last executing test programs: 3.055741722s ago: executing program 3 (id=24104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000, 0xffffffffffffffff}, 0x800}}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x54ade101953087b9, 0x5, 0x3, 0x9d7a, 0x51, 0x1, 0x4, '\x00', r3, r4, 0x3, 0x3}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000fbffffff000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 3.055446051s ago: executing program 3 (id=24105): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/21, 0x15}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20030044, &(0x7f0000000200)={0xa, 0x4e20, 0xfffffffc, @mcast1}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x4070bd2f, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r4, 0x100003) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r6, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) 3.053451215s ago: executing program 3 (id=24110): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x400448dd, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000014c0)) 2.133788279s ago: executing program 4 (id=24120): r0 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800000071116a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000015b9c5f403dd9c57b49f21992690000000000000000000000000a30000000060a09040000000000000000020000000900020073797a32000000000900010073797a310000000004000480140000001100010000000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) socket$packet(0x11, 0x3, 0x300) write$tun(r2, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x8) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newchain={0x3c, 0x64, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xe, 0xd}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0xe9}}, @TCA_RATE={0x6, 0x5, {0x8, 0xc7}}]}, 0x3c}}, 0x0) (async) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000500)=""/212, 0xd4}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/254, 0xfe}], 0x8, &(0x7f0000000900)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x148}}], 0x1, 0x0, &(0x7f0000000380)={0x0, 0x989680}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00100029bd7000000000000a0000000000ff0000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="080010000a75"], 0x34}}, 0x20000000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x90, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) (async) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000ac0)={r7, r10}) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r11) (async) bind$inet(r8, &(0x7f0000000a80)={0x2, 0x4e20, @broadcast}, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r12, @ANYBLOB="01002cbd7000ffdbdf251300000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="540013"], 0x80}, 0x1, 0x0, 0x0, 0x50080}, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.983487539s ago: executing program 3 (id=24121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="400084000201010100000000000000000a0000060c001980080001000c09000008000340000020041800018006000340000400000c000280050001"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.978695311s ago: executing program 3 (id=24122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x50, r6, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0xba78107cf87b91a3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/27, 0x1b}], 0x1, 0x4, 0x3) 1.880558737s ago: executing program 4 (id=24124): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0xd4, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, r4, {0x3}, {0xffff, 0xffff}, {0xffe0}}, [@TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x1, 0x8, 0x2, 0x1, 0x152, 0x5}}, {0xe, 0x2, [0xa83, 0x8, 0x44, 0x800, 0x0]}}, {{0x1c, 0x1, {0xb, 0x4, 0xff, 0xa, 0x2, 0x9, 0x8000, 0xa}}, {0x18, 0x2, [0x1ff, 0x7ff, 0xc, 0x7, 0x592d, 0x1, 0x80, 0x2, 0x3, 0xff1]}}, {{0x1c, 0x1, {0x2, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x3}}, {0xa, 0x2, [0x7, 0x9, 0x36c]}}]}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x80, 0x3, 0x0, 0x9, 0x7}}, {0x4}}]}]}, 0xd4}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000380)={0xfffc}, 0x8) sendto$inet6(r6, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10) sendto$phonet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0x23, 0x8, 0xc8}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f0000000000)=0x2ac, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48b43, 0x0) connect$inet6(r7, 0x0, 0x0) connect(r7, &(0x7f0000000080)=@sco, 0x80) 1.786491309s ago: executing program 0 (id=24127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x10, 0x872}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x10, 0x872}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffff800, 0x4) (async) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffff800, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x51]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) 1.663885071s ago: executing program 2 (id=24129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x78, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 1.615455022s ago: executing program 0 (id=24130): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r1) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r2, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r3}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r2, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd605f1060004a2f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000ca000300000800000086dd080088be"], 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x22020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000064140013000000000000000000"], 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="09000000010001", 0x7) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendto(r8, 0x0, 0x0, 0x240048c4, 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000040), 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010013bd7000fcdbdf25010000000500afef420000000800030006000000050005"], 0x2c}}, 0x24000806) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x85}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008804}, 0xc2cc66ca1526115c) sendmsg$netlink(r4, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x20000c4}, 0x0) accept4$ax25(r2, 0x0, 0x0, 0x800) socket$pppoe(0x18, 0x1, 0x0) 1.589787899s ago: executing program 2 (id=24132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400}, 0x24000800) 1.530439785s ago: executing program 2 (id=24133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x38000000, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffc, 0x20, 0xb, 0xff, 0x6, 0x7, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 1.425101887s ago: executing program 2 (id=24134): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000000000a2c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000098000000060a01040000000000000000010000020000020073797a32000000000000010073797a31000000000900010073797a3000000000140000001100010000000000000000000100000a000000000000000000"], 0xec}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket(0x2b, 0x80801, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) r8 = socket(0x1e, 0x4, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r9, &(0x7f0000000080), &(0x7f0000000340)=""/10}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r8], 0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.203369561s ago: executing program 1 (id=24136): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x28, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="bf16000000000000b7070000060000005070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f24b8a4efc02d459d9e32a3aa81d36bb3019c13bd23212fb56f040026fb41f2db3b1639b7bbc9af171b856de734cfe3cafafefc40056bdc17487960007102fa9ea41da123741c66be166992b2dcd72fa0fca047d41886d0d4d94f2f4e345c652fbc1626cca2a2ad35806150ae0209e62f51ee988e6e06c8cedf3ceb9fc404000000c588b277beee1cbf9b0a4def42d410f6accd3637110bec4e90a6341965c39e9ebab0e39622200e011ea661c45a3449abe802f5ab3e3101c0932ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0cd2b6d357b8000018ef4aafad197acc7dc1e955c685ceff7f000000000000491b8bc4748eda186872000007ce468ee23fd2f73902ebcfcf49822775985bf31b405b433a8acd715f5888b2007f00000000000000000100fb0000000000000000ff03000000000000b56780260ed652290f58fa64533500ebffffff00ca1276445432997f0000000000000008e75a89faff01210cce39bf405f1e846c12423a163b33e680846f26dc7add65873d9f87463ad6f7c2f3ee1a39244960b318778f2a047f6d0800000000000000e7a6520602a80d608df4d433623c850af895abba72bf14f6fbd7fbad2a436804eeae1de6d2c740cf0c0b74edbcb2d4b7746fa4bc5e32bd378af7c9136adf32ec7bf48cabecead649f96ea24c32872c490637c34360cb5d46ce680eeb80127eb23f9902519a693b85c6552051385e7e87a2db762cbb253fbd76b9117c1a11d18aa21a0c5f0c28999a639c0376678be35ffe99ff799a11d9b219c00c369a12bf8685b862d2000000bda1bae489bcef5ae59136aaacc59608f4d4e6067338b521eaf2e2465da053cfd5e95394e5520545364361d2c1465c5461a7c4174e5cd9c7976c9aa6342c5621dbc2dccedb5ab74e0b119252a23352fca272212d0c0104000014593d65d3f5e1e9b294669bcd2df061a4d6a835e40e7302f53f90da24cb256b34e95bca9c512f737486ecd037ce40d0a706a5b05e72f8c218366e321f9109ae4cf44b3b0104154a93394f42b4ab6125e0ba8b1a1d8c473852910b3cb7e8dc795ac01bad9a6b438b9db5f5c926940a3ac36daf2a9dc9d868ec11f51e08bc67a3d598039d328b4677229e8b587e8a00f1733adabd5d2837c084c164cf30010969c79a09ac7a9bffff5bc7e420baa9000cd49f77782205d3f6f4b6aa751f49a6b76e3d23635f1d33b906707563b8ec92dec767cc09fe9936acb43382bfc81c823ba32f25738d863cf20181208e23ce19966e729a7b4eefa68554fa4ccadac05c8eac1b52dd528b124285a16da468e3fcb3d9a24e9d670500956702fe9be5d8207d426450ca622e8e0197270cbb947231baf36e0567c0f5de639c99bb71ca0e60d2decb185cddd74d4f00000000000000000000006ed429a657a8203f6542e9dd19d7a70431aefcb9f1b673512e25503c603f19fa4c39ee9b08aadd2c7555543837770a812207bc2be9c86f94282b325e3097438594670099106f0defa59616d3d18a4c8c04a45c204edfc4cefbd94c4c034dcbc90975b097ece2484b5287105335791eb3061ac500a6728677c72b5b76c18186d6f1a5c74aaddd22dc002fd4bd1bc3409e8d7144689c89f7a5e95fce153d4e9bf0fe0aaa3dfaa443c5081606fda5059146ef94586f5d1658ef0389734108a3af432c730175a7c6e3bb997ed39a0da78527b212001e573492190000"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000047c0)=r5, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@gettaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x48010) close(0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet_sctp(r3, &(0x7f0000000300)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x98, 0x20004010}], 0x1, 0x20000044) 1.165173441s ago: executing program 1 (id=24137): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)="c352ba490f2ee9dd1f0aaded7539547cd266c1e79144182c57eebd24bcd6fc4ebdcef6", 0x23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000400)={0x3, 0x8, 0x800a, 0x6, 0xe, 0x3, 0x3, 0xe42}, &(0x7f00000014c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000002040)) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4044814) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 1.106345266s ago: executing program 1 (id=24138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000240)={0x77359400}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8, 0x80, 0x2, 0x5, {{0x2c, 0x4, 0x3, 0x37, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@noop, @timestamp_prespec={0x44, 0x24, 0x22, 0x3, 0x6, [{@multicast2, 0x1c4}, {@loopback, 0x9}, {@local, 0x1b5}, {@private=0xa010100}]}, @timestamp={0x44, 0x20, 0x7d, 0x0, 0x3, [0x81, 0xae69, 0x5, 0x0, 0x6, 0x7, 0x7]}, @noop, @cipso={0x86, 0x17, 0x1, [{0x0, 0xa, "fedcf5549c560642"}, {0x5, 0x7, "a5119c55ee"}]}, @rr={0x7, 0x7, 0x2c, [@remote]}, @rr={0x7, 0xb, 0x11, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp_addr={0x44, 0x2c, 0x1a, 0x1, 0x9, [{@loopback, 0x2}, {@empty, 0x2}, {@loopback, 0x3ff}, {@multicast2, 0x81}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xe}]}]}}}}}) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 931.489768ms ago: executing program 2 (id=24139): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000850) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000014000180050002000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r9, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r10, &(0x7f0000000300)="fee0159746bc29e9d0a444b6d3fe6989e07844b71dbc18b48ad40c41d913bc30d3b983c85ecf6f4d60506a6312a4adf723e6489728447f33e4a0038fce0dfad27fb661bf280e2f5c77d5a0d6d7d3ac4606b3f71cd1570f2d3b", &(0x7f0000000440)=""/234}, 0x20) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000200001030000000000004000020000001100000304000100080017009d"], 0x24}, 0x1, 0x0, 0x0, 0x2004}, 0x44004) 930.672389ms ago: executing program 3 (id=24140): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000000000a2c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000098000000060a01040000000000000000010000020000020073797a32000000000000010073797a31000000000900010073797a3000000000140000001100010000000000000000000100000a000000000000000000"], 0xec}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket(0x2b, 0x80801, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) r8 = socket(0x1e, 0x4, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r9, &(0x7f0000000080), &(0x7f0000000340)=""/10}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r8], 0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 691.278554ms ago: executing program 4 (id=24141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@set4={{0x50}, {{}, {{0x44}, 0x5a}, {{0x2000004}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x12, "be45"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f9b7b5acfe1e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x24004001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1cfa0e000000000000000000000000df0a0000014500010003000000"], 0x1c}}, 0x20004880) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_DELFLOWTABLE={0xe0, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4e}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x174}}, 0x0) 683.40871ms ago: executing program 0 (id=24142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x78, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe8}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 557.30736ms ago: executing program 0 (id=24143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r1 = socket(0x15, 0x80005, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x2000000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r8}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r7, r9, 0x37, 0x2000, 0x0, @value, @void, @void, @void, r11}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r11}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f, 0xffffffffffffffff, @void, @void, @value, @void, r11}, 0x20) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000099940000a4403000f0ffffff183a0000030000000000000000000000d50850000800000005881000ff0300009500010000000000f7b9f01b6d8c873a01fe71390e0e8f0683ef0e5646ea00a1a0cd4a582e467362d5d16da9e4a9032cee1bc4d319b93514aaba6b869a7bca1d78e9a80b1c85ceb74dcba028ddd5efc7fb489b3cdff18729ffe41ef59a0fb414710d24fcd74898c222297dce173aeb844e524e6939ce2cfaa0e4ac0498ceb6918f56c8e72b0def8681026bcda4ffa52421dd5300000000c46cca3e2bde5d93975037bbc9b31889aa2f0e14e72f19"], &(0x7f0000000200)='syzkaller\x00', 0xf0, 0x90, &(0x7f0000000300)=""/144, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x10, 0xffffffff, 0xd}, 0x10, 0x268e, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x1, 0x5, 0xf, 0x2}, {0x0, 0x1, 0x6, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x22, 0x0, 0xffffffffffffffff, @void, @value=r12, @void, @void, r11}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r2, 0xffffffffffffffff, 0xb, 0x8, 0x0, @void, @value, @void, @void, r11}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 439.146448ms ago: executing program 4 (id=24144): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 302.300028ms ago: executing program 0 (id=24145): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00030010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) 270.7298ms ago: executing program 4 (id=24146): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000ac0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x97}, 0x50) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x2, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) sendmmsg$alg(r4, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0xffc8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000008c0)={&(0x7f0000000740), 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa00000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x90) 170.777061ms ago: executing program 4 (id=24147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x68000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffffffffffe2b}]}}}]}, 0x9c}}, 0x0) 169.962605ms ago: executing program 1 (id=24148): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0xffffffa4, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@setlink={0x34, 0x13, 0x1, 0x4070bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x23fc2, 0x1f9c6}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}]}, 0x34}}, 0x20044000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) r5 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) 31.226848ms ago: executing program 0 (id=24149): socket$packet(0x11, 0x3, 0x300) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'macvlan1\x00', {0xff}, {}, 0x29, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x19}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x5], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) 31.064522ms ago: executing program 1 (id=24150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 13.274173ms ago: executing program 2 (id=24151): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c00000000000000000a000007"], 0x20}, 0x20000890) 0s ago: executing program 1 (id=24152): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'syztnl0\x00', r1, 0x8, 0x40, 0x5b, 0x5, {{0x12, 0x4, 0x3, 0x3, 0x48, 0x68, 0x0, 0x3a, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x19}, {[@rr={0x7, 0x13, 0x16, [@remote, @loopback, @multicast1, @rand_addr=0x64010101]}, @lsrr={0x83, 0x1f, 0xd, [@loopback, @local, @remote, @rand_addr=0x64010101, @private=0xa010102, @multicast2, @multicast1]}]}}}}}) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xeb}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xe6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xc1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4c, 0xac, "f6612f73fff400a07821aa9eab1a88ed7d5653d32e8c5cd8c32ae08e61718f8194444418b7f3c864bfbb62ab8b042183f8b1778b59cd5db2200f7df8ee15367c79ac3a3dc43ac24c"}]}, 0xd0}}, 0x20000080) r6 = socket$netlink(0x10, 0x3, 0x1) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000003c0)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000400)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r7, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x8, 0x4, 0x28}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000016c0)={&(0x7f0000000580)="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", &(0x7f0000001580)=""/104, &(0x7f0000001600)="2ce49b92dece49b41b0c46023ed426f1f7c86b702177c76c472c746c34111feb77d5f789cad579cb71db39191e21f6eba04c9cd0e32c9eff435a31d4da467254de4a7809834e862d4e5dc6e20171c9cf21f530ba71bb4ab05728854d6976749c7ad3187fd17ac10fde7be7955e2fa3fd7643d1", &(0x7f0000001680)="31ca2e59b332a8090abbcc77b40d39c053411f9cdb1b7bf3563f744daaf923b826", 0x3}, 0x38) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x54, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x480c1) setsockopt(0xffffffffffffffff, 0x0, 0x80000000, &(0x7f0000001840)="6ab74b7e344e7fdce6c3f0c451bff17829c701785a3b18a99997d0acc733b5e54903f808e88de725415a83e7f46929e743dae8973806690c7b38fd91782e87202a33f276858bd03838d731fbcaee2140f8b03eca", 0x54) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000018c0)=0x8) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) unshare(0x30040a40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r8, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8a9ac872c092c707}, 0x4004840) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ac0), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1ff, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x24008001) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001bc0), 0x6c0000, 0x0) ioctl$PPPIOCGDEBUG(r11, 0x80047441, &(0x7f0000001c00)) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000001c40)) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001c80)=""/189, &(0x7f0000001d40)=0xbd) kernel console output (not intermixed with test programs): 24.045665][ T6317] netlink: 192 bytes leftover after parsing attributes in process `syz.2.23156'. [ 2024.066938][ T6324] tipc: Failed to remove unknown binding: 66,1,1/4278321153:2766378643/2766378644 [ 2024.084746][ T6324] tipc: Failed to remove unknown binding: 66,1,1/4278321153:2766378643/2766378644 [ 2024.183241][ T6330] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 2024.202563][ T6330] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 2024.229770][ T6332] syzkaller0: left promiscuous mode [ 2024.263577][ T6330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23159'. [ 2024.283142][ T6332] syzkaller0: left allmulticast mode [ 2024.386318][ T6332] tipc: Resetting bearer [ 2024.548821][ T6342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23160'. [ 2024.589837][ T6323] netlink: 'syz.3.23157': attribute type 1 has an invalid length. [ 2025.054081][ T24] lo speed is unknown, defaulting to 1000 [ 2025.060262][ T24] syz2: Port: 1 Link DOWN [ 2025.237992][ T6363] lo speed is unknown, defaulting to 1000 [ 2025.662104][ T6363] lo speed is unknown, defaulting to 1000 [ 2025.669837][ T6363] gre0 speed is unknown, defaulting to 1000 [ 2025.866923][ T6377] netlink: 'syz.2.23169': attribute type 1 has an invalid length. [ 2026.726594][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23174'. [ 2026.855186][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23175'. [ 2027.096861][ T6398] netlink: 'syz.3.23173': attribute type 4 has an invalid length. [ 2027.126313][ T6398] netlink: 'syz.3.23173': attribute type 4 has an invalid length. [ 2027.211536][ T6400] netlink: 'syz.3.23173': attribute type 1 has an invalid length. [ 2027.236820][ T6430] 8021q: adding VLAN 0 to HW filter on device bond93 [ 2027.276458][T30009] lo speed is unknown, defaulting to 1000 [ 2027.292677][T30009] syz2: Port: 1 Link ACTIVE [ 2028.044716][ T6454] netlink: 'syz.3.23185': attribute type 1 has an invalid length. [ 2028.736890][ T6478] netlink: 'syz.3.23195': attribute type 4 has an invalid length. [ 2029.138720][ T6510] netlink: 'syz.3.23195': attribute type 4 has an invalid length. [ 2029.252371][T30009] lo speed is unknown, defaulting to 1000 [ 2029.258303][T30009] syz2: Port: 1 Link DOWN [ 2029.260790][ T6478] netlink: 'syz.3.23195': attribute type 1 has an invalid length. [ 2029.313935][T30009] lo speed is unknown, defaulting to 1000 [ 2029.357689][T30009] syz2: Port: 1 Link ACTIVE [ 2030.539085][ T6542] lo speed is unknown, defaulting to 1000 [ 2030.690705][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23210'. [ 2030.740258][ T6527] netlink: 'syz.4.23205': attribute type 1 has an invalid length. [ 2030.946632][ T6542] lo speed is unknown, defaulting to 1000 [ 2030.954198][ T6542] gre0 speed is unknown, defaulting to 1000 [ 2031.594775][T23647] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2037.359071][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2037.368861][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 2037.375361][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.794543][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 2042.802549][ C0] lec:lec_tx_timeout: lec0 [ 2043.116190][ T6579] netlink: 'syz.0.23211': attribute type 1 has an invalid length. [ 2043.163912][ T6579] bond86: (slave bridge123): making interface the new active one [ 2043.172505][ T6579] bond86: (slave bridge123): Enslaving as an active interface with an up link [ 2043.332295][ T6583] netlink: 'syz.2.23213': attribute type 4 has an invalid length. [ 2043.345485][ T6583] netlink: 'syz.2.23213': attribute type 4 has an invalid length. [ 2043.404867][ T6583] netlink: 'syz.2.23213': attribute type 1 has an invalid length. [ 2043.546973][ T6618] netlink: 'syz.0.23221': attribute type 4 has an invalid length. [ 2043.582518][ T6618] netlink: 'syz.0.23221': attribute type 4 has an invalid length. [ 2043.607487][ T6611] netlink: 'syz.0.23221': attribute type 1 has an invalid length. [ 2044.776190][ T6671] netlink: 'syz.3.23235': attribute type 4 has an invalid length. [ 2044.800766][ T24] lo speed is unknown, defaulting to 1000 [ 2044.806902][ T24] syz2: Port: 1 Link DOWN [ 2044.884636][ T6669] netlink: 'syz.3.23235': attribute type 4 has an invalid length. [ 2044.901136][ T6671] netlink: 'syz.3.23235': attribute type 1 has an invalid length. [ 2044.902529][ T24] lo speed is unknown, defaulting to 1000 [ 2044.925866][ T24] syz2: Port: 1 Link ACTIVE [ 2044.940064][ T6673] tipc: Failed to remove unknown binding: 66,1,1/4278321153:2247999910/2247999911 [ 2045.031309][ T6681] tipc: Failed to remove unknown binding: 66,1,1/4278321153:2247999910/2247999911 [ 2045.063524][ T6681] tipc: Failed to remove unknown binding: 66,1,1/4278321153:2247999910/2247999911 [ 2045.160101][ T6687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23241'. [ 2045.194892][T23647] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2045.202690][ T6690] netlink: 64 bytes leftover after parsing attributes in process `syz.0.23242'. [ 2045.250242][ T6690] netlink: 'syz.0.23242': attribute type 11 has an invalid length. [ 2045.272549][ T6693] FAULT_INJECTION: forcing a failure. [ 2045.272549][ T6693] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.288440][ T6690] netlink: 224 bytes leftover after parsing attributes in process `syz.0.23242'. [ 2045.304965][ T6693] CPU: 1 UID: 0 PID: 6693 Comm: syz.4.23244 Not tainted syzkaller #0 PREEMPT(full) [ 2045.304987][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2045.304998][ T6693] Call Trace: [ 2045.305005][ T6693] [ 2045.305013][ T6693] dump_stack_lvl+0xe8/0x150 [ 2045.305043][ T6693] should_fail_ex+0x412/0x560 [ 2045.305071][ T6693] should_failslab+0xa8/0x100 [ 2045.305094][ T6693] ? skb_clone+0x212/0x3a0 [ 2045.305174][ T6693] kmem_cache_alloc_noprof+0x87/0x650 [ 2045.305192][ T6693] ? apparmor_capable+0x126/0x170 [ 2045.305254][ T6693] skb_clone+0x212/0x3a0 [ 2045.305271][ T6693] ? nfnetlink_rcv+0x4b0/0x27b0 [ 2045.305296][ T6693] nfnetlink_rcv+0x4e2/0x27b0 [ 2045.305316][ T6693] ? is_bpf_text_address+0x26/0x2b0 [ 2045.305339][ T6693] ? is_bpf_text_address+0x292/0x2b0 [ 2045.305356][ T6693] ? is_bpf_text_address+0x26/0x2b0 [ 2045.305380][ T6693] ? __kernel_text_address+0xd/0x30 [ 2045.305399][ T6693] ? unwind_get_return_address+0x4d/0x90 [ 2045.305424][ T6693] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2045.305454][ T6693] ? arch_stack_walk+0xfb/0x150 [ 2045.305495][ T6693] ? __lock_acquire+0x6b5/0x2cf0 [ 2045.305517][ T6693] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2045.305548][ T6693] ? __lock_acquire+0x6b5/0x2cf0 [ 2045.305577][ T6693] ? __lock_acquire+0x6b5/0x2cf0 [ 2045.305605][ T6693] ? __netlink_lookup+0xc6/0x8b0 [ 2045.305635][ T6693] ? __netlink_lookup+0x7e4/0x8b0 [ 2045.305667][ T6693] ? netlink_deliver_tap+0x2e/0x1b0 [ 2045.305707][ T6693] netlink_unicast+0x80f/0x9b0 [ 2045.305736][ T6693] ? __pfx_netlink_unicast+0x10/0x10 [ 2045.305760][ T6693] ? netlink_sendmsg+0x650/0xb40 [ 2045.305782][ T6693] ? skb_put+0x11b/0x210 [ 2045.305814][ T6693] netlink_sendmsg+0x813/0xb40 [ 2045.305846][ T6693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2045.305873][ T6693] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2045.305896][ T6693] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2045.305919][ T6693] ____sys_sendmsg+0x972/0x9f0 [ 2045.305945][ T6693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2045.305971][ T6693] ? import_iovec+0x73/0xa0 [ 2045.306001][ T6693] ___sys_sendmsg+0x2a5/0x360 [ 2045.306024][ T6693] ? __pfx____sys_sendmsg+0x10/0x10 [ 2045.306074][ T6693] ? __fget_files+0x2a/0x420 [ 2045.306099][ T6693] ? __fget_files+0x3a0/0x420 [ 2045.306133][ T6693] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2045.306153][ T6693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2045.306180][ T6693] ? __pfx_ksys_write+0x10/0x10 [ 2045.306210][ T6693] do_syscall_64+0x14d/0xf80 [ 2045.306237][ T6693] ? trace_irq_disable+0x3b/0x150 [ 2045.306260][ T6693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.306279][ T6693] ? clear_bhb_loop+0x40/0x90 [ 2045.306301][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.306319][ T6693] RIP: 0033:0x7f568e59c799 [ 2045.306337][ T6693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2045.306351][ T6693] RSP: 002b:00007f568f471028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2045.306371][ T6693] RAX: ffffffffffffffda RBX: 00007f568e815fa0 RCX: 00007f568e59c799 [ 2045.306384][ T6693] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2045.306395][ T6693] RBP: 00007f568f471090 R08: 0000000000000000 R09: 0000000000000000 [ 2045.306407][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2045.306418][ T6693] R13: 00007f568e816038 R14: 00007f568e815fa0 R15: 00007ffe1f87c528 [ 2045.306451][ T6693] [ 2045.686526][T29604] lo speed is unknown, defaulting to 1000 [ 2045.692306][T29604] syz2: Port: 1 Link DOWN [ 2045.707535][ T6306] lo speed is unknown, defaulting to 1000 [ 2045.713311][ T6306] syz2: Port: 1 Link ACTIVE [ 2045.933784][ T6704] lo speed is unknown, defaulting to 1000 [ 2046.612153][ T6727] lec:lec_start_xmit: lec0:No lecd attached [ 2046.623388][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2046.625841][ T6733] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23254'. [ 2046.703386][ T6737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2046.771910][ T6730] lo speed is unknown, defaulting to 1000 [ 2046.792081][ T6704] lo speed is unknown, defaulting to 1000 [ 2046.824074][ T6704] gre0 speed is unknown, defaulting to 1000 [ 2047.025936][ T6710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2047.026896][ T6730] lo speed is unknown, defaulting to 1000 [ 2047.045723][ T6736] lo speed is unknown, defaulting to 1000 [ 2047.450080][ T6730] gre0 speed is unknown, defaulting to 1000 [ 2047.649994][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23258'. [ 2047.659131][ T6736] lo speed is unknown, defaulting to 1000 [ 2047.910047][ T6736] gre0 speed is unknown, defaulting to 1000 [ 2048.063157][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23261'. [ 2048.072920][ T6767] Cannot find set identified by id 65534 to match [ 2048.228840][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23263'. [ 2048.411813][ T6775] FAULT_INJECTION: forcing a failure. [ 2048.411813][ T6775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2048.430569][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.0.23264 Not tainted syzkaller #0 PREEMPT(full) [ 2048.430592][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2048.430604][ T6775] Call Trace: [ 2048.430612][ T6775] [ 2048.430620][ T6775] dump_stack_lvl+0xe8/0x150 [ 2048.430649][ T6775] should_fail_ex+0x412/0x560 [ 2048.430677][ T6775] _copy_from_user+0x2d/0xb0 [ 2048.430704][ T6775] __sys_bpf+0x229/0x950 [ 2048.430740][ T6775] ? __pfx___sys_bpf+0x10/0x10 [ 2048.430780][ T6775] ? ksys_write+0x242/0x270 [ 2048.430802][ T6775] ? __pfx_ksys_write+0x10/0x10 [ 2048.430828][ T6775] __x64_sys_bpf+0x7c/0x90 [ 2048.430852][ T6775] do_syscall_64+0x14d/0xf80 [ 2048.430877][ T6775] ? trace_irq_disable+0x3b/0x150 [ 2048.430900][ T6775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.430918][ T6775] ? clear_bhb_loop+0x40/0x90 [ 2048.430940][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.430958][ T6775] RIP: 0033:0x7f9425d9c799 [ 2048.430975][ T6775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2048.430990][ T6775] RSP: 002b:00007f9423ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2048.431009][ T6775] RAX: ffffffffffffffda RBX: 00007f9426016090 RCX: 00007f9425d9c799 [ 2048.431023][ T6775] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000009 [ 2048.431034][ T6775] RBP: 00007f9423ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2048.431045][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2048.431056][ T6775] R13: 00007f9426016128 R14: 00007f9426016090 R15: 00007ffc4c139fb8 [ 2048.431084][ T6775] [ 2051.674650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2051.754427][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5140 ms [ 2051.762425][ C0] lec:lec_tx_timeout: lec0 [ 2051.767073][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2054.322956][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23265'. [ 2054.345689][ T6803] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 2054.395984][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23268'. [ 2054.431738][ T6809] ip6gre5: entered promiscuous mode [ 2054.438039][ T6808] Cannot find set identified by id 65534 to match [ 2054.465307][ T6809] ip6gre5: entered allmulticast mode [ 2055.313860][T14950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2055.418881][ T6852] netlink: 112 bytes leftover after parsing attributes in process `syz.0.23285'. [ 2055.782432][ T6872] bond92: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2055.826674][ T6871] openvswitch: netlink: Flow actions attr not present in new flow. [ 2055.847451][ T6871] syzkaller1: entered promiscuous mode [ 2055.853033][ T6871] syzkaller1: entered allmulticast mode [ 2055.871038][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23288'. [ 2056.121693][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23292'. [ 2056.215030][ T6872] validate_nla: 8 callbacks suppressed [ 2056.215050][ T6872] netlink: 'syz.3.23289': attribute type 6 has an invalid length. [ 2056.236818][ T6893] batman_adv: batadv0: Removing interface: dummy0 [ 2056.248442][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23297'. [ 2056.248729][ T6893] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 2056.258007][ T6898] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2056.283410][ T6897] netlink: 112 bytes leftover after parsing attributes in process `syz.1.23296'. [ 2056.490180][ T6909] lo speed is unknown, defaulting to 1000 [ 2056.714923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2056.735966][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23301'. [ 2056.794403][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 2056.802441][ C0] lec:lec_tx_timeout: lec0 [ 2056.981996][ T6909] lo speed is unknown, defaulting to 1000 [ 2056.995231][ T6909] gre0 speed is unknown, defaulting to 1000 [ 2057.039690][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23305'. [ 2057.279469][ T6933] openvswitch: netlink: IP tunnel dst address not specified [ 2057.304900][ T6933] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23306'. [ 2057.943469][ T6957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.016713][ T6957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.045448][ T6961] netlink: 'syz.3.23312': attribute type 11 has an invalid length. [ 2058.073709][ T6961] netlink: 'syz.3.23312': attribute type 23 has an invalid length. [ 2058.139275][ T6957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.600015][ T6945] bond107: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2058.674774][ T6958] bpq0: entered promiscuous mode [ 2058.751406][ T6945] netlink: 'syz.4.23310': attribute type 6 has an invalid length. [ 2058.878442][ T6968] block nbd1: NBD_DISCONNECT [ 2058.884089][ T6968] block nbd1: Send disconnect failed -32 [ 2058.910500][ T6968] block nbd1: shutting down sockets [ 2059.114709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.124942][ T6989] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2060.272826][ T7008] __nla_validate_parse: 2 callbacks suppressed [ 2060.272845][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23322'. [ 2060.333323][ T7012] netlink: 'syz.4.23322': attribute type 1 has an invalid length. [ 2060.354862][ T7007] macvtap0: entered promiscuous mode [ 2060.374577][ T7007] bond32: entered promiscuous mode [ 2060.384745][ T7007] macvtap0: entered allmulticast mode [ 2060.396711][ T7007] bond32: entered allmulticast mode [ 2060.407290][ T7007] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 2060.624215][ T7008] bond108: (slave vxcan27): The slave device specified does not support setting the MAC address [ 2060.700723][ T7008] bond108: (slave vxcan27): Error -95 calling set_mac_address [ 2060.822133][ T7005] bond108: (slave bridge0): Enslaving as an active interface with a down link [ 2061.754663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2061.762927][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2066.154788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2066.346925][ T7044] FAULT_INJECTION: forcing a failure. [ 2066.346925][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.366227][ T7044] CPU: 0 UID: 0 PID: 7044 Comm: syz.3.23328 Not tainted syzkaller #0 PREEMPT(full) [ 2066.366252][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2066.366263][ T7044] Call Trace: [ 2066.366271][ T7044] [ 2066.366279][ T7044] dump_stack_lvl+0xe8/0x150 [ 2066.366310][ T7044] should_fail_ex+0x412/0x560 [ 2066.366339][ T7044] should_failslab+0xa8/0x100 [ 2066.366363][ T7044] __kmalloc_cache_noprof+0x88/0x660 [ 2066.366385][ T7044] ? nfnetlink_rcv+0xfe1/0x27b0 [ 2066.366412][ T7044] nfnetlink_rcv+0xfe1/0x27b0 [ 2066.366432][ T7044] ? is_bpf_text_address+0x26/0x2b0 [ 2066.366482][ T7044] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2066.366514][ T7044] ? __lock_acquire+0x6b5/0x2cf0 [ 2066.366569][ T7044] ? netlink_deliver_tap+0x2e/0x1b0 [ 2066.366610][ T7044] netlink_unicast+0x80f/0x9b0 [ 2066.366639][ T7044] ? __pfx_netlink_unicast+0x10/0x10 [ 2066.366662][ T7044] ? netlink_sendmsg+0x650/0xb40 [ 2066.366683][ T7044] ? skb_put+0x11b/0x210 [ 2066.366711][ T7044] netlink_sendmsg+0x813/0xb40 [ 2066.366745][ T7044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2066.366772][ T7044] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2066.366797][ T7044] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2066.366820][ T7044] ____sys_sendmsg+0x972/0x9f0 [ 2066.366845][ T7044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2066.366872][ T7044] ? import_iovec+0x73/0xa0 [ 2066.366902][ T7044] ___sys_sendmsg+0x2a5/0x360 [ 2066.366926][ T7044] ? __pfx____sys_sendmsg+0x10/0x10 [ 2066.366979][ T7044] ? __fget_files+0x2a/0x420 [ 2066.367004][ T7044] ? __fget_files+0x3a0/0x420 [ 2066.367038][ T7044] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2066.367060][ T7044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2066.367088][ T7044] ? __pfx_ksys_write+0x10/0x10 [ 2066.367119][ T7044] do_syscall_64+0x14d/0xf80 [ 2066.367143][ T7044] ? trace_irq_disable+0x3b/0x150 [ 2066.367172][ T7044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2066.367190][ T7044] ? clear_bhb_loop+0x40/0x90 [ 2066.367212][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2066.367228][ T7044] RIP: 0033:0x7f3a2219c799 [ 2066.367246][ T7044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2066.367260][ T7044] RSP: 002b:00007f3a203ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2066.367280][ T7044] RAX: ffffffffffffffda RBX: 00007f3a22415fa0 RCX: 00007f3a2219c799 [ 2066.367293][ T7044] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2066.367304][ T7044] RBP: 00007f3a203ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2066.367314][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2066.367325][ T7044] R13: 00007f3a22416038 R14: 00007f3a22415fa0 R15: 00007ffc784b0c78 [ 2066.367354][ T7044] [ 2066.795341][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2066.803800][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 2066.811849][ C0] lec:lec_tx_timeout: lec0 [ 2066.816763][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2066.837893][ T7056] bond87: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2067.164075][ T7081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23334'. [ 2067.501669][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23335'. [ 2067.565389][ T7056] netlink: 'syz.0.23330': attribute type 6 has an invalid length. [ 2067.826246][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23337'. [ 2067.857612][ T7091] openvswitch: netlink: Message has 16 unknown bytes. [ 2067.977309][ T7095] FAULT_INJECTION: forcing a failure. [ 2067.977309][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.016704][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.0.23339 Not tainted syzkaller #0 PREEMPT(full) [ 2068.016728][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2068.016739][ T7095] Call Trace: [ 2068.016746][ T7095] [ 2068.016754][ T7095] dump_stack_lvl+0xe8/0x150 [ 2068.016783][ T7095] should_fail_ex+0x412/0x560 [ 2068.016811][ T7095] should_failslab+0xa8/0x100 [ 2068.016836][ T7095] __kmalloc_cache_noprof+0x88/0x660 [ 2068.016857][ T7095] ? nft_delchain+0x54/0x4b0 [ 2068.016959][ T7095] nft_delchain+0x54/0x4b0 [ 2068.016985][ T7095] nf_tables_delchain+0xd4f/0x1060 [ 2068.017017][ T7095] ? __pfx_nf_tables_delchain+0x10/0x10 [ 2068.017047][ T7095] ? __nla_parse+0x40/0x60 [ 2068.017102][ T7095] nfnetlink_rcv+0x1240/0x27b0 [ 2068.017122][ T7095] ? is_bpf_text_address+0x26/0x2b0 [ 2068.017173][ T7095] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2068.017205][ T7095] ? __lock_acquire+0x6b5/0x2cf0 [ 2068.017261][ T7095] ? netlink_deliver_tap+0x2e/0x1b0 [ 2068.017303][ T7095] netlink_unicast+0x80f/0x9b0 [ 2068.017333][ T7095] ? __pfx_netlink_unicast+0x10/0x10 [ 2068.017356][ T7095] ? netlink_sendmsg+0x650/0xb40 [ 2068.017378][ T7095] ? skb_put+0x11b/0x210 [ 2068.017405][ T7095] netlink_sendmsg+0x813/0xb40 [ 2068.017438][ T7095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2068.017470][ T7095] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2068.017494][ T7095] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2068.017517][ T7095] ____sys_sendmsg+0x972/0x9f0 [ 2068.017544][ T7095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2068.017570][ T7095] ? import_iovec+0x73/0xa0 [ 2068.017599][ T7095] ___sys_sendmsg+0x2a5/0x360 [ 2068.017622][ T7095] ? __pfx____sys_sendmsg+0x10/0x10 [ 2068.017675][ T7095] ? __fget_files+0x2a/0x420 [ 2068.017699][ T7095] ? __fget_files+0x3a0/0x420 [ 2068.017734][ T7095] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2068.017755][ T7095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2068.017782][ T7095] ? __pfx_ksys_write+0x10/0x10 [ 2068.017811][ T7095] do_syscall_64+0x14d/0xf80 [ 2068.017835][ T7095] ? trace_irq_disable+0x3b/0x150 [ 2068.017858][ T7095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.017876][ T7095] ? clear_bhb_loop+0x40/0x90 [ 2068.017898][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2068.017916][ T7095] RIP: 0033:0x7f9425d9c799 [ 2068.017933][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2068.017948][ T7095] RSP: 002b:00007f9426b7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2068.017967][ T7095] RAX: ffffffffffffffda RBX: 00007f9426015fa0 RCX: 00007f9425d9c799 [ 2068.017981][ T7095] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2068.017992][ T7095] RBP: 00007f9426b7e090 R08: 0000000000000000 R09: 0000000000000000 [ 2068.018003][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2068.018014][ T7095] R13: 00007f9426016038 R14: 00007f9426015fa0 R15: 00007ffc4c139fb8 [ 2068.018043][ T7095] [ 2068.435184][ T7104] gretap0: entered promiscuous mode [ 2068.442923][ T7104] gretap0: left promiscuous mode [ 2068.605222][ T7118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.677621][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23346'. [ 2069.006440][ T7132] bond109: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2069.022360][ T7136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.23352'. [ 2069.183322][ T7144] lo speed is unknown, defaulting to 1000 [ 2069.410938][ T7134] netlink: 'syz.4.23349': attribute type 6 has an invalid length. [ 2069.488877][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23355'. [ 2069.567195][ T7143] lo speed is unknown, defaulting to 1000 [ 2069.568125][ T7153] bpq0: left promiscuous mode [ 2069.579189][ T7144] lo speed is unknown, defaulting to 1000 [ 2069.587364][ T7144] gre0 speed is unknown, defaulting to 1000 [ 2069.789705][ T7159] Cannot find set identified by id 65534 to match [ 2069.840779][ T7143] lo speed is unknown, defaulting to 1000 [ 2069.923244][ T7143] gre0 speed is unknown, defaulting to 1000 [ 2070.026576][ T7161] netlink: 'syz.4.23359': attribute type 1 has an invalid length. [ 2070.574020][ T7172] netlink: 64 bytes leftover after parsing attributes in process `syz.4.23364'. [ 2070.721424][ T7178] netlink: 1 bytes leftover after parsing attributes in process `syz.4.23367'. [ 2071.164554][ T7194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.563080][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23366'. [ 2071.600654][ T7193] bond110: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2071.689638][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.705688][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.734911][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.824502][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2071.832559][ C0] lec:lec_tx_timeout: lec0 [ 2071.837585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2072.031341][ T7193] netlink: 'syz.4.23369': attribute type 6 has an invalid length. [ 2072.094241][ T7214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2072.140909][ T6305] lo speed is unknown, defaulting to 1000 [ 2072.147869][ T6305] syz2: Port: 1 Link DOWN [ 2072.645533][ T7207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23371'. [ 2072.668345][ T7231] netlink: 64 bytes leftover after parsing attributes in process `syz.3.23377'. [ 2072.850817][ T7240] netlink: 112 bytes leftover after parsing attributes in process `syz.3.23379'. [ 2073.570805][ T7255] bond101: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2073.588129][ T7243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23381'. [ 2074.360006][ T7281] netlink: 64 bytes leftover after parsing attributes in process `syz.4.23389'. [ 2074.420804][ T7255] netlink: 'syz.2.23384': attribute type 6 has an invalid length. [ 2074.536323][ T7284] lo speed is unknown, defaulting to 1000 [ 2074.669342][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23391'. [ 2074.855276][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23392'. [ 2074.928590][ T7284] lo speed is unknown, defaulting to 1000 [ 2074.937418][ T7284] gre0 speed is unknown, defaulting to 1000 [ 2075.070507][ T7300] Cannot find set identified by id 65534 to match [ 2075.087937][ T7306] tipc: Enabling of bearer rejected, already enabled [ 2075.116976][ T7306] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 2075.140801][ T7308] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2075.150541][ T7306] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 2075.240372][ T7306] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23396'. [ 2075.363346][ T7310] netlink: 'syz.1.23396': attribute type 2 has an invalid length. [ 2075.399445][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.409097][ T7310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2075.425809][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.496767][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2076.083122][ T7328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23399'. [ 2076.651031][ T7333] bond93: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2076.713483][ T7337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2076.851195][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23404'. [ 2076.874612][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2076.880991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2077.305069][ T7354] netlink: 'syz.3.23401': attribute type 6 has an invalid length. [ 2077.536013][ T7374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2077.564640][ T7374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2077.662563][ T7374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2078.104087][ T7379] __nla_validate_parse: 1 callbacks suppressed [ 2078.104108][ T7379] netlink: 84 bytes leftover after parsing attributes in process `syz.4.23411'. [ 2078.964794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2081.884506][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2081.892492][ C0] lec:lec_tx_timeout: lec0 [ 2081.914683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2081.922930][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2083.437753][ T7828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.474695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2085.514582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2086.554786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2086.934459][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2086.942472][ C0] lec:lec_tx_timeout: lec0 [ 2086.954590][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2086.960691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2087.594833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2088.634745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.714790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.205523][ T7422] bond88: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 2091.225869][ T7422] bond88 (unregistering): Released all slaves [ 2091.226271][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23418'. [ 2091.321998][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23420'. [ 2091.332203][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23417'. [ 2091.466503][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23423'. [ 2091.633978][ T8019] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2091.643596][ T8019] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2091.725129][ T8019] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2091.733503][ T8019] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2091.764555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.964443][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2091.972469][ C0] lec:lec_tx_timeout: lec0 [ 2091.994821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2092.003188][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2092.006342][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2092.085986][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2092.236667][ T7459] bond88: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2092.938202][ T7493] tipc: Failed to remove unknown binding: 66,1,1/2886997007:565561909/565561910 [ 2093.000025][ T7459] netlink: 'syz.0.23429': attribute type 6 has an invalid length. [ 2093.013680][ T7497] tipc: Failed to remove unknown binding: 66,1,1/2886997007:565561909/565561910 [ 2093.053243][ T7497] tipc: Failed to remove unknown binding: 66,1,1/2886997007:565561909/565561910 [ 2093.105704][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23438'. [ 2093.178522][ T7507] lo speed is unknown, defaulting to 1000 [ 2093.431994][ T7525] tipc: Resetting bearer [ 2093.451534][ T7525] netlink: 'syz.0.23444': attribute type 13 has an invalid length. [ 2093.461923][ T7525] netlink: 'syz.0.23444': attribute type 13 has an invalid length. [ 2093.481563][ T7525] tipc: Enabling of bearer rejected, already enabled [ 2093.511374][ T7525] syzkaller0: entered promiscuous mode [ 2093.534445][ T7525] syzkaller0: entered allmulticast mode [ 2093.560292][ T7523] tipc: Resetting bearer [ 2093.682030][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23449'. [ 2093.699953][ T7535] bond111: option packets_per_slave: invalid value (1048582) [ 2093.716538][ T7535] bond111: option packets_per_slave: allowed values 0 - 65535 [ 2093.741281][ T7535] bond111 (unregistering): Released all slaves [ 2093.767022][ T7507] lo speed is unknown, defaulting to 1000 [ 2093.786481][ T7507] gre0 speed is unknown, defaulting to 1000 [ 2093.819835][ T7545] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3755559455/3755559456 [ 2093.864586][ T7545] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3755559455/3755559456 [ 2093.902850][ T7540] netlink: 'syz.0.23450': attribute type 4 has an invalid length. [ 2093.963249][ T7540] netlink: 'syz.0.23450': attribute type 4 has an invalid length. [ 2093.995365][ T7540] netlink: 'syz.0.23450': attribute type 1 has an invalid length. [ 2094.495254][ T7828] tipc: Resetting bearer [ 2094.535785][ T7573] tipc: Resetting bearer [ 2094.578394][ T7542] FAULT_INJECTION: forcing a failure. [ 2094.578394][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 2094.602335][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.2.23451 Not tainted syzkaller #0 PREEMPT(full) [ 2094.602360][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2094.602370][ T7542] Call Trace: [ 2094.602378][ T7542] [ 2094.602387][ T7542] dump_stack_lvl+0xe8/0x150 [ 2094.602417][ T7542] should_fail_ex+0x412/0x560 [ 2094.602445][ T7542] should_failslab+0xa8/0x100 [ 2094.602470][ T7542] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2094.602492][ T7542] ? __alloc_skb+0x1d0/0x7d0 [ 2094.602522][ T7542] __alloc_skb+0x1d0/0x7d0 [ 2094.602550][ T7542] tipc_msg_create+0x51/0x4d0 [ 2094.602656][ T7542] tipc_group_proto_xmit+0xce/0x790 [ 2094.602719][ T7542] tipc_group_cong+0x4dc/0x5e0 [ 2094.602747][ T7542] ? __pfx_tipc_group_cong+0x10/0x10 [ 2094.602770][ T7542] ? do_raw_spin_lock+0x12b/0x2f0 [ 2094.602808][ T7542] tipc_group_bc_cong+0x155/0x210 [ 2094.602837][ T7542] tipc_send_group_bcast+0x36e/0xad0 [ 2094.602878][ T7542] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 2094.602911][ T7542] ? process_measurement+0x7ce/0x1c80 [ 2094.602971][ T7542] ? __pfx_woken_wake_function+0x10/0x10 [ 2094.603001][ T7542] ? up_write+0x1ab/0x410 [ 2094.603026][ T7542] __tipc_sendmsg+0x33b/0x2bf0 [ 2094.603061][ T7542] ? __pfx_process_measurement+0x10/0x10 [ 2094.603088][ T7542] ? tomoyo_check_open_permission+0x38e/0x470 [ 2094.603139][ T7542] ? __pfx___tipc_sendmsg+0x10/0x10 [ 2094.603158][ T7542] ? tomoyo_check_open_permission+0x1d3/0x470 [ 2094.603180][ T7542] ? aa_label_sk_perm+0x532/0x6e0 [ 2094.603210][ T7542] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2094.603232][ T7542] ? __lock_acquire+0x6b5/0x2cf0 [ 2094.603257][ T7542] ? __lock_acquire+0x6b5/0x2cf0 [ 2094.603284][ T7542] ? __lock_acquire+0x6b5/0x2cf0 [ 2094.603340][ T7542] ? tipc_sendmsg+0x47/0x70 [ 2094.603365][ T7542] ? __local_bh_enable_ip+0xd0/0x130 [ 2094.603391][ T7542] tipc_sendmsg+0x55/0x70 [ 2094.603416][ T7542] ____sys_sendmsg+0x972/0x9f0 [ 2094.603443][ T7542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2094.603470][ T7542] ? import_iovec+0x73/0xa0 [ 2094.603498][ T7542] ___sys_sendmsg+0x2a5/0x360 [ 2094.603522][ T7542] ? __pfx____sys_sendmsg+0x10/0x10 [ 2094.603575][ T7542] ? __fget_files+0x2a/0x420 [ 2094.603599][ T7542] ? __fget_files+0x3a0/0x420 [ 2094.603633][ T7542] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2094.603654][ T7542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2094.603682][ T7542] ? __pfx_ksys_write+0x10/0x10 [ 2094.603712][ T7542] do_syscall_64+0x14d/0xf80 [ 2094.603736][ T7542] ? trace_irq_disable+0x3b/0x150 [ 2094.603759][ T7542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2094.603778][ T7542] ? clear_bhb_loop+0x40/0x90 [ 2094.603800][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2094.603817][ T7542] RIP: 0033:0x7ff1b719c799 [ 2094.603834][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2094.603850][ T7542] RSP: 002b:00007ff1b8126028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2094.603870][ T7542] RAX: ffffffffffffffda RBX: 00007ff1b7415fa0 RCX: 00007ff1b719c799 [ 2094.603883][ T7542] RDX: 0000000000008820 RSI: 00002000000003c0 RDI: 0000000000000005 [ 2094.603894][ T7542] RBP: 00007ff1b8126090 R08: 0000000000000000 R09: 0000000000000000 [ 2094.603905][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2094.603916][ T7542] R13: 00007ff1b7416038 R14: 00007ff1b7415fa0 R15: 00007ffe25a218b8 [ 2094.603946][ T7542] [ 2094.814913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.993247][ T7575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2095.021996][ T7580] sctp: [Deprecated]: syz.0.23460 (pid 7580) Use of int in max_burst socket option deprecated. [ 2095.021996][ T7580] Use struct sctp_assoc_value instead [ 2095.051112][ T4985] gre0 speed is unknown, defaulting to 1000 [ 2095.083975][ T7580] sctp: [Deprecated]: syz.0.23460 (pid 7580) Use of int in max_burst socket option deprecated. [ 2095.083975][ T7580] Use struct sctp_assoc_value instead [ 2095.100991][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23463'. [ 2095.106414][ T4985] syz1: Port: 1 Link ACTIVE [ 2095.110047][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23463'. [ 2095.162764][ T6306] gre0 speed is unknown, defaulting to 1000 [ 2095.206645][ T7571] tipc: Resetting bearer [ 2095.339535][ T7591] syzkaller0: left promiscuous mode [ 2095.355233][ T7591] syzkaller0: left allmulticast mode [ 2095.367415][ T7591] tipc: Resetting bearer [ 2095.435792][ T7600] FAULT_INJECTION: forcing a failure. [ 2095.435792][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.469638][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.4.23468 Not tainted syzkaller #0 PREEMPT(full) [ 2095.469662][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2095.469673][ T7600] Call Trace: [ 2095.469680][ T7600] [ 2095.469686][ T7600] dump_stack_lvl+0xe8/0x150 [ 2095.469715][ T7600] should_fail_ex+0x412/0x560 [ 2095.469742][ T7600] should_failslab+0xa8/0x100 [ 2095.469766][ T7600] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2095.469785][ T7600] ? __alloc_skb+0x186/0x7d0 [ 2095.469808][ T7600] ? __alloc_skb+0x1d0/0x7d0 [ 2095.469829][ T7600] ? __local_bh_enable_ip+0xd0/0x130 [ 2095.469856][ T7600] __alloc_skb+0x1d0/0x7d0 [ 2095.469878][ T7600] ? netlink_ack_tlv_len+0x6c/0x210 [ 2095.469904][ T7600] netlink_ack+0x146/0xa50 [ 2095.469924][ T7600] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2095.470052][ T7600] ? ref_tracker_free+0x693/0x840 [ 2095.470073][ T7600] ? __copy_skb_header+0xa3/0x4a0 [ 2095.470092][ T7600] ? __pfx_ref_tracker_free+0x10/0x10 [ 2095.470124][ T7600] netlink_rcv_skb+0x2b6/0x4b0 [ 2095.470147][ T7600] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2095.470171][ T7600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2095.470203][ T7600] ? netlink_deliver_tap+0x2e/0x1b0 [ 2095.470232][ T7600] netlink_unicast+0x80f/0x9b0 [ 2095.470261][ T7600] ? __pfx_netlink_unicast+0x10/0x10 [ 2095.470283][ T7600] ? netlink_sendmsg+0x650/0xb40 [ 2095.470304][ T7600] ? skb_put+0x11b/0x210 [ 2095.470329][ T7600] netlink_sendmsg+0x813/0xb40 [ 2095.470360][ T7600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2095.470385][ T7600] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2095.470408][ T7600] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2095.470432][ T7600] ____sys_sendmsg+0x972/0x9f0 [ 2095.470458][ T7600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2095.470483][ T7600] ? import_iovec+0x73/0xa0 [ 2095.470512][ T7600] ___sys_sendmsg+0x2a5/0x360 [ 2095.470535][ T7600] ? __pfx____sys_sendmsg+0x10/0x10 [ 2095.470592][ T7600] ? __fget_files+0x2a/0x420 [ 2095.470616][ T7600] ? __fget_files+0x3a0/0x420 [ 2095.470649][ T7600] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2095.470669][ T7600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2095.470694][ T7600] ? __pfx_ksys_write+0x10/0x10 [ 2095.470721][ T7600] do_syscall_64+0x14d/0xf80 [ 2095.470743][ T7600] ? trace_irq_disable+0x3b/0x150 [ 2095.470764][ T7600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2095.470782][ T7600] ? clear_bhb_loop+0x40/0x90 [ 2095.470802][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2095.470820][ T7600] RIP: 0033:0x7f568e59c799 [ 2095.470837][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2095.470851][ T7600] RSP: 002b:00007f568f450028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2095.470870][ T7600] RAX: ffffffffffffffda RBX: 00007f568e816090 RCX: 00007f568e59c799 [ 2095.470882][ T7600] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 2095.470894][ T7600] RBP: 00007f568f450090 R08: 0000000000000000 R09: 0000000000000000 [ 2095.470905][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.470916][ T7600] R13: 00007f568e816128 R14: 00007f568e816090 R15: 00007ffe1f87c528 [ 2095.470944][ T7600] [ 2095.840425][ T8019] tipc: Resetting bearer [ 2095.848298][ T7605] netlink: 'syz.0.23469': attribute type 83 has an invalid length. [ 2095.909172][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23471'. [ 2096.438133][ T7635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2096.456431][ T7635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2096.481066][ T7635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2097.035402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2098.154370][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6150 ms [ 2098.162387][ C0] lec:lec_tx_timeout: lec0 [ 2098.167340][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2098.796838][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2098.806400][ T1297] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 2098.815444][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2102.074693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2102.880649][ T7669] lo speed is unknown, defaulting to 1000 [ 2102.987898][ T7682] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2103.126228][ T7692] netlink: 'syz.3.23485': attribute type 1 has an invalid length. [ 2103.274698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2103.305262][ T7692] bond94: entered promiscuous mode [ 2103.310741][ T7692] bond94: entered allmulticast mode [ 2103.316755][ T7692] 8021q: adding VLAN 0 to HW filter on device bond94 [ 2103.326255][ T7669] lo speed is unknown, defaulting to 1000 [ 2103.339090][ T7669] gre0 speed is unknown, defaulting to 1000 [ 2103.463077][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23485'. [ 2103.914362][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 2103.922405][ C0] lec:lec_tx_timeout: lec0 [ 2103.936558][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23490'. [ 2104.010559][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23490'. [ 2104.019880][ T7735] tipc: Enabling of bearer rejected, failed to enable media [ 2105.258798][ T7767] openvswitch: netlink: IP tunnel dst address not specified [ 2105.268572][ T7768] FAULT_INJECTION: forcing a failure. [ 2105.268572][ T7768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2105.298999][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.2.23499 Not tainted syzkaller #0 PREEMPT(full) [ 2105.299023][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2105.299034][ T7768] Call Trace: [ 2105.299042][ T7768] [ 2105.299050][ T7768] dump_stack_lvl+0xe8/0x150 [ 2105.299079][ T7768] should_fail_ex+0x412/0x560 [ 2105.299108][ T7768] _copy_to_user+0x31/0xb0 [ 2105.299136][ T7768] simple_read_from_buffer+0xe1/0x170 [ 2105.299166][ T7768] proc_fail_nth_read+0x1bb/0x230 [ 2105.299195][ T7768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2105.299223][ T7768] ? rw_verify_area+0x2a6/0x4d0 [ 2105.299242][ T7768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2105.299267][ T7768] vfs_read+0x20c/0xa70 [ 2105.299285][ T7768] ? fdget_pos+0x246/0x320 [ 2105.299314][ T7768] ? __pfx___mutex_lock+0x10/0x10 [ 2105.299341][ T7768] ? __pfx_vfs_read+0x10/0x10 [ 2105.299362][ T7768] ? __fget_files+0x2a/0x420 [ 2105.299390][ T7768] ? __fget_files+0x3a0/0x420 [ 2105.299414][ T7768] ? __fget_files+0x2a/0x420 [ 2105.299447][ T7768] ksys_read+0x150/0x270 [ 2105.299468][ T7768] ? __pfx_ksys_read+0x10/0x10 [ 2105.299499][ T7768] do_syscall_64+0x14d/0xf80 [ 2105.299523][ T7768] ? trace_irq_disable+0x3b/0x150 [ 2105.299547][ T7768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2105.299566][ T7768] ? clear_bhb_loop+0x40/0x90 [ 2105.299588][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2105.299606][ T7768] RIP: 0033:0x7ff1b715cfce [ 2105.299623][ T7768] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2105.299639][ T7768] RSP: 002b:00007ff1b8125fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2105.299658][ T7768] RAX: ffffffffffffffda RBX: 00007ff1b81266c0 RCX: 00007ff1b715cfce [ 2105.299672][ T7768] RDX: 000000000000000f RSI: 00007ff1b81260a0 RDI: 0000000000000005 [ 2105.299683][ T7768] RBP: 00007ff1b8126090 R08: 0000000000000000 R09: 0000000000000000 [ 2105.299695][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2105.299706][ T7768] R13: 00007ff1b7416038 R14: 00007ff1b7415fa0 R15: 00007ffe25a218b8 [ 2105.299736][ T7768] [ 2105.827201][ T7780] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3058421180/3058421181 [ 2105.876894][ T7784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23507'. [ 2105.893340][ T7789] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3058421180/3058421181 [ 2105.915664][ T7789] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3058421180/3058421181 [ 2106.030481][ T7794] lo speed is unknown, defaulting to 1000 [ 2106.084483][ T7805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.115881][ T7805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.136307][ T7805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.246828][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23512'. [ 2106.275094][ T7805] netlink: 'syz.1.23512': attribute type 4 has an invalid length. [ 2106.288178][ T7803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.297635][ T7803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.476662][ T7794] lo speed is unknown, defaulting to 1000 [ 2106.484123][ T7794] gre0 speed is unknown, defaulting to 1000 [ 2106.840646][ T7825] syzkaller1: entered promiscuous mode [ 2106.848393][ T7825] syzkaller1: entered allmulticast mode [ 2106.874657][ T7827] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2107.114955][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2107.121346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.164870][ T7844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.173152][ T7844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.194790][ T7844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.499426][ T7861] lo speed is unknown, defaulting to 1000 [ 2107.798593][ T7861] lo speed is unknown, defaulting to 1000 [ 2107.817316][ T7870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.836531][ T7861] gre0 speed is unknown, defaulting to 1000 [ 2111.594615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.154758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.794802][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 2112.802818][ C0] lec:lec_tx_timeout: lec0 [ 2112.807507][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2114.487339][ T7896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.493425][ T7903] delete_channel: no stack [ 2114.495879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.510129][ T7901] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2114.539475][ T7901] syzkaller0: entered promiscuous mode [ 2114.545097][ T7901] syzkaller0: entered allmulticast mode [ 2114.553561][ T7903] netlink: 204 bytes leftover after parsing attributes in process `syz.2.23531'. [ 2114.554530][ T7901] tc action pedit offset must be on 32 bit boundaries [ 2114.594809][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23531'. [ 2114.623787][ T7896] netlink: 'syz.1.23530': attribute type 4 has an invalid length. [ 2114.625776][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23531'. [ 2114.674065][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23531'. [ 2114.743844][ T7907] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.23531'. [ 2114.961592][ T7919] netlink: 'syz.1.23530': attribute type 4 has an invalid length. [ 2114.983034][ T7896] netlink: 'syz.1.23530': attribute type 1 has an invalid length. [ 2115.137525][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23540'. [ 2115.154538][ T7925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23540'. [ 2115.299124][ T7932] netlink: 488 bytes leftover after parsing attributes in process `syz.1.23542'. [ 2115.541062][ T7946] delete_channel: no stack [ 2115.560412][ T7943] lo speed is unknown, defaulting to 1000 [ 2115.585119][ T7946] netlink: 204 bytes leftover after parsing attributes in process `syz.0.23547'. [ 2115.615238][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23547'. [ 2115.809564][ T7960] Cannot find set identified by id 65534 to match [ 2115.859204][ T7943] lo speed is unknown, defaulting to 1000 [ 2115.870164][ T7943] gre0 speed is unknown, defaulting to 1000 [ 2116.173437][ T7964] netlink: 'syz.2.23552': attribute type 4 has an invalid length. [ 2116.199378][ T7964] netlink: 'syz.2.23552': attribute type 4 has an invalid length. [ 2116.213717][ T7964] netlink: 'syz.2.23552': attribute type 1 has an invalid length. [ 2116.354782][ T7977] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 2116.696411][ T7994] lo speed is unknown, defaulting to 1000 [ 2117.195445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2117.225763][ T8013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2117.257296][ T8013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2117.374408][ T7994] lo speed is unknown, defaulting to 1000 [ 2117.381895][ T7994] gre0 speed is unknown, defaulting to 1000 [ 2117.433895][ T7996] lo speed is unknown, defaulting to 1000 [ 2117.515747][T23647] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2117.814371][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2117.822430][ C0] lec:lec_tx_timeout: lec0 [ 2118.165550][ T7996] lo speed is unknown, defaulting to 1000 [ 2118.188340][ T7996] gre0 speed is unknown, defaulting to 1000 [ 2118.480065][ T8040] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 2118.503157][ T8040] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 2118.683415][ T8048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2118.692300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2118.803616][ T8044] bond95: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2118.816959][ T8044] bond95 (unregistering): Released all slaves [ 2119.175451][ T8060] syzkaller0: entered promiscuous mode [ 2119.181036][ T8060] syzkaller0: entered allmulticast mode [ 2119.758831][ T8090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2119.768735][ T8090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2119.914756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.239593][T14950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.194676][T23647] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2122.234781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.243042][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2125.791031][ T8129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2125.800148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2125.893995][ T8142] netlink: 'syz.2.23591': attribute type 13 has an invalid length. [ 2125.928945][ T8145] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 2125.951802][ T8142] gretap0: refused to change device tx_queue_len [ 2125.958549][ T8142] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2126.031669][ T8148] __nla_validate_parse: 15 callbacks suppressed [ 2126.031686][ T8148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23592'. [ 2126.083054][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23592'. [ 2126.093506][ T8148] openvswitch: netlink: Flow actions attr not present in new flow. [ 2126.109884][ T8148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23592'. [ 2126.460987][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23585'. [ 2126.671600][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23599'. [ 2126.684250][ T8182] netlink: 'syz.3.23598': attribute type 1 has an invalid length. [ 2126.712594][ T8181] netem: incorrect ge model size [ 2126.718350][ T8181] netem: change failed [ 2126.820944][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23598'. [ 2126.830367][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23598'. [ 2127.251156][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23604'. [ 2127.274798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.372324][ T8207] FAULT_INJECTION: forcing a failure. [ 2127.372324][ T8207] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.404784][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.3.23606 Not tainted syzkaller #0 PREEMPT(full) [ 2127.404809][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2127.404821][ T8207] Call Trace: [ 2127.404828][ T8207] [ 2127.404837][ T8207] dump_stack_lvl+0xe8/0x150 [ 2127.404867][ T8207] should_fail_ex+0x412/0x560 [ 2127.404898][ T8207] should_failslab+0xa8/0x100 [ 2127.404924][ T8207] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 2127.404946][ T8207] ? kobject_set_name_vargs+0x61/0x110 [ 2127.405056][ T8207] kvasprintf+0xeb/0x1a0 [ 2127.405078][ T8207] ? __pfx_kvasprintf+0x10/0x10 [ 2127.405098][ T8207] ? __raw_spin_lock_init+0x45/0x100 [ 2127.405122][ T8207] ? kvasprintf_const+0xe1/0x240 [ 2127.405142][ T8207] kobject_set_name_vargs+0x61/0x110 [ 2127.405163][ T8207] device_create+0x23d/0x300 [ 2127.405226][ T8207] ? timer_init_key+0x161/0x2f0 [ 2127.405260][ T8207] ? __pfx_device_create+0x10/0x10 [ 2127.405281][ T8207] ? ieee80211_alloc_hw_nm+0x191d/0x1fa0 [ 2127.405371][ T8207] mac80211_hwsim_new_radio+0x427/0x5b60 [ 2127.405449][ T8207] ? stack_trace_save+0xa9/0x100 [ 2127.405468][ T8207] ? __pfx_stack_trace_save+0x10/0x10 [ 2127.405490][ T8207] ? stack_depot_save_flags+0x33/0x810 [ 2127.405519][ T8207] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2127.405549][ T8207] hwsim_new_radio_nl+0xf6a/0x1c00 [ 2127.405590][ T8207] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2127.405618][ T8207] ? rcu_is_watching+0x15/0xb0 [ 2127.405642][ T8207] ? trace_kmalloc+0x2a/0x110 [ 2127.405666][ T8207] ? __nla_parse+0x40/0x60 [ 2127.405693][ T8207] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2127.405713][ T8207] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2127.405740][ T8207] genl_family_rcv_msg_doit+0x22a/0x330 [ 2127.405766][ T8207] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2127.405797][ T8207] ? bpf_lsm_capable+0x9/0x20 [ 2127.405821][ T8207] ? security_capable+0x7e/0x2c0 [ 2127.405883][ T8207] genl_rcv_msg+0x61c/0x7a0 [ 2127.405908][ T8207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2127.405925][ T8207] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2127.405945][ T8207] ? __lock_acquire+0x6b5/0x2cf0 [ 2127.405978][ T8207] netlink_rcv_skb+0x232/0x4b0 [ 2127.406003][ T8207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2127.406023][ T8207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2127.406069][ T8207] ? down_read+0x272/0x2e0 [ 2127.406089][ T8207] ? genl_rcv+0xd/0x40 [ 2127.406109][ T8207] genl_rcv+0x28/0x40 [ 2127.406125][ T8207] netlink_unicast+0x80f/0x9b0 [ 2127.406155][ T8207] ? __pfx_netlink_unicast+0x10/0x10 [ 2127.406178][ T8207] ? netlink_sendmsg+0x650/0xb40 [ 2127.406201][ T8207] ? skb_put+0x11b/0x210 [ 2127.406229][ T8207] netlink_sendmsg+0x813/0xb40 [ 2127.406262][ T8207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2127.406289][ T8207] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2127.406313][ T8207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2127.406335][ T8207] ____sys_sendmsg+0x972/0x9f0 [ 2127.406362][ T8207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2127.406389][ T8207] ? import_iovec+0x73/0xa0 [ 2127.406419][ T8207] ___sys_sendmsg+0x2a5/0x360 [ 2127.406442][ T8207] ? __pfx____sys_sendmsg+0x10/0x10 [ 2127.406496][ T8207] ? __fget_files+0x2a/0x420 [ 2127.406521][ T8207] ? __fget_files+0x3a0/0x420 [ 2127.406556][ T8207] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2127.406577][ T8207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2127.406605][ T8207] ? __pfx_ksys_write+0x10/0x10 [ 2127.406637][ T8207] do_syscall_64+0x14d/0xf80 [ 2127.406661][ T8207] ? trace_irq_disable+0x3b/0x150 [ 2127.406685][ T8207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2127.406703][ T8207] ? clear_bhb_loop+0x40/0x90 [ 2127.406725][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2127.406742][ T8207] RIP: 0033:0x7f3a2219c799 [ 2127.406764][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2127.406784][ T8207] RSP: 002b:00007f3a203ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2127.406804][ T8207] RAX: ffffffffffffffda RBX: 00007f3a22415fa0 RCX: 00007f3a2219c799 [ 2127.406817][ T8207] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 2127.406829][ T8207] RBP: 00007f3a203ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2127.406840][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2127.406851][ T8207] R13: 00007f3a22416038 R14: 00007f3a22415fa0 R15: 00007ffc784b0c78 [ 2127.406883][ T8207] [ 2127.569593][ T8211] FAULT_INJECTION: forcing a failure. [ 2127.569593][ T8211] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.754558][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 2127.769806][ T8211] CPU: 1 UID: 0 PID: 8211 Comm: syz.1.23608 Not tainted syzkaller #0 PREEMPT(full) [ 2127.769830][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2127.769841][ T8211] Call Trace: [ 2127.769848][ T8211] [ 2127.769856][ T8211] dump_stack_lvl+0xe8/0x150 [ 2127.769885][ T8211] should_fail_ex+0x412/0x560 [ 2127.769912][ T8211] should_failslab+0xa8/0x100 [ 2127.769936][ T8211] __kmalloc_noprof+0xe8/0x760 [ 2127.769955][ T8211] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2127.770057][ T8211] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2127.770090][ T8211] ? tomoyo_path_number_perm+0x219/0x630 [ 2127.770110][ T8211] tomoyo_path_number_perm+0x246/0x630 [ 2127.770132][ T8211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2127.770155][ T8211] ? __lock_acquire+0x6b5/0x2cf0 [ 2127.770187][ T8211] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2127.770232][ T8211] ? __fget_files+0x2a/0x420 [ 2127.770258][ T8211] ? __fget_files+0x2a/0x420 [ 2127.770281][ T8211] ? __fget_files+0x3a0/0x420 [ 2127.770302][ T8211] ? __fget_files+0x2a/0x420 [ 2127.770330][ T8211] security_file_ioctl+0xc3/0x2a0 [ 2127.770357][ T8211] __se_sys_ioctl+0x47/0x170 [ 2127.770380][ T8211] do_syscall_64+0x14d/0xf80 [ 2127.770402][ T8211] ? trace_irq_disable+0x3b/0x150 [ 2127.770425][ T8211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2127.770443][ T8211] ? clear_bhb_loop+0x40/0x90 [ 2127.770464][ T8211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2127.770481][ T8211] RIP: 0033:0x7f96f899c799 [ 2127.770497][ T8211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2127.770512][ T8211] RSP: 002b:00007f96f6bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2127.770531][ T8211] RAX: ffffffffffffffda RBX: 00007f96f8c15fa0 RCX: 00007f96f899c799 [ 2127.770543][ T8211] RDX: 0000200000000680 RSI: 000000000000890c RDI: 0000000000000004 [ 2127.770555][ T8211] RBP: 00007f96f6bee090 R08: 0000000000000000 R09: 0000000000000000 [ 2127.770566][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2127.770577][ T8211] R13: 00007f96f8c16038 R14: 00007f96f8c15fa0 R15: 00007ffd2affc7d8 [ 2127.770605][ T8211] [ 2127.770622][ T8211] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2127.786360][ C0] lec:lec_tx_timeout: lec0 [ 2127.786893][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2128.108340][T23647] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2128.203252][ T8229] netlink: 48 bytes leftover after parsing attributes in process `syz.3.23615'. [ 2128.466523][ T8245] lo speed is unknown, defaulting to 1000 [ 2128.711259][ T8245] lo speed is unknown, defaulting to 1000 [ 2128.718994][ T8245] gre0 speed is unknown, defaulting to 1000 [ 2129.778810][ T8191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2129.976715][ T8270] netlink: 48 bytes leftover after parsing attributes in process `syz.3.23627'. [ 2130.314484][T23647] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2130.386272][ T8294] sctp: [Deprecated]: syz.3.23635 (pid 8294) Use of int in maxseg socket option. [ 2130.386272][ T8294] Use struct sctp_assoc_value instead [ 2131.008930][ T8309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2131.029650][ T8309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.170629][ T8338] __nla_validate_parse: 2 callbacks suppressed [ 2132.170648][ T8338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23645'. [ 2132.314679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.605612][ T8344] FAULT_INJECTION: forcing a failure. [ 2132.605612][ T8344] name failslab, interval 1, probability 0, space 0, times 0 [ 2132.695211][ T8344] CPU: 0 UID: 0 PID: 8344 Comm: syz.3.23646 Not tainted syzkaller #0 PREEMPT(full) [ 2132.695235][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2132.695246][ T8344] Call Trace: [ 2132.695253][ T8344] [ 2132.695261][ T8344] dump_stack_lvl+0xe8/0x150 [ 2132.695291][ T8344] should_fail_ex+0x412/0x560 [ 2132.695318][ T8344] should_failslab+0xa8/0x100 [ 2132.695342][ T8344] __kmalloc_noprof+0xe8/0x760 [ 2132.695361][ T8344] ? rfkill_alloc+0xad/0x2f0 [ 2132.695475][ T8344] rfkill_alloc+0xad/0x2f0 [ 2132.695511][ T8344] wiphy_new_nm+0x11a3/0x19e0 [ 2132.695566][ T8344] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 2132.695593][ T8344] ieee80211_alloc_hw_nm+0x3f3/0x1fa0 [ 2132.695620][ T8344] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 2132.695652][ T8344] mac80211_hwsim_new_radio+0x1e8/0x5b60 [ 2132.695684][ T8344] ? stack_trace_save+0xa9/0x100 [ 2132.695703][ T8344] ? __pfx_stack_trace_save+0x10/0x10 [ 2132.695726][ T8344] ? stack_depot_save_flags+0x33/0x810 [ 2132.695756][ T8344] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2132.695786][ T8344] hwsim_new_radio_nl+0xf6a/0x1c00 [ 2132.695828][ T8344] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2132.695855][ T8344] ? rcu_is_watching+0x15/0xb0 [ 2132.695878][ T8344] ? trace_kmalloc+0x2a/0x110 [ 2132.695904][ T8344] ? __nla_parse+0x40/0x60 [ 2132.695930][ T8344] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2132.695951][ T8344] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2132.695978][ T8344] genl_family_rcv_msg_doit+0x22a/0x330 [ 2132.696016][ T8344] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2132.696048][ T8344] ? bpf_lsm_capable+0x9/0x20 [ 2132.696070][ T8344] ? security_capable+0x7e/0x2c0 [ 2132.696098][ T8344] genl_rcv_msg+0x61c/0x7a0 [ 2132.696121][ T8344] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2132.696137][ T8344] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2132.696156][ T8344] ? __lock_acquire+0x6b5/0x2cf0 [ 2132.696189][ T8344] netlink_rcv_skb+0x232/0x4b0 [ 2132.696211][ T8344] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2132.696230][ T8344] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2132.696268][ T8344] ? down_read+0x272/0x2e0 [ 2132.696284][ T8344] ? genl_rcv+0xd/0x40 [ 2132.696303][ T8344] genl_rcv+0x28/0x40 [ 2132.696318][ T8344] netlink_unicast+0x80f/0x9b0 [ 2132.696346][ T8344] ? __pfx_netlink_unicast+0x10/0x10 [ 2132.696369][ T8344] ? netlink_sendmsg+0x650/0xb40 [ 2132.696391][ T8344] ? skb_put+0x11b/0x210 [ 2132.696419][ T8344] netlink_sendmsg+0x813/0xb40 [ 2132.696452][ T8344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2132.696479][ T8344] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2132.696510][ T8344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2132.696534][ T8344] ____sys_sendmsg+0x972/0x9f0 [ 2132.696561][ T8344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2132.696588][ T8344] ? import_iovec+0x73/0xa0 [ 2132.696615][ T8344] ___sys_sendmsg+0x2a5/0x360 [ 2132.696635][ T8344] ? __pfx____sys_sendmsg+0x10/0x10 [ 2132.696683][ T8344] ? __fget_files+0x2a/0x420 [ 2132.696705][ T8344] ? __fget_files+0x3a0/0x420 [ 2132.696737][ T8344] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2132.696757][ T8344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2132.696782][ T8344] ? __pfx_ksys_write+0x10/0x10 [ 2132.696811][ T8344] do_syscall_64+0x14d/0xf80 [ 2132.696835][ T8344] ? trace_irq_disable+0x3b/0x150 [ 2132.696857][ T8344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2132.696875][ T8344] ? clear_bhb_loop+0x40/0x90 [ 2132.696897][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2132.696914][ T8344] RIP: 0033:0x7f3a2219c799 [ 2132.696932][ T8344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2132.696947][ T8344] RSP: 002b:00007f3a203ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2132.696966][ T8344] RAX: ffffffffffffffda RBX: 00007f3a22415fa0 RCX: 00007f3a2219c799 [ 2132.696979][ T8344] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 2132.696990][ T8344] RBP: 00007f3a203ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2132.697001][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2132.697011][ T8344] R13: 00007f3a22416038 R14: 00007f3a22415fa0 R15: 00007ffc784b0c78 [ 2132.697040][ T8344] [ 2132.754435][ T8342] lo speed is unknown, defaulting to 1000 [ 2133.031704][ T8356] netlink: 'syz.1.23651': attribute type 1 has an invalid length. [ 2133.124008][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23649'. [ 2133.322759][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23651'. [ 2133.515315][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.534097][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.547471][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.654963][ T8378] lo speed is unknown, defaulting to 1000 [ 2133.656527][ T8342] lo speed is unknown, defaulting to 1000 [ 2133.668907][ T8342] gre0 speed is unknown, defaulting to 1000 [ 2133.754361][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 2133.762376][ C0] lec:lec_tx_timeout: lec0 [ 2133.788522][ T8375] netlink: 'syz.1.23655': attribute type 4 has an invalid length. [ 2133.838546][ T8375] netlink: 'syz.1.23655': attribute type 4 has an invalid length. [ 2133.858762][ T8375] netlink: 'syz.1.23655': attribute type 1 has an invalid length. [ 2134.086356][ T8378] lo speed is unknown, defaulting to 1000 [ 2134.201066][ T8378] gre0 speed is unknown, defaulting to 1000 [ 2135.443052][ T8408] lo speed is unknown, defaulting to 1000 [ 2135.497520][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2135.517682][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2135.539482][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2136.654461][ T8408] lo speed is unknown, defaulting to 1000 [ 2136.671939][ T8408] gre0 speed is unknown, defaulting to 1000 [ 2136.848487][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23663'. [ 2137.354747][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2137.361228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2137.571698][ T8476] netlink: 'syz.2.23669': attribute type 4 has an invalid length. [ 2137.625905][ T8478] netlink: 'syz.2.23669': attribute type 4 has an invalid length. [ 2137.967138][ T8477] netlink: 'syz.2.23669': attribute type 1 has an invalid length. [ 2138.230722][ T8487] netlink: 'syz.3.23670': attribute type 1 has an invalid length. [ 2138.356521][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23670'. [ 2138.772671][ T8508] bond111: option resend_igmp: invalid value (2878) [ 2138.784624][ T8508] bond111: option resend_igmp: allowed values 0 - 255 [ 2138.802255][ T8508] bond111 (unregistering): Released all slaves [ 2138.926387][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23676'. [ 2142.394812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.794438][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5440 ms [ 2142.802445][ C0] lec:lec_tx_timeout: lec0 [ 2142.807107][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 2143.916002][ T8527] FAULT_INJECTION: forcing a failure. [ 2143.916002][ T8527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2143.961253][ T8527] CPU: 1 UID: 0 PID: 8527 Comm: syz.0.23678 Not tainted syzkaller #0 PREEMPT(full) [ 2143.961278][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2143.961289][ T8527] Call Trace: [ 2143.961298][ T8527] [ 2143.961306][ T8527] dump_stack_lvl+0xe8/0x150 [ 2143.961336][ T8527] should_fail_ex+0x412/0x560 [ 2143.961364][ T8527] _copy_from_user+0x2d/0xb0 [ 2143.961392][ T8527] nr_rt_ioctl+0x933/0xf90 [ 2143.961529][ T8527] ? kasan_quarantine_put+0xbb/0x1f0 [ 2143.961549][ T8527] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 2143.961583][ T8527] ? apparmor_capable+0x126/0x170 [ 2143.961615][ T8527] ? capable+0x88/0xe0 [ 2143.961638][ T8527] ? nr_ioctl+0x1b1/0x3b0 [ 2143.961659][ T8527] sock_do_ioctl+0x101/0x320 [ 2143.961683][ T8527] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2143.961701][ T8527] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2143.961740][ T8527] sock_ioctl+0x5c6/0x7f0 [ 2143.961762][ T8527] ? __pfx_sock_ioctl+0x10/0x10 [ 2143.961782][ T8527] ? __fget_files+0x2a/0x420 [ 2143.961804][ T8527] ? __fget_files+0x3a0/0x420 [ 2143.961826][ T8527] ? __fget_files+0x2a/0x420 [ 2143.961852][ T8527] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2143.961874][ T8527] ? __pfx_sock_ioctl+0x10/0x10 [ 2143.961892][ T8527] __se_sys_ioctl+0xfc/0x170 [ 2143.961924][ T8527] do_syscall_64+0x14d/0xf80 [ 2143.961946][ T8527] ? trace_irq_disable+0x3b/0x150 [ 2143.961969][ T8527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2143.961986][ T8527] ? clear_bhb_loop+0x40/0x90 [ 2143.962007][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2143.962025][ T8527] RIP: 0033:0x7f9425d9c799 [ 2143.962042][ T8527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2143.962057][ T8527] RSP: 002b:00007f9426b7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2143.962077][ T8527] RAX: ffffffffffffffda RBX: 00007f9426015fa0 RCX: 00007f9425d9c799 [ 2143.962090][ T8527] RDX: 0000200000000680 RSI: 000000000000890c RDI: 0000000000000004 [ 2143.962101][ T8527] RBP: 00007f9426b7e090 R08: 0000000000000000 R09: 0000000000000000 [ 2143.962112][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2143.962122][ T8527] R13: 00007f9426016038 R14: 00007f9426015fa0 R15: 00007ffc4c139fb8 [ 2143.962149][ T8527] [ 2144.273251][ T8549] netlink: 'syz.1.23684': attribute type 1 has an invalid length. [ 2144.355349][ T8551] netlink: 'syz.4.23682': attribute type 4 has an invalid length. [ 2144.391735][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23684'. [ 2144.461724][ T8538] netlink: 'syz.4.23682': attribute type 4 has an invalid length. [ 2144.525301][ T8533] netlink: 'syz.4.23682': attribute type 1 has an invalid length. [ 2144.763328][ T8570] lo speed is unknown, defaulting to 1000 [ 2144.876873][ T8577] bond96: option resend_igmp: invalid value (2878) [ 2144.901315][ T8577] bond96: option resend_igmp: allowed values 0 - 255 [ 2145.002244][ T8577] bond96 (unregistering): Released all slaves [ 2145.031323][ T8570] lo speed is unknown, defaulting to 1000 [ 2145.039344][ T8570] gre0 speed is unknown, defaulting to 1000 [ 2145.420950][ T8594] --map-set only usable from mangle table [ 2145.477256][ T8601] netlink: 'syz.2.23699': attribute type 1 has an invalid length. [ 2145.528778][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23694'. [ 2145.552415][ T8594] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 2145.677820][ T8607] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2145.701835][ T8607] macvtap0: entered promiscuous mode [ 2145.724725][ T8607] bond6: entered promiscuous mode [ 2145.744721][ T8607] bridge9: entered promiscuous mode [ 2145.766090][ T8607] macvtap0: entered allmulticast mode [ 2145.788615][ T8607] bond6: entered allmulticast mode [ 2145.803515][ T8607] bridge9: entered allmulticast mode [ 2145.823422][ T8607] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 2145.889386][ T8619] bond96: option resend_igmp: invalid value (2878) [ 2145.904654][ T8619] bond96: option resend_igmp: allowed values 0 - 255 [ 2145.934901][ T8619] bond96 (unregistering): Released all slaves [ 2146.046252][ T8633] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 2146.383015][ T8646] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 2146.499343][ T8647] netlink: 'syz.4.23712': attribute type 4 has an invalid length. [ 2146.549648][ T8656] netlink: 'syz.1.23715': attribute type 1 has an invalid length. [ 2146.551036][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23714'. [ 2146.562304][ T8647] netlink: 'syz.4.23712': attribute type 4 has an invalid length. [ 2146.833606][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23719'. [ 2146.839546][ T8647] netlink: 'syz.4.23712': attribute type 1 has an invalid length. [ 2147.128749][ T8687] netlink: 'syz.0.23726': attribute type 1 has an invalid length. [ 2147.332508][ T8696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23728'. [ 2147.435092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2147.544077][ T8700] bond111: entered promiscuous mode [ 2147.549429][ T8700] bond111: entered allmulticast mode [ 2147.555360][ T8700] 8021q: adding VLAN 0 to HW filter on device bond111 [ 2147.644765][ T8703] tipc: Enabling of bearer rejected, already enabled [ 2147.671112][ T8703] syzkaller0: entered promiscuous mode [ 2147.677800][ T8703] syzkaller0: entered allmulticast mode [ 2147.683815][ T8703] tipc: Resetting bearer [ 2147.736656][ T8714] tipc: Enabling of bearer rejected, already enabled [ 2147.745783][ T8714] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 2147.753299][ T8714] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 2147.814367][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2147.822407][ C0] lec:lec_tx_timeout: lec0 [ 2147.844629][ T8720] syzkaller0: left promiscuous mode [ 2147.849988][ T8720] syzkaller0: left allmulticast mode [ 2147.855745][ T8720] tipc: Resetting bearer [ 2147.889376][ T8719] bond97: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2148.782859][ T8766] 8021q: adding VLAN 0 to HW filter on device bond112 [ 2149.140424][ T8799] FAULT_INJECTION: forcing a failure. [ 2149.140424][ T8799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2149.157324][ T8799] CPU: 1 UID: 0 PID: 8799 Comm: syz.4.23754 Not tainted syzkaller #0 PREEMPT(full) [ 2149.157348][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2149.157359][ T8799] Call Trace: [ 2149.157366][ T8799] [ 2149.157375][ T8799] dump_stack_lvl+0xe8/0x150 [ 2149.157414][ T8799] should_fail_ex+0x412/0x560 [ 2149.157442][ T8799] _copy_from_user+0x2d/0xb0 [ 2149.157469][ T8799] do_sys_poll+0x2a9/0x1120 [ 2149.157503][ T8799] ? __lock_acquire+0x6b5/0x2cf0 [ 2149.157528][ T8799] ? __pfx_do_sys_poll+0x10/0x10 [ 2149.157550][ T8799] ? is_bpf_text_address+0x26/0x2b0 [ 2149.157666][ T8799] ? __pfx_timespec64_add_safe+0x10/0x10 [ 2149.157698][ T8799] __x64_sys_poll+0x190/0x350 [ 2149.157724][ T8799] ? __pfx___x64_sys_poll+0x10/0x10 [ 2149.157758][ T8799] do_syscall_64+0x14d/0xf80 [ 2149.157782][ T8799] ? trace_irq_disable+0x3b/0x150 [ 2149.157806][ T8799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.157824][ T8799] ? clear_bhb_loop+0x40/0x90 [ 2149.157846][ T8799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.157863][ T8799] RIP: 0033:0x7f568e59c799 [ 2149.157880][ T8799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2149.157894][ T8799] RSP: 002b:00007f568f471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 2149.157912][ T8799] RAX: ffffffffffffffda RBX: 00007f568e815fa0 RCX: 00007f568e59c799 [ 2149.157924][ T8799] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 2149.157936][ T8799] RBP: 00007f568f471090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.157947][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.157957][ T8799] R13: 00007f568e816038 R14: 00007f568e815fa0 R15: 00007ffe1f87c528 [ 2149.157984][ T8799] [ 2149.756847][ T8830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.797204][ T8833] validate_nla: 6 callbacks suppressed [ 2149.797222][ T8833] netlink: 'syz.3.23764': attribute type 1 has an invalid length. [ 2149.961229][ T8833] 8021q: adding VLAN 0 to HW filter on device bond98 [ 2150.078277][ T8842] vlan3: entered promiscuous mode [ 2150.083341][ T8842] bond98: entered promiscuous mode [ 2150.135019][ T8842] vlan3: entered allmulticast mode [ 2150.142752][ T8833] netlink: 44 bytes leftover after parsing attributes in process `syz.3.23764'. [ 2150.190486][ T8842] bond98: entered allmulticast mode [ 2150.423503][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2150.451706][ T8833] bond98: (slave batadv2): making interface the new active one [ 2150.463764][ T8833] batadv2: entered promiscuous mode [ 2150.478131][ T8833] batadv2: entered allmulticast mode [ 2150.495070][ T8833] bond98: (slave batadv2): Enslaving as an active interface with an up link [ 2150.762327][ T8862] delete_channel: no stack [ 2150.770578][ T8862] netlink: 204 bytes leftover after parsing attributes in process `syz.3.23771'. [ 2150.781429][ T8862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23771'. [ 2150.792927][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23771'. [ 2150.829750][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23771'. [ 2150.920102][ T8868] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.23771'. [ 2151.048721][ T8874] bond103: option resend_igmp: invalid value (2878) [ 2151.055773][ T8874] bond103: option resend_igmp: allowed values 0 - 255 [ 2151.066144][ T8874] bond103 (unregistering): Released all slaves [ 2151.119317][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23777'. [ 2151.897621][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23778'. [ 2152.262681][ T8916] netlink: 112 bytes leftover after parsing attributes in process `syz.0.23787'. [ 2152.274529][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23788'. [ 2152.554760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2153.063938][ T8949] delete_channel: no stack [ 2153.104239][ T8950] lo speed is unknown, defaulting to 1000 [ 2153.536689][ T8950] lo speed is unknown, defaulting to 1000 [ 2153.546593][ T8950] gre0 speed is unknown, defaulting to 1000 [ 2154.424636][ T8974] netlink: 'syz.3.23807': attribute type 4 has an invalid length. [ 2154.477637][ T8974] netlink: 'syz.3.23807': attribute type 4 has an invalid length. [ 2154.496665][ T4985] lo speed is unknown, defaulting to 1000 [ 2154.502456][ T4985] syz2: Port: 1 Link ACTIVE [ 2154.510292][ T8974] netlink: 'syz.3.23807': attribute type 1 has an invalid length. [ 2155.062265][ T9003] delete_channel: no stack [ 2155.967274][ T9047] lo speed is unknown, defaulting to 1000 [ 2156.016349][ T9045] __nla_validate_parse: 19 callbacks suppressed [ 2156.016368][ T9045] netlink: 44 bytes leftover after parsing attributes in process `syz.0.23821'. [ 2156.300023][ T9047] lo speed is unknown, defaulting to 1000 [ 2156.307536][ T9047] gre0 speed is unknown, defaulting to 1000 [ 2156.535886][ T9050] netlink: 'syz.2.23822': attribute type 1 has an invalid length. [ 2156.543960][ T9050] netlink: 'syz.2.23822': attribute type 4 has an invalid length. [ 2156.552254][ T9050] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.23822'. [ 2156.570400][ T9050] netlink: 'syz.2.23822': attribute type 13 has an invalid length. [ 2156.578946][ T9050] netlink: 'syz.2.23822': attribute type 17 has an invalid length. [ 2156.863997][ T9050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2156.887480][ T9050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2156.983260][T29604] syz_tun: tun_net_xmit 90 [ 2157.029178][ T7828] syz_tun: tun_net_xmit 86 [ 2157.234938][ T7828] syz_tun: tun_net_xmit 70 [ 2157.349391][T30009] syz_tun: tun_net_xmit 90 [ 2158.084946][ T8019] syz_tun: tun_net_xmit 90 [ 2158.089869][ T8019] syz_tun: tun_net_xmit 70 [ 2158.654498][ T24] syz_tun: tun_net_xmit 90 [ 2160.238671][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2160.248963][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 2160.255421][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2160.874527][ C1] syz_tun: tun_net_xmit 70 [ 2162.316343][ C1] syz_tun: tun_net_xmit 70 [ 2165.754365][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 2165.762384][ C0] lec:lec_tx_timeout: lec0 [ 2168.554533][ C1] syz_tun: tun_net_xmit 70 [ 2168.783440][ T9080] netlink: 'syz.1.23826': attribute type 1 has an invalid length. [ 2168.812473][ T9090] delete_channel: no stack [ 2168.820242][ T9090] netlink: 204 bytes leftover after parsing attributes in process `syz.2.23827'. [ 2168.829600][ T9090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23827'. [ 2168.847726][ T9089] netlink: 112 bytes leftover after parsing attributes in process `syz.4.23829'. [ 2168.851300][ T9080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23826'. [ 2168.868248][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23827'. [ 2168.912706][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23827'. [ 2168.980596][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23830'. [ 2169.021030][ T9095] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.23827'. [ 2169.114188][ T9103] lo speed is unknown, defaulting to 1000 [ 2169.343563][ T9115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.23834'. [ 2169.903675][ T9103] lo speed is unknown, defaulting to 1000 [ 2169.903675][ T9112] lo speed is unknown, defaulting to 1000 [ 2169.956199][ T9103] gre0 speed is unknown, defaulting to 1000 [ 2170.257338][ T9112] lo speed is unknown, defaulting to 1000 [ 2170.311262][ T9138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2170.382568][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23845'. [ 2170.384895][ T9112] gre0 speed is unknown, defaulting to 1000 [ 2171.114514][ C1] syz_tun: tun_net_xmit 70 [ 2171.599317][ T9167] 8021q: adding VLAN 0 to HW filter on device bond90 [ 2171.618339][ T9171] macvlan13: entered promiscuous mode [ 2171.625038][ T9171] macvlan13: entered allmulticast mode [ 2171.631041][ T9171] bond90: entered allmulticast mode [ 2171.664465][ T9171] bond90: entered promiscuous mode [ 2171.670151][ T9171] 8021q: adding VLAN 0 to HW filter on device macvlan13 [ 2171.684833][ T9171] team0: Port device macvlan13 added [ 2172.011089][ T9186] bond91: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 2172.188949][ T9194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.321090][ T9234] macvlan18: entered promiscuous mode [ 2173.326825][ T9234] macvlan18: entered allmulticast mode [ 2174.773926][ T9175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2175.032855][ T9253] __nla_validate_parse: 4 callbacks suppressed [ 2175.032873][ T9253] netlink: 44 bytes leftover after parsing attributes in process `syz.0.23868'. [ 2175.050990][ T9249] lo speed is unknown, defaulting to 1000 [ 2175.223059][ T9249] lo speed is unknown, defaulting to 1000 [ 2175.235385][ T9249] gre0 speed is unknown, defaulting to 1000 [ 2180.053802][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23874'. [ 2180.177243][ T9279] can: request_module (can-proto-0) failed. [ 2180.250489][ T9295] gretap4: entered promiscuous mode [ 2180.258115][ T9295] batman_adv: batadv0: Adding interface: gretap4 [ 2180.264698][ T9295] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568. [ 2180.344060][ T9295] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 2180.397561][ T9297] tipc: Failed to remove unknown binding: 66,1,1/4278321153:4253679953/4253679954 [ 2180.484024][ T9301] tipc: Failed to remove unknown binding: 66,1,1/4278321153:4253679953/4253679954 [ 2180.493962][ T9301] tipc: Failed to remove unknown binding: 66,1,1/4278321153:4253679953/4253679954 [ 2180.700296][ T9306] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2180.827649][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2181.399167][ T9320] openvswitch: netlink: Multiple metadata blocks provided [ 2181.540408][ T9322] gretap6: entered promiscuous mode [ 2181.560844][ T9322] batman_adv: batadv0: Adding interface: gretap6 [ 2181.580189][ T9322] batman_adv: batadv0: The MTU of interface gretap6 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568. [ 2181.630536][ T9322] batman_adv: batadv0: Not using interface gretap6 (retrying later): interface not active [ 2181.888157][ T9337] bond99: option resend_igmp: invalid value (2878) [ 2181.894784][ T9337] bond99: option resend_igmp: allowed values 0 - 255 [ 2181.914619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2181.933559][ T9337] bond99 (unregistering): Released all slaves [ 2182.102905][ T9344] lo speed is unknown, defaulting to 1000 [ 2182.259115][ T9358] netlink: 80 bytes leftover after parsing attributes in process `syz.1.23899'. [ 2182.710673][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23902'. [ 2182.731491][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23902'. [ 2182.750532][ T9365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.23902'. [ 2182.766179][ T9344] lo speed is unknown, defaulting to 1000 [ 2182.773476][ T9344] gre0 speed is unknown, defaulting to 1000 [ 2182.954999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2183.282697][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23908'. [ 2183.544276][ T9392] lo speed is unknown, defaulting to 1000 [ 2183.994789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2184.068381][T14950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2184.117685][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23916'. [ 2184.126831][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23916'. [ 2184.133615][ T9406] lo speed is unknown, defaulting to 1000 [ 2184.148605][ T9392] lo speed is unknown, defaulting to 1000 [ 2184.171942][ T9392] gre0 speed is unknown, defaulting to 1000 [ 2184.554627][ C1] syz_tun: tun_net_xmit 70 [ 2185.034928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.239498][ T9406] lo speed is unknown, defaulting to 1000 [ 2185.267626][ T9406] gre0 speed is unknown, defaulting to 1000 [ 2185.345440][ T9433] netlink: 'syz.4.23921': attribute type 4 has an invalid length. [ 2185.415625][ T9437] netlink: 'syz.4.23921': attribute type 4 has an invalid length. [ 2186.063677][ T9433] netlink: 'syz.4.23921': attribute type 1 has an invalid length. [ 2186.074715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.164579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.394500][ C1] syz_tun: tun_net_xmit 70 [ 2192.234663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2192.556790][ T9503] FAULT_INJECTION: forcing a failure. [ 2192.556790][ T9503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2192.573118][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.4.23936 Not tainted syzkaller #0 PREEMPT(full) [ 2192.573143][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2192.573155][ T9503] Call Trace: [ 2192.573163][ T9503] [ 2192.573172][ T9503] dump_stack_lvl+0xe8/0x150 [ 2192.573202][ T9503] should_fail_ex+0x412/0x560 [ 2192.573229][ T9503] _copy_from_user+0x2d/0xb0 [ 2192.573257][ T9503] ___sys_sendmsg+0x1c6/0x360 [ 2192.573283][ T9503] ? __pfx____sys_sendmsg+0x10/0x10 [ 2192.573335][ T9503] ? __fget_files+0x2a/0x420 [ 2192.573359][ T9503] ? __fget_files+0x3a0/0x420 [ 2192.573394][ T9503] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2192.573415][ T9503] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2192.573443][ T9503] ? __pfx_ksys_write+0x10/0x10 [ 2192.573480][ T9503] do_syscall_64+0x14d/0xf80 [ 2192.573506][ T9503] ? trace_irq_disable+0x3b/0x150 [ 2192.573530][ T9503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.573549][ T9503] ? clear_bhb_loop+0x40/0x90 [ 2192.573571][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.573590][ T9503] RIP: 0033:0x7f568e59c799 [ 2192.573607][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2192.573623][ T9503] RSP: 002b:00007f568f471028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2192.573643][ T9503] RAX: ffffffffffffffda RBX: 00007f568e815fa0 RCX: 00007f568e59c799 [ 2192.573656][ T9503] RDX: 0000000004000010 RSI: 0000200000000240 RDI: 0000000000000006 [ 2192.573668][ T9503] RBP: 00007f568f471090 R08: 0000000000000000 R09: 0000000000000000 [ 2192.573680][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2192.573691][ T9503] R13: 00007f568e816038 R14: 00007f568e815fa0 R15: 00007ffe1f87c528 [ 2192.573720][ T9503] [ 2192.811074][ T9508] lo speed is unknown, defaulting to 1000 [ 2192.849454][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23939'. [ 2193.382915][ T9523] tipc: Enabling of bearer rejected, already enabled [ 2193.434051][ T9508] lo speed is unknown, defaulting to 1000 [ 2193.479260][ T9508] gre0 speed is unknown, defaulting to 1000 [ 2193.790284][ T9530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.798821][ T9530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.810953][ T9530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.844975][ T9525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.873834][ T9525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2194.155239][ T9542] siw: device registration error -23 [ 2194.348641][ T9550] FAULT_INJECTION: forcing a failure. [ 2194.348641][ T9550] name failslab, interval 1, probability 0, space 0, times 0 [ 2194.380529][ T9550] CPU: 1 UID: 0 PID: 9550 Comm: syz.1.23953 Not tainted syzkaller #0 PREEMPT(full) [ 2194.380553][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2194.380565][ T9550] Call Trace: [ 2194.380573][ T9550] [ 2194.380581][ T9550] dump_stack_lvl+0xe8/0x150 [ 2194.380611][ T9550] should_fail_ex+0x412/0x560 [ 2194.380641][ T9550] should_failslab+0xa8/0x100 [ 2194.380665][ T9550] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2194.380687][ T9550] ? __alloc_skb+0x1d0/0x7d0 [ 2194.380710][ T9550] ? __local_bh_enable_ip+0xd0/0x130 [ 2194.380737][ T9550] __alloc_skb+0x1d0/0x7d0 [ 2194.380765][ T9550] __ipv6_ifa_notify+0x1d0/0xc60 [ 2194.380905][ T9550] ? trace_contention_end+0x3d/0x150 [ 2194.380940][ T9550] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 2194.380966][ T9550] ? inet6_addr_modify+0x6b4/0x11d0 [ 2194.380992][ T9550] ? __local_bh_enable_ip+0xd0/0x130 [ 2194.381019][ T9550] inet6_addr_modify+0x738/0x11d0 [ 2194.381059][ T9550] inet6_rtm_newaddr+0x9d0/0xe30 [ 2194.381093][ T9550] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 2194.381142][ T9550] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 2194.381166][ T9550] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 2194.381194][ T9550] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2194.381217][ T9550] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2194.381244][ T9550] ? __lock_acquire+0x6b5/0x2cf0 [ 2194.381276][ T9550] netlink_rcv_skb+0x232/0x4b0 [ 2194.381302][ T9550] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2194.381328][ T9550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2194.381360][ T9550] ? netlink_deliver_tap+0x2e/0x1b0 [ 2194.381391][ T9550] netlink_unicast+0x80f/0x9b0 [ 2194.381421][ T9550] ? __pfx_netlink_unicast+0x10/0x10 [ 2194.381445][ T9550] ? netlink_sendmsg+0x650/0xb40 [ 2194.381467][ T9550] ? skb_put+0x11b/0x210 [ 2194.381492][ T9550] netlink_sendmsg+0x813/0xb40 [ 2194.381522][ T9550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2194.381547][ T9550] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2194.381572][ T9550] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2194.381596][ T9550] ____sys_sendmsg+0x972/0x9f0 [ 2194.381612][ T9550] ? __lock_acquire+0x6b5/0x2cf0 [ 2194.381641][ T9550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2194.381669][ T9550] ? import_iovec+0x73/0xa0 [ 2194.381699][ T9550] ___sys_sendmsg+0x2a5/0x360 [ 2194.381723][ T9550] ? __pfx____sys_sendmsg+0x10/0x10 [ 2194.381789][ T9550] __sys_sendmmsg+0x27c/0x4e0 [ 2194.381813][ T9550] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2194.381828][ T9550] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2194.381888][ T9550] ? ksys_write+0x242/0x270 [ 2194.381910][ T9550] ? __pfx_ksys_write+0x10/0x10 [ 2194.381936][ T9550] __x64_sys_sendmmsg+0xa0/0xc0 [ 2194.381956][ T9550] do_syscall_64+0x14d/0xf80 [ 2194.381979][ T9550] ? trace_irq_disable+0x3b/0x150 [ 2194.382003][ T9550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2194.382021][ T9550] ? clear_bhb_loop+0x40/0x90 [ 2194.382043][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2194.382061][ T9550] RIP: 0033:0x7f96f899c799 [ 2194.382078][ T9550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2194.382093][ T9550] RSP: 002b:00007f96f6bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2194.382112][ T9550] RAX: ffffffffffffffda RBX: 00007f96f8c15fa0 RCX: 00007f96f899c799 [ 2194.382125][ T9550] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 2194.382137][ T9550] RBP: 00007f96f6bee090 R08: 0000000000000000 R09: 0000000000000000 [ 2194.382148][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2194.382159][ T9550] R13: 00007f96f8c16038 R14: 00007f96f8c15fa0 R15: 00007ffd2affc7d8 [ 2194.382189][ T9550] [ 2194.965221][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23957'. [ 2194.990137][ T9561] netlink: 'syz.2.23957': attribute type 30 has an invalid length. [ 2195.070351][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23952'. [ 2195.099018][ T9558] lo speed is unknown, defaulting to 1000 [ 2195.113758][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23957'. [ 2195.115340][ T9576] bridge0: port 1(veth0_to_bridge) entered blocking state [ 2195.127999][ T9561] netlink: 'syz.2.23957': attribute type 30 has an invalid length. [ 2195.158758][ T9576] bridge0: port 1(veth0_to_bridge) entered disabled state [ 2195.189583][ T9576] veth0_to_bridge: entered allmulticast mode [ 2195.212753][ T9576] veth0_to_bridge: entered promiscuous mode [ 2195.243273][ T7828] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2195.288378][ T7828] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2195.355090][ T7828] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2195.363299][ T7828] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2195.405385][ T9558] lo speed is unknown, defaulting to 1000 [ 2195.425427][ T9558] gre0 speed is unknown, defaulting to 1000 [ 2195.458910][ T9584] netlink: 112 bytes leftover after parsing attributes in process `syz.2.23963'. [ 2195.513810][ T9584] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2195.662712][ T9584] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2195.799074][ T9584] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2196.002238][ T9600] netlink: 'syz.4.23969': attribute type 61 has an invalid length. [ 2196.012113][ T9584] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2196.062403][ T9600] netlink: 'syz.4.23969': attribute type 62 has an invalid length. [ 2196.103854][ T9591] netlink: 'syz.0.23967': attribute type 4 has an invalid length. [ 2196.169715][ T9595] netlink: 'syz.0.23967': attribute type 4 has an invalid length. [ 2196.227946][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23969'. [ 2196.232652][ T9604] netlink: 'syz.0.23967': attribute type 1 has an invalid length. [ 2196.346715][ T9615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.356216][ T9615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.374763][ T9615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.405091][ T35] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2196.501566][ T7828] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2196.520720][ T35] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2196.582562][ T35] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2196.980394][ T9630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23977'. [ 2197.012763][ T9616] netlink: 'syz.1.23973': attribute type 4 has an invalid length. [ 2197.090396][ T9623] netlink: 'syz.1.23973': attribute type 4 has an invalid length. [ 2197.105537][ T9631] lo speed is unknown, defaulting to 1000 [ 2197.130469][ T9616] netlink: 'syz.1.23973': attribute type 1 has an invalid length. [ 2197.300214][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23979'. [ 2197.320091][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23979'. [ 2197.452873][ T9631] lo speed is unknown, defaulting to 1000 [ 2197.460365][ T9631] gre0 speed is unknown, defaulting to 1000 [ 2197.643170][ T9650] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2197.709106][ T9655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.717538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.727739][ T9655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.737277][T29604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.751606][ T9653] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.23983'. [ 2197.755093][T29604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.772984][ T9649] bond0: (slave bridge_slave_1): Releasing backup interface [ 2197.780108][T29604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.789635][T30009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.855041][ T9652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.875074][T29604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.884182][ T9652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2198.231715][ T9681] __nla_validate_parse: 2 callbacks suppressed [ 2198.231734][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23992'. [ 2198.472646][ T9692] netlink: 80 bytes leftover after parsing attributes in process `syz.0.23994'. [ 2199.057558][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23999'. [ 2199.067716][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23999'. [ 2199.314178][ T6023] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.351448][ T6023] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.367808][ T6023] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.384605][ T6023] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.524072][ T9724] 8021q: adding VLAN 0 to HW filter on device bond103 [ 2199.550702][ T9730] netlink: 80 bytes leftover after parsing attributes in process `syz.4.24006'. [ 2199.580189][ T9724] macvlan12: entered promiscuous mode [ 2199.599513][ T9724] macvlan12: entered allmulticast mode [ 2199.606576][ T9732] FAULT_INJECTION: forcing a failure. [ 2199.606576][ T9732] name failslab, interval 1, probability 0, space 0, times 0 [ 2199.635050][ T9724] bond103: entered allmulticast mode [ 2199.643001][ T9724] bond103: entered promiscuous mode [ 2199.654716][ T9732] CPU: 0 UID: 0 PID: 9732 Comm: syz.3.24007 Not tainted syzkaller #0 PREEMPT(full) [ 2199.654739][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2199.654750][ T9732] Call Trace: [ 2199.654757][ T9732] [ 2199.654765][ T9732] dump_stack_lvl+0xe8/0x150 [ 2199.654795][ T9732] should_fail_ex+0x412/0x560 [ 2199.654822][ T9732] should_failslab+0xa8/0x100 [ 2199.654846][ T9732] __kmalloc_cache_noprof+0x88/0x660 [ 2199.654865][ T9732] ? lockdep_hardirqs_on+0x7a/0x110 [ 2199.654890][ T9732] ? __request_module+0x2d0/0x660 [ 2199.654917][ T9732] __request_module+0x2d0/0x660 [ 2199.654938][ T9732] ? __pfx_stack_trace_save+0x10/0x10 [ 2199.654960][ T9732] ? __pfx___request_module+0x10/0x10 [ 2199.654989][ T9732] ? bpf_lsm_capable+0x9/0x20 [ 2199.655015][ T9732] ? security_capable+0x7e/0x2c0 [ 2199.655040][ T9732] ? dev_load+0x21/0x1f0 [ 2199.655156][ T9732] dev_load+0x190/0x1f0 [ 2199.655179][ T9732] devinet_ioctl+0x138/0x1b30 [ 2199.655248][ T9732] ? __pfx_devinet_ioctl+0x10/0x10 [ 2199.655273][ T9732] ? get_user_ifreq+0x12b/0x180 [ 2199.655294][ T9732] inet_ioctl+0x42a/0x560 [ 2199.655346][ T9732] ? __pfx_inet_ioctl+0x10/0x10 [ 2199.655390][ T9732] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2199.655417][ T9732] sock_do_ioctl+0x101/0x320 [ 2199.655440][ T9732] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2199.655459][ T9732] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2199.655506][ T9732] sock_ioctl+0x5c6/0x7f0 [ 2199.655528][ T9732] ? __pfx_sock_ioctl+0x10/0x10 [ 2199.655549][ T9732] ? __fget_files+0x2a/0x420 [ 2199.655573][ T9732] ? __fget_files+0x3a0/0x420 [ 2199.655596][ T9732] ? __fget_files+0x2a/0x420 [ 2199.655623][ T9732] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2199.655644][ T9732] ? __pfx_sock_ioctl+0x10/0x10 [ 2199.655663][ T9732] __se_sys_ioctl+0xfc/0x170 [ 2199.655685][ T9732] do_syscall_64+0x14d/0xf80 [ 2199.655709][ T9732] ? trace_irq_disable+0x3b/0x150 [ 2199.655731][ T9732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.655749][ T9732] ? clear_bhb_loop+0x40/0x90 [ 2199.655771][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.655788][ T9732] RIP: 0033:0x7f3a2219c799 [ 2199.655804][ T9732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2199.655820][ T9732] RSP: 002b:00007f3a203ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2199.655839][ T9732] RAX: ffffffffffffffda RBX: 00007f3a22415fa0 RCX: 00007f3a2219c799 [ 2199.655852][ T9732] RDX: 0000200000000180 RSI: 000000000000891a RDI: 0000000000000003 [ 2199.655864][ T9732] RBP: 00007f3a203ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2199.655875][ T9732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2199.655885][ T9732] R13: 00007f3a22416038 R14: 00007f3a22415fa0 R15: 00007ffc784b0c78 [ 2199.655914][ T9732] [ 2199.656822][ T9724] 8021q: adding VLAN 0 to HW filter on device macvlan12 [ 2199.946647][ T9724] team0: Port device macvlan12 added [ 2200.014679][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24009'. [ 2200.049983][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24009'. [ 2200.069076][ T9740] validate_nla: 2 callbacks suppressed [ 2200.069092][ T9740] netlink: 'syz.0.24009': attribute type 4 has an invalid length. [ 2200.359828][ T9758] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3901492824/3901492825 [ 2200.379641][ T9758] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3901492824/3901492825 [ 2200.620007][ T9767] netlink: 'syz.3.24016': attribute type 13 has an invalid length. [ 2200.631052][ T9765] siw: device registration error -23 [ 2200.660634][ T9765] gretap0: entered promiscuous mode [ 2200.675315][ T9765] gretap0: left promiscuous mode [ 2200.705769][ T9767] erspan0: refused to change device tx_queue_len [ 2200.768612][ T9772] netlink: 80 bytes leftover after parsing attributes in process `syz.3.24018'. [ 2200.832226][ T9777] xt_hashlimit: size too large, truncated to 1048576 [ 2201.004721][ T9782] ¾x9ÿ: renamed from bridge_slave_0 [ 2201.134586][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24022'. [ 2201.215608][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24023'. [ 2203.332434][ T9861] __nla_validate_parse: 3 callbacks suppressed [ 2203.332453][ T9861] netlink: 14 bytes leftover after parsing attributes in process `syz.0.24041'. [ 2203.412069][ T9864] netlink: 72 bytes leftover after parsing attributes in process `syz.2.24042'. [ 2203.551317][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24042'. [ 2203.587182][ T9870] netlink: 76 bytes leftover after parsing attributes in process `syz.3.24043'. [ 2203.720056][ T9876] netlink: 80 bytes leftover after parsing attributes in process `syz.0.24045'. [ 2203.771815][ T9878] FAULT_INJECTION: forcing a failure. [ 2203.771815][ T9878] name failslab, interval 1, probability 0, space 0, times 0 [ 2203.863467][ T9878] CPU: 0 UID: 0 PID: 9878 Comm: syz.3.24047 Not tainted syzkaller #0 PREEMPT(full) [ 2203.863491][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2203.863502][ T9878] Call Trace: [ 2203.863510][ T9878] [ 2203.863518][ T9878] dump_stack_lvl+0xe8/0x150 [ 2203.863545][ T9878] should_fail_ex+0x412/0x560 [ 2203.863572][ T9878] should_failslab+0xa8/0x100 [ 2203.863596][ T9878] __kvmalloc_node_noprof+0x178/0x8a0 [ 2203.863616][ T9878] ? is_bpf_text_address+0x26/0x2b0 [ 2203.863633][ T9878] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 2203.863664][ T9878] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 2203.863696][ T9878] ? arch_stack_walk+0xfb/0x150 [ 2203.863735][ T9878] ? __pfx_stack_trace_save+0x10/0x10 [ 2203.863755][ T9878] ? stack_depot_save_flags+0x33/0x810 [ 2203.863785][ T9878] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2203.863807][ T9878] ? bpf_test_init+0x9f/0x150 [ 2203.863826][ T9878] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 2203.863846][ T9878] ? bpf_prog_test_run+0x2c7/0x340 [ 2203.863862][ T9878] ? __sys_bpf+0x643/0x950 [ 2203.863883][ T9878] ? __x64_sys_bpf+0x7c/0x90 [ 2203.863943][ T9878] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2203.863976][ T9878] ? _copy_from_user+0x94/0xb0 [ 2203.864001][ T9878] ? bpf_test_init+0x113/0x150 [ 2203.864021][ T9878] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2203.864045][ T9878] bpf_prog_test_run_xdp+0x81c/0x1160 [ 2203.864081][ T9878] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2203.864109][ T9878] ? __fget_files+0x2a/0x420 [ 2203.864137][ T9878] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2203.864161][ T9878] bpf_prog_test_run+0x2c7/0x340 [ 2203.864181][ T9878] __sys_bpf+0x643/0x950 [ 2203.864207][ T9878] ? __pfx___sys_bpf+0x10/0x10 [ 2203.864245][ T9878] ? ksys_write+0x242/0x270 [ 2203.864266][ T9878] ? __pfx_ksys_write+0x10/0x10 [ 2203.864294][ T9878] __x64_sys_bpf+0x7c/0x90 [ 2203.864317][ T9878] do_syscall_64+0x14d/0xf80 [ 2203.864342][ T9878] ? trace_irq_disable+0x3b/0x150 [ 2203.864366][ T9878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2203.864384][ T9878] ? clear_bhb_loop+0x40/0x90 [ 2203.864407][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2203.864425][ T9878] RIP: 0033:0x7f3a2219c799 [ 2203.864441][ T9878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2203.864457][ T9878] RSP: 002b:00007f3a203ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2203.864477][ T9878] RAX: ffffffffffffffda RBX: 00007f3a22415fa0 RCX: 00007f3a2219c799 [ 2203.864490][ T9878] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 2203.864503][ T9878] RBP: 00007f3a203ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2203.864514][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.864525][ T9878] R13: 00007f3a22416038 R14: 00007f3a22415fa0 R15: 00007ffc784b0c78 [ 2203.864554][ T9878] [ 2204.168270][ T9886] netlink: 44 bytes leftover after parsing attributes in process `syz.0.24048'. [ 2217.194705][ C0] net_ratelimit: 12 callbacks suppressed [ 2217.194725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.249980][ T9914] netlink: 'syz.2.24051': attribute type 2 has an invalid length. [ 2217.330116][ T9917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.338616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.398530][ T9923] Cannot find set identified by id 65534 to match [ 2217.437537][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24055'. [ 2217.472579][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24055'. [ 2217.482248][ T9927] netlink: 48 bytes leftover after parsing attributes in process `syz.2.24055'. [ 2217.496264][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24055'. [ 2217.505791][ T9928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.24055'. [ 2217.521297][ T9934] netlink: 'syz.4.24058': attribute type 27 has an invalid length. [ 2217.590076][ T9938] netlink: 80 bytes leftover after parsing attributes in process `syz.3.24060'. [ 2217.701726][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24061'. [ 2218.142348][ T9934] ip6gre7: left promiscuous mode [ 2218.159614][ T9934] ip6gre7: left allmulticast mode [ 2218.166832][ T9934] bond37: left promiscuous mode [ 2218.171699][ T9934] erspan2: left promiscuous mode [ 2218.177749][ T9934] bond37: left allmulticast mode [ 2218.184069][ T9934] erspan2: left allmulticast mode [ 2218.189344][ T9934] bond38: left promiscuous mode [ 2218.194826][ T9934] macvlan7: left promiscuous mode [ 2218.200620][ T9934] macvlan7: left allmulticast mode [ 2218.217963][ T9934] macvlan8: left promiscuous mode [ 2218.230856][ T9934] macvlan8: left allmulticast mode [ 2218.239238][ T9934] macvlan9: left promiscuous mode [ 2218.244419][ T9934] macvlan9: left allmulticast mode [ 2218.250623][ T9934] macvlan10: left promiscuous mode [ 2218.256177][ T9934] macvlan10: left allmulticast mode [ 2218.264237][ T9934] macvlan11: left promiscuous mode [ 2218.272137][ T9934] macvlan11: left allmulticast mode [ 2218.278789][ T9961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24068'. [ 2218.293101][ T9934] macvlan12: left promiscuous mode [ 2218.300438][ T9934] macvlan12: left allmulticast mode [ 2218.306710][ T9934] macvlan13: left promiscuous mode [ 2218.311884][ T9934] macvlan13: left allmulticast mode [ 2218.318357][ T9934] macvlan14: left promiscuous mode [ 2218.323557][ T9934] macvlan14: left allmulticast mode [ 2218.329937][ T9934] macvlan15: left promiscuous mode [ 2218.336051][ T9934] macvlan15: left allmulticast mode [ 2218.342762][ T9934] macvlan17: left promiscuous mode [ 2218.348094][ T9934] macvlan17: left allmulticast mode [ 2218.354541][ T9934] ip6gre8: left promiscuous mode [ 2218.359691][ T9934] ip6gre8: left allmulticast mode [ 2218.366483][ T9934] bond111: left promiscuous mode [ 2218.371500][ T9934] bond111: left allmulticast mode [ 2218.395391][ T9934] macvlan18: left promiscuous mode [ 2218.400526][ T9934] macvlan18: left allmulticast mode [ 2218.419438][T30009] gre0 speed is unknown, defaulting to 1000 [ 2218.425678][T30009] syz1: Port: 1 Link DOWN [ 2218.467370][ T9940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2218.539033][T30009] gre0 speed is unknown, defaulting to 1000 [ 2218.554943][ T4373] gre0 speed is unknown, defaulting to 1000 [ 2218.560955][ T4373] syz1: Port: 1 Link ACTIVE [ 2218.582246][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24073'. [ 2218.586990][ T9975] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24072'. [ 2218.781937][ T9987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2220.196829][T10020] syzkaller0: entered promiscuous mode [ 2220.202327][T10020] syzkaller0: entered allmulticast mode [ 2220.874318][T10053] netlink: 'syz.1.24095': attribute type 13 has an invalid length. [ 2221.560911][T10056] siw: device registration error -23 [ 2221.679402][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.690435][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 2221.697231][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.698627][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2222.206066][T10053] gretap0: refused to change device tx_queue_len [ 2222.212407][T10053] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2222.543439][T10064] syzkaller1: entered promiscuous mode [ 2222.569359][T10064] syzkaller1: entered allmulticast mode [ 2222.593036][T10080] FAULT_INJECTION: forcing a failure. [ 2222.593036][T10080] name failslab, interval 1, probability 0, space 0, times 0 [ 2222.653069][T10076] lo speed is unknown, defaulting to 1000 [ 2222.714831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2222.808841][T10080] CPU: 0 UID: 0 PID: 10080 Comm: syz.4.24102 Not tainted syzkaller #0 PREEMPT(full) [ 2222.808867][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2222.808878][T10080] Call Trace: [ 2222.808887][T10080] [ 2222.808905][T10080] dump_stack_lvl+0xe8/0x150 [ 2222.808934][T10080] should_fail_ex+0x412/0x560 [ 2222.808962][T10080] should_failslab+0xa8/0x100 [ 2222.808987][T10080] __kmalloc_cache_noprof+0x88/0x660 [ 2222.809007][T10080] ? __pfx_stack_trace_save+0x10/0x10 [ 2222.809029][T10080] ? rtnl_newlink+0x136/0x1be0 [ 2222.809059][T10080] rtnl_newlink+0x136/0x1be0 [ 2222.809083][T10080] ? kasan_save_track+0x4f/0x80 [ 2222.809101][T10080] ? kasan_save_track+0x3e/0x80 [ 2222.809118][T10080] ? kasan_save_free_info+0x46/0x50 [ 2222.809141][T10080] ? __kasan_slab_free+0x5c/0x80 [ 2222.809158][T10080] ? kmem_cache_free+0x187/0x630 [ 2222.809178][T10080] ? __dev_queue_xmit+0x1557/0x3870 [ 2222.809267][T10080] ? __netlink_deliver_tap+0x5ad/0x850 [ 2222.809290][T10080] ? netlink_deliver_tap+0x19c/0x1b0 [ 2222.809311][T10080] ? netlink_unicast+0x7e3/0x9b0 [ 2222.809330][T10080] ? netlink_sendmsg+0x813/0xb40 [ 2222.809354][T10080] ? __pfx_rtnl_newlink+0x10/0x10 [ 2222.809376][T10080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.809425][T10080] ? kasan_quarantine_put+0xbb/0x1f0 [ 2222.809445][T10080] ? lockdep_hardirqs_on+0x7a/0x110 [ 2222.809475][T10080] ? kmem_cache_free+0x187/0x630 [ 2222.809494][T10080] ? nlmon_xmit+0xb0/0x100 [ 2222.809603][T10080] ? __lock_acquire+0x6b5/0x2cf0 [ 2222.809631][T10080] ? __local_bh_enable_ip+0xd0/0x130 [ 2222.809654][T10080] ? lockdep_hardirqs_on+0x7a/0x110 [ 2222.809677][T10080] ? __dev_queue_xmit+0x28b/0x3870 [ 2222.809695][T10080] ? __local_bh_enable_ip+0xd0/0x130 [ 2222.809715][T10080] ? __dev_queue_xmit+0x28b/0x3870 [ 2222.809756][T10080] ? __pfx_rtnl_newlink+0x10/0x10 [ 2222.809779][T10080] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 2222.809807][T10080] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2222.809830][T10080] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2222.809852][T10080] ? ref_tracker_free+0x693/0x840 [ 2222.809886][T10080] ? __copy_skb_header+0xa3/0x4a0 [ 2222.809917][T10080] ? __pfx_ref_tracker_free+0x10/0x10 [ 2222.809950][T10080] netlink_rcv_skb+0x232/0x4b0 [ 2222.809975][T10080] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2222.810000][T10080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2222.810034][T10080] ? netlink_deliver_tap+0x2e/0x1b0 [ 2222.810065][T10080] netlink_unicast+0x80f/0x9b0 [ 2222.810094][T10080] ? __pfx_netlink_unicast+0x10/0x10 [ 2222.810118][T10080] ? netlink_sendmsg+0x650/0xb40 [ 2222.810140][T10080] ? skb_put+0x11b/0x210 [ 2222.810168][T10080] netlink_sendmsg+0x813/0xb40 [ 2222.810200][T10080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2222.810227][T10080] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2222.810251][T10080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2222.810274][T10080] ____sys_sendmsg+0x972/0x9f0 [ 2222.810298][T10080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2222.810323][T10080] ? import_iovec+0x73/0xa0 [ 2222.810351][T10080] ___sys_sendmsg+0x2a5/0x360 [ 2222.810375][T10080] ? __pfx____sys_sendmsg+0x10/0x10 [ 2222.810457][T10080] ? __fget_files+0x2a/0x420 [ 2222.810491][T10080] ? __fget_files+0x3a0/0x420 [ 2222.810521][T10080] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2222.810541][T10080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2222.810566][T10080] ? __pfx_ksys_write+0x10/0x10 [ 2222.810595][T10080] do_syscall_64+0x14d/0xf80 [ 2222.810621][T10080] ? trace_irq_disable+0x3b/0x150 [ 2222.810644][T10080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.810663][T10080] ? clear_bhb_loop+0x40/0x90 [ 2222.810685][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.810702][T10080] RIP: 0033:0x7f568e59c799 [ 2222.810721][T10080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2222.810736][T10080] RSP: 002b:00007f568f450028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2222.810755][T10080] RAX: ffffffffffffffda RBX: 00007f568e816090 RCX: 00007f568e59c799 [ 2222.810768][T10080] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2222.810780][T10080] RBP: 00007f568f450090 R08: 0000000000000000 R09: 0000000000000000 [ 2222.810791][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2222.810802][T10080] R13: 00007f568e816128 R14: 00007f568e816090 R15: 00007ffe1f87c528 [ 2222.810831][T10080] [ 2223.411000][T10076] lo speed is unknown, defaulting to 1000 [ 2223.418395][T10076] gre0 speed is unknown, defaulting to 1000 [ 2223.427652][T10087] __nla_validate_parse: 16 callbacks suppressed [ 2223.427668][T10087] netlink: 48 bytes leftover after parsing attributes in process `syz.0.24103'. [ 2223.450867][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24106'. [ 2223.460952][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24106'. [ 2223.478728][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24106'. [ 2223.556046][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24106'. [ 2223.574064][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24106'. [ 2223.767899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.794539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2225.834539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2226.794373][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 2226.802395][ C0] lec:lec_tx_timeout: lec0 [ 2226.874607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2228.954559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2233.034619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2235.843823][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24107'. [ 2235.942736][T10135] netlink: 80 bytes leftover after parsing attributes in process `syz.1.24112'. [ 2236.084811][T10142] netlink: 36 bytes leftover after parsing attributes in process `syz.1.24114'. [ 2236.096612][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24114'. [ 2236.108770][T10123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24109'. [ 2236.125283][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24114'. [ 2236.201996][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24115'. [ 2236.211184][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24115'. [ 2236.289363][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24118'. [ 2236.298588][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24118'. [ 2237.104773][T10180] tipc: Trying to set illegal importance in message [ 2237.111659][T10183] tipc: Trying to set illegal importance in message [ 2237.473566][T10203] 8021q: adding VLAN 0 to HW filter on device bond99 [ 2237.541413][T10203] macvlan13: entered promiscuous mode [ 2237.546970][T10203] macvlan13: entered allmulticast mode [ 2238.167804][T10234] xt_CONNSECMARK: invalid mode: 254 [ 2238.299820][T10238] siw: device registration error -23 [ 2238.325143][T10238] gretap0: entered promiscuous mode [ 2238.349714][T10238] gretap0: left promiscuous mode [ 2238.646322][T10247] netlink: 'syz.0.24145': attribute type 1 has an invalid length. [ 2238.846212][T10261] Cannot find del_set index 4 as target [ 2238.853851][T10261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2239.520939][T10304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2239.532658][T10304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2239.541831][T10304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2241.514638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2242.154335][ C0] ------------[ cut here ]------------ [ 2242.160180][ C0] ODEBUG: free active (active state 0) object: ffff888054004c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 2242.173055][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0 [ 2242.183415][ C0] Modules linked in: [ 2242.187685][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2242.196643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2242.206716][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 2242.213049][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 2242.232671][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 2242.238762][ C0] RAX: ffffffff8a965980 RBX: ffffffff9a56d4f0 RCX: 0000000000000000 [ 2242.246745][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 2242.254736][ C0] RBP: ffffffff8bcf3ce0 R08: ffff888054004c90 R09: ffffffff8bcf5000 [ 2242.262689][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888054004e00 [ 2242.270665][ C0] R13: ffffffff901bee60 R14: ffff888054004000 R15: ffff888054004c90 [ 2242.278656][ C0] FS: 0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 2242.287581][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2242.294138][ C0] CR2: 00007f9425fe92f8 CR3: 0000000078bf8000 CR4: 00000000003526f0 [ 2242.302116][ C0] Call Trace: [ 2242.305405][ C0] [ 2242.308234][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2242.313854][ C0] kfree+0x13a/0x630 [ 2242.317746][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 2242.322899][ C0] rose_timer_expiry+0x4cb/0x600 [ 2242.327845][ C0] ? call_timer_fn+0x178/0x640 [ 2242.332620][ C0] call_timer_fn+0x192/0x640 [ 2242.337232][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2242.342698][ C0] ? call_timer_fn+0xd4/0x640 [ 2242.347385][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2242.352505][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2242.357720][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2242.363189][ C0] __run_timer_base+0x652/0x8b0 [ 2242.368057][ C0] ? ktime_get+0x45/0x200 [ 2242.372390][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2242.377783][ C0] ? sched_clock_cpu+0x74/0x440 [ 2242.382646][ C0] run_timer_softirq+0xb7/0x170 [ 2242.387508][ C0] handle_softirqs+0x22a/0x870 [ 2242.392279][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 2242.397068][ C0] __irq_exit_rcu+0x5f/0x150 [ 2242.401664][ C0] irq_exit_rcu+0x9/0x30 [ 2242.405916][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2242.411557][ C0] [ 2242.414512][ C0] [ 2242.417439][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2242.423413][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2242.429051][ C0] Code: fe 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2242.448670][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 2242.454731][ C0] RAX: 00000000007ca407 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 2242.462681][ C0] RDX: 0000000000000001 RSI: ffffffff8df209e8 RDI: ffffffff8c27b500 [ 2242.470644][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 2242.478687][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90112cb0 [ 2242.486656][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 2242.494645][ C0] ? do_idle+0x1bd/0x500 [ 2242.498901][ C0] default_idle+0x9/0x20 [ 2242.503122][ C0] default_idle_call+0x72/0xb0 [ 2242.507893][ C0] do_idle+0x1bd/0x500 [ 2242.511967][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 2242.517186][ C0] ? __pfx_do_idle+0x10/0x10 [ 2242.521793][ C0] cpu_startup_entry+0x43/0x60 [ 2242.526573][ C0] rest_init+0x2de/0x300 [ 2242.530820][ C0] start_kernel+0x385/0x3d0 [ 2242.535453][ C0] x86_64_start_reservations+0x24/0x30 [ 2242.540970][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2242.546096][ C0] common_startup_64+0x13e/0x147 [ 2242.551065][ C0] [ 2242.554070][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2242.561326][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2242.570232][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2242.580260][ C0] Call Trace: [ 2242.583517][ C0] [ 2242.586340][ C0] vpanic+0x56c/0xa60 [ 2242.590301][ C0] ? __pfx__printk+0x10/0x10 [ 2242.594869][ C0] ? __pfx_vpanic+0x10/0x10 [ 2242.599348][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 2242.604612][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2242.609813][ C0] panic+0xc5/0xd0 [ 2242.613517][ C0] ? __pfx_panic+0x10/0x10 [ 2242.617916][ C0] ? common_startup_64+0x13e/0x147 [ 2242.623004][ C0] __warn+0x315/0x4f0 [ 2242.626964][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 2242.632662][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 2242.638357][ C0] __report_bug+0x29a/0x540 [ 2242.642918][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 2242.648616][ C0] ? __pfx___report_bug+0x10/0x10 [ 2242.653634][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 2242.658570][ C0] report_bug_entry+0x19a/0x290 [ 2242.663408][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 2242.669106][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 2242.674802][ C0] handle_bug+0xce/0x200 [ 2242.679018][ C0] exc_invalid_op+0x1a/0x50 [ 2242.683493][ C0] asm_exc_invalid_op+0x1a/0x20 [ 2242.688316][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 2242.694620][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 2242.714206][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 2242.720254][ C0] RAX: ffffffff8a965980 RBX: ffffffff9a56d4f0 RCX: 0000000000000000 [ 2242.728202][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 2242.736148][ C0] RBP: ffffffff8bcf3ce0 R08: ffff888054004c90 R09: ffffffff8bcf5000 [ 2242.744094][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888054004e00 [ 2242.752042][ C0] R13: ffffffff901bee60 R14: ffff888054004000 R15: ffff888054004c90 [ 2242.759996][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 2242.765355][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2242.770970][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2242.776595][ C0] kfree+0x13a/0x630 [ 2242.780465][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 2242.785554][ C0] rose_timer_expiry+0x4cb/0x600 [ 2242.790469][ C0] ? call_timer_fn+0x178/0x640 [ 2242.795209][ C0] call_timer_fn+0x192/0x640 [ 2242.799774][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2242.805221][ C0] ? call_timer_fn+0xd4/0x640 [ 2242.809912][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2242.815033][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2242.820209][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2242.825651][ C0] __run_timer_base+0x652/0x8b0 [ 2242.830477][ C0] ? ktime_get+0x45/0x200 [ 2242.834786][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2242.840136][ C0] ? sched_clock_cpu+0x74/0x440 [ 2242.844969][ C0] run_timer_softirq+0xb7/0x170 [ 2242.849798][ C0] handle_softirqs+0x22a/0x870 [ 2242.854549][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 2242.859316][ C0] __irq_exit_rcu+0x5f/0x150 [ 2242.863885][ C0] irq_exit_rcu+0x9/0x30 [ 2242.868101][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2242.873712][ C0] [ 2242.876619][ C0] [ 2242.879529][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2242.885481][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2242.891092][ C0] Code: fe 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2242.910671][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 2242.916718][ C0] RAX: 00000000007ca407 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 2242.924664][ C0] RDX: 0000000000000001 RSI: ffffffff8df209e8 RDI: ffffffff8c27b500 [ 2242.932608][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 2242.940556][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90112cb0 [ 2242.948502][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 2242.956475][ C0] ? do_idle+0x1bd/0x500 [ 2242.960735][ C0] default_idle+0x9/0x20 [ 2242.964954][ C0] default_idle_call+0x72/0xb0 [ 2242.969692][ C0] do_idle+0x1bd/0x500 [ 2242.973736][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 2242.978913][ C0] ? __pfx_do_idle+0x10/0x10 [ 2242.983488][ C0] cpu_startup_entry+0x43/0x60 [ 2242.988232][ C0] rest_init+0x2de/0x300 [ 2242.992450][ C0] start_kernel+0x385/0x3d0 [ 2242.996934][ C0] x86_64_start_reservations+0x24/0x30 [ 2243.002370][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2243.007457][ C0] common_startup_64+0x13e/0x147 [ 2243.012380][ C0] [ 2243.015526][ C0] Kernel Offset: disabled [ 2243.019830][ C0] Rebooting in 86400 seconds..