last executing test programs: 3.012139378s ago: executing program 0 (id=2281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e084ff020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e00000020800074000000000100005800a"], 0x74}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000280)={0x1, 0xdf, 0x1fc0000000000}) sendmmsg(r3, &(0x7f0000000240), 0x0, 0x45) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.82157537s ago: executing program 3 (id=2285): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x90}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x1, 0x0, 0xdad1124f55525050}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x47}, 0x94) 2.703582062s ago: executing program 3 (id=2286): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x13) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8090) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) syz_emit_ethernet(0x86, &(0x7f0000000540)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000780080000000019078ac1e0001ac1414aa04009078350000005708000600670004d711fffc7f000001ac1e010144447403ac1e010100000000ac1414bb00000001e000000200006d6c0a010101000000040a010100ffffff017f000001"], 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc020000000000000000000000000001000107144e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x18000000000002a0, 0x7e, 0x0, &(0x7f0000000300)="b9ff0200000028eeb5840000b3185d98651dc8217a20ac82324709c4e312af1a1f6790f3d7ea1a1a147e376d142159d2bf400065a2ed6a94473d200c07a92cf8c1c98a77c7980b97aafc994df6f33628c2bb7525649f137304733fed6406018e2200d5ad9f8fd5d32d18616a143aa6a42e38b8c448c92edde4b3d6619313", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 2.547692644s ago: executing program 0 (id=2287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="3633e04e813cbf", 0x7, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) shutdown(r1, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c000100060006000800000010000700"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.373752064s ago: executing program 0 (id=2289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}]}, 0x70}}, 0x0) 2.278954653s ago: executing program 0 (id=2290): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000f9dbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c656400000000000000000000000000000000000000000000000000050003"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x90}, 0x4040094) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x63) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x584d3, 0x200a0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2.087719223s ago: executing program 0 (id=2292): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap(&(0x7f0000409000/0x4000)=nil, 0x4000, 0x6, 0x40010, 0xffffffffffffffff, 0x9ae85000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) (async) getsockopt$sock_buf(r3, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x1, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req3={0x94f, 0x9, 0x80000000, 0x1, 0xfff, 0x3b, 0x8}, 0x1c) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) close(r2) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) (async) socket(0x400000000010, 0x3, 0x0) 1.91271037s ago: executing program 1 (id=2296): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0xf5ffffff}], 0x1, 0x20004084) 1.912452171s ago: executing program 2 (id=2297): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.867641844s ago: executing program 0 (id=2299): socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x14, 0x841, 0x1, 0x7ffff, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r5, &(0x7f00000006c0)={0x1d, r6}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000fedbdb25050000000000090000000000aa0000000000000000000000f921c3ba7fbb003fd59daa4730f960e46ebe405863ff707de7bd723d2f9496ae9c48e78de2cd05ac28906c6c98e61f25be0d8f7b08000000000000004cbaee52919f94eeec0630a06e19a0d662920ef694644a9645562f1b94988d850fb003976dc9e958fb2f7e4a98ef3a7bc5d6af317e0bec366d16464010bfc06607000400000000004fe9bdf879d0c31a24559c4c91a036422d7cb61469ab85ddd3cdcd51ec7c9b4fb72d9c58c4bdaf167d2502212253ee151222286fe48d65a4be"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r7, 0xffffffffffffffff, 0x44) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r10, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0xd, 0xdc, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, 0x1, 0x7800, 0x7, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x9, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000e40000000000000000f55fd84a5c7ad3c0ffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x5, 0xd6, &(0x7f0000000800)=""/207, 0x41000, 0x2, '\x00', r6, @fallback=0x2e, r9, 0x8, &(0x7f0000000900)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x4, &(0x7f0000000980)=[r9, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x0, 0x1, 0x10, 0x8}, {0x1, 0x3, 0x4, 0x3}, {0x2, 0x5, 0x2, 0xf}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x67fe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8, 0x30, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r10, @ANYRESOCT=r6], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.767599818s ago: executing program 2 (id=2300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}]}, 0x70}}, 0x0) 1.700538137s ago: executing program 3 (id=2301): pipe(&(0x7f0000000440)={0xffffffffffffffff}) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f00000006c0)="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", 0x1000) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x40080c1) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x40080) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001000010001000000fddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000df2f6abaff0001000080001c250800000000000200000000000000f8ffffffffffffff020000000000e0fffeffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002900000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r8, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {0x6, 0x8}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) (async) recvmmsg(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/204, 0xcc}], 0x1, &(0x7f0000000940)=""/145, 0x91}, 0x7ff}, {{&(0x7f0000000a00)=@ll, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/175, 0xaf}, {&(0x7f0000000c40)=""/93, 0x5d}], 0x3}, 0x8}, {{&(0x7f0000000d00)=@tipc=@name, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/207, 0xcf}], 0x1}, 0x83}], 0x3, 0x2022, &(0x7f0000000fc0)) (async) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) 1.471455593s ago: executing program 4 (id=2302): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000fffff90000000000000000000000000000000015000000feffffff000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 1.357293952s ago: executing program 4 (id=2303): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000001207000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) 1.356955069s ago: executing program 3 (id=2304): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000007100010000000000000000000700000f", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.257248355s ago: executing program 3 (id=2305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, 0x1003) 1.209059079s ago: executing program 2 (id=2306): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000007fff000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 1.078634865s ago: executing program 3 (id=2307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000006c0)={{0x0, 0xf0, 0x8b, 0x8e7, 0x8, 0xfffffffffffffffd, 0xb4d, 0x30000000, 0x2, 0xb, 0x0, 0x1, 0x1, 0x100000000, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000016c0)={{r1, 0x3, 0x7, 0xe, 0x8, 0x80000001, 0x6, 0x2de5, 0x6, 0x800, 0x2, 0x1000, 0xde7, 0xa, 0x6}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd606410a600080001fc000000000000000000000000000001000000000002d17c47000000000000013200010400000000"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x9}, &(0x7f00000000c0)=0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6}, 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002780)={&(0x7f0000002800)=ANY=[@ANYBLOB="88000000f92b2cea05048045c4bc698d8faf3452e7c211736d985d22595b242272290d9d7f8cda9b7f9ed6f26135e007d275d176a256a129267d053e6c11c9f661ef8de88ea898a7917a73836da4fb3af284bd142d8fd4c6acf457379d9d5e21e7fef0266cca09c14e88d369c273c547d9a915e41083954c60a32adc42c511754c2f70d980ed", @ANYRES16=r8, @ANYBLOB="00022dbd7000fbdbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4000084) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1a, &(0x7f0000000340)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ldst={0x1, 0x3, 0x4, 0x1, 0x7, 0x20, 0xfffffffffffffff0}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) 934.608676ms ago: executing program 1 (id=2308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}]}, 0x70}}, 0x0) 814.187755ms ago: executing program 4 (id=2309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 789.71591ms ago: executing program 1 (id=2310): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 703.652488ms ago: executing program 4 (id=2311): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1f, 0x0, [{0x7, 0x6, "954d2dd4"}, {0x2, 0xf, "ad4cfc6d0c114a69c613f8d51e"}, {0x2, 0x4, "ba2a"}]}]}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}, {}, {0x0, 0xffffff7f00000000}]}, 0xa50) 657.496888ms ago: executing program 2 (id=2312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0xc0, 0x0, 0x2b0, 0x0, 0xc0, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x4}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x10, 0x7, 0x1100]}, {0x0, [0x2, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x6, 0x0, 0x6, 0x2, 0x1], 0x6, 0x5}, {0x3, [0x3, 0x4, 0x3, 0x0, 0x7], 0x4, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x4004) 654.444002ms ago: executing program 1 (id=2313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) unshare(0x22020400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000800c9000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000230000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a4aaa0362c1010800000000000000000100fffe0900010073797a300000000009000300737900000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffd08000340000000000900010073797a3000000000140000001100010000000000000000"], 0xd8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804c080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x8, @mcast1, 0x6}], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000240)={@private0, 0x1, 0x2, 0x3, 0x3, 0xf643, 0x2}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="ac0800007f6a8d342bd31dea799e487255f7924d40a8edbec57116004e2bfec50811063915dfc64e4a7f2c999051ec671ef8a8c8b161a57017d5f869c9eebded2c203133fad25d05906e2b75cbea4434a2012b3ad7af5d65f670f6319ff3f137ba90e99355a06f0385ee764617db821f06641928bf19a8664c5f1965ed7ff09bc9dc518e22f4f149b2fadd946db6c1f77f408e994d81f2f15fce5acd7cd1c75b3190586af7af181898eb2e3727de69a65307366e1b3a49235d6fb51bea1c4a31bcc411819bdb27be72a2b72aeb3e21da20a1dd2fd7fcd5d101af384e8d3b1d0fc8e7d3780554d3", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000000000000000000000008400088080000080580009801c000080060001000200000008000200ac14141f05000300000000001c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac1414aa050003000300000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"], 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 486.055898ms ago: executing program 4 (id=2314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x80000a, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x0) close(0x3) 233.106697ms ago: executing program 4 (id=2315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r2, 0x2f, 0x7, 0x4, 0x4, 0x20, @loopback, @private1, 0x80, 0x700, 0xa671, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r3, 0x4, 0x0, 0x3, 0x1e, 0x8, @private0, @local, 0x7800, 0x7808, 0x9, 0x2}}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@RTM_DELMDB={0x78, 0x55, 0x800, 0x70bd29, 0x25dfdbfd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x2, 0x4, {@ip4=@broadcast, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x0, {@ip4=@multicast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x2, 0x3, {@in6_addr=@loopback, 0x800}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c810}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 230.566807ms ago: executing program 2 (id=2316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x70, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}]}, 0x70}}, 0x0) 155.119566ms ago: executing program 1 (id=2317): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000010300000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000005600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 100.585312ms ago: executing program 2 (id=2318): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x8, 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 0s ago: executing program 1 (id=2319): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x8999, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000005000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000100a0002007a112251445500000800030000000000080004"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): 5.105049][ T9003] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.105091][ T9003] nfnetlink_rcv+0x260c/0x28c0 [ 185.105147][ T9003] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 185.105184][ T9003] ? ref_tracker_free+0x689/0x830 [ 185.105233][ T9003] ? skb_clone+0x246/0x3a0 [ 185.105259][ T9003] ? __netlink_deliver_tap+0x811/0x860 [ 185.105291][ T9003] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.105315][ T9003] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.105344][ T9003] netlink_unicast+0x7bb/0x940 [ 185.105377][ T9003] netlink_sendmsg+0x813/0xb40 [ 185.105410][ T9003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.105439][ T9003] ? aa_sock_msg_perm+0xf1/0x1b0 [ 185.105475][ T9003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.105498][ T9003] sock_sendmsg_nosec+0x13a/0x180 [ 185.105529][ T9003] ____sys_sendmsg+0x54e/0x850 [ 185.105557][ T9003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.105588][ T9003] ? import_iovec+0x73/0xa0 [ 185.105619][ T9003] ___sys_sendmsg+0x2a5/0x360 [ 185.105640][ T9003] ? __lock_acquire+0x683/0x2cf0 [ 185.105672][ T9003] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.105728][ T9003] ? __fget_files+0x2a/0x420 [ 185.105754][ T9003] ? __fget_files+0x3a2/0x420 [ 185.105796][ T9003] __x64_sys_sendmsg+0x1b1/0x290 [ 185.105823][ T9003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.105868][ T9003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.105891][ T9003] do_syscall_64+0x174/0x580 [ 185.105918][ T9003] ? trace_irq_disable+0x3b/0x140 [ 185.105943][ T9003] ? clear_bhb_loop+0x70/0xc0 [ 185.105968][ T9003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.105988][ T9003] RIP: 0033:0x7f185779e0d9 [ 185.106008][ T9003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.106025][ T9003] RSP: 002b:00007f18586c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.106048][ T9003] RAX: ffffffffffffffda RBX: 00007f1857a25fa0 RCX: 00007f185779e0d9 [ 185.106063][ T9003] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 185.106076][ T9003] RBP: 00007f18586c1090 R08: 0000000000000000 R09: 0000000000000000 [ 185.106088][ T9003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.106100][ T9003] R13: 00007f1857a26038 R14: 00007f1857a25fa0 R15: 00007ffdf230e7d8 [ 185.106132][ T9003] [ 185.592389][ T9013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.727126][ T9013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.759456][ T9024] FAULT_INJECTION: forcing a failure. [ 185.759456][ T9024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.773275][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.2.989 Not tainted syzkaller #0 PREEMPT(full) [ 185.773303][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.773315][ T9024] Call Trace: [ 185.773324][ T9024] [ 185.773332][ T9024] dump_stack_lvl+0xe8/0x150 [ 185.773367][ T9024] should_fail_ex+0x40c/0x560 [ 185.773395][ T9024] _copy_to_user+0x31/0xb0 [ 185.773426][ T9024] wext_handle_ioctl+0x153/0x1d0 [ 185.773456][ T9024] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 185.773479][ T9024] ? hook_file_ioctl+0x1f0/0x5f0 [ 185.773525][ T9024] sock_ioctl+0x159/0x7e0 [ 185.773555][ T9024] ? __pfx_sock_ioctl+0x10/0x10 [ 185.773582][ T9024] ? __fget_files+0x2a/0x420 [ 185.773608][ T9024] ? __fget_files+0x3a2/0x420 [ 185.773633][ T9024] ? __fget_files+0x2a/0x420 [ 185.773662][ T9024] ? bpf_lsm_file_ioctl+0x9/0x20 [ 185.773687][ T9024] ? __pfx_sock_ioctl+0x10/0x10 [ 185.773712][ T9024] __se_sys_ioctl+0xfc/0x170 [ 185.773745][ T9024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.773769][ T9024] do_syscall_64+0x174/0x580 [ 185.773796][ T9024] ? trace_irq_disable+0x3b/0x140 [ 185.773821][ T9024] ? clear_bhb_loop+0x70/0xc0 [ 185.773847][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.773869][ T9024] RIP: 0033:0x7f761e59e0d9 [ 185.773889][ T9024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.773906][ T9024] RSP: 002b:00007f761f3da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.773927][ T9024] RAX: ffffffffffffffda RBX: 00007f761e825fa0 RCX: 00007f761e59e0d9 [ 185.773943][ T9024] RDX: 0000200000000000 RSI: 0000000000008b15 RDI: 0000000000000003 [ 185.773957][ T9024] RBP: 00007f761f3da090 R08: 0000000000000000 R09: 0000000000000000 [ 185.773969][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.773982][ T9024] R13: 00007f761e826038 R14: 00007f761e825fa0 R15: 00007ffd5fc0a808 [ 185.774015][ T9024] [ 185.855444][ T9013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.145272][ T9027] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 186.653571][ T9047] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 186.702893][ T9047] bond2: entered promiscuous mode [ 186.709546][ T9047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.807468][ T9047] macvtap1: entered allmulticast mode [ 186.909738][ T9053] macvtap2: entered allmulticast mode [ 186.984705][ T9047] bond2: (slave bridge2): making interface the new active one [ 187.016095][ T9047] bridge2: entered promiscuous mode [ 187.034532][ T9047] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 187.270949][ T5801] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.617995][ T9081] nbd: must specify at least one socket [ 187.771476][ T5801] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.147284][ T9111] netlink: 'syz.0.1023': attribute type 10 has an invalid length. [ 188.239319][ T7160] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.251999][ T9117] openvswitch: netlink: EtherType 300 is less than min 600 [ 188.413484][ T9125] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 188.423206][ T9121] __nla_validate_parse: 9 callbacks suppressed [ 188.423225][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 188.512372][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.898475][ T9148] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1037'. [ 188.907819][ T9148] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 189.158144][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.406930][ T9148] 0ªî{X¹¦: entered allmulticast mode [ 189.434828][ T7158] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.444715][ T7158] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.589225][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1043'. [ 189.616893][ T9172] FAULT_INJECTION: forcing a failure. [ 189.616893][ T9172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.631684][ T9172] CPU: 1 UID: 0 PID: 9172 Comm: syz.0.1044 Not tainted syzkaller #0 PREEMPT(full) [ 189.631712][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.631726][ T9172] Call Trace: [ 189.631734][ T9172] [ 189.631743][ T9172] dump_stack_lvl+0xe8/0x150 [ 189.631777][ T9172] should_fail_ex+0x40c/0x560 [ 189.631804][ T9172] _copy_to_user+0x31/0xb0 [ 189.631836][ T9172] simple_read_from_buffer+0xe1/0x170 [ 189.631869][ T9172] proc_fail_nth_read+0x1bb/0x230 [ 189.631902][ T9172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.631934][ T9172] ? rw_verify_area+0x24a/0x4c0 [ 189.631971][ T9172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.631999][ T9172] vfs_read+0x213/0xa80 [ 189.632034][ T9172] ? __pfx___mutex_lock+0x10/0x10 [ 189.632064][ T9172] ? __pfx_vfs_read+0x10/0x10 [ 189.632095][ T9172] ? __fget_files+0x2a/0x420 [ 189.632126][ T9172] ? __fget_files+0x3a2/0x420 [ 189.632160][ T9172] ? __fget_files+0x2a/0x420 [ 189.632197][ T9172] ksys_read+0x150/0x270 [ 189.632230][ T9172] ? __pfx_ksys_read+0x10/0x10 [ 189.632268][ T9172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.632292][ T9172] do_syscall_64+0x174/0x580 [ 189.632319][ T9172] ? trace_irq_disable+0x3b/0x140 [ 189.632344][ T9172] ? clear_bhb_loop+0x70/0xc0 [ 189.632369][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.632390][ T9172] RIP: 0033:0x7f185775e90e [ 189.632409][ T9172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.632427][ T9172] RSP: 002b:00007f18586c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.632448][ T9172] RAX: ffffffffffffffda RBX: 00007f18586c16c0 RCX: 00007f185775e90e [ 189.632463][ T9172] RDX: 000000000000000f RSI: 00007f18586c10a0 RDI: 0000000000000004 [ 189.632475][ T9172] RBP: 00007f18586c1090 R08: 0000000000000000 R09: 0000000000000000 [ 189.632488][ T9172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.632500][ T9172] R13: 00007f1857a26038 R14: 00007f1857a25fa0 R15: 00007ffdf230e7d8 [ 189.632534][ T9172] [ 189.855695][ T9161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.895119][ T9170] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 189.902909][ T9170] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1043'. [ 190.070822][ T5733] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.431621][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.466413][ T9194] xt_SECMARK: invalid mode: 9 [ 190.498399][ T9198] openvswitch: netlink: nsh attr 1 has unexpected len 330 expected 8 [ 190.561512][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1053'. [ 190.588086][ T9197] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 190.664161][ T9204] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1058'. [ 190.789324][ T9212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1061'. [ 190.941729][ T9216] netlink: 'syz.1.1062': attribute type 16 has an invalid length. [ 191.065893][ T9221] syzkaller0: entered promiscuous mode [ 191.099879][ T9225] x_tables: duplicate underflow at hook 4 [ 191.101784][ T9221] syzkaller0: entered allmulticast mode [ 191.645187][ T9253] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.811890][ T9257] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 191.991822][ T9262] C: renamed from veth1_to_team (while UP) [ 192.022687][ T9262] netlink: 'syz.0.1079': attribute type 2 has an invalid length. [ 192.051883][ T9262] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1079'. [ 192.074963][ T9262] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 192.223296][ T9269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1083'. [ 192.471910][ T9282] FAULT_INJECTION: forcing a failure. [ 192.471910][ T9282] name failslab, interval 1, probability 0, space 0, times 0 [ 192.489841][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 192.512721][ T9282] CPU: 1 UID: 0 PID: 9282 Comm: syz.2.1088 Not tainted syzkaller #0 PREEMPT(full) [ 192.512754][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.512768][ T9282] Call Trace: [ 192.512776][ T9282] [ 192.512785][ T9282] dump_stack_lvl+0xe8/0x150 [ 192.512819][ T9282] should_fail_ex+0x40c/0x560 [ 192.512853][ T9282] should_failslab+0xa8/0x100 [ 192.512885][ T9282] __kmalloc_cache_noprof+0xa8/0x660 [ 192.512911][ T9282] ? nft_pernet+0x23/0x240 [ 192.512930][ T9282] ? nf_tables_newchain+0xf9c/0x28b0 [ 192.512960][ T9282] ? nf_tables_newchain+0xf9c/0x28b0 [ 192.512997][ T9282] nf_tables_newchain+0xf9c/0x28b0 [ 192.513046][ T9282] ? __pfx_nf_tables_newchain+0x10/0x10 [ 192.513110][ T9282] ? nfnl_pernet+0x23/0x240 [ 192.513130][ T9282] ? nfnl_pernet+0x23/0x240 [ 192.513161][ T9282] ? __nla_parse+0x40/0x60 [ 192.513190][ T9282] nfnetlink_rcv+0x1288/0x28c0 [ 192.513248][ T9282] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 192.513287][ T9282] ? ref_tracker_free+0x689/0x830 [ 192.513336][ T9282] ? skb_clone+0x246/0x3a0 [ 192.513365][ T9282] ? __netlink_deliver_tap+0x811/0x860 [ 192.513399][ T9282] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.513421][ T9282] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.513451][ T9282] netlink_unicast+0x7bb/0x940 [ 192.513483][ T9282] netlink_sendmsg+0x813/0xb40 [ 192.513517][ T9282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.513545][ T9282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 192.513581][ T9282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.513603][ T9282] sock_sendmsg_nosec+0x13a/0x180 [ 192.513635][ T9282] ____sys_sendmsg+0x54e/0x850 [ 192.513663][ T9282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.513696][ T9282] ? import_iovec+0x73/0xa0 [ 192.513727][ T9282] ___sys_sendmsg+0x2a5/0x360 [ 192.513749][ T9282] ? __lock_acquire+0x683/0x2cf0 [ 192.513780][ T9282] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.513847][ T9282] ? __fget_files+0x2a/0x420 [ 192.513873][ T9282] ? __fget_files+0x3a2/0x420 [ 192.513910][ T9282] __x64_sys_sendmsg+0x1b1/0x290 [ 192.513935][ T9282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.513977][ T9282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.514000][ T9282] do_syscall_64+0x174/0x580 [ 192.514027][ T9282] ? trace_irq_disable+0x3b/0x140 [ 192.514051][ T9282] ? clear_bhb_loop+0x70/0xc0 [ 192.514077][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.514097][ T9282] RIP: 0033:0x7f761e59e0d9 [ 192.514117][ T9282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.514135][ T9282] RSP: 002b:00007f761f3da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.514158][ T9282] RAX: ffffffffffffffda RBX: 00007f761e825fa0 RCX: 00007f761e59e0d9 [ 192.514172][ T9282] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 192.514185][ T9282] RBP: 00007f761f3da090 R08: 0000000000000000 R09: 0000000000000000 [ 192.514198][ T9282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.514210][ T9282] R13: 00007f761e826038 R14: 00007f761e825fa0 R15: 00007ffd5fc0a808 [ 192.514243][ T9282] [ 192.959416][ T9287] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 192.986465][ T9287] 1ªî{X¹¦: entered allmulticast mode [ 193.326123][ T9303] netlink: 'syz.3.1097': attribute type 1 has an invalid length. [ 193.571898][ T9303] bond4: entered promiscuous mode [ 193.577478][ T9303] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.601859][ T9312] bond4: entered allmulticast mode [ 193.671814][ T9303] bond4: (slave bridge4): making interface the new active one [ 193.679371][ T9303] bridge4: entered promiscuous mode [ 193.684804][ T9303] bridge4: entered allmulticast mode [ 193.692219][ T9303] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 193.711358][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 193.965049][ T9329] __nla_validate_parse: 6 callbacks suppressed [ 193.965071][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 194.037586][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1105'. [ 194.274585][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.284015][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.341313][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055ca2800: rx timeout, send abort [ 194.387750][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 194.550841][ T9358] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1116'. [ 194.564662][ T9358] netlink: 'syz.3.1116': attribute type 2 has an invalid length. [ 194.572465][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 194.841474][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055ca2400: rx timeout, send abort [ 194.849839][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055ca2800: abort rx timeout. Force session deactivation [ 194.988667][ T9378] SET target dimension over the limit! [ 195.004432][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 195.019612][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 195.040431][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 195.053080][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 195.063453][ T9379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.071742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.122004][ T1532] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.150716][ T1532] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.187579][ T1532] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.216686][ T1532] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.279518][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 195.349797][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055ca2400: abort rx timeout. Force session deactivation [ 195.479323][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.487788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.496917][ T9395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.505695][ T1532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.543399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.724907][ T9400] xt_hashlimit: max too large, truncated to 1048576 [ 195.731851][ T9400] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 195.821127][ T9402] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 196.019960][ T9390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.029121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.214399][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.323585][ T9456] netlink: 'syz.1.1149': attribute type 12 has an invalid length. [ 197.354754][ T9455] ip6gretap1: entered promiscuous mode [ 197.752926][ T9470] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 197.821659][ T9470] macvtap1: entered allmulticast mode [ 197.846507][ T9470] macvtap2: entered allmulticast mode [ 197.913049][ T9470] bond3: (slave bridge3): making interface the new active one [ 197.922082][ T9470] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 198.640484][ T9506] netlink: 'syz.0.1171': attribute type 1 has an invalid length. [ 198.847525][ T9518] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 199.254648][ T9546] __nla_validate_parse: 9 callbacks suppressed [ 199.254664][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 199.420705][ T9553] netlink: 480 bytes leftover after parsing attributes in process `syz.1.1186'. [ 199.449031][ T9553] netlink: 480 bytes leftover after parsing attributes in process `syz.1.1186'. [ 200.114368][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802be0e000: rx timeout, send abort [ 200.614574][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802be0c400: rx timeout, send abort [ 200.623232][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802be0e000: abort rx timeout. Force session deactivation [ 201.123100][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802be0c400: abort rx timeout. Force session deactivation [ 201.740414][ T9508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.901156][ T9626] xt_hashlimit: max too large, truncated to 1048576 [ 201.907835][ T9626] xt_hashlimit: Unknown mode mask 4000, kernel too old? [ 202.247925][ T9646] netlink: 'syz.2.1208': attribute type 1 has an invalid length. [ 202.266101][ T9646] netlink: 'syz.2.1208': attribute type 4 has an invalid length. [ 202.279132][ T9646] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1208'. [ 202.305694][ T9646] netlink: 46 bytes leftover after parsing attributes in process `syz.2.1208'. [ 202.630779][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.644957][ T4934] net_ratelimit: 13 callbacks suppressed [ 202.644974][ T4934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.044302][ T9679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1220'. [ 203.062319][ T9679] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1220'. [ 203.071883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.310573][ T4934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.347230][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1225'. [ 203.356388][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1225'. [ 203.367772][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1225'. [ 203.383437][ T9690] openvswitch: netlink: IPv6 tunnel dst address is zero [ 203.392378][ T9690] netlink: 'syz.3.1225': attribute type 83 has an invalid length. [ 203.650874][ T9699] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 203.659562][ T9699] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 203.668205][ T9699] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 203.676895][ T9699] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 203.704537][ T9699] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 203.721054][ T9699] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 203.730568][ T9699] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 203.793899][ T9702] syzkaller0: entered promiscuous mode [ 203.805461][ T9702] syzkaller0: entered allmulticast mode [ 203.827733][ T9699] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 203.848019][ T9709] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 203.866134][ T9709] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 203.873983][ T9709] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 203.894533][ T9699] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 204.140744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.257864][ T9720] x_tables: duplicate underflow at hook 4 [ 204.407171][ T9724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.551878][ T9727] ip_tables: iptables: counters copy to user failed while replacing table [ 204.565468][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.611075][ T9729] __nla_validate_parse: 133 callbacks suppressed [ 204.611097][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 204.665883][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'. [ 205.132681][ T9732] nbd2: detected capacity change from 0 to 63 [ 205.166896][ T9724] block nbd2: NBD_DISCONNECT [ 205.180653][ T9724] block nbd2: Disconnected due to user request. [ 205.190245][ T1556] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.190949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.221528][ T9724] block nbd2: shutting down sockets [ 205.240153][ T1556] Buffer I/O error on dev nbd2, logical block 0, async page read [ 205.248049][ T1556] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 205.257569][ T1556] Buffer I/O error on dev nbd2, logical block 1, async page read [ 205.265337][ T1556] Buffer I/O error on dev nbd2, logical block 2, async page read [ 205.273110][ T1556] Buffer I/O error on dev nbd2, logical block 3, async page read [ 205.283096][ T1556] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.292621][ T1556] Buffer I/O error on dev nbd2, logical block 0, async page read [ 205.300387][ T1556] Buffer I/O error on dev nbd2, logical block 1, async page read [ 205.308152][ T1556] Buffer I/O error on dev nbd2, logical block 2, async page read [ 205.315918][ T1556] Buffer I/O error on dev nbd2, logical block 3, async page read [ 205.341181][ T1630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.352844][ T1630] Buffer I/O error on dev nbd2, logical block 0, async page read [ 205.360766][ T1630] Buffer I/O error on dev nbd2, logical block 1, async page read [ 205.369616][ T1630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.379970][ T1630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.390512][ T1630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.403308][ T1630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.415032][ T1630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 205.426892][ T5725] ldm_validate_partition_table(): Disk read failed. [ 205.443436][ T1630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.456091][ T5725] Dev nbd2: unable to read RDB block 0 [ 205.464818][ T5725] nbd2: unable to read partition table [ 205.479117][ T5725] ldm_validate_partition_table(): Disk read failed. [ 205.487653][ T5725] Dev nbd2: unable to read RDB block 0 [ 205.495048][ T5725] nbd2: unable to read partition table [ 205.904084][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.922902][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 205.931829][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 206.270431][ T9789] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.497786][ T9794] bond4: (slave veth3): Enslaving as an active interface with a down link [ 206.510549][ T9789] 0ªî{X¹¦: left allmulticast mode [ 206.551286][ T9804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1267'. [ 206.626287][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 206.633863][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 206.633887][ T4923] Bluetooth: hci1: command 0x0406 tx timeout [ 206.728168][ T9799] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 206.849827][ T9799] bond4: (slave batadv1): making interface the new active one [ 206.858801][ T9799] batadv1: entered promiscuous mode [ 206.880689][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1271'. [ 206.890310][ T9799] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 207.065885][ T9812] bond3: entered promiscuous mode [ 207.071760][ T9812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.089751][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'. [ 207.240290][ T9815] bond3: entered allmulticast mode [ 207.295737][ T9819] bridge3: entered promiscuous mode [ 207.306977][ T9819] bridge3: entered allmulticast mode [ 207.335852][ T9819] team0: Port device bridge3 added [ 207.389376][ T9824] bond3: (slave bridge1): making interface the new active one [ 207.396924][ T9824] bridge1: entered promiscuous mode [ 207.413903][ T9824] bridge1: entered allmulticast mode [ 207.420428][ T9824] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 207.510979][ T9834] geneve1: entered promiscuous mode [ 207.518243][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1276'. [ 207.585835][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1276'. [ 207.595658][ T9842] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1278'. [ 207.663852][ T986] net_ratelimit: 11 callbacks suppressed [ 207.663872][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.717345][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.940148][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.361046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.373967][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.506660][ T9882] netlink: 'syz.1.1289': attribute type 11 has an invalid length. [ 208.714375][ T9888] openvswitch: netlink: IPv6 tunnel dst address is zero [ 208.829524][ T9890] FAULT_INJECTION: forcing a failure. [ 208.829524][ T9890] name failslab, interval 1, probability 0, space 0, times 0 [ 208.842361][ T9890] CPU: 1 UID: 0 PID: 9890 Comm: syz.3.1294 Not tainted syzkaller #0 PREEMPT(full) [ 208.842390][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.842403][ T9890] Call Trace: [ 208.842411][ T9890] [ 208.842419][ T9890] dump_stack_lvl+0xe8/0x150 [ 208.842454][ T9890] should_fail_ex+0x40c/0x560 [ 208.842480][ T9890] should_failslab+0xa8/0x100 [ 208.842511][ T9890] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 208.842535][ T9890] ? local_lock_release+0x9c/0x160 [ 208.842568][ T9890] ? __alloc_skb+0x1d7/0x7a0 [ 208.842598][ T9890] ? __alloc_skb+0x1d7/0x7a0 [ 208.842636][ T9890] __alloc_skb+0x1d7/0x7a0 [ 208.842672][ T9890] netlink_sendmsg+0x5d4/0xb40 [ 208.842706][ T9890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.842733][ T9890] ? aa_sock_msg_perm+0xf1/0x1b0 [ 208.842768][ T9890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.842791][ T9890] sock_sendmsg_nosec+0x13a/0x180 [ 208.842822][ T9890] ____sys_sendmsg+0x54e/0x850 [ 208.842850][ T9890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.842883][ T9890] ? import_iovec+0x73/0xa0 [ 208.842914][ T9890] ___sys_sendmsg+0x2a5/0x360 [ 208.842936][ T9890] ? __lock_acquire+0x683/0x2cf0 [ 208.842967][ T9890] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.843027][ T9890] ? __fget_files+0x2a/0x420 [ 208.843052][ T9890] ? __fget_files+0x3a2/0x420 [ 208.843098][ T9890] __x64_sys_sendmsg+0x1b1/0x290 [ 208.843125][ T9890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.843167][ T9890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.843190][ T9890] do_syscall_64+0x174/0x580 [ 208.843217][ T9890] ? trace_irq_disable+0x3b/0x140 [ 208.843242][ T9890] ? clear_bhb_loop+0x70/0xc0 [ 208.843268][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.843289][ T9890] RIP: 0033:0x7f9efc19e0d9 [ 208.843308][ T9890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.843326][ T9890] RSP: 002b:00007f9efcfeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.843350][ T9890] RAX: ffffffffffffffda RBX: 00007f9efc425fa0 RCX: 00007f9efc19e0d9 [ 208.843365][ T9890] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000003 [ 208.843379][ T9890] RBP: 00007f9efcfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 208.843392][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.843404][ T9890] R13: 00007f9efc426038 R14: 00007f9efc425fa0 R15: 00007ffc89bbf178 [ 208.843438][ T9890] [ 209.401154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.748368][ T9910] __nla_validate_parse: 7 callbacks suppressed [ 209.748389][ T9910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1302'. [ 210.134529][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 210.152131][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 210.178478][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 210.213075][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 210.231804][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 210.240837][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 210.257676][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 210.282271][ T9924] openvswitch: netlink: IPv6 tunnel dst address is zero [ 210.480961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.605864][ T9937] validate_nla: 58 callbacks suppressed [ 210.605884][ T9937] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 210.677591][ T9935] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 210.779589][ T9945] syzkaller0: entered promiscuous mode [ 210.792170][ T9945] syzkaller0: entered allmulticast mode [ 210.806037][ T9935] macvtap3: entered allmulticast mode [ 210.896915][ T9935] macvtap4: entered allmulticast mode [ 210.949821][ T9935] bond5: (slave bridge4): making interface the new active one [ 210.958912][ T9935] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 210.987810][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.107810][ T9954] netlink: 'syz.2.1319': attribute type 1 has an invalid length. [ 211.119950][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1320'. [ 211.128961][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1320'. [ 211.190287][ T9954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.307562][ T9969] x_tables: duplicate entry at hook 2 [ 211.326168][ T9958] bond3: (slave veth3): Enslaving as an active interface with a down link [ 211.346117][ T9954] team0: Port device dummy0 removed [ 211.359478][ T9972] netlink: 'syz.1.1321': attribute type 7 has an invalid length. [ 211.368100][ T9970] netlink: 'syz.2.1319': attribute type 10 has an invalid length. [ 211.415880][ T9954] bond3: (slave dummy0): making interface the new active one [ 211.456684][ T9954] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 211.480812][ T9970] dummy0: entered promiscuous mode [ 211.509244][ T9970] bond3: (slave dummy0): Releasing active interface [ 211.600058][ T9979] tun0: tun_chr_ioctl cmd 2148553947 [ 211.769863][ T9987] FAULT_INJECTION: forcing a failure. [ 211.769863][ T9987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.782973][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: syz.3.1329 Not tainted syzkaller #0 PREEMPT(full) [ 211.783000][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.783013][ T9987] Call Trace: [ 211.783022][ T9987] [ 211.783031][ T9987] dump_stack_lvl+0xe8/0x150 [ 211.783065][ T9987] should_fail_ex+0x40c/0x560 [ 211.783093][ T9987] _copy_from_user+0x2d/0xb0 [ 211.783121][ T9987] ___sys_sendmsg+0x1c6/0x360 [ 211.783143][ T9987] ? __lock_acquire+0x683/0x2cf0 [ 211.783175][ T9987] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.783203][ T9987] ? kstrtouint+0x6e/0xe0 [ 211.783252][ T9987] ? __fget_files+0x2a/0x420 [ 211.783278][ T9987] ? __fget_files+0x3a2/0x420 [ 211.783315][ T9987] __sys_sendmmsg+0x273/0x4d0 [ 211.783344][ T9987] ? __pfx___sys_sendmmsg+0x10/0x10 [ 211.783384][ T9987] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.783430][ T9987] ? ksys_write+0x242/0x270 [ 211.783463][ T9987] ? __pfx_ksys_write+0x10/0x10 [ 211.783501][ T9987] __x64_sys_sendmmsg+0xa0/0xc0 [ 211.783523][ T9987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.783544][ T9987] do_syscall_64+0x174/0x580 [ 211.783572][ T9987] ? trace_irq_disable+0x3b/0x140 [ 211.783595][ T9987] ? clear_bhb_loop+0x70/0xc0 [ 211.783621][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.783642][ T9987] RIP: 0033:0x7f9efc19e0d9 [ 211.783662][ T9987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.783680][ T9987] RSP: 002b:00007f9efcfeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 211.783702][ T9987] RAX: ffffffffffffffda RBX: 00007f9efc425fa0 RCX: 00007f9efc19e0d9 [ 211.783717][ T9987] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 211.783730][ T9987] RBP: 00007f9efcfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 211.783742][ T9987] R10: 0000000004040040 R11: 0000000000000246 R12: 0000000000000001 [ 211.783755][ T9987] R13: 00007f9efc426038 R14: 00007f9efc425fa0 R15: 00007ffc89bbf178 [ 211.783786][ T9987] [ 212.186734][ T9997] netlink: 'syz.2.1333': attribute type 13 has an invalid length. [ 212.271811][T10000] netlink: 'syz.4.1332': attribute type 4 has an invalid length. [ 212.285409][T10000] netlink: 'syz.4.1332': attribute type 5 has an invalid length. [ 212.701131][ C0] net_ratelimit: 7 callbacks suppressed [ 212.701153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.563257][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.750970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.392467][T10099] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 214.530190][T10110] ip_tables: iptables: counters copy to user failed while replacing table [ 214.726119][T10108] netlink: 'syz.1.1369': attribute type 4 has an invalid length. [ 214.779878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.015270][T10121] syzkaller0: entered promiscuous mode [ 215.020821][T10121] syzkaller0: entered allmulticast mode [ 215.279853][T10125] __nla_validate_parse: 11 callbacks suppressed [ 215.279887][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 215.360173][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 215.431352][ T7141] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.448701][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.449771][ T7141] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.459405][ T7145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.519406][ T7141] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.529434][T10136] x_tables: duplicate underflow at hook 2 [ 215.563954][ T7141] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.607737][T10138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1376'. [ 215.637646][T10140] team0: entered promiscuous mode [ 215.650654][T10140] team_slave_0: entered promiscuous mode [ 215.673113][T10140] team_slave_1: entered promiscuous mode [ 215.699574][T10140] team0: entered allmulticast mode [ 215.752133][T10140] team_slave_0: entered allmulticast mode [ 215.759080][T10140] team_slave_1: entered allmulticast mode [ 215.787360][T10140] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.796029][T10140] team0: Cannot enslave team device to itself [ 215.810152][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1381'. [ 215.841002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.859709][T10143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1377'. [ 216.219439][T10158] batman_adv: batadv0: Adding interface: gretap1 [ 216.256425][T10158] batman_adv: batadv0: Interface activated: gretap1 [ 216.686044][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.699172][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.913597][T10192] FAULT_INJECTION: forcing a failure. [ 216.913597][T10192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.934060][T10192] CPU: 0 UID: 0 PID: 10192 Comm: syz.1.1395 Not tainted syzkaller #0 PREEMPT(full) [ 216.934090][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.934102][T10192] Call Trace: [ 216.934112][T10192] [ 216.934121][T10192] dump_stack_lvl+0xe8/0x150 [ 216.934158][T10192] should_fail_ex+0x40c/0x560 [ 216.934185][T10192] _copy_from_user+0x2d/0xb0 [ 216.934215][T10192] __copy_msghdr+0x390/0x590 [ 216.934242][T10192] ___sys_sendmsg+0x213/0x360 [ 216.934264][T10192] ? __lock_acquire+0x683/0x2cf0 [ 216.934295][T10192] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.934323][T10192] ? kstrtouint+0x6e/0xe0 [ 216.934371][T10192] ? __fget_files+0x2a/0x420 [ 216.934396][T10192] ? __fget_files+0x3a2/0x420 [ 216.934432][T10192] __sys_sendmmsg+0x273/0x4d0 [ 216.934461][T10192] ? __pfx___sys_sendmmsg+0x10/0x10 [ 216.934495][T10192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.934539][T10192] ? ksys_write+0x242/0x270 [ 216.934571][T10192] ? __pfx_ksys_write+0x10/0x10 [ 216.934609][T10192] __x64_sys_sendmmsg+0xa0/0xc0 [ 216.934639][T10192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.934662][T10192] do_syscall_64+0x174/0x580 [ 216.934689][T10192] ? trace_irq_disable+0x3b/0x140 [ 216.934714][T10192] ? clear_bhb_loop+0x70/0xc0 [ 216.934739][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.934760][T10192] RIP: 0033:0x7ffa1139e0d9 [ 216.934780][T10192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.934798][T10192] RSP: 002b:00007ffa122bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.934821][T10192] RAX: ffffffffffffffda RBX: 00007ffa11625fa0 RCX: 00007ffa1139e0d9 [ 216.934836][T10192] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 216.934848][T10192] RBP: 00007ffa122bb090 R08: 0000000000000000 R09: 0000000000000000 [ 216.934861][T10192] R10: 0000000004040040 R11: 0000000000000246 R12: 0000000000000001 [ 216.934873][T10192] R13: 00007ffa11626038 R14: 00007ffa11625fa0 R15: 00007fffcbf87ed8 [ 216.934907][T10192] [ 217.248076][T10199] FAULT_INJECTION: forcing a failure. [ 217.248076][T10199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.294214][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz.3.1398 Not tainted syzkaller #0 PREEMPT(full) [ 217.294245][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.294257][T10199] Call Trace: [ 217.294265][T10199] [ 217.294274][T10199] dump_stack_lvl+0xe8/0x150 [ 217.294310][T10199] should_fail_ex+0x40c/0x560 [ 217.294336][T10199] _copy_from_user+0x2d/0xb0 [ 217.294366][T10199] ___sys_sendmsg+0x1c6/0x360 [ 217.294388][T10199] ? __lock_acquire+0x683/0x2cf0 [ 217.294420][T10199] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.294479][T10199] ? __fget_files+0x2a/0x420 [ 217.294506][T10199] ? __fget_files+0x3a2/0x420 [ 217.294541][T10199] __x64_sys_sendmsg+0x1b1/0x290 [ 217.294568][T10199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.294619][T10199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.294642][T10199] do_syscall_64+0x174/0x580 [ 217.294670][T10199] ? trace_irq_disable+0x3b/0x140 [ 217.294696][T10199] ? clear_bhb_loop+0x70/0xc0 [ 217.294721][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.294743][T10199] RIP: 0033:0x7f9efc19e0d9 [ 217.294762][T10199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.294779][T10199] RSP: 002b:00007f9efcfeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.294802][T10199] RAX: ffffffffffffffda RBX: 00007f9efc425fa0 RCX: 00007f9efc19e0d9 [ 217.294817][T10199] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 217.294830][T10199] RBP: 00007f9efcfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 217.294842][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.294854][T10199] R13: 00007f9efc426038 R14: 00007f9efc425fa0 R15: 00007ffc89bbf178 [ 217.294887][T10199] [ 217.550871][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 217.559901][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'. [ 217.870106][T10211] syzkaller1: entered promiscuous mode [ 217.875657][T10211] syzkaller1: entered allmulticast mode [ 218.214846][T10228] x_tables: unsorted entry at hook 2 [ 218.230789][ C0] net_ratelimit: 8 callbacks suppressed [ 218.230836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.306800][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 218.431244][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 218.445133][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1417'. [ 218.634690][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.665351][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.674612][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.715904][T10242] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.986704][ T62] batadv1: left promiscuous mode [ 219.144300][T10261] syzkaller0: entered promiscuous mode [ 219.150052][T10261] syzkaller0: entered allmulticast mode [ 219.360924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.915028][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.972217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.065067][T10284] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 220.229198][T10284] bond4: entered promiscuous mode [ 220.234839][T10284] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.470747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.502177][T10288] bond4: entered allmulticast mode [ 220.522785][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.536008][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.559950][T10306] __nla_validate_parse: 5 callbacks suppressed [ 220.559969][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 220.584235][T10308] netlink: 'syz.1.1442': attribute type 46 has an invalid length. [ 220.592236][T10300] bond4: (slave bridge4): making interface the new active one [ 220.595835][T10300] bridge4: entered promiscuous mode [ 220.601584][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 220.605959][T10300] bridge4: entered allmulticast mode [ 220.621378][T10300] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 220.654633][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'. [ 220.846451][T10316] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1446'. [ 220.857355][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 221.018975][T10323] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1449'. [ 221.056020][T10318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1447'. [ 221.110644][T10328] x_tables: duplicate underflow at hook 4 [ 221.454679][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 221.733212][T10334] ip6gre1: entered promiscuous mode [ 221.738463][T10334] ip6gre1: entered allmulticast mode [ 221.756022][T10341] team0: Port device team_slave_0 removed [ 222.172912][T10357] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1460'. [ 222.182126][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1460'. [ 222.212763][T10362] SET target dimension over the limit! [ 222.280685][ T7141] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.289475][ T7141] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.298219][ T7141] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.306959][ T7141] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.110479][T10397] syzkaller0: entered promiscuous mode [ 223.130684][T10397] syzkaller0: entered allmulticast mode [ 223.166223][T10397] tipc: Started in network mode [ 223.190149][T10397] tipc: Node identity f22f21ad41d6, cluster identity 4711 [ 223.206034][T10397] tipc: Enabled bearer , priority 0 [ 223.319077][T10396] tipc: Resetting bearer [ 223.326055][T10409] FAULT_INJECTION: forcing a failure. [ 223.326055][T10409] name failslab, interval 1, probability 0, space 0, times 0 [ 223.354040][T10409] CPU: 1 UID: 0 PID: 10409 Comm: syz.4.1478 Not tainted syzkaller #0 PREEMPT(full) [ 223.354069][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.354082][T10409] Call Trace: [ 223.354091][T10409] [ 223.354099][T10409] dump_stack_lvl+0xe8/0x150 [ 223.354134][T10409] should_fail_ex+0x40c/0x560 [ 223.354161][T10409] should_failslab+0xa8/0x100 [ 223.354193][T10409] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 223.354217][T10409] ? local_lock_release+0x9c/0x160 [ 223.354246][T10409] ? __alloc_skb+0x1d7/0x7a0 [ 223.354270][T10409] ? __alloc_skb+0x1d7/0x7a0 [ 223.354299][T10409] __alloc_skb+0x1d7/0x7a0 [ 223.354327][T10409] netlink_sendmsg+0x5d4/0xb40 [ 223.354354][T10409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.354378][T10409] ? aa_sock_msg_perm+0xf1/0x1b0 [ 223.354406][T10409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.354425][T10409] sock_sendmsg_nosec+0x13a/0x180 [ 223.354462][T10409] ____sys_sendmsg+0x54e/0x850 [ 223.354487][T10409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.354514][T10409] ? import_iovec+0x73/0xa0 [ 223.354538][T10409] ___sys_sendmsg+0x2a5/0x360 [ 223.354555][T10409] ? __lock_acquire+0x683/0x2cf0 [ 223.354579][T10409] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.354623][T10409] ? __fget_files+0x2a/0x420 [ 223.354644][T10409] ? __fget_files+0x3a2/0x420 [ 223.354673][T10409] __x64_sys_sendmsg+0x1b1/0x290 [ 223.354694][T10409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.354728][T10409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.354747][T10409] do_syscall_64+0x174/0x580 [ 223.354770][T10409] ? trace_irq_disable+0x3b/0x140 [ 223.354793][T10409] ? clear_bhb_loop+0x70/0xc0 [ 223.354815][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.354833][T10409] RIP: 0033:0x7ff3c899e0d9 [ 223.354851][T10409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.354867][T10409] RSP: 002b:00007ff3c97d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.354907][T10409] RAX: ffffffffffffffda RBX: 00007ff3c8c25fa0 RCX: 00007ff3c899e0d9 [ 223.354921][T10409] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 223.354932][T10409] RBP: 00007ff3c97d6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.354942][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.354953][T10409] R13: 00007ff3c8c26038 R14: 00007ff3c8c25fa0 R15: 00007ffc5bbf79f8 [ 223.354978][T10409] [ 223.369307][T10401] netlink: 'syz.3.1475': attribute type 2 has an invalid length. [ 223.638472][T10396] tipc: Disabling bearer [ 223.764239][T10401] ´: entered promiscuous mode [ 223.820771][ C0] net_ratelimit: 19 callbacks suppressed [ 223.820794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.010015][T10430] x_tables: unsorted entry at hook 2 [ 224.428632][T10447] xt_hashlimit: max too large, truncated to 1048576 [ 224.435518][T10447] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 224.461788][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.850772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.888917][T10466] syzkaller0: entered promiscuous mode [ 224.894464][T10466] syzkaller0: entered allmulticast mode [ 225.663905][T10493] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 225.704721][T10493] bond6: entered promiscuous mode [ 225.712707][T10493] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.750358][T10501] __nla_validate_parse: 23 callbacks suppressed [ 225.750380][T10501] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1516'. [ 225.789868][T10493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1513'. [ 225.841643][T10493] bond6: entered allmulticast mode [ 225.880937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.891460][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 226.015151][T10493] bond6: (slave bridge5): making interface the new active one [ 226.022703][T10493] bridge5: entered promiscuous mode [ 226.028199][T10493] bridge5: entered allmulticast mode [ 226.102181][T10507] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1518'. [ 226.120829][T10493] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 226.137894][T10504] netlink: 'syz.4.1518': attribute type 3 has an invalid length. [ 226.364919][T10515] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1523'. [ 226.683973][T10521] tipc: Enabling of bearer rejected, failed to enable media [ 226.694977][T10521] ip6erspan0: entered promiscuous mode [ 226.701091][T10521] ip6erspan0: entered allmulticast mode [ 226.864904][T10526] macvtap0: entered promiscuous mode [ 226.920841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.930360][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.016015][ T1532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.346853][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1535'. [ 227.391839][T10552] Bluetooth: MGMT ver 1.23 [ 227.663263][ T7145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.684933][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 227.710901][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 227.957490][T10575] FAULT_INJECTION: forcing a failure. [ 227.957490][T10575] name failslab, interval 1, probability 0, space 0, times 0 [ 227.970172][T10575] CPU: 1 UID: 0 PID: 10575 Comm: syz.1.1544 Not tainted syzkaller #0 PREEMPT(full) [ 227.970200][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.970211][T10575] Call Trace: [ 227.970221][T10575] [ 227.970229][T10575] dump_stack_lvl+0xe8/0x150 [ 227.970261][T10575] should_fail_ex+0x40c/0x560 [ 227.970286][T10575] should_failslab+0xa8/0x100 [ 227.970318][T10575] __kmalloc_noprof+0xfe/0x720 [ 227.970342][T10575] ? rcu_is_watching+0x15/0xb0 [ 227.970370][T10575] ? tomoyo_realpath_from_path+0xef/0x640 [ 227.970400][T10575] ? tomoyo_realpath_from_path+0xef/0x640 [ 227.970440][T10575] tomoyo_realpath_from_path+0xef/0x640 [ 227.970493][T10575] ? tomoyo_path_number_perm+0x219/0x5f0 [ 227.970522][T10575] tomoyo_path_number_perm+0x246/0x5f0 [ 227.970553][T10575] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 227.970578][T10575] ? __lock_acquire+0x683/0x2cf0 [ 227.970623][T10575] ? hook_file_ioctl+0x1f0/0x5f0 [ 227.970671][T10575] ? __fget_files+0x2a/0x420 [ 227.970700][T10575] ? __fget_files+0x2a/0x420 [ 227.970725][T10575] ? __fget_files+0x3a2/0x420 [ 227.970748][T10575] ? __fget_files+0x2a/0x420 [ 227.970777][T10575] security_file_ioctl+0xc3/0x2a0 [ 227.970804][T10575] __se_sys_ioctl+0x47/0x170 [ 227.970836][T10575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.970858][T10575] do_syscall_64+0x174/0x580 [ 227.970884][T10575] ? trace_irq_disable+0x3b/0x140 [ 227.970908][T10575] ? clear_bhb_loop+0x70/0xc0 [ 227.970932][T10575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.970953][T10575] RIP: 0033:0x7ffa1139e0d9 [ 227.970972][T10575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.970989][T10575] RSP: 002b:00007ffa122bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.971012][T10575] RAX: ffffffffffffffda RBX: 00007ffa11625fa0 RCX: 00007ffa1139e0d9 [ 227.971028][T10575] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000008 [ 227.971041][T10575] RBP: 00007ffa122bb090 R08: 0000000000000000 R09: 0000000000000000 [ 227.971053][T10575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.971064][T10575] R13: 00007ffa11626038 R14: 00007ffa11625fa0 R15: 00007fffcbf87ed8 [ 227.971097][T10575] [ 227.971106][T10575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 227.990777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.430416][T10581] batman_adv: batadv0: Adding interface: gretap0 [ 228.436831][T10581] batman_adv: batadv0: The MTU of interface gretap0 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.507612][T10581] batman_adv: batadv0: Interface activated: gretap0 [ 228.536379][T10584] netlink: 'syz.2.1548': attribute type 4 has an invalid length. [ 228.872811][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 228.944770][T10605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.956283][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 229.091126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.111642][T10610] x_tables: duplicate entry at hook 2 [ 229.377389][T10613] nbd: socks must be embedded in a SOCK_ITEM attr [ 229.391228][T10613] block nbd0: shutting down sockets [ 229.441925][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.456151][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.464564][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.559499][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.567952][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.613413][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.623775][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.635032][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.156203][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 230.239541][T10659] syzkaller0: entered promiscuous mode [ 230.245957][T10659] syzkaller0: entered allmulticast mode [ 231.098373][T10667] __nla_validate_parse: 2 callbacks suppressed [ 231.098394][T10667] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1580'. [ 231.164981][T10667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1580'. [ 231.251607][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'. [ 231.772827][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1595'. [ 231.791379][T10711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1592'. [ 233.992102][ T7145] net_ratelimit: 673 callbacks suppressed [ 233.992119][ T7145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.419749][T10686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.593943][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1598'. [ 234.663799][T10726] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 234.951337][T10738] x_tables: duplicate underflow at hook 2 [ 235.004997][T10743] openvswitch: netlink: Flow key attr not present in new flow. [ 235.087877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.178876][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1610'. [ 235.202505][T10750] netlink: 'syz.2.1609': attribute type 1 has an invalid length. [ 235.240997][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 235.250193][T10756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1612'. [ 235.295604][T10750] bond5: entered promiscuous mode [ 235.367064][T10750] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.501925][T10759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.509078][T10759] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 235.519447][T10759] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 235.602256][T10759] bond5: (slave ip6gre1): making interface the new active one [ 235.609798][T10759] ip6gre1: entered promiscuous mode [ 235.626167][T10759] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 235.658763][ T5616] block nbd0: Receive control failed (result -32) [ 235.899588][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.058248][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880353cec00: rx timeout, send abort [ 236.201515][T10793] xt_hashlimit: max too large, truncated to 1048576 [ 236.208800][T10793] xt_hashlimit: Unknown mode mask 2000000, kernel too old? [ 236.219377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.558424][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805616b000: rx timeout, send abort [ 236.566872][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880353cec00: abort rx timeout. Force session deactivation [ 236.868622][T10810] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 236.907101][T10810] netlink: 'syz.2.1633': attribute type 13 has an invalid length. [ 237.054674][T10821] FAULT_INJECTION: forcing a failure. [ 237.054674][T10821] name failslab, interval 1, probability 0, space 0, times 0 [ 237.054702][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1633'. [ 237.067737][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805616b000: abort rx timeout. Force session deactivation [ 237.092346][T10821] CPU: 0 UID: 0 PID: 10821 Comm: syz.1.1637 Not tainted syzkaller #0 PREEMPT(full) [ 237.092372][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.092385][T10821] Call Trace: [ 237.092394][T10821] [ 237.092402][T10821] dump_stack_lvl+0xe8/0x150 [ 237.092446][T10821] should_fail_ex+0x40c/0x560 [ 237.092473][T10821] should_failslab+0xa8/0x100 [ 237.092505][T10821] __kmalloc_noprof+0xfe/0x720 [ 237.092530][T10821] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 237.092561][T10821] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 237.092600][T10821] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 237.092639][T10821] genl_family_rcv_msg_doit+0xda/0x340 [ 237.092676][T10821] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.092715][T10821] ? apparmor_capable+0x126/0x170 [ 237.092741][T10821] ? bpf_lsm_capable+0x9/0x20 [ 237.092766][T10821] ? security_capable+0x7e/0x2c0 [ 237.092803][T10821] genl_rcv_msg+0x614/0x7a0 [ 237.092839][T10821] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.092867][T10821] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 237.092896][T10821] ? __pfx_ref_tracker_free+0x10/0x10 [ 237.092931][T10821] netlink_rcv_skb+0x226/0x4a0 [ 237.092955][T10821] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.092986][T10821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.093026][T10821] ? down_read+0x2be/0x330 [ 237.093060][T10821] genl_rcv+0x28/0x40 [ 237.093086][T10821] netlink_unicast+0x7bb/0x940 [ 237.093119][T10821] netlink_sendmsg+0x813/0xb40 [ 237.093153][T10821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.093182][T10821] ? aa_sock_msg_perm+0xf1/0x1b0 [ 237.093217][T10821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.093240][T10821] sock_sendmsg_nosec+0x13a/0x180 [ 237.093273][T10821] ____sys_sendmsg+0x54e/0x850 [ 237.093308][T10821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.093339][T10821] ? import_iovec+0x73/0xa0 [ 237.093388][T10821] ___sys_sendmsg+0x2a5/0x360 [ 237.093409][T10821] ? __lock_acquire+0x683/0x2cf0 [ 237.093448][T10821] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.093510][T10821] ? __fget_files+0x2a/0x420 [ 237.093536][T10821] ? __fget_files+0x3a2/0x420 [ 237.093573][T10821] __x64_sys_sendmsg+0x1b1/0x290 [ 237.093600][T10821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.093643][T10821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.093667][T10821] do_syscall_64+0x174/0x580 [ 237.093694][T10821] ? trace_irq_disable+0x3b/0x140 [ 237.093718][T10821] ? clear_bhb_loop+0x70/0xc0 [ 237.093744][T10821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.093765][T10821] RIP: 0033:0x7ffa1139e0d9 [ 237.093784][T10821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.093802][T10821] RSP: 002b:00007ffa122bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.093825][T10821] RAX: ffffffffffffffda RBX: 00007ffa11625fa0 RCX: 00007ffa1139e0d9 [ 237.093840][T10821] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 237.093853][T10821] RBP: 00007ffa122bb090 R08: 0000000000000000 R09: 0000000000000000 [ 237.093866][T10821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.093877][T10821] R13: 00007ffa11626038 R14: 00007ffa11625fa0 R15: 00007fffcbf87ed8 [ 237.093911][T10821] [ 237.258710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.432627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.451367][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.513238][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 237.526842][T10822] bond0: (slave bond_slave_0): Releasing backup interface [ 237.536289][T10822] bond_slave_0: left allmulticast mode [ 237.601135][T10817] block nbd1: server does not support multiple connections per device. [ 237.609760][T10817] block nbd1: shutting down sockets [ 237.639839][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 237.688960][T10822] bond_slave_0: entered promiscuous mode [ 237.694684][T10822] bond_slave_0: entered allmulticast mode [ 237.724908][T10835] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1640'. [ 237.753951][T10810] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1633'. [ 237.792377][T10826] netlink: 'syz.1.1638': attribute type 2 has an invalid length. [ 237.800194][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 238.182947][T10853] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 238.380724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.493656][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.102622][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.492560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.561649][T10910] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1655'. [ 239.591009][T10910] bridge0: port 3(veth1) entered disabled state [ 239.612351][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.620078][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.039087][T10933] netlink: 'syz.2.1662': attribute type 83 has an invalid length. [ 240.600771][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.609182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.626222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.628763][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.649703][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.730671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.859862][T10949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.868309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.971782][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 241.001162][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1675'. [ 241.113288][T10974] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 241.140665][T10972] syzkaller1: entered promiscuous mode [ 241.145794][T10979] FAULT_INJECTION: forcing a failure. [ 241.145794][T10979] name failslab, interval 1, probability 0, space 0, times 0 [ 241.146727][T10972] syzkaller1: entered allmulticast mode [ 241.222669][T10979] CPU: 0 UID: 0 PID: 10979 Comm: syz.4.1679 Not tainted syzkaller #0 PREEMPT(full) [ 241.222699][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.222711][T10979] Call Trace: [ 241.222720][T10979] [ 241.222729][T10979] dump_stack_lvl+0xe8/0x150 [ 241.222764][T10979] should_fail_ex+0x40c/0x560 [ 241.222792][T10979] should_failslab+0xa8/0x100 [ 241.222823][T10979] __kmalloc_cache_noprof+0xa8/0x660 [ 241.222851][T10979] ? ctnetlink_alloc_filter+0xb3/0xab0 [ 241.222871][T10979] ? ctnetlink_alloc_filter+0xb3/0xab0 [ 241.222892][T10979] ? __mutex_trylock_common+0x15f/0x270 [ 241.222929][T10979] ctnetlink_alloc_filter+0xb3/0xab0 [ 241.222954][T10979] ? __pfx_ctnetlink_alloc_filter+0x10/0x10 [ 241.222982][T10979] ? trace_contention_end+0x3d/0x140 [ 241.223016][T10979] ? __mutex_lock+0x30d/0x1550 [ 241.223053][T10979] ctnetlink_del_conntrack+0x6a1/0x8d0 [ 241.223090][T10979] ? __pfx_ctnetlink_del_conntrack+0x10/0x10 [ 241.223161][T10979] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 241.223184][T10979] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 241.223224][T10979] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 241.223296][T10979] netlink_rcv_skb+0x226/0x4a0 [ 241.223321][T10979] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 241.223344][T10979] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.223379][T10979] ? bpf_lsm_capable+0x9/0x20 [ 241.223403][T10979] ? security_capable+0x7e/0x2c0 [ 241.223439][T10979] nfnetlink_rcv+0x2b9/0x28c0 [ 241.223463][T10979] ? kernel_text_address+0xa5/0xe0 [ 241.223494][T10979] ? __kernel_text_address+0xd/0x30 [ 241.223522][T10979] ? unwind_get_return_address+0x4d/0x90 [ 241.223571][T10979] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 241.223596][T10979] ? arch_stack_walk+0xfb/0x150 [ 241.223642][T10979] ? stack_trace_save+0xa9/0x100 [ 241.223669][T10979] ? __lock_acquire+0x683/0x2cf0 [ 241.223696][T10979] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 241.223721][T10979] ? kasan_save_track+0x4f/0x80 [ 241.223745][T10979] ? kasan_save_track+0x3e/0x80 [ 241.223768][T10979] ? __kasan_slab_alloc+0x6c/0x80 [ 241.223793][T10979] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 241.223816][T10979] ? __alloc_skb+0x276/0x7a0 [ 241.223845][T10979] ? netlink_sendmsg+0x5d4/0xb40 [ 241.223867][T10979] ? sock_sendmsg_nosec+0x13a/0x180 [ 241.223893][T10979] ? ____sys_sendmsg+0x54e/0x850 [ 241.223924][T10979] ? __lock_acquire+0x683/0x2cf0 [ 241.223964][T10979] ? __netlink_lookup+0xc6/0x8b0 [ 241.224014][T10979] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.224039][T10979] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.224070][T10979] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.224093][T10979] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.224123][T10979] netlink_unicast+0x7bb/0x940 [ 241.224157][T10979] netlink_sendmsg+0x813/0xb40 [ 241.224191][T10979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.224221][T10979] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.224257][T10979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.224280][T10979] sock_sendmsg_nosec+0x13a/0x180 [ 241.224311][T10979] ____sys_sendmsg+0x54e/0x850 [ 241.224340][T10979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.224374][T10979] ? import_iovec+0x73/0xa0 [ 241.224405][T10979] ___sys_sendmsg+0x2a5/0x360 [ 241.224428][T10979] ? __lock_acquire+0x683/0x2cf0 [ 241.224459][T10979] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.224523][T10979] ? __fget_files+0x2a/0x420 [ 241.224549][T10979] ? __fget_files+0x3a2/0x420 [ 241.224587][T10979] __x64_sys_sendmsg+0x1b1/0x290 [ 241.224613][T10979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.224657][T10979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.224681][T10979] do_syscall_64+0x174/0x580 [ 241.224708][T10979] ? trace_irq_disable+0x3b/0x140 [ 241.224733][T10979] ? clear_bhb_loop+0x70/0xc0 [ 241.224759][T10979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.224780][T10979] RIP: 0033:0x7ff3c899e0d9 [ 241.224799][T10979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.224816][T10979] RSP: 002b:00007ff3c97d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.224838][T10979] RAX: ffffffffffffffda RBX: 00007ff3c8c25fa0 RCX: 00007ff3c899e0d9 [ 241.224853][T10979] RDX: 0000000000004004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 241.224866][T10979] RBP: 00007ff3c97d6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.224878][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.224890][T10979] R13: 00007ff3c8c26038 R14: 00007ff3c8c25fa0 R15: 00007ffc5bbf79f8 [ 241.224924][T10979] [ 241.728837][T10984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1682'. [ 241.943888][T10995] tipc: Enabling of bearer rejected, failed to enable media [ 242.012882][T10996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.138122][T10997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.207970][T10997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.962911][T11019] __nla_validate_parse: 3 callbacks suppressed [ 242.962931][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'. [ 243.197245][T11019] can: request_module (can-proto-3) failed. [ 243.723295][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 243.796172][T11042] xt_hashlimit: max too large, truncated to 1048576 [ 243.863057][T11042] xt_hashlimit: Unknown mode mask 3000000, kernel too old? [ 244.024101][T11050] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1703'. [ 244.279147][ T7158] net_ratelimit: 5 callbacks suppressed [ 244.279165][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.322826][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 244.543804][T11063] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1710'. [ 244.571933][T11067] x_tables: duplicate underflow at hook 4 [ 244.728256][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 244.962335][T11085] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 244.977197][T11085] : entered promiscuous mode [ 244.982335][T11085] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 244.991912][T11085] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 245.000870][T11085] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 245.011564][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.029261][T11085] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 245.039895][T11085] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 245.064395][T11085] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 245.073752][T11085] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 245.082826][T11085] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 245.091944][T11085] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 245.338859][T11094] can: request_module (can-proto-0) failed. [ 245.374733][T11097] nftables ruleset with unbound chain [ 245.485045][T11100] syzkaller1: entered promiscuous mode [ 245.490798][T11100] syzkaller1: entered allmulticast mode [ 245.503899][T11103] FAULT_INJECTION: forcing a failure. [ 245.503899][T11103] name failslab, interval 1, probability 0, space 0, times 0 [ 245.520233][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.531886][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.1.1727 Not tainted syzkaller #0 PREEMPT(full) [ 245.531913][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.531926][T11103] Call Trace: [ 245.531934][T11103] [ 245.531942][T11103] dump_stack_lvl+0xe8/0x150 [ 245.531977][T11103] should_fail_ex+0x40c/0x560 [ 245.532013][T11103] should_failslab+0xa8/0x100 [ 245.532044][T11103] __kmalloc_cache_noprof+0xa8/0x660 [ 245.532072][T11103] ? nfnetlink_rcv+0x1021/0x28c0 [ 245.532093][T11103] ? nfnetlink_rcv+0x1021/0x28c0 [ 245.532119][T11103] nfnetlink_rcv+0x1021/0x28c0 [ 245.532178][T11103] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 245.532218][T11103] ? ref_tracker_free+0x689/0x830 [ 245.532268][T11103] ? skb_clone+0x246/0x3a0 [ 245.532296][T11103] ? __netlink_deliver_tap+0x811/0x860 [ 245.532329][T11103] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.532353][T11103] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.532382][T11103] netlink_unicast+0x7bb/0x940 [ 245.532415][T11103] netlink_sendmsg+0x813/0xb40 [ 245.532469][T11103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.532498][T11103] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.532536][T11103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.532559][T11103] sock_sendmsg_nosec+0x13a/0x180 [ 245.532592][T11103] ____sys_sendmsg+0x54e/0x850 [ 245.532622][T11103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.532653][T11103] ? import_iovec+0x73/0xa0 [ 245.532684][T11103] ___sys_sendmsg+0x2a5/0x360 [ 245.532704][T11103] ? __lock_acquire+0x683/0x2cf0 [ 245.532736][T11103] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.532798][T11103] ? __fget_files+0x2a/0x420 [ 245.532824][T11103] ? __fget_files+0x3a2/0x420 [ 245.532862][T11103] __x64_sys_sendmsg+0x1b1/0x290 [ 245.532889][T11103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.532932][T11103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.532956][T11103] do_syscall_64+0x174/0x580 [ 245.532984][T11103] ? trace_irq_disable+0x3b/0x140 [ 245.533024][T11103] ? clear_bhb_loop+0x70/0xc0 [ 245.533050][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.533071][T11103] RIP: 0033:0x7ffa1139e0d9 [ 245.533092][T11103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.533110][T11103] RSP: 002b:00007ffa122bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.533133][T11103] RAX: ffffffffffffffda RBX: 00007ffa11625fa0 RCX: 00007ffa1139e0d9 [ 245.533147][T11103] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 245.533160][T11103] RBP: 00007ffa122bb090 R08: 0000000000000000 R09: 0000000000000000 [ 245.533173][T11103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.533191][T11103] R13: 00007ffa11626038 R14: 00007ffa11625fa0 R15: 00007fffcbf87ed8 [ 245.533226][T11103] [ 245.977955][T11110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.018216][T11113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.054464][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.167166][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.185821][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.560410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.778483][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.039225][T11145] ip_tables: iptables: counters copy to user failed while replacing table [ 247.434737][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.521953][T11162] syzkaller0: entered promiscuous mode [ 247.527455][T11162] syzkaller0: entered allmulticast mode [ 247.650554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.830423][T11169] openvswitch: netlink: IPv6 tunnel dst address is zero [ 248.739710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.822071][ C1] net_ratelimit: 2 callbacks suppressed [ 249.822093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.040136][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.185420][T11151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.414641][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 250.431344][T11203] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1760'. [ 250.604141][T11214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.632108][ T1532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.719502][T11223] xt_hashlimit: size too large, truncated to 1048576 [ 250.797001][T11227] validate_nla: 24 callbacks suppressed [ 250.797019][T11227] netlink: 'syz.1.1770': attribute type 2 has an invalid length. [ 250.850695][T11225] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 250.862865][T11225] bond6 (unregistering): Released all slaves [ 250.931262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.176940][T11239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1775'. [ 251.585385][T11263] xt_hashlimit: size too large, truncated to 1048576 [ 251.814682][T11257] netlink: 'syz.3.1780': attribute type 1 has an invalid length. [ 252.050156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.053651][T11277] macvtap1: entered allmulticast mode [ 252.115391][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1790'. [ 252.169847][T11280] macvtap2: entered allmulticast mode [ 252.242534][T11257] bond5: (slave bridge6): making interface the new active one [ 252.250774][T11297] netlink: 'syz.4.1791': attribute type 1 has an invalid length. [ 252.258556][T11297] netlink: 'syz.4.1791': attribute type 4 has an invalid length. [ 252.275935][T11257] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 252.330663][T11297] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1791'. [ 252.343651][T11297] netlink: 46 bytes leftover after parsing attributes in process `syz.4.1791'. [ 252.429801][T11303] openvswitch: netlink: Key 32 has unexpected len 12 expected 2 [ 252.518751][ T5616] Bluetooth: hci4: link tx timeout [ 252.528566][ T5616] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 252.588617][T11308] FAULT_INJECTION: forcing a failure. [ 252.588617][T11308] name failslab, interval 1, probability 0, space 0, times 0 [ 252.683511][T11308] CPU: 0 UID: 0 PID: 11308 Comm: syz.3.1793 Not tainted syzkaller #0 PREEMPT(full) [ 252.683542][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.683554][T11308] Call Trace: [ 252.683563][T11308] [ 252.683572][T11308] dump_stack_lvl+0xe8/0x150 [ 252.683606][T11308] should_fail_ex+0x40c/0x560 [ 252.683634][T11308] should_failslab+0xa8/0x100 [ 252.683666][T11308] __kmalloc_cache_noprof+0xa8/0x660 [ 252.683695][T11308] ? nfnetlink_rcv+0x1021/0x28c0 [ 252.683723][T11308] ? nfnetlink_rcv+0x1021/0x28c0 [ 252.683751][T11308] nfnetlink_rcv+0x1021/0x28c0 [ 252.683810][T11308] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 252.683848][T11308] ? ref_tracker_free+0x689/0x830 [ 252.683901][T11308] ? skb_clone+0x246/0x3a0 [ 252.683929][T11308] ? __netlink_deliver_tap+0x811/0x860 [ 252.683963][T11308] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.683986][T11308] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.684015][T11308] netlink_unicast+0x7bb/0x940 [ 252.684048][T11308] netlink_sendmsg+0x813/0xb40 [ 252.684084][T11308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.684112][T11308] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.684150][T11308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.684173][T11308] sock_sendmsg_nosec+0x13a/0x180 [ 252.684204][T11308] ____sys_sendmsg+0x54e/0x850 [ 252.684235][T11308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.684268][T11308] ? import_iovec+0x73/0xa0 [ 252.684311][T11308] ___sys_sendmsg+0x2a5/0x360 [ 252.684331][T11308] ? __lock_acquire+0x683/0x2cf0 [ 252.684363][T11308] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.684423][T11308] ? __fget_files+0x2a/0x420 [ 252.684448][T11308] ? __fget_files+0x3a2/0x420 [ 252.684484][T11308] __x64_sys_sendmsg+0x1b1/0x290 [ 252.684510][T11308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.684551][T11308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.684573][T11308] do_syscall_64+0x174/0x580 [ 252.684601][T11308] ? trace_irq_disable+0x3b/0x140 [ 252.684624][T11308] ? clear_bhb_loop+0x70/0xc0 [ 252.684650][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.684670][T11308] RIP: 0033:0x7f9efc19e0d9 [ 252.684689][T11308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.684712][T11308] RSP: 002b:00007f9efcfeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.684734][T11308] RAX: ffffffffffffffda RBX: 00007f9efc425fa0 RCX: 00007f9efc19e0d9 [ 252.684749][T11308] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 252.684761][T11308] RBP: 00007f9efcfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 252.684773][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.684784][T11308] R13: 00007f9efc426038 R14: 00007f9efc425fa0 R15: 00007ffc89bbf178 [ 252.684817][T11308] [ 253.107547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.161119][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.221838][ T1532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.347785][T11332] syzkaller0: entered promiscuous mode [ 253.353506][T11332] syzkaller0: entered allmulticast mode [ 254.219806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.374548][T11375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1809'. [ 254.426491][T11363] syzkaller0: entered promiscuous mode [ 254.550756][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 254.579851][T11363] syzkaller0: entered allmulticast mode [ 254.685400][T11390] netlink: 'syz.0.1812': attribute type 1 has an invalid length. [ 254.850641][T11399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1815'. [ 255.027319][T11407] x_tables: duplicate entry at hook 2 [ 255.033804][T11405] net_ratelimit: 1 callbacks suppressed [ 255.033820][T11405] openvswitch: netlink: Flow key attr not present in new flow. [ 255.742892][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.751994][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.760083][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.950823][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 256.362709][ T7145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.370268][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.380079][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.836032][T11390] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 256.875107][T11401] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 256.917561][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.925999][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.963749][T11409] batman_adv: batadv0: Adding interface: gretap2 [ 256.970172][T11409] batman_adv: batadv0: The MTU of interface gretap2 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.995576][T11409] batman_adv: batadv0: Interface activated: gretap2 [ 257.023229][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.045683][T11413] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 257.061652][T11414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1819'. [ 257.207159][T11421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1820'. [ 257.312805][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 257.398789][T11430] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1822'. [ 257.950119][T11454] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 257.988870][T11454] bond6: (slave macvlan3): making interface the new active one [ 258.033671][T11454] bond6: (slave macvlan3): Enslaving as an active interface with an up link [ 258.034556][T11463] netlink: 'syz.1.1830': attribute type 6 has an invalid length. [ 258.072727][ T5733] bond_slave_0: entered promiscuous mode [ 258.287077][T11473] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1833'. [ 258.325400][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 258.379426][T11459] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 258.480727][T11459] macvtap5: entered allmulticast mode [ 258.534162][T11459] macvtap6: entered allmulticast mode [ 258.560884][T11481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.601530][T11459] bond8: (slave bridge8): making interface the new active one [ 258.653915][T11486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.667828][T11459] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 258.690234][T11488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.742067][T11481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.783676][T11484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.922180][T11485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.051357][T11507] FAULT_INJECTION: forcing a failure. [ 259.051357][T11507] name failslab, interval 1, probability 0, space 0, times 0 [ 259.064037][T11507] CPU: 1 UID: 0 PID: 11507 Comm: syz.3.1842 Not tainted syzkaller #0 PREEMPT(full) [ 259.064066][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.064080][T11507] Call Trace: [ 259.064089][T11507] [ 259.064097][T11507] dump_stack_lvl+0xe8/0x150 [ 259.064131][T11507] should_fail_ex+0x40c/0x560 [ 259.064165][T11507] should_failslab+0xa8/0x100 [ 259.064196][T11507] __kmalloc_cache_noprof+0xa8/0x660 [ 259.064223][T11507] ? nfnetlink_rcv+0x1021/0x28c0 [ 259.064243][T11507] ? nfnetlink_rcv+0x1021/0x28c0 [ 259.064270][T11507] nfnetlink_rcv+0x1021/0x28c0 [ 259.064326][T11507] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 259.064363][T11507] ? ref_tracker_free+0x689/0x830 [ 259.064411][T11507] ? skb_clone+0x246/0x3a0 [ 259.064437][T11507] ? __netlink_deliver_tap+0x811/0x860 [ 259.064467][T11507] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.064489][T11507] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.064518][T11507] netlink_unicast+0x7bb/0x940 [ 259.064550][T11507] netlink_sendmsg+0x813/0xb40 [ 259.064584][T11507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.064612][T11507] ? aa_sock_msg_perm+0xf1/0x1b0 [ 259.064649][T11507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.064671][T11507] sock_sendmsg_nosec+0x13a/0x180 [ 259.064702][T11507] ____sys_sendmsg+0x54e/0x850 [ 259.064731][T11507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.064762][T11507] ? import_iovec+0x73/0xa0 [ 259.064794][T11507] ___sys_sendmsg+0x2a5/0x360 [ 259.064815][T11507] ? __lock_acquire+0x683/0x2cf0 [ 259.064848][T11507] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.064909][T11507] ? __fget_files+0x2a/0x420 [ 259.064934][T11507] ? __fget_files+0x3a2/0x420 [ 259.064972][T11507] __x64_sys_sendmsg+0x1b1/0x290 [ 259.064999][T11507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.065041][T11507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.065065][T11507] do_syscall_64+0x174/0x580 [ 259.065093][T11507] ? trace_irq_disable+0x3b/0x140 [ 259.065118][T11507] ? clear_bhb_loop+0x70/0xc0 [ 259.065152][T11507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.065174][T11507] RIP: 0033:0x7f9efc19e0d9 [ 259.065194][T11507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.065212][T11507] RSP: 002b:00007f9efcfeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.065235][T11507] RAX: ffffffffffffffda RBX: 00007f9efc425fa0 RCX: 00007f9efc19e0d9 [ 259.065251][T11507] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 259.065264][T11507] RBP: 00007f9efcfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 259.065277][T11507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.065288][T11507] R13: 00007f9efc426038 R14: 00007f9efc425fa0 R15: 00007ffc89bbf178 [ 259.065321][T11507] [ 259.887967][T11528] x_tables: duplicate underflow at hook 2 [ 259.906560][T11531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1846'. [ 260.047120][T11537] net_ratelimit: 5 callbacks suppressed [ 260.047143][T11537] openvswitch: netlink: IPv6 tunnel dst address is zero [ 260.209357][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.383143][T11547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.391788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.475862][T11551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1854'. [ 260.537365][T11551] bridge_slave_0: left allmulticast mode [ 260.570230][T11551] bridge_slave_0: left promiscuous mode [ 260.576101][T11551] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.587180][T11551] bridge_slave_1: left allmulticast mode [ 260.592879][T11551] bridge_slave_1: left promiscuous mode [ 260.598745][T11551] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.634639][T11551] bond0: (slave bond_slave_0): Releasing backup interface [ 260.684400][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'. [ 260.693939][T11551] bond0: (slave bond_slave_1): Releasing backup interface [ 260.711916][T11551] team_slave_0: left promiscuous mode [ 260.717636][T11551] team_slave_0: left allmulticast mode [ 260.724933][T11551] team0: Port device team_slave_0 removed [ 260.731514][T11551] team_slave_1: left promiscuous mode [ 260.737110][T11551] team_slave_1: left allmulticast mode [ 260.748515][T11551] team0: Port device team_slave_1 removed [ 260.756209][T11551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.773001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.803495][T11551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.829939][T11551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.943836][T11569] __nla_validate_parse: 3 callbacks suppressed [ 260.943854][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1859'. [ 261.094948][T11573] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 261.213727][T11575] xt_hashlimit: size too large, truncated to 1048576 [ 261.264634][T11581] netlink: 'syz.0.1863': attribute type 2 has an invalid length. [ 261.503528][ T1532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.619634][T11592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.696590][T11595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.784908][T11595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.897339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.923930][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'. [ 261.935004][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1872'. [ 261.944629][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1872'. [ 262.122581][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.130775][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.145217][T11613] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1876'. [ 262.154322][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'. [ 262.429673][T11624] xt_hashlimit: size too large, truncated to 1048576 [ 262.613091][T11633] netlink: 'syz.3.1881': attribute type 2 has an invalid length. [ 262.707253][T11637] netlink: 'syz.2.1886': attribute type 1 has an invalid length. [ 262.748566][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 262.779407][T11637] 8021q: adding VLAN 0 to HW filter on device bond6 [ 262.850125][T11644] bond6: (slave veth5): Enslaving as an active interface with a down link [ 262.881724][T11637] 1ªî{X¹¦: left allmulticast mode [ 262.936373][T11637] bond0: left allmulticast mode [ 262.941558][T11637] bond_slave_1: left allmulticast mode [ 262.948246][T11637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.959681][T11637] dummy0: left promiscuous mode [ 263.227902][T11665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1894'. [ 263.258321][T11666] pimreg: entered allmulticast mode [ 263.430255][T11676] xt_hashlimit: size too large, truncated to 1048576 [ 263.606697][T11683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1902'. [ 263.618223][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1902'. [ 263.634409][T11684] netlink: 'syz.3.1899': attribute type 2 has an invalid length. [ 263.714624][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.802415][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.875794][T11694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.011077][T11693] netlink: 'syz.0.1905': attribute type 1 has an invalid length. [ 264.084942][T11693] macvtap7: entered allmulticast mode [ 264.121663][T11693] macvtap8: entered allmulticast mode [ 264.154646][T11693] bond9: (slave bridge9): making interface the new active one [ 264.163722][T11693] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 264.560811][T11709] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.853188][T11722] xt_hashlimit: size too large, truncated to 1048576 [ 264.930429][T11724] netlink: 'syz.2.1916': attribute type 2 has an invalid length. [ 264.958995][T11723] macvtap1: entered promiscuous mode [ 264.964666][T11723] bridge0: entered promiscuous mode [ 265.144728][ C1] net_ratelimit: 658 callbacks suppressed [ 265.144746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.278273][T11732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.935112][T11762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.987793][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.999648][T11765] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 266.035080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.044034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.055066][T11762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.071688][T11765] bond10: entered promiscuous mode [ 266.077305][T11765] 8021q: adding VLAN 0 to HW filter on device bond10 [ 266.090451][T11765] __nla_validate_parse: 9 callbacks suppressed [ 266.090469][T11765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1934'. [ 266.148940][T11762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.161235][T11765] bond10: entered allmulticast mode [ 266.198811][T11765] bond10: (slave bridge10): making interface the new active one [ 266.207053][T11765] bridge10: entered promiscuous mode [ 266.213572][T11765] bridge10: entered allmulticast mode [ 266.221352][T11765] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 266.258835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.309576][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 266.406700][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1937'. [ 266.638712][T11783] FAULT_INJECTION: forcing a failure. [ 266.638712][T11783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.652723][T11783] CPU: 1 UID: 0 PID: 11783 Comm: syz.4.1939 Not tainted syzkaller #0 PREEMPT(full) [ 266.652751][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.652764][T11783] Call Trace: [ 266.652773][T11783] [ 266.652781][T11783] dump_stack_lvl+0xe8/0x150 [ 266.652815][T11783] should_fail_ex+0x40c/0x560 [ 266.652841][T11783] _copy_from_iter+0x1d3/0x1660 [ 266.652865][T11783] ? kmem_cache_alloc_node_noprof+0x1c1/0x610 [ 266.652889][T11783] ? rcu_is_watching+0x15/0xb0 [ 266.652919][T11783] ? trace_kmem_cache_alloc+0x29/0xe0 [ 266.652943][T11783] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 266.652967][T11783] ? __pfx__copy_from_iter+0x10/0x10 [ 266.652989][T11783] ? __alloc_skb+0x276/0x7a0 [ 266.653018][T11783] ? __alloc_skb+0x276/0x7a0 [ 266.653054][T11783] ? netlink_sendmsg+0x650/0xb40 [ 266.653076][T11783] ? skb_put+0x112/0x210 [ 266.653098][T11783] netlink_sendmsg+0x6c0/0xb40 [ 266.653129][T11783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.653157][T11783] ? aa_sock_msg_perm+0xf1/0x1b0 [ 266.653205][T11783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.653228][T11783] sock_sendmsg_nosec+0x13a/0x180 [ 266.653260][T11783] ____sys_sendmsg+0x54e/0x850 [ 266.653289][T11783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.653321][T11783] ? import_iovec+0x73/0xa0 [ 266.653350][T11783] ___sys_sendmsg+0x2a5/0x360 [ 266.653371][T11783] ? __lock_acquire+0x683/0x2cf0 [ 266.653402][T11783] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.653458][T11783] ? __fget_files+0x2a/0x420 [ 266.653484][T11783] ? __fget_files+0x3a2/0x420 [ 266.653520][T11783] __x64_sys_sendmsg+0x1b1/0x290 [ 266.653546][T11783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.653587][T11783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.653611][T11783] do_syscall_64+0x174/0x580 [ 266.653638][T11783] ? trace_irq_disable+0x3b/0x140 [ 266.653663][T11783] ? clear_bhb_loop+0x70/0xc0 [ 266.653688][T11783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.653708][T11783] RIP: 0033:0x7ff3c899e0d9 [ 266.653728][T11783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.653746][T11783] RSP: 002b:00007ff3c97d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.653769][T11783] RAX: ffffffffffffffda RBX: 00007ff3c8c25fa0 RCX: 00007ff3c899e0d9 [ 266.653783][T11783] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 266.653796][T11783] RBP: 00007ff3c97d6090 R08: 0000000000000000 R09: 0000000000000000 [ 266.653808][T11783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.653820][T11783] R13: 00007ff3c8c26038 R14: 00007ff3c8c25fa0 R15: 00007ffc5bbf79f8 [ 266.653852][T11783] [ 267.219698][T11793] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1942'. [ 267.229882][T11792] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 267.252919][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1943'. [ 267.297527][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1943'. [ 267.316546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.334826][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.397586][T11798] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1947'. [ 267.671629][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1951'. [ 267.760198][T11811] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 267.796896][T11811] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 267.875394][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.885350][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.929442][T11823] syzkaller0: entered promiscuous mode [ 267.935004][T11823] syzkaller0: entered allmulticast mode [ 267.950863][T11825] x_tables: duplicate underflow at hook 4 [ 268.030962][T11822] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 268.039206][T11822] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 268.162813][T11828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1958'. [ 268.215846][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'. [ 268.807033][T11861] netlink: 'syz.4.1970': attribute type 39 has an invalid length. [ 268.882087][T11862] unsupported nlmsg_type 40 [ 270.300204][T11911] syzkaller0: entered promiscuous mode [ 270.305778][T11911] syzkaller0: entered allmulticast mode [ 270.465652][T11932] xt_hashlimit: size too large, truncated to 1048576 [ 270.530400][T11935] netlink: 'syz.3.1994': attribute type 2 has an invalid length. [ 270.660298][T11935] net_ratelimit: 1682 callbacks suppressed [ 270.660321][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.675458][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.740086][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.779820][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.788188][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.796448][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.809644][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.817969][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.826253][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.834749][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.981196][T11953] netlink: 'syz.4.2000': attribute type 3 has an invalid length. [ 271.068036][T11957] __nla_validate_parse: 3 callbacks suppressed [ 271.068056][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 271.094597][T11957] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2001'. [ 271.506088][T11954] block nbd1: server does not support multiple connections per device. [ 271.521681][T11954] block nbd1: shutting down sockets [ 273.070502][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2006'. [ 273.156987][T11985] netlink: 'syz.2.2007': attribute type 11 has an invalid length. [ 273.252385][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'. [ 273.988893][T12024] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2020'. [ 274.085194][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2020'. [ 274.854512][T12074] FAULT_INJECTION: forcing a failure. [ 274.854512][T12074] name failslab, interval 1, probability 0, space 0, times 0 [ 274.874337][T12074] CPU: 0 UID: 0 PID: 12074 Comm: syz.0.2028 Not tainted syzkaller #0 PREEMPT(full) [ 274.874371][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.874383][T12074] Call Trace: [ 274.874392][T12074] [ 274.874401][T12074] dump_stack_lvl+0xe8/0x150 [ 274.874434][T12074] should_fail_ex+0x40c/0x560 [ 274.874462][T12074] should_failslab+0xa8/0x100 [ 274.874492][T12074] __kmalloc_cache_noprof+0xa8/0x660 [ 274.874516][T12074] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 274.874540][T12074] ? __kmalloc_cache_noprof+0x150/0x660 [ 274.874563][T12074] ? sctp_add_bind_addr+0x8c/0x370 [ 274.874587][T12074] ? sctp_add_bind_addr+0x8c/0x370 [ 274.874618][T12074] sctp_add_bind_addr+0x8c/0x370 [ 274.874648][T12074] sctp_copy_local_addr_list+0x31a/0x4e0 [ 274.874676][T12074] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 274.874701][T12074] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 274.874739][T12074] ? sctp_v4_is_any+0x35/0x60 [ 274.874765][T12074] ? sctp_copy_one_addr+0x93/0x360 [ 274.874793][T12074] sctp_bind_addr_copy+0xb3/0x3c0 [ 274.874819][T12074] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 274.874857][T12074] sctp_connect_new_asoc+0x2ff/0x6b0 [ 274.874891][T12074] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 274.874929][T12074] ? __local_bh_enable_ip+0xd0/0x130 [ 274.874950][T12074] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 274.874972][T12074] ? security_sctp_bind_connect+0x7e/0x2c0 [ 274.875002][T12074] sctp_sendmsg+0x159b/0x2d00 [ 274.875030][T12074] ? trace_sched_exit_tp+0x3a/0x130 [ 274.875065][T12074] ? __pfx_sctp_sendmsg+0x10/0x10 [ 274.875101][T12074] ? aa_sk_perm+0x6d5/0x900 [ 274.875143][T12074] ? sock_rps_record_flow+0x19/0x350 [ 274.875170][T12074] ? inet_sendmsg+0x298/0x320 [ 274.875196][T12074] ? __pfx_inet_sendmsg+0x10/0x10 [ 274.875218][T12074] sock_sendmsg_nosec+0x10e/0x180 [ 274.875250][T12074] ____sys_sendmsg+0x54e/0x850 [ 274.875280][T12074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.875312][T12074] ? import_iovec+0x73/0xa0 [ 274.875344][T12074] ___sys_sendmsg+0x2a5/0x360 [ 274.875365][T12074] ? __lock_acquire+0x683/0x2cf0 [ 274.875397][T12074] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.875426][T12074] ? kstrtouint+0x6e/0xe0 [ 274.875476][T12074] ? __fget_files+0x2a/0x420 [ 274.875501][T12074] ? __fget_files+0x3a2/0x420 [ 274.875538][T12074] __sys_sendmmsg+0x273/0x4d0 [ 274.875569][T12074] ? __pfx___sys_sendmmsg+0x10/0x10 [ 274.875602][T12074] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.875648][T12074] ? ksys_write+0x242/0x270 [ 274.875682][T12074] ? __pfx_ksys_write+0x10/0x10 [ 274.875731][T12074] __x64_sys_sendmmsg+0xa0/0xc0 [ 274.875755][T12074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.875777][T12074] do_syscall_64+0x174/0x580 [ 274.875805][T12074] ? trace_irq_disable+0x3b/0x140 [ 274.875830][T12074] ? clear_bhb_loop+0x70/0xc0 [ 274.875855][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.875877][T12074] RIP: 0033:0x7f185779e0d9 [ 274.875896][T12074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.875915][T12074] RSP: 002b:00007f18586c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 274.875938][T12074] RAX: ffffffffffffffda RBX: 00007f1857a25fa0 RCX: 00007f185779e0d9 [ 274.875954][T12074] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 274.875967][T12074] RBP: 00007f18586c1090 R08: 0000000000000000 R09: 0000000000000000 [ 274.875981][T12074] R10: 0000000004040040 R11: 0000000000000246 R12: 0000000000000002 [ 274.875994][T12074] R13: 00007f1857a26038 R14: 00007f1857a25fa0 R15: 00007ffdf230e7d8 [ 274.876029][T12074] [ 275.579797][T12022] batman_adv: batadv0: Interface deactivated: gretap1 [ 275.650839][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.667529][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.710669][ T62] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.719619][ T62] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.728537][ T62] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.737491][ T62] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.746411][ T62] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.914802][ T62] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.924188][T12093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2031'. [ 275.986953][T12096] net_ratelimit: 56 callbacks suppressed [ 275.986972][T12096] openvswitch: netlink: IPv6 tunnel dst address is zero [ 276.321584][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'. [ 276.343637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.380970][T12123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2039'. [ 276.516543][T12129] veth7: entered promiscuous mode [ 276.586957][T12129] veth7: entered allmulticast mode [ 276.592915][T12129] team0: Device veth7 is up. Set it down before adding it as a team port [ 276.656665][T12122] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2040'. [ 277.047360][T12156] x_tables: duplicate underflow at hook 2 [ 277.157546][T12162] ip_tables: iptables: counters copy to user failed while replacing table [ 277.289180][T12168] openvswitch: netlink: IPv6 tunnel dst address is zero [ 277.412512][T12177] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2059'. [ 277.454173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.463546][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 277.472458][T12179] openvswitch: netlink: Flow actions attr not present in new flow. [ 277.520292][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.574832][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2062'. [ 277.698961][T12188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2064'. [ 277.832597][T12191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2065'. [ 277.841659][T12191] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2065'. [ 277.953641][T12205] syzkaller0: entered promiscuous mode [ 277.959184][T12205] syzkaller0: entered allmulticast mode [ 278.123767][ T1532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.145412][T12211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2074'. [ 278.167603][T12200] Unsupported ieee802154 address type: 0 [ 278.223995][T12211] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 278.379208][T12223] x_tables: unsorted entry at hook 2 [ 278.571808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.886542][T12248] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 279.421008][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.481626][T12276] x_tables: duplicate underflow at hook 4 [ 280.630236][T12312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.717353][T12321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.932588][T12312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.341722][T12353] x_tables: duplicate underflow at hook 2 [ 281.482738][T12359] vxcan2: entered allmulticast mode [ 281.588350][T12365] __nla_validate_parse: 4 callbacks suppressed [ 281.588369][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2138'. [ 281.607285][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'. [ 281.864662][T12374] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2142'. [ 281.927272][ C1] net_ratelimit: 658 callbacks suppressed [ 281.927292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.980939][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.131761][T12385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2145'. [ 282.162156][T12385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2145'. [ 282.171192][T12385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2145'. [ 282.180250][T12385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2145'. [ 282.189300][T12385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2145'. [ 282.198286][T12385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2145'. [ 282.207264][T12385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2145'. [ 282.426421][T12399] netlink: 'syz.0.2150': attribute type 11 has an invalid length. [ 282.486838][T12390] netlink: 'syz.2.2148': attribute type 1 has an invalid length. [ 282.580867][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.602571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.787053][T12410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.894855][T12414] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 282.956492][T12414] bond7: option mode: invalid value (7) [ 283.050229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.060734][T12410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.072326][T12421] xt_hashlimit: max too large, truncated to 1048576 [ 283.085108][T12414] bond7 (unregistering): Released all slaves [ 283.179345][T12410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.271835][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.945286][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.071570][T12459] netlink: 'syz.1.2174': attribute type 1 has an invalid length. [ 284.166156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.243283][T12459] netlink: 'syz.1.2174': attribute type 10 has an invalid length. [ 284.251411][T12459] dummy0: entered promiscuous mode [ 284.391173][T12457] block nbd1: server does not support multiple connections per device. [ 284.420339][T12457] block nbd1: shutting down sockets [ 285.169195][T12502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.177404][T12502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.346622][T12513] netlink: 'syz.1.2197': attribute type 4 has an invalid length. [ 285.508339][T12520] tipc: Failed to remove unknown binding: 66,1,1/0:657525417/657525419 [ 285.614647][T12520] sctp: [Deprecated]: syz.2.2200 (pid 12520) Use of int in maxseg socket option. [ 285.614647][T12520] Use struct sctp_assoc_value instead [ 285.672750][T12520] xt_hashlimit: size too large, truncated to 1048576 [ 285.991737][T12550] netlink: 'syz.3.2210': attribute type 30 has an invalid length. [ 286.140379][T12561] xt_SECMARK: invalid mode: 9 [ 286.164755][T12550] vxlan0: entered promiscuous mode [ 286.177921][T12550] vxlan0: entered allmulticast mode [ 286.439847][T12576] x_tables: duplicate underflow at hook 2 [ 286.956885][T12605] netlink: 'syz.4.2226': attribute type 25 has an invalid length. [ 286.983230][T12605] netlink: 'syz.4.2226': attribute type 3 has an invalid length. [ 287.019163][T12605] __nla_validate_parse: 45 callbacks suppressed [ 287.019182][T12605] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2226'. [ 287.040757][T12607] net_ratelimit: 4 callbacks suppressed [ 287.040776][T12607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.333414][T12618] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2232'. [ 287.355176][T12623] netlink: 'syz.0.2233': attribute type 11 has an invalid length. [ 287.441844][T12618] .30ªî{X¹¦: renamed from gretap0 [ 287.449365][T12618] .30ªî{X¹¦: entered allmulticast mode [ 287.459515][T12618] A link change request failed with some changes committed already. Interface .30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 287.512111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.668141][T12636] x_tables: unsorted entry at hook 2 [ 287.849954][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2241'. [ 288.095289][T12657] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2244'. [ 288.130868][T12657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.607453][T12681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2249'. [ 288.626638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.641951][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2250'. [ 288.760734][T12684] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 289.011414][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.189162][T12707] syzkaller0: entered promiscuous mode [ 289.194720][T12707] syzkaller0: entered allmulticast mode [ 289.228110][T12707] tipc: Enabled bearer , priority 0 [ 289.248965][T12715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.257741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.291232][T12715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.299950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.313344][T12707] tipc: Resetting bearer [ 289.339081][T12706] tipc: Resetting bearer [ 289.371578][T12706] tipc: Disabling bearer [ 289.409988][T12723] sctp: [Deprecated]: syz.0.2262 (pid 12723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.409988][T12723] Use struct sctp_sack_info instead [ 289.597141][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2260'. [ 290.063866][T12752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2267'. [ 290.260110][T12760] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 290.453087][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 291.280820][T12806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2287'. [ 291.900052][T12833] xt_hashlimit: size too large, truncated to 1048576 [ 292.064004][T12841] net_ratelimit: 16 callbacks suppressed [ 292.064024][T12841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.093239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.105931][T12841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.116295][ T7145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.150716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.323704][T12846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.332279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.360801][T12837] block nbd1: server does not support multiple connections per device. [ 292.369462][T12837] block nbd1: shutting down sockets [ 292.437040][T12850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.445722][T12850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.454120][T12850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.474649][T12856] netlink: 'syz.4.2303': attribute type 1 has an invalid length. [ 292.566085][T12860] __nla_validate_parse: 4 callbacks suppressed [ 292.566106][T12860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2303'. [ 292.607465][T12863] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 292.657776][T12856] bond4: entered promiscuous mode [ 292.663331][T12856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.699082][T12860] bond4: entered allmulticast mode [ 292.726325][T12863] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.791245][T12856] bond4: (slave bridge2): making interface the new active one [ 292.798790][T12856] bridge2: entered promiscuous mode [ 292.804256][T12856] bridge2: entered allmulticast mode [ 292.811075][T12856] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 292.831677][T12863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.841410][T12863] bond7: (slave batadv0): making interface the new active one [ 292.852761][T12863] bond7: (slave batadv0): Enslaving as an active interface with an up link [ 293.113101][T12882] xt_socket: unknown flags 0x4 [ 293.141345][T12882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2312'. [ 293.397030][T12847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.406537][T12847] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 293.442329][T12847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.448908][T12847] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 293.547973][T12847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.553957][T12847] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 293.585997][T12847] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.591963][T12847] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 293.765776][T12847] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 293.777731][T12847] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 293.786187][T12847] CPU: 0 UID: 0 PID: 12847 Comm: syz.0.2299 Not tainted syzkaller #0 PREEMPT(full) [ 293.795586][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.805671][T12847] RIP: 0010:klist_remove+0x156/0x340 [ 293.811017][T12847] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 0d 83 6d f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ee 82 6d f6 49 8b 44 24 58 48 89 44 24 08 [ 293.830658][T12847] RSP: 0018:ffffc90004ab7820 EFLAGS: 00010202 [ 293.836767][T12847] RAX: 000000000000000b RBX: ffff88801db5be00 RCX: 0000000000000000 [ 293.844774][T12847] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 293.852773][T12847] RBP: ffffc90004ab7920 R08: ffffffff903d14a3 R09: 1ffffffff207a294 [ 293.860778][T12847] R10: dffffc0000000000 R11: fffffbfff207a295 R12: 0000000000000000 [ 293.868790][T12847] R13: 1ffff1100a78c80c R14: ffff888053c64060 R15: dffffc0000000000 [ 293.876795][T12847] FS: 00007f185867f6c0(0000) GS:ffff888124f5b000(0000) knlGS:0000000000000000 [ 293.885773][T12847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.892380][T12847] CR2: 000000110c33412a CR3: 000000002ad56000 CR4: 00000000003526f0 [ 293.900379][T12847] Call Trace: [ 293.903697][T12847] [ 293.906647][T12847] ? __pfx_klist_remove+0x10/0x10 [ 293.911695][T12847] ? kobject_move+0x5e2/0x720 [ 293.916391][T12847] ? __pfx_kobject_move+0x10/0x10 [ 293.921422][T12847] ? do_raw_spin_unlock+0xf5/0x210 [ 293.926580][T12847] ? get_device_parent+0x366/0x3a0 [ 293.931737][T12847] device_move+0x18e/0x720 [ 293.936168][T12847] hci_conn_del_sysfs+0xb8/0x1a0 [ 293.941123][T12847] hci_conn_del+0xc3d/0x1200 [ 293.945732][T12847] hci_conn_hash_flush+0x189/0x260 [ 293.950868][T12847] hci_dev_close_sync+0x7fc/0x10a0 [ 293.955992][T12847] ? __pfx___mutex_lock+0x10/0x10 [ 293.961036][T12847] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 293.966594][T12847] ? do_raw_spin_lock+0x12b/0x2f0 [ 293.971634][T12847] hci_dev_do_close+0x30/0xc0 [ 293.976329][T12847] hci_rfkill_set_block+0x1f4/0x290 [ 293.981547][T12847] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 293.987294][T12847] rfkill_set_block+0x19f/0x4d0 [ 293.992183][T12847] rfkill_fop_write+0x43b/0x560 [ 293.997065][T12847] ? apparmor_file_permission+0x1f4/0x300 [ 294.002825][T12847] ? __pfx_rfkill_fop_write+0x10/0x10 [ 294.008232][T12847] ? security_kernfs_init_security+0x210/0x270 [ 294.014407][T12847] ? rw_verify_area+0x203/0x4c0 [ 294.019280][T12847] ? tun_chr_write_iter+0x18a/0x200 [ 294.024500][T12847] ? __pfx_rfkill_fop_write+0x10/0x10 [ 294.029893][T12847] vfs_write+0x296/0xba0 [ 294.034164][T12847] ? __pfx_vfs_write+0x10/0x10 [ 294.038945][T12847] ? __fget_files+0x2a/0x420 [ 294.043557][T12847] ? __fget_files+0x2a/0x420 [ 294.048161][T12847] ? __fget_files+0x3a2/0x420 [ 294.052859][T12847] ? __fget_files+0x2a/0x420 [ 294.057467][T12847] ksys_write+0x150/0x270 [ 294.061832][T12847] ? __pfx_ksys_write+0x10/0x10 [ 294.066711][T12847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.072795][T12847] do_syscall_64+0x174/0x580 [ 294.077406][T12847] ? trace_irq_disable+0x3b/0x140 [ 294.082449][T12847] ? clear_bhb_loop+0x70/0xc0 [ 294.087147][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.093057][T12847] RIP: 0033:0x7f185779e0d9 [ 294.097486][T12847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.117108][T12847] RSP: 002b:00007f185867f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.125573][T12847] RAX: ffffffffffffffda RBX: 00007f1857a26180 RCX: 00007f185779e0d9 [ 294.133593][T12847] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b [ 294.141575][T12847] RBP: 00007f1857835024 R08: 0000000000000000 R09: 0000000000000000 [ 294.149562][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.157544][T12847] R13: 00007f1857a26218 R14: 00007f1857a26180 R15: 00007ffdf230e7d8 [ 294.165541][T12847] [ 294.168592][T12847] Modules linked in: [ 294.174620][T12847] ---[ end trace 0000000000000000 ]--- [ 294.185926][T12847] RIP: 0010:klist_remove+0x156/0x340 [ 294.191306][T12847] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 0d 83 6d f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ee 82 6d f6 49 8b 44 24 58 48 89 44 24 08 [ 294.210953][T12847] RSP: 0018:ffffc90004ab7820 EFLAGS: 00010202 [ 294.217067][T12847] RAX: 000000000000000b RBX: ffff88801db5be00 RCX: 0000000000000000 [ 294.240149][T12847] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 294.248195][T12847] RBP: ffffc90004ab7920 R08: ffffffff903d14a3 R09: 1ffffffff207a294 [ 294.256208][T12847] R10: dffffc0000000000 R11: fffffbfff207a295 R12: 0000000000000000 [ 294.264227][T12847] R13: 1ffff1100a78c80c R14: ffff888053c64060 R15: dffffc0000000000 [ 294.272243][T12847] FS: 00007f185867f6c0(0000) GS:ffff88812505b000(0000) knlGS:0000000000000000 [ 294.303144][T12847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.322918][T12847] CR2: 0000556f945da950 CR3: 000000002ad56000 CR4: 00000000003526f0 [ 294.331312][T12847] Kernel panic - not syncing: Fatal exception [ 294.341555][T12847] Kernel Offset: disabled [ 294.345899][T12847] Rebooting in 86400 seconds..