last executing test programs: 9.273067797s ago: executing program 2 (id=9979): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000004c0)={0xd8a, 0x0, 0x5, 0x2074, 0x8, 0x0, [{0x5, 0x9, 0xfffffffffffffffb, '\x00', 0x900}, {0x7, 0x8a75, 0x3, '\x00', 0x201}, {0x4, 0x8, 0x7, '\x00', 0x409}, {0x8, 0x8, 0x6a1, '\x00', 0x1280}, {0xff, 0x3, 0x7, '\x00', 0x100}, {0x9, 0x1, 0xa, '\x00', 0x2}, {0x7, 0x3, 0x0, '\x00', 0xa00}, {0x9, 0x10000, 0x4, '\x00', 0x7}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0xb8}}, 0x0) r3 = epoll_create(0xea3) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) shutdown(r0, 0x1) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e) connect$unix(r5, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xb0000001}) 9.10160617s ago: executing program 2 (id=9981): socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x20000005) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002e0009003fbd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) close(0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x8, 0x7, 0x0, 0xbb, 0x1e, 0x1000, 0xf}, 0x9c) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048860}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(r3, 0x0, 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) 5.290532575s ago: executing program 2 (id=9985): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="fc000000190001000000000000000000e000000200"/46, @ANYRES32=r0], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001002bbd7000fffffffffc0200000000000000000000000000006401010200000000000001a80000000000040000000000820a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa000000000000000000000000fe80000000000000000000000000000afe8800000000000000000000000001010a010100000000008df0f9c499d279"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 5.052461568s ago: executing program 2 (id=9989): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r1, &(0x7f00000000c0)="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", 0xfd, 0x40, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @private=0xa010101}, 0x0, 0x0, 0x3}}, 0x80) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x61, 0x89, 0xfffffe00, 0x6a, @remote, @dev={0xfe, 0x80, '\x00', 0x19}, 0x8, 0x7, 0x1, 0x400}}) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000340)={0x1, 0x4, 0x26, 0x200, @vifc_lcl_ifindex=r5, @loopback}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@empty, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0x0, 0x2000000}, 0x70bd2d, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x200, "210466d38547aa140db90100000000c54222cb7a"}}, @lastused={0xc, 0xf, 0x100}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.419755167s ago: executing program 2 (id=9996): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4.141013703s ago: executing program 2 (id=9998): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003001e030500e1000c0400070080000300", 0x33a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000740)={0x88, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 'wrr\x00', 0x25, 0x3, 0x5}, 0x2c) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040013"], 0x24}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000130000000000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a00000000000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000004fc0100000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1f3761c261d6f77ff211cf4e52cffda7b0dff4da6e1402dba62ebc977ae367b037334b33169d9ed01"], 0x190) unshare(0x6a040000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) r4 = socket(0x1d, 0x3, 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000fcdbdf251500000068000580080001007564700007000100696200000800010065746800080001002574680044000280080001001b000000080004000200000008000200fbffffff08000200ce090000080001001b000000080003000008000008000200060000000800020000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000001) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x12) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000200)={0x8, 0x8, [0x7, 0x3, 0xa41], &(0x7f00000001c0)=[0x0]}) sendmmsg(r6, &(0x7f0000000800), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r7, @ANYBLOB="0000000046146224280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000427bd7000ffdbdf253700000008000300", @ANYRES32=r9, @ANYBLOB="080027000000fbff08002700642f81a50500180105000000080057000000000008000eb1b6d95eea0e47b5f156f0090000000800a10076000000080022010d000000ad73e9382e6528d012428512b0b1f662e90dbe2dbf0199f89dc6eddeec1663f2a106ecdfc196feffd1b2f55daef5747aced659e32302d8373dde9e14ed54bc7d43fde70ed49a960870bed915d2155a136dd009b7472487e9a25380d86781667cafe6a586b7848300c43edf6a6e879bde9f2e6db238fbc5522bd841815f15eb978476d466bf127381e5c9ca93969bfae18f3918541b113284303450144c1722dfc6f4aafbb50af5cdfddfbef62d481de5b6622640fdef479b698109c11b2a03d64b78c372aeed0b8c"], 0x54}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) unshare(0x6a040000) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf25010000000000000009410000004c0018000000007379ffff000000000000000000000000000000000000000000004000"/98], 0x68}, 0x1, 0x0, 0x0, 0x20004895}, 0x40000) 4.140304825s ago: executing program 1 (id=9999): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x5, 0x14e, [0x0, 0x2000000009c0, 0x2000000009f0, 0x200000000c5c, 0x600], 0x0, 0x0, &(0x7f00000009c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x1, 0x888e, 'veth0_to_bond\x00', 'ip_vti0\x00', 'ipvlan1\x00', 'veth1\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xa93792fedf5da7b5], @local, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x5, {0x8000000000000000}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x1c6) 4.032360401s ago: executing program 1 (id=10001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x80000000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) unshare(0x20000400) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r6, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x0, 0x3f, 0x0, 0x8, 0xfffffffd}, 0x28) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r8, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3.545241291s ago: executing program 3 (id=10004): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.445805621s ago: executing program 3 (id=10006): socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x3d) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0x2ee9, 0x8200, 0x7, 0xaa6e}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r6, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000300)={0xfffc, 0x2, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f00000002c0)=[{r3, 0x6000}, {0xffffffffffffffff, 0x2000}, {r4, 0xa0}], 0x3, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x118, 0x80, 0x0, 0x0, 0x42}, 0x10) connect$llc(r7, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000002000010027bd7000fedbdf250a1480000100000321000300140001002001000000000000000000000000000214000200fc0000000000000000000000000000012c"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c00000010003904000000ff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 2.625415547s ago: executing program 0 (id=10010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0xffff, 0xe}, {0x5, 0xfff3}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x8001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x7c}, 0x1, 0x0, 0x0, 0x4004816}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140000001100"], 0xc8}}, 0x0) close(r5) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x780f, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x80, 0xd]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000006c0)={0x9, 0x9, 0x5, 0xce}, 0x8) socketpair(0x23, 0x4, 0x5, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r9, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}]}, @NL80211_ATTR_CQM={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x80) 2.125381481s ago: executing program 3 (id=10011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.swap.events\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000003c0)=0x56d4, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0xff], 'virt_wifi0\x00', 'geneve1\x00', {}, {}, 0x3a, 0x10, 0x0, 0x60}, 0x0, 0xe0, 0x128, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x19a}, {0x1}], 0x1, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@srh={{0x30}, {0x21, 0x3, 0x4, 0x7, 0x8001, 0x84, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x48090) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f00000001c0)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000021c0)="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", 0x666}], 0x1}}], 0x1, 0x2090) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x1) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x400c890) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @private=0xa010102}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)='tunl0\x00', 0x3, 0xf, 0x4}) 2.094811096s ago: executing program 1 (id=10012): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltaction={0x58, 0x31, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x107, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000040)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1a, @rand_addr=0x64010108}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000440)={'pim6reg1\x00', @broadcast}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010025bd7000fddbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="ac350849cf9bd27bb7a9a0762e0e6f39efd008b9d562764c3ea258b77c6e4e8c0151f89a497a5193faf12103de7e0944d8de30dab1981f5b35aeb22e018e776f2327dec6f9976629d29bbae8e3c684a541c45c138e520cfd5bca57951fe098486a4c352b7da1c7050b07a3dc751a153dd3ae1e73c966a25dfa722cd3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) 1.676770258s ago: executing program 4 (id=10014): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r4, 0x7f62c4469923ede5}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044041}, 0x10) 1.626922318s ago: executing program 0 (id=10015): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pwritev(r0, 0x0, 0x0, 0x4000000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="ca0000000f002f6552961d556cfc3af4b8ef2120748c0c70690458cb2458e1b8fd99188f41fd1003909bd132a29797a20300000000000000eb1fdf26437f37ae865901e2c13cf3e1143f4dbbbcb6d68bd669d742f649c77e45b50a81a13cfffdc53f192bd31ca2599d5c08a46ce916a098262e0903bb419875b118aba66ee0ab49a8c43c6049b33b3566d8fa7a5747ea2f272798c13693de79ab029e7f"]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="010000002100000000000000000000008580000075220000a500000023000000a9"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x3d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet(0xa, 0x801, 0x0) sendmsg$sock(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100000000e0a01010001000000000000010000020900021073797a32000000000900010073797a3012e44fd6a6e5080ad749000000140000001100010000000000000000000084000a00000000000000000000000000001700f6aea8da18fef2526365fa40cef8d9a47de0ad0e1d693a47c7d1380f9bbc"], 0x54}}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000002000000000000000500000018450000fdffffff000000000000000018110000634624f3f2b8c90f738071f99f80a5c99b6ef83946273b98ba57bb6ca4b4b0eccadf", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ff0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000"], &(0x7f0000000140)='GPL\x00', 0x5, 0xc, &(0x7f0000000500)=""/12, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x1], &(0x7f0000000680)=[{0x4, 0x2, 0x3, 0x8}, {0x4, 0x1, 0xc, 0x3}, {0x1, 0x1, 0xe, 0x3468c2186a0793f3}, {0x5, 0x3, 0x8, 0xb}, {0x5, 0x3, 0x5, 0xb}, {0x4, 0x3, 0x0, 0xb}, {0x0, 0x3, 0x6, 0x6}, {0x4, 0x2, 0xc, 0x3}, {0x0, 0x1, 0x2, 0x8}], 0x10, 0x2}, 0x94) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x400013b, 0x20046054) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) 1.568434667s ago: executing program 3 (id=10016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180000180000000000000000fdffffff180100002020692500000000002020207b1af8ff00000000bfa1200000000000070100000000ffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfd9, &(0x7f0000001e00)=""/4057, 0x0, 0x50}, 0x94) 1.277392993s ago: executing program 3 (id=10017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}]}, &(0x7f0000000280)=0x10) (fail_nth: 66) 1.266554703s ago: executing program 0 (id=10018): recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="fc000000190001000000000000000000e000000200"/46, @ANYRES32=r2], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001002bbd7000fffffffffc0200000000000000000000000000006401010200000000000000000000000000040000000000820a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa000000000000000000000000fe80000000000000000000000000000afe8800000000000000000000000001010a010100000000008df0f9c499d279"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r5, 0x3c, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e21, 0x0, @remote, 0x22c1}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x5}, 0x8) 1.253563178s ago: executing program 4 (id=10019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) (fail_nth: 10) 1.085268621s ago: executing program 3 (id=10020): socket$kcm(0x10, 0x2, 0x4) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x2043, 0x4, 0x1, 0x3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2600, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x80) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xd}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572309ffeffa5ac581184adf9ee54ae2615c239679f351c6c76a8be8edd948d5e6caec97ff2740620558ac1e13e081738eaad73250e658fef08b2"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f000005000000000800000008000000000000009846a4f5eca4585dc95303c311b083fc79005fde8b4be3d0ff468ca54fd9871d26d3261dff298d3bf47940d602a7c3d04b79143da22e69dde0d3c106f2ff1aa4ffdf8b77c47892bbc876d5a60a7b10072506707fff6c4caabbeb95502ba14c0553d4ea87c1bb6e60e9db428792bac269b140631da5097e35a37f2777ba477e89bfcfaf4f609de079d616182369f9eb36028f05a500"/178, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 793.5147ms ago: executing program 4 (id=10021): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 752.375488ms ago: executing program 0 (id=10022): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800fff500000000000500fffe0900010073797a300000000040000000030a01030004000000000000050000000900010073797a30000000000900030073797a30000000001400048008000240000000120800014000000000140000001100010000020000000000000000000a"], 0x88}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c80)}], 0x1}, 0x894) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xa, 0x148, 0x0, 0x60, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x3}, 0x0, 0x100, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x330, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x7, 0x1, 0x0, {0x8}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) 651.986838ms ago: executing program 1 (id=10023): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000003000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) 500.999234ms ago: executing program 4 (id=10024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r6, 0x29, 0xd0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000600)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x2, 0x8, 0x8000000000000000, 0x7, 0x3], 0x5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r10, @ANYBLOB="14000500fe"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6tnl0\x00', r10, 0x29, 0x7, 0x40, 0x4, 0x30, @rand_addr=' \x01\x00', @private0, 0x7, 0x747, 0xfffffffd, 0xdb}}) r11 = openat$cgroup_pressure(r7, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000040)={'full', 0x20, 0xfd6, 0x20, 0xfffffffffffffff7}, 0x2f) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}], 0x40, 0x20044044}}], 0x1, 0x4) ppoll(&(0x7f00000000c0)=[{r4, 0x44}], 0x1, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}, @FRA_FLOW={0x8, 0xb, 0xffffffff}]}, 0x34}}, 0x0) r15 = socket(0x10, 0x803, 0x0) r16 = socket(0x1, 0x803, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r17, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b2"], 0x2c}}, 0x0) sendmsg$AUDIT_USER_TTY(r15, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xe0, 0x464, 0x400, 0x70bd26, 0x25dfdbff, "f785e96ebfe9b8a538df341ff2df7ea6fd3217b62efccea9d0aa18e15e014bb5a88882f49b67d5994114a39155c566a78b9505e8093fea712ddaac4cc4e8d3a4b84b869107e11a9271c434d309dd7572589a7ae9d56cb12124dede0da86de3703e151afcc75379cdd7007a11f4b6ebbbc1a024a8f039db429e1b3bfc1beb76c6800233b04980822d2fd5c485594c6aedcd7abdc4a84419e4c22bc24d0d53955f99ab9e5116b6f793254437da03cbe37430d7d2eb71df8ad55fe869621beba48bf64096666bbf15290052f80c19", ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x80d0}, 0x40000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, 0x40, 0x1, 0x7fffc, 0x4, {0xd}, [@nested={0x4, 0x48}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xf2}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 451.798689ms ago: executing program 0 (id=10025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000a6ffffff0a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 245.229935ms ago: executing program 1 (id=10026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x4000000) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x100, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x32, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, "00186371ae9b1c03"}}}}}, 0x0) 193.308311ms ago: executing program 4 (id=10027): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) (fail_nth: 53) 192.915756ms ago: executing program 0 (id=10028): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)=')\x00\x00', 0x3) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffef", @ANYRES16=r3, @ANYBLOB="cd3e000000000200000001000000"], 0x14}, 0x1, 0x0, 0x0, 0xa00}, 0x48880) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000b0601080000000000000000070000000900020073797a310000000005000100070000003400078018"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x601, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xfff1, 0xffe0}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 59.219372ms ago: executing program 1 (id=10029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0xfffffffffffffffc, {0x2, 0xf0, 0x4}, 0xff}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}]}}]}, 0x40}}, 0x4000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x20040000) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641", 0x3}], 0x1}, 0x4048081) 0s ago: executing program 4 (id=10030): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x1, 0x80000, @local, 0xf}, 0x1c, 0x0, 0x0, &(0x7f0000001180)=[@rthdr={{0x18, 0x29, 0x39, {0xff, 0x0, 0x2, 0xa}}}], 0x18}, 0x40048d0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@acquire={0x274, 0x17, 0x300, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x80, 0x2c, 0x0, r2}, {{@in=@private=0xa010102, @in=@multicast2, 0x4e22, 0xf, 0x4e20, 0x3a, 0x0, 0x80, 0x80, 0x5e, r3, r4}, {0x75, 0x7fff, 0x566d, 0x3, 0x9, 0x5, 0xfad, 0x1}, {0x1, 0x6, 0x8, 0x1}, 0x7ff, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0x77, 0x80000000, 0x3, 0x70bd2b}, [@encap={0x1c, 0x4, {0x3, 0x4e23, 0x4e21, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, @extra_flags={0x8}, @srcaddr={0x14, 0xd, @in=@broadcast}, @algo_aead={0xe5, 0x12, {{'aegis128l-generic\x00'}, 0x4c8, 0x80, "4d09c8ca855928634c93dbe6471fd2ef350f4e1499a195227c8a0523523380504d0e12c87923e9a2cd56f050a103ee1efb90be752f44c30d87404a57ec9b69110ae1cd47d983c5fd2cc135b1b84c4d6e5b6760515d830edca7841da079dbdbfa64f747610c5eba6e95defbd6553d6c8871b3196cb4a169d067f133bccff156b23eeb2b6db0416b5c7781dba43a2c6a1df6b8c4dbaaf07f7281"}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0xa}}]}, 0x274}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) kernel console output (not intermixed with test programs): [ 1211.226904][ T7714] ? __fget_files+0x3a0/0x420 [ 1211.226941][ T7714] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1211.226965][ T7714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1211.226997][ T7714] ? __pfx_ksys_write+0x10/0x10 [ 1211.227030][ T7714] do_syscall_64+0xe2/0xf80 [ 1211.227060][ T7714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.227081][ T7714] ? trace_irq_disable+0x37/0x100 [ 1211.227108][ T7714] ? clear_bhb_loop+0x60/0xb0 [ 1211.227133][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.227155][ T7714] RIP: 0033:0x7f11bbd9acb9 [ 1211.227175][ T7714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.227193][ T7714] RSP: 002b:00007f11bcc60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1211.227218][ T7714] RAX: ffffffffffffffda RBX: 00007f11bc015fa0 RCX: 00007f11bbd9acb9 [ 1211.227233][ T7714] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 1211.227247][ T7714] RBP: 00007f11bcc60090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.227261][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.227275][ T7714] R13: 00007f11bc016038 R14: 00007f11bc015fa0 R15: 00007ffc583e4f48 [ 1211.227309][ T7714] [ 1211.583395][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.577009][ T7625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1212.598608][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.603387][ T7625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1212.627177][ T7529] Set syz1 is full, maxelem 65536 reached [ 1212.689346][ T7625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1212.729243][ T7625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1212.870713][ T7759] netlink: 'syz.1.9255': attribute type 1 has an invalid length. [ 1212.900632][ T7422] hid-generic 0005:0006:5508.0045: item fetching failed at offset 3/4 [ 1212.934351][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9255'. [ 1212.955635][ T7422] hid-generic 0005:0006:5508.0045: probe with driver hid-generic failed with error -22 [ 1213.056388][ T7759] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1213.072532][ T7764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9255'. [ 1213.082421][ T5834] Bluetooth: hci5: command tx timeout [ 1213.164881][ T7759] netlink: 'syz.1.9255': attribute type 2 has an invalid length. [ 1213.244417][ T7759] !©9: entered promiscuous mode [ 1213.352604][ T7625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.396853][ T7424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.469436][ T7625] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.507883][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.515426][ T7209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.595350][ T8416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.602808][ T8416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.637404][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.656134][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9262'. [ 1213.895571][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9263'. [ 1213.926124][ T7797] FAULT_INJECTION: forcing a failure. [ 1213.926124][ T7797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.955399][ T7797] CPU: 1 UID: 0 PID: 7797 Comm: syz.3.9265 Not tainted syzkaller #0 PREEMPT(full) [ 1213.955429][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1213.955443][ T7797] Call Trace: [ 1213.955452][ T7797] [ 1213.955461][ T7797] dump_stack_lvl+0xe8/0x150 [ 1213.955503][ T7797] should_fail_ex+0x412/0x560 [ 1213.955538][ T7797] _copy_to_user+0x31/0xb0 [ 1213.955563][ T7797] bpf_test_finish+0x53c/0x6b0 [ 1213.955598][ T7797] ? __pfx_bpf_test_finish+0x10/0x10 [ 1213.955618][ T7797] ? eth_type_trans+0x35e/0x6d0 [ 1213.955655][ T7797] bpf_prog_test_run_skb+0x114f/0x1d50 [ 1213.955693][ T7797] ? __fget_files+0x2a/0x420 [ 1213.955718][ T7797] ? __fget_files+0x3a0/0x420 [ 1213.955742][ T7797] ? __fget_files+0x2a/0x420 [ 1213.955771][ T7797] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1213.955796][ T7797] bpf_prog_test_run+0x2c7/0x340 [ 1213.955831][ T7797] __sys_bpf+0x5cb/0x920 [ 1213.955860][ T7797] ? __pfx___sys_bpf+0x10/0x10 [ 1213.955906][ T7797] ? ksys_write+0x242/0x270 [ 1213.955929][ T7797] ? __pfx_ksys_write+0x10/0x10 [ 1213.955958][ T7797] __x64_sys_bpf+0x7c/0x90 [ 1213.955990][ T7797] do_syscall_64+0xe2/0xf80 [ 1213.956021][ T7797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.956038][ T7797] ? trace_irq_disable+0x37/0x100 [ 1213.956064][ T7797] ? clear_bhb_loop+0x60/0xb0 [ 1213.956088][ T7797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.956108][ T7797] RIP: 0033:0x7fd7c799acb9 [ 1213.956127][ T7797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.956146][ T7797] RSP: 002b:00007fd7c889b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1213.956170][ T7797] RAX: ffffffffffffffda RBX: 00007fd7c7c15fa0 RCX: 00007fd7c799acb9 [ 1213.956186][ T7797] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1213.956198][ T7797] RBP: 00007fd7c889b090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.956210][ T7797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.956221][ T7797] R13: 00007fd7c7c16038 R14: 00007fd7c7c15fa0 R15: 00007ffc2d8669b8 [ 1213.956253][ T7797] [ 1214.542561][T30355] hid-generic 0005:0006:5508.0046: item fetching failed at offset 3/4 [ 1214.574459][T30355] hid-generic 0005:0006:5508.0046: probe with driver hid-generic failed with error -22 [ 1214.680058][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.746606][ T7824] netlink: 'syz.3.9271': attribute type 16 has an invalid length. [ 1214.770726][ T7824] netlink: 444 bytes leftover after parsing attributes in process `syz.3.9271'. [ 1214.814716][ T7625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.922630][T17084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.042171][ T7832] sctp: [Deprecated]: syz.3.9271 (pid 7832) Use of int in max_burst socket option deprecated. [ 1215.042171][ T7832] Use struct sctp_assoc_value instead [ 1215.156755][ T5834] Bluetooth: hci5: command tx timeout [ 1215.423979][ T7845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9276'. [ 1215.474419][ T7819] FAULT_INJECTION: forcing a failure. [ 1215.474419][ T7819] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1215.489318][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.2.9270 Not tainted syzkaller #0 PREEMPT(full) [ 1215.489346][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1215.489359][ T7819] Call Trace: [ 1215.489369][ T7819] [ 1215.489378][ T7819] dump_stack_lvl+0xe8/0x150 [ 1215.489412][ T7819] should_fail_ex+0x412/0x560 [ 1215.489458][ T7819] get_futex_key+0x1ac/0x1690 [ 1215.489492][ T7819] ? __pfx_get_futex_key+0x10/0x10 [ 1215.489514][ T7819] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1215.489550][ T7819] futex_wake+0x114/0x580 [ 1215.489583][ T7819] ? __pfx_futex_wake+0x10/0x10 [ 1215.489613][ T7819] ? exit_mm_release+0x1a/0x30 [ 1215.489641][ T7819] do_futex+0x395/0x420 [ 1215.489659][ T7819] ? __might_fault+0xaf/0x130 [ 1215.489688][ T7819] ? __pfx_do_futex+0x10/0x10 [ 1215.489710][ T7819] ? __might_fault+0xaf/0x130 [ 1215.489735][ T7819] mm_release+0x103/0x290 [ 1215.489757][ T7819] exit_mm+0x51/0x220 [ 1215.489782][ T7819] ? unwind_deferred_task_exit+0x67/0xa0 [ 1215.489811][ T7819] do_exit+0x62e/0x2310 [ 1215.489840][ T7819] ? cgroup1_freezing+0x20/0x350 [ 1215.489867][ T7819] ? __pfx_do_exit+0x10/0x10 [ 1215.489896][ T7819] ? cgroup1_freezing+0x20/0x350 [ 1215.489919][ T7819] ? cgroup1_freezing+0x20/0x350 [ 1215.489952][ T7819] do_group_exit+0x21b/0x2d0 [ 1215.489980][ T7819] ? _raw_spin_unlock_irq+0x23/0x50 [ 1215.490011][ T7819] get_signal+0x1284/0x1330 [ 1215.490060][ T7819] arch_do_signal_or_restart+0xbc/0x830 [ 1215.490091][ T7819] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1215.490126][ T7819] ? ksys_write+0x242/0x270 [ 1215.490154][ T7819] exit_to_user_mode_loop+0x86/0x480 [ 1215.490177][ T7819] ? rcu_is_watching+0x15/0xb0 [ 1215.490206][ T7819] do_syscall_64+0x2b7/0xf80 [ 1215.490233][ T7819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.490252][ T7819] ? trace_irq_disable+0x37/0x100 [ 1215.490278][ T7819] ? clear_bhb_loop+0x60/0xb0 [ 1215.490303][ T7819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.490323][ T7819] RIP: 0033:0x7f11bbd9acb9 [ 1215.490342][ T7819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.490360][ T7819] RSP: 002b:00007f11bcc60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1215.490383][ T7819] RAX: fffffffffffffe00 RBX: 00007f11bc015fa0 RCX: 00007f11bbd9acb9 [ 1215.490398][ T7819] RDX: 0000000000000002 RSI: 0000200000002140 RDI: 0000000000000003 [ 1215.490411][ T7819] RBP: 00007f11bcc60090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.490424][ T7819] R10: 0000000000002090 R11: 0000000000000246 R12: 0000000000000001 [ 1215.490452][ T7819] R13: 00007f11bc016038 R14: 00007f11bc015fa0 R15: 00007ffc583e4f48 [ 1215.490484][ T7819] [ 1215.578477][ T7625] veth0_vlan: entered promiscuous mode [ 1215.805643][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.876274][ T7625] veth1_vlan: entered promiscuous mode [ 1216.020637][ T7625] veth0_macvtap: entered promiscuous mode [ 1216.115979][ T7625] veth1_macvtap: entered promiscuous mode [ 1216.251584][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.321995][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.395230][ T316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.428952][ T316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.441404][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.470808][ T316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.521027][ T316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.814650][ T316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.843497][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.883896][ T316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.021131][ T316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.055994][ T7894] netlink: 'syz.2.9289': attribute type 16 has an invalid length. [ 1217.064535][ T316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.081359][ T7894] netlink: 444 bytes leftover after parsing attributes in process `syz.2.9289'. [ 1217.245989][ T7900] FAULT_INJECTION: forcing a failure. [ 1217.245989][ T7900] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.278772][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9290'. [ 1217.316736][ T7905] sctp: [Deprecated]: syz.2.9289 (pid 7905) Use of int in max_burst socket option deprecated. [ 1217.316736][ T7905] Use struct sctp_assoc_value instead [ 1217.346182][ T7900] CPU: 1 UID: 0 PID: 7900 Comm: syz.1.9291 Not tainted syzkaller #0 PREEMPT(full) [ 1217.346220][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1217.346233][ T7900] Call Trace: [ 1217.346242][ T7900] [ 1217.346252][ T7900] dump_stack_lvl+0xe8/0x150 [ 1217.346356][ T7900] should_fail_ex+0x412/0x560 [ 1217.346400][ T7900] should_failslab+0xa8/0x100 [ 1217.346427][ T7900] __kvmalloc_node_noprof+0x166/0x8d0 [ 1217.346451][ T7900] ? nf_hook_entries_grow+0x288/0x720 [ 1217.346485][ T7900] nf_hook_entries_grow+0x288/0x720 [ 1217.346524][ T7900] __nf_register_net_hook+0x2c9/0x930 [ 1217.346557][ T7900] nf_register_net_hook+0xb2/0x190 [ 1217.346579][ T7900] nf_register_net_hooks+0x44/0x1b0 [ 1217.346607][ T7900] nf_ct_netns_do_get+0x3bf/0x5c0 [ 1217.346639][ T7900] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1217.346666][ T7900] ? nft_parse_register_load+0x31e/0x3b0 [ 1217.346696][ T7900] ? nft_nat_init+0x505/0x6c0 [ 1217.346723][ T7900] nf_tables_newrule+0x17ac/0x28b0 [ 1217.346793][ T7900] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1217.346821][ T7900] ? nfnl_pernet+0x23/0x240 [ 1217.346842][ T7900] ? nfnl_pernet+0x23/0x240 [ 1217.346874][ T7900] ? __nla_parse+0x40/0x60 [ 1217.346900][ T7900] nfnetlink_rcv+0x1240/0x27b0 [ 1217.346962][ T7900] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1217.347003][ T7900] ? ref_tracker_free+0x693/0x840 [ 1217.347067][ T7900] ? __netlink_deliver_tap+0x807/0x850 [ 1217.347091][ T7900] ? netlink_deliver_tap+0x2e/0x1b0 [ 1217.347135][ T7900] netlink_unicast+0x80f/0x9b0 [ 1217.347166][ T7900] ? __pfx_netlink_unicast+0x10/0x10 [ 1217.347190][ T7900] ? netlink_sendmsg+0x650/0xb40 [ 1217.347211][ T7900] ? skb_put+0x11b/0x210 [ 1217.347246][ T7900] netlink_sendmsg+0x813/0xb40 [ 1217.347283][ T7900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.347310][ T7900] ? aa_file_perm+0x12d/0x1630 [ 1217.347339][ T7900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1217.347370][ T7900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1217.347391][ T7900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.347419][ T7900] __sock_sendmsg+0x21c/0x270 [ 1217.347450][ T7900] ____sys_sendmsg+0x4d7/0x810 [ 1217.347471][ T7900] ? __might_fault+0xaf/0x130 [ 1217.347509][ T7900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1217.347540][ T7900] ? import_iovec+0x73/0xa0 [ 1217.347567][ T7900] ___sys_sendmsg+0x2a5/0x360 [ 1217.347589][ T7900] ? __lock_acquire+0x6b5/0x2cf0 [ 1217.347619][ T7900] ? __pfx____sys_sendmsg+0x10/0x10 [ 1217.347682][ T7900] ? __fget_files+0x2a/0x420 [ 1217.347708][ T7900] ? __fget_files+0x3a0/0x420 [ 1217.347746][ T7900] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1217.347781][ T7900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1217.347815][ T7900] ? __pfx_ksys_write+0x10/0x10 [ 1217.347851][ T7900] do_syscall_64+0xe2/0xf80 [ 1217.347883][ T7900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.347904][ T7900] ? trace_irq_disable+0x37/0x100 [ 1217.347931][ T7900] ? clear_bhb_loop+0x60/0xb0 [ 1217.347958][ T7900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.347979][ T7900] RIP: 0033:0x7fc521b9acb9 [ 1217.348002][ T7900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.348021][ T7900] RSP: 002b:00007fc522a7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1217.348046][ T7900] RAX: ffffffffffffffda RBX: 00007fc521e15fa0 RCX: 00007fc521b9acb9 [ 1217.348062][ T7900] RDX: 0000000004040080 RSI: 0000200000000280 RDI: 0000000000000003 [ 1217.348076][ T7900] RBP: 00007fc522a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.348090][ T7900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1217.348102][ T7900] R13: 00007fc521e16038 R14: 00007fc521e15fa0 R15: 00007ffd753bf398 [ 1217.348140][ T7900] [ 1218.075610][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9293'. [ 1218.141410][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9293'. [ 1218.181017][T30766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.620927][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9298'. [ 1218.669800][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9298'. [ 1218.715878][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9301'. [ 1218.889397][ T7950] sit0: entered allmulticast mode [ 1219.009228][ T5889] hid-generic 0005:0006:5508.0047: item fetching failed at offset 3/4 [ 1219.070607][ T5889] hid-generic 0005:0006:5508.0047: probe with driver hid-generic failed with error -22 [ 1219.082890][ T7958] bridge_slave_0: left allmulticast mode [ 1219.127537][ T7958] bridge_slave_0: left promiscuous mode [ 1219.143082][ T7956] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9304'. [ 1219.144062][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.176753][ T7967] netlink: 'syz.0.9306': attribute type 16 has an invalid length. [ 1219.184947][ T7967] netlink: 444 bytes leftover after parsing attributes in process `syz.0.9306'. [ 1219.249589][ T7958] bridge_slave_1: left allmulticast mode [ 1219.271336][ T7958] bridge_slave_1: left promiscuous mode [ 1219.297151][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.310909][ T7973] netlink: 'syz.4.9302': attribute type 10 has an invalid length. [ 1219.330559][ T7958] bond0: (slave bond_slave_0): Releasing backup interface [ 1219.353248][ T7958] bond0: (slave bond_slave_1): Releasing backup interface [ 1219.379468][ T7958] team0: Port device team_slave_0 removed [ 1219.407467][ T7976] sctp: [Deprecated]: syz.0.9306 (pid 7976) Use of int in max_burst socket option deprecated. [ 1219.407467][ T7976] Use struct sctp_assoc_value instead [ 1219.438336][ T7958] team0: Port device team_slave_1 removed [ 1219.445839][ T7958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.454013][ T7958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.464146][ T7958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.473002][ T7958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.485365][ T7958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1219.655126][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9311'. [ 1219.659397][ T7973] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1219.710953][ T7975] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1219.741018][ T7975] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1219.755030][ T7975] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1219.968682][ T7990] syzkaller0: entered promiscuous mode [ 1219.996758][ T7990] syzkaller0: entered allmulticast mode [ 1220.040843][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9315'. [ 1220.046924][ T7990] 0: reclassify loop, rule prio 0, protocol 800 [ 1220.143844][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9314'. [ 1220.279329][ T8004] openvswitch: netlink: IP tunnel dst address not specified [ 1220.754651][ T615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1220.768209][ T615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1220.779018][ T615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1220.788258][ T615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1220.798244][ T615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1220.979528][ T7422] hid-generic 0005:0006:5508.0048: item fetching failed at offset 3/4 [ 1221.020347][ T7422] hid-generic 0005:0006:5508.0048: probe with driver hid-generic failed with error -22 [ 1221.230483][T17084] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.452974][T17084] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.483348][T17084] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.507218][ T8021] lo speed is unknown, defaulting to 1000 [ 1221.523093][T17084] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.565401][ T8021] lo speed is unknown, defaulting to 1000 [ 1221.676707][ T8032] netlink: 'syz.2.9325': attribute type 16 has an invalid length. [ 1221.688503][ T8021] lo speed is unknown, defaulting to 1000 [ 1221.723104][ T8031] syzkaller0: entered promiscuous mode [ 1221.729343][ T8031] syzkaller0: entered allmulticast mode [ 1221.745098][ T8021] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1221.918622][ T8021] lo speed is unknown, defaulting to 1000 [ 1221.935657][ T8035] sctp: [Deprecated]: syz.2.9325 (pid 8035) Use of int in max_burst socket option deprecated. [ 1221.935657][ T8035] Use struct sctp_assoc_value instead [ 1222.003821][ T8021] lo speed is unknown, defaulting to 1000 [ 1222.054804][ T8021] lo speed is unknown, defaulting to 1000 [ 1222.096897][ T8021] lo speed is unknown, defaulting to 1000 [ 1222.158895][ T8021] lo speed is unknown, defaulting to 1000 [ 1222.261321][ T8021] lo speed is unknown, defaulting to 1000 [ 1222.335077][ T8021] lo speed is unknown, defaulting to 1000 [ 1222.485930][ T8040] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1222.811295][ T8010] chnl_net:caif_netlink_parms(): no params data found [ 1222.840886][ T5834] Bluetooth: hci2: command tx timeout [ 1222.970833][T30355] hid-generic 0005:0006:5508.0049: item fetching failed at offset 3/4 [ 1222.976471][ T8064] FAULT_INJECTION: forcing a failure. [ 1222.976471][ T8064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1222.992996][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.4.9334 Not tainted syzkaller #0 PREEMPT(full) [ 1222.993025][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1222.993037][ T8064] Call Trace: [ 1222.993046][ T8064] [ 1222.993055][ T8064] dump_stack_lvl+0xe8/0x150 [ 1222.993086][ T8064] should_fail_ex+0x412/0x560 [ 1222.993118][ T8064] _copy_to_user+0x31/0xb0 [ 1222.993141][ T8064] bpf_test_finish+0x53c/0x6b0 [ 1222.993172][ T8064] ? __pfx_bpf_test_finish+0x10/0x10 [ 1222.993192][ T8064] ? eth_type_trans+0x35e/0x6d0 [ 1222.993226][ T8064] bpf_prog_test_run_skb+0x114f/0x1d50 [ 1222.993261][ T8064] ? __fget_files+0x2a/0x420 [ 1222.993284][ T8064] ? __fget_files+0x3a0/0x420 [ 1222.993305][ T8064] ? __fget_files+0x2a/0x420 [ 1222.993332][ T8064] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1222.993353][ T8064] bpf_prog_test_run+0x2c7/0x340 [ 1222.993397][ T8064] __sys_bpf+0x5cb/0x920 [ 1222.993426][ T8064] ? __pfx___sys_bpf+0x10/0x10 [ 1222.993468][ T8064] ? ksys_write+0x242/0x270 [ 1222.993489][ T8064] ? __pfx_ksys_write+0x10/0x10 [ 1222.993515][ T8064] __x64_sys_bpf+0x7c/0x90 [ 1222.993540][ T8064] do_syscall_64+0xe2/0xf80 [ 1222.993567][ T8064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.993585][ T8064] ? trace_irq_disable+0x37/0x100 [ 1222.993608][ T8064] ? clear_bhb_loop+0x60/0xb0 [ 1222.993631][ T8064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.993647][ T8064] RIP: 0033:0x7faa0279acb9 [ 1222.993667][ T8064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.993684][ T8064] RSP: 002b:00007faa035ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1222.993706][ T8064] RAX: ffffffffffffffda RBX: 00007faa02a15fa0 RCX: 00007faa0279acb9 [ 1222.993721][ T8064] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1222.993734][ T8064] RBP: 00007faa035ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.993746][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.993758][ T8064] R13: 00007faa02a16038 R14: 00007faa02a15fa0 R15: 00007ffc06212fe8 [ 1222.993790][ T8064] [ 1223.212287][T30355] hid-generic 0005:0006:5508.0049: probe with driver hid-generic failed with error -22 [ 1223.740762][ T8085] __nla_validate_parse: 6 callbacks suppressed [ 1223.740785][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9335'. [ 1224.926422][ T5834] Bluetooth: hci2: command tx timeout [ 1225.247508][ T1000] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1225.889473][ T1000] bond0 (unregistering): Released all slaves [ 1226.087556][ T1000] bond1 (unregistering): Released all slaves [ 1226.108802][ T1000] bond2 (unregistering): Released all slaves [ 1226.308183][ T1000] bond3 (unregistering): Released all slaves [ 1226.996367][ T5834] Bluetooth: hci2: command tx timeout [ 1227.051011][ T1000] tipc: Disabling bearer [ 1227.084133][ T1000] tipc: Left network mode [ 1227.084172][ T316] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.124343][ T316] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.152356][ T316] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.201239][ T316] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.289603][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.305287][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.323675][ T8010] bridge_slave_0: entered allmulticast mode [ 1227.332724][ T8010] bridge_slave_0: entered promiscuous mode [ 1227.355111][ T8111] netlink: 'syz.4.9339': attribute type 16 has an invalid length. [ 1227.379234][ T8111] netlink: 444 bytes leftover after parsing attributes in process `syz.4.9339'. [ 1227.468207][ T8119] netlink: 'syz.2.9340': attribute type 12 has an invalid length. [ 1227.527975][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.545903][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.554218][ T8010] bridge_slave_1: entered allmulticast mode [ 1227.564188][ T8010] bridge_slave_1: entered promiscuous mode [ 1227.688286][ T8123] sctp: [Deprecated]: syz.4.9339 (pid 8123) Use of int in max_burst socket option deprecated. [ 1227.688286][ T8123] Use struct sctp_assoc_value instead [ 1227.852344][ T8124] xt_CT: No such helper "netbios-ns" [ 1227.917285][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.939763][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.151260][ T8010] team0: Port device team_slave_0 added [ 1228.182137][ T8010] team0: Port device team_slave_1 added [ 1228.199405][ T8122] lo speed is unknown, defaulting to 1000 [ 1228.492915][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9347'. [ 1228.520023][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9347'. [ 1228.523139][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.560639][ T8100] hid-generic 0005:0006:5508.004A: item fetching failed at offset 3/4 [ 1228.570357][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.576105][ T8100] hid-generic 0005:0006:5508.004A: probe with driver hid-generic failed with error -22 [ 1228.608592][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.672362][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.696157][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.744409][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.757739][ T8148] netlink: 'syz.3.9350': attribute type 1 has an invalid length. [ 1228.765614][ T8148] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9350'. [ 1229.006156][ T1000] hsr_slave_0: left promiscuous mode [ 1229.021445][ T1000] hsr_slave_1: left promiscuous mode [ 1229.076440][ T5834] Bluetooth: hci2: command tx timeout [ 1231.224964][ T8162] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1231.283212][ T8010] hsr_slave_0: entered promiscuous mode [ 1231.291108][ T8010] hsr_slave_1: entered promiscuous mode [ 1231.297906][ T8010] debugfs: 'hsr0' already exists in 'hsr' [ 1231.303986][ T8010] Cannot create hsr debugfs directory [ 1231.448042][ T8199] netlink: 'syz.3.9356': attribute type 16 has an invalid length. [ 1231.457485][ T8199] netlink: 444 bytes leftover after parsing attributes in process `syz.3.9356'. [ 1231.698820][ T8203] sctp: [Deprecated]: syz.3.9356 (pid 8203) Use of int in max_burst socket option deprecated. [ 1231.698820][ T8203] Use struct sctp_assoc_value instead [ 1231.841218][ T1000] IPVS: stop unused estimator thread 0... [ 1232.756776][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9361'. [ 1232.765808][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9361'. [ 1232.818784][ T8229] FAULT_INJECTION: forcing a failure. [ 1232.818784][ T8229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1232.883789][ T8229] CPU: 0 UID: 0 PID: 8229 Comm: syz.1.9363 Not tainted syzkaller #0 PREEMPT(full) [ 1232.883821][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1232.883834][ T8229] Call Trace: [ 1232.883843][ T8229] [ 1232.883852][ T8229] dump_stack_lvl+0xe8/0x150 [ 1232.883885][ T8229] should_fail_ex+0x412/0x560 [ 1232.883920][ T8229] _copy_from_user+0x2d/0xb0 [ 1232.883943][ T8229] copy_from_sockptr_offset+0x66/0xa0 [ 1232.883973][ T8229] do_ip6t_set_ctl+0x93d/0xe10 [ 1232.884002][ T8229] ? rcu_is_watching+0x15/0xb0 [ 1232.884029][ T8229] ? trace_contention_end+0x39/0x100 [ 1232.884056][ T8229] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1232.884100][ T8229] ? __pfx___mutex_lock+0x10/0x10 [ 1232.884121][ T8229] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1232.884159][ T8229] ? __pfx_aa_sk_perm+0x10/0x10 [ 1232.884192][ T8229] nf_setsockopt+0x26f/0x290 [ 1232.884223][ T8229] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1232.884257][ T8229] do_sock_setsockopt+0x17c/0x1b0 [ 1232.884294][ T8229] __x64_sys_setsockopt+0x13d/0x1b0 [ 1232.884329][ T8229] do_syscall_64+0xe2/0xf80 [ 1232.884360][ T8229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.884380][ T8229] ? trace_irq_disable+0x37/0x100 [ 1232.884406][ T8229] ? clear_bhb_loop+0x60/0xb0 [ 1232.884431][ T8229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.884460][ T8229] RIP: 0033:0x7fc521b9acb9 [ 1232.884480][ T8229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.884498][ T8229] RSP: 002b:00007fc522a7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1232.884521][ T8229] RAX: ffffffffffffffda RBX: 00007fc521e15fa0 RCX: 00007fc521b9acb9 [ 1232.884537][ T8229] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1232.884550][ T8229] RBP: 00007fc522a7d090 R08: 0000000000000468 R09: 0000000000000000 [ 1232.884563][ T8229] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 1232.884576][ T8229] R13: 00007fc521e16038 R14: 00007fc521e15fa0 R15: 00007ffd753bf398 [ 1232.884610][ T8229] [ 1233.249941][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.282531][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.357174][ T8231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1233.614772][ T8236] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9366'. [ 1233.623947][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9367'. [ 1233.761237][ T8241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9366'. [ 1233.772275][ T8010] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1233.818740][ T8010] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1233.846413][ T8010] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1233.870483][ T8010] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1234.131644][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.155942][ T8257] netlink: 'syz.2.9371': attribute type 16 has an invalid length. [ 1234.186057][ T8010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.207322][ T8257] netlink: 444 bytes leftover after parsing attributes in process `syz.2.9371'. [ 1234.218890][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.226078][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.294994][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.302373][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.409590][ T8266] sctp: [Deprecated]: syz.2.9371 (pid 8266) Use of int in max_burst socket option deprecated. [ 1234.409590][ T8266] Use struct sctp_assoc_value instead [ 1234.881565][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.996562][ T8010] veth0_vlan: entered promiscuous mode [ 1235.026411][ T8010] veth1_vlan: entered promiscuous mode [ 1235.100592][ T8010] veth0_macvtap: entered promiscuous mode [ 1235.128910][ T8010] veth1_macvtap: entered promiscuous mode [ 1235.175976][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.222876][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.299700][ T1000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.339766][ T1000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.358087][ T1000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.378674][ T1000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.612393][ T907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.635921][ T907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.731258][ T8421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.755256][ T8421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.889886][ T8280] netlink: 136 bytes leftover after parsing attributes in process `syz.2.9378'. [ 1235.927991][ T907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.935963][ T907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.094719][ T8284] netlink: 'syz.0.9379': attribute type 6 has an invalid length. [ 1236.121265][ T8284] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9379'. [ 1236.168735][ T8285] wireguard0: entered promiscuous mode [ 1236.175162][ T8285] wireguard0: entered allmulticast mode [ 1236.238546][ T8285] team0: Device wireguard0 is of different type [ 1236.587173][ T8296] netlink: 'syz.3.9383': attribute type 16 has an invalid length. [ 1236.626681][ T8296] netlink: 444 bytes leftover after parsing attributes in process `syz.3.9383'. [ 1236.677562][ T8296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.706595][ T8296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.715251][ T8296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.737603][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.777185][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.823216][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.861556][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.936420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.956829][ T8296] sctp: [Deprecated]: syz.3.9383 (pid 8296) Use of int in max_burst socket option deprecated. [ 1236.956829][ T8296] Use struct sctp_assoc_value instead [ 1237.114912][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9390'. [ 1237.167756][ T8316] sit0: entered allmulticast mode [ 1237.186488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.196018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.218662][ T8316] netlink: 'syz.1.9391': attribute type 10 has an invalid length. [ 1237.252454][ T8316] mac80211_hwsim hwsim95 wlan1: entered promiscuous mode [ 1237.270621][ T8322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9390'. [ 1237.274208][ T8316] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1237.369748][ T8326] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9394'. [ 1237.846992][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9400'. [ 1237.898838][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9401'. [ 1237.921194][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9400'. [ 1237.921272][ T8421] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1237.981150][ T8421] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.014739][ T8421] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.042075][ T8421] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.544961][ T8334] infiniband syû: set down [ 1238.564523][ T8334] infiniband syû: added bond_slave_0 [ 1238.628279][ T8369] netlink: 'syz.3.9407': attribute type 16 has an invalid length. [ 1238.716938][ T8334] RDS/IB: syû: added [ 1238.720972][ T8334] smc: adding ib device syû with port count 1 [ 1238.727814][ T8334] smc: ib device syû port 1 has no pnetid [ 1238.791270][ T8369] sctp: [Deprecated]: syz.3.9407 (pid 8369) Use of int in max_burst socket option deprecated. [ 1238.791270][ T8369] Use struct sctp_assoc_value instead [ 1239.270005][ T8384] tipc: Started in network mode [ 1239.285429][ T8384] tipc: Node identity da07a1490a3f, cluster identity 4711 [ 1239.303150][ T8384] tipc: Enabled bearer , priority 0 [ 1239.369253][ T8388] syzkaller0: entered promiscuous mode [ 1239.385478][ T8388] syzkaller0: entered allmulticast mode [ 1239.398596][ T8388] tipc: Resetting bearer [ 1239.466606][ T8383] tipc: Resetting bearer [ 1239.832502][ T8397] __nla_validate_parse: 1 callbacks suppressed [ 1239.832527][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9418'. [ 1242.548890][ T8383] tipc: Disabling bearer [ 1242.625569][ T8094] tipc: Node number set to 3493372233 [ 1242.672905][ T8396] lo speed is unknown, defaulting to 1000 [ 1242.731774][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9420'. [ 1242.805039][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9421'. [ 1242.830934][ T8425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9421'. [ 1243.074269][ T8433] netlink: 532 bytes leftover after parsing attributes in process `syz.0.9425'. [ 1243.688661][ T8449] bridge_slave_0: default FDB implementation only supports local addresses [ 1243.820196][ T8451] net_ratelimit: 18 callbacks suppressed [ 1243.820220][ T8451] openvswitch: netlink: IP tunnel dst address not specified [ 1244.165116][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9438'. [ 1244.370199][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1245.020200][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.039451][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.069163][ T8481] netlink: 'syz.0.9443': attribute type 16 has an invalid length. [ 1245.137404][ T8481] netlink: 444 bytes leftover after parsing attributes in process `syz.0.9443'. [ 1245.218775][ T8485] IPv6: sit1: Disabled Multicast RS [ 1245.248008][ T8485] sit1: entered promiscuous mode [ 1245.255351][ T8485] sit1: entered allmulticast mode [ 1245.280818][ T8488] syz_tun: entered allmulticast mode [ 1245.307140][ T8482] syz_tun: left allmulticast mode [ 1245.403286][ T8481] sctp: [Deprecated]: syz.0.9443 (pid 8481) Use of int in max_burst socket option deprecated. [ 1245.403286][ T8481] Use struct sctp_assoc_value instead [ 1245.739077][ T8501] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1245.761445][ T8501] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1245.774223][ T8501] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1246.162216][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9455'. [ 1246.212151][ T8514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9455'. [ 1246.265914][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9455'. [ 1246.317583][ T8514] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1246.352044][ T8514] bond1 (unregistering): Released all slaves [ 1246.436673][ T615] Bluetooth: hci4: command 0x040f tx timeout [ 1246.474811][ T8513] lo speed is unknown, defaulting to 1000 [ 1246.873837][ T8529] syzkaller0: entered promiscuous mode [ 1246.911865][ T8529] syzkaller0: entered allmulticast mode [ 1246.940897][ T8528] syzkaller0: entered promiscuous mode [ 1246.951088][ T8528] syzkaller0: entered allmulticast mode [ 1247.046905][ T8528] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9457'. [ 1247.076101][ T8529] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9458'. [ 1248.576443][ T8564] netlink: 'syz.4.9464': attribute type 1 has an invalid length. [ 1248.810175][ T8569] netlink: 'syz.1.9465': attribute type 16 has an invalid length. [ 1248.818486][ T8569] netlink: 444 bytes leftover after parsing attributes in process `syz.1.9465'. [ 1249.005110][ T8574] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1249.037762][ T8577] sctp: [Deprecated]: syz.1.9465 (pid 8577) Use of int in max_burst socket option deprecated. [ 1249.037762][ T8577] Use struct sctp_assoc_value instead [ 1249.053657][ T8574] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1249.070647][ T8574] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1249.368585][ T8587] syzkaller0: entered promiscuous mode [ 1249.386334][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1249.392329][ T8587] syzkaller0: entered allmulticast mode [ 1249.394514][ C1] lec:lec_tx_timeout: lec0 [ 1249.476536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.478679][ T8587] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9471'. [ 1249.509397][ T8594] FAULT_INJECTION: forcing a failure. [ 1249.509397][ T8594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1249.541625][ T8594] CPU: 1 UID: 0 PID: 8594 Comm: syz.4.9474 Not tainted syzkaller #0 PREEMPT(full) [ 1249.541656][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1249.541670][ T8594] Call Trace: [ 1249.541679][ T8594] [ 1249.541688][ T8594] dump_stack_lvl+0xe8/0x150 [ 1249.541722][ T8594] should_fail_ex+0x412/0x560 [ 1249.541755][ T8594] _copy_from_iter+0x1d3/0x1670 [ 1249.541794][ T8594] ? rcu_is_watching+0x15/0xb0 [ 1249.541820][ T8594] ? __pfx__copy_from_iter+0x10/0x10 [ 1249.541846][ T8594] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 1249.541886][ T8594] ? netlink_sendmsg+0x650/0xb40 [ 1249.541908][ T8594] ? skb_put+0x11b/0x210 [ 1249.541942][ T8594] netlink_sendmsg+0x6c0/0xb40 [ 1249.541985][ T8594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.542012][ T8594] ? aa_file_perm+0x12d/0x1630 [ 1249.542040][ T8594] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1249.542066][ T8594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1249.542087][ T8594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.542111][ T8594] __sock_sendmsg+0x21c/0x270 [ 1249.542138][ T8594] ____sys_sendmsg+0x4d7/0x810 [ 1249.542159][ T8594] ? __might_fault+0xaf/0x130 [ 1249.542193][ T8594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1249.542222][ T8594] ? import_iovec+0x73/0xa0 [ 1249.542247][ T8594] ___sys_sendmsg+0x2a5/0x360 [ 1249.542268][ T8594] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.542295][ T8594] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.542354][ T8594] ? __fget_files+0x2a/0x420 [ 1249.542379][ T8594] ? __fget_files+0x3a0/0x420 [ 1249.542416][ T8594] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1249.542440][ T8594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1249.542472][ T8594] ? __pfx_ksys_write+0x10/0x10 [ 1249.542505][ T8594] do_syscall_64+0xe2/0xf80 [ 1249.542536][ T8594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.542558][ T8594] ? clear_bhb_loop+0x60/0xb0 [ 1249.542583][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.542604][ T8594] RIP: 0033:0x7faa0279acb9 [ 1249.542625][ T8594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.542650][ T8594] RSP: 002b:00007faa035ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1249.542675][ T8594] RAX: ffffffffffffffda RBX: 00007faa02a15fa0 RCX: 00007faa0279acb9 [ 1249.542691][ T8594] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 1249.542705][ T8594] RBP: 00007faa035ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.542718][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.542731][ T8594] R13: 00007faa02a16038 R14: 00007faa02a15fa0 R15: 00007ffc06212fe8 [ 1249.542766][ T8594] [ 1250.242113][ T8607] FAULT_INJECTION: forcing a failure. [ 1250.242113][ T8607] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.255394][ T8607] CPU: 0 UID: 0 PID: 8607 Comm: syz.1.9477 Not tainted syzkaller #0 PREEMPT(full) [ 1250.255425][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1250.255439][ T8607] Call Trace: [ 1250.255448][ T8607] [ 1250.255458][ T8607] dump_stack_lvl+0xe8/0x150 [ 1250.255491][ T8607] should_fail_ex+0x412/0x560 [ 1250.255526][ T8607] should_failslab+0xa8/0x100 [ 1250.255554][ T8607] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1250.255586][ T8607] ? skb_clone+0x212/0x3a0 [ 1250.255612][ T8607] skb_clone+0x212/0x3a0 [ 1250.255638][ T8607] bpf_clone_redirect+0x16a/0x4b0 [ 1250.255678][ T8607] ? bpf_test_run+0x1d1/0x830 [ 1250.255700][ T8607] bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68 [ 1250.255727][ T8607] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1250.255759][ T8607] ? arch_stack_walk+0xfb/0x150 [ 1250.255792][ T8607] ? ktime_get+0x45/0x200 [ 1250.255835][ T8607] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1250.255865][ T8607] ? lockdep_hardirqs_on+0x7a/0x110 [ 1250.255894][ T8607] ? ktime_get+0x45/0x200 [ 1250.255920][ T8607] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1250.255954][ T8607] ? bpf_test_timer_continue+0x10c/0x320 [ 1250.255982][ T8607] bpf_test_run+0x354/0x830 [ 1250.256029][ T8607] ? __pfx_bpf_test_run+0x10/0x10 [ 1250.256067][ T8607] ? __kasan_krealloc+0xeb/0x110 [ 1250.256092][ T8607] ? eth_type_trans+0x35e/0x6d0 [ 1250.256123][ T8607] ? convert___skb_to_skb+0x3d/0x5b0 [ 1250.256149][ T8607] bpf_prog_test_run_skb+0xd66/0x1d50 [ 1250.256200][ T8607] ? __fget_files+0x2a/0x420 [ 1250.256224][ T8607] ? __fget_files+0x3a0/0x420 [ 1250.256247][ T8607] ? __fget_files+0x2a/0x420 [ 1250.256275][ T8607] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1250.256297][ T8607] bpf_prog_test_run+0x2c7/0x340 [ 1250.256332][ T8607] __sys_bpf+0x5cb/0x920 [ 1250.256364][ T8607] ? __pfx___sys_bpf+0x10/0x10 [ 1250.256411][ T8607] ? ksys_write+0x242/0x270 [ 1250.256434][ T8607] ? __pfx_ksys_write+0x10/0x10 [ 1250.256462][ T8607] __x64_sys_bpf+0x7c/0x90 [ 1250.256488][ T8607] do_syscall_64+0xe2/0xf80 [ 1250.256517][ T8607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.256537][ T8607] ? trace_irq_disable+0x37/0x100 [ 1250.256563][ T8607] ? clear_bhb_loop+0x60/0xb0 [ 1250.256588][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.256608][ T8607] RIP: 0033:0x7fc521b9acb9 [ 1250.256629][ T8607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.256647][ T8607] RSP: 002b:00007fc522a7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1250.256672][ T8607] RAX: ffffffffffffffda RBX: 00007fc521e15fa0 RCX: 00007fc521b9acb9 [ 1250.256688][ T8607] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1250.256701][ T8607] RBP: 00007fc522a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.256715][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1250.256729][ T8607] R13: 00007fc521e16038 R14: 00007fc521e15fa0 R15: 00007ffd753bf398 [ 1250.256760][ T8607] [ 1250.736538][ T8616] syzkaller0: entered promiscuous mode [ 1250.744397][ T8616] syzkaller0: entered allmulticast mode [ 1251.378195][ T8639] netlink: 'syz.0.9487': attribute type 16 has an invalid length. [ 1251.410155][ T8639] netlink: 444 bytes leftover after parsing attributes in process `syz.0.9487'. [ 1251.703791][ T8639] sctp: [Deprecated]: syz.0.9487 (pid 8639) Use of int in max_burst socket option deprecated. [ 1251.703791][ T8639] Use struct sctp_assoc_value instead [ 1251.778693][ T8646] tunl0: Caught tx_queue_len zero misconfig [ 1252.315351][ T8669] tipc: Enabled bearer , priority 0 [ 1252.338574][ T8669] syzkaller0: entered promiscuous mode [ 1252.344190][ T8669] syzkaller0: entered allmulticast mode [ 1252.452195][ T8664] tipc: Started in network mode [ 1252.457315][ T8664] tipc: Node identity 0a89aa63ab9e, cluster identity 4711 [ 1252.470470][ T8664] tipc: Enabled bearer , priority 0 [ 1252.490477][ T8668] tipc: Resetting bearer [ 1252.514873][ T8668] tipc: Disabling bearer [ 1252.528999][ T8667] syzkaller0: entered promiscuous mode [ 1252.534824][ T8667] syzkaller0: entered allmulticast mode [ 1252.547584][ T8679] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1252.562727][ T8679] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1252.573591][ T8663] tipc: Resetting bearer [ 1252.586465][ T8679] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1252.635327][ T8663] tipc: Disabling bearer [ 1252.749130][ T6252] hid-generic 0005:0006:5508.004B: item fetching failed at offset 3/4 [ 1252.808705][ T6252] hid-generic 0005:0006:5508.004B: probe with driver hid-generic failed with error -22 [ 1252.828030][ T8682] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9502'. [ 1252.919639][ T8691] tipc: Enabled bearer , priority 0 [ 1252.937861][ T8691] syzkaller0: entered promiscuous mode [ 1252.943756][ T8691] syzkaller0: entered allmulticast mode [ 1253.014901][ T8691] FAULT_INJECTION: forcing a failure. [ 1253.014901][ T8691] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.030479][ T8691] CPU: 0 UID: 0 PID: 8691 Comm: syz.1.9503 Not tainted syzkaller #0 PREEMPT(full) [ 1253.030511][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1253.030525][ T8691] Call Trace: [ 1253.030534][ T8691] [ 1253.030544][ T8691] dump_stack_lvl+0xe8/0x150 [ 1253.030577][ T8691] should_fail_ex+0x412/0x560 [ 1253.030613][ T8691] should_failslab+0xa8/0x100 [ 1253.030641][ T8691] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1253.030675][ T8691] ? __alloc_skb+0x1d0/0x7d0 [ 1253.030703][ T8691] ? __local_bh_enable_ip+0xd0/0x130 [ 1253.030732][ T8691] __alloc_skb+0x1d0/0x7d0 [ 1253.030768][ T8691] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1253.030804][ T8691] rtnetlink_event+0x1b7/0x270 [ 1253.030841][ T8691] notifier_call_chain+0x19d/0x3a0 [ 1253.030877][ T8691] netif_set_mtu_ext+0x5aa/0x800 [ 1253.030897][ T8691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.031032][ T8691] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1253.031055][ T8691] ? __mutex_trylock_common+0x158/0x260 [ 1253.031094][ T8691] ? rcu_is_watching+0x15/0xb0 [ 1253.031129][ T8691] netif_set_mtu+0xd7/0x1b0 [ 1253.031153][ T8691] ? __pfx_netif_set_mtu+0x10/0x10 [ 1253.031263][ T8691] ? netdev_name_node_lookup+0xdf/0x120 [ 1253.031309][ T8691] dev_set_mtu+0x126/0x260 [ 1253.031335][ T8691] dev_ioctl+0x7b4/0x1150 [ 1253.031372][ T8691] sock_do_ioctl+0x23e/0x320 [ 1253.031402][ T8691] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1253.031424][ T8691] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1253.031475][ T8691] sock_ioctl+0x5c6/0x7f0 [ 1253.031508][ T8691] ? __pfx_sock_ioctl+0x10/0x10 [ 1253.031533][ T8691] ? __fget_files+0x2a/0x420 [ 1253.031559][ T8691] ? __fget_files+0x3a0/0x420 [ 1253.031583][ T8691] ? __fget_files+0x2a/0x420 [ 1253.031613][ T8691] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1253.031637][ T8691] ? __pfx_sock_ioctl+0x10/0x10 [ 1253.031661][ T8691] __se_sys_ioctl+0xfc/0x170 [ 1253.031697][ T8691] do_syscall_64+0xe2/0xf80 [ 1253.031728][ T8691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.031749][ T8691] ? trace_irq_disable+0x37/0x100 [ 1253.031777][ T8691] ? clear_bhb_loop+0x60/0xb0 [ 1253.031803][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.031825][ T8691] RIP: 0033:0x7fc521b9acb9 [ 1253.031845][ T8691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.031864][ T8691] RSP: 002b:00007fc522a7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1253.031888][ T8691] RAX: ffffffffffffffda RBX: 00007fc521e15fa0 RCX: 00007fc521b9acb9 [ 1253.031904][ T8691] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1253.031916][ T8691] RBP: 00007fc522a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.031927][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.031937][ T8691] R13: 00007fc521e16038 R14: 00007fc521e15fa0 R15: 00007ffd753bf398 [ 1253.031972][ T8691] [ 1253.340094][ T8691] tipc: Resetting bearer [ 1253.416931][ T8690] tipc: Resetting bearer [ 1253.442942][T24976] lec:lec_start_xmit: lec0:No lecd attached [ 1253.534360][ T1597] hid-generic 0005:0006:5508.004C: item fetching failed at offset 3/4 [ 1253.544587][ T8690] tipc: Disabling bearer [ 1253.568432][ T1597] hid-generic 0005:0006:5508.004C: probe with driver hid-generic failed with error -22 [ 1253.589823][ T8708] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1253.632138][ T8696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9507'. [ 1253.742902][ T8707] lo speed is unknown, defaulting to 1000 [ 1254.131684][ T8724] netlink: 'syz.1.9513': attribute type 1 has an invalid length. [ 1254.330530][ T8724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1254.357820][ T8731] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1254.690544][ T8739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.735846][ T8739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.080342][ T8724] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1255.184003][ T907] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.216671][ T907] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.225821][ T907] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.267069][ T907] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.314545][ T907] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.347787][ T907] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.357798][ T8748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.370526][ T907] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.379996][ T8748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.402573][ T907] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.433108][ T8748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.459760][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.486614][ T316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1255.508763][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.533881][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.566242][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.585069][ T8099] hid-generic 0005:0006:5508.004D: item fetching failed at offset 3/4 [ 1255.595686][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.614659][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.655015][ T8099] hid-generic 0005:0006:5508.004D: probe with driver hid-generic failed with error -22 [ 1255.689590][ T8754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9521'. [ 1255.964103][ T8768] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9525'. [ 1256.462985][ T8787] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9529'. [ 1256.495481][ T8787] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9529'. [ 1256.534043][ T8787] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9529'. [ 1256.736007][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9534'. [ 1256.757820][ T8808] netlink: 'syz.2.9535': attribute type 2 has an invalid length. [ 1256.776247][ T8808] netlink: 'syz.2.9535': attribute type 8 has an invalid length. [ 1256.784143][ T8808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9535'. [ 1256.803346][ T8797] netlink: 'syz.1.9532': attribute type 10 has an invalid length. [ 1256.837645][ T8805] ip6gre1: entered promiscuous mode [ 1256.843008][ T8805] ip6gre1: entered allmulticast mode [ 1257.266763][ T8831] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9543'. [ 1257.821256][ T8851] netlink: 'syz.4.9549': attribute type 2 has an invalid length. [ 1257.839572][ T8851] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9549'. [ 1257.922318][ T8855] x_tables: duplicate underflow at hook 3 [ 1258.109891][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9553'. [ 1258.309024][ T8867] netlink: 532 bytes leftover after parsing attributes in process `syz.0.9559'. [ 1258.352593][ T8869] xfrm0: entered promiscuous mode [ 1258.369490][ T8869] xfrm0: entered allmulticast mode [ 1258.384738][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9557'. [ 1258.456347][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1258.464502][ C1] lec:lec_tx_timeout: lec0 [ 1258.473202][ T8877] netlink: 'syz.2.9558': attribute type 1 has an invalid length. [ 1258.929817][ T8887] lo speed is unknown, defaulting to 1000 [ 1258.946999][ T8889] bridge_slave_0: default FDB implementation only supports local addresses [ 1259.265129][ T8900] lo speed is unknown, defaulting to 1000 [ 1260.673251][ T8924] vlan2: entered promiscuous mode [ 1260.732103][ T8924] ip6gretap0: entered promiscuous mode [ 1260.773346][ T8924] vlan2: entered allmulticast mode [ 1260.807606][ T8924] ip6gretap0: entered allmulticast mode [ 1261.961265][ T8966] __nla_validate_parse: 3 callbacks suppressed [ 1261.961290][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9583'. [ 1261.986431][ T8969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9585'. [ 1262.007315][ T8970] netlink: 136 bytes leftover after parsing attributes in process `syz.2.9584'. [ 1262.022938][ T8971] netlink: 'syz.3.9583': attribute type 1 has an invalid length. [ 1262.065163][ T8970] net_ratelimit: 38 callbacks suppressed [ 1262.065186][ T8970] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1262.106590][ T8966] netlink: 121 bytes leftover after parsing attributes in process `syz.3.9583'. [ 1262.286628][ T8976] FAULT_INJECTION: forcing a failure. [ 1262.286628][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.306374][ T8976] CPU: 0 UID: 0 PID: 8976 Comm: syz.2.9587 Not tainted syzkaller #0 PREEMPT(full) [ 1262.306404][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1262.306417][ T8976] Call Trace: [ 1262.306426][ T8976] [ 1262.306436][ T8976] dump_stack_lvl+0xe8/0x150 [ 1262.306470][ T8976] should_fail_ex+0x412/0x560 [ 1262.306506][ T8976] should_failslab+0xa8/0x100 [ 1262.306531][ T8976] __kmalloc_cache_noprof+0x83/0x6e0 [ 1262.306552][ T8976] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1262.306577][ T8976] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1262.306599][ T8976] ? sctp_add_bind_addr+0x8c/0x370 [ 1262.306628][ T8976] sctp_add_bind_addr+0x8c/0x370 [ 1262.306659][ T8976] sctp_copy_local_addr_list+0x314/0x4f0 [ 1262.306690][ T8976] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1262.306715][ T8976] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1262.306742][ T8976] ? sctp_v6_is_any+0x64/0x80 [ 1262.306771][ T8976] ? sctp_copy_one_addr+0x93/0x360 [ 1262.306799][ T8976] sctp_bind_addr_copy+0xb3/0x3c0 [ 1262.306825][ T8976] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1262.306852][ T8976] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1262.306886][ T8976] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1262.306918][ T8976] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1262.306948][ T8976] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1262.306975][ T8976] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1262.307006][ T8976] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1262.307028][ T8976] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1262.307062][ T8976] sctp_sendmsg+0x1577/0x2920 [ 1262.307106][ T8976] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1262.307135][ T8976] ? aa_sk_perm+0x82d/0x960 [ 1262.307171][ T8976] ? __pfx_aa_sk_perm+0x10/0x10 [ 1262.307200][ T8976] ? sock_rps_record_flow+0x19/0x400 [ 1262.307229][ T8976] ? inet_sendmsg+0x2f4/0x370 [ 1262.307251][ T8976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1262.307275][ T8976] __sock_sendmsg+0x19c/0x270 [ 1262.307306][ T8976] __sys_sendto+0x3c0/0x550 [ 1262.307339][ T8976] ? __pfx___sys_sendto+0x10/0x10 [ 1262.307366][ T8976] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1262.307411][ T8976] ? __fget_files+0x3a0/0x420 [ 1262.307449][ T8976] ? ksys_write+0x242/0x270 [ 1262.307472][ T8976] ? __pfx_ksys_write+0x10/0x10 [ 1262.307499][ T8976] __x64_sys_sendto+0xde/0x100 [ 1262.307533][ T8976] do_syscall_64+0xe2/0xf80 [ 1262.307562][ T8976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.307581][ T8976] ? trace_irq_disable+0x37/0x100 [ 1262.307607][ T8976] ? clear_bhb_loop+0x60/0xb0 [ 1262.307632][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.307652][ T8976] RIP: 0033:0x7f11bbd9acb9 [ 1262.307673][ T8976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.307690][ T8976] RSP: 002b:00007f11bcc60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1262.307715][ T8976] RAX: ffffffffffffffda RBX: 00007f11bc015fa0 RCX: 00007f11bbd9acb9 [ 1262.307731][ T8976] RDX: 000000000000005b RSI: 0000200000000040 RDI: 0000000000000004 [ 1262.307745][ T8976] RBP: 00007f11bcc60090 R08: 0000200000000100 R09: 000000000000001c [ 1262.307759][ T8976] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000002 [ 1262.307772][ T8976] R13: 00007f11bc016038 R14: 00007f11bc015fa0 R15: 00007ffc583e4f48 [ 1262.307807][ T8976] [ 1263.200510][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9590'. [ 1263.472048][ T8994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1263.818300][ T9007] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 1264.502317][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9605'. [ 1264.661790][ T9030] pimreg3: entered allmulticast mode [ 1264.746695][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9610'. [ 1264.862599][ T9033] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1264.890587][ T9038] lo speed is unknown, defaulting to 1000 [ 1265.604745][ T9051] netlink: 'syz.2.9614': attribute type 3 has an invalid length. [ 1265.662009][ T9054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9615'. [ 1265.750431][ T9056] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004 [ 1265.828564][ T9058] tipc: Enabled bearer , priority 0 [ 1265.836714][ T9058] syzkaller0: entered promiscuous mode [ 1265.843000][ T9058] syzkaller0: entered allmulticast mode [ 1265.949913][ T9057] tipc: Resetting bearer [ 1266.054331][ T9057] tipc: Disabling bearer [ 1266.441736][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9618'. [ 1266.456399][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9618'. [ 1267.376822][ T9071] __nla_validate_parse: 150 callbacks suppressed [ 1267.376844][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9620'. [ 1267.419177][ T9071] netlink: 'syz.1.9620': attribute type 1 has an invalid length. [ 1267.483884][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9620'. [ 1267.496280][ T9071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1267.513611][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9620'. [ 1267.779781][ T9080] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9623'. [ 1267.792732][ T9080] nbd: couldn't find a device at index 0 [ 1267.799972][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9622'. [ 1268.125450][ T9093] netlink: 'syz.1.9626': attribute type 1 has an invalid length. [ 1268.776884][ T9111] lo speed is unknown, defaulting to 1000 [ 1269.698141][ T9126] FAULT_INJECTION: forcing a failure. [ 1269.698141][ T9126] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.712577][ T9126] CPU: 0 UID: 0 PID: 9126 Comm: syz.1.9639 Not tainted syzkaller #0 PREEMPT(full) [ 1269.712607][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1269.712619][ T9126] Call Trace: [ 1269.712627][ T9126] [ 1269.712637][ T9126] dump_stack_lvl+0xe8/0x150 [ 1269.712672][ T9126] should_fail_ex+0x412/0x560 [ 1269.712707][ T9126] should_failslab+0xa8/0x100 [ 1269.712734][ T9126] __kmalloc_cache_noprof+0x83/0x6e0 [ 1269.712757][ T9126] ? sctp_add_bind_addr+0x8c/0x370 [ 1269.712788][ T9126] sctp_add_bind_addr+0x8c/0x370 [ 1269.712817][ T9126] sctp_copy_local_addr_list+0x314/0x4f0 [ 1269.712846][ T9126] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1269.712872][ T9126] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1269.712912][ T9126] ? sctp_v4_is_any+0x35/0x60 [ 1269.712938][ T9126] ? sctp_copy_one_addr+0x93/0x360 [ 1269.712967][ T9126] sctp_bind_addr_copy+0xb3/0x3c0 [ 1269.712994][ T9126] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1269.713018][ T9126] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1269.713052][ T9126] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1269.713090][ T9126] ? __local_bh_enable_ip+0xd0/0x130 [ 1269.713111][ T9126] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1269.713131][ T9126] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1269.713157][ T9126] sctp_sendmsg+0x1577/0x2920 [ 1269.713198][ T9126] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1269.713227][ T9126] ? aa_sk_perm+0x82d/0x960 [ 1269.713263][ T9126] ? __pfx_aa_sk_perm+0x10/0x10 [ 1269.713291][ T9126] ? sock_rps_record_flow+0x19/0x400 [ 1269.713318][ T9126] ? inet_sendmsg+0x2f4/0x370 [ 1269.713346][ T9126] __sock_sendmsg+0x19c/0x270 [ 1269.713374][ T9126] ____sys_sendmsg+0x4d7/0x810 [ 1269.713402][ T9126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.713431][ T9126] ? import_iovec+0x73/0xa0 [ 1269.713457][ T9126] ___sys_sendmsg+0x2a5/0x360 [ 1269.713476][ T9126] ? __lock_acquire+0x6b5/0x2cf0 [ 1269.713502][ T9126] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.713558][ T9126] ? __fget_files+0x2a/0x420 [ 1269.713583][ T9126] ? __fget_files+0x3a0/0x420 [ 1269.713620][ T9126] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1269.713644][ T9126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1269.713676][ T9126] ? __pfx_ksys_write+0x10/0x10 [ 1269.713710][ T9126] do_syscall_64+0xe2/0xf80 [ 1269.713739][ T9126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.713759][ T9126] ? trace_irq_disable+0x37/0x100 [ 1269.713785][ T9126] ? clear_bhb_loop+0x60/0xb0 [ 1269.713811][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.713831][ T9126] RIP: 0033:0x7fc521b9acb9 [ 1269.713852][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.713871][ T9126] RSP: 002b:00007fc522a7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.713902][ T9126] RAX: ffffffffffffffda RBX: 00007fc521e15fa0 RCX: 00007fc521b9acb9 [ 1269.713918][ T9126] RDX: 0000000000000881 RSI: 0000200000000700 RDI: 0000000000000003 [ 1269.713931][ T9126] RBP: 00007fc522a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.713942][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1269.713954][ T9126] R13: 00007fc521e16038 R14: 00007fc521e15fa0 R15: 00007ffd753bf398 [ 1269.713989][ T9126] [ 1271.254775][ T9151] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 1271.395302][ T9156] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1271.437799][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9651'. [ 1271.469293][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9652'. [ 1271.812480][ T9177] openvswitch: netlink: Unknown key attributes 2 [ 1271.924702][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9659'. [ 1272.085980][ T9185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9662'. [ 1272.349983][ T9200] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9667'. [ 1272.488376][ T9200] veth3: entered promiscuous mode [ 1272.638657][ T9214] tipc: Enabling of bearer rejected, failed to enable media [ 1272.796657][ T9219] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1273.165542][ T9238] FAULT_INJECTION: forcing a failure. [ 1273.165542][ T9238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.208829][ T9240] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9681'. [ 1273.218637][ T9238] CPU: 1 UID: 0 PID: 9238 Comm: syz.1.9680 Not tainted syzkaller #0 PREEMPT(full) [ 1273.218669][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1273.218692][ T9238] Call Trace: [ 1273.218701][ T9238] [ 1273.218710][ T9238] dump_stack_lvl+0xe8/0x150 [ 1273.218744][ T9238] should_fail_ex+0x412/0x560 [ 1273.218779][ T9238] _copy_to_user+0x31/0xb0 [ 1273.218804][ T9238] simple_read_from_buffer+0xe1/0x170 [ 1273.218836][ T9238] proc_fail_nth_read+0x1bb/0x230 [ 1273.218863][ T9238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1273.218890][ T9238] ? rw_verify_area+0x2a6/0x4d0 [ 1273.218920][ T9238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1273.218944][ T9238] vfs_read+0x20c/0xa70 [ 1273.218963][ T9238] ? fdget_pos+0x246/0x320 [ 1273.218995][ T9238] ? __pfx___mutex_lock+0x10/0x10 [ 1273.219016][ T9238] ? __pfx_vfs_read+0x10/0x10 [ 1273.219039][ T9238] ? __fget_files+0x2a/0x420 [ 1273.219069][ T9238] ? __fget_files+0x3a0/0x420 [ 1273.219094][ T9238] ? __fget_files+0x2a/0x420 [ 1273.219129][ T9238] ksys_read+0x150/0x270 [ 1273.219153][ T9238] ? __pfx_ksys_read+0x10/0x10 [ 1273.219188][ T9238] do_syscall_64+0xe2/0xf80 [ 1273.219218][ T9238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.219239][ T9238] ? trace_irq_disable+0x37/0x100 [ 1273.219266][ T9238] ? clear_bhb_loop+0x60/0xb0 [ 1273.219293][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.219313][ T9238] RIP: 0033:0x7fc521b5b58e [ 1273.219333][ T9238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1273.219352][ T9238] RSP: 002b:00007fc522a7cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1273.219376][ T9238] RAX: ffffffffffffffda RBX: 00007fc522a7d6c0 RCX: 00007fc521b5b58e [ 1273.219392][ T9238] RDX: 000000000000000f RSI: 00007fc522a7d0a0 RDI: 0000000000000004 [ 1273.219422][ T9238] RBP: 00007fc522a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.219435][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.219449][ T9238] R13: 00007fc521e16038 R14: 00007fc521e15fa0 R15: 00007ffd753bf398 [ 1273.219484][ T9238] [ 1273.449131][ T9249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.458127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.741202][ T9255] netlink: 'syz.2.9687': attribute type 3 has an invalid length. [ 1273.759264][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9687'. [ 1273.792584][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9687'. [ 1273.825183][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9687'. [ 1273.862242][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9687'. [ 1273.903771][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9687'. [ 1273.933898][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9687'. [ 1273.952807][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9687'. [ 1273.964292][ T9263] netlink: 'syz.0.9690': attribute type 4 has an invalid length. [ 1273.965336][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9687'. [ 1274.601608][ T9283] Cannot find add_set index 3 as target [ 1275.230488][ T9300] FAULT_INJECTION: forcing a failure. [ 1275.230488][ T9300] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.271872][ T9300] CPU: 0 UID: 0 PID: 9300 Comm: syz.4.9705 Not tainted syzkaller #0 PREEMPT(full) [ 1275.271906][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1275.271920][ T9300] Call Trace: [ 1275.271929][ T9300] [ 1275.271939][ T9300] dump_stack_lvl+0xe8/0x150 [ 1275.271973][ T9300] should_fail_ex+0x412/0x560 [ 1275.272007][ T9300] should_failslab+0xa8/0x100 [ 1275.272035][ T9300] __kmalloc_cache_noprof+0x83/0x6e0 [ 1275.272056][ T9300] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1275.272081][ T9300] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1275.272107][ T9300] ? sctp_add_bind_addr+0x8c/0x370 [ 1275.272138][ T9300] sctp_add_bind_addr+0x8c/0x370 [ 1275.272169][ T9300] sctp_copy_local_addr_list+0x314/0x4f0 [ 1275.272200][ T9300] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1275.272227][ T9300] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1275.272256][ T9300] ? sctp_v6_is_any+0x64/0x80 [ 1275.272285][ T9300] ? sctp_copy_one_addr+0x93/0x360 [ 1275.272315][ T9300] sctp_bind_addr_copy+0xb3/0x3c0 [ 1275.272343][ T9300] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1275.272371][ T9300] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1275.272406][ T9300] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1275.272438][ T9300] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1275.272467][ T9300] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1275.272495][ T9300] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1275.272526][ T9300] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1275.272548][ T9300] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1275.272574][ T9300] sctp_sendmsg+0x1577/0x2920 [ 1275.272739][ T9300] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1275.272770][ T9300] ? aa_sk_perm+0x82d/0x960 [ 1275.272807][ T9300] ? __pfx_aa_sk_perm+0x10/0x10 [ 1275.272837][ T9300] ? sock_rps_record_flow+0x19/0x400 [ 1275.272866][ T9300] ? inet_sendmsg+0x2f4/0x370 [ 1275.272888][ T9300] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1275.272913][ T9300] __sock_sendmsg+0x19c/0x270 [ 1275.272942][ T9300] __sys_sendto+0x3c0/0x550 [ 1275.272975][ T9300] ? __pfx___sys_sendto+0x10/0x10 [ 1275.273003][ T9300] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1275.273049][ T9300] ? __fget_files+0x3a0/0x420 [ 1275.273088][ T9300] ? ksys_write+0x242/0x270 [ 1275.273111][ T9300] ? __pfx_ksys_write+0x10/0x10 [ 1275.273139][ T9300] __x64_sys_sendto+0xde/0x100 [ 1275.273173][ T9300] do_syscall_64+0xe2/0xf80 [ 1275.273203][ T9300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.273223][ T9300] ? trace_irq_disable+0x37/0x100 [ 1275.273249][ T9300] ? clear_bhb_loop+0x60/0xb0 [ 1275.273275][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.273295][ T9300] RIP: 0033:0x7faa0279acb9 [ 1275.273316][ T9300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.273333][ T9300] RSP: 002b:00007faa035ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1275.273358][ T9300] RAX: ffffffffffffffda RBX: 00007faa02a15fa0 RCX: 00007faa0279acb9 [ 1275.273374][ T9300] RDX: 000000000000005b RSI: 0000200000000040 RDI: 0000000000000004 [ 1275.273387][ T9300] RBP: 00007faa035ea090 R08: 0000200000000100 R09: 000000000000001c [ 1275.273402][ T9300] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000002 [ 1275.273416][ T9300] R13: 00007faa02a16038 R14: 00007faa02a15fa0 R15: 00007ffc06212fe8 [ 1275.273452][ T9300] [ 1275.606934][ T9306] nbd: couldn't find device at index 0 [ 1275.971077][ T9314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1276.021904][ T9314] netlink: 'syz.4.9710': attribute type 10 has an invalid length. [ 1276.226427][ T9321] FAULT_INJECTION: forcing a failure. [ 1276.226427][ T9321] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.266830][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.0.9712 Not tainted syzkaller #0 PREEMPT(full) [ 1276.266862][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1276.266875][ T9321] Call Trace: [ 1276.266884][ T9321] [ 1276.266893][ T9321] dump_stack_lvl+0xe8/0x150 [ 1276.266928][ T9321] should_fail_ex+0x412/0x560 [ 1276.266962][ T9321] should_failslab+0xa8/0x100 [ 1276.266989][ T9321] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1276.267022][ T9321] ? __alloc_skb+0x186/0x7d0 [ 1276.267050][ T9321] ? __alloc_skb+0x1d0/0x7d0 [ 1276.267078][ T9321] ? __local_bh_enable_ip+0xd0/0x130 [ 1276.267105][ T9321] __alloc_skb+0x1d0/0x7d0 [ 1276.267135][ T9321] ? netlink_ack_tlv_len+0x6c/0x210 [ 1276.267162][ T9321] netlink_ack+0x146/0xa50 [ 1276.267182][ T9321] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1276.267232][ T9321] netlink_rcv_skb+0x2b6/0x4b0 [ 1276.267256][ T9321] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1276.267289][ T9321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1276.267323][ T9321] ? netlink_deliver_tap+0x2e/0x1b0 [ 1276.267353][ T9321] netlink_unicast+0x80f/0x9b0 [ 1276.267383][ T9321] ? __pfx_netlink_unicast+0x10/0x10 [ 1276.267406][ T9321] ? netlink_sendmsg+0x650/0xb40 [ 1276.267428][ T9321] ? skb_put+0x11b/0x210 [ 1276.267462][ T9321] netlink_sendmsg+0x813/0xb40 [ 1276.267496][ T9321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.267523][ T9321] ? aa_file_perm+0x12d/0x1630 [ 1276.267562][ T9321] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1276.267591][ T9321] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1276.267612][ T9321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.267637][ T9321] __sock_sendmsg+0x21c/0x270 [ 1276.267667][ T9321] ____sys_sendmsg+0x4d7/0x810 [ 1276.267688][ T9321] ? __might_fault+0xaf/0x130 [ 1276.267725][ T9321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1276.267756][ T9321] ? import_iovec+0x73/0xa0 [ 1276.267783][ T9321] ___sys_sendmsg+0x2a5/0x360 [ 1276.267802][ T9321] ? __lock_acquire+0x6b5/0x2cf0 [ 1276.267829][ T9321] ? __pfx____sys_sendmsg+0x10/0x10 [ 1276.267890][ T9321] ? __fget_files+0x2a/0x420 [ 1276.267916][ T9321] ? __fget_files+0x3a0/0x420 [ 1276.267953][ T9321] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1276.267977][ T9321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1276.268009][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 1276.268044][ T9321] do_syscall_64+0xe2/0xf80 [ 1276.268074][ T9321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.268095][ T9321] ? trace_irq_disable+0x37/0x100 [ 1276.268122][ T9321] ? clear_bhb_loop+0x60/0xb0 [ 1276.268148][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.268169][ T9321] RIP: 0033:0x7f30a4f9acb9 [ 1276.268189][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.268208][ T9321] RSP: 002b:00007f30a5e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.268233][ T9321] RAX: ffffffffffffffda RBX: 00007f30a5215fa0 RCX: 00007f30a4f9acb9 [ 1276.268249][ T9321] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 1276.268263][ T9321] RBP: 00007f30a5e58090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.268277][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.268291][ T9321] R13: 00007f30a5216038 R14: 00007f30a5215fa0 R15: 00007ffca6d54d18 [ 1276.268327][ T9321] [ 1276.722154][ T9335] netlink: 'syz.0.9719': attribute type 1 has an invalid length. [ 1277.060708][ T9344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1277.130546][ T9344] netlink: 'syz.1.9723': attribute type 10 has an invalid length. [ 1277.560000][ T9375] tipc: Started in network mode [ 1277.592755][ T9375] tipc: Node identity 3aab4cc4a04c, cluster identity 4711 [ 1277.610290][ T9375] tipc: Enabled bearer , priority 0 [ 1277.637571][ T9368] lo speed is unknown, defaulting to 1000 [ 1277.651163][ T9382] lo: Caught tx_queue_len zero misconfig [ 1277.736143][ T9364] syzkaller0: entered promiscuous mode [ 1277.749990][ T9364] syzkaller0: entered allmulticast mode [ 1277.891537][ T9364] syzkaller0: mtu less than device minimum [ 1277.933980][ T9363] tipc: Resetting bearer [ 1277.941872][ T9392] FAULT_INJECTION: forcing a failure. [ 1277.941872][ T9392] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.975929][ T9392] CPU: 0 UID: 0 PID: 9392 Comm: syz.3.9738 Not tainted syzkaller #0 PREEMPT(full) [ 1277.975962][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1277.975975][ T9392] Call Trace: [ 1277.975984][ T9392] [ 1277.975995][ T9392] dump_stack_lvl+0xe8/0x150 [ 1277.976028][ T9392] should_fail_ex+0x412/0x560 [ 1277.976063][ T9392] should_failslab+0xa8/0x100 [ 1277.976092][ T9392] __kmalloc_noprof+0xde/0x7e0 [ 1277.976113][ T9392] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1277.976142][ T9392] ? rcu_is_watching+0x15/0xb0 [ 1277.976174][ T9392] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1277.976216][ T9392] genl_family_rcv_msg_doit+0xd9/0x330 [ 1277.976252][ T9392] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1277.976289][ T9392] ? apparmor_capable+0x137/0x1a0 [ 1277.976313][ T9392] ? bpf_lsm_capable+0x9/0x20 [ 1277.976338][ T9392] ? security_capable+0x7e/0x2c0 [ 1277.976371][ T9392] genl_rcv_msg+0x61c/0x7a0 [ 1277.976407][ T9392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1277.976436][ T9392] ? __pfx_ieee802154_llsec_del_devkey+0x10/0x10 [ 1277.976478][ T9392] netlink_rcv_skb+0x232/0x4b0 [ 1277.976503][ T9392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1277.976533][ T9392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1277.976563][ T9392] ? genl_rcv+0x19/0x40 [ 1277.976610][ T9392] ? down_read+0x272/0x2e0 [ 1277.976629][ T9392] ? genl_rcv+0xd/0x40 [ 1277.976659][ T9392] genl_rcv+0x28/0x40 [ 1277.976685][ T9392] netlink_unicast+0x80f/0x9b0 [ 1277.976716][ T9392] ? __pfx_netlink_unicast+0x10/0x10 [ 1277.976739][ T9392] ? netlink_sendmsg+0x650/0xb40 [ 1277.976760][ T9392] ? skb_put+0x11b/0x210 [ 1277.976794][ T9392] netlink_sendmsg+0x813/0xb40 [ 1277.976828][ T9392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1277.976855][ T9392] ? aa_file_perm+0x12d/0x1630 [ 1277.976882][ T9392] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1277.976912][ T9392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1277.976933][ T9392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1277.976957][ T9392] __sock_sendmsg+0x21c/0x270 [ 1277.976988][ T9392] ____sys_sendmsg+0x4d7/0x810 [ 1277.977008][ T9392] ? __might_fault+0xaf/0x130 [ 1277.977047][ T9392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1277.977079][ T9392] ? import_iovec+0x73/0xa0 [ 1277.977106][ T9392] ___sys_sendmsg+0x2a5/0x360 [ 1277.977125][ T9392] ? __lock_acquire+0x6b5/0x2cf0 [ 1277.977153][ T9392] ? __pfx____sys_sendmsg+0x10/0x10 [ 1277.977214][ T9392] ? __fget_files+0x2a/0x420 [ 1277.977238][ T9392] ? __fget_files+0x3a0/0x420 [ 1277.977274][ T9392] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1277.977298][ T9392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1277.977329][ T9392] ? __pfx_ksys_write+0x10/0x10 [ 1277.977362][ T9392] do_syscall_64+0xe2/0xf80 [ 1277.977391][ T9392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.977412][ T9392] ? trace_irq_disable+0x37/0x100 [ 1277.977438][ T9392] ? clear_bhb_loop+0x60/0xb0 [ 1277.977464][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.977484][ T9392] RIP: 0033:0x7fd7c799acb9 [ 1277.977506][ T9392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.977524][ T9392] RSP: 002b:00007fd7c889b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1277.977563][ T9392] RAX: ffffffffffffffda RBX: 00007fd7c7c15fa0 RCX: 00007fd7c799acb9 [ 1277.977579][ T9392] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000005 [ 1277.977593][ T9392] RBP: 00007fd7c889b090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.977606][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.977619][ T9392] R13: 00007fd7c7c16038 R14: 00007fd7c7c15fa0 R15: 00007ffc2d8669b8 [ 1277.977655][ T9392] [ 1278.354443][ T9363] tipc: Disabling bearer [ 1278.414962][ T9398] sit0: entered allmulticast mode [ 1278.432629][ T9382] __nla_validate_parse: 67 callbacks suppressed [ 1278.432653][ T9382] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9735'. [ 1278.462508][ T9398] bridge_slave_0: left allmulticast mode [ 1278.471253][ T9398] bridge_slave_0: left promiscuous mode [ 1278.486609][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.523577][ T9398] bond0: (slave bridge_slave_1): Releasing backup interface [ 1278.558382][ T9398] bond0: (slave bond_slave_0): Releasing backup interface [ 1278.599802][ T9407] netlink: 'syz.3.9740': attribute type 10 has an invalid length. [ 1278.618854][ T9398] bond0: (slave bond_slave_1): Releasing backup interface [ 1278.702673][ T9398] team0: Port device team_slave_0 removed [ 1278.737549][ T9398] team0: Port device team_slave_1 removed [ 1278.771077][ T9398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.794178][ T9398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.818258][ T9398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1279.092685][ T9418] 0: reclassify loop, rule prio 0, protocol 800 [ 1279.282143][ T9435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9749'. [ 1279.512107][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9751'. [ 1279.577696][ T9448] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9752'. [ 1280.649834][ T9472] dummy0: mtu less than device minimum [ 1281.111755][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9763'. [ 1281.396785][ T5834] Bluetooth: hci2: command tx timeout [ 1281.472805][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9769'. [ 1281.639121][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9770'. [ 1282.292062][ T9520] FAULT_INJECTION: forcing a failure. [ 1282.292062][ T9520] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.323779][ T9520] CPU: 1 UID: 0 PID: 9520 Comm: syz.2.9775 Not tainted syzkaller #0 PREEMPT(full) [ 1282.323815][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1282.323829][ T9520] Call Trace: [ 1282.323838][ T9520] [ 1282.323847][ T9520] dump_stack_lvl+0xe8/0x150 [ 1282.323884][ T9520] should_fail_ex+0x412/0x560 [ 1282.323920][ T9520] should_failslab+0xa8/0x100 [ 1282.323949][ T9520] __kmalloc_cache_noprof+0x83/0x6e0 [ 1282.323970][ T9520] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1282.324001][ T9520] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 1282.324029][ T9520] ? genl_start+0x1c9/0x6c0 [ 1282.324062][ T9520] genl_start+0x1c9/0x6c0 [ 1282.324088][ T9520] ? netlink_lookup+0x30/0x200 [ 1282.324117][ T9520] __netlink_dump_start+0x469/0x7e0 [ 1282.324149][ T9520] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1282.324183][ T9520] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1282.324210][ T9520] ? genl_get_cmd+0x691/0x930 [ 1282.324240][ T9520] ? __pfx___mutex_lock+0x10/0x10 [ 1282.324261][ T9520] ? __pfx_genl_start+0x10/0x10 [ 1282.324287][ T9520] ? __pfx_genl_dumpit+0x10/0x10 [ 1282.324313][ T9520] ? __pfx_genl_done+0x10/0x10 [ 1282.324347][ T9520] ? __lock_acquire+0x6b5/0x2cf0 [ 1282.324378][ T9520] genl_rcv_msg+0x5e8/0x7a0 [ 1282.324414][ T9520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1282.324442][ T9520] ? __pfx_smcd_nl_get_device+0x10/0x10 [ 1282.324491][ T9520] netlink_rcv_skb+0x232/0x4b0 [ 1282.324515][ T9520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1282.324546][ T9520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1282.324566][ T9520] ? genl_rcv+0x19/0x40 [ 1282.324613][ T9520] ? down_read+0x272/0x2e0 [ 1282.324632][ T9520] ? genl_rcv+0xd/0x40 [ 1282.324661][ T9520] genl_rcv+0x28/0x40 [ 1282.324687][ T9520] netlink_unicast+0x80f/0x9b0 [ 1282.324719][ T9520] ? __pfx_netlink_unicast+0x10/0x10 [ 1282.324741][ T9520] ? netlink_sendmsg+0x650/0xb40 [ 1282.324768][ T9520] ? skb_put+0x11b/0x210 [ 1282.324802][ T9520] netlink_sendmsg+0x813/0xb40 [ 1282.324837][ T9520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.324865][ T9520] ? aa_file_perm+0x12d/0x1630 [ 1282.324892][ T9520] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1282.324922][ T9520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1282.324941][ T9520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.324968][ T9520] __sock_sendmsg+0x21c/0x270 [ 1282.324997][ T9520] ____sys_sendmsg+0x4d7/0x810 [ 1282.325018][ T9520] ? __might_fault+0xaf/0x130 [ 1282.325057][ T9520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1282.325088][ T9520] ? import_iovec+0x73/0xa0 [ 1282.325116][ T9520] ___sys_sendmsg+0x2a5/0x360 [ 1282.325135][ T9520] ? __lock_acquire+0x6b5/0x2cf0 [ 1282.325163][ T9520] ? __pfx____sys_sendmsg+0x10/0x10 [ 1282.325225][ T9520] ? __fget_files+0x2a/0x420 [ 1282.325249][ T9520] ? __fget_files+0x3a0/0x420 [ 1282.325287][ T9520] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1282.325311][ T9520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1282.325345][ T9520] ? __pfx_ksys_write+0x10/0x10 [ 1282.325381][ T9520] do_syscall_64+0xe2/0xf80 [ 1282.325409][ T9520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.325430][ T9520] ? trace_irq_disable+0x37/0x100 [ 1282.325456][ T9520] ? clear_bhb_loop+0x60/0xb0 [ 1282.325490][ T9520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.325511][ T9520] RIP: 0033:0x7f11bbd9acb9 [ 1282.325531][ T9520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.325549][ T9520] RSP: 002b:00007f11bcc60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.325573][ T9520] RAX: ffffffffffffffda RBX: 00007f11bc015fa0 RCX: 00007f11bbd9acb9 [ 1282.325589][ T9520] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1282.325602][ T9520] RBP: 00007f11bcc60090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.325615][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.325627][ T9520] R13: 00007f11bc016038 R14: 00007f11bc015fa0 R15: 00007ffc583e4f48 [ 1282.325664][ T9520] [ 1282.923408][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9777'. [ 1283.032177][ T9515] wg1: entered promiscuous mode [ 1283.090927][ T9515] wg1: entered allmulticast mode [ 1283.374291][ T9544] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9781'. [ 1283.388760][ T9527] bridge_slave_1 (unregistering): left allmulticast mode [ 1283.403232][ T9544] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 1283.421970][ T9544] openvswitch: netlink: Message has 75 unknown bytes. [ 1283.428027][ T9527] bridge_slave_1 (unregistering): left promiscuous mode [ 1283.448534][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.003843][ T9560] syzkaller0: entered promiscuous mode [ 1284.019947][ T9560] syzkaller0: entered allmulticast mode [ 1284.026838][ T9562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9787'. [ 1284.153426][ T9569] gretap1: entered allmulticast mode [ 1284.989034][ T9583] lo speed is unknown, defaulting to 1000 [ 1285.561948][ T9598] netlink: 'syz.0.9799': attribute type 2 has an invalid length. [ 1285.754968][ T9611] netlink: 320 bytes leftover after parsing attributes in process `syz.2.9797'. [ 1286.266744][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9797'. [ 1286.277394][ T9606] tipc: Enabling of bearer rejected, failed to enable media [ 1286.323849][ T9608] netlink: 'syz.3.9801': attribute type 1 has an invalid length. [ 1287.097832][ T9640] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1287.105243][ T1597] IPVS: starting estimator thread 0... [ 1287.179278][ T9640] tipc: Enabled bearer , priority 0 [ 1287.255148][ T9644] IPVS: using max 24 ests per chain, 57600 per kthread [ 1287.344210][ T9640] syzkaller0: entered promiscuous mode [ 1287.351440][ T9640] syzkaller0: entered allmulticast mode [ 1287.358219][ T9640] tipc: Resetting bearer [ 1287.365357][ T9645] netlink: 532 bytes leftover after parsing attributes in process `syz.3.9809'. [ 1287.562831][T17084] tipc: Resetting bearer [ 1287.611224][ T9635] tipc: Resetting bearer [ 1290.661706][ T9635] tipc: Disabling bearer [ 1290.770289][ T1597] tipc: Node number set to 2598849732 [ 1291.145722][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1291.505381][ T9705] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9825'. [ 1291.536066][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9824'. [ 1291.566455][ T9708] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9824'. [ 1291.575833][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9824'. [ 1291.627730][ T9708] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9824'. [ 1292.186509][ T9732] netlink: 'syz.0.9833': attribute type 6 has an invalid length. [ 1292.215113][ T9732] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9833'. [ 1292.286764][ T9732] wireguard0: entered promiscuous mode [ 1292.295593][ T9732] wireguard0: entered allmulticast mode [ 1292.317450][ T9732] team0: Device wireguard0 is of different type [ 1292.487044][ T1597] lo speed is unknown, defaulting to 1000 [ 1292.922631][ T9755] FAULT_INJECTION: forcing a failure. [ 1292.922631][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.963325][ T9755] CPU: 1 UID: 0 PID: 9755 Comm: syz.3.9841 Not tainted syzkaller #0 PREEMPT(full) [ 1292.963376][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1292.963389][ T9755] Call Trace: [ 1292.963399][ T9755] [ 1292.963408][ T9755] dump_stack_lvl+0xe8/0x150 [ 1292.963442][ T9755] should_fail_ex+0x412/0x560 [ 1292.963476][ T9755] should_failslab+0xa8/0x100 [ 1292.963503][ T9755] __kmalloc_cache_noprof+0x83/0x6e0 [ 1292.963524][ T9755] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1292.963552][ T9755] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 1292.963580][ T9755] ? genl_start+0x1c9/0x6c0 [ 1292.963610][ T9755] genl_start+0x1c9/0x6c0 [ 1292.963636][ T9755] ? netlink_lookup+0x30/0x200 [ 1292.963665][ T9755] __netlink_dump_start+0x469/0x7e0 [ 1292.963697][ T9755] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1292.963729][ T9755] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1292.963756][ T9755] ? genl_get_cmd+0x691/0x930 [ 1292.963785][ T9755] ? __pfx___mutex_lock+0x10/0x10 [ 1292.963805][ T9755] ? __pfx_genl_start+0x10/0x10 [ 1292.963831][ T9755] ? __pfx_genl_dumpit+0x10/0x10 [ 1292.963856][ T9755] ? __pfx_genl_done+0x10/0x10 [ 1292.963899][ T9755] genl_rcv_msg+0x5e8/0x7a0 [ 1292.963935][ T9755] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1292.963962][ T9755] ? __pfx_smcd_nl_get_device+0x10/0x10 [ 1292.963990][ T9755] ? __pfx_ref_tracker_free+0x10/0x10 [ 1292.964028][ T9755] netlink_rcv_skb+0x232/0x4b0 [ 1292.964052][ T9755] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1292.964082][ T9755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1292.964102][ T9755] ? genl_rcv+0x19/0x40 [ 1292.964147][ T9755] ? down_read+0x272/0x2e0 [ 1292.964165][ T9755] ? genl_rcv+0xd/0x40 [ 1292.964194][ T9755] genl_rcv+0x28/0x40 [ 1292.964219][ T9755] netlink_unicast+0x80f/0x9b0 [ 1292.964251][ T9755] ? __pfx_netlink_unicast+0x10/0x10 [ 1292.964273][ T9755] ? netlink_sendmsg+0x650/0xb40 [ 1292.964294][ T9755] ? skb_put+0x11b/0x210 [ 1292.964329][ T9755] netlink_sendmsg+0x813/0xb40 [ 1292.964374][ T9755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1292.964402][ T9755] ? aa_file_perm+0x12d/0x1630 [ 1292.964429][ T9755] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1292.964457][ T9755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1292.964478][ T9755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1292.964503][ T9755] __sock_sendmsg+0x21c/0x270 [ 1292.964534][ T9755] ____sys_sendmsg+0x4d7/0x810 [ 1292.964554][ T9755] ? __might_fault+0xaf/0x130 [ 1292.964591][ T9755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1292.964620][ T9755] ? import_iovec+0x73/0xa0 [ 1292.964647][ T9755] ___sys_sendmsg+0x2a5/0x360 [ 1292.964666][ T9755] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.964692][ T9755] ? __pfx____sys_sendmsg+0x10/0x10 [ 1292.964753][ T9755] ? __fget_files+0x2a/0x420 [ 1292.964777][ T9755] ? __fget_files+0x3a0/0x420 [ 1292.964814][ T9755] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1292.964839][ T9755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1292.964870][ T9755] ? __pfx_ksys_write+0x10/0x10 [ 1292.964905][ T9755] do_syscall_64+0xe2/0xf80 [ 1292.964933][ T9755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.964954][ T9755] ? trace_irq_disable+0x37/0x100 [ 1292.964981][ T9755] ? clear_bhb_loop+0x60/0xb0 [ 1292.965006][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.965025][ T9755] RIP: 0033:0x7fd7c799acb9 [ 1292.965045][ T9755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.965063][ T9755] RSP: 002b:00007fd7c889b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1292.965087][ T9755] RAX: ffffffffffffffda RBX: 00007fd7c7c15fa0 RCX: 00007fd7c799acb9 [ 1292.965102][ T9755] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1292.965114][ T9755] RBP: 00007fd7c889b090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.965128][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.965141][ T9755] R13: 00007fd7c7c16038 R14: 00007fd7c7c15fa0 R15: 00007ffc2d8669b8 [ 1292.965176][ T9755] [ 1293.571582][ T9761] netlink: 312 bytes leftover after parsing attributes in process `syz.4.9844'. [ 1293.575822][ T9765] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9845'. [ 1293.594957][ T9765] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9845'. [ 1294.279153][ T9791] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1295.120003][ T9816] netlink: 'syz.4.9859': attribute type 4 has an invalid length. [ 1295.166557][ T9816] netlink: 'syz.4.9859': attribute type 4 has an invalid length. [ 1295.223760][ T1597] lo speed is unknown, defaulting to 1000 [ 1295.235075][ T1597] syz2: Port: 1 Link ACTIVE [ 1295.262301][ T9822] netlink: 'syz.1.9863': attribute type 10 has an invalid length. [ 1295.292480][ T9822] team0: Port device dummy0 added [ 1295.296008][ T9824] siw: device registration error -23 [ 1295.300442][ T9822] netlink: 'syz.1.9863': attribute type 10 has an invalid length. [ 1295.335990][ T9826] openvswitch: netlink: IP tunnel dst address not specified [ 1295.348249][ T9822] team0: Port device dummy0 removed [ 1296.000601][ T9847] pimreg3: entered allmulticast mode [ 1296.016955][ T9852] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 1296.966048][ T9872] netlink: 'syz.4.9879': attribute type 1 has an invalid length. [ 1297.563883][ T9894] lo speed is unknown, defaulting to 1000 [ 1298.119613][ T9905] Cannot find del_set index 0 as target [ 1298.160239][ T8094] hid-generic 0005:0006:5508.004E: item fetching failed at offset 3/4 [ 1298.195238][ T8094] hid-generic 0005:0006:5508.004E: probe with driver hid-generic failed with error -22 [ 1298.287181][ T9908] __nla_validate_parse: 7 callbacks suppressed [ 1298.287206][ T9908] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9890'. [ 1298.305907][ T9908] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9890'. [ 1298.575751][ T9924] FAULT_INJECTION: forcing a failure. [ 1298.575751][ T9924] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.631473][ T9925] FAULT_INJECTION: forcing a failure. [ 1298.631473][ T9925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.678402][ T9924] CPU: 1 UID: 0 PID: 9924 Comm: syz.3.9895 Not tainted syzkaller #0 PREEMPT(full) [ 1298.678436][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1298.678449][ T9924] Call Trace: [ 1298.678458][ T9924] [ 1298.678468][ T9924] dump_stack_lvl+0xe8/0x150 [ 1298.678501][ T9924] should_fail_ex+0x412/0x560 [ 1298.678536][ T9924] should_failslab+0xa8/0x100 [ 1298.678563][ T9924] __kmalloc_cache_node_noprof+0x87/0x6d0 [ 1298.678587][ T9924] ? __get_vm_area_node+0x13f/0x300 [ 1298.678623][ T9924] __get_vm_area_node+0x13f/0x300 [ 1298.678658][ T9924] __vmalloc_node_range_noprof+0x372/0x1730 [ 1298.678681][ T9924] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1298.678743][ T9924] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1298.678771][ T9924] ? __lock_acquire+0x6b5/0x2cf0 [ 1298.678799][ T9924] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1298.678827][ T9924] __vmalloc_noprof+0xd2/0x120 [ 1298.678847][ T9924] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1298.678878][ T9924] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1298.678911][ T9924] bpf_prog_alloc+0x3c/0x1a0 [ 1298.678944][ T9924] bpf_prog_load+0x7ba/0x1ae0 [ 1298.678972][ T9924] ? get_pid_task+0x20/0x1f0 [ 1298.679012][ T9924] ? __pfx_bpf_prog_load+0x10/0x10 [ 1298.679041][ T9924] ? __might_fault+0xaf/0x130 [ 1298.679091][ T9924] ? bpf_lsm_bpf+0x9/0x20 [ 1298.679119][ T9924] ? security_bpf+0x7e/0x2d0 [ 1298.679146][ T9924] __sys_bpf+0x570/0x920 [ 1298.679175][ T9924] ? __pfx___sys_bpf+0x10/0x10 [ 1298.679230][ T9924] ? ksys_write+0x242/0x270 [ 1298.679254][ T9924] ? __pfx_ksys_write+0x10/0x10 [ 1298.679283][ T9924] __x64_sys_bpf+0x7c/0x90 [ 1298.679310][ T9924] do_syscall_64+0xe2/0xf80 [ 1298.679339][ T9924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.679359][ T9924] ? trace_irq_disable+0x37/0x100 [ 1298.679386][ T9924] ? clear_bhb_loop+0x60/0xb0 [ 1298.679411][ T9924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.679433][ T9924] RIP: 0033:0x7fd7c799acb9 [ 1298.679453][ T9924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.679470][ T9924] RSP: 002b:00007fd7c889b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1298.679492][ T9924] RAX: ffffffffffffffda RBX: 00007fd7c7c15fa0 RCX: 00007fd7c799acb9 [ 1298.679507][ T9924] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1298.679521][ T9924] RBP: 00007fd7c889b090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.679534][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.679547][ T9924] R13: 00007fd7c7c16038 R14: 00007fd7c7c15fa0 R15: 00007ffc2d8669b8 [ 1298.679581][ T9924] [ 1298.679659][ T9924] syz.3.9895: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1298.745324][ T9925] CPU: 0 UID: 0 PID: 9925 Comm: syz.0.9894 Not tainted syzkaller #0 PREEMPT(full) [ 1298.745355][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1298.745367][ T9925] Call Trace: [ 1298.745376][ T9925] [ 1298.745384][ T9925] dump_stack_lvl+0xe8/0x150 [ 1298.745414][ T9925] should_fail_ex+0x412/0x560 [ 1298.745445][ T9925] _copy_from_user+0x2d/0xb0 [ 1298.745467][ T9925] ___sys_sendmsg+0x1c6/0x360 [ 1298.745484][ T9925] ? __lock_acquire+0x6b5/0x2cf0 [ 1298.745509][ T9925] ? __pfx____sys_sendmsg+0x10/0x10 [ 1298.745562][ T9925] ? __fget_files+0x2a/0x420 [ 1298.745584][ T9925] ? __fget_files+0x3a0/0x420 [ 1298.745616][ T9925] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1298.745637][ T9925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1298.745665][ T9925] ? __pfx_ksys_write+0x10/0x10 [ 1298.745695][ T9925] do_syscall_64+0xe2/0xf80 [ 1298.745722][ T9925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.745740][ T9925] ? trace_irq_disable+0x37/0x100 [ 1298.745764][ T9925] ? clear_bhb_loop+0x60/0xb0 [ 1298.745786][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.745804][ T9925] RIP: 0033:0x7f30a4f9acb9 [ 1298.745823][ T9925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.745839][ T9925] RSP: 002b:00007f30a5e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1298.745861][ T9925] RAX: ffffffffffffffda RBX: 00007f30a5215fa0 RCX: 00007f30a4f9acb9 [ 1298.745875][ T9925] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 1298.745887][ T9925] RBP: 00007f30a5e58090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.745900][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.745911][ T9925] R13: 00007f30a5216038 R14: 00007f30a5215fa0 R15: 00007ffca6d54d18 [ 1298.745942][ T9925] [ 1298.964363][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9896'. [ 1299.012111][ T9924] ,cpuset= [ 1299.142696][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9896'. [ 1299.206265][ T9924] /,mems_allowed=0-1 [ 1299.210721][ T9924] CPU: 1 UID: 0 PID: 9924 Comm: syz.3.9895 Not tainted syzkaller #0 PREEMPT(full) [ 1299.210751][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1299.210765][ T9924] Call Trace: [ 1299.210774][ T9924] [ 1299.210783][ T9924] dump_stack_lvl+0xe8/0x150 [ 1299.210816][ T9924] warn_alloc+0x249/0x340 [ 1299.210844][ T9924] ? __pfx_warn_alloc+0x10/0x10 [ 1299.210867][ T9924] ? __get_vm_area_node+0x13f/0x300 [ 1299.210902][ T9924] ? __get_vm_area_node+0x2b5/0x300 [ 1299.210940][ T9924] __vmalloc_node_range_noprof+0x397/0x1730 [ 1299.210990][ T9924] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1299.211018][ T9924] ? __lock_acquire+0x6b5/0x2cf0 [ 1299.211045][ T9924] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1299.211071][ T9924] __vmalloc_noprof+0xd2/0x120 [ 1299.211090][ T9924] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1299.211121][ T9924] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1299.211154][ T9924] bpf_prog_alloc+0x3c/0x1a0 [ 1299.211187][ T9924] bpf_prog_load+0x7ba/0x1ae0 [ 1299.211214][ T9924] ? get_pid_task+0x20/0x1f0 [ 1299.211251][ T9924] ? __pfx_bpf_prog_load+0x10/0x10 [ 1299.211274][ T9924] ? __might_fault+0xaf/0x130 [ 1299.211315][ T9924] ? bpf_lsm_bpf+0x9/0x20 [ 1299.211336][ T9924] ? security_bpf+0x7e/0x2d0 [ 1299.211363][ T9924] __sys_bpf+0x570/0x920 [ 1299.211391][ T9924] ? __pfx___sys_bpf+0x10/0x10 [ 1299.211436][ T9924] ? ksys_write+0x242/0x270 [ 1299.211459][ T9924] ? __pfx_ksys_write+0x10/0x10 [ 1299.211497][ T9924] __x64_sys_bpf+0x7c/0x90 [ 1299.211521][ T9924] do_syscall_64+0xe2/0xf80 [ 1299.211551][ T9924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.211571][ T9924] ? trace_irq_disable+0x37/0x100 [ 1299.211598][ T9924] ? clear_bhb_loop+0x60/0xb0 [ 1299.211623][ T9924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.211643][ T9924] RIP: 0033:0x7fd7c799acb9 [ 1299.211662][ T9924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.211680][ T9924] RSP: 002b:00007fd7c889b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1299.211704][ T9924] RAX: ffffffffffffffda RBX: 00007fd7c7c15fa0 RCX: 00007fd7c799acb9 [ 1299.211720][ T9924] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1299.211733][ T9924] RBP: 00007fd7c889b090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.211747][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.211760][ T9924] R13: 00007fd7c7c16038 R14: 00007fd7c7c15fa0 R15: 00007ffc2d8669b8 [ 1299.211793][ T9924] [ 1299.212253][ T9924] Mem-Info: [ 1299.496270][ T9924] active_anon:8275 inactive_anon:0 isolated_anon:0 [ 1299.496270][ T9924] active_file:3914 inactive_file:40458 isolated_file:0 [ 1299.496270][ T9924] unevictable:993 dirty:292 writeback:0 [ 1299.496270][ T9924] slab_reclaimable:14446 slab_unreclaimable:160458 [ 1299.496270][ T9924] mapped:32370 shmem:3647 pagetables:1411 [ 1299.496270][ T9924] sec_pagetables:0 bounce:0 [ 1299.496270][ T9924] kernel_misc_reclaimable:0 [ 1299.496270][ T9924] free:1195480 free_pcp:24312 free_cma:0 [ 1299.537604][ T9938] netlink: 'syz.2.9900': attribute type 1 has an invalid length. [ 1299.618036][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9900'. [ 1299.672263][ T9924] Node 0 active_anon:33100kB inactive_anon:0kB active_file:15656kB inactive_file:161628kB unevictable:2436kB isolated(anon):0kB isolated(file):0kB mapped:121588kB dirty:1168kB writeback:0kB shmem:13352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13784kB pagetables:5196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1299.680924][ T9939] netlink: 7808 bytes leftover after parsing attributes in process `syz.2.9900'. [ 1299.776338][ T9924] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1299.896485][ T9924] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.976306][ T9924] lowmem_reserve[]: 0 2495 2497 2497 2497 [ 1299.982521][ T9924] Node 0 DMA32 free:1050356kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33900kB inactive_anon:0kB active_file:15656kB inactive_file:161628kB unevictable:2436kB writepending:1168kB zspages:0kB present:3129332kB managed:2555780kB mlocked:900kB bounce:0kB free_pcp:42196kB local_pcp:21288kB free_cma:0kB [ 1300.071709][ T9924] lowmem_reserve[]: 0 0 1 1 1 [ 1300.118638][ T9924] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.205591][ T9924] lowmem_reserve[]: 0 0 0 0 0 [ 1300.226124][ T9924] Node 1 Normal free:3722512kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55288kB local_pcp:25748kB free_cma:0kB [ 1300.306302][ T9924] lowmem_reserve[]: 0 0 0 0 0 [ 1300.336474][ T9924] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 1300.386630][ T9924] Node 0 DMA32: 3983*4kB (UME) 7006*8kB (UME) 4701*16kB (UME) 1924*32kB (UME) 1188*64kB (UE) 596*128kB (UME) 349*256kB (UME) 387*512kB (UME) 242*1024kB (UE) 75*2048kB (UM) 0*4096kB = 1049980kB [ 1300.466318][ T9924] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1300.507822][ T9924] Node 1 Normal: 269*4kB (UE) 74*8kB (UME) 56*16kB (UME) 130*32kB (UME) 42*64kB (UME) 15*128kB (UME) 7*256kB (UM) 5*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 903*4096kB (UM) = 3722564kB [ 1300.570036][ T9924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1300.606459][ T9924] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1300.660376][ T9924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1300.685274][ T9924] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1300.706759][ T9924] 48438 total pagecache pages [ 1300.711521][ T9924] 0 pages in swap cache [ 1300.724659][ T9924] Free swap = 124996kB [ 1300.740385][ T9924] Total swap = 124996kB [ 1300.759063][ T9924] 2097051 pages RAM [ 1300.772661][ T9924] 0 pages HighMem/MovableOnly [ 1300.792287][ T9924] 426144 pages reserved [ 1300.814538][ T9924] 0 pages cma reserved [ 1301.030451][ T8094] lo speed is unknown, defaulting to 1000 [ 1301.053306][ T8094] syz2: Port: 1 Link DOWN [ 1301.593030][ T9988] FAULT_INJECTION: forcing a failure. [ 1301.593030][ T9988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.656844][ T9988] CPU: 1 UID: 0 PID: 9988 Comm: syz.0.9918 Not tainted syzkaller #0 PREEMPT(full) [ 1301.656876][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1301.656890][ T9988] Call Trace: [ 1301.656899][ T9988] [ 1301.656909][ T9988] dump_stack_lvl+0xe8/0x150 [ 1301.656953][ T9988] should_fail_ex+0x412/0x560 [ 1301.656993][ T9988] _copy_from_user+0x2d/0xb0 [ 1301.657017][ T9988] ___sys_recvmsg+0x175/0x590 [ 1301.657048][ T9988] ? __pfx____sys_recvmsg+0x10/0x10 [ 1301.657074][ T9988] ? __fget_files+0x2a/0x420 [ 1301.657131][ T9988] do_recvmmsg+0x334/0x800 [ 1301.657163][ T9988] ? __pfx_do_recvmmsg+0x10/0x10 [ 1301.657199][ T9988] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1301.657249][ T9988] __x64_sys_recvmmsg+0x198/0x250 [ 1301.657275][ T9988] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1301.657311][ T9988] do_syscall_64+0xe2/0xf80 [ 1301.657341][ T9988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.657362][ T9988] ? trace_irq_disable+0x37/0x100 [ 1301.657389][ T9988] ? clear_bhb_loop+0x60/0xb0 [ 1301.657415][ T9988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.657437][ T9988] RIP: 0033:0x7f30a4f9acb9 [ 1301.657457][ T9988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.657484][ T9988] RSP: 002b:00007f30a5e58028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1301.657509][ T9988] RAX: ffffffffffffffda RBX: 00007f30a5215fa0 RCX: 00007f30a4f9acb9 [ 1301.657524][ T9988] RDX: 03fffffffffffff2 RSI: 0000200000004400 RDI: 0000000000000006 [ 1301.657538][ T9988] RBP: 00007f30a5e58090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.657552][ T9988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1301.657564][ T9988] R13: 00007f30a5216038 R14: 00007f30a5215fa0 R15: 00007ffca6d54d18 [ 1301.657604][ T9988] [ 1302.136735][T10002] ip6_vti0: Caught tx_queue_len zero misconfig [ 1302.757258][T10026] netlink: 'syz.4.9930': attribute type 1 has an invalid length. [ 1302.760453][T32030] Bluetooth: hci3: command 0x0406 tx timeout [ 1302.766825][T10028] Bluetooth: hci1: command 0x040f tx timeout [ 1303.036511][T10030] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1303.088201][T10030] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1303.324049][T10026] bond1: (slave gretap1): making interface the new active one [ 1303.407152][T10026] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1303.850189][T10050] netlink: 532 bytes leftover after parsing attributes in process `syz.2.9933'. [ 1303.961050][T10052] netlink: 'syz.3.9936': attribute type 5 has an invalid length. [ 1304.005714][T10055] netlink: 820 bytes leftover after parsing attributes in process `syz.2.9937'. [ 1304.051722][T10055] netlink: 820 bytes leftover after parsing attributes in process `syz.2.9937'. [ 1304.439819][T10068] netlink: 'syz.2.9940': attribute type 66 has an invalid length. [ 1304.471096][T10068] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1304.500161][T10068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.028213][T10082] netlink: 'syz.2.9945': attribute type 1 has an invalid length. [ 1305.419206][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9947'. [ 1305.802712][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1306.123238][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9948'. [ 1306.163370][T10103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9948'. [ 1306.196485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.205079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.205349][T10103] macvlan0: entered allmulticast mode [ 1306.214283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.228084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.251434][T10103] veth1_vlan: entered allmulticast mode [ 1306.530562][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9949'. [ 1306.668019][T10114] Unsupported ieee802154 address type: 0 [ 1307.007366][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9953'. [ 1307.080376][T18055] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.106528][T18055] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.135774][T18055] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.175730][T18055] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.252404][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9953'. [ 1308.653361][T10134] lo speed is unknown, defaulting to 1000 [ 1309.569105][T10149] x_tables: duplicate underflow at hook 1 [ 1309.628089][T10150] openvswitch: netlink: IP tunnel dst address not specified [ 1309.943992][T10156] xt_hashlimit: max too large, truncated to 1048576 [ 1310.033257][T10156] netlink: 'syz.2.9962': attribute type 4 has an invalid length. [ 1310.066014][T10159] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 1310.094013][T10160] netlink: 'syz.2.9962': attribute type 4 has an invalid length. [ 1310.149585][T10157] lo speed is unknown, defaulting to 1000 [ 1310.527781][T10164] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1310.536094][T10164] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1311.316338][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1311.324807][ C1] lec:lec_tx_timeout: lec0 [ 1312.030515][T10179] syzkaller0: entered promiscuous mode [ 1312.076390][T10179] syzkaller0: entered allmulticast mode [ 1312.579059][T10179] lo speed is unknown, defaulting to 1000 [ 1312.631816][T10190] tipc: Enabled bearer , priority 0 [ 1312.752972][T10190] syzkaller0: entered promiscuous mode [ 1312.779495][T10190] syzkaller0: entered allmulticast mode [ 1312.813248][T10190] tipc: Resetting bearer [ 1312.907189][T10187] tipc: Resetting bearer [ 1313.017140][T10187] tipc: Disabling bearer [ 1313.046716][T17603] IPVS: starting estimator thread 0... [ 1313.136373][T10202] IPVS: using max 28 ests per chain, 67200 per kthread [ 1313.278953][T10201] syzkaller0: entered promiscuous mode [ 1313.285666][T10201] syzkaller0: entered allmulticast mode [ 1313.493727][T10214] netlink: 'syz.3.9980': attribute type 16 has an invalid length. [ 1313.519251][T10214] netlink: 408 bytes leftover after parsing attributes in process `syz.3.9980'. [ 1313.560474][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.586994][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.600235][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.611861][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.620723][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.632875][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.644228][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.706352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.748439][T10222] sctp: [Deprecated]: syz.3.9980 (pid 10222) Use of int in max_burst socket option deprecated. [ 1313.748439][T10222] Use struct sctp_assoc_value instead [ 1317.354017][T10231] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9985'. [ 1317.474716][T10234] gretap1: entered promiscuous mode [ 1317.537207][T10237] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1317.644397][T10240] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1317.661485][T10240] syzkaller1: linktype set to 823 [ 1317.673544][T10240] netlink: 'syz.2.9989': attribute type 39 has an invalid length. [ 1317.951728][T24976] lec:lec_start_xmit: lec0:No lecd attached [ 1317.988383][T10251] syzkaller0: entered promiscuous mode [ 1317.994485][T10251] syzkaller0: entered allmulticast mode [ 1318.068048][T10251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9994'. [ 1318.417510][T10268] netlink: 'syz.2.9998': attribute type 3 has an invalid length. [ 1318.443315][T10268] netlink: 666 bytes leftover after parsing attributes in process `syz.2.9998'. [ 1318.549954][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9998'. [ 1318.565977][T10274] net_ratelimit: 5 callbacks suppressed [ 1318.566000][T10274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1318.622598][T10275] lo speed is unknown, defaulting to 1000 [ 1318.625790][T10274] netlink: 'syz.3.10000': attribute type 10 has an invalid length. [ 1318.698407][T10268] lo speed is unknown, defaulting to 1000 [ 1318.789267][T10276] lo speed is unknown, defaulting to 1000 [ 1319.582065][ T1597] hid-generic 0005:0006:5508.004F: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1320.452969][T10315] xt_connbytes: Forcing CT accounting to be enabled [ 1320.471956][T10315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.481333][T10315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.511433][T10315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.537892][T10315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.566627][T10315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.585664][T10315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.601091][T10315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.611511][T10315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.622945][T10315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.803205][T10317] syzkaller0: entered promiscuous mode [ 1320.863636][T10317] syzkaller0: entered allmulticast mode [ 1320.987451][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10014'. [ 1321.046806][T10323] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10012'. [ 1321.323055][T10344] FAULT_INJECTION: forcing a failure. [ 1321.323055][T10344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1321.395928][T10344] CPU: 0 UID: 0 PID: 10344 Comm: syz.4.10019 Not tainted syzkaller #0 PREEMPT(full) [ 1321.395961][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1321.395974][T10344] Call Trace: [ 1321.395983][T10344] [ 1321.395993][T10344] dump_stack_lvl+0xe8/0x150 [ 1321.396028][T10344] should_fail_ex+0x412/0x560 [ 1321.396063][T10344] _copy_from_user+0x2d/0xb0 [ 1321.396088][T10344] kstrtouint_from_user+0xd6/0x180 [ 1321.396121][T10344] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1321.396181][T10344] proc_fail_nth_write+0x8e/0x210 [ 1321.396204][T10344] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1321.396232][T10344] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1321.396256][T10344] vfs_write+0x29a/0xb90 [ 1321.396286][T10344] ? __pfx_vfs_write+0x10/0x10 [ 1321.396307][T10344] ? __fget_files+0x2a/0x420 [ 1321.396337][T10344] ? __fget_files+0x3a0/0x420 [ 1321.396360][T10344] ? __fget_files+0x2a/0x420 [ 1321.396397][T10344] ksys_write+0x150/0x270 [ 1321.396421][T10344] ? __pfx_ksys_write+0x10/0x10 [ 1321.396455][T10344] do_syscall_64+0xe2/0xf80 [ 1321.396485][T10344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.396505][T10344] ? trace_irq_disable+0x37/0x100 [ 1321.396531][T10344] ? clear_bhb_loop+0x60/0xb0 [ 1321.396555][T10344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.396576][T10344] RIP: 0033:0x7faa0275b58e [ 1321.396596][T10344] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1321.396614][T10344] RSP: 002b:00007faa035e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1321.396638][T10344] RAX: ffffffffffffffda RBX: 00007faa035ea6c0 RCX: 00007faa0275b58e [ 1321.396653][T10344] RDX: 0000000000000001 RSI: 00007faa035ea0a0 RDI: 0000000000000004 [ 1321.396667][T10344] RBP: 00007faa035ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.396680][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1321.396693][T10344] R13: 00007faa02a16038 R14: 00007faa02a15fa0 R15: 00007ffc06212fe8 [ 1321.396729][T10344] [ 1321.456744][T10346] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10018'. [ 1322.429118][T10353] syzkaller0: entered promiscuous mode [ 1322.434690][T10353] syzkaller0: entered allmulticast mode [ 1427.616143][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1427.623348][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10383/1:b..l [ 1427.632224][ C0] rcu: (detected by 0, t=10503 jiffies, g=232373, q=525 ncpus=2) [ 1427.640483][ C0] task:syz.4.10030 state:R running task stack:27264 pid:10383 tgid:10383 ppid:7625 task_flags:0x40004c flags:0x00080000 [ 1427.656090][ C0] Call Trace: [ 1427.659512][ C0] [ 1427.662818][ C0] __schedule+0x14ef/0x4fb0 [ 1427.667698][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1427.672748][ C0] ? __pfx___schedule+0x10/0x10 [ 1427.677653][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1427.682875][ C0] irqentry_exit+0x597/0x620 [ 1427.687746][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1427.693731][ C0] RIP: 0010:is_bpf_text_address+0x288/0x2b0 [ 1427.699652][ C0] Code: c2 a0 d0 93 8b e8 78 94 cd ff 48 85 db 0f 95 c0 48 81 fb 20 02 00 00 40 0f 95 c5 40 20 c5 48 c7 c7 20 a3 35 8e 48 8b 74 24 08 03 7b cd ff e8 9e 22 d7 ff 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 [ 1427.719694][ C0] RSP: 0018:ffffc900000f7850 EFLAGS: 00000246 [ 1427.725785][ C0] RAX: ffffffff81d1cf00 RBX: 0000000000000000 RCX: ffff888061455b80 [ 1427.734231][ C0] RDX: 0000000000000000 RSI: ffffffff81d1cd26 RDI: ffffffff8e35a320 [ 1427.742835][ C0] RBP: 0000000000000000 R08: ffffffff81d1cd26 R09: ffffffff8e35a320 [ 1427.750987][ C0] R10: ffffc900000f7938 R11: ffffffff81ae4560 R12: 00000000000028da [ 1427.759135][ C0] R13: dffffc0000000000 R14: 00007faa0279acb9 R15: 0000000000000000 [ 1427.767228][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1427.773427][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1427.778637][ C0] ? is_bpf_text_address+0x200/0x2b0 [ 1427.784022][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1427.789637][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1427.794885][ C0] kernel_text_address+0xa5/0xe0 [ 1427.800012][ C0] __kernel_text_address+0xd/0x30 [ 1427.805222][ C0] unwind_get_return_address+0x4d/0x90 [ 1427.810688][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1427.816858][ C0] arch_stack_walk+0xfb/0x150 [ 1427.822001][ C0] stack_trace_save+0xa9/0x100 [ 1427.827059][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1427.832651][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1427.837864][ C0] kasan_save_track+0x3e/0x80 [ 1427.842809][ C0] ? kasan_save_track+0x3e/0x80 [ 1427.847660][ C0] ? kasan_save_free_info+0x46/0x50 [ 1427.852870][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1427.857835][ C0] ? kfree+0x1be/0x650 [ 1427.861978][ C0] ? put_files_struct+0x2dc/0x350 [ 1427.867295][ C0] ? do_exit+0x655/0x2310 [ 1427.871772][ C0] ? do_group_exit+0x21b/0x2d0 [ 1427.876587][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 1427.881909][ C0] ? x64_sys_call+0x2210/0x2210 [ 1427.886772][ C0] ? do_syscall_64+0xe2/0xf80 [ 1427.891508][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.897786][ C0] kasan_save_free_info+0x46/0x50 [ 1427.902912][ C0] __kasan_slab_free+0x5c/0x80 [ 1427.907780][ C0] ? put_files_struct+0x2dc/0x350 [ 1427.912991][ C0] kfree+0x1be/0x650 [ 1427.917077][ C0] put_files_struct+0x2dc/0x350 [ 1427.922047][ C0] do_exit+0x655/0x2310 [ 1427.926326][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1427.932435][ C0] ? __pfx_do_exit+0x10/0x10 [ 1427.937855][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1427.943494][ C0] ? preempt_schedule_common+0x82/0xd0 [ 1427.949005][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1427.954479][ C0] do_group_exit+0x21b/0x2d0 [ 1427.959567][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1427.964718][ C0] x64_sys_call+0x2210/0x2210 [ 1427.969435][ C0] do_syscall_64+0xe2/0xf80 [ 1427.974058][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.980592][ C0] ? trace_irq_disable+0x37/0x100 [ 1427.985721][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1427.990630][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.996668][ C0] RIP: 0033:0x7faa0279acb9 [ 1428.001297][ C0] RSP: 002b:00007ffc06213328 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1428.010159][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faa0279acb9 [ 1428.018401][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1428.026819][ C0] RBP: 00007ffc0621338c R08: 0000000000000000 R09: 00000000000927c0 [ 1428.035055][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000093 [ 1428.043303][ C0] R13: 00000000000927c0 R14: 0000000000142da5 R15: 00007ffc062133e0 [ 1428.051635][ C0] [ 1428.054936][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10496 jiffies! g232373 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1428.067928][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=101493 [ 1428.076158][ C0] rcu: rcu_preempt kthread starved for 10497 jiffies! g232373 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1428.087789][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1428.098053][ C0] rcu: RCU grace-period kthread stack dump: [ 1428.104121][ C0] task:rcu_preempt state:I stack:27504 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1428.116265][ C0] Call Trace: [ 1428.119558][ C0] [ 1428.122758][ C0] __schedule+0x14ef/0x4fb0 [ 1428.127287][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1428.132348][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1428.137605][ C0] ? __pfx___schedule+0x10/0x10 [ 1428.142652][ C0] ? schedule+0x90/0x360 [ 1428.147178][ C0] schedule+0x164/0x360 [ 1428.151540][ C0] schedule_timeout+0x158/0x2c0 [ 1428.156461][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1428.162134][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1428.167808][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1428.173915][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1428.179501][ C0] rcu_gp_fqs_loop+0x312/0x1560 [ 1428.184396][ C0] ? rcu_gp_init+0x11c4/0x1640 [ 1428.189174][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1428.195690][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1428.201014][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1428.206689][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1428.212524][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 1428.217220][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1428.222694][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1428.227942][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1428.233241][ C0] kthread+0x726/0x8b0 [ 1428.237511][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1428.242809][ C0] ? __pfx_kthread+0x10/0x10 [ 1428.247507][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1428.252971][ C0] ? __pfx_kthread+0x10/0x10 [ 1428.257567][ C0] ret_from_fork+0x51b/0xa40 [ 1428.262175][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1428.267423][ C0] ? __switch_to+0xc82/0x1410 [ 1428.272122][ C0] ? __pfx_kthread+0x10/0x10 [ 1428.277090][ C0] ret_from_fork_asm+0x1a/0x30 [ 1428.281878][ C0] [ 1428.284909][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1428.291404][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1428.296664][ C1] NMI backtrace for cpu 1 [ 1428.296680][ C1] CPU: 1 UID: 0 PID: 5198 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1428.296700][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1428.296711][ C1] RIP: 0010:mm_get_cid+0xab/0x130 [ 1428.296734][ C1] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 01 eb e7 09 cc 49 c7 c5 c8 14 d8 8d 49 c1 ed 03 bd 00 00 00 80 eb 07 44 89 f0 f7 d8 71 d4 f3 90 <43> 0f b6 44 25 00 84 c0 75 41 44 8b 3d bc 9e 44 0c 48 89 df 4c 89 [ 1428.296749][ C1] RSP: 0018:ffffc90002ff7a68 EFLAGS: 00000887 [ 1428.296766][ C1] RAX: 0000000080000000 RBX: ffff88802607bc90 RCX: dffffc0000000000 [ 1428.296779][ C1] RDX: 0000000000000002 RSI: 0000000000000002 RDI: ffff88802607bc90 [ 1428.296790][ C1] RBP: 0000000080000000 R08: ffff88802607bb13 R09: 1ffff11004c0f762 [ 1428.296803][ C1] R10: dffffc0000000000 R11: ffffed1004c0f763 R12: dffffc0000000000 [ 1428.296815][ C1] R13: 1ffffffff1bb0299 R14: 0000000080000000 R15: 0000000000000002 [ 1428.296827][ C1] FS: 00007fd09b00b880(0000) GS:ffff888125a29000(0000) knlGS:0000000000000000 [ 1428.296842][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1428.296855][ C1] CR2: 0000200000061030 CR3: 0000000053c5a000 CR4: 00000000003526f0 [ 1428.296872][ C1] Call Trace: [ 1428.296880][ C1] [ 1428.296889][ C1] __schedule+0x21ae/0x4fb0 [ 1428.296913][ C1] ? ep_try_send_events+0xe4c/0xf80 [ 1428.296941][ C1] ? __pfx_ep_try_send_events+0x10/0x10 [ 1428.296966][ C1] ? __pfx___schedule+0x10/0x10 [ 1428.296994][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1428.297017][ C1] irqentry_exit+0x597/0x620 [ 1428.297043][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1428.297062][ C1] RIP: 0010:lock_acquire+0x221/0x330 [ 1428.297079][ C1] Code: ff ff ff e8 51 63 d9 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 3b 54 30 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 88 ff 32 [ 1428.297092][ C1] RSP: 0018:ffffc90002ff7dd8 EFLAGS: 00000286 [ 1428.297106][ C1] RAX: fee769a431f46c00 RBX: 0000000000000000 RCX: 0000000000000046 [ 1428.297117][ C1] RDX: 0000000007f52300 RSI: ffffffff8dd3d23d RDI: ffffffff8be73880 [ 1428.297129][ C1] RBP: ffffffff821b805c R08: ffffffff821b805c R09: ffffffff8e490ba0 [ 1428.297141][ C1] R10: dffffc0000000000 R11: fffffbfff1f9daef R12: 0000000000000000 [ 1428.297153][ C1] R13: ffffffff8e490ba0 R14: 0000000000000001 R15: 0000000000000246 [ 1428.297166][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 1428.297185][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 1428.297205][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 1428.297223][ C1] fs_reclaim_acquire+0x98/0x100 [ 1428.297239][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 1428.297255][ C1] kmem_cache_alloc_noprof+0x45/0x6e0 [ 1428.297278][ C1] ? __pfx___x64_sys_epoll_wait+0x10/0x10 [ 1428.297299][ C1] ? getname_flags+0xb7/0x540 [ 1428.297320][ C1] getname_flags+0xb7/0x540 [ 1428.297340][ C1] __x64_sys_unlink+0x3a/0x50 [ 1428.297365][ C1] do_syscall_64+0xe2/0xf80 [ 1428.297389][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.297405][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1428.297424][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.297440][ C1] RIP: 0033:0x7fd09a915937 [ 1428.297454][ C1] Code: Unable to access opcode bytes at 0x7fd09a91590d. [ 1428.297463][ C1] RSP: 002b:00007ffcca97b2b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 1428.297480][ C1] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007fd09a915937 [ 1428.297492][ C1] RDX: 0000000000000000 RSI: 000000004ecc1e80 RDI: 0000562d1eb2402e [ 1428.297503][ C1] RBP: 0000000000000000 R08: 000000004ed5463d R09: 3fffffffffffffff [ 1428.297515][ C1] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1428.297526][ C1] R13: 0000562d1eb3f100 R14: 0000000000000001 R15: 0000000000000000 [ 1428.297545][ C1]