0x401]}}, @ra, @pad1, @jumbo, @enc_lim={0x4, 0x1, 0x7}]}}}], 0xa8}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 2.708766267s ago: executing program 2 (id=4058): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002c80), &(0x7f0000002cc0)='%-5lx \x00'}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="38ed6f498fbe770000000000000000000300000000001c5a9503e054a8fd7dbec09ff4972641b24a894cc4ef857d532d26b44f76ac305390dd0ffaa574561b07251ef7ddbd8ebb44d994baf8910fc6cb4681ec5c516ac94ed47a13e4752a260a1c0c66130507bfa905d7a1101191", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002dc0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000002e00), &(0x7f0000002e40)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002f00)=@bpf_ext={0x1c, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x95}, [@ringbuf_query]}, &(0x7f0000002780)='syzkaller\x00', 0x7f, 0xfb, &(0x7f00000028c0)=""/251, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002c00)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000002c40)={0x5, 0xe, 0x9, 0xf}, 0x10, 0xb815, 0xffffffffffffffff, 0x0, &(0x7f0000002ec0)=[r1, r2, r3, r4], 0x0, 0x10, 0x4}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r7, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000027c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='2\x00'/12, @ANYRES32, @ANYBLOB="e46ae675a899052b62e4f47fa5ae66809bb80871742d43d00b6fcacc4aea6e4039436c5c0abdd15a9d693d21d763cdf4ea26b92be27713b39cd5ebe566951b37680b099a0a66f15b6b189612da8ea74ae817c57d3e947092a569afe2aca75623bafd2c0ed52fec7c64db7a9a086cfa7142caa296064be0be559954f9001bd7de0f0954ae58db4e787d07c2e467ddfd76c1e42847808e15f0fa1b45ff47e3db734adc335426f8c0dd92198688ef0509eae27b5587a880a521f243f0805b8f94344ef9", @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r10 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x12, 0x80800) ioctl$SIOCX25GCAUSEDIAG(r10, 0x89e6, &(0x7f0000000240)={0x6, 0x64}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x6, 0xa8d5, 0x9, 0x4, 0xd000000000, 0x1, 0x7f, 0x54, 0x3, 0xfffffffd, 0xd2c62d1, 0x6, 0x4, 0x5}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000000b00)={{r11, 0x7, 0x7, 0x0, 0x6, 0x0, 0x0, 0x4e, 0x4, 0x7fffffff, 0xad37, 0x1, 0x3, 0x3, 0x2}}) close(0x3) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r13) 2.566592036s ago: executing program 2 (id=4063): vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="087e19", 0x3}], 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="d220dd96c717ab96f0ded75d88a8", 0x0, 0x2c7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x3e) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/17, @ANYRESHEX=r1, @ANYRESHEX=0x0], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002", 0x2d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bind$netrom(r3, &(0x7f0000000200)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x48) 2.368950229s ago: executing program 2 (id=4065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$tipc(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0xf5ffffffffffffff) sendmsg$NFT_MSG_GETTABLE(r0, 0x0, 0x4804) 2.26843161s ago: executing program 2 (id=4067): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061127b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x100, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x99}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfd7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x41}, 0x800) 2.007642519s ago: executing program 0 (id=4069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44) (fail_nth: 2) 1.587524032s ago: executing program 3 (id=4072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x80, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xe747}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfdb}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 1.585310306s ago: executing program 0 (id=4073): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x26, &(0x7f0000000140)=""/35, &(0x7f00000001c0)=0x23) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r1, 0x26}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001080), r0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="040000226d93000214010029fd7000fed3df25"], 0x10}, 0x1, 0x0, 0x0, 0x2000e801}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, r10, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@delqdisc={0x34, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xf, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002500)={0x1300, r10, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1144, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-}#:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'generic-gcm-aesni\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'aead\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x601}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}#\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x44, 0x4, "3cbd2426c9b4c173dbb6b0ea56de5c2e349e4032af52f1e647a79588321d06fc5adc0221883996469959df32ea0a3505ee5a92a6030788d169b91c3907dd202a"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x40, 0x5, "e598f242937b23dbbe51b7452f490eb7178201eddc2b3c2080595cc306ce899fb6ef6042f187a37159f57b41655a6b1ef9c570c012a3fb2ed55acc06"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x46, 0x5, "d5a64a69722faaf2818a3c4baf56cf0697b7fda707ac1ef93301c05590f8b64dec99d40ec717be0894a6f957a6771694992c14aadeccd93aebf6a9db0bfa65d58ba0"}, @ETHTOOL_A_BITSET_MASK={0x1b, 0x5, "bc2cb84cb6b683beb5b90396743c3d76758cf45964de18"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x47, 0x5, "92940d0f26a9160d7a41ef581a714082d0cb417142abf11f735e96939e63a774d052deb3062940e750c6e957a261d8520c58933077c2c2c40c3f556f2fbaec1632afd4"}, @ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "27ae7071bc7a221f4bf82f1f9849c7a723827e01969483c327d36823cd2d8488eabcaf16f38af2edf2dd941b8c0a1518bd5e825c456fda5e76f52eac10dd86b64292525b2f32ed32f25cf68776b55e3856e9d3acb91ca7443e41e40c3875015cf78a7d29c491e2a71446cacb0b6cb1c8141ddd9eb4c89a92ffadc4d414b9ed3eac0bfbdb31547f03955894a872fc34d3b3fabcfa32a8bb78c188a6c1fbe02352856941ba0543bfdce075bae4ce9866510268905f3fb2b3bbe9ce8c01620e6970e9b08441ddd0b79e52cd2882259aef3d30c66195d98bcfa1595c56e35c2afdf0ffa1be46b7e6fec170158ae89c16333f"}]}]}, 0x1300}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400009b6b5d03d1dbe82391e6793108409ebf74d5d731e872fc16cf46e3423166648138000ba4a426e9e9735e7d8bb78dfa140dbb26f6527ec278f28a73439bf19800"/76, @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0) 1.544620514s ago: executing program 1 (id=4074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='rxrpc_rtt_rx\x00', r0, 0x0, 0x7000000}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x80) listen(r1, 0x28) 1.503716s ago: executing program 3 (id=4075): vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="087e19", 0x3}], 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="d220dd96c717ab96f0ded75d88a8", 0x0, 0x2c7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x3e) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/17, @ANYRESHEX=r1, @ANYRESHEX=0x0], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4240000000000000029000000020000", 0x2f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bind$netrom(r3, &(0x7f0000000200)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x48) 1.415985839s ago: executing program 1 (id=4076): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @remote, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r1, 0xfff) accept4(r1, &(0x7f0000000240)=@x25, 0x0, 0x800) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0xfff, 0x0, 0xbf, 0x8, 0xfffff000]}, &(0x7f0000000080)=0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x4) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@default, @default, 0x0, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00010000dc9c2a22e91ebc910f9cd0ba915282cc3dc12fc6fb44bc84e44889267f6f402bc635b7d7c8b3", @ANYRES16=r4, @ANYBLOB="2452e3b275d3008fce61769675588a59104ef5a300434ce0840557e631ebeefcdbb19ccd77"], 0x100}, 0x1, 0x0, 0x0, 0x884}, 0x40020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) 1.256371366s ago: executing program 3 (id=4078): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x4002000) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, 0x0}, 0x8000}], 0x1, 0x40, &(0x7f00000025c0)={r0, r1+60000000}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003d40)={@empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, 0x7fffffff, 0x401, 0x2, 0x0, 0x8, 0x280000a}) pselect6(0x40, &(0x7f0000003dc0)={0x81, 0x6, 0x1, 0x0, 0x5, 0x8, 0x9, 0x5}, &(0x7f0000003e00)={0x3f8, 0x4, 0xa, 0x39, 0x9, 0x8, 0xffffffffffffff3f, 0x32d}, &(0x7f0000003e40)={0x8001, 0x189, 0xfffffffffffffffe, 0x2, 0x6, 0x2, 0x80, 0x1d42}, &(0x7f0000003e80), 0x0) syz_emit_ethernet(0xe11, &(0x7f0000003f40)={@random="1bf8f263d4e6", @broadcast, @void, {@x25={0x805, {0x1, 0xb, 0x9, "7b5fc62578f779e8873dd016bb48611cbd500b5d945a11248c68d627413738964c6d74e4c1c138b53806ea839a094dd16b6edaa35fad5586dab6865d1e6eb36d657cc6eb701a65bad60c911bd3def51d2738e8b77987f957ddedba454dd403655e43113d25ab0ae5fd551ee5ddce9a363881e90a6bfaa6c666d7eaa80a517fa9eb0580feb726d22b3f789f522f6a11026f7200aff43197ffb81a5755f20d067d64256414403c5efe751f2dd9786fc74a89353a4ed3809412bd58a5ad5c3c62ec0688613068bc344d7242f67df5027d28fdb49ae7a3aa7989e97643bb8ad031758db5ceb8990e26f32c4c473b1bcf128a88f26623254a45764ed7468231fdab5d32e6bdc87f79868bb2f2536ae74ab73f3043b5116f12c50a3c8020fcab2e9c0fafffeabaa8bd221c52ac731a6438fb1657b42d986a68c7ff4e48c5782a0c91adb40e679ea0d0703f8d9bb63c08ad8f9a80613589a1b656e4d6d2fbe1d56675cf25280a67b287e64f09ae65b287ace140421d31cf1834e8a059bd011275a7c43cb535103d1c00b8c439390055f1ba67df84d6fa823c08e2fa22890625ad9af06dbe13ca3ac55bc52b4723475cb5e9f73bf9d12c5b2584a000d8db1f6679f765f9d97ad1c5d19ff182f571ec8d8c9bc81725d18d8b326b783a698bb5bd44cb7fa26fbad2d3d94133573781b1eb48a0a6ac57b39a8f786e4b914bf199d8a1f42d31e966617fd07571feb43d955ed23a7a82c21db510537885bfec7e32ed8eb75e30bf17e08bd98785cf23bf702a66fc3e8f3d0dd806007f1e53b03e760e1c4f7f41b7a7d0268bcd3cad1b43364c0add7b46720e738da468eee7b3f0a48c64af7c0bfa4686ad801b9fdd22a7e8b7293683322030869fc1c3ac72b8e0d6a7eabf422dadb701f29150ea20a644419c1cc2792faa90d870eb7187937bc0971fc3a528cd5b4bc16b9da1c3b807b4a5da03a2b717a6a6ca44c1bfb2a21802689531b84e557f0b0f520730699e55f7c0fd34132d9d7bc3843dbf77665759df1af7de0c44b31ca5cf45b20497b8b208dde42855cdee146f69c6057140ec718ed7a3f94e1d0bd1bbc8dacbd76cc1b178cb1148683fb76623b434ff65882e565aeaf29b3526800a244d1ecd88c6f701e3fc27f00cdf5be55aff833552116f46667afafa9871cb440bc6721527734aa0f87992dd2fda07331dcaf571d0438b8462c56749b53aae2d30d6f2072bf4a1da065a8cd61beeac4faf58f6bf4625dc5e43a394e5c54632320beb2f5de4e0fe1f2bfa3bdfe6d599e2db4f6b5a584f38686cbc6ca9ad702d3d122e79405bb0142f32fd9fcc533fa82e90d46321f3869a8b03957a407872dc40b00d7ccba80ebb517eb4ef4112f99172b0db2787efd0c35c560936a4f84fe3d38b00a03d773ca0915a350cb246ebc88a16280b4e94ffb941b92e8b7f18c38b02dfaa2f21ca9c880fb9eb8d8df08a17ddfe17ed5e6cd7459cd1de4408ad62183138e885d4f0e77ea043e8778d634c4c5298af7f8945c22f82b6a040f26faf4e15b72ed8c569aa48f0f752c39ba144c97fdf9b3ee061b9be3c39d11b860b60c36e949d9b6be3cef8c91ac198a2c338fdcbe2412a6b8cebe1200cf4e943344caec42f3a317e4515499bce6d0a912355843f0a12ecaf7b38913d9639178a5f278d41b202da3997056a7b9fb8c74924f4e33cb1a0d3e22f436405d3be614e495e39eeb53e557ec1d1a84174babfb1c3ab920dc750cf40771ac69c28259fae8340a74974a26c77710f77079df326f81d27fa74acfbec12c40bb7602879f9b1da1347134c82c5ad124d066de793312d362f6931cc236beed46db48a774e1c46dc460922ec501e1ec80a2c3c5dcf1257364bdddcb675a7fd3a48415eba3bc683d11669f121de618420fe7538609bc896bf5ec4be7f7e334905551cd7c79b4b12b8ad158447ba66154d226b37084b1984c6c2c6e623c99d00f3112553b30c5ccdc944432219010eb23284ecc41c34e4f523903109c4b370848fb45cb016c967a203ef9a90057d271322c6d889b628174664675aab0ca873ab7d2289cd4007027d84d3221413a4a7ffd6d11e6a605f957d3df5aee946acfe9ba49d2febe509a085f8f6dd9df8f6adb420763af297630585841d228298e0fdc4c6a978e3c40a9cd4694b650da3253c48c2d93ae95dc8464cf18242d8e8afa4b833acd9090261d4aa9f1270193f49ee13fc8fbf333f67902f3f6db9bafd13d80dee8b66834693740ba71a1e69dd56b21f39dada9b93c6ed0d6f9aa1801a2d2df684da402f66eb1ae1594b60a368aea0fee58d64d5c254283c9dd08a139c3519d3ed93bf3c164c54c6e6def3ffcfa99d8de771b2693b2a99bf191596dcd1998b54756107a3655d2754a472a5e9379c78d92fd7a55302d96409e7cc6e792b445e89cce103125ad2af22a727d5ef48a813567a75eba48ed8a9c6b5829f05553d1034eab7f12b5f49a3cac9ecbadd24782a44b1ee38fe58ef9bc3da7c36e8b0e5a528ecb1b3d02caeee65ad125ed584731994c93125189c8b53c1c84c8817ae76086b8b27de0ea8bf178fab2a71f8173d2e658adbed4ec4c1139855322037690f89662ec32ce758de161370e6b62d5c698b491d669204766c8b9232a28ecb64c969772bf13b03148d78c721b6aded02dfdb3f448a4727c297195011c37d2dc6d49c746b9a18dc24df9b0482a6f37664ba53e1dd19cf1c0c28a48a12c4bba97477a6d8d628cf6da402ae6bd68207b7bb331eab52eb99673f2ef3e7b2683125686be67e2f4baf6cee4dec1db6fc51b634925aabac37180b5d735675e56e0ef8b8e5a806689fc99fb1eaa5730bf9a4b80664f042b8d77c0e60433ec75afbf67e9094fdbaf80d9e4fc8bf919eb3740c3c65d7f8c8efc53a6af943f552cc07bd6a7df81e96b753fe651f9f08d894ea619bbb5576de3daa913e6e3e3c54855914b8a416d9d303bac7d35864470b8e32cf192e17c3aadc69b5c34a5e649a3093694f0e592e51f3964a570e1340f4de98b031f1a0112c5065db99cb5bd9694a638f969ca6980eec1e944a899641b96381dcbd76b5e899042bcd5743b40eda723b61f08a3cc8426d449c16af81344ca4312d98002796e0b2b0c46333920f1d05770221e5e82aa286921aff53590f4d32130c9ad30869cb0c932171c1178989ed4010edeb4d65473e6b742f58b23a3d54d86ddda1567390781a0804ca4ba9bf88a1d5765291b866a3bf7be16c8798e33900e52d1b096e2d919d61a0292cc9786a21ee3781c361c5a9f2d7953ca9669d7aa2f70613914e980ca3f78c3ec966be5a33efb6d9cc8a61962fd5f1881208064140363831cf5a8ac13bb81fc2f3282187c41a7ffed43faf5b903ae17238c311ad8f68eec227eef78318aee7e262d4094167af5ea8f90c9d532f738358e2ea8593bb5ba6d3cb0b22eada6c590c9c2e96eb84b946cc001b175c3012263559c77fc12969bd5a1586e6a8004812823b1466ef33fc9161699ec2d2edb3d9f0ab5a30d4b3640401c0286e2dcdb9dd976caa2010b040d26f707dd566247045505c1b0c30e0b775a83f2f43600e888158fd3c4d010f82e155482e49b94787ad0678b68041905991aa703d0a523d27ba0f606f4a4b6b254e9901879e78410a4fee15497f75bbd822c9db6f0efcc2fd3509921e4b0b899aafecbb97b738d542a877e43c71b8feecf61bca0e4339123e3535c6d9630237bec7cd2f895398608b81df5491db9594017f57f79c2f7496fa3324678b90196afae6e6e1bea54a827ece87eb3a69f4a2026bb41ed84a47e56ee2c294376fdea77300bcac9f0edcb1adc5bd53a8bdc9bb9de85d8faaf88011f45d8599f4f8122a7878178867797cf3575726c330f2ff9f64ed327296ef27ad877f34c914a494634901ab99cf148dc1184374d9250ea2ed6db78857098200337bb3fa5f378e4891d141b170819c88fd2437028c49e17e2ea88309ec28e0fa7eabbb401696bbf744b23e79d413c39d6d3d7b141eada25d5705f95703cd933299b2cc66779f37bf86a9c3702f23ad7970f156e743cf732478663c055f4c10d141d90df321a3c5128e743f87d331b203b4f4aabdcdaa1364e865dad13c5c1bf1fa00b4ada8cdfcfd83cc8243b9bc46214c2c36dc8b05063210710d773579ca49420fbc97edaa959de459dc373e806f791dd6f6f4cb9b79af15e0a5cf1637604a95d16fb8e6743082e33b9bbc9d3f0688baf2669548aba1877b193ba00680eb922bda3abafbcc7159aefd0ce73f10e91f9b30df611f4fa860f0091cccb6bbb9eef91b25dfa36f11925b3439b8a46f65b2135ab00cc2def8b7b24f2c5738572a9cd110a77216f338157bc009eda8aefacead579b679a466a6e5c49b3fea1434091574ad4e7be3ebe529e2a7469d4d833b7a2df03298284cf1776fb51029f7284bc02f249532490d183a65abc8434a9065859eee085aaa1e5556c1f1eb0c4de83ef2b6e030a2c18f57e8936fedc58dad55cfb49eec9f72743b8d5a5965db2c7b8091f8135c9fbd6108fcdc05dc80fecb1a08ceb86a0d45e62948ada74a74682b982b7530bbdcd2e9db06eddadd45969d0c0d516b0c44ac20ac48363939259cdb49d82ee17ce21d8c40c8161ff1c5eaccb6d10f96125f464c1145c1ab22bbf8957ce8d7df374998f2d50d4f1c5c96bc5986b9bbed978886039cc2f4392c9629cef76a670df4a01baf123302a67b5bfb1d31df428366aa209f2d87968f37c8398d5a8552c8c657c3fdbcdb75df44cceb6d002a99abead0dcde0acbf56b3cc7256d9673255d9636010cc61e8b8adc2843cfb81e039f4d69c060fff2b2a63a8ad15a48403142ff61b65982907ab99f3c3877bf02da68321b8ce764d83828e01a9ec0c6f0ec8b066692ee7c9619916c581604129fb756979996efa89f609c5bd151fbef27a99dfa7439970f108c96148d8f8856d766110d967e092861649aee930745bcac189c4599146bf8e9005a64c4f9fee00c9b9caa2d3270bd47d8ed9359629f50d7ccc914ed08a02a56d3952f0ac2e0274a48472be0f123f433179"}}}}, &(0x7f0000004f80)={0x0, 0x4, [0x4ea, 0x64d, 0x446, 0x87e]}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) ppoll(&(0x7f0000005000)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x44a}, {0xffffffffffffffff, 0x2c6}, {}], 0x4, &(0x7f0000005040), &(0x7f0000005080)={[0x8]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006800)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x20048800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f00000068c0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x40) r3 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000006ac0)={&(0x7f0000006980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006a00)={0x50, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048040}, 0x48804) 1.184515393s ago: executing program 3 (id=4079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000903000000797a3000004c000900020073797a3200000000430000001c0a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) 1.051619881s ago: executing program 3 (id=4081): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'syztnl1\x00', 0x0, 0x2f, 0xf7, 0x5, 0xe9ca, 0x12, @empty, @empty, 0x20, 0x10, 0x3ff, 0xb61c}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002280)={'ip_vti0\x00', &(0x7f0000002180)={'gretap0\x00', 0x0, 0x10, 0x700, 0x1, 0x4, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x80, 0x29, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x1b, 0x9c, [@multicast2, @broadcast, @private=0xa010102, @loopback, @rand_addr=0x64010101, @multicast1]}, @cipso={0x86, 0x57, 0xffffffffffffffff, [{0x1, 0x6, "79c9fa02"}, {0x6, 0x9, "0a1c96ca5e6b81"}, {0x6, 0x12, "0df77509ed3cc90f5d706b2680c0799b"}, {0x5, 0xa, "a4755274be2f77e8"}, {0x2, 0x6, "952c4cf6"}, {0x2, 0xb, "69a6cd94f39eaa9c13"}, {0x5, 0x4, "2913"}, {0x6, 0xa, "8af135059257d774"}, {0x6, 0x7, "76c8419d26"}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x9d, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x1008001}]}, @ssrr={0x89, 0x17, 0xc2, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010100, @broadcast]}]}}}}}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000400)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000200)={r6, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000580)={r6, 0x1, 0x6, @local}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ppoll(&(0x7f0000000240)=[{r7, 0x1020}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003040)={0x0, @private, @multicast2}, &(0x7f0000003080)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r9, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f00000007c0)={0xa, 0x4e24, 0x8, @empty, 0x2}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000800)="cff5ef8c7ba2d094abeeec25b6739e14269193c4de903be14076d19c69669e9d6f9bd532621ff6c7be48b7a0bdd03a8b489b9abecee6fe278d129651b5675e81e6f539888c6f8c97cb9d00", 0x4b}], 0x1, &(0x7f00000008c0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x1, 0x6, 0x1, 0x2, 0x0, [@remote, @empty, @private0]}}}, @rthdr={{0x48, 0x29, 0x39, {0x29, 0x6, 0x2, 0x83, 0x0, [@remote, @empty, @private0]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x84, 0x1, '\x00', [@enc_lim, @pad1, @generic={0x2}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x73}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x8, 0x9, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x7, 0x97, [0x0, 0x6e, 0x800, 0xc81c, 0xfffffffffffffffb, 0x4, 0x4, 0x9]}}]}}}], 0x1a0}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="343b744a3c31d7c9b738f11c7d634bb665d6366fbc37ea5723356996ace61f621f6e1ff9cfc57d7ee71125829c114776995af517285c6ebdef5dd181072f1bb404a7f3568baa09289b7ce994de8d280ea9f9847ef7339c69a9b11c242d02c9e66a5c50f1aa647d92e867d77c7d99bf6563b2f39a4f933a4127239bc6164461cac11361969e73207e938774792ca422e5198c720b686ef605fe361b3519ceea0fc085a34c39bc0d5ef6ffaa0486f3d25c5929b0daa5f8591e5a7913e0f4864d15fb04d0b57604c440758d1dd11567c6fac9b377cfde989c63387ec253c732b9ba8d2de3b803", 0xe5}, {&(0x7f0000000a80)="62f623ddc08963be837d7ab848", 0xd}], 0x2, &(0x7f0000000d00)=[@rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x1, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00']}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x41}, r3}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000dc0)="133668e39a03f77746363ebbc9b8b358c718a04b1bfc6693188e1ab4cc4e", 0x1e}, {&(0x7f0000000e00)="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", 0x800}, {&(0x7f0000001e00)="13b06ca69081f07aecd5ad0dcf85f0d56995274cf3730857de56575e6fa54a533028b726c8db9424", 0x28}, {&(0x7f0000001e40)="06bc588298ee83560b3ff667f154eed8e569dff4bf5fe535f0358743ddcce5931914ad2d0be9f28f713c29054bf73c11aa8f35556fc122786e4471c27d3cdf0452c848983b9bf23078a1c80fb8db", 0x4e}, {&(0x7f0000001ec0)="1fa8620b5a78cae7f760b8d51d46610207685e4f2bf679bebb2fcdb82ffe96a468163756fe5fefe705418576e1d4e2153226ec7e8c85c287a526e0741a68ba0168dfcc002034aeed2eb039cd01f70c7f289f63fd9fb3f77ae5c9", 0x5a}], 0x5}}, {{&(0x7f0000001fc0)={0xa, 0x4e20, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000002000)="4f1e605c7ad859414da33918e522f0ea1c0a8e00cc5b80924e2b4ff44b53d09f40b2b02fb91dfa4d09201d4dbaa380317f06bd181116ec53d49721ea89c35e50e37264e949c3530b2be4a0d5e3f3c3c9364f58f1f34a7ac1bf9d6fe438da7f5eac8fcbc58868c4c8127751ac94c564abcbf0b268c9c84cdff7b92c2d96b97e6e112ce4935171c72c10acf10c953e885b2301c8de2f02731948c9", 0x9a}, {&(0x7f00000020c0)="67cc1a9d812a6f98fc8b461c0ae213aa5b8e09a3e3a30a7b279ed050b5222bc024e84fc385b9c8b035ddb0f38a980f39891c77c09ad704526cc5ecc7de9591f6830940d08577cdccf8e435be992d4ad28f2cede82369b31d36da77663fa771878a550dd4e60bf77c677a426a368ff60c1805783326df01e76bc4e076c518", 0x7e}], 0x2, &(0x7f00000022c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffffa}}, @dontfrag={{0x14, 0x29, 0x3e, 0xa1}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x60}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x0, 0x7, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @hao={0xc9, 0x10, @mcast1}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x40, 0xb7b8, [0x27]}}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x89, 0x19, '\x00', [@generic={0xd, 0xac, "c34d6490669ae1c1c61c41d06bc2bd9e276b1519861f20c3ca7838ba1aa1e7e6506f72869abf733d82c62e59e709beb4332e67eb6d4786d2a83e0b68d68d7356900b31a6355bb5c8a9ece68081974151d1b922bddcd0bd2d52b9e0c6621f96f9889e415b519f5818c7f4675263366cd57efffffc5f2d3d5a55277e56c2761e855ee0ffbf0fa81c9f8145fa33451c249e886eefae9ee833908e924c495e7866e98f69692b7259bedf0c508c13"}, @ra={0x5, 0x2, 0x3}, @pad1, @jumbo={0xc2, 0x4, 0xffffffff}, @jumbo={0xc2, 0x4, 0x80000000}, @generic={0x5, 0x3, '?I='}, @jumbo={0xc2, 0x4, 0x9}]}}}], 0x200}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000024c0)="87a4ed58f40079403721b93b23636d3948cda32a66762e927e7639567f06872ed698db0200b9f766dac2aee1d2167404bb11aabd2c5e077c63093cc87f589e266356dbb3ca2300652d14d9adf3dfe39eed4b60b9e8b0885d739fd114b2afff66575d02252bd0acaa3e3009009262181bc5c208c1c4f7649cbeeb15ef30c063be2ed5f312c02a7ba7663f3e55be5aae8c2ed30a5460e275190ae8aa480d70219e8caf04fd57c72791b09d80a0e842d6ea344a3549b31bf71fbd7921132172", 0xbe}, {&(0x7f0000002580)="b338354ba466b473048efdc091f7bb965e3c7eca5c5ca6cee48c6a50e305311e5bc67f801e3189f581a2dda992336727c669161c490c18b53fa9e10cbf5eb3fccfd1d33ddbff192eb41afb2e21ce9ce79bf4cf6bc282d211c112ef41b6bb44ad913cb978f1dc550946b7d67c47e8ab7a6f32744b13713bd18df172d1b2321fd295a7eac439915a20618ee1634220f1ce76fe2979664bab83b2c446a032b89a6d17caabdaea88aee4c060857762487e3a", 0xb0}, {&(0x7f0000002640)="cc724a0f3470d6b3f981618fd2850151c257016a646aaf6353c126fea0f09c0f5390963e650567a96ad7e1cdacf29e828c1afc1701f13919ba930ae012c931ca2bb0af305065d1af07d3af1d7007f374541cf2", 0x53}, {&(0x7f00000026c0)="0a2c44c7a8acaf795c241ccb26fdf6c4d5471f", 0x13}], 0x4, &(0x7f0000002740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x18}}, {{&(0x7f0000002780)={0xa, 0x4e23, 0x5a0, @mcast2, 0x1029}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f00000027c0)="9094720c83363b9e8ae0ccce06cf9c5116ce71211b3dcc3d89ebdc", 0x1b}, {&(0x7f0000002800)="7829871cb421fb38fb517b596c2915038d9e8c458b94e938b87961aa730d3d22d1cfe65417d27ef29bfe0bdc86465c2211dfe43f4154131301c71cbd4801a896bccef329f2a682cc3ceee7aa0d6b016710423022087d07241e17df8bff911e171562760dc3d925d1e251a9ca6d861da07d432eb0c9d46473a1322fbbf2e88a557ca3663354f5c3523eb25a884d76ce190cab8732157870b6d205ebc9b9f9623d14ee5d9bd75bee605a6664121fee75df78c9b76bb9b8b070a9033beda886d682a28b1c4f98738c3d341a93a2ce099d9b", 0xd0}, {&(0x7f0000002900)="d8d4aac864e70f799bcc4ac1548e357982", 0x11}, {&(0x7f0000002940)="05766be7e3b39026abd9cacfac8c92c9fc574ec0fd31c67fb907d29cbb35259420cbcafd1be39856150df6f4e3795aefe0c5", 0x32}, {&(0x7f0000002980)="5e9e4770ca0c1eab7715896bda9523f3deda34038be7eb30612f87bd9c7c0bca3a39422cf3e51cc03f5b82c72dfcf53d8be5e9448b8c3ab5acc5b843df2c2f9e66521992a3cabb21fe5d864edcf4942774ab0b8e498aad897effaab2c35522", 0x5f}, {&(0x7f0000002a00)="59b2486708684124f4c502829672dce4b60053a51dcd7e0078761685528d41e7e3e6e3b88571bbc35d3117577d4d113834c2b367bad0e6e7905e360e5fe674aec1fbe1ca8b0e6c231d1b200c56fc14a626c61eb2dface5d6d892a4dd846b839cb6903a06a52cd5ecabb99d01ca0da5ad5c8a8658612a323fb498d72572bb92d1012e9e4e1fec9f1125dd0684", 0x8c}], 0x6}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002b40)="2bee68e1331c59f512ea7b89aa1219c7035585a1f597", 0x16}, {&(0x7f0000002b80)="114d9303287f9285f4f02ddf0a556b7c72cae53f7eb61f1c7c5e3ce465c25c265dd8994108de7d0ab48de15b984f05b7e8d1fc42b6626d12a9eed7a7feb3945b859bc77b56a630300f47b6e8963fc73e9f0734b1cddc5e30dfc45bfcf146b1ce32a8a159af6a912ca74abc5537f68c1e40de73847a73cf46cf0f7300ccb564fe2f60f9424ff42913da8eeec2e87b48f7e37cde30504a2429747ea90bb873afdfd8cd6c914f3e3e0f7b55e2d197be4e4fc848e49efba36a85e533a1a8291744ff66d2e151b5c33bc139baa445a37dbf88ca840708ea7179e3f4398620a00ffe3b3792aa07b17af755b9d9a44f82cee04172", 0xf1}, {&(0x7f0000002c80)="601883327b87db6e70507389b5b88527469531d8db2a2f6a597ec7c68cde985458b6b50c07035560e481c0535f265a0cea5881efc909f006e0bd111c238f9e18fa10b11ac5e9b3767b641a02d2cb6a5258c35962f52248c687c41a36bae43a0feb20b34fdc865c405371d5eb327de269b559c4496040f4e3ba8dc3", 0x7b}], 0x3, &(0x7f0000002d40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1a349c10}}, @dstopts={{0x28, 0x29, 0x37, {0x84, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r6}}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffff8001}}, @rthdr={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@private1]}}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e40)="c4", 0x1}, {&(0x7f0000002e80)="50eb91c086be21bc02bbe27303cf54174ccf4ae878e8444cab2a9c684f089454892b4af13dfb9e4dac63d148d384f0f4a4122050bd798873ae65cf0e54b8bd09146a3f3c4e0114fae78729afe3749fe571094d89106ca185a630315292fe2058027027f3c0144262e091416699063d974253b40341a6c6fefdc673fb1c23191c14e271faf61356c3bf23e9a9bbcf612fead1daf28ae034b30573a411d433edf0707ebbe3e0cd457384c7363bb4734a7633585a783f3c5783fda2d3490a7042be5fe1e2072224b878d956d9263f599a4466b1caf93d3f67eeb3f0", 0xda}], 0x2, &(0x7f00000030c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xffffd3be}}, @dstopts={{0x40, 0x29, 0x37, {0x3b, 0x5, '\x00', [@pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x6, 0x9, [0x17, 0x8]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x18c00}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r8}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x88, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}}}], 0xd0}}], 0x8, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r11, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000040)="652d6e0e6bd2bf9686959749c8e097a69c5ca183d0b912aa5bd8e5", 0x1b}, {&(0x7f00000000c0)="b8147a0b02d4561b4dc2d254885437f607117bfe0a78fe281b75bdeb1384afb62b105e01b6b9b5bcb0fc6c8780a7a0b0a6fb16c8b84e263699795c271004573e211345f68311ad5174848fa9ada5a61e27a4eacb03dff06fe2eaa79b5db15a98fb50f3545f439f93d399e13c498303ccee78907179df6c60c9e63777a7ef888782adb69a0a01c43b9e2927942149", 0x8e}, {&(0x7f0000000180)="789e1dc4fe819fb75f52347e830dc2f9caf090c140a5d20c115f57d26c996bf43fa9cc06ba6dc21ca3a6f1158cad1a1a264fa1127e40797bb72085e7dc6be451a96ede9443c3e27b16e04f2e146016d9720d18bee05b64f70b0bc2e8f190c5780b49be1ba2f78cebedc3af463d839f0a9e3bc29d37e0ae02190a7aa8b9da326a6aac7323a08424afc046753dc624eac63d32d95ad48342c7541688f3508c45bd31b112d462ad56c3dd6b56b7a9b52ccb073a3c3608b9bc1e2efe92f72fe34b576e4bb2b49fe4b4918e9719f845f5402fe598bccc61d82e2ddee35025", 0xdc}, {&(0x7f0000000280)="1ad89e51bda99ca9c4d3e0193eac2acf2d704dc82097d041d7d2d8ae5fb7ed194091d978e589535030ca6b2593ec0d46b1b0a7a4f2dfd4bd18601182ba43df537c1890964f5abe36e60cbe15e3703bbdca52aabda4cadcb6acae028b98e915b072455d99e196c53c4eb23493ade18388a37ee8884eebee6413d19dc5262fc9e7aef6a8021a002c136264f659a179a7c872d8dd609b3a17dfab1ddfc3467dc202864d8d596b1eafc4dce525cea0d9958a062c46", 0xb3}, {&(0x7f0000000340)="91ad2fb88f1ce094a7f0e7e06f76a4a44b649f833e915c38a82a61235f1f2040356ced4973039f80894cd26863dbbf07c2cc667906e3a9aabd9b60d1794e870bbb327663e21f6e2f3cfd52abe3a2", 0x4e}, {&(0x7f00000003c0)="f4a3ebc9f6d5d4c03fc378d9550a73664da5305a61c1df5cd1cb4338051646ce69bb34f9e9b3b6f60e2c85875c8993dbc8d4c07318ca3a0a35eb9c7caa83e24fb6a8c0fc6e3415dcdaa36f6cf0d9efee92d0c7490799e73d29355bc4239d102aa69ce326aa7a2071985e28df679aa5d26365754756dc5ed66001429bac86cf8aa6c365061c4933f1c3", 0x89}, {&(0x7f0000000540)="6943c0d33924c1bbc9c63be59b071ba4e31b08fd3383510ef44ff498dc28d6eea0d7ac982b7cfc6b0dab0cbee634750adbd870300cc30f08bd3040ab8062f4f92e56ff094370aa452682ecfd2135abe27bc218cc215ab0f9ba40231f94eb0d2a0113a0b6c5e571f4ae9d83dc28050c459def0c306bf2bcd920e69219023a84853e77b70c5149ba", 0x87}, {&(0x7f0000000480)="62197e71758aaeb7b8c9292b1186110a770b28d805806f0ecf03ec97b9c6f01896024d7c78373cfc6e476c576bda6b5ec07b3a1a8459480c5c117c948b10217949c8f6b242c12a", 0x47}, {&(0x7f0000000600)="b266b1e187b3c3b76a998323e4bb6d510278749286626739b22937a1c5f0eef5022dd09adb43eaa48810a9e68d8b5a8da306d5e8c06028876edc4235d6c301f6b946e3d79f3a01f9b0eeb2d948adf8beaae286dca6de65a40a228670cf369de9e6ddb09019ee2e9561641cfd58c6c6d444de61d52eecfa2859770af6132f83126ba76704e7a02ab46ff9120c7db5d9f7773e39733f370226", 0x98}], 0x9}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8) 1.038173637s ago: executing program 4 (id=4082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd12, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0xc4, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xae, 0x6, "278bfd72e7c2ea532a97f8c35d624b81e49929860914d804a30540f07b2f9a66dad88825a3a487eb7122cb2339d30ce5c85b045595ed09234e83f632d7a7124461440a0a7fa501837b3b055c88d72232c7d51a92616329d06e9413b02ef55b9b94e39a99bdf8a7e3efb15f95253d0cd705bf7b21bf00bcc6591f53aab021b8230c702e2ea607395b074647aab60d5e1053d7401b33203763efe75541b35bd441315738aee64be48f0f9e"}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000de"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r3}, 0x38) r4 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_buf(r4, 0x1, 0x45, 0x0, &(0x7f0000000100)=0x20) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x22) 962.960318ms ago: executing program 2 (id=4083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$tipc(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0xff0f400400000000) sendmsg$NFT_MSG_GETTABLE(r0, 0x0, 0x4804) 936.567898ms ago: executing program 4 (id=4084): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000040)=0x1) 647.938211ms ago: executing program 1 (id=4085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x80, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xe747}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfdb}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 647.287323ms ago: executing program 4 (id=4086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x25, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x4, 0x3, {{0xe, 0x4, 0x2, 0x1, 0x38, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, {[@noop, @ssrr={0x89, 0x23, 0x57, [@broadcast, @private=0xa010102, @multicast1, @remote, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010101]}]}}}}}) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001c0008002abd7000ffdbdf250a000000", @ANYRES32=r3, @ANYBLOB="40a2b2fe00030908000800", @ANYRES32=r4, @ANYBLOB="080007000100000008000800", @ANYRES32=r5, @ANYBLOB="0a000200a36750fb80db0000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20008081) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 610.552546ms ago: executing program 4 (id=4087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x32, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="5a49cb60c09b624fd4c31b487bb42d19", 0x10) close(r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x258, 0xa, 0x1, 0x301, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x1}, [@generic="14687044aa8ae91f3ab8eaf739ffa7c9986b0ceaff6dc4c5c60d00d0bba4a5a23cda3083a7ebfcad", @nested={0x17f, 0xbb, 0x0, 0x1, [@generic="bc30d9816ac17d9a51f154b8797d6841cba24cfb35d99f64b836f4a05fafd4f5d0fe7a63eb295923445868398d5970823c82e8bedf1497f104e710b11373f24d05eb3c69b036214a18acee79a536dac1ff81a1522a763cb833af10c8e21a83f9ecd17653989b38889faaaab216c791232b973d99216a155b1e07e8afd9112f0a59eddc813d344f4e53de", @generic="2d39e9ee7cce69846526c785b5509319f2ebf0c28f37e0a5bca1b89c9dd62e15f95ef32ee44f8f80410f37af68279d048f97e9d0c99ee81aa0ed2643808babba269480697d17df2f56a134da2f35a34dc50b7259b0dbc1bf8c4d9601d231d7e099b374871c625885a1167f85ccad66d37bd55d5a1e505948178a1823e036448a82d295d66e3dba516b3be60d194794874748d3996a1d64df197a20befaef34d6422a4c259acb05a4965fa330a0f5e0c6121307cde33c6fd722faad0fc6e1f869b2275a676481ccf1427c95b992cb636882283a94fdfe7c342d46d59c4ad03752d4efce25e8a584337c03d3bae5c237a87e"]}, @generic="53776d1d274744de6b1e209d0cdd8befcffdef7f46324720ee6f5b0fe36ad1d2cfd42ac3b1e734ff40", @typed={0x8, 0xd1, 0x0, 0x0, @fd=r1}, @nested={0x58, 0x81, 0x0, 0x1, [@nested={0x4, 0x21}, @nested={0x4, 0x20}, @typed={0x8, 0x84, 0x0, 0x0, @pid=r2}, @typed={0x5, 0x10, 0x0, 0x0, @str='\x00'}, @generic="539baa0499fbe86d320322d94d2a3d547032b4d800f95927b5878168a2f03fa5984c1471824460a94f814e6d6e1b65771f3d9f002133138fa4a29bea"]}, @typed={0x8, 0x23, 0x0, 0x0, @uid=r5}, @typed={0x7, 0x26, 0x0, 0x0, @str='--\x00'}]}, 0x258}, 0x1, 0x0, 0x0, 0x48020}, 0x20000010) 559.655589ms ago: executing program 4 (id=4088): vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="087e19", 0x3}], 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="d220dd96c717ab96f0ded75d88a8", 0x0, 0x2c7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x3e) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/17, @ANYRESHEX=r1, @ANYRESHEX=0x0], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4240000000000000029000000020000", 0x2f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bind$netrom(r3, &(0x7f0000000200)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x48) 376.445163ms ago: executing program 0 (id=4089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001900010000000000000000008020004000041a050024000008"], 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001900010000000000000000008020004000041a050024000008"], 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='rcu_utilization\x00', r2, 0x0, 0x2}, 0x18) unshare(0x62040200) 374.420565ms ago: executing program 4 (id=4090): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x1, 0x0, "9f24e60695f93e6502765ac601be38fee9465c740d6d911cefe0a84324b992a1e45477a8560324f54a13b022774242bcb28faea749463d96a3520083ab118f46eae07ed83334dd342802f0caba4bbe85"}, 0xd8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000040)) close(0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000f4b81f1ee88fc6ee81d600000000000018110000c95bc0826d645399689f6324052a62a40d981e5f", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000001100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x913}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7ffffffb, 0x2}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r6}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r8 = accept(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a40)=@deltfilter={0x43c, 0x2d, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffff}, {0x10, 0x1}, {0xd, 0xffe6}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb0000, 0xddf, 0x6, 0x1, 0x1, 0x11, 0x7fff, 0x5c, 0xc7, 0x7, 0x0, 0x49d7, 0x3e, 0xfffffc00, 0xfffffffc, 0x80, 0x7, 0x0, 0x9, 0x8, 0xb, 0x7, 0xffffffff, 0x8, 0x84, 0x200000, 0xf, 0x101, 0x6, 0x5, 0x80000000, 0x7ff, 0x32, 0x8, 0x401, 0x4, 0xd1, 0x800, 0xe7, 0x8, 0x9d5, 0xb6e5, 0xfffffffe, 0xfffffffe, 0x30000, 0x6, 0x0, 0x0, 0x40, 0x2, 0x9, 0x10, 0x6, 0x4, 0x6, 0x4, 0x100, 0xfffffff2, 0x0, 0xa3a7, 0x4, 0x6, 0x4, 0x6, 0x6, 0x7f, 0x1, 0x2, 0x10001, 0x7, 0x9, 0x2, 0x40, 0x81, 0x7, 0x4, 0x3, 0xa7, 0x3, 0x5, 0x6, 0x7, 0x3, 0x5, 0x8, 0x6, 0x3, 0x4, 0x9, 0x10001, 0x8, 0x8, 0xd6c, 0x1, 0x388d, 0xd2b1bd8, 0x7, 0xfffffff9, 0x0, 0x1007, 0x100, 0x0, 0x9ac8, 0x9, 0x9, 0x6, 0xe0, 0x5, 0x4, 0x5, 0xa8ca, 0x8, 0x4ff, 0x1, 0x2, 0x8c, 0x4, 0x1, 0xffffffc0, 0x7, 0x7, 0x0, 0x2, 0x4, 0x0, 0x4000080, 0x7, 0x4, 0x1, 0xc, 0x7, 0x101, 0x8, 0x9, 0xa0, 0x0, 0x6, 0x5eb4797, 0x607f, 0x1, 0x5, 0x9, 0x81, 0x9, 0x6, 0xf4e8, 0x101, 0x7f, 0xffffffff, 0x400, 0xd, 0xf0000000, 0x86, 0x5c3, 0x80000001, 0x5, 0x4, 0x6, 0x1, 0x1, 0x7, 0x8000, 0x2, 0x4, 0x2b6, 0x9, 0x5, 0x7, 0x0, 0x6, 0x9, 0x6, 0x1, 0x9, 0x6, 0x8, 0x0, 0xfffffffe, 0x3ff, 0x9e, 0x21de, 0xe, 0x8000, 0x4, 0x34, 0xfffff7b6, 0x2, 0x800, 0x4d, 0x495e8efe, 0x8, 0x6, 0x3, 0x2, 0x12, 0x7, 0x9, 0x6, 0xfff, 0x1, 0x7f, 0x101, 0x7fff, 0x5, 0x5, 0x1, 0x3, 0x550, 0x8001, 0x9, 0x8, 0x3, 0x8, 0x81, 0x38, 0x7, 0xe, 0x9, 0x3, 0x3, 0x800, 0x0, 0x4, 0xf487, 0x1000, 0x6, 0x5, 0x24000, 0x5, 0x100, 0x3ff, 0x8, 0x3, 0x40, 0x0, 0x2, 0x0, 0x1, 0x5, 0x1, 0x78d3, 0x3cac9d53, 0x400, 0xfffffe01, 0x2, 0xd7, 0x4, 0x0, 0x4, 0x1, 0xfff, 0x6, 0x4, 0x4, 0xfff, 0x80000000]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000841}, 0x404) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000640)=""/182, 0xb6}], 0x2}, 0x10040) 373.449822ms ago: executing program 1 (id=4091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1405c00d8d7ed38fcd0000003a00010329bd7000fcffffff09000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x419}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x776a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x10008090) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000b00)={0x388, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x0, 0x2, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_EXPRESSIONS={0xf8, 0x12, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x20}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @osf={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS, @NFTA_OSF_FLAGS, @NFTA_OSF_DREG={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_TTL={0x0, 0x2, 0xf9}, @NFTA_OSF_FLAGS, @NFTA_OSF_FLAGS, @NFTA_OSF_DREG={0x0, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_TTL={0x0, 0x2, 0x8}, @NFTA_OSF_FLAGS, @NFTA_OSF_DREG={0x0, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x218}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x388}}, 0x24044800) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r6, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40002241, 0x0) 100.704375ms ago: executing program 1 (id=4092): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc3, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44) 34.538814ms ago: executing program 3 (id=4093): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0xc, @remote, 0x10000}, @in6={0xa, 0x4e24, 0x8000, @empty, 0x3}, @in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in6={0xa, 0x4e22, 0x6, @remote, 0x1}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x713, @private2, 0x9}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x6}, @in6={0xa, 0x4, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @local}, 0x81}, @in6={0xa, 0x4e22, 0x6, @loopback, 0x3}], 0xf0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = accept(r0, &(0x7f00000001c0)=@can, &(0x7f0000000240)=0x80) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000180018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f0ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=4094): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44) (fail_nth: 3) kernel console output (not intermixed with test programs): 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.559356][T15465] RSP: 002b:00007f2754a5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.559375][T15465] RAX: ffffffffffffffda RBX: 00007f2753de5fa0 RCX: 00007f2753b8f749 [ 340.559388][T15465] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 340.559398][T15465] RBP: 00007f2754a5a090 R08: 0000000000000000 R09: 0000000000000000 [ 340.559409][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.559420][T15465] R13: 00007f2753de6038 R14: 00007f2753de5fa0 R15: 00007fffdebd0708 [ 340.559447][T15465] [ 341.088412][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'. [ 341.257585][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 341.501755][T15497] SET target dimension over the limit! [ 341.530226][T15497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.652297][T15546] __nla_validate_parse: 2 callbacks suppressed [ 342.652317][T15546] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2837'. [ 342.670248][T15546] netlink: 'syz.3.2837': attribute type 4 has an invalid length. [ 342.682432][T15546] netlink: 'syz.3.2837': attribute type 4 has an invalid length. [ 342.960597][T15555] netlink: 'syz.4.2838': attribute type 1 has an invalid length. [ 343.030715][T15555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.042582][T15560] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2841'. [ 343.091359][T15561] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 343.102287][T15561] bond3: (slave batadv1): making interface the new active one [ 343.111145][T15561] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 343.179142][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2838'. [ 343.396575][T15581] netlink: 'syz.3.2847': attribute type 13 has an invalid length. [ 343.410827][T15581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2847'. [ 343.477921][T15555] bond3 (unregistering): (slave batadv1): Releasing active interface [ 343.499572][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2846'. [ 343.500029][T15555] bond3 (unregistering): Released all slaves [ 345.825244][T15602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2852'. [ 345.912176][T15615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2858'. [ 345.937254][T15615] IPVS: Error connecting to the multicast addr [ 345.957819][T15621] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2861'. [ 346.127931][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2865'. [ 346.261064][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2865'. [ 346.667422][T15663] bond0: entered promiscuous mode [ 346.673863][T15663] batadv0: entered promiscuous mode [ 346.681146][T15663] batadv0: left promiscuous mode [ 346.688478][T15663] bond0: left promiscuous mode [ 346.732448][ T1930] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.750501][ T1930] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.796873][ T1930] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.836924][ T1930] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.021910][T15682] vlan2: entered promiscuous mode [ 347.231036][T15695] netlink: 'syz.1.2883': attribute type 4 has an invalid length. [ 347.283427][T15696] netlink: 'syz.1.2883': attribute type 4 has an invalid length. [ 347.760962][T15690] 8021q: VLANs not supported on ip_vti0 [ 347.907316][T15703] __nla_validate_parse: 12 callbacks suppressed [ 347.907334][T15703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2885'. [ 347.984849][T15705] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2885'. [ 348.279529][T15730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 348.280627][T15729] netlink: 'syz.2.2893': attribute type 4 has an invalid length. [ 348.579231][T15742] syzkaller0: entered promiscuous mode [ 348.584970][T15742] syzkaller0: entered allmulticast mode [ 349.108856][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2913'. [ 349.221833][T15786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2911'. [ 349.332472][T15792] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2917'. [ 349.600261][T15803] 8021q: VLANs not supported on ip_vti0 [ 350.355679][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2929'. [ 350.376210][T15826] xfrm0 speed is unknown, defaulting to 1000 [ 350.510633][T15835] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2930'. [ 350.528170][T15835] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2930'. [ 350.537372][T15835] netlink: 'syz.1.2930': attribute type 6 has an invalid length. [ 350.546249][T15835] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2930'. [ 350.579581][T15835] netlink: 'syz.1.2930': attribute type 4 has an invalid length. [ 350.635337][T15838] netlink: 'syz.1.2930': attribute type 4 has an invalid length. [ 350.760322][T15840] vlan2: entered promiscuous mode [ 350.765840][T15840] geneve1: entered promiscuous mode [ 350.771561][T15840] vlan2: entered allmulticast mode [ 350.777521][T15840] geneve1: entered allmulticast mode [ 350.809835][T15826] wg1 speed is unknown, defaulting to 1000 [ 351.237261][T15852] geneve4: entered promiscuous mode [ 351.480175][T15866] batadv_slave_0: entered promiscuous mode [ 351.867691][T15896] netlink: 'syz.1.2948': attribute type 6 has an invalid length. [ 351.888295][T15896] netlink: 'syz.1.2948': attribute type 4 has an invalid length. [ 351.904273][T15896] netlink: 'syz.1.2948': attribute type 4 has an invalid length. [ 351.917607][T15899] FAULT_INJECTION: forcing a failure. [ 351.917607][T15899] name failslab, interval 1, probability 0, space 0, times 0 [ 351.931262][T15899] CPU: 1 UID: 0 PID: 15899 Comm: syz.4.2950 Not tainted syzkaller #0 PREEMPT(full) [ 351.931289][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.931300][T15899] Call Trace: [ 351.931308][T15899] [ 351.931315][T15899] dump_stack_lvl+0xe8/0x150 [ 351.931340][T15899] should_fail_ex+0x414/0x560 [ 351.931370][T15899] should_failslab+0xa8/0x100 [ 351.931392][T15899] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 351.931416][T15899] ? __alloc_skb+0x190/0x720 [ 351.931434][T15899] ? __alloc_skb+0x1d5/0x720 [ 351.931449][T15899] ? __local_bh_enable_ip+0xd0/0x130 [ 351.931467][T15899] ? __alloc_skb+0x190/0x720 [ 351.931485][T15899] __alloc_skb+0x1d5/0x720 [ 351.931502][T15899] ? netlink_autobind+0xdb/0x300 [ 351.931523][T15899] ? netlink_autobind+0x2c2/0x300 [ 351.931549][T15899] netlink_sendmsg+0x5c6/0xb30 [ 351.931576][T15899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.931599][T15899] ? aa_sock_msg_perm+0xf1/0x1b0 [ 351.931622][T15899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.931637][T15899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.931660][T15899] __sock_sendmsg+0x21c/0x270 [ 351.931687][T15899] ____sys_sendmsg+0x505/0x820 [ 351.931712][T15899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.931739][T15899] ? import_iovec+0x74/0xa0 [ 351.931762][T15899] ___sys_sendmsg+0x21f/0x2a0 [ 351.931784][T15899] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.931836][T15899] ? __fget_files+0x2a/0x420 [ 351.931855][T15899] ? __fget_files+0x3a0/0x420 [ 351.931884][T15899] __x64_sys_sendmsg+0x19b/0x260 [ 351.931907][T15899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.931937][T15899] ? __pfx_ksys_write+0x10/0x10 [ 351.931963][T15899] do_syscall_64+0xec/0xf80 [ 351.931982][T15899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.931997][T15899] ? trace_irq_disable+0x37/0x100 [ 351.932017][T15899] ? clear_bhb_loop+0x60/0xb0 [ 351.932036][T15899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.932051][T15899] RIP: 0033:0x7f563758f749 [ 351.932067][T15899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.932081][T15899] RSP: 002b:00007f56383f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.932099][T15899] RAX: ffffffffffffffda RBX: 00007f56377e5fa0 RCX: 00007f563758f749 [ 351.932110][T15899] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 351.932122][T15899] RBP: 00007f56383f9090 R08: 0000000000000000 R09: 0000000000000000 [ 351.932132][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.932143][T15899] R13: 00007f56377e6038 R14: 00007f56377e5fa0 R15: 00007ffc0ea67078 [ 351.932184][T15899] [ 351.933813][T15900] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 352.317190][T15865] batadv_slave_0: left promiscuous mode [ 352.456289][T15921] FAULT_INJECTION: forcing a failure. [ 352.456289][T15921] name failslab, interval 1, probability 0, space 0, times 0 [ 352.481058][T15921] CPU: 0 UID: 0 PID: 15921 Comm: syz.4.2955 Not tainted syzkaller #0 PREEMPT(full) [ 352.481085][T15921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.481096][T15921] Call Trace: [ 352.481104][T15921] [ 352.481111][T15921] dump_stack_lvl+0xe8/0x150 [ 352.481150][T15921] should_fail_ex+0x414/0x560 [ 352.481179][T15921] should_failslab+0xa8/0x100 [ 352.481201][T15921] __kmalloc_noprof+0xdf/0x800 [ 352.481218][T15921] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 352.481237][T15921] ? rcu_is_watching+0x15/0xb0 [ 352.481260][T15921] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 352.481285][T15921] genl_family_rcv_msg_doit+0xb8/0x300 [ 352.481310][T15921] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 352.481333][T15921] ? apparmor_capable+0x137/0x1a0 [ 352.481350][T15921] ? bpf_lsm_capable+0x9/0x20 [ 352.481368][T15921] ? security_capable+0x7e/0x2e0 [ 352.481394][T15921] genl_rcv_msg+0x60e/0x790 [ 352.481419][T15921] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.481435][T15921] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 352.481469][T15921] netlink_rcv_skb+0x208/0x470 [ 352.481493][T15921] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.481513][T15921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.481532][T15921] ? genl_rcv+0x19/0x40 [ 352.481563][T15921] ? down_read+0x274/0x2e0 [ 352.481582][T15921] ? genl_rcv+0xd/0x40 [ 352.481599][T15921] genl_rcv+0x28/0x40 [ 352.481616][T15921] netlink_unicast+0x82f/0x9e0 [ 352.481645][T15921] ? __pfx_netlink_unicast+0x10/0x10 [ 352.481668][T15921] ? netlink_sendmsg+0x642/0xb30 [ 352.481689][T15921] ? skb_put+0x11b/0x210 [ 352.481714][T15921] netlink_sendmsg+0x805/0xb30 [ 352.481746][T15921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.481772][T15921] ? aa_sock_msg_perm+0xf1/0x1b0 [ 352.481795][T15921] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 352.481810][T15921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.481833][T15921] __sock_sendmsg+0x21c/0x270 [ 352.481860][T15921] ____sys_sendmsg+0x505/0x820 [ 352.481884][T15921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.481912][T15921] ? import_iovec+0x74/0xa0 [ 352.481933][T15921] ___sys_sendmsg+0x21f/0x2a0 [ 352.481955][T15921] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.482001][T15921] ? __fget_files+0x2a/0x420 [ 352.482020][T15921] ? __fget_files+0x3a0/0x420 [ 352.482045][T15921] __x64_sys_sendmsg+0x19b/0x260 [ 352.482066][T15921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.482092][T15921] ? __pfx_ksys_write+0x10/0x10 [ 352.482127][T15921] do_syscall_64+0xec/0xf80 [ 352.482146][T15921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.482162][T15921] ? trace_irq_disable+0x37/0x100 [ 352.482181][T15921] ? clear_bhb_loop+0x60/0xb0 [ 352.482201][T15921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.482216][T15921] RIP: 0033:0x7f563758f749 [ 352.482232][T15921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.482246][T15921] RSP: 002b:00007f56383d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.482265][T15921] RAX: ffffffffffffffda RBX: 00007f56377e6090 RCX: 00007f563758f749 [ 352.482278][T15921] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 352.482288][T15921] RBP: 00007f56383d8090 R08: 0000000000000000 R09: 0000000000000000 [ 352.482299][T15921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.482309][T15921] R13: 00007f56377e6128 R14: 00007f56377e6090 R15: 00007ffc0ea67078 [ 352.482340][T15921] [ 352.994047][T15927] netlink: 'syz.2.2959': attribute type 1 has an invalid length. [ 353.016499][T15927] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 353.063954][T15935] netlink: 'syz.1.2961': attribute type 1 has an invalid length. [ 353.249853][T15951] tipc: Failed to remove unknown binding: 66,0,0/0:4249751557/4249751558 [ 353.261714][T15951] tipc: Failed to remove unknown binding: 66,0,0/0:4249751557/4249751558 [ 353.346901][T15957] bond3: option arp_all_targets: invalid value (26728) [ 353.359312][T15957] bond3 (unregistering): Released all slaves [ 353.390486][T15962] FAULT_INJECTION: forcing a failure. [ 353.390486][T15962] name failslab, interval 1, probability 0, space 0, times 0 [ 353.404127][T15962] CPU: 1 UID: 0 PID: 15962 Comm: syz.4.2970 Not tainted syzkaller #0 PREEMPT(full) [ 353.404152][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.404162][T15962] Call Trace: [ 353.404170][T15962] [ 353.404177][T15962] dump_stack_lvl+0xe8/0x150 [ 353.404205][T15962] should_fail_ex+0x414/0x560 [ 353.404236][T15962] should_failslab+0xa8/0x100 [ 353.404269][T15962] __kmalloc_noprof+0xdf/0x800 [ 353.404283][T15962] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 353.404295][T15962] ? rcu_is_watching+0x15/0xb0 [ 353.404310][T15962] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 353.404325][T15962] genl_family_rcv_msg_doit+0xb8/0x300 [ 353.404339][T15962] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 353.404353][T15962] ? apparmor_capable+0x137/0x1a0 [ 353.404364][T15962] ? bpf_lsm_capable+0x9/0x20 [ 353.404375][T15962] ? security_capable+0x7e/0x2e0 [ 353.404390][T15962] genl_rcv_msg+0x60e/0x790 [ 353.404404][T15962] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.404414][T15962] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 353.404435][T15962] netlink_rcv_skb+0x208/0x470 [ 353.404449][T15962] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.404460][T15962] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.404471][T15962] ? genl_rcv+0x19/0x40 [ 353.404490][T15962] ? down_read+0x274/0x2e0 [ 353.404502][T15962] ? genl_rcv+0xd/0x40 [ 353.404513][T15962] genl_rcv+0x28/0x40 [ 353.404522][T15962] netlink_unicast+0x82f/0x9e0 [ 353.404553][T15962] ? __pfx_netlink_unicast+0x10/0x10 [ 353.404575][T15962] ? netlink_sendmsg+0x642/0xb30 [ 353.404594][T15962] ? skb_put+0x11b/0x210 [ 353.404616][T15962] netlink_sendmsg+0x805/0xb30 [ 353.404645][T15962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.404670][T15962] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.404692][T15962] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.404707][T15962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.404726][T15962] __sock_sendmsg+0x21c/0x270 [ 353.404744][T15962] ____sys_sendmsg+0x505/0x820 [ 353.404759][T15962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.404775][T15962] ? import_iovec+0x74/0xa0 [ 353.404789][T15962] ___sys_sendmsg+0x21f/0x2a0 [ 353.404803][T15962] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.404833][T15962] ? __fget_files+0x2a/0x420 [ 353.404845][T15962] ? __fget_files+0x3a0/0x420 [ 353.404862][T15962] __x64_sys_sendmsg+0x19b/0x260 [ 353.404876][T15962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.404893][T15962] ? __pfx_ksys_write+0x10/0x10 [ 353.404909][T15962] do_syscall_64+0xec/0xf80 [ 353.404921][T15962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.404929][T15962] ? trace_irq_disable+0x37/0x100 [ 353.404942][T15962] ? clear_bhb_loop+0x60/0xb0 [ 353.404953][T15962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.404962][T15962] RIP: 0033:0x7f563758f749 [ 353.404973][T15962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.404981][T15962] RSP: 002b:00007f56383d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.404993][T15962] RAX: ffffffffffffffda RBX: 00007f56377e6090 RCX: 00007f563758f749 [ 353.405000][T15962] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 353.405009][T15962] RBP: 00007f56383d8090 R08: 0000000000000000 R09: 0000000000000000 [ 353.405015][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.405021][T15962] R13: 00007f56377e6128 R14: 00007f56377e6090 R15: 00007ffc0ea67078 [ 353.405037][T15962] [ 353.828986][T15964] netlink: 'syz.4.2971': attribute type 4 has an invalid length. [ 353.836997][T15964] __nla_validate_parse: 4 callbacks suppressed [ 353.837012][T15964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2971'. [ 354.076299][T15984] tipc: Failed to remove unknown binding: 66,0,0/3810089956:1478016508/1478016509 [ 354.089717][T15984] tipc: Failed to remove unknown binding: 66,0,0/3810089956:1478016508/1478016509 [ 354.286674][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2982'. [ 354.297206][T15993] xfrm0 speed is unknown, defaulting to 1000 [ 354.347779][T15997] FAULT_INJECTION: forcing a failure. [ 354.347779][T15997] name failslab, interval 1, probability 0, space 0, times 0 [ 354.394612][T15997] CPU: 0 UID: 0 PID: 15997 Comm: syz.3.2982 Not tainted syzkaller #0 PREEMPT(full) [ 354.394644][T15997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.394655][T15997] Call Trace: [ 354.394663][T15997] [ 354.394671][T15997] dump_stack_lvl+0xe8/0x150 [ 354.394700][T15997] should_fail_ex+0x414/0x560 [ 354.394733][T15997] should_failslab+0xa8/0x100 [ 354.394756][T15997] __kmalloc_cache_noprof+0x84/0x700 [ 354.394776][T15997] ? netlbl_unlhsh_add+0x449/0x1280 [ 354.394804][T15997] netlbl_unlhsh_add+0x449/0x1280 [ 354.394831][T15997] ? netlbl_unlhsh_add+0xdc/0x1280 [ 354.394853][T15997] ? __pfx_netlbl_unlhsh_add+0x10/0x10 [ 354.394874][T15997] ? apparmor_secctx_to_secid+0x98/0x110 [ 354.394903][T15997] netlbl_unlabel_staticadddef+0x52a/0x680 [ 354.394925][T15997] ? rcu_is_watching+0x15/0xb0 [ 354.394946][T15997] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 354.394976][T15997] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 354.395003][T15997] genl_family_rcv_msg_doit+0x215/0x300 [ 354.395030][T15997] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 354.395062][T15997] ? bpf_lsm_capable+0x9/0x20 [ 354.395081][T15997] ? security_capable+0x7e/0x2e0 [ 354.395108][T15997] genl_rcv_msg+0x60e/0x790 [ 354.395135][T15997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.395153][T15997] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 354.395197][T15997] netlink_rcv_skb+0x208/0x470 [ 354.395222][T15997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.395242][T15997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.395262][T15997] ? genl_rcv+0x19/0x40 [ 354.395298][T15997] ? down_read+0x274/0x2e0 [ 354.395318][T15997] ? genl_rcv+0xd/0x40 [ 354.395338][T15997] genl_rcv+0x28/0x40 [ 354.395354][T15997] netlink_unicast+0x82f/0x9e0 [ 354.395386][T15997] ? __pfx_netlink_unicast+0x10/0x10 [ 354.395410][T15997] ? netlink_sendmsg+0x642/0xb30 [ 354.395431][T15997] ? skb_put+0x11b/0x210 [ 354.395456][T15997] netlink_sendmsg+0x805/0xb30 [ 354.395490][T15997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.395516][T15997] ? aa_sock_msg_perm+0xf1/0x1b0 [ 354.395539][T15997] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.395555][T15997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.395579][T15997] __sock_sendmsg+0x21c/0x270 [ 354.395608][T15997] ____sys_sendmsg+0x505/0x820 [ 354.395635][T15997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.395666][T15997] ? import_iovec+0x74/0xa0 [ 354.395691][T15997] ___sys_sendmsg+0x21f/0x2a0 [ 354.395715][T15997] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.395775][T15997] ? __fget_files+0x2a/0x420 [ 354.395795][T15997] ? __fget_files+0x3a0/0x420 [ 354.395826][T15997] __x64_sys_sendmsg+0x19b/0x260 [ 354.395851][T15997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.395883][T15997] ? __pfx_ksys_write+0x10/0x10 [ 354.395914][T15997] do_syscall_64+0xec/0xf80 [ 354.395934][T15997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.395950][T15997] ? trace_irq_disable+0x37/0x100 [ 354.395970][T15997] ? clear_bhb_loop+0x60/0xb0 [ 354.395990][T15997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.396007][T15997] RIP: 0033:0x7f9b8858f749 [ 354.396024][T15997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.396038][T15997] RSP: 002b:00007f9b89407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.396057][T15997] RAX: ffffffffffffffda RBX: 00007f9b887e6090 RCX: 00007f9b8858f749 [ 354.396070][T15997] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 354.396081][T15997] RBP: 00007f9b89407090 R08: 0000000000000000 R09: 0000000000000000 [ 354.396092][T15997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.396102][T15997] R13: 00007f9b887e6128 R14: 00007f9b887e6090 R15: 00007ffd1a0519f8 [ 354.396134][T15997] [ 354.861662][T15993] wg1 speed is unknown, defaulting to 1000 [ 355.011570][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2984'. [ 355.234923][T10281] Bluetooth: hci4: command 0x0405 tx timeout [ 355.312817][T16026] tipc: Failed to remove unknown binding: 66,0,0/3111084604:2169841598/2169841599 [ 355.376486][T16026] tipc: Failed to remove unknown binding: 66,0,0/3111084604:2169841598/2169841599 [ 355.563829][T16044] sctp: [Deprecated]: syz.3.2999 (pid 16044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.563829][T16044] Use struct sctp_sack_info instead [ 355.597909][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2996'. [ 355.666848][T16041] FAULT_INJECTION: forcing a failure. [ 355.666848][T16041] name failslab, interval 1, probability 0, space 0, times 0 [ 355.745754][T16041] CPU: 0 UID: 0 PID: 16041 Comm: syz.1.2996 Not tainted syzkaller #0 PREEMPT(full) [ 355.745782][T16041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.745791][T16041] Call Trace: [ 355.745798][T16041] [ 355.745805][T16041] dump_stack_lvl+0xe8/0x150 [ 355.745830][T16041] should_fail_ex+0x414/0x560 [ 355.745860][T16041] should_failslab+0xa8/0x100 [ 355.745881][T16041] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 355.745905][T16041] ? __alloc_skb+0x1d5/0x720 [ 355.745922][T16041] ? __local_bh_enable_ip+0xd0/0x130 [ 355.745938][T16041] ? __alloc_skb+0x190/0x720 [ 355.745957][T16041] __alloc_skb+0x1d5/0x720 [ 355.745980][T16041] netlink_ack+0x146/0xa50 [ 355.745999][T16041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.746030][T16041] netlink_rcv_skb+0x28c/0x470 [ 355.746058][T16041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.746077][T16041] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.746095][T16041] ? genl_rcv+0x19/0x40 [ 355.746127][T16041] ? down_read+0x274/0x2e0 [ 355.746146][T16041] ? genl_rcv+0xd/0x40 [ 355.746164][T16041] genl_rcv+0x28/0x40 [ 355.746179][T16041] netlink_unicast+0x82f/0x9e0 [ 355.746206][T16041] ? __pfx_netlink_unicast+0x10/0x10 [ 355.746226][T16041] ? netlink_sendmsg+0x642/0xb30 [ 355.746245][T16041] ? skb_put+0x11b/0x210 [ 355.746265][T16041] netlink_sendmsg+0x805/0xb30 [ 355.746294][T16041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.746318][T16041] ? aa_sock_msg_perm+0xf1/0x1b0 [ 355.746339][T16041] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.746353][T16041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.746376][T16041] __sock_sendmsg+0x21c/0x270 [ 355.746404][T16041] ____sys_sendmsg+0x505/0x820 [ 355.746430][T16041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.746460][T16041] ? import_iovec+0x74/0xa0 [ 355.746485][T16041] ___sys_sendmsg+0x21f/0x2a0 [ 355.746509][T16041] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.746566][T16041] ? __fget_files+0x2a/0x420 [ 355.746586][T16041] ? __fget_files+0x3a0/0x420 [ 355.746641][T16041] __x64_sys_sendmsg+0x19b/0x260 [ 355.746666][T16041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.746696][T16041] ? __pfx_ksys_write+0x10/0x10 [ 355.746726][T16041] do_syscall_64+0xec/0xf80 [ 355.746744][T16041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.746758][T16041] ? trace_irq_disable+0x37/0x100 [ 355.746778][T16041] ? clear_bhb_loop+0x60/0xb0 [ 355.746798][T16041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.746814][T16041] RIP: 0033:0x7f8e71f8f749 [ 355.746831][T16041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.746845][T16041] RSP: 002b:00007f8e72e4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.746865][T16041] RAX: ffffffffffffffda RBX: 00007f8e721e6090 RCX: 00007f8e71f8f749 [ 355.746877][T16041] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 355.746888][T16041] RBP: 00007f8e72e4a090 R08: 0000000000000000 R09: 0000000000000000 [ 355.746898][T16041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.746909][T16041] R13: 00007f8e721e6128 R14: 00007f8e721e6090 R15: 00007ffdc6fb7668 [ 355.746940][T16041] [ 356.116524][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 356.216968][T16063] netlink: 'syz.0.3004': attribute type 4 has an invalid length. [ 356.225044][T16063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3004'. [ 356.235699][T16059] block nbd1: server does not support multiple connections per device. [ 356.244693][T16059] block nbd1: shutting down sockets [ 356.338341][T16068] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3001'. [ 356.437900][T16071] xfrm0 speed is unknown, defaulting to 1000 [ 356.487510][T16077] tipc: Failed to remove unknown binding: 66,0,0/3810089956:1046352999/1046353000 [ 356.512809][T16077] tipc: Failed to remove unknown binding: 66,0,0/3810089956:1046352999/1046353000 [ 356.790128][T16085] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3010'. [ 356.851453][T16085] syzkaller1: entered promiscuous mode [ 356.867975][T16085] syzkaller1: entered allmulticast mode [ 356.902204][T16085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3010'. [ 357.185622][T16071] wg1 speed is unknown, defaulting to 1000 [ 357.204985][T16092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3013'. [ 357.240252][T16092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3013'. [ 357.423008][T16096] vlan3: entered promiscuous mode [ 357.717732][T16112] xfrm0 speed is unknown, defaulting to 1000 [ 358.085000][T16112] wg1 speed is unknown, defaulting to 1000 [ 358.615221][T16145] vlan3: entered promiscuous mode [ 358.627084][T16145] macvtap0: entered promiscuous mode [ 358.914463][T16154] vlan2: entered promiscuous mode [ 359.032362][T16156] __nla_validate_parse: 8 callbacks suppressed [ 359.032376][T16156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3030'. [ 359.050778][T16156] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3030'. [ 359.060138][T16156] netlink: 'syz.2.3030': attribute type 6 has an invalid length. [ 359.068920][T16156] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3030'. [ 359.080740][T16156] netlink: 'syz.2.3030': attribute type 4 has an invalid length. [ 359.088919][T16156] netlink: 'syz.2.3030': attribute type 4 has an invalid length. [ 359.227218][T16162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.413636][T16172] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3035'. [ 359.559531][T16181] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3040'. [ 359.574744][T16178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3036'. [ 359.585022][T16181] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3040'. [ 359.593998][T16181] netlink: 'syz.1.3040': attribute type 6 has an invalid length. [ 359.625269][T16181] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3040'. [ 359.650134][T16181] netlink: 'syz.1.3040': attribute type 4 has an invalid length. [ 359.674496][T16181] netlink: 'syz.1.3040': attribute type 4 has an invalid length. [ 359.713310][T16188] batadv_slave_0: entered promiscuous mode [ 360.193636][T16199] netlink: 'syz.0.3045': attribute type 5 has an invalid length. [ 360.209808][T16207] netlink: 'syz.1.3047': attribute type 66 has an invalid length. [ 360.528654][T16215] 8021q: VLANs not supported on ip6_vti0 [ 360.558716][T16187] batadv_slave_0: left promiscuous mode [ 360.727401][T16228] atomic_op ffff88802038c998 conn xmit_atomic 0000000000000000 [ 360.833034][T16232] xfrm0 speed is unknown, defaulting to 1000 [ 360.853005][T16236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3054'. [ 361.030474][T16240] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3056'. [ 361.141122][T16232] wg1 speed is unknown, defaulting to 1000 [ 361.452512][T16246] netlink: 'syz.3.3058': attribute type 7 has an invalid length. [ 361.466318][T16246] netlink: 'syz.3.3058': attribute type 8 has an invalid length. [ 362.059010][T16264] xfrm0 speed is unknown, defaulting to 1000 [ 362.333909][T16264] wg1 speed is unknown, defaulting to 1000 [ 362.830803][T16305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.839983][T16302] xfrm0 speed is unknown, defaulting to 1000 [ 362.876663][T16309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.883890][T16309] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 362.900668][T16309] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 362.940486][T16305] bond3: (slave wlan0): Enslaving as an active interface with an up link [ 363.067223][T16302] wg1 speed is unknown, defaulting to 1000 [ 363.501278][T16326] vlan3: entered promiscuous mode [ 363.796287][T16344] syzkaller0: entered promiscuous mode [ 363.802469][T16344] syzkaller0: entered allmulticast mode [ 364.081022][T16364] __nla_validate_parse: 17 callbacks suppressed [ 364.081039][T16364] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3098'. [ 364.265339][T16365] 8021q: VLANs not supported on ip6_vti0 [ 365.319987][T16403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3110'. [ 366.135449][T16444] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3123'. [ 366.158693][T16436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3123'. [ 366.168207][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3124'. [ 366.347151][T16450] validate_nla: 14 callbacks suppressed [ 366.347171][T16450] netlink: 'syz.2.3128': attribute type 39 has an invalid length. [ 366.749059][T16466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3130'. [ 367.295181][T16475] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3134'. [ 367.324622][T16475] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3134'. [ 367.347318][T16478] netlink: 'syz.1.3134': attribute type 4 has an invalid length. [ 367.354649][T16475] netlink: 'syz.1.3134': attribute type 6 has an invalid length. [ 367.362794][T16475] netlink: 'syz.1.3134': attribute type 5 has an invalid length. [ 367.398648][T16481] netlink: 'syz.1.3134': attribute type 4 has an invalid length. [ 367.414780][T16475] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3134'. [ 367.424045][T16480] netlink: 'syz.2.3136': attribute type 21 has an invalid length. [ 367.505042][T16480] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3136'. [ 367.975302][T16512] netlink: 'syz.2.3145': attribute type 39 has an invalid length. [ 368.072458][T16511] 8021q: VLANs not supported on ip6_vti0 [ 368.089692][T16520] netlink: 'syz.3.3147': attribute type 13 has an invalid length. [ 368.284126][T16523] xfrm0 speed is unknown, defaulting to 1000 [ 368.843316][T16523] wg1 speed is unknown, defaulting to 1000 [ 368.849538][T16536] xfrm0 speed is unknown, defaulting to 1000 [ 368.967966][T16541] tipc: Failed to remove unknown binding: 66,0,0/3810089956:3585486781/3585486782 [ 369.005671][T16541] tipc: Failed to remove unknown binding: 66,0,0/3810089956:3585486781/3585486782 [ 369.026534][T16543] 8021q: VLANs not supported on ip6_vti0 [ 369.291282][T16561] __nla_validate_parse: 3 callbacks suppressed [ 369.291301][T16561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3156'. [ 369.433347][T16565] vlan3: entered promiscuous mode [ 369.458526][T16536] wg1 speed is unknown, defaulting to 1000 [ 369.459664][T16537] xfrm0 speed is unknown, defaulting to 1000 [ 369.642697][T16572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3159'. [ 369.753818][T16571] xfrm0 speed is unknown, defaulting to 1000 [ 370.119943][T16571] wg1 speed is unknown, defaulting to 1000 [ 370.215529][T16582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3161'. [ 370.226849][T16537] wg1 speed is unknown, defaulting to 1000 [ 370.235668][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3160'. [ 370.247068][T16582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3161'. [ 370.258450][T16582] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3161'. [ 370.350704][T16588] Cannot find del_set index 49151 as target [ 370.739027][T16602] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3167'. [ 373.388162][T16604] can: request_module (can-proto-5) failed. [ 373.502737][T16612] batadv_slave_0: entered promiscuous mode [ 373.596631][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3171'. [ 374.275021][T16622] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 374.292885][T16610] batadv_slave_0: left promiscuous mode [ 374.377609][T16627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3173'. [ 374.391990][T16627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3173'. [ 374.418909][T16627] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3173'. [ 374.547109][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3178'. [ 374.803622][T16656] batadv_slave_0: entered promiscuous mode [ 375.102992][T16669] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3186'. [ 375.119078][T16668] delete_channel: no stack [ 375.221458][T16671] xfrm0 speed is unknown, defaulting to 1000 [ 375.324456][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3187'. [ 375.580485][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3188'. [ 375.630685][T16681] netlink: 'syz.1.3190': attribute type 22 has an invalid length. [ 375.649439][T16655] batadv_slave_0: left promiscuous mode [ 375.686242][T16671] wg1 speed is unknown, defaulting to 1000 [ 375.733971][T16685] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3191'. [ 375.979359][T16693] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3194'. [ 376.016996][T16693] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3194'. [ 376.049312][T16693] netlink: 'syz.3.3194': attribute type 6 has an invalid length. [ 376.066773][T16699] netlink: 'syz.3.3194': attribute type 4 has an invalid length. [ 376.074832][T16693] netlink: 'syz.3.3194': attribute type 5 has an invalid length. [ 376.112129][T16693] netlink: 'syz.3.3194': attribute type 4 has an invalid length. [ 376.218730][T16708] netlink: 'syz.3.3198': attribute type 39 has an invalid length. [ 376.421546][T16710] xt_NFQUEUE: number of total queues is 0 [ 376.780414][T16722] xfrm0 speed is unknown, defaulting to 1000 [ 377.066616][T16731] netlink: 'syz.4.3204': attribute type 6 has an invalid length. [ 377.095112][T16731] netlink: 'syz.4.3204': attribute type 5 has an invalid length. [ 377.118979][T16734] netlink: 'syz.4.3204': attribute type 4 has an invalid length. [ 377.143873][T16731] netlink: 'syz.4.3204': attribute type 4 has an invalid length. [ 377.330967][T16743] tipc: Failed to remove unknown binding: 66,0,0/3111084604:3469035118/3469035119 [ 377.341628][T16743] tipc: Failed to remove unknown binding: 66,0,0/3111084604:3469035118/3469035119 [ 377.493982][T16722] wg1 speed is unknown, defaulting to 1000 [ 377.502459][T16733] xfrm0 speed is unknown, defaulting to 1000 [ 377.824104][T16751] vlan0: entered promiscuous mode [ 378.045973][T16733] wg1 speed is unknown, defaulting to 1000 [ 378.164518][T16759] bond4: option xmit_hash_policy: invalid value (10) [ 378.206686][T16759] bond4 (unregistering): Released all slaves [ 378.885695][T16792] batman_adv: batadv0: Removing interface: veth0_to_bond [ 378.907407][T16792] bond0: (slave bond_slave_0): Releasing backup interface [ 378.935659][T16792] bond0: (slave bond_slave_1): Releasing backup interface [ 378.955829][T16792] team0: Port device team_slave_0 removed [ 378.971055][T16792] team0: Port device team_slave_1 removed [ 379.002016][T16792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.026574][T16792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.088234][T16792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.148575][T16792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 379.185898][ T8064] wg1 speed is unknown, defaulting to 1000 [ 379.192115][ T8064] syz0: Port: 1 Link DOWN [ 379.207799][T16796] batadv_slave_0: entered promiscuous mode [ 379.235752][ T5942] xfrm0 speed is unknown, defaulting to 1000 [ 379.247786][ T5942] syz1: Port: 1 Link DOWN [ 379.252848][ T5942] xfrm0 speed is unknown, defaulting to 1000 [ 379.526646][T16808] vlan0: entered promiscuous mode [ 379.875453][T16795] batadv_slave_0: left promiscuous mode [ 380.240883][T16839] __nla_validate_parse: 14 callbacks suppressed [ 380.240992][T16839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3230'. [ 380.325742][T16839] bond4: option updelay: invalid value (18446744072924056005) [ 380.349046][T16839] bond4: option updelay: allowed values 0 - 2147483647 [ 380.382003][T16839] bond4 (unregistering): Released all slaves [ 380.414367][T16842] tipc: Enabling of bearer rejected, failed to enable media [ 380.613682][T16851] vlan0: entered promiscuous mode [ 381.049147][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3239'. [ 381.107563][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3239'. [ 381.512252][T16893] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3245'. [ 381.655033][T16897] bond1: option mode: unable to set because the bond device has slaves [ 381.727154][T16883] netlink: 'syz.3.3241': attribute type 1 has an invalid length. [ 381.737877][T16904] vlan2: entered promiscuous mode [ 381.771591][T16883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.841950][T16883] macvlan2: entered promiscuous mode [ 381.847668][T16883] macvlan2: entered allmulticast mode [ 381.977889][T16913] x_tables: duplicate underflow at hook 1 [ 382.002951][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'. [ 382.152886][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'. [ 382.569847][T16932] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3256'. [ 382.633619][T16934] netlink: 'syz.3.3256': attribute type 4 has an invalid length. [ 382.677143][T16932] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3256'. [ 382.745156][T16934] netlink: 'syz.3.3256': attribute type 4 has an invalid length. [ 382.782084][T16932] netlink: 'syz.3.3256': attribute type 6 has an invalid length. [ 382.847863][T16932] netlink: 'syz.3.3256': attribute type 5 has an invalid length. [ 382.881859][T16932] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3256'. [ 383.072862][T16948] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3260'. [ 383.267295][T16955] vlan2: entered promiscuous mode [ 383.452883][T16961] batadv_slave_0: entered promiscuous mode [ 384.216714][T16994] tipc: Failed to remove unknown binding: 66,0,0/3810089956:3113676482/3113676483 [ 384.238441][T16994] tipc: Failed to remove unknown binding: 66,0,0/3810089956:3113676482/3113676483 [ 384.257870][T16996] tipc: Failed to remove unknown binding: 66,0,0/4059982656:4039615628/4039615629 [ 384.291445][T16960] batadv_slave_0: left promiscuous mode [ 384.298590][T16996] tipc: Failed to remove unknown binding: 66,0,0/4059982656:4039615628/4039615629 [ 385.502168][T17025] __nla_validate_parse: 2 callbacks suppressed [ 385.502188][T17025] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3282'. [ 385.623493][T17030] batadv_slave_0: entered promiscuous mode [ 386.055706][T17042] tipc: Failed to remove unknown binding: 66,0,0/0:1852549328/1852549329 [ 386.085275][T17042] tipc: Failed to remove unknown binding: 66,0,0/0:1852549328/1852549329 [ 386.223851][T17053] veth1_to_bridge: mtu greater than device maximum [ 386.277075][T17053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3290'. [ 386.472258][T17029] batadv_slave_0: left promiscuous mode [ 386.513128][T17060] xt_TCPMSS: Only works on TCP SYN packets [ 386.745697][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3295'. [ 387.129437][T17073] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3298'. [ 387.154318][T17073] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3298'. [ 387.182479][T17073] netlink: 'syz.0.3298': attribute type 6 has an invalid length. [ 387.201811][T17073] netlink: 'syz.0.3298': attribute type 5 has an invalid length. [ 387.251352][T17073] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3298'. [ 387.315262][T17073] netlink: 'syz.0.3298': attribute type 4 has an invalid length. [ 387.356730][T17074] netlink: 'syz.0.3298': attribute type 4 has an invalid length. [ 388.255608][T17096] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3305'. [ 388.270731][T17096] xt_hashlimit: size too large, truncated to 1048576 [ 389.007220][T17135] tipc: Failed to remove unknown binding: 66,0,0/3111084604:504528500/504528501 [ 389.025801][T17135] tipc: Failed to remove unknown binding: 66,0,0/3111084604:504528500/504528501 [ 389.183978][T17140] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3319'. [ 389.348226][T17140] netlink: 'syz.4.3319': attribute type 7 has an invalid length. [ 389.356168][T17140] netlink: 'syz.4.3319': attribute type 8 has an invalid length. [ 389.506824][T17156] xt_CT: No such helper "pptp" [ 389.578304][T17166] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3326'. [ 389.763746][T17177] IPVS: set_ctl: invalid protocol: 137 172.30.1.4:20004 [ 389.783233][T17178] tipc: Failed to remove unknown binding: 66,0,0/3111084604:2308272498/2308272499 [ 389.793217][T17178] tipc: Failed to remove unknown binding: 66,0,0/3111084604:2308272498/2308272499 [ 389.916599][T17184] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3333'. [ 389.945297][T17184] netlink: 'syz.1.3333': attribute type 6 has an invalid length. [ 389.969315][T17184] netlink: 'syz.1.3333': attribute type 5 has an invalid length. [ 389.980524][T17184] netlink: 'syz.1.3333': attribute type 4 has an invalid length. [ 389.999464][T17189] bond5: invalid ARP target 0.0.0.0 specified for addition [ 390.019060][T17189] bond5: option arp_ip_target: invalid value (0) [ 390.031149][T17189] bond5 (unregistering): Released all slaves [ 390.037703][T17192] netlink: 'syz.1.3333': attribute type 4 has an invalid length. [ 390.179177][ T4213] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 390.239065][T17203] xfrm0 speed is unknown, defaulting to 1000 [ 390.554449][T17203] wg1 speed is unknown, defaulting to 1000 [ 391.038088][T17235] tipc: Failed to remove unknown binding: 66,0,0/4059982656:16923385/16923386 [ 391.049993][T17235] tipc: Failed to remove unknown binding: 66,0,0/4059982656:16923385/16923386 [ 392.072397][T17273] __nla_validate_parse: 4 callbacks suppressed [ 392.072414][T17273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3355'. [ 392.275448][T17279] tipc: Failed to remove unknown binding: 66,0,0/3111084604:2251783060/2251783061 [ 392.285524][T17279] tipc: Failed to remove unknown binding: 66,0,0/3111084604:2251783060/2251783061 [ 392.574230][T17297] netlink: 'syz.0.3364': attribute type 1 has an invalid length. [ 392.657091][T17297] bond4: entered promiscuous mode [ 392.663657][T17297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.712152][T17305] xfrm0 speed is unknown, defaulting to 1000 [ 392.733343][T17298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3363'. [ 392.800826][T17298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3363'. [ 392.866757][T17316] netlink: 'syz.3.3366': attribute type 13 has an invalid length. [ 392.942545][T17321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3367'. [ 392.953144][T17321] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3367'. [ 392.985305][T17321] netlink: 'syz.3.3367': attribute type 6 has an invalid length. [ 393.001844][T17321] netlink: 'syz.3.3367': attribute type 5 has an invalid length. [ 393.017563][T17321] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3367'. [ 393.017659][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3367'. [ 393.033405][T17326] vlan2: entered promiscuous mode [ 393.064240][T17321] netlink: 'syz.3.3367': attribute type 4 has an invalid length. [ 393.094012][T17321] netlink: 'syz.3.3367': attribute type 4 has an invalid length. [ 393.219050][T17305] wg1 speed is unknown, defaulting to 1000 [ 393.227765][T17328] lo speed is unknown, defaulting to 1000 [ 393.259010][T17328] lo speed is unknown, defaulting to 1000 [ 393.274695][T17328] lo speed is unknown, defaulting to 1000 [ 393.319165][T17328] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 393.359860][T17332] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 393.376009][T17332] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 393.383972][T17332] tipc: Resetting bearer [ 393.394198][T17328] lo speed is unknown, defaulting to 1000 [ 393.402610][T17328] lo speed is unknown, defaulting to 1000 [ 393.413063][T17328] lo speed is unknown, defaulting to 1000 [ 393.420693][T17328] lo speed is unknown, defaulting to 1000 [ 393.429767][T17328] lo speed is unknown, defaulting to 1000 [ 393.457308][T17328] lo speed is unknown, defaulting to 1000 [ 393.902787][T17360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3382'. [ 393.912006][T17360] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3382'. [ 393.934645][T17360] netlink: 'syz.0.3382': attribute type 6 has an invalid length. [ 393.944932][T17360] netlink: 'syz.0.3382': attribute type 5 has an invalid length. [ 393.953186][T17360] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3382'. [ 393.977454][T17367] syzkaller0: entered promiscuous mode [ 393.982979][T17367] syzkaller0: entered allmulticast mode [ 394.049049][T17368] netlink: 'syz.0.3382': attribute type 4 has an invalid length. [ 394.095622][T17360] netlink: 'syz.0.3382': attribute type 4 has an invalid length. [ 394.349480][T17379] 8021q: adding VLAN 0 to HW filter on device bond5 [ 394.412515][T17379] 8021q: adding VLAN 0 to HW filter on device bond5 [ 394.421056][T17379] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 394.441460][T17379] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 394.462791][T17386] batadv_slave_0: entered promiscuous mode [ 394.469404][T17387] tipc: Enabled bearer , priority 0 [ 394.484424][T17388] bond3: (slave wlan0): Releasing backup interface [ 394.498213][T17388] bond5: (slave wlan0): Enslaving as an active interface with an up link [ 394.511098][T17384] syzkaller0: entered promiscuous mode [ 394.519300][T17384] syzkaller0: entered allmulticast mode [ 394.532837][T17384] tipc: Resetting bearer [ 394.541770][T17382] tipc: Resetting bearer [ 394.596745][T17382] tipc: Disabling bearer [ 394.750104][T17407] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 395.034329][T17421] 8021q: VLANs not supported on ip6_vti0 [ 395.099494][T17426] vlan2: entered promiscuous mode [ 395.306629][T17385] batadv_slave_0: left promiscuous mode [ 395.456806][T17436] tipc: Enabling of bearer rejected, already enabled [ 395.470247][T17436] tipc: Resetting bearer [ 395.471530][T17437] tipc: Failed to remove unknown binding: 66,0,0/3191911349:1837738210/1837738211 [ 395.480916][T17436] tipc: Resetting bearer [ 395.521093][T17437] tipc: Failed to remove unknown binding: 66,0,0/3191911349:1837738210/1837738211 [ 395.661324][T17442] bond6: entered promiscuous mode [ 395.721917][T17442] 8021q: adding VLAN 0 to HW filter on device bond6 [ 395.819915][T17442] bond6: (slave bridge9): making interface the new active one [ 395.854670][T17442] bridge9: entered promiscuous mode [ 395.866889][T17442] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 395.996271][T17447] gretap0: refused to change device tx_queue_len [ 396.002659][T17447] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 396.037795][T17452] xfrm0 speed is unknown, defaulting to 1000 [ 396.317143][T17470] bond7: option xmit_hash_policy: invalid value (10) [ 396.326031][T17470] bond7 (unregistering): Released all slaves [ 396.374443][T17452] wg1 speed is unknown, defaulting to 1000 [ 396.384247][T17452] lo speed is unknown, defaulting to 1000 [ 396.450819][T17463] xfrm0 speed is unknown, defaulting to 1000 [ 396.520332][T17479] IPVS: length: 206 != 8 [ 397.062150][T17463] wg1 speed is unknown, defaulting to 1000 [ 397.069865][T17463] lo speed is unknown, defaulting to 1000 [ 397.696840][T17501] xfrm0 speed is unknown, defaulting to 1000 [ 397.793743][T17495] __nla_validate_parse: 6 callbacks suppressed [ 397.793762][T17495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3424'. [ 397.812969][T17495] nbd: must specify at least one socket [ 397.895717][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3429'. [ 397.902593][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'. [ 397.984205][T17508] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 397.984371][T17508] block (null): Could not allocate knbd recv work queue. [ 398.066134][T17508] nbd: failed to add new device [ 398.067578][T17521] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3431'. [ 398.129833][T17521] tipc: Enabled bearer , priority 0 [ 398.221166][T17521] syzkaller0: entered promiscuous mode [ 398.245819][T17521] syzkaller0: entered allmulticast mode [ 398.252352][T17521] tipc: Resetting bearer [ 398.259172][T17501] wg1 speed is unknown, defaulting to 1000 [ 398.267211][T17505] xfrm0 speed is unknown, defaulting to 1000 [ 398.282759][T17501] lo speed is unknown, defaulting to 1000 [ 398.290992][T17520] tipc: Resetting bearer [ 398.461692][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3434'. [ 399.352116][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3437'. [ 400.644302][T17520] tipc: Disabling bearer [ 400.652831][T17505] wg1 speed is unknown, defaulting to 1000 [ 400.667261][T17534] vlan2: entered promiscuous mode [ 400.688078][T17505] lo speed is unknown, defaulting to 1000 [ 400.852758][T17554] tipc: Enabled bearer , priority 10 [ 401.275980][T17568] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3446'. [ 401.650571][T17578] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 401.650709][T17579] vlan2: entered promiscuous mode [ 401.681069][T17578] openvswitch: netlink: Message has 8 unknown bytes. [ 401.716762][T17583] tipc: Failed to remove unknown binding: 66,0,0/4059982656:502971326/502971327 [ 401.736837][T17583] tipc: Failed to remove unknown binding: 66,0,0/4059982656:502971326/502971327 [ 401.809987][T17591] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 401.930023][T17597] xfrm0 speed is unknown, defaulting to 1000 [ 402.017779][T17603] batadv_slave_0: entered promiscuous mode [ 402.201935][T17602] batadv_slave_0: left promiscuous mode [ 402.483190][T17629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3465'. [ 402.483977][T17630] tipc: Failed to remove unknown binding: 66,0,0/4059982656:2852614615/2852614616 [ 402.511965][T17629] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3465'. [ 402.538184][T17629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3465'. [ 402.545002][T17630] tipc: Failed to remove unknown binding: 66,0,0/4059982656:2852614615/2852614616 [ 402.581952][T17634] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 402.603861][T17636] tipc: Failed to remove unknown binding: 66,0,0/3191911349:334778910/334778911 [ 402.613697][T17636] tipc: Failed to remove unknown binding: 66,0,0/3191911349:334778910/334778911 [ 402.684476][T17597] wg1 speed is unknown, defaulting to 1000 [ 402.716281][T17597] lo speed is unknown, defaulting to 1000 [ 402.956005][T17651] 8021q: VLANs not supported on ip6_vti0 [ 403.161923][T17654] 8021q: VLANs not supported on ip6_vti0 [ 403.591389][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 404.036558][T17679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3476'. [ 404.125325][T17684] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3478'. [ 404.184204][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3477'. [ 404.690614][T17710] xfrm0 speed is unknown, defaulting to 1000 [ 404.780322][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3488'. [ 404.897166][T17729] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3490'. [ 404.986039][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3489'. [ 405.017438][T17710] wg1 speed is unknown, defaulting to 1000 [ 405.025334][T17710] lo speed is unknown, defaulting to 1000 [ 405.221440][T17742] wg1: entered promiscuous mode [ 405.244919][T17742] wg1: entered allmulticast mode [ 405.603771][T17758] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3497'. [ 405.636794][T17758] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3497'. [ 405.665185][T17758] validate_nla: 4 callbacks suppressed [ 405.665204][T17758] netlink: 'syz.0.3497': attribute type 6 has an invalid length. [ 405.699860][T17758] netlink: 'syz.0.3497': attribute type 5 has an invalid length. [ 405.729121][T17728] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3489'. [ 405.753611][T17758] netlink: 'syz.0.3497': attribute type 4 has an invalid length. [ 405.805196][T17763] netlink: 'syz.0.3497': attribute type 4 has an invalid length. [ 406.041979][T17767] netlink: 'syz.0.3500': attribute type 1 has an invalid length. [ 406.083192][T17767] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 406.484779][T17787] vlan2: entered promiscuous mode [ 407.266276][T17827] vlan2: entered promiscuous mode [ 407.489889][T17835] 8021q: VLANs not supported on ip6_vti0 [ 408.535065][T17870] veth0: entered promiscuous mode [ 408.543052][T17874] syzkaller0: entered promiscuous mode [ 408.561833][T17874] syzkaller0: entered allmulticast mode [ 408.579095][T17869] veth0: left promiscuous mode [ 408.630785][T17877] __nla_validate_parse: 10 callbacks suppressed [ 408.630810][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3534'. [ 408.674295][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3534'. [ 408.699223][T17877] netlink: 'syz.4.3534': attribute type 19 has an invalid length. [ 408.725892][T17877] netlink: 'syz.4.3534': attribute type 20 has an invalid length. [ 408.779859][T17880] xfrm0 speed is unknown, defaulting to 1000 [ 408.980610][T17880] wg1 speed is unknown, defaulting to 1000 [ 408.988273][T17880] lo speed is unknown, defaulting to 1000 [ 409.231160][T17890] xfrm0 speed is unknown, defaulting to 1000 [ 409.505626][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3544'. [ 409.732835][T17899] bond4: entered promiscuous mode [ 409.745340][T17899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.775542][T17903] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 409.918771][T17890] wg1 speed is unknown, defaulting to 1000 [ 409.981093][T17890] lo speed is unknown, defaulting to 1000 [ 410.476510][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3558'. [ 410.952887][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 411.501781][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3570'. [ 411.589007][T17995] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3571'. [ 411.606143][T17995] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3571'. [ 411.655787][T17995] netlink: 'syz.3.3571': attribute type 2 has an invalid length. [ 411.677925][T17995] netlink: 'syz.3.3571': attribute type 1 has an invalid length. [ 411.695113][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3571'. [ 411.702459][T18002] netlink: 'syz.0.3573': attribute type 32 has an invalid length. [ 411.723522][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3571'. [ 411.811820][T18002] bond5: Setting coupled_control to off (0) [ 411.846537][T18017] atomic_op ffff888024938198 conn xmit_atomic 0000000000000000 [ 411.932925][T18020] netlink: 'syz.3.3578': attribute type 6 has an invalid length. [ 411.964458][T18020] netlink: 'syz.3.3578': attribute type 5 has an invalid length. [ 411.983677][T18020] netlink: 'syz.3.3578': attribute type 4 has an invalid length. [ 412.023624][T18020] netlink: 'syz.3.3578': attribute type 4 has an invalid length. [ 412.744261][T18047] vlan2: entered promiscuous mode [ 413.025515][T18057] xfrm0 speed is unknown, defaulting to 1000 [ 413.782486][T18094] netlink: zone id is out of range [ 413.789723][T18094] netlink: zone id is out of range [ 413.843331][T18057] wg1 speed is unknown, defaulting to 1000 [ 413.865404][T18057] lo speed is unknown, defaulting to 1000 [ 413.889700][T18092] __nla_validate_parse: 6 callbacks suppressed [ 413.889711][T18092] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3586'. [ 413.947765][T18101] syzkaller0: entered promiscuous mode [ 413.953346][T18101] syzkaller0: entered allmulticast mode [ 414.473476][T18113] xfrm0 speed is unknown, defaulting to 1000 [ 414.967840][T18113] wg1 speed is unknown, defaulting to 1000 [ 414.975695][T18113] lo speed is unknown, defaulting to 1000 [ 415.356859][T18148] xfrm0 speed is unknown, defaulting to 1000 [ 415.366243][T18140] 8021q: VLANs not supported on ip6_vti0 [ 415.412111][T18153] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3607'. [ 415.529031][T18153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.646976][T18148] wg1 speed is unknown, defaulting to 1000 [ 415.660808][T18148] lo speed is unknown, defaulting to 1000 [ 416.230494][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 416.950658][T18175] x_tables: duplicate underflow at hook 1 [ 417.201297][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3618'. [ 417.232079][T18187] xfrm0 speed is unknown, defaulting to 1000 [ 417.340250][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3618'. [ 417.531870][T18187] wg1 speed is unknown, defaulting to 1000 [ 417.539726][T18187] lo speed is unknown, defaulting to 1000 [ 417.880608][T18216] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3625'. [ 417.927834][T18216] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3625'. [ 417.948852][T18220] netlink: 'syz.1.3625': attribute type 4 has an invalid length. [ 417.982717][T18216] netlink: 'syz.1.3625': attribute type 6 has an invalid length. [ 418.033541][T18216] netlink: 'syz.1.3625': attribute type 5 has an invalid length. [ 418.065293][T18221] xfrm0 speed is unknown, defaulting to 1000 [ 418.073086][T18216] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3625'. [ 418.381050][T18228] tipc: Failed to remove unknown binding: 66,0,0/4059982656:173105644/173105645 [ 418.405692][T18230] netlink: 'syz.1.3628': attribute type 29 has an invalid length. [ 418.420488][T18228] tipc: Failed to remove unknown binding: 66,0,0/4059982656:173105644/173105645 [ 418.610880][T18237] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3630'. [ 418.664952][T18237] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3630'. [ 418.704691][T18221] wg1 speed is unknown, defaulting to 1000 [ 418.734759][T18221] lo speed is unknown, defaulting to 1000 [ 418.926726][T18247] tipc: Failed to remove unknown binding: 66,0,0/3191911349:3445882669/3445882670 [ 418.938225][T18247] tipc: Failed to remove unknown binding: 66,0,0/3191911349:3445882669/3445882670 [ 419.000443][T18252] FAULT_INJECTION: forcing a failure. [ 419.000443][T18252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.062224][T18252] CPU: 0 UID: 0 PID: 18252 Comm: syz.4.3636 Not tainted syzkaller #0 PREEMPT(full) [ 419.062250][T18252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.062264][T18252] Call Trace: [ 419.062272][T18252] [ 419.062280][T18252] dump_stack_lvl+0xe8/0x150 [ 419.062307][T18252] should_fail_ex+0x414/0x560 [ 419.062336][T18252] _copy_to_user+0x31/0xb0 [ 419.062357][T18252] bpf_obj_get_info_by_fd+0x11d7/0x3140 [ 419.062381][T18252] ? __lock_acquire+0x6b6/0x2cf0 [ 419.062401][T18252] ? _parse_integer_limit+0x1ae/0x1f0 [ 419.062430][T18252] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 419.062462][T18252] ? get_pid_task+0x20/0x1f0 [ 419.062484][T18252] ? get_pid_task+0x20/0x1f0 [ 419.062501][T18252] ? get_pid_task+0x20/0x1f0 [ 419.062517][T18252] ? get_pid_task+0x20/0x1f0 [ 419.062538][T18252] ? __might_fault+0xb0/0x130 [ 419.062560][T18252] ? __might_fault+0xb0/0x130 [ 419.062594][T18252] ? bpf_lsm_bpf+0x9/0x20 [ 419.062611][T18252] ? security_bpf+0x7e/0x300 [ 419.062631][T18252] __sys_bpf+0x5b3/0x860 [ 419.062652][T18252] ? __pfx___sys_bpf+0x10/0x10 [ 419.062687][T18252] ? ksys_write+0x22a/0x250 [ 419.062705][T18252] ? __pfx_ksys_write+0x10/0x10 [ 419.062726][T18252] __x64_sys_bpf+0x7c/0x90 [ 419.062746][T18252] do_syscall_64+0xec/0xf80 [ 419.062765][T18252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.062779][T18252] ? trace_irq_disable+0x37/0x100 [ 419.062799][T18252] ? clear_bhb_loop+0x60/0xb0 [ 419.062819][T18252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.062842][T18252] RIP: 0033:0x7f563758f749 [ 419.062856][T18252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.062871][T18252] RSP: 002b:00007f56383f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.062890][T18252] RAX: ffffffffffffffda RBX: 00007f56377e5fa0 RCX: 00007f563758f749 [ 419.062902][T18252] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 419.062912][T18252] RBP: 00007f56383f9090 R08: 0000000000000000 R09: 0000000000000000 [ 419.062922][T18252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.062932][T18252] R13: 00007f56377e6038 R14: 00007f56377e5fa0 R15: 00007ffc0ea67078 [ 419.062961][T18252] [ 419.332010][T18256] __nla_validate_parse: 63 callbacks suppressed [ 419.332033][T18256] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3638'. [ 419.352039][T18256] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3638'. [ 419.372890][T18256] netlink: 'syz.2.3638': attribute type 6 has an invalid length. [ 419.425431][T18265] xt_TPROXY: Can be used only with -p tcp or -p udp [ 419.439645][T18256] netlink: 'syz.2.3638': attribute type 5 has an invalid length. [ 419.467832][T18267] netlink: 'syz.1.3640': attribute type 4 has an invalid length. [ 419.480552][T18256] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3638'. [ 419.518381][T18269] netlink: 'syz.2.3638': attribute type 4 has an invalid length. [ 419.542071][T18270] netlink: 'syz.1.3640': attribute type 4 has an invalid length. [ 419.580947][T18258] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3640'. [ 419.648495][T18258] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3640'. [ 419.757982][T18258] netlink: 'syz.1.3640': attribute type 6 has an invalid length. [ 419.781789][ T5942] lo speed is unknown, defaulting to 1000 [ 419.781817][ T5913] lo speed is unknown, defaulting to 1000 [ 419.810524][T18258] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3640'. [ 420.002950][T18287] xfrm0 speed is unknown, defaulting to 1000 [ 420.095748][T18299] batadv_slave_0: entered promiscuous mode [ 420.117491][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3648'. [ 420.165894][T18307] FAULT_INJECTION: forcing a failure. [ 420.165894][T18307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.218017][T18307] CPU: 0 UID: 0 PID: 18307 Comm: syz.3.3651 Not tainted syzkaller #0 PREEMPT(full) [ 420.218043][T18307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.218051][T18307] Call Trace: [ 420.218057][T18307] [ 420.218064][T18307] dump_stack_lvl+0xe8/0x150 [ 420.218088][T18307] should_fail_ex+0x414/0x560 [ 420.218119][T18307] _copy_to_user+0x31/0xb0 [ 420.218142][T18307] simple_read_from_buffer+0xe1/0x170 [ 420.218168][T18307] proc_fail_nth_read+0x1b3/0x220 [ 420.218189][T18307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.218208][T18307] ? rw_verify_area+0x2a6/0x4d0 [ 420.218231][T18307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.218249][T18307] vfs_read+0x200/0xa30 [ 420.218265][T18307] ? fdget_pos+0x247/0x320 [ 420.218289][T18307] ? __pfx___mutex_lock+0x10/0x10 [ 420.218310][T18307] ? __pfx_vfs_read+0x10/0x10 [ 420.218327][T18307] ? __fget_files+0x2a/0x420 [ 420.218350][T18307] ? __fget_files+0x3a0/0x420 [ 420.218368][T18307] ? __fget_files+0x2a/0x420 [ 420.218396][T18307] ksys_read+0x145/0x250 [ 420.218415][T18307] ? __pfx_ksys_read+0x10/0x10 [ 420.218442][T18307] do_syscall_64+0xec/0xf80 [ 420.218462][T18307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.218477][T18307] ? trace_irq_disable+0x37/0x100 [ 420.218498][T18307] ? clear_bhb_loop+0x60/0xb0 [ 420.218518][T18307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.218534][T18307] RIP: 0033:0x7f9b8858e15c [ 420.218549][T18307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 420.218564][T18307] RSP: 002b:00007f9b89428030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.218583][T18307] RAX: ffffffffffffffda RBX: 00007f9b887e5fa0 RCX: 00007f9b8858e15c [ 420.218595][T18307] RDX: 000000000000000f RSI: 00007f9b894280a0 RDI: 0000000000000005 [ 420.218606][T18307] RBP: 00007f9b89428090 R08: 0000000000000000 R09: 0000000000000000 [ 420.218617][T18307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.218627][T18307] R13: 00007f9b887e6038 R14: 00007f9b887e5fa0 R15: 00007ffd1a0519f8 [ 420.218657][T18307] [ 420.450155][T18310] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3653'. [ 420.524761][T18313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3654'. [ 420.537166][T18298] batadv_slave_0: left promiscuous mode [ 420.685565][T18287] wg1 speed is unknown, defaulting to 1000 [ 420.693105][T18287] lo speed is unknown, defaulting to 1000 [ 420.751829][T18320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3655'. [ 420.764339][T18321] FAULT_INJECTION: forcing a failure. [ 420.764339][T18321] name failslab, interval 1, probability 0, space 0, times 0 [ 420.781907][T18321] CPU: 1 UID: 0 PID: 18321 Comm: syz.2.3657 Not tainted syzkaller #0 PREEMPT(full) [ 420.781933][T18321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.781944][T18321] Call Trace: [ 420.781951][T18321] [ 420.781959][T18321] dump_stack_lvl+0xe8/0x150 [ 420.781987][T18321] should_fail_ex+0x414/0x560 [ 420.782018][T18321] should_failslab+0xa8/0x100 [ 420.782041][T18321] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 420.782066][T18321] ? __alloc_skb+0x190/0x720 [ 420.782085][T18321] ? __alloc_skb+0x1d5/0x720 [ 420.782102][T18321] ? __local_bh_enable_ip+0xd0/0x130 [ 420.782127][T18321] ? __alloc_skb+0x190/0x720 [ 420.782147][T18321] __alloc_skb+0x1d5/0x720 [ 420.782171][T18321] pfkey_sendmsg+0x1dd/0x1090 [ 420.782192][T18321] ? unwind_next_frame+0xa5/0x23d0 [ 420.782226][T18321] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 420.782249][T18321] ? aa_sk_perm+0x15f/0x920 [ 420.782272][T18321] ? aa_sk_perm+0x7ee/0x920 [ 420.782294][T18321] ? __lock_acquire+0x6b6/0x2cf0 [ 420.782311][T18321] ? __pfx_aa_sk_perm+0x10/0x10 [ 420.782329][T18321] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 420.782357][T18321] ? aa_sock_msg_perm+0xf1/0x1b0 [ 420.782379][T18321] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.782396][T18321] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 420.782414][T18321] __sock_sendmsg+0x21c/0x270 [ 420.782440][T18321] ____sys_sendmsg+0x505/0x820 [ 420.782466][T18321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.782495][T18321] ? import_iovec+0x74/0xa0 [ 420.782518][T18321] ___sys_sendmsg+0x21f/0x2a0 [ 420.782540][T18321] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.782598][T18321] ? __fget_files+0x2a/0x420 [ 420.782615][T18321] ? __fget_files+0x3a0/0x420 [ 420.782640][T18321] __x64_sys_sendmsg+0x19b/0x260 [ 420.782660][T18321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.782688][T18321] ? __pfx_ksys_write+0x10/0x10 [ 420.782715][T18321] do_syscall_64+0xec/0xf80 [ 420.782735][T18321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.782749][T18321] ? trace_irq_disable+0x37/0x100 [ 420.782769][T18321] ? clear_bhb_loop+0x60/0xb0 [ 420.782789][T18321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.782804][T18321] RIP: 0033:0x7f7473b8f749 [ 420.782820][T18321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.782835][T18321] RSP: 002b:00007f7474a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.782854][T18321] RAX: ffffffffffffffda RBX: 00007f7473de5fa0 RCX: 00007f7473b8f749 [ 420.782866][T18321] RDX: 00000000040408c0 RSI: 0000200000000440 RDI: 0000000000000004 [ 420.782877][T18321] RBP: 00007f7474a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 420.782888][T18321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.782899][T18321] R13: 00007f7473de6038 R14: 00007f7473de5fa0 R15: 00007ffe4aae5188 [ 420.782924][T18321] [ 421.724297][T18344] tipc: Failed to remove unknown binding: 66,0,0/3810089956:1416314821/1416314822 [ 421.734346][T18344] tipc: Failed to remove unknown binding: 66,0,0/3810089956:1416314821/1416314822 [ 422.011734][T18355] vlan2: entered promiscuous mode [ 422.027592][T18357] FAULT_INJECTION: forcing a failure. [ 422.027592][T18357] name failslab, interval 1, probability 0, space 0, times 0 [ 422.054820][T18357] CPU: 1 UID: 0 PID: 18357 Comm: syz.2.3670 Not tainted syzkaller #0 PREEMPT(full) [ 422.054845][T18357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.054855][T18357] Call Trace: [ 422.054862][T18357] [ 422.054869][T18357] dump_stack_lvl+0xe8/0x150 [ 422.054896][T18357] should_fail_ex+0x414/0x560 [ 422.054925][T18357] should_failslab+0xa8/0x100 [ 422.054946][T18357] __kmalloc_cache_noprof+0x84/0x700 [ 422.054964][T18357] ? nfnetlink_rcv+0xf97/0x2590 [ 422.054989][T18357] nfnetlink_rcv+0xf97/0x2590 [ 422.055019][T18357] ? unwind_get_return_address+0x4d/0x90 [ 422.055057][T18357] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 422.055095][T18357] ? __lock_acquire+0x6b6/0x2cf0 [ 422.055123][T18357] ? __netlink_lookup+0xbd/0x8a0 [ 422.055157][T18357] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.055179][T18357] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.055216][T18357] netlink_unicast+0x82f/0x9e0 [ 422.055244][T18357] ? __pfx_netlink_unicast+0x10/0x10 [ 422.055267][T18357] ? netlink_sendmsg+0x642/0xb30 [ 422.055287][T18357] ? skb_put+0x11b/0x210 [ 422.055311][T18357] netlink_sendmsg+0x805/0xb30 [ 422.055343][T18357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.055369][T18357] ? aa_sock_msg_perm+0xf1/0x1b0 [ 422.055392][T18357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.055408][T18357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.055432][T18357] __sock_sendmsg+0x21c/0x270 [ 422.055464][T18357] ____sys_sendmsg+0x505/0x820 [ 422.055489][T18357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.055519][T18357] ? import_iovec+0x74/0xa0 [ 422.055542][T18357] ___sys_sendmsg+0x21f/0x2a0 [ 422.055565][T18357] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.055622][T18357] ? __fget_files+0x2a/0x420 [ 422.055642][T18357] ? __fget_files+0x3a0/0x420 [ 422.055672][T18357] __x64_sys_sendmsg+0x19b/0x260 [ 422.055696][T18357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.055727][T18357] ? __pfx_ksys_write+0x10/0x10 [ 422.055765][T18357] do_syscall_64+0xec/0xf80 [ 422.055785][T18357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.055801][T18357] ? trace_irq_disable+0x37/0x100 [ 422.055820][T18357] ? clear_bhb_loop+0x60/0xb0 [ 422.055841][T18357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.055858][T18357] RIP: 0033:0x7f7473b8f749 [ 422.055875][T18357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.055890][T18357] RSP: 002b:00007f7474a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.055909][T18357] RAX: ffffffffffffffda RBX: 00007f7473de5fa0 RCX: 00007f7473b8f749 [ 422.055923][T18357] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 422.055934][T18357] RBP: 00007f7474a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 422.055945][T18357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.055955][T18357] R13: 00007f7473de6038 R14: 00007f7473de5fa0 R15: 00007ffe4aae5188 [ 422.055985][T18357] [ 423.073895][T18412] FAULT_INJECTION: forcing a failure. [ 423.073895][T18412] name failslab, interval 1, probability 0, space 0, times 0 [ 423.087162][T18412] CPU: 1 UID: 0 PID: 18412 Comm: syz.1.3688 Not tainted syzkaller #0 PREEMPT(full) [ 423.087188][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.087199][T18412] Call Trace: [ 423.087206][T18412] [ 423.087214][T18412] dump_stack_lvl+0xe8/0x150 [ 423.087242][T18412] should_fail_ex+0x414/0x560 [ 423.087274][T18412] should_failslab+0xa8/0x100 [ 423.087297][T18412] __kmalloc_cache_noprof+0x84/0x700 [ 423.087317][T18412] ? nfnetlink_rcv+0xf97/0x2590 [ 423.087343][T18412] nfnetlink_rcv+0xf97/0x2590 [ 423.087375][T18412] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 423.087410][T18412] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.087425][T18412] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.087446][T18412] netlink_unicast+0x82f/0x9e0 [ 423.087463][T18412] ? __pfx_netlink_unicast+0x10/0x10 [ 423.087476][T18412] ? netlink_sendmsg+0x642/0xb30 [ 423.087488][T18412] ? skb_put+0x11b/0x210 [ 423.087502][T18412] netlink_sendmsg+0x805/0xb30 [ 423.087519][T18412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.087534][T18412] ? aa_sock_msg_perm+0xf1/0x1b0 [ 423.087548][T18412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.087557][T18412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.087570][T18412] __sock_sendmsg+0x21c/0x270 [ 423.087587][T18412] ____sys_sendmsg+0x505/0x820 [ 423.087602][T18412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.087619][T18412] ? import_iovec+0x74/0xa0 [ 423.087633][T18412] ___sys_sendmsg+0x21f/0x2a0 [ 423.087646][T18412] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.087692][T18412] ? __fget_files+0x2a/0x420 [ 423.087713][T18412] ? __fget_files+0x3a0/0x420 [ 423.087744][T18412] __x64_sys_sendmsg+0x19b/0x260 [ 423.087767][T18412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.087798][T18412] ? __pfx_ksys_write+0x10/0x10 [ 423.087834][T18412] do_syscall_64+0xec/0xf80 [ 423.087855][T18412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.087871][T18412] ? trace_irq_disable+0x37/0x100 [ 423.087885][T18412] ? clear_bhb_loop+0x60/0xb0 [ 423.087897][T18412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.087907][T18412] RIP: 0033:0x7f8e71f8f749 [ 423.087919][T18412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.087928][T18412] RSP: 002b:00007f8e72e6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.087940][T18412] RAX: ffffffffffffffda RBX: 00007f8e721e5fa0 RCX: 00007f8e71f8f749 [ 423.087947][T18412] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 423.087953][T18412] RBP: 00007f8e72e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 423.087959][T18412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.087965][T18412] R13: 00007f8e721e6038 R14: 00007f8e721e5fa0 R15: 00007ffdc6fb7668 [ 423.087982][T18412] [ 423.545867][T18421] tc_dump_action: action bad kind [ 423.769058][T18438] SET target dimension over the limit! [ 424.063789][T18458] FAULT_INJECTION: forcing a failure. [ 424.063789][T18458] name failslab, interval 1, probability 0, space 0, times 0 [ 424.082482][T18458] CPU: 1 UID: 0 PID: 18458 Comm: syz.3.3706 Not tainted syzkaller #0 PREEMPT(full) [ 424.082515][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.082525][T18458] Call Trace: [ 424.082532][T18458] [ 424.082539][T18458] dump_stack_lvl+0xe8/0x150 [ 424.082563][T18458] should_fail_ex+0x414/0x560 [ 424.082591][T18458] should_failslab+0xa8/0x100 [ 424.082611][T18458] kmem_cache_alloc_noprof+0x88/0x710 [ 424.082635][T18458] ? skb_clone+0x212/0x3a0 [ 424.082662][T18458] skb_clone+0x212/0x3a0 [ 424.082685][T18458] pfkey_sendmsg+0x44b/0x1090 [ 424.082722][T18458] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 424.082769][T18458] ? aa_sock_msg_perm+0xf1/0x1b0 [ 424.082791][T18458] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.082807][T18458] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 424.082828][T18458] __sock_sendmsg+0x21c/0x270 [ 424.082854][T18458] ____sys_sendmsg+0x505/0x820 [ 424.082877][T18458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.082906][T18458] ? import_iovec+0x74/0xa0 [ 424.082929][T18458] ___sys_sendmsg+0x21f/0x2a0 [ 424.082953][T18458] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.083009][T18458] ? __fget_files+0x2a/0x420 [ 424.083029][T18458] ? __fget_files+0x3a0/0x420 [ 424.083057][T18458] __x64_sys_sendmsg+0x19b/0x260 [ 424.083081][T18458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.083110][T18458] ? __pfx_ksys_write+0x10/0x10 [ 424.083136][T18458] do_syscall_64+0xec/0xf80 [ 424.083155][T18458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.083171][T18458] ? trace_irq_disable+0x37/0x100 [ 424.083190][T18458] ? clear_bhb_loop+0x60/0xb0 [ 424.083209][T18458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.083225][T18458] RIP: 0033:0x7f9b8858f749 [ 424.083242][T18458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.083256][T18458] RSP: 002b:00007f9b89428038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.083276][T18458] RAX: ffffffffffffffda RBX: 00007f9b887e5fa0 RCX: 00007f9b8858f749 [ 424.083289][T18458] RDX: 00000000040408c0 RSI: 0000200000000440 RDI: 0000000000000004 [ 424.083300][T18458] RBP: 00007f9b89428090 R08: 0000000000000000 R09: 0000000000000000 [ 424.083310][T18458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.083320][T18458] R13: 00007f9b887e6038 R14: 00007f9b887e5fa0 R15: 00007ffd1a0519f8 [ 424.083352][T18458] [ 424.406762][T18468] vlan3: entered promiscuous mode [ 424.640739][T18481] __nla_validate_parse: 14 callbacks suppressed [ 424.640765][T18481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3716'. [ 424.918099][T18498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3721'. [ 424.961007][T18498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3721'. [ 424.980712][T18504] FAULT_INJECTION: forcing a failure. [ 424.980712][T18504] name failslab, interval 1, probability 0, space 0, times 0 [ 424.984966][T18498] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3721'. [ 424.996731][T18504] CPU: 0 UID: 0 PID: 18504 Comm: syz.1.3721 Not tainted syzkaller #0 PREEMPT(full) [ 424.996762][T18504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.996773][T18504] Call Trace: [ 424.996780][T18504] [ 424.996789][T18504] dump_stack_lvl+0xe8/0x150 [ 424.996820][T18504] should_fail_ex+0x414/0x560 [ 424.996851][T18504] should_failslab+0xa8/0x100 [ 424.996874][T18504] __kmalloc_cache_noprof+0x84/0x700 [ 424.996893][T18504] ? pfkey_dump+0x246/0x6c0 [ 424.996921][T18504] pfkey_dump+0x246/0x6c0 [ 424.996951][T18504] pfkey_sendmsg+0xbfe/0x1090 [ 424.996971][T18504] ? unwind_next_frame+0xa5/0x23d0 [ 424.997005][T18504] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 424.997052][T18504] ? aa_sock_msg_perm+0xf1/0x1b0 [ 424.997083][T18504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.997106][T18504] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 424.997129][T18504] __sock_sendmsg+0x21c/0x270 [ 424.997158][T18504] ____sys_sendmsg+0x505/0x820 [ 424.997185][T18504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.997214][T18504] ? import_iovec+0x74/0xa0 [ 424.997239][T18504] ___sys_sendmsg+0x21f/0x2a0 [ 424.997262][T18504] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.997319][T18504] ? __fget_files+0x2a/0x420 [ 424.997339][T18504] ? __fget_files+0x3a0/0x420 [ 424.997381][T18504] __x64_sys_sendmsg+0x19b/0x260 [ 424.997404][T18504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.997439][T18504] ? trace_sys_enter+0x5e/0xf0 [ 424.997458][T18504] ? rcu_is_watching+0x15/0xb0 [ 424.997479][T18504] ? trace_sys_enter+0x25/0xf0 [ 424.997502][T18504] do_syscall_64+0xec/0xf80 [ 424.997522][T18504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.997552][T18504] ? trace_irq_disable+0x37/0x100 [ 424.997572][T18504] ? clear_bhb_loop+0x60/0xb0 [ 424.997593][T18504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.997608][T18504] RIP: 0033:0x7f8e71f8f749 [ 424.997627][T18504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.997647][T18504] RSP: 002b:00007f8e72e4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.997674][T18504] RAX: ffffffffffffffda RBX: 00007f8e721e6090 RCX: 00007f8e71f8f749 [ 424.997687][T18504] RDX: 00000000040408c0 RSI: 0000200000000440 RDI: 0000000000000004 [ 424.997710][T18504] RBP: 00007f8e72e4a090 R08: 0000000000000000 R09: 0000000000000000 [ 424.997724][T18504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.997734][T18504] R13: 00007f8e721e6128 R14: 00007f8e721e6090 R15: 00007ffdc6fb7668 [ 424.997780][T18504] [ 425.361567][T18509] veth0: entered promiscuous mode [ 425.376601][T18509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3724'. [ 425.528344][T18508] veth0: left promiscuous mode [ 425.602538][T18523] validate_nla: 6 callbacks suppressed [ 425.602556][T18523] netlink: 'syz.4.3730': attribute type 1 has an invalid length. [ 425.627609][T18523] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3730'. [ 425.670073][T18523] netlink: 'syz.4.3730': attribute type 1 has an invalid length. [ 425.686883][T18535] FAULT_INJECTION: forcing a failure. [ 425.686883][T18535] name failslab, interval 1, probability 0, space 0, times 0 [ 425.729423][T18535] CPU: 1 UID: 0 PID: 18535 Comm: syz.0.3734 Not tainted syzkaller #0 PREEMPT(full) [ 425.729450][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 425.729461][T18535] Call Trace: [ 425.729468][T18535] [ 425.729477][T18535] dump_stack_lvl+0xe8/0x150 [ 425.729504][T18535] should_fail_ex+0x414/0x560 [ 425.729535][T18535] should_failslab+0xa8/0x100 [ 425.729558][T18535] kmem_cache_alloc_noprof+0x88/0x710 [ 425.729583][T18535] ? security_inode_alloc+0x39/0x330 [ 425.729609][T18535] security_inode_alloc+0x39/0x330 [ 425.729631][T18535] inode_init_always_gfp+0x9ed/0xdc0 [ 425.729656][T18535] ? __pfx_sock_alloc_inode+0x10/0x10 [ 425.729670][T18535] alloc_inode+0x82/0x1b0 [ 425.729688][T18535] __sock_create+0x12d/0x9d0 [ 425.729712][T18535] mptcp_subflow_create_socket+0xf0/0x800 [ 425.729741][T18535] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 425.729768][T18535] ? do_raw_spin_lock+0x121/0x290 [ 425.729793][T18535] __mptcp_nmpc_sk+0x148/0x760 [ 425.729818][T18535] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 425.729844][T18535] ? __local_bh_enable_ip+0xd0/0x130 [ 425.729864][T18535] mptcp_listen+0x112/0x610 [ 425.729889][T18535] __x64_sys_listen+0x1c7/0x240 [ 425.729908][T18535] do_syscall_64+0xec/0xf80 [ 425.729927][T18535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.729944][T18535] ? trace_irq_disable+0x37/0x100 [ 425.729963][T18535] ? clear_bhb_loop+0x60/0xb0 [ 425.729983][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.730000][T18535] RIP: 0033:0x7f2753b8f749 [ 425.730016][T18535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.730029][T18535] RSP: 002b:00007f2754a5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 425.730048][T18535] RAX: ffffffffffffffda RBX: 00007f2753de5fa0 RCX: 00007f2753b8f749 [ 425.730062][T18535] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000005 [ 425.730072][T18535] RBP: 00007f2754a5a090 R08: 0000000000000000 R09: 0000000000000000 [ 425.730082][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.730092][T18535] R13: 00007f2753de6038 R14: 00007f2753de5fa0 R15: 00007fffdebd0708 [ 425.730124][T18535] [ 425.977239][T18535] socket: no more sockets [ 426.233233][T18547] xfrm0 speed is unknown, defaulting to 1000 [ 426.327895][T18555] vlan2: entered promiscuous mode [ 426.598697][T18547] wg1 speed is unknown, defaulting to 1000 [ 426.611487][T18547] lo speed is unknown, defaulting to 1000 [ 427.171384][T18599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3759'. [ 427.183436][T18599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3759'. [ 427.190708][T18600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.201349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.209903][T18599] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3759'. [ 427.211011][T18600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.219825][T18599] FAULT_INJECTION: forcing a failure. [ 427.219825][T18599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.228082][ T1016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.240717][T18599] CPU: 0 UID: 0 PID: 18599 Comm: syz.3.3759 Not tainted syzkaller #0 PREEMPT(full) [ 427.240742][T18599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 427.240752][T18599] Call Trace: [ 427.240759][T18599] [ 427.240767][T18599] dump_stack_lvl+0xe8/0x150 [ 427.240795][T18599] should_fail_ex+0x414/0x560 [ 427.240825][T18599] _copy_to_user+0x31/0xb0 [ 427.240848][T18599] simple_read_from_buffer+0xe1/0x170 [ 427.240872][T18599] proc_fail_nth_read+0x1b3/0x220 [ 427.240894][T18599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.240914][T18599] ? rw_verify_area+0x2a6/0x4d0 [ 427.240937][T18599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.240956][T18599] vfs_read+0x200/0xa30 [ 427.240971][T18599] ? fdget_pos+0x247/0x320 [ 427.240994][T18599] ? __pfx___mutex_lock+0x10/0x10 [ 427.241016][T18599] ? __pfx_vfs_read+0x10/0x10 [ 427.241033][T18599] ? __fget_files+0x2a/0x420 [ 427.241057][T18599] ? __fget_files+0x3a0/0x420 [ 427.241076][T18599] ? __fget_files+0x2a/0x420 [ 427.241104][T18599] ksys_read+0x145/0x250 [ 427.241122][T18599] ? __pfx_ksys_read+0x10/0x10 [ 427.241150][T18599] do_syscall_64+0xec/0xf80 [ 427.241169][T18599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.241185][T18599] ? trace_irq_disable+0x37/0x100 [ 427.241205][T18599] ? clear_bhb_loop+0x60/0xb0 [ 427.241225][T18599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.241249][T18599] RIP: 0033:0x7f9b8858e15c [ 427.241266][T18599] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 427.241280][T18599] RSP: 002b:00007f9b89428030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.241299][T18599] RAX: ffffffffffffffda RBX: 00007f9b887e5fa0 RCX: 00007f9b8858e15c [ 427.241312][T18599] RDX: 000000000000000f RSI: 00007f9b894280a0 RDI: 0000000000000007 [ 427.241323][T18599] RBP: 00007f9b89428090 R08: 0000000000000000 R09: 0000000000000000 [ 427.241334][T18599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.241344][T18599] R13: 00007f9b887e6038 R14: 00007f9b887e5fa0 R15: 00007ffd1a0519f8 [ 427.241375][T18599] [ 427.464735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.562292][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3760'. [ 427.615133][T18608] netlink: 'syz.2.3762': attribute type 5 has an invalid length. [ 427.742056][T18612] xfrm0 speed is unknown, defaulting to 1000 [ 427.888200][T18612] wg1 speed is unknown, defaulting to 1000 [ 427.888382][T18615] xfrm0 speed is unknown, defaulting to 1000 [ 427.895915][T18612] lo speed is unknown, defaulting to 1000 [ 428.003767][T18597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.012628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.095312][T18623] bridge0: entered promiscuous mode [ 428.101213][T18623] macsec1: entered promiscuous mode [ 428.107816][T18623] bridge0: port 1(macsec1) entered blocking state [ 428.114449][T18623] bridge0: port 1(macsec1) entered disabled state [ 428.121372][T18623] macsec1: entered allmulticast mode [ 428.127154][T18623] bridge0: entered allmulticast mode [ 428.133962][T18623] macsec1: left allmulticast mode [ 428.139161][T18623] bridge0: left allmulticast mode [ 428.145968][T18623] bridge0: left promiscuous mode [ 428.164466][T18615] wg1 speed is unknown, defaulting to 1000 [ 428.171708][T18615] lo speed is unknown, defaulting to 1000 [ 428.308099][T18628] 8021q: adding VLAN 0 to HW filter on device bond7 [ 428.347652][T18631] ip6gre2: entered promiscuous mode [ 428.353017][T18631] ip6gre2: entered allmulticast mode [ 428.458827][T18637] xfrm0 speed is unknown, defaulting to 1000 [ 428.488582][T18639] FAULT_INJECTION: forcing a failure. [ 428.488582][T18639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.502314][T18639] CPU: 0 UID: 0 PID: 18639 Comm: syz.4.3771 Not tainted syzkaller #0 PREEMPT(full) [ 428.502338][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.502349][T18639] Call Trace: [ 428.502356][T18639] [ 428.502364][T18639] dump_stack_lvl+0xe8/0x150 [ 428.502392][T18639] should_fail_ex+0x414/0x560 [ 428.502422][T18639] _copy_from_user+0x2d/0xb0 [ 428.502444][T18639] ___sys_sendmsg+0x158/0x2a0 [ 428.502469][T18639] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.502525][T18639] ? __fget_files+0x2a/0x420 [ 428.502545][T18639] ? __fget_files+0x3a0/0x420 [ 428.502576][T18639] __x64_sys_sendmsg+0x19b/0x260 [ 428.502600][T18639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.502631][T18639] ? __pfx_ksys_write+0x10/0x10 [ 428.502659][T18639] do_syscall_64+0xec/0xf80 [ 428.502679][T18639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.502695][T18639] ? trace_irq_disable+0x37/0x100 [ 428.502715][T18639] ? clear_bhb_loop+0x60/0xb0 [ 428.502735][T18639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.502751][T18639] RIP: 0033:0x7f563758f749 [ 428.502767][T18639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.502783][T18639] RSP: 002b:00007f56383f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.502802][T18639] RAX: ffffffffffffffda RBX: 00007f56377e5fa0 RCX: 00007f563758f749 [ 428.502815][T18639] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000003 [ 428.502837][T18639] RBP: 00007f56383f9090 R08: 0000000000000000 R09: 0000000000000000 [ 428.502848][T18639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.502859][T18639] R13: 00007f56377e6038 R14: 00007f56377e5fa0 R15: 00007ffc0ea67078 [ 428.502890][T18639] [ 428.737207][T18637] wg1 speed is unknown, defaulting to 1000 [ 428.831135][T18637] lo speed is unknown, defaulting to 1000 [ 429.633107][T18668] 8021q: VLANs not supported on ip6_vti0 [ 429.674015][T18675] 8021q: VLANs not supported on ip6_vti0 [ 429.749935][T18691] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 430.232166][T18697] xfrm0 speed is unknown, defaulting to 1000 [ 430.238644][T18694] __nla_validate_parse: 12 callbacks suppressed [ 430.238662][T18694] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3784'. [ 430.287333][T18702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3787'. [ 430.296729][T18702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3787'. [ 430.315474][T18702] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3787'. [ 430.654887][T18710] vlan2: entered promiscuous mode [ 430.690614][T18712] batadv_slave_0: entered promiscuous mode [ 430.866329][T18729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.871391][T18697] wg1 speed is unknown, defaulting to 1000 [ 430.895518][T18697] lo speed is unknown, defaulting to 1000 [ 431.257632][T18741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3800'. [ 431.269939][T18741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3800'. [ 431.279250][T18741] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3800'. [ 431.438747][T18737] netlink: 'syz.0.3798': attribute type 5 has an invalid length. [ 431.528826][T18711] batadv_slave_0: left promiscuous mode [ 431.554117][T18745] xfrm0 speed is unknown, defaulting to 1000 [ 431.927054][T18745] wg1 speed is unknown, defaulting to 1000 [ 431.934818][T18745] lo speed is unknown, defaulting to 1000 [ 432.292603][T18784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3814'. [ 432.301956][T18784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3814'. [ 432.309672][T18787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3815'. [ 432.468757][T18785] xfrm0 speed is unknown, defaulting to 1000 [ 432.509308][T18795] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 432.821571][T18785] wg1 speed is unknown, defaulting to 1000 [ 432.874097][T18809] vlan2: entered promiscuous mode [ 432.930041][T18785] lo speed is unknown, defaulting to 1000 [ 432.937753][T18813] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 433.161731][T18822] bridge11: entered allmulticast mode [ 433.244882][T18828] bridge_slave_1: left allmulticast mode [ 433.250720][T18828] bridge_slave_1: left promiscuous mode [ 433.265833][T18828] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.285169][T18828] bridge_slave_0: left allmulticast mode [ 433.290946][T18828] bridge_slave_0: left promiscuous mode [ 433.297677][T18828] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.465027][T18833] FAULT_INJECTION: forcing a failure. [ 433.465027][T18833] name failslab, interval 1, probability 0, space 0, times 0 [ 433.490059][T18833] CPU: 0 UID: 0 PID: 18833 Comm: syz.1.3830 Not tainted syzkaller #0 PREEMPT(full) [ 433.490086][T18833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.490097][T18833] Call Trace: [ 433.490104][T18833] [ 433.490112][T18833] dump_stack_lvl+0xe8/0x150 [ 433.490140][T18833] should_fail_ex+0x414/0x560 [ 433.490170][T18833] should_failslab+0xa8/0x100 [ 433.490195][T18833] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 433.490221][T18833] ? sock_alloc_inode+0x28/0xc0 [ 433.490242][T18833] ? __pfx_sock_alloc_inode+0x10/0x10 [ 433.490260][T18833] sock_alloc_inode+0x28/0xc0 [ 433.490275][T18833] alloc_inode+0x6a/0x1b0 [ 433.490296][T18833] __sock_create+0x12d/0x9d0 [ 433.490323][T18833] udp_sock_create4+0xbe/0x4b0 [ 433.490351][T18833] ? wg_socket_init+0x162/0xde0 [ 433.490372][T18833] ? __pfx_udp_sock_create4+0x10/0x10 [ 433.490399][T18833] ? wg_socket_init+0x162/0xde0 [ 433.490421][T18833] wg_socket_init+0x608/0xde0 [ 433.490441][T18833] ? wg_socket_init+0x162/0xde0 [ 433.490460][T18833] ? __pfx_wg_socket_init+0x10/0x10 [ 433.490476][T18833] ? __mutex_lock+0x335/0x1350 [ 433.490500][T18833] ? __pfx_wg_receive+0x10/0x10 [ 433.490532][T18833] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 433.490588][T18833] wg_open+0x24f/0x420 [ 433.490615][T18833] __dev_open+0x42a/0x800 [ 433.490641][T18833] ? __pfx___dev_open+0x10/0x10 [ 433.490662][T18833] ? __local_bh_enable_ip+0xd0/0x130 [ 433.490686][T18833] __dev_change_flags+0x1f7/0x680 [ 433.490715][T18833] ? __pfx___dev_change_flags+0x10/0x10 [ 433.490736][T18833] ? pick_next_task_fair+0x1ef2/0x2130 [ 433.490759][T18833] ? bpf_trace_run1+0x31d/0x4c0 [ 433.490784][T18833] netif_change_flags+0x88/0x1a0 [ 433.490811][T18833] do_setlink+0xc55/0x41c0 [ 433.490831][T18833] ? finish_task_switch+0x162/0x940 [ 433.490866][T18833] ? __pfx_do_setlink+0x10/0x10 [ 433.490884][T18833] ? lockdep_hardirqs_on+0x7b/0x110 [ 433.490900][T18833] ? finish_task_switch+0x23d/0x940 [ 433.490924][T18833] ? rcu_is_watching+0x15/0xb0 [ 433.490945][T18833] ? trace_sched_exit_tp+0x36/0xf0 [ 433.490995][T18833] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 433.491015][T18833] ? __pfx___schedule+0x10/0x10 [ 433.491032][T18833] ? __mutex_lock+0xd3b/0x1350 [ 433.491061][T18833] ? irqentry_exit+0x5e8/0x670 [ 433.491088][T18833] ? lockdep_hardirqs_on+0x7b/0x110 [ 433.491107][T18833] ? irqentry_exit+0x5e8/0x670 [ 433.491137][T18833] ? full_name_hash+0x92/0xe0 [ 433.491162][T18833] ? netdev_name_node_lookup+0xdf/0x120 [ 433.491189][T18833] rtnl_newlink+0x161c/0x1c90 [ 433.491216][T18833] ? __pfx_rtnl_newlink+0x10/0x10 [ 433.491245][T18833] ? __lock_acquire+0x6b6/0x2cf0 [ 433.491265][T18833] ? __lock_acquire+0x6b6/0x2cf0 [ 433.491285][T18833] ? unwind_next_frame+0xa5/0x23d0 [ 433.491311][T18833] ? unwind_next_frame+0xa5/0x23d0 [ 433.491332][T18833] ? is_bpf_text_address+0x26/0x2b0 [ 433.491371][T18833] ? __lock_acquire+0x6b6/0x2cf0 [ 433.491395][T18833] ? kernel_text_address+0xa5/0xe0 [ 433.491418][T18833] ? __kernel_text_address+0xd/0x40 [ 433.491439][T18833] ? unwind_get_return_address+0x4d/0x90 [ 433.491457][T18833] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 433.491481][T18833] ? arch_stack_walk+0xfc/0x150 [ 433.491508][T18833] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 433.491550][T18833] ? __pfx_rtnl_newlink+0x10/0x10 [ 433.491569][T18833] rtnetlink_rcv_msg+0x7cf/0xb70 [ 433.491592][T18833] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 433.491609][T18833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.491627][T18833] ? __lock_acquire+0x6b6/0x2cf0 [ 433.491658][T18833] netlink_rcv_skb+0x208/0x470 [ 433.491681][T18833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.491702][T18833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.491737][T18833] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.491766][T18833] netlink_unicast+0x82f/0x9e0 [ 433.491793][T18833] ? __pfx_netlink_unicast+0x10/0x10 [ 433.491813][T18833] ? netlink_sendmsg+0x642/0xb30 [ 433.491833][T18833] ? skb_put+0x11b/0x210 [ 433.491857][T18833] netlink_sendmsg+0x805/0xb30 [ 433.491888][T18833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.491913][T18833] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.491937][T18833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.491952][T18833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.491976][T18833] __sock_sendmsg+0x21c/0x270 [ 433.492004][T18833] ____sys_sendmsg+0x505/0x820 [ 433.492029][T18833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.492060][T18833] ? import_iovec+0x74/0xa0 [ 433.492083][T18833] ___sys_sendmsg+0x21f/0x2a0 [ 433.492107][T18833] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.492165][T18833] ? __fget_files+0x2a/0x420 [ 433.492185][T18833] ? __fget_files+0x3a0/0x420 [ 433.492215][T18833] __x64_sys_sendmsg+0x19b/0x260 [ 433.492239][T18833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.492269][T18833] ? __pfx_ksys_write+0x10/0x10 [ 433.492299][T18833] do_syscall_64+0xec/0xf80 [ 433.492320][T18833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.492335][T18833] ? trace_irq_disable+0x37/0x100 [ 433.492354][T18833] ? clear_bhb_loop+0x60/0xb0 [ 433.492375][T18833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.492391][T18833] RIP: 0033:0x7f8e71f8f749 [ 433.492408][T18833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.492422][T18833] RSP: 002b:00007f8e72e6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.492442][T18833] RAX: ffffffffffffffda RBX: 00007f8e721e5fa0 RCX: 00007f8e71f8f749 [ 433.492461][T18833] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000003 [ 433.492472][T18833] RBP: 00007f8e72e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 433.492483][T18833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.492493][T18833] R13: 00007f8e721e6038 R14: 00007f8e721e5fa0 R15: 00007ffdc6fb7668 [ 433.492523][T18833] [ 434.051277][T18833] socket: no more sockets [ 434.057638][T18833] wireguard: wg1: Could not create IPv4 socket [ 434.635624][T18864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.656080][T18868] FAULT_INJECTION: forcing a failure. [ 434.656080][T18868] name failslab, interval 1, probability 0, space 0, times 0 [ 434.692074][T18864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.698633][T18868] CPU: 0 UID: 0 PID: 18868 Comm: syz.4.3846 Not tainted syzkaller #0 PREEMPT(full) [ 434.698666][T18868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.698677][T18868] Call Trace: [ 434.698684][T18868] [ 434.698692][T18868] dump_stack_lvl+0xe8/0x150 [ 434.698720][T18868] should_fail_ex+0x414/0x560 [ 434.698750][T18868] should_failslab+0xa8/0x100 [ 434.698772][T18868] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 434.698800][T18868] ? sock_alloc_inode+0x28/0xc0 [ 434.698820][T18868] ? __pfx_sock_alloc_inode+0x10/0x10 [ 434.698835][T18868] sock_alloc_inode+0x28/0xc0 [ 434.698850][T18868] alloc_inode+0x6a/0x1b0 [ 434.698875][T18868] __sock_create+0x12d/0x9d0 [ 434.698902][T18868] udp_sock_create4+0xbe/0x4b0 [ 434.698926][T18868] ? wg_socket_init+0x162/0xde0 [ 434.698946][T18868] ? __pfx_udp_sock_create4+0x10/0x10 [ 434.698976][T18868] ? wg_socket_init+0x162/0xde0 [ 434.698999][T18868] wg_socket_init+0x608/0xde0 [ 434.699018][T18868] ? wg_socket_init+0x162/0xde0 [ 434.699036][T18868] ? __pfx_wg_socket_init+0x10/0x10 [ 434.699052][T18868] ? __mutex_lock+0x335/0x1350 [ 434.699074][T18868] ? __pfx_wg_receive+0x10/0x10 [ 434.699099][T18868] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 434.699154][T18868] wg_open+0x24f/0x420 [ 434.699181][T18868] __dev_open+0x42a/0x800 [ 434.699207][T18868] ? __pfx___dev_open+0x10/0x10 [ 434.699228][T18868] ? __local_bh_enable_ip+0xd0/0x130 [ 434.699251][T18868] __dev_change_flags+0x1f7/0x680 [ 434.699282][T18868] ? __pfx___dev_change_flags+0x10/0x10 [ 434.699311][T18868] ? is_bpf_text_address+0x26/0x2b0 [ 434.699339][T18868] netif_change_flags+0x88/0x1a0 [ 434.699366][T18868] do_setlink+0xc55/0x41c0 [ 434.699392][T18868] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 434.699427][T18868] ? __pfx_do_setlink+0x10/0x10 [ 434.699451][T18868] ? __pfx_stack_trace_save+0x10/0x10 [ 434.699499][T18868] ? __mutex_trylock_common+0x153/0x260 [ 434.699524][T18868] ? __pfx___mutex_trylock_common+0x10/0x10 [ 434.699548][T18868] ? rcu_is_watching+0x15/0xb0 [ 434.699569][T18868] ? trace_contention_end+0x39/0x100 [ 434.699591][T18868] ? __mutex_lock+0x335/0x1350 [ 434.699624][T18868] ? rtnl_newlink+0x8ec/0x1c90 [ 434.699653][T18868] ? __pfx___mutex_lock+0x10/0x10 [ 434.699681][T18868] ? full_name_hash+0x92/0xe0 [ 434.699706][T18868] ? netdev_name_node_lookup+0xdf/0x120 [ 434.699734][T18868] rtnl_newlink+0x161c/0x1c90 [ 434.699767][T18868] ? __pfx_rtnl_newlink+0x10/0x10 [ 434.699802][T18868] ? __lock_acquire+0x6b6/0x2cf0 [ 434.699829][T18868] ? unwind_next_frame+0xa5/0x23d0 [ 434.699855][T18868] ? unwind_next_frame+0xa5/0x23d0 [ 434.699878][T18868] ? is_bpf_text_address+0x26/0x2b0 [ 434.699918][T18868] ? __lock_acquire+0x6b6/0x2cf0 [ 434.699941][T18868] ? kernel_text_address+0xa5/0xe0 [ 434.699965][T18868] ? __kernel_text_address+0xd/0x40 [ 434.699987][T18868] ? unwind_get_return_address+0x4d/0x90 [ 434.700005][T18868] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 434.700029][T18868] ? arch_stack_walk+0xfc/0x150 [ 434.700055][T18868] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 434.700090][T18868] ? __pfx_rtnl_newlink+0x10/0x10 [ 434.700109][T18868] rtnetlink_rcv_msg+0x7cf/0xb70 [ 434.700133][T18868] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 434.700152][T18868] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 434.700170][T18868] ? __lock_acquire+0x6b6/0x2cf0 [ 434.700197][T18868] netlink_rcv_skb+0x208/0x470 [ 434.700220][T18868] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 434.700241][T18868] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.700275][T18868] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.700306][T18868] netlink_unicast+0x82f/0x9e0 [ 434.700337][T18868] ? __pfx_netlink_unicast+0x10/0x10 [ 434.700360][T18868] ? netlink_sendmsg+0x642/0xb30 [ 434.700381][T18868] ? skb_put+0x11b/0x210 [ 434.700406][T18868] netlink_sendmsg+0x805/0xb30 [ 434.700438][T18868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.700465][T18868] ? aa_sock_msg_perm+0xf1/0x1b0 [ 434.700489][T18868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 434.700506][T18868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.700530][T18868] __sock_sendmsg+0x21c/0x270 [ 434.700558][T18868] ____sys_sendmsg+0x505/0x820 [ 434.700586][T18868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.700617][T18868] ? import_iovec+0x74/0xa0 [ 434.700647][T18868] ___sys_sendmsg+0x21f/0x2a0 [ 434.700675][T18868] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.700734][T18868] ? __fget_files+0x2a/0x420 [ 434.700754][T18868] ? __fget_files+0x3a0/0x420 [ 434.700785][T18868] __x64_sys_sendmsg+0x19b/0x260 [ 434.700810][T18868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.700841][T18868] ? __pfx_ksys_write+0x10/0x10 [ 434.700870][T18868] do_syscall_64+0xec/0xf80 [ 434.700889][T18868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.700905][T18868] ? trace_irq_disable+0x37/0x100 [ 434.700925][T18868] ? clear_bhb_loop+0x60/0xb0 [ 434.700945][T18868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.700962][T18868] RIP: 0033:0x7f563758f749 [ 434.700978][T18868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.700992][T18868] RSP: 002b:00007f56383f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.701011][T18868] RAX: ffffffffffffffda RBX: 00007f56377e5fa0 RCX: 00007f563758f749 [ 434.701024][T18868] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000003 [ 434.701035][T18868] RBP: 00007f56383f9090 R08: 0000000000000000 R09: 0000000000000000 [ 434.701046][T18868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.701057][T18868] R13: 00007f56377e6038 R14: 00007f56377e5fa0 R15: 00007ffc0ea67078 [ 434.701087][T18868] [ 434.701098][T18868] socket: no more sockets [ 434.767682][T18864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.800618][T18868] wireguard: wg1: Could not create IPv4 socket [ 434.829249][T18872] netlink: 'syz.3.3843': attribute type 10 has an invalid length. [ 434.876911][T18868] wg1: entered promiscuous mode [ 435.314913][T18868] wg1: entered allmulticast mode [ 435.360588][T18871] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 435.504431][T18872] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 435.526210][T18885] tipc: Resetting bearer [ 435.534960][T18888] __nla_validate_parse: 10 callbacks suppressed [ 435.534979][T18888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3850'. [ 435.570993][T18888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3850'. [ 435.617911][T18888] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3850'. [ 435.784963][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3852'. [ 435.833221][T18863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.848158][T18863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.915321][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3852'. [ 436.056305][T18902] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3854'. [ 436.099605][T18902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3854'. [ 436.109515][T18902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3854'. [ 436.123140][T18902] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3854'. [ 436.233469][T18908] xfrm0 speed is unknown, defaulting to 1000 [ 436.309885][T18913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.318717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.336984][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3860'. [ 436.506348][T18908] wg1 speed is unknown, defaulting to 1000 [ 436.514024][T18908] lo speed is unknown, defaulting to 1000 [ 436.704332][T18929] netlink: 'syz.0.3861': attribute type 3 has an invalid length. [ 437.005610][T18942] 8021q: VLANs not supported on ip6_vti0 [ 437.247139][T18948] syzkaller1: entered promiscuous mode [ 437.256634][T18948] syzkaller1: entered allmulticast mode [ 437.494190][T18959] netlink: 'syz.2.3871': attribute type 1 has an invalid length. [ 437.562469][T18959] 8021q: adding VLAN 0 to HW filter on device bond5 [ 437.669740][T18962] 8021q: adding VLAN 0 to HW filter on device bond6 [ 437.727065][T18963] bond5: (slave ip6gretap1): making interface the new active one [ 437.771636][T18963] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 437.826303][T18959] veth3: entered promiscuous mode [ 437.858409][T18959] bond5: (slave veth3): Enslaving as an active interface with a down link [ 437.871475][T18970] batadv_slave_0: entered promiscuous mode [ 437.877689][T18967] erspan0: entered allmulticast mode [ 437.888404][T18967] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 437.918914][T18963] vlan2: entered promiscuous mode [ 437.950369][T18963] bond5: entered promiscuous mode [ 437.955569][T18963] ip6gretap1: entered promiscuous mode [ 437.963336][T18963] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 438.601792][T18969] batadv_slave_0: left promiscuous mode [ 438.724316][T18999] vlan3: entered promiscuous mode [ 439.715128][ C0] net_ratelimit: 1 callbacks suppressed [ 439.715149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.140817][T19044] __nla_validate_parse: 5 callbacks suppressed [ 441.140835][T19044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3896'. [ 441.161565][T19044] netlink: 'syz.3.3896': attribute type 5 has an invalid length. [ 441.170343][T19044] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3896'. [ 441.179942][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 441.182850][T19047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3895'. [ 441.252395][T19049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3897'. [ 441.475232][T19055] vlan2: entered promiscuous mode [ 442.607137][T19093] vlan3: entered promiscuous mode [ 442.653368][T19097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3913'. [ 442.662950][T19097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3913'. [ 442.672923][T19097] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3913'. [ 442.745957][T19099] netlink: 'syz.4.3914': attribute type 16 has an invalid length. [ 442.753894][T19099] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3914'. [ 442.886424][T19102] xfrm0 speed is unknown, defaulting to 1000 [ 443.150505][T19102] wg1 speed is unknown, defaulting to 1000 [ 443.158520][T19102] lo speed is unknown, defaulting to 1000 [ 443.187449][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3918'. [ 443.319846][T19118] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.953978][T19143] netlink: 'syz.2.3925': attribute type 11 has an invalid length. [ 444.061840][T19148] vlan2: entered promiscuous mode [ 444.087048][T19150] openvswitch: netlink: Flow key attr not present in new flow. [ 444.506892][T19176] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 444.547572][T19185] vlan2: entered promiscuous mode [ 445.221457][T19213] xfrm0 speed is unknown, defaulting to 1000 [ 445.423110][T19213] wg1 speed is unknown, defaulting to 1000 [ 445.462614][T19213] lo speed is unknown, defaulting to 1000 [ 445.538880][T19227] xfrm0 speed is unknown, defaulting to 1000 [ 445.605719][T19231] netlink: 'syz.3.3952': attribute type 3 has an invalid length. [ 445.630978][T19229] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 446.062635][T19227] wg1 speed is unknown, defaulting to 1000 [ 446.074072][T19227] lo speed is unknown, defaulting to 1000 [ 446.330910][T19256] xfrm0 speed is unknown, defaulting to 1000 [ 446.738121][T19279] __nla_validate_parse: 16 callbacks suppressed [ 446.738141][T19279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3966'. [ 446.754248][T19278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3965'. [ 446.788178][T19278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3965'. [ 446.827198][T19278] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3965'. [ 446.976966][T19256] wg1 speed is unknown, defaulting to 1000 [ 447.032404][T19256] lo speed is unknown, defaulting to 1000 [ 447.634912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.713967][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 447.760444][T19305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3973'. [ 447.849597][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 448.028204][T19311] xfrm0 speed is unknown, defaulting to 1000 [ 448.139840][T19316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3978'. [ 448.195971][T19316] bridge11: port 1(veth0_to_bond) entered blocking state [ 448.216011][T19316] bridge11: port 1(veth0_to_bond) entered disabled state [ 448.223288][T19316] veth0_to_bond: entered allmulticast mode [ 448.251552][T19316] veth0_to_bond: entered promiscuous mode [ 448.358555][T19325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3979'. [ 448.367889][T19325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3979'. [ 448.612222][T19311] wg1 speed is unknown, defaulting to 1000 [ 448.629836][T19311] lo speed is unknown, defaulting to 1000 [ 448.827986][T19335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.837010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.824073][T19374] tipc: Enabled bearer , priority 0 [ 449.862486][T19374] syzkaller0: entered promiscuous mode [ 449.868793][T19374] syzkaller0: entered allmulticast mode [ 449.958805][T19374] tipc: Resetting bearer [ 449.984970][T19378] xfrm0 speed is unknown, defaulting to 1000 [ 449.999393][T19373] tipc: Resetting bearer [ 450.022892][T19373] tipc: Disabling bearer [ 450.041806][T19384] syzkaller0: entered promiscuous mode [ 450.047767][T19384] syzkaller0: entered allmulticast mode [ 450.263607][T19378] wg1 speed is unknown, defaulting to 1000 [ 450.275451][T19378] lo speed is unknown, defaulting to 1000 [ 451.810627][T19442] tipc: Resetting bearer [ 452.015572][T19448] __nla_validate_parse: 10 callbacks suppressed [ 452.015589][T19448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4020'. [ 452.034906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.176710][ T3791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.185797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.197334][ T5942] wg1 speed is unknown, defaulting to 1000 [ 452.203181][ T5942] syz0: Port: 1 Link ACTIVE [ 452.307992][T19462] vlan0: entered promiscuous mode [ 452.448765][T19469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'. [ 452.862075][T19482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4031'. [ 453.317126][T19500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4035'. [ 453.334996][T19500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4035'. [ 453.382568][T19500] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4035'. [ 453.495408][T19510] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4039'. [ 453.524751][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4039'. [ 453.561720][T19509] netlink: 508 bytes leftover after parsing attributes in process `syz.4.4039'. [ 453.852916][T19522] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.934983][T19522] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.024456][T19532] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4046'. [ 454.086941][T19522] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.124094][T19522] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.225976][T19522] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.249568][T19522] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.317294][T19522] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.327289][T19522] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.469502][T19550] batadv_slave_0: entered promiscuous mode [ 454.511791][ T1016] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.523914][ T1016] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.567603][ T1016] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.600361][ T1016] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.666057][ T1016] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.688679][ T1016] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.707480][ T1016] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.716878][ T1016] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.768939][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.222113][T19592] syzkaller1: entered promiscuous mode [ 455.229524][T19592] syzkaller1: entered allmulticast mode [ 455.393640][T19549] batadv_slave_0: left promiscuous mode [ 455.491098][T19606] FAULT_INJECTION: forcing a failure. [ 455.491098][T19606] name failslab, interval 1, probability 0, space 0, times 0 [ 455.505276][T19606] CPU: 1 UID: 0 PID: 19606 Comm: syz.0.4069 Not tainted syzkaller #0 PREEMPT(full) [ 455.505302][T19606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.505313][T19606] Call Trace: [ 455.505320][T19606] [ 455.505328][T19606] dump_stack_lvl+0xe8/0x150 [ 455.505355][T19606] should_fail_ex+0x414/0x560 [ 455.505386][T19606] should_failslab+0xa8/0x100 [ 455.505408][T19606] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 455.505434][T19606] ? __alloc_skb+0x190/0x720 [ 455.505452][T19606] ? __alloc_skb+0x1d5/0x720 [ 455.505468][T19606] ? __local_bh_enable_ip+0xd0/0x130 [ 455.505488][T19606] ? __alloc_skb+0x190/0x720 [ 455.505506][T19606] __alloc_skb+0x1d5/0x720 [ 455.505524][T19606] ? netlink_autobind+0xdb/0x300 [ 455.505546][T19606] ? netlink_autobind+0x2c2/0x300 [ 455.505573][T19606] netlink_sendmsg+0x5c6/0xb30 [ 455.505605][T19606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.505632][T19606] ? aa_sock_msg_perm+0xf1/0x1b0 [ 455.505656][T19606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.505672][T19606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.505700][T19606] __sock_sendmsg+0x21c/0x270 [ 455.505727][T19606] ____sys_sendmsg+0x505/0x820 [ 455.505753][T19606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.505782][T19606] ? import_iovec+0x74/0xa0 [ 455.505807][T19606] ___sys_sendmsg+0x21f/0x2a0 [ 455.505830][T19606] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.505887][T19606] ? __fget_files+0x2a/0x420 [ 455.505907][T19606] ? __fget_files+0x3a0/0x420 [ 455.505938][T19606] __x64_sys_sendmsg+0x19b/0x260 [ 455.505961][T19606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.505993][T19606] ? __pfx_ksys_write+0x10/0x10 [ 455.506022][T19606] do_syscall_64+0xec/0xf80 [ 455.506042][T19606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.506059][T19606] ? trace_irq_disable+0x37/0x100 [ 455.506078][T19606] ? clear_bhb_loop+0x60/0xb0 [ 455.506100][T19606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.506116][T19606] RIP: 0033:0x7f2753b8f749 [ 455.506132][T19606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.506148][T19606] RSP: 002b:00007f2754a5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.506167][T19606] RAX: ffffffffffffffda RBX: 00007f2753de5fa0 RCX: 00007f2753b8f749 [ 455.506180][T19606] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000003 [ 455.506192][T19606] RBP: 00007f2754a5a090 R08: 0000000000000000 R09: 0000000000000000 [ 455.506203][T19606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.506214][T19606] R13: 00007f2753de6038 R14: 00007f2753de5fa0 R15: 00007fffdebd0708 [ 455.506252][T19606] [ 455.773475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.781899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.790334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.798776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.807175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.815533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.191375][T19628] xfrm0 speed is unknown, defaulting to 1000 [ 456.240612][T19632] vlan2: entered promiscuous mode [ 456.418937][T19642] batadv_slave_0: entered promiscuous mode [ 456.612340][T19628] wg1 speed is unknown, defaulting to 1000 [ 456.650689][T19628] lo speed is unknown, defaulting to 1000 [ 457.265964][T19675] xfrm0 speed is unknown, defaulting to 1000 [ 457.276819][T19641] batadv_slave_0: left promiscuous mode [ 457.535350][T19689] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 457.589505][T19692] FAULT_INJECTION: forcing a failure. [ 457.589505][T19692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.591051][T19692] [ 457.591061][T19692] ====================================================== [ 457.591069][T19692] WARNING: possible circular locking dependency detected [ 457.591082][T19692] syzkaller #0 Not tainted [ 457.591091][T19692] ------------------------------------------------------ [ 457.591098][T19692] syz.1.4094/19692 is trying to acquire lock: [ 457.591108][T19692] ffffffff8df35920 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x11a/0xb00 [ 457.591156][T19692] [ 457.591156][T19692] but task is already holding lock: [ 457.591161][T19692] ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 457.591199][T19692] [ 457.591199][T19692] which lock already depends on the new lock. [ 457.591199][T19692] [ 457.591205][T19692] [ 457.591205][T19692] the existing dependency chain (in reverse order) is: [ 457.591212][T19692] [ 457.591212][T19692] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 457.591234][T19692] _raw_spin_lock_nested+0x32/0x50 [ 457.591252][T19692] raw_spin_rq_lock_nested+0x2a/0x140 [ 457.591265][T19692] task_rq_lock+0xbc/0x470 [ 457.591278][T19692] cgroup_move_task+0x92/0x2a0 [ 457.591296][T19692] css_set_move_task+0x658/0x9e0 [ 457.591312][T19692] cgroup_post_fork+0x1ef/0x7a0 [ 457.591326][T19692] copy_process+0x3614/0x3950 [ 457.591342][T19692] kernel_clone+0x21e/0x820 [ 457.591358][T19692] user_mode_thread+0xdd/0x140 [ 457.591375][T19692] rest_init+0x23/0x300 [ 457.591394][T19692] start_kernel+0x381/0x3d0 [ 457.591413][T19692] x86_64_start_reservations+0x24/0x30 [ 457.591429][T19692] x86_64_start_kernel+0x143/0x1c0 [ 457.591444][T19692] common_startup_64+0x13e/0x147 [ 457.591462][T19692] [ 457.591462][T19692] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 457.591485][T19692] _raw_spin_lock_irqsave+0x40/0x60 [ 457.591501][T19692] try_to_wake_up+0x67/0x12b0 [ 457.591519][T19692] __wake_up_common_lock+0x137/0x1f0 [ 457.591539][T19692] tty_port_default_wakeup+0xfb/0x170 [ 457.591557][T19692] serial8250_tx_chars+0x72e/0x970 [ 457.591571][T19692] serial8250_handle_irq+0x633/0xbb0 [ 457.591584][T19692] serial8250_default_handle_irq+0xbf/0x200 [ 457.591602][T19692] serial8250_interrupt+0x8d/0x180 [ 457.591622][T19692] __handle_irq_event_percpu+0x217/0x970 [ 457.591648][T19692] handle_irq_event+0x8b/0x1e0 [ 457.591671][T19692] handle_edge_irq+0x23b/0xa10 [ 457.591689][T19692] __common_interrupt+0x141/0x1f0 [ 457.591710][T19692] common_interrupt+0xb6/0xe0 [ 457.591731][T19692] asm_common_interrupt+0x26/0x40 [ 457.591750][T19692] _raw_spin_unlock_irq+0x29/0x50 [ 457.591765][T19692] __rpm_callback+0xa5/0x7f0 [ 457.591783][T19692] rpm_resume+0xf9e/0x15f0 [ 457.591798][T19692] rpm_resume+0x8b1/0x15f0 [ 457.591812][T19692] pm_runtime_work+0x103/0x1b0 [ 457.591829][T19692] process_scheduled_works+0xad1/0x1770 [ 457.591844][T19692] worker_thread+0x8a0/0xda0 [ 457.591859][T19692] kthread+0x711/0x8a0 [ 457.591877][T19692] ret_from_fork+0x510/0xa50 [ 457.591891][T19692] ret_from_fork_asm+0x1a/0x30 [ 457.591910][T19692] [ 457.591910][T19692] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 457.591933][T19692] _raw_spin_lock_irqsave+0x40/0x60 [ 457.591949][T19692] __wake_up_common_lock+0x2f/0x1f0 [ 457.591969][T19692] tty_port_default_wakeup+0xfb/0x170 [ 457.591985][T19692] serial8250_tx_chars+0x72e/0x970 [ 457.592005][T19692] serial8250_handle_irq+0x633/0xbb0 [ 457.592019][T19692] serial8250_default_handle_irq+0xbf/0x200 [ 457.592033][T19692] serial8250_interrupt+0x8d/0x180 [ 457.592051][T19692] __handle_irq_event_percpu+0x217/0x970 [ 457.592071][T19692] handle_irq_event+0x8b/0x1e0 [ 457.592090][T19692] handle_edge_irq+0x23b/0xa10 [ 457.592108][T19692] __common_interrupt+0x141/0x1f0 [ 457.592128][T19692] common_interrupt+0xb6/0xe0 [ 457.592148][T19692] asm_common_interrupt+0x26/0x40 [ 457.592163][T19692] _raw_spin_unlock_irqrestore+0x47/0x80 [ 457.592180][T19692] uart_port_unlock_deref+0x111/0x2f0 [ 457.592198][T19692] uart_write+0xe8/0x130 [ 457.592211][T19692] n_tty_write+0xd78/0x12a0 [ 457.592228][T19692] file_tty_write+0x559/0xa20 [ 457.592249][T19692] vfs_write+0x5c9/0xb30 [ 457.592263][T19692] ksys_write+0x145/0x250 [ 457.592276][T19692] do_syscall_64+0xec/0xf80 [ 457.592294][T19692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.592309][T19692] [ 457.592309][T19692] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 457.592332][T19692] _raw_spin_lock_irqsave+0x40/0x60 [ 457.592352][T19692] serial8250_console_write+0x155/0x1b60 [ 457.592372][T19692] console_flush_all+0x713/0xb00 [ 457.592392][T19692] console_unlock+0xbb/0x190 [ 457.592409][T19692] vprintk_emit+0x47b/0x550 [ 457.592426][T19692] _printk+0xcf/0x120 [ 457.592445][T19692] register_console+0xa8b/0xf90 [ 457.592464][T19692] univ8250_console_init+0x3a/0x70 [ 457.592481][T19692] console_init+0xfc/0x3f0 [ 457.592496][T19692] start_kernel+0x227/0x3d0 [ 457.592513][T19692] x86_64_start_reservations+0x24/0x30 [ 457.592529][T19692] x86_64_start_kernel+0x143/0x1c0 [ 457.592544][T19692] common_startup_64+0x13e/0x147 [ 457.592561][T19692] [ 457.592561][T19692] -> #0 (console_owner){-.-.}-{0:0}: [ 457.592584][T19692] __lock_acquire+0x15a6/0x2cf0 [ 457.592598][T19692] lock_acquire+0x107/0x340 [ 457.592612][T19692] console_flush_all+0x6bc/0xb00 [ 457.592630][T19692] console_unlock+0xbb/0x190 [ 457.592647][T19692] vprintk_emit+0x47b/0x550 [ 457.592663][T19692] _printk+0xcf/0x120 [ 457.592683][T19692] should_fail_ex+0x3f5/0x560 [ 457.592704][T19692] strncpy_from_user+0x36/0x2c0 [ 457.592724][T19692] strncpy_from_user_nofault+0x72/0x150 [ 457.592740][T19692] bpf_probe_read_compat_str+0xe2/0x180 [ 457.592757][T19692] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 457.592770][T19692] bpf_trace_run2+0x284/0x4c0 [ 457.592788][T19692] __bpf_trace_tlb_flush+0xf5/0x150 [ 457.592808][T19692] trace_tlb_flush+0xff/0x120 [ 457.592827][T19692] switch_mm_irqs_off+0x4cc/0x700 [ 457.592846][T19692] __schedule+0xfdb/0x4fd0 [ 457.592861][T19692] preempt_schedule_common+0x83/0xd0 [ 457.592877][T19692] preempt_schedule_thunk+0x16/0x30 [ 457.592891][T19692] __local_bh_enable_ip+0xe1/0x130 [ 457.592907][T19692] netlink_insert+0x104c/0x1350 [ 457.592926][T19692] netlink_autobind+0x22e/0x300 [ 457.592947][T19692] netlink_sendmsg+0x523/0xb30 [ 457.592966][T19692] __sock_sendmsg+0x21c/0x270 [ 457.592988][T19692] ____sys_sendmsg+0x505/0x820 [ 457.593010][T19692] ___sys_sendmsg+0x21f/0x2a0 [ 457.593028][T19692] __x64_sys_sendmsg+0x19b/0x260 [ 457.593046][T19692] do_syscall_64+0xec/0xf80 [ 457.593063][T19692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.593078][T19692] [ 457.593078][T19692] other info that might help us debug this: [ 457.593078][T19692] [ 457.593084][T19692] Chain exists of: [ 457.593084][T19692] console_owner --> &p->pi_lock --> &rq->__lock [ 457.593084][T19692] [ 457.593111][T19692] Possible unsafe locking scenario: [ 457.593111][T19692] [ 457.593117][T19692] CPU0 CPU1 [ 457.593123][T19692] ---- ---- [ 457.593128][T19692] lock(&rq->__lock); [ 457.593139][T19692] lock(&p->pi_lock); [ 457.593152][T19692] lock(&rq->__lock); [ 457.593164][T19692] lock(console_owner); [ 457.593176][T19692] [ 457.593176][T19692] *** DEADLOCK *** [ 457.593176][T19692] [ 457.593181][T19692] 4 locks held by syz.1.4094/19692: [ 457.593195][T19692] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 457.593235][T19692] #1: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4c0 [ 457.593277][T19692] #2: ffffffff8df35980 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 457.593320][T19692] #3: ffffffff8de1d238 (console_srcu){....}-{0:0}, at: console_flush_all+0x11a/0xb00 [ 457.593363][T19692] [ 457.593363][T19692] stack backtrace: [ 457.593373][T19692] CPU: 0 UID: 0 PID: 19692 Comm: syz.1.4094 Not tainted syzkaller #0 PREEMPT(full) [ 457.593392][T19692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.593402][T19692] Call Trace: [ 457.593408][T19692] [ 457.593416][T19692] dump_stack_lvl+0xe8/0x150 [ 457.593436][T19692] print_circular_bug+0x2e2/0x300 [ 457.593458][T19692] check_noncircular+0x12e/0x150 [ 457.593484][T19692] __lock_acquire+0x15a6/0x2cf0 [ 457.593512][T19692] ? console_flush_all+0x11a/0xb00 [ 457.593531][T19692] lock_acquire+0x107/0x340 [ 457.593546][T19692] ? console_flush_all+0x11a/0xb00 [ 457.593570][T19692] ? do_raw_spin_unlock+0x122/0x240 [ 457.593592][T19692] ? console_flush_all+0x11a/0xb00 [ 457.593612][T19692] console_flush_all+0x6bc/0xb00 [ 457.593632][T19692] ? console_flush_all+0x11a/0xb00 [ 457.593655][T19692] ? console_flush_all+0x11a/0xb00 [ 457.593679][T19692] ? __pfx_console_flush_all+0x10/0x10 [ 457.593701][T19692] ? is_printk_cpu_sync_owner+0x32/0x40 [ 457.593726][T19692] console_unlock+0xbb/0x190 [ 457.593746][T19692] ? __pfx_console_unlock+0x10/0x10 [ 457.593765][T19692] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 457.593783][T19692] ? _printk+0xcf/0x120 [ 457.593807][T19692] vprintk_emit+0x47b/0x550 [ 457.593825][T19692] ? trace_event_buffer_commit+0x264/0x7b0 [ 457.593844][T19692] ? __pfx_vprintk_emit+0x10/0x10 [ 457.593868][T19692] _printk+0xcf/0x120 [ 457.593891][T19692] ? __pfx__printk+0x10/0x10 [ 457.593911][T19692] ? rep_movs_alternative+0xf/0x90 [ 457.593934][T19692] ? rcu_is_watching+0x15/0xb0 [ 457.593955][T19692] ? bpf_bprintf_cleanup+0x9f/0xd0 [ 457.593978][T19692] should_fail_ex+0x3f5/0x560 [ 457.594014][T19692] strncpy_from_user+0x36/0x2c0 [ 457.594038][T19692] strncpy_from_user_nofault+0x72/0x150 [ 457.594058][T19692] bpf_probe_read_compat_str+0xe2/0x180 [ 457.594078][T19692] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 457.594094][T19692] ? bpf_trace_run2+0x186/0x4c0 [ 457.594113][T19692] ? lock_acquire+0x107/0x340 [ 457.594129][T19692] ? bpf_trace_run2+0x186/0x4c0 [ 457.594151][T19692] ? update_load_avg+0x572/0x1870 [ 457.594178][T19692] bpf_trace_run2+0x284/0x4c0 [ 457.594198][T19692] ? bpf_trace_run2+0x186/0x4c0 [ 457.594219][T19692] ? __pfx_bpf_trace_run2+0x10/0x10 [ 457.594241][T19692] ? bpf_trace_run1+0x31d/0x4c0 [ 457.594260][T19692] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 457.594284][T19692] __bpf_trace_tlb_flush+0xf5/0x150 [ 457.594306][T19692] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 457.594326][T19692] ? psi_group_change+0xab8/0x1050 [ 457.594350][T19692] ? __schedule+0x249b/0x4fd0 [ 457.594369][T19692] trace_tlb_flush+0xff/0x120 [ 457.594391][T19692] switch_mm_irqs_off+0x4cc/0x700 [ 457.594415][T19692] __schedule+0xfdb/0x4fd0 [ 457.594433][T19692] ? register_lock_class+0x31/0x2e0 [ 457.594459][T19692] ? __lock_acquire+0x6b6/0x2cf0 [ 457.594475][T19692] ? __pfx___schedule+0x10/0x10 [ 457.594497][T19692] ? release_sock+0x2f/0x1f0 [ 457.594515][T19692] ? preempt_schedule_thunk+0x16/0x30 [ 457.594530][T19692] preempt_schedule_common+0x83/0xd0 [ 457.594545][T19692] ? netlink_insert+0x104c/0x1350 [ 457.594562][T19692] preempt_schedule_thunk+0x16/0x30 [ 457.594578][T19692] __local_bh_enable_ip+0xe1/0x130 [ 457.594593][T19692] netlink_insert+0x104c/0x1350 [ 457.594618][T19692] ? netlink_insert+0x2a9/0x1350 [ 457.594638][T19692] ? __pfx_netlink_insert+0x10/0x10 [ 457.594660][T19692] ? netlink_autobind+0xdb/0x300 [ 457.594683][T19692] ? netlink_autobind+0xdb/0x300 [ 457.594703][T19692] netlink_autobind+0x22e/0x300 [ 457.594726][T19692] netlink_sendmsg+0x523/0xb30 [ 457.594752][T19692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.594775][T19692] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.594797][T19692] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.594812][T19692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.594834][T19692] __sock_sendmsg+0x21c/0x270 [ 457.594858][T19692] ____sys_sendmsg+0x505/0x820 [ 457.594880][T19692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.594903][T19692] ? import_iovec+0x74/0xa0 [ 457.594924][T19692] ___sys_sendmsg+0x21f/0x2a0 [ 457.594944][T19692] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.594979][T19692] ? __fget_files+0x2a/0x420 [ 457.595005][T19692] ? __fget_files+0x3a0/0x420 [ 457.595029][T19692] __x64_sys_sendmsg+0x19b/0x260 [ 457.595050][T19692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.595074][T19692] ? __pfx_ksys_write+0x10/0x10 [ 457.595094][T19692] do_syscall_64+0xec/0xf80 [ 457.595113][T19692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.595128][T19692] ? trace_irq_disable+0x37/0x100 [ 457.595148][T19692] ? clear_bhb_loop+0x60/0xb0 [ 457.595163][T19692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.595178][T19692] RIP: 0033:0x7f8e71f8f749 [ 457.595192][T19692] Code: Unable to access opcode bytes at 0x7f8e71f8f71f. [ 457.595201][T19692] RSP: 002b:00007f8e72e6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.595219][T19692] RAX: ffffffffffffffda RBX: 00007f8e721e5fa0 RCX: 00007f8e71f8f749 [ 457.595232][T19692] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000003 [ 457.595243][T19692] RBP: 00007f8e72e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 457.595253][T19692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.595263][T19692] R13: 00007f8e721e6038 R14: 00007f8e721e5fa0 R15: 00007ffdc6fb7668 [ 457.595283][T19692] [ 458.890678][T19692] CPU: 0 UID: 0 PID: 19692 Comm: syz.1.4094 Not tainted syzkaller #0 PREEMPT(full) [ 458.890693][T19692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.890700][T19692] Call Trace: [ 458.890708][T19692] [ 458.890715][T19692] dump_stack_lvl+0xe8/0x150 [ 458.890732][T19692] should_fail_ex+0x414/0x560 [ 458.890750][T19692] strncpy_from_user+0x36/0x2c0 [ 458.890764][T19692] strncpy_from_user_nofault+0x72/0x150 [ 458.890777][T19692] bpf_probe_read_compat_str+0xe2/0x180 [ 458.890789][T19692] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 458.890800][T19692] ? bpf_trace_run2+0x186/0x4c0 [ 458.890811][T19692] ? lock_acquire+0x107/0x340 [ 458.890820][T19692] ? bpf_trace_run2+0x186/0x4c0 [ 458.890832][T19692] ? update_load_avg+0x572/0x1870 [ 458.890848][T19692] bpf_trace_run2+0x284/0x4c0 [ 458.890864][T19692] ? bpf_trace_run2+0x186/0x4c0 [ 458.890881][T19692] ? __pfx_bpf_trace_run2+0x10/0x10 [ 458.890894][T19692] ? bpf_trace_run1+0x31d/0x4c0 [ 458.890905][T19692] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 458.890919][T19692] __bpf_trace_tlb_flush+0xf5/0x150 [ 458.890932][T19692] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 458.890943][T19692] ? psi_group_change+0xab8/0x1050 [ 458.890956][T19692] ? __schedule+0x249b/0x4fd0 [ 458.890969][T19692] trace_tlb_flush+0xff/0x120 [ 458.890982][T19692] switch_mm_irqs_off+0x4cc/0x700 [ 458.890996][T19692] __schedule+0xfdb/0x4fd0 [ 458.891006][T19692] ? register_lock_class+0x31/0x2e0 [ 458.891019][T19692] ? __lock_acquire+0x6b6/0x2cf0 [ 458.891028][T19692] ? __pfx___schedule+0x10/0x10 [ 458.891039][T19692] ? release_sock+0x2f/0x1f0 [ 458.891050][T19692] ? preempt_schedule_thunk+0x16/0x30 [ 458.891059][T19692] preempt_schedule_common+0x83/0xd0 [ 458.891070][T19692] ? netlink_insert+0x104c/0x1350 [ 458.891082][T19692] preempt_schedule_thunk+0x16/0x30 [ 458.891092][T19692] __local_bh_enable_ip+0xe1/0x130 [ 458.891103][T19692] netlink_insert+0x104c/0x1350 [ 458.891117][T19692] ? netlink_insert+0x2a9/0x1350 [ 458.891129][T19692] ? __pfx_netlink_insert+0x10/0x10 [ 458.891141][T19692] ? netlink_autobind+0xdb/0x300 [ 458.891155][T19692] ? netlink_autobind+0xdb/0x300 [ 458.891167][T19692] netlink_autobind+0x22e/0x300 [ 458.891181][T19692] netlink_sendmsg+0x523/0xb30 [ 458.891196][T19692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.891210][T19692] ? aa_sock_msg_perm+0xf1/0x1b0 [ 458.891222][T19692] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.891231][T19692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.891243][T19692] __sock_sendmsg+0x21c/0x270 [ 458.891259][T19692] ____sys_sendmsg+0x505/0x820 [ 458.891271][T19692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.891284][T19692] ? import_iovec+0x74/0xa0 [ 458.891296][T19692] ___sys_sendmsg+0x21f/0x2a0 [ 458.891308][T19692] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.891327][T19692] ? __fget_files+0x2a/0x420 [ 458.891338][T19692] ? __fget_files+0x3a0/0x420 [ 458.891351][T19692] __x64_sys_sendmsg+0x19b/0x260 [ 458.891363][T19692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.891376][T19692] ? __pfx_ksys_write+0x10/0x10 [ 458.891387][T19692] do_syscall_64+0xec/0xf80 [ 458.891398][T19692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.891407][T19692] ? trace_irq_disable+0x37/0x100 [ 458.891419][T19692] ? clear_bhb_loop+0x60/0xb0 [ 458.891429][T19692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.891438][T19692] RIP: 0033:0x7f8e71f8f749 [ 458.891447][T19692] Code: Unable to access opcode bytes at 0x7f8e71f8f71f. [ 458.891452][T19692] RSP: 002b:00007f8e72e6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.891463][T19692] RAX: ffffffffffffffda RBX: 00007f8e721e5fa0 RCX: 00007f8e71f8f749 [ 458.891471][T19692] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000003 [ 458.891477][T19692] RBP: 00007f8e72e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 458.891483][T19692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.891488][T19692] R13: 00007f8e721e6038 R14: 00007f8e721e5fa0 R15: 00007ffdc6fb7668 [ 458.891499][T19692] [ 458.911598][ T3546] net_ratelimit: 51 callbacks suppressed [ 458.911615][ T3546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.010294][T19675] wg1 speed is unknown, defaulting to 1000 [ 459.013377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.018681][T19675] lo speed is unknown, defaulting to 1000 [ 464.284972][ T3546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.293354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog