last executing test programs: 8.347061704s ago: executing program 3 (id=7938): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r5}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, '\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x8, &(0x7f00000000c0)=[{0x3, 0x70, 0x7, 0x3}, {0x81, 0x4, 0x8, 0x2}, {0x0, 0x0, 0x2, 0xffffff5c}, {0x1000, 0x41, 0xe, 0x8}, {0x1, 0xd6, 0x8, 0x6}, {0x6, 0xe4, 0xd, 0x5}, {0x0, 0x8, 0x80, 0x7f}, {0x9, 0x4d, 0x5, 0x1}]}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1f7}], 0x1}, 0xff00) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) recvmmsg(r7, 0x0, 0x0, 0x10162, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f00000002c0)) syz_emit_ethernet(0x50, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1a, 0x11, 0x0, @remote, @local, {[@fragment={0x17, 0x0, 0x80, 0x0, 0x0, 0x19, 0x67}], {0x3, 0xe22, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, "ffb00afe4e70"}}}}}}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}}, 0x4044000) 7.401539166s ago: executing program 1 (id=7942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000008300008500f1ff"], &(0x7f0000001100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000001b3e72a5b1a7d40113618801000000"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e00000007000000060000000000000080040000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000030000000a0000000000000000d6970000000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="e0000002ac1414bb000000000300"], 0x1c) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008500)=@newtfilter={0x3548, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3518, 0x2, [@TCA_CGROUP_EMATCHES={0x2bc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x10, 0x8, 0xfff}, {0x0, 0x4, 0x4}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0xd, 0x2, 0xa}, {0x7, 0xa, 0x0, "e3135e33494a8ed5aa3f"}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x4, 0x0, 0xce}, "01df"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff, 0x3, 0x8}, {0x40, 0xfffffff7, 0x2f6, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fe, 0x3, 0xfff9}, {0x8001, 0x8, 0x5, 0xfff}}}]}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_META={0x94, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="71a274d3f958c65b", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="9f112e7f063433b6", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="49c04b8a92c642bd56e9", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x6, 0x2}, {0x401, 0x40, 0x1}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="fa41a5", @TCF_META_TYPE_VAR="39c1", @TCF_META_TYPE_VAR="47d48d"]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="ec30dd79bbfd3b", @TCF_META_TYPE_VAR="5efd666d"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="e4", @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0x6}, {0x2, 0x2, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x400, 0x8, 0x8}, {0x0, 0x1, 0x3}}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x8000, 0x2, 0x1}, {0x7fff, 0xa, 0x2, "70a926daa225f626c3b3"}}}]}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0xf801}, {{0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x90, 0x2, 0x0, 0x0, {{0x8001, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f2b980ab88a3bf", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="acc61fd7f7ebdd", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="91494f", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="e32a771736"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x32, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3f0d490193", @TCF_META_TYPE_VAR="a1346a291c6e9896", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ddcc598284dc449326", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CONTAINER={0x78, 0x3, 0x0, 0x0, {{0xe71e, 0x0, 0xfffd}, "2e597f69920a40c17bc188768cf313bee1b3a3c0871c585fc92b213c72a810111132f6203ba84deb568d158ec6dd60fa0e81886055f0bcf8d65e89ae95cceb5733b226af2c92b2739b4bbf6f0269086c3682acc273f198a2c503f7d98c6c5f8ffdc052f586b514b101"}}]}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x8}, {0x0, 0x2, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x59, 0x8, 0x5}, {0x2, 0x5, 0x3}}}]}]}, @TCA_CGROUP_ACT={0x3258, 0x1, [@m_ct={0x100, 0x8, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "c5f5a9c1a5df8f07d2e235fcbe75af8b"}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x400}, @TCA_CT_PARMS={0x18, 0x1, {0xffff, 0x1, 0x5, 0x6, 0x7}}, @TCA_CT_ACTION={0x6, 0x3, 0x1c}, @TCA_CT_LABELS={0x14, 0x7, "6b388f98eda0bbc871352cf80e443b14"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "b1f6503ce24df538cca4bb7401c92866"}, @TCA_CT_ZONE={0x6, 0x4, 0xffff}]}, {0x62, 0x6, "60ce4b2fb29d28db643cff6881bf72df3bcd30dd914498a607743b61623eb692b76eee4f1fa2cd7267a8701cfd15078601e6fa2986c3144594f65bc47220d7db0cb942a490584122296cd766867b206250b03ae58588bf9804fa2c396558"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0xa0, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0x78, 0x6, "3e34bf25a342b5aa1f3d7133c50a82ca99928e5e2c4bcb7c9d5c4af7fff5d934fdf401f432de38c5fac0996f0e61e57cb85e47cf76cf66b1554bb3a7dfea8934aa40be50040f5eb398bc0e6818f913f3baf5e34dbdd89dfad09ecd42cfee03d03e90d3f6b4b9ce184bf3acaf33888d85855448e2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2f1c, 0x6, 0x0, 0x0, {{0xb}, {0x2e90, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x6, 0xe3d, 0x10, 0x9, {0x6, 0x1, 0x9, 0x20, 0x6, 0x918}, {0x12, 0x1, 0x4, 0x0, 0x4, 0x8eb}, 0x6bb, 0x4, 0x40}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000004, 0x8, 0x5, 0x2, {0x1, 0x1, 0x6, 0xfff8, 0x81, 0x8}, {0x4b, 0x1, 0x9, 0x1b, 0x90, 0xa89}, 0x3, 0x81, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x673}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x1, 0x3, 0x7, 0x9d4a, 0x8, 0xe4, 0x0, 0x7, 0xa0, 0x200, 0xfcc, 0x7a8, 0x81, 0x9, 0x7, 0xdd000000, 0xfffff001, 0x5, 0x8, 0x6, 0x1, 0x101, 0x101, 0x0, 0x8, 0x5, 0xd0, 0x1, 0x4, 0x6, 0x80, 0xfffffff8, 0x4, 0xffff, 0x9, 0xe, 0x2, 0xffff, 0x1, 0x7ff, 0x5, 0x5, 0x2, 0x8004, 0x8, 0x5, 0x1, 0x7, 0x9, 0x4, 0x7280, 0xffffff18, 0x7, 0x80000000, 0x1, 0x5, 0x4, 0x9, 0x3, 0xa, 0xf2, 0x8, 0x2, 0x2, 0x7, 0x2, 0x3d6, 0x401, 0x7, 0x3, 0x6, 0x3, 0x0, 0x1, 0x4, 0x3, 0x2, 0x5, 0xfffffffd, 0x9, 0x0, 0x3, 0x8, 0x0, 0x2, 0x8, 0xd5a9, 0x7, 0xffffffb4, 0x124b, 0x2, 0x1000, 0x669, 0x5, 0x4, 0x1, 0x1, 0x5, 0xdbdf, 0x3, 0x8, 0x0, 0x5, 0x8, 0x7f, 0x7f, 0x25fa, 0x5, 0x3ff, 0x2, 0x3, 0xfffffffa, 0x2, 0x5, 0x8, 0x0, 0xffffff04, 0x8, 0x8, 0x0, 0x7f, 0x5, 0x87, 0x265, 0x2, 0x1, 0x7, 0x4, 0x8, 0x7, 0xfdf5, 0xe, 0x1, 0x5, 0x9, 0x1, 0x800, 0x1df, 0x3, 0x9, 0x7, 0x4ddff1d6, 0x1600, 0x81, 0x1, 0xc492, 0x3a55b8ca, 0x400, 0x9, 0x3, 0x3, 0x7, 0x8, 0x6, 0x3, 0x100, 0x4, 0x2, 0x3, 0x3, 0x0, 0x7, 0x90, 0x0, 0x100, 0x3fe, 0x3ff, 0x7c57, 0x8, 0x40, 0x8001, 0x4, 0xbc0e, 0x7f, 0x0, 0x200000, 0x0, 0x4a6e9b98, 0xfff, 0x2, 0x7, 0x5, 0x0, 0x4005, 0x4, 0x1, 0x4, 0xd5, 0x10001, 0xb, 0x1, 0x5, 0x79473b36, 0x6, 0xfffffffb, 0x4, 0x7, 0x0, 0x200008c5, 0x9, 0x1, 0xd4, 0x9, 0x79e2, 0x0, 0x0, 0x1ff, 0x8299, 0x449, 0x1, 0x54108879, 0xff, 0x2, 0xa3e1, 0x1ff, 0x1, 0x5, 0x7fffffff, 0xbed, 0x80000000, 0x7, 0x5, 0x1ff, 0x7, 0x0, 0x3, 0x200, 0xffffffff, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0x7f, 0x101, 0x8, 0x6, 0xee5, 0x1ff, 0x8, 0x0, 0x5, 0x0, 0x6, 0x876e, 0x3ff, 0xbf, 0xe23f, 0xa, 0x5, 0xfffffffa, 0x10, 0x0, 0xfffffffa, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf17c}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1d4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x12}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb1, 0x8, 0x0, 0xe, 0x1, {0x1, 0x0, 0x3, 0xfffd, 0x2, 0x8}, {0x3, 0x2, 0xffff, 0x80, 0x6, 0x8}, 0x1, 0xac500, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7f0cb06d, 0x3, 0x5, 0x81, 0xa0c7, 0x0, 0xfffffffb, 0x6, 0x8, 0x4, 0x1, 0x7, 0x101, 0x7, 0x2, 0x24, 0x3, 0x9, 0x8a20, 0x1, 0xa, 0xfffffffa, 0x9, 0x3, 0x6, 0x1000, 0x6ad0, 0x80000000, 0x501, 0x6, 0x2, 0x6, 0x7, 0x6, 0x80, 0x4, 0x3ff, 0x4, 0xdd3, 0x7, 0x4, 0x3, 0x10001, 0x5, 0x7, 0xb, 0x7, 0xa9c, 0x7ff, 0x2, 0x200, 0x1, 0x2, 0x4, 0xfffffffa, 0x8, 0x827e, 0x4f, 0x600, 0x2, 0xfffff05e, 0x0, 0x0, 0x70, 0x3, 0x1, 0xc5e, 0x400401, 0x8, 0x6, 0x7, 0x9, 0x8, 0x7, 0xfffff1df, 0x811, 0x5, 0x0, 0x3, 0xfffffff8, 0x1, 0x4, 0x9, 0x3, 0x8001, 0x8, 0x10, 0x513, 0x0, 0xffff, 0x4, 0x3ff, 0x8000000, 0x0, 0xc, 0x7, 0x8, 0x1, 0x3, 0x1, 0x6, 0x4, 0x6, 0x2, 0x9, 0x10000, 0x2, 0x21, 0x2, 0x4, 0x1ff, 0x7, 0x1, 0x0, 0x1, 0x7, 0x1, 0x4, 0xfffffffc, 0x1, 0xa, 0x200, 0x9, 0xa, 0x0, 0x80000000, 0x0, 0x0, 0x7ff, 0x1, 0x80000001, 0x3, 0x6a4ad14c, 0x5, 0x3, 0x7, 0xf8ed, 0xb1, 0x4, 0x2, 0x800, 0x5, 0xd, 0xffffffff, 0xffff, 0x7, 0xd68e, 0x9, 0x7, 0x9, 0x1, 0x1, 0x1, 0x2a74, 0x498, 0xe, 0x9, 0x3c, 0x5, 0x2, 0x8, 0x7, 0x83f, 0xa8, 0xe26c, 0x7, 0xd, 0x10001, 0x5, 0x6, 0x7, 0x101, 0x7, 0xe, 0x5, 0x3, 0x7fff, 0x5, 0xaf, 0x2, 0x9, 0x4a6c, 0x1, 0x7, 0xff80f2ff, 0x7, 0x1ff, 0x5, 0x6, 0x6, 0xf49, 0x10000, 0x6, 0x3, 0x1, 0x7, 0x5, 0x83, 0x2, 0x1, 0xc21e, 0x7, 0x5, 0x0, 0x5, 0x6, 0x3, 0x4, 0xfffffffa, 0x10000, 0x7, 0x8, 0xfffffff7, 0x1ff, 0x8, 0x0, 0x0, 0x3, 0x5, 0x8, 0x0, 0x1, 0x3, 0x4, 0x1, 0x5, 0x70, 0x4, 0x8, 0x6e6, 0xffffffff, 0x1000, 0x2, 0x370, 0x101, 0x0, 0xfffffff8, 0x2, 0x8, 0x2, 0x400, 0x9, 0x4, 0xfffffff9, 0x8, 0xf, 0x400, 0x8001, 0x5, 0x2, 0x149, 0xfb7, 0x66a5, 0x5, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xead9, 0x3ff, 0xffff, 0xffffffff, 0xffffffff, 0x200, 0x6, 0xd58, 0xb4, 0x5, 0x4, 0x8, 0xf7ff, 0x6, 0x0, 0x9, 0x8, 0x5, 0x5, 0x451, 0x8, 0x561, 0xa7cd, 0x5a, 0x0, 0x1ba, 0x9, 0x5, 0x1, 0x9931, 0x80000001, 0x1, 0x4, 0x8, 0x9, 0x5, 0xe2b, 0x2, 0x3, 0x5, 0x2, 0x6, 0x8, 0x6, 0x36, 0x56, 0x7fff, 0x101, 0x17, 0x5, 0x6, 0xfba, 0x1de, 0x8, 0x0, 0x1, 0x4, 0xfffffc01, 0x26ceb2f7, 0x9, 0x7fff, 0x8001, 0x8, 0x6, 0x2, 0x9, 0x800, 0xa, 0x2, 0x67c, 0xecdf, 0x7, 0x6, 0x1000, 0x0, 0x101, 0x7, 0x8, 0x5, 0x0, 0x5, 0x4, 0x8, 0x7, 0x400, 0xff, 0x1, 0x1000, 0xfffffff9, 0xd, 0x5, 0x5, 0x1, 0x8021, 0x2, 0xbfc, 0x6, 0x0, 0x1ff, 0x8, 0x5, 0x5, 0x100, 0xe4a, 0x1, 0x7, 0x3, 0x8, 0x0, 0xf, 0x1ff, 0x0, 0x2, 0x8, 0x7, 0xee, 0x8, 0x101, 0x8001, 0x1000, 0x80000000, 0x400000, 0x2, 0x1, 0x7119, 0x6, 0x8, 0x2, 0x5, 0x8, 0x8, 0x13f, 0x5, 0x4, 0xd1b9, 0x1, 0x4c5, 0x80000001, 0x8000, 0x2, 0x400, 0x9, 0x7, 0x7, 0xcd44, 0xb, 0xffffffff, 0x3, 0x8a1, 0xd88a, 0x0, 0xff, 0x5, 0x4, 0xc, 0x6, 0x5b, 0x7, 0x14000, 0x5, 0xc, 0x0, 0x9, 0x6, 0x7fff, 0x1000, 0xfffffffa, 0x6, 0x7d, 0x9, 0xa, 0xfffffff6, 0x3ff, 0x5, 0x3, 0x800, 0x6, 0x3, 0x101, 0xf9, 0x10, 0x10, 0xfffffff6, 0x6, 0xc0000000, 0x9, 0x0, 0x3b7, 0x4, 0xffffffff, 0x5, 0x7f, 0x0, 0x1, 0x3, 0x0, 0x8, 0x40000000, 0x5, 0xf, 0x7, 0xfffffffc, 0xf, 0x5, 0x10, 0x0, 0x13a8000, 0x4, 0xfffffff1, 0x3, 0x7, 0x9, 0x0, 0x1, 0x3, 0x8, 0x6, 0x4, 0xae7, 0x5, 0x8, 0x6, 0x9, 0x80000000, 0xc, 0x7, 0x2, 0x6, 0x3, 0x4, 0xef, 0x1, 0x1, 0xfffffffe, 0x4b4, 0x5de0ae00, 0xfff, 0x4, 0x0, 0x8001, 0x39, 0x2, 0x9e9c, 0xff3a, 0x7, 0x2, 0x987, 0xa, 0x9bd, 0x2, 0x6, 0xbc3c1b4, 0x7, 0x7, 0x3, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0xd0c, 0xff, 0x5dc, 0x2, 0x6, 0x5, 0xfffff494, 0x5, 0x5, 0x8, 0xffffffff, 0x80000000, 0x8, 0xfffffffd, 0x0, 0x6, 0x1, 0x9, 0x9, 0x5, 0x1000, 0x0, 0xfffffeff, 0x10001, 0x1, 0x101, 0x4, 0x4, 0x6aa, 0x20000009, 0x4, 0x2, 0x9, 0xbf4, 0xf63, 0x605, 0x5, 0x2bdd, 0x1cb3, 0x5, 0x7ff, 0x7, 0x5, 0xf, 0x42eecebc, 0x2, 0x8, 0xffffffff, 0x9, 0x6, 0x2, 0x7ff, 0x10001, 0x4, 0xb, 0x7, 0x9, 0x10001, 0x101, 0x8, 0x4f, 0xc798, 0xffffffff, 0x8, 0x4, 0xbe, 0x5, 0xffffffff, 0xffffffff, 0x5, 0x7, 0x7, 0x1545, 0x81, 0x5, 0x5, 0x80, 0x0, 0x8, 0xc1, 0x2, 0x0, 0x8, 0x2, 0x5, 0x0, 0x9, 0x7, 0x8, 0x7, 0x6, 0x6, 0x4, 0x5, 0x6, 0x10000, 0x5, 0xfff, 0x10000, 0x8ba1, 0x2, 0x1, 0x3, 0x6, 0x0, 0x4, 0x9, 0x0, 0xf, 0x80000001, 0x80000001, 0xc7f, 0x7, 0x4, 0x4, 0xb5, 0x49, 0x400, 0x10000, 0xffff, 0x1, 0x4, 0xaf3, 0x3, 0x2, 0x1ff, 0x8001, 0x1, 0x60, 0x4, 0x3, 0x2, 0x0, 0x41ef, 0x3ff, 0x10001, 0x71, 0x1, 0x9, 0x80, 0xfffffffb, 0x800, 0x647, 0x7, 0x1, 0x2, 0x1, 0xa, 0x2, 0x5, 0x8, 0x9, 0x401, 0x5, 0x3, 0x6085, 0x800, 0x6, 0xd, 0x5, 0x0, 0x3df4, 0x6, 0xd9, 0x17, 0xffff0000, 0x1ff, 0x2, 0x8, 0x838, 0x4, 0x9, 0x10001, 0x3, 0xfffffeff, 0x3ff, 0xfffffffb, 0x7, 0xfffffffd, 0x7e1, 0x5, 0x9, 0x9, 0x2, 0x2, 0x2, 0x0, 0xfffffeff, 0x1, 0x5, 0x4c75267c, 0x200, 0x7ff, 0x3, 0x7d0d, 0x1ff, 0x7f, 0x78c, 0x3, 0x37a1, 0xfffffffc, 0x8, 0x9, 0x4, 0xffff, 0x65eb, 0xfffffff7, 0x1b67, 0x4, 0x0, 0x578, 0x1000, 0x5, 0x3, 0x2ec6, 0x7, 0x9, 0x400, 0x3, 0xfffffff8, 0xc675, 0xff, 0xfffffffd, 0xffffff7f, 0xfffffffb, 0x2, 0x80000000, 0x7fffffff, 0x2, 0x3, 0x3, 0x5, 0x84, 0xf4, 0x2, 0xcc, 0x4, 0x10000, 0x7fff, 0x0, 0x3, 0x5, 0x3, 0xb980, 0x3, 0x1, 0x1, 0x5, 0x80000000, 0xffffff01, 0x1c, 0xd77, 0x9, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x80000001, 0x1, 0x5, 0xa, 0x85dee91, 0x8, 0x3, 0x10000, 0x315, 0x10001, 0x7, 0x2, 0xfffffff7, 0x7fff, 0x0, 0xfffffe00, 0x6, 0x9, 0x8, 0x7fff, 0x80000000, 0x3, 0x8, 0x7fffffff, 0x10000, 0x72b, 0x5, 0x5, 0x6, 0x9, 0x5, 0x1ff, 0x812, 0x100, 0x7, 0x6, 0x0, 0x2, 0x19aedb18, 0xa7c7, 0x8, 0x1, 0x8, 0x0, 0xfffffffa, 0x7fff, 0x7f, 0xb, 0x1, 0xf, 0x3, 0x1, 0x4, 0xfe000000, 0x2, 0xb4, 0xfffffffc, 0x10000, 0x4e, 0x8, 0x3, 0x5, 0x3, 0x4e, 0x3, 0x64, 0x3, 0x2, 0x1, 0x4, 0x5, 0xe4a, 0x0, 0x81, 0x5, 0xd99a, 0x2, 0x7ff, 0x0, 0x80, 0x5, 0x3, 0xfffffff3, 0x3, 0x26cf16e8, 0x0, 0x80, 0x10000, 0x10, 0x115, 0xe, 0x3ff, 0x3, 0x501, 0x7, 0xf99, 0x5, 0x0, 0x96, 0xffff848a, 0xfffffff9, 0x9, 0x7, 0x3, 0x7fff, 0xb, 0x6, 0x1000, 0x5, 0x3, 0x10001, 0x100000, 0x1, 0xe, 0x6, 0xffffffff, 0x2, 0x7fff, 0x4, 0x9, 0x2, 0x7, 0x2, 0x1, 0x2, 0x6, 0x7, 0x6, 0x8, 0xffffff60, 0xcd7, 0x1, 0x5, 0x2, 0x0, 0x2, 0x8, 0x8, 0x4, 0xe0, 0x8001, 0x9, 0x4, 0x94d, 0x7c4, 0xffff, 0x369, 0x8001, 0xffff0001, 0x6, 0x0, 0x8, 0x8, 0x7d, 0x7, 0x1, 0x3, 0x6, 0x5, 0x7ff, 0x2, 0x1, 0x6, 0x1ff, 0x81, 0x4, 0x0, 0x9, 0x7e1, 0x2800, 0x7, 0x33da, 0x3, 0x9, 0x8d19, 0x5, 0xfff, 0xb, 0x9, 0x0, 0x10, 0x6, 0x9, 0x0, 0xfffffe00, 0x2, 0x2, 0x0, 0x2, 0xfffffe00, 0x2, 0x1, 0x6, 0x9, 0x6, 0x6, 0xa011, 0x8, 0x7, 0x6, 0x800, 0x6, 0x5, 0x81, 0x85, 0x4, 0xf, 0x2, 0x6, 0x1, 0x7, 0x9, 0x0, 0x1, 0xa, 0x6, 0xfffffff7, 0x7, 0x4, 0x2924a518, 0x6, 0x6, 0xb49e, 0xd4, 0x10, 0x9714, 0xd3, 0x6, 0x1a7, 0x2, 0x9, 0x3, 0x8, 0x7, 0x4, 0x81c, 0x0, 0xb4, 0x5, 0x2, 0xd3, 0x401, 0xcef, 0x1, 0xfffffffc, 0x0, 0xfffffff1, 0xfffffffa, 0xd23, 0x6, 0x5f, 0x0, 0x5, 0x4, 0x8]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x4, 0x9, 0x4, 0xeb, 0x6, 0x0, 0xdb, 0x9, 0x8, 0x6, 0xb2f, 0xde, 0x7, 0x0, 0xffff37d4, 0x4e4, 0x800, 0x3, 0xad311dcd, 0x7, 0x4, 0xffffff7f, 0xbd, 0x305, 0x40, 0x1bb, 0x7cdb8839, 0xdf6, 0x9, 0x1, 0x5, 0x9, 0x8, 0x1, 0x10, 0x5, 0xffffffd9, 0xfffffffc, 0x9, 0x4, 0x7, 0x5, 0xbffffffe, 0x400, 0x87d000, 0x492, 0xffffffff, 0x1, 0x7fff, 0x3, 0x8, 0x7, 0x2, 0x62d3, 0x67, 0x4, 0x1, 0x4, 0xeb31, 0x7, 0xfff, 0x1, 0xb, 0x0, 0x7f, 0xf6bc, 0xf, 0x5, 0x200, 0x1, 0x52, 0x4, 0x6a5, 0xe7, 0x0, 0x1, 0x4d3, 0x9ab3, 0x2, 0x3, 0x380000, 0x101, 0x401, 0x6c, 0xa, 0x5, 0x10001, 0x2fa3, 0x3, 0x5, 0xff, 0x6, 0x8, 0x1, 0x311, 0x4, 0x80, 0x800, 0x0, 0x5, 0xe, 0x5, 0x0, 0x7, 0x1000, 0x5, 0x2be, 0x8dc, 0x3, 0x101, 0x5, 0x2, 0x4, 0x9, 0x1, 0x9, 0x8, 0x1000, 0x40, 0x4, 0x401, 0xff, 0xc, 0x1, 0x3, 0x8, 0x8, 0x81, 0x8, 0x34, 0xf80, 0x8, 0x8, 0x1000, 0x5, 0x0, 0x6, 0x0, 0xe6f9, 0x6, 0x1ff, 0x9, 0x881, 0xd2, 0x6, 0x2, 0x3ff, 0x28e, 0xffff, 0x3, 0x2, 0x9, 0x0, 0x3, 0x9, 0x132bed56, 0x7, 0x1d89, 0x9, 0x4, 0x9, 0x8, 0xe7dd, 0x7, 0x7, 0x1c5c, 0x9, 0x101, 0x9, 0x7ff, 0x2, 0x8, 0x9, 0x5, 0x80, 0x1ec7, 0x1, 0x6117, 0x7, 0xdeb8, 0xffffffff, 0x3, 0xfffffff9, 0x3807, 0x3, 0x7, 0x5, 0x2, 0x3, 0x800, 0x9, 0x401, 0x0, 0x5, 0x2, 0x61, 0x0, 0x8000, 0x9, 0x7f, 0x11f35631, 0x14000000, 0x101, 0x0, 0x1, 0xaff, 0x9, 0x3, 0x1000, 0x401, 0x4, 0xa, 0x3, 0x3, 0xfffffba3, 0xab92, 0x7fff, 0x3, 0x7ff, 0x1, 0xfff, 0x7, 0x4, 0x0, 0x90ec, 0xa5, 0x7, 0x2, 0x0, 0x45, 0xc36, 0x4, 0x5, 0x6, 0x100, 0x7, 0x0, 0x2, 0x81, 0x1, 0x3780737d, 0x9, 0x3, 0x7fffffff, 0x1, 0x7fffffff, 0x6, 0x2bf, 0xae87, 0x4, 0x3, 0x80000000, 0x4, 0xfb1, 0x36e]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x9, 0x9, 0x4, 0x6, 0x400000, 0x2, 0x4, 0xffffffff, 0x10000, 0x4, 0x0, 0x3, 0x400, 0x3, 0x3, 0x2d1a, 0xdbf2, 0x401, 0xe, 0x6, 0xffff7fff, 0x6, 0x5, 0x9be, 0x800, 0x7, 0x4, 0x5, 0x1000002, 0xe, 0x7fff, 0xfffffffb, 0xff, 0x6, 0x401, 0x7, 0x1, 0xdae9, 0x81, 0x401, 0x7, 0xc, 0x0, 0x3, 0x3f91, 0x35, 0x10, 0x6, 0x6, 0xc7d6, 0x4, 0x9, 0x42, 0xff, 0x5, 0xb, 0x4, 0x8, 0x40, 0x8, 0xfffffffd, 0x5, 0x50a, 0x5, 0x1, 0x1ff684bc, 0x6, 0x3, 0xc, 0xa, 0xbd6, 0x6, 0x7f, 0x251, 0x8001, 0x2, 0x4, 0x7, 0xd, 0xfffffc01, 0x6a5, 0x8, 0x5, 0x0, 0x3, 0x2, 0x2, 0x3, 0x9, 0x7, 0x6, 0x14, 0x8, 0x2, 0x3, 0x9, 0x1000, 0x3, 0x1, 0x6, 0xffffffff, 0xd, 0xa2, 0x8, 0x8001, 0x0, 0x5, 0x5, 0x1, 0x1, 0x3, 0x8, 0xbaee, 0x81, 0x800, 0x8, 0x6, 0x3, 0x0, 0x3, 0x7, 0x0, 0x800, 0x515, 0x6, 0x1, 0x6, 0xd4, 0xa, 0x3, 0x5, 0x4f736455, 0x8, 0x7fffffff, 0x100, 0x7, 0x0, 0x9, 0x200, 0xffffffff, 0x1, 0x0, 0x10001, 0x1, 0x8001, 0xe6aa, 0x4, 0x2, 0x3, 0x2, 0x7, 0x1, 0xe, 0x37, 0x0, 0xffffffff, 0x1, 0x81, 0x2f5f, 0x977, 0xa63d, 0x1ff, 0xffffff78, 0x4, 0xffffff7f, 0x5b, 0x0, 0xe957, 0x43, 0x0, 0x4, 0x5, 0x2, 0x3ff, 0x5, 0x6, 0x10, 0x9, 0xffffffff, 0x2, 0x5, 0x6, 0x9d5e, 0x1, 0x6, 0x8, 0xfffffff4, 0x4, 0x2, 0x6, 0xff, 0x0, 0x4, 0xfff, 0x321, 0xf02, 0x1, 0x3, 0x7, 0x3, 0x6, 0x4, 0x81, 0xfe91, 0x7fffffff, 0x6, 0x2, 0x6, 0x1, 0x7, 0x3, 0x5, 0x7fffffff, 0x0, 0x97, 0x1, 0x8, 0x364, 0x0, 0x0, 0x4, 0x6, 0x81, 0xfffffffb, 0x2, 0xc4c, 0xffff, 0x101, 0xb, 0x9, 0x1, 0x6, 0x6, 0x8, 0x10000, 0x10001, 0x7, 0x65f, 0x6, 0x5, 0xff, 0xffff8001, 0x4, 0x5, 0x5, 0x6, 0x1, 0x9, 0x9, 0x9, 0xa2, 0xb1a, 0x5, 0xb2f, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7bc60ae0}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x1, 0x4, 0x6, {0x7, 0x1, 0x4, 0x5, 0x0, 0x8}, {0x1, 0x7, 0xff41, 0x6, 0xa6a7, 0x8000}, 0x6, 0x0, 0x6}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x1, 0xc, 0x8, 0xfffffff8, 0x1, 0x4, 0xc, 0x1, 0x80, 0x4, 0x5, 0xffff, 0xb, 0x200, 0x7, 0x1, 0x7, 0x101, 0x10001, 0x9, 0x4, 0x8, 0x7, 0x80000000, 0x8, 0x1, 0xd84, 0x0, 0x7fffffff, 0x8, 0x5, 0x0, 0xffffffff, 0xf12, 0x7f48, 0x7, 0x8, 0x3, 0xd, 0x5, 0x6, 0x8, 0x4, 0x5e6, 0x2, 0x739, 0x0, 0x8, 0x0, 0xffffffdb, 0x1, 0x0, 0xfff, 0x9be, 0x1, 0x4, 0x4, 0x2, 0x1, 0x3, 0x8, 0x800, 0x0, 0x8, 0x6, 0xa039, 0x9, 0x7, 0x7fffffff, 0xdf1, 0x2, 0x7f, 0x0, 0x8, 0xf6d, 0x0, 0x1, 0x7, 0x8, 0x9, 0x5, 0x2, 0x0, 0x200, 0xfff, 0x7ff, 0x1000, 0x6, 0x2, 0xffff, 0x5, 0x2e0e, 0x51, 0x1ff, 0x3, 0xb, 0x8, 0x10000, 0x7, 0x4, 0x1ff, 0x8001, 0x4, 0x1, 0x1ff, 0x3, 0x81, 0x1, 0x7, 0x0, 0xfffffc01, 0x6024, 0xd, 0xff, 0x7, 0x3ee, 0xffffffff, 0x0, 0x100, 0x40, 0x9, 0x800, 0x400, 0x7, 0x4, 0x61f3, 0x14498a21, 0x8, 0x5eaa, 0x2, 0x4, 0x6, 0x3, 0xba, 0xc, 0xfffffc01, 0x6, 0x81, 0xb, 0x5, 0xfffffff9, 0x6, 0x6, 0x7, 0xe, 0x6, 0x1ff, 0x5, 0xfffffff9, 0x9668, 0x3, 0x5, 0x80000001, 0x0, 0x8000, 0x1000, 0x16c5, 0x7, 0x4, 0x9, 0xfffffffe, 0x10, 0x80000001, 0x14cd, 0x4, 0x1, 0x8, 0xa, 0xaf7a, 0x2, 0x3, 0x5, 0x9, 0x3ff, 0xbf, 0x8, 0x9, 0x101, 0x9, 0x5, 0x2, 0x834d, 0x107, 0x4, 0x7fff, 0x0, 0x8, 0x3, 0x2, 0x0, 0x7, 0x8, 0x5901, 0x9, 0xd, 0x4d, 0x6, 0x9, 0xffff, 0xea8, 0x9, 0xfffffff4, 0x10001, 0x3, 0x73e8, 0x101, 0x3ff, 0xe, 0x4, 0x34, 0xffffffff, 0x1, 0x1, 0xffffffff, 0x1, 0x32000000, 0x0, 0x5bd71ea, 0x9, 0x4, 0x9, 0x1, 0x9, 0x0, 0x200, 0xe, 0xc000, 0x0, 0xe7df, 0xfe44, 0x7, 0xfff, 0x54, 0x3, 0x7f4, 0x19e3, 0x5, 0x2, 0x3, 0x9, 0x0, 0x7, 0xe50c, 0x8, 0x7, 0xffffff7f, 0x6dc, 0xab9, 0x3, 0xfffffffe, 0x7fff, 0x5, 0xfffffff3, 0x3, 0xeb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1393, 0x6, 0x1ff, 0x9, 0x8001, 0x6, 0xf, 0xff, 0x5996a312, 0x7, 0xfc5, 0x0, 0xfff, 0x3, 0x2, 0x4, 0x4, 0x7, 0x3, 0xc, 0xea, 0x3d04, 0x1, 0xffff, 0x7, 0x3, 0xffffffff, 0xfff, 0xff, 0xf993, 0xfffff490, 0x400, 0x683, 0x90000, 0xfffffffd, 0x2, 0x1, 0x80000001, 0x0, 0x8, 0xf, 0x9, 0x82a, 0x3, 0x7, 0x4, 0x9, 0xff, 0x81, 0x2, 0x5, 0x3, 0x7, 0xfffffff9, 0x3ff, 0xac92, 0x7, 0x6, 0xfffffffc, 0x2, 0x441, 0x1, 0x9, 0x3, 0x0, 0x10000, 0x1, 0x722, 0x7fff, 0xfffffff4, 0xd21, 0x4, 0x65bee49a, 0x5, 0x1ff, 0x5, 0x0, 0x7, 0x7, 0x5, 0x800, 0x18, 0xb, 0xa, 0x4, 0x0, 0x43e3, 0x9, 0xfffffadc, 0x0, 0x2, 0x1, 0x200, 0x0, 0x10, 0x5, 0x1, 0x7, 0x9ee0, 0xfffff9f8, 0x1, 0x13bc, 0x10000000, 0xbff, 0x6, 0x7, 0x5, 0xf4, 0x3, 0xa5c, 0x7, 0x401, 0x2cd, 0x46b, 0xe38, 0x0, 0x1, 0x2, 0x0, 0x1, 0x7, 0x7fff, 0x10, 0x2, 0xffffffff, 0xc, 0x7, 0xff, 0xed09, 0x0, 0x4, 0x7, 0x0, 0x7, 0x6, 0x3, 0xf461, 0x0, 0x3, 0x80000001, 0x0, 0xf, 0x50000, 0x4, 0x7d23, 0x6, 0x7, 0x1, 0xe, 0x9, 0xfffffff8, 0xfff, 0x9, 0x3c, 0x2, 0x5, 0x7ff, 0xb, 0x3, 0x2, 0x0, 0xa45d, 0x9, 0x80000000, 0x7, 0x3ff, 0xcda, 0x9, 0x9, 0x6, 0xf82d, 0xf, 0x40, 0x10001, 0xe, 0xc9d8, 0x9, 0x2, 0x6, 0x9, 0x0, 0x1, 0x4, 0x4, 0x1, 0x0, 0x2, 0x0, 0x4, 0x7fff, 0x8, 0x3, 0x4, 0x4, 0x36, 0x9, 0x56, 0xff, 0x39, 0xf15, 0xb50, 0x1, 0x4, 0x3, 0x9, 0x6, 0x1, 0x9, 0x7, 0x77, 0xffffff64, 0x3, 0x6efd, 0x10, 0x5, 0xfffffff8, 0x6, 0x6, 0x80000001, 0x1, 0x2, 0x9, 0xb, 0x6, 0x8001, 0x6, 0x0, 0xfffffff9, 0x1ff, 0x6, 0x1, 0xfffff251, 0x7, 0x81, 0x566d, 0x7, 0xffff, 0x99, 0x4378, 0x10, 0x800, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x4, 0x91, 0x6, 0x1000059f, 0x6, 0x3a, 0xd75, 0x1, 0xd456]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xaa1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x80000001, 0x8, 0xffffffff, {0x1, 0x0, 0x8, 0x2, 0x6, 0x6}, {0x9, 0x2, 0x1b0, 0x100, 0xe, 0x1}, 0x6, 0x0, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0xd2d9, 0xf, 0x0, 0x8, 0x8, 0x10001, 0x9, 0x8, 0x9, 0x2, 0x1000, 0x2e, 0x2, 0x4, 0x3, 0x3, 0x9265, 0x0, 0x5, 0x14a, 0x9, 0x101, 0x0, 0xffffff44, 0x1f19a409, 0x1, 0x0, 0x85, 0x400, 0x1, 0x81, 0x8, 0x8, 0x0, 0x1, 0xffff0000, 0x0, 0x7, 0x3, 0x9, 0x9, 0x1800000, 0x46fb, 0x8, 0x0, 0xf, 0x5, 0x81, 0x401, 0x6, 0x10, 0x5, 0x7000, 0x0, 0x7, 0x4, 0x5, 0x3d0b, 0x2, 0x4, 0x9, 0xb9d, 0x9, 0x7fff, 0x1, 0x4, 0xb2eb, 0x6, 0x8, 0xffffffd7, 0x3, 0x9, 0x1, 0x2, 0x5, 0x7, 0xc8b4, 0x7786, 0xd, 0x1e, 0x7, 0x1, 0x800, 0x2, 0x3, 0x80, 0x0, 0x7, 0xfffff800, 0x9, 0x9, 0x1, 0x6e0, 0x1, 0x6, 0x2, 0x2, 0x1, 0x81, 0xff, 0x7, 0x0, 0x49cb, 0x6, 0x40, 0x57, 0x1, 0x7, 0x8, 0xfffffffa, 0x7, 0x1, 0x1186a0, 0x1, 0x3, 0xc, 0x0, 0x7, 0x8000, 0x8, 0xa5, 0x8, 0x4, 0x800000, 0x9, 0x10001, 0x9, 0x4, 0x6, 0x28, 0x101, 0x2b, 0x7ff, 0x1, 0x5, 0x9, 0x6, 0x8, 0x7, 0x80000000, 0x2, 0xbff, 0x8, 0x6, 0x6, 0x8, 0x1, 0x0, 0x4, 0x8, 0x4, 0x9, 0x1744e9ff, 0x7, 0x10, 0x0, 0x1, 0x6, 0x8, 0x1371056b, 0x9, 0xfffffffd, 0xf08, 0x802, 0x682, 0xd, 0x2, 0x6, 0x220, 0x2, 0x10, 0x6, 0x9, 0x0, 0x4, 0x100, 0x2, 0xa, 0x6, 0x800, 0x2, 0x4, 0x5, 0x7, 0x7, 0x9, 0x5, 0x101, 0xfffffffb, 0xfff, 0xe, 0x5, 0x1, 0xe, 0x2, 0x3, 0x9, 0x2, 0x3f, 0x200, 0x5, 0x8, 0x10, 0x2, 0xb, 0x80000001, 0x3, 0x101, 0x2, 0xb, 0x5433, 0x2, 0x2, 0x7, 0x4, 0x8001, 0x3, 0x8, 0x258c21ca, 0x8001, 0x6, 0x3, 0x2, 0x8, 0x261ca27e, 0x405, 0x69, 0x1, 0x6, 0x7bf14ec, 0x1, 0x9, 0x3, 0x7fff, 0xeb98, 0x80000000, 0x1, 0x4, 0x7fffffff, 0x7, 0x6, 0x9, 0x1, 0x6, 0x4, 0x7ff, 0x5, 0xe, 0x9, 0x10001, 0x2, 0x8, 0x0, 0x80000001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x0, 0x2, 0x1000, 0x4, 0xfffff800, 0x40, 0x81, 0x3, 0x6, 0x1, 0x1, 0xffff25ad, 0x4, 0x8000, 0x6, 0x8, 0x6, 0x6, 0x249, 0x7ff, 0x7, 0x315aea60, 0x8, 0x881, 0x1, 0x7, 0x5, 0xf4, 0x10000, 0x3, 0x8, 0x3, 0x2, 0x8, 0xffffffff, 0x1, 0xfff, 0x5, 0x6, 0x6, 0x665, 0xb, 0xffffffff, 0x0, 0x3, 0x2, 0xfffffffe, 0x1ff, 0x1, 0x2, 0x4, 0xb, 0x3, 0x7, 0x7, 0xc53, 0x3, 0x10001, 0xea, 0x9, 0x4, 0x0, 0x9816, 0x3, 0x77, 0x2, 0xbc, 0x8000, 0x2, 0xffff, 0x7, 0x0, 0x7, 0x81, 0x1000, 0x2, 0xe, 0x0, 0x3, 0xd, 0x7, 0x9dcb, 0xa590, 0x3, 0x4, 0x8, 0x200, 0x7fffffff, 0x10, 0x0, 0x9, 0x549, 0x2, 0x7fffffff, 0x4, 0x1, 0x49, 0x2, 0x8, 0x3, 0x2c, 0xfffffffd, 0x6, 0x30e2, 0xf1, 0x9, 0x401, 0x3, 0x4, 0x5, 0x1ff, 0x2, 0x10000, 0x35d8, 0x3, 0x2c1, 0x100000, 0xf, 0x9, 0x10001, 0xc0b, 0x4, 0x1, 0x5, 0xfffffffb, 0x8001, 0xfffffffd, 0x2, 0xd672, 0x81, 0xfffffffd, 0xd, 0x6, 0x1, 0x7e18, 0xe2, 0xfffffffc, 0x0, 0x9, 0xb, 0xffffffff, 0x6, 0x1b, 0xfffffff7, 0x96d, 0x2, 0x7, 0x40, 0xfffffffe, 0x3ff, 0xc, 0x81, 0x9, 0x0, 0x5dc00000, 0xffffffc0, 0xfff, 0x4, 0x8, 0x2, 0x6, 0x6, 0x4, 0x6, 0x1000, 0x3, 0x8, 0x7ff, 0xb, 0xfffffff9, 0xff, 0x4, 0x0, 0x80000000, 0x1000, 0x7ed6, 0x1fd4, 0x2, 0xffffff81, 0x9, 0x80, 0x1, 0x80, 0x5, 0x9, 0x9, 0x0, 0x1, 0x2, 0x6, 0xa, 0xbbd9, 0x6, 0x7fffffff, 0x2, 0x4, 0x80, 0x7, 0x7ff, 0x1, 0xfffffffe, 0x2, 0x80008001, 0xb, 0x8, 0x6, 0xe8e, 0x9, 0x2, 0xff, 0x5, 0x7fff, 0x8, 0x7fffffff, 0x9, 0xfff, 0x4, 0x6, 0x5, 0xffffffff, 0x3, 0x401, 0x6e53, 0x3ff, 0x400, 0x4, 0x7, 0x35c, 0xd, 0x7, 0xe7f, 0x5, 0x9, 0x0, 0x6, 0x7, 0x10001, 0x1000, 0x4, 0xc, 0x70c, 0x32, 0x9, 0x9, 0x7fffffff, 0x7, 0x134, 0x6, 0x10000000, 0x4, 0xffff, 0x0, 0xd, 0x0, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x7, 0xfffffff7, 0x0, {0x8, 0x1, 0x7, 0x1c, 0x9, 0x9}, {0x8, 0x2, 0x3, 0x2, 0x6, 0x7}, 0x7, 0x0, 0x4}}]]}, {0x61, 0x6, "c6f44374de5dedfc6249d808b3674c84260897885fac3832958bd46af9f797cd7339aa5f90e0703cc0a93f96ac0aa49dbfec5faf03a36113bb17689faad39c3947587bb15691bfaf6eff0d885fdd47541cc1c665510732bec617b29951"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x198, 0x1c, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0xd, 0x3, 0x5, 0x8001}, @local, @rand_addr=0x64010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xcf3, 0x20000000, 0x4, 0x83}, @private=0xa010102, @rand_addr=0x64010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xfffffffb, 0x4, 0xb, 0x7}, @multicast1, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0xc210, 0xffffffffdffffffb, 0x7, 0x8}, @remote, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x64d, 0x2, 0x0, 0x4}, @remote, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc3, 0xb92, 0x20000000, 0x1, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}]}, {0x7e, 0x6, "a5ca259380c2d7604a079d04fdef033d07a71c7a080822f50c11da14754e459974c9c26c16964b6cae01cdead17b854e579d632f00ef23a8e09fcc8e6769920ce2ee8b823f96cd926de1a314e653a3583a278756439ac80e7f3d2e23112852bd573dff01d0cff0b393d39c8715ab69370a89e8575c6596d0b8d1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x3548}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7.35986468s ago: executing program 4 (id=7943): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.306158917s ago: executing program 2 (id=7944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x2000000000000248, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c445}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r3, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6}}, 0x40) (async) syz_emit_ethernet(0xd83, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x0) 7.26501354s ago: executing program 0 (id=7945): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190008000000000001000000fe8800001e00b1ad25891d59d1910101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414aa0000000000000000000000000000000033000000000000000a01010000000000000000000000000000000000010000000500000000000000400000007f000001000000000000000000000000000000006c00000000000000fc000000000000000000000000000001000000000000000081000000000000000000000000000000000000000000000000000000000004d66c0000000a000000e00000010000000000000000000000000135000005"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000ffffff84000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 7.223715052s ago: executing program 3 (id=7946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000320000000000000000008f1"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f2696a2c34bdad30f07c60da70924b8dd1db410b1f880c0ba83a337f8a597d5ae899516d3505191fe64c0cada9e5deda7486f3e42a8462cf8b1792f716088ad42e8e00a4cd", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="140000000100000002000000050104"], 0x48}}, 0x4800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000480)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x10}}, 0x14) 6.526040617s ago: executing program 4 (id=7947): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffff8110a10000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0xfffffffffffffe4c}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, 0x25, 0x109, 0x870bd22, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x3d, 0x0, 0x1, [@generic="78f5fbd2"]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000957}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x850}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000002c0)={0x3, 'wg1\x00', {0x8001}, 0x101}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xb539}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES64=r3, @ANYBLOB="bd9370f10ee8681b6027557ee434cf04cb4f6324f0dc7881090fc488e8d468fa44f7b8dcdaa18d3a58934edcc83db6b2a2ae9ba34a5ddd734e66ad63dd92ccb03d12e1d2f1ed46e1f62e8e83e3919d7ac8e369135da7fe1e9be5dbf49f048418677f02bf5888a14cee6d7e28f500e7039e54f60ccaf816b3cc6224bb8a2b70b7ad9c04df5e1a1465bfcb798aaececded04f1615e16d83b65b3c726ac97af82c57e98410d5f7458604151392fe79990164d0531b16d4cc478c30b01349513a3fa441bed4548250364c7d4ba3ab8723bde"], 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r8, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x8, 0x0, 0x0}}, 0x10) (async) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000300)=0x6) (async) getsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000200)={@private, @remote, @dev}, &(0x7f0000000280)=0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=ANY=[@ANYBLOB="0500000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="940e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05e04d31f7273c7d8a830000000100"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf0000000000000009020000f8ffffffb703000008000000b70400000000000085000000000000000023000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10, r9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800"/32], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r11, 0x0) 6.430589595s ago: executing program 2 (id=7948): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x8000) 6.325545672s ago: executing program 3 (id=7949): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0xc4010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r0, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r1], 0x44}}, 0x2000800) 5.562548506s ago: executing program 0 (id=7950): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x1f, 0x3, &(0x7f0000000400)=@framed, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x200000000000000) 5.554841511s ago: executing program 1 (id=7951): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000940)={&(0x7f0000000140)={0xa, 0x4e24, 0x6, @private1, 0xfca}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="8096673cf9dcaaf6a6fae57dd8a2199f55775de5ad394b027e652a4d9cc5cfd8d594d0ded7ba563b7969bb403d1443bb89ef2336dfb5721c5161d98952530fb6280515efa149a570457995ba120eab7dddf9420c6eb5679da6131463cc52657ec1cf48c55510d8d3f466f9363eea30f900c75964a6f913da4bd57c554188973d148c4b1479", 0x85}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000029000000080000000000000000000000880000000000000029000000390000005e0e01070000000020010000000000000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aafe80000000000000000000000000000b20010000000000000000000000000000fe880000000000000000000000000101fc000000000000000000000000000000180200000000000029000000360000002c3f0000000000000dfe3272b3473dd80624dc71b47094a20e358754312ff559bafff2173975ba57891b0d6800b583b0207eabd906240f14248c4f1d8284146e4043b53c83cd2772c47db3292200fe936b5392367bbaf7816e36888858ddd952df078ba593e4fd595c2cd9dc6a7d62a5035f26e4060cfa03c5d3115dd41fb56adcb6f0d4bf608fd8cb8c9b7134bfc5a055827151761b93a63e6296b63f347e67ab926fbbcaf1bfa8c02e1c7de62727493b357eb1186c43ec8aa7e4285849b00965f4a5f61a00164be2a3dc543b5cef272fd6175ba8de5a78e1219b37d6ac2a5d51e74f086c0077c0fadce6c21742ba868ad34697ee6362b6a86927c0746fd6d82c37005a4788c8d7040108c910fc020000000000000000000000000000040109006d0d4f4c9411119cbc350d6474f155876d6018ebb18ff8bac3896e718258073c9333cd490c5de127b57d1c78b9b156d3fc0fb672e6fc8e2772e8275de15e03c31ce01b77b1ed15af782d891a401f918bd017c864c51a088bf42ea8368dbec6803000a680f0db4ab26e361a5b2fffc910fe8000000000000000000000000000aa025f393bb75f53aaa699fcf3fa82ed1139da15ec13c126e143f871363fe14f11a237960242ebea8f20607374000b40abaec7a4ad064fbacadb0dfb15c108ba57582f8a977e6d29b6df6bc8501fd71bc3f062bb9acc2f43cd3a5e23b872039842cb000000000000"], 0x2b8}, 0x30) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f0000000080)=0x40) 5.427315248s ago: executing program 2 (id=7952): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000ff0000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) 5.267076776s ago: executing program 4 (id=7953): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca", 0xe1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f6", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5", 0x6e}], 0x1}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.997264937s ago: executing program 3 (id=7954): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f00000009c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x0, 0x55, "00f738b0242480a67236d98ea1c345f8c9723d787e6bf974c64655d9df72cec262eb2f0f0dd40e9ba7d6e9154c7ebb5142350f9be4514d223bda09f440d989e41667ac6f611c16dbb95b3b9f99122f7c011bcf3a17"}}, 0x5a) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x800) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000003c0)=@req3={0x9, 0x5437, 0xfffffff1, 0x800, 0x2, 0x3, 0x6}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r5, r5, r5, r5, 0xffffffffffffffff, r5], 0x0, 0x10, 0xfffffffe}, 0xc3) 4.487310095s ago: executing program 1 (id=7955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010100}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x7, 0x0, 0x3}}}}}}, 0x0) 4.085841309s ago: executing program 4 (id=7956): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440), 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce0320e0d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.83328385s ago: executing program 0 (id=7957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r2, 0x0, {0x2, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000440)={&(0x7f0000000380)="07109078bb6978d2b75b0ae9875bf3ec2db0b3318750b7fb29160a0fed434cf6d504f9455fc4b3fd05869fc1cbd7c17d31b4db12ba1faed2ff71ad53e9865b454a557b3991a339a11f438724b227b8f019636ca841846bc04482d6b5cd6b8a60603359d65069f9b848b32d143324abca2e17d6dda26ac7145122370d24b84a7e6f5e7a820094ab8254453d0288dc4c48fb9bbb26c832def3475dc82d8fe2857256f5e3905a9b", 0xa6}, 0x1, 0x0, 0x0, 0x10}, 0x80) 3.131100873s ago: executing program 1 (id=7958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000001b00), 0x0, 0x8000004) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) recvmsg(r2, &(0x7f0000002c00)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1) (async) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2cc]}}, 0x5c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) (async) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000006800050400000000000000000a02ffed00000000080001000100000008000500", @ANYRES32=0x1, @ANYBLOB="060007000400000028000880"], 0x58}}, 0x0) (async) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000002740)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x260, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x448, 0xffffffff, 0xffffffff, 0x448, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'geneve1\x00', 'bridge0\x00', {}, {}, 0x2f}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@srh1={{0x90}, {0x3a, 0x5, 0x2, 0x8, 0xc6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @mcast2, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xff, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 0x2140, 0x440}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x1146, 0x19a}, 0x100, 0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x8, 0x0, 0x74d2, '\x00', 'syz0\x00', {0x959}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff], 'gretap0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x2, 0x5, 0x0, [0x7ff, 0x7, 0x9, 0x3, 0xb, 0xfffc, 0x6, 0x6, 0x7, 0x3, 0x4, 0x9, 0x1, 0x5, 0x23, 0x7478], 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x5, 0x8, 'syz0\x00', 'syz1\x00', {0xa77}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e8) (async) bind$phonet(r9, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e0000002080007400000000010000580"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESDEC=r4], 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018400000fdffffff000000000000000018010000756c6c2500000000002020207bb92d7d33000000bfa100000000000007010000f8ffffffb70200000800000063949f3cdbc1b703000001040000850000009b0000009500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000040)=""/139, 0x8b}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000001740)=""/4076, 0xfec}, {&(0x7f0000000400)=""/33, 0x21}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xf}], 0x3, 0x40000100, 0x0) 2.921022497s ago: executing program 0 (id=7959): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x200000000000000}, 0x38) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.689624292s ago: executing program 3 (id=7960): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190008000000000001000000fe8800001e00b1ad25891d59d1910101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414aa0000000000000000000000000000000033000000000000000a01010000000000000000000000000000000000010000000500000000000000400000007f000001000000000000000000000000000000006c00000000000000fc000000000000000000000000000001000000000000000081000000000000000000000000000000000000000000000000000000000004d66c0000000a000000e00000010000000000000000000000000135000005"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000ffffff84000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.571641801s ago: executing program 1 (id=7961): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0xe, 0x1, 0x0, 0xc, 0x7fffffff}}, {0x4}}]}]}, 0x58}}, 0x0) 2.49937031s ago: executing program 4 (id=7962): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x8000) 2.4389968s ago: executing program 2 (id=7963): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 2.009088771s ago: executing program 0 (id=7964): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 1.675080504s ago: executing program 4 (id=7965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000b6"], 0x44}}, 0x0) r2 = socket(0x2, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x891a, &(0x7f0000000040)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x4, 'team0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20008dbd7000ffdbdf250300000005000100000000002400070073797374656d5f753a6f626a6563745f723a6170745f6cfc8f56ed0e6f636b5f743a73300008000400e00000010500010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) close(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000004500000a400000000cc0000000000000000000000a0000060900020073797a3100000000ff00010073717a310000000014000380100000800c000180060001000000000014000000110001000000000071e500000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r8, 0x8948, &(0x7f0000000480)="a6cc04e2d8f1c3adfbf10b29c56e3a") r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10, r9}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x78, r3, 0x2, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="59509a007738"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ee2f2edc1a48"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @key_params, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.674788218s ago: executing program 1 (id=7966): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca", 0xe1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f6", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5", 0x6e}], 0x1}}], 0x3, 0x2090) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 1.67234146s ago: executing program 2 (id=7967): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec4333", 0xf1}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8009900000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b83", 0xdf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.060745684s ago: executing program 0 (id=7968): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f0000002a00)=ANY=[], 0x0) 878.143758ms ago: executing program 3 (id=7969): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec4333", 0xf1}, {&(0x7f0000000cc0)="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", 0x118}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828", 0x5e}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 2 (id=7970): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 5) kernel console output (not intermixed with test programs): 812.574332][T27714] team0: Port device team_slave_0 added [ 812.676080][T27714] team0: Port device team_slave_1 added [ 812.843373][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.924059][T27714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.959173][T27714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.080644][T27714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.335954][T27714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.390556][T27714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.437841][T27854] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7489'. [ 813.473494][T27857] FAULT_INJECTION: forcing a failure. [ 813.473494][T27857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.504357][T27857] CPU: 1 UID: 0 PID: 27857 Comm: syz.1.7490 Not tainted syzkaller #0 PREEMPT(full) [ 813.504388][T27857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 813.504400][T27857] Call Trace: [ 813.504408][T27857] [ 813.504417][T27857] dump_stack_lvl+0xe8/0x150 [ 813.504452][T27857] should_fail_ex+0x40c/0x560 [ 813.504483][T27857] _copy_to_user+0x31/0xb0 [ 813.504505][T27857] simple_read_from_buffer+0xe1/0x170 [ 813.504539][T27857] proc_fail_nth_read+0x1bb/0x230 [ 813.504571][T27857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.504602][T27857] ? rw_verify_area+0x24a/0x4c0 [ 813.504623][T27857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.504650][T27857] vfs_read+0x213/0xa80 [ 813.504675][T27857] ? __pfx___mutex_lock+0x10/0x10 [ 813.504705][T27857] ? __pfx_vfs_read+0x10/0x10 [ 813.504726][T27857] ? __fget_files+0x2a/0x420 [ 813.504756][T27857] ? __fget_files+0x3a2/0x420 [ 813.504780][T27857] ? __fget_files+0x2a/0x420 [ 813.504814][T27857] ksys_read+0x150/0x270 [ 813.504837][T27857] ? __pfx_ksys_read+0x10/0x10 [ 813.504864][T27857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.504887][T27857] do_syscall_64+0x174/0x580 [ 813.504913][T27857] ? trace_irq_disable+0x3b/0x140 [ 813.504938][T27857] ? clear_bhb_loop+0x40/0x90 [ 813.504963][T27857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.504982][T27857] RIP: 0033:0x7f63e795e90e [ 813.505000][T27857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 813.505017][T27857] RSP: 002b:00007f63e88bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 813.505037][T27857] RAX: ffffffffffffffda RBX: 00007f63e88bc6c0 RCX: 00007f63e795e90e [ 813.505052][T27857] RDX: 000000000000000f RSI: 00007f63e88bc0a0 RDI: 0000000000000004 [ 813.505064][T27857] RBP: 00007f63e88bc090 R08: 0000000000000000 R09: 0000000000000000 [ 813.505077][T27857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.505088][T27857] R13: 00007f63e7c26038 R14: 00007f63e7c25fa0 R15: 00007ffc95ee7718 [ 813.505120][T27857] [ 813.507430][T27714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.842134][T27714] hsr_slave_0: entered promiscuous mode [ 813.887880][T27714] hsr_slave_1: entered promiscuous mode [ 813.914483][T27714] debugfs: 'hsr0' already exists in 'hsr' [ 813.937343][T27714] Cannot create hsr debugfs directory [ 814.032809][ T5634] Bluetooth: hci0: command tx timeout [ 814.211931][T27871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7493'. [ 814.372616][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.380941][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.402494][T27871] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7493'. [ 814.523690][T27871] netlink: 'syz.1.7493': attribute type 6 has an invalid length. [ 814.531990][T27866] netlink: 'syz.0.7492': attribute type 4 has an invalid length. [ 814.597151][T27871] netlink: 'syz.1.7493': attribute type 5 has an invalid length. [ 814.679586][T27871] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7493'. [ 814.725070][T27892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7494'. [ 815.219376][T27905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7499'. [ 815.435930][T27911] sctp: [Deprecated]: syz.3.7500 (pid 27911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 815.435930][T27911] Use struct sctp_sack_info instead [ 815.439568][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.554633][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.575674][T27918] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7502'. [ 815.682076][T27714] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.725162][T27714] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.781686][T27922] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7503'. [ 816.123639][ T5634] Bluetooth: hci0: command tx timeout [ 816.290764][T27714] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.346206][T27714] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.538520][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.756400][T27714] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.858617][T27714] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.113355][T27964] FAULT_INJECTION: forcing a failure. [ 817.113355][T27964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.150736][T27964] CPU: 1 UID: 0 PID: 27964 Comm: syz.1.7512 Not tainted syzkaller #0 PREEMPT(full) [ 817.150765][T27964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.150778][T27964] Call Trace: [ 817.150786][T27964] [ 817.150795][T27964] dump_stack_lvl+0xe8/0x150 [ 817.150831][T27964] should_fail_ex+0x40c/0x560 [ 817.150862][T27964] _copy_from_iter+0x1d3/0x1660 [ 817.150889][T27964] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 817.150917][T27964] ? rcu_is_watching+0x15/0xb0 [ 817.150937][T27964] ? trace_kmem_cache_alloc+0x29/0xe0 [ 817.150964][T27964] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 817.150988][T27964] ? __pfx__copy_from_iter+0x10/0x10 [ 817.151014][T27964] ? __alloc_skb+0x276/0x7a0 [ 817.151034][T27964] ? __alloc_skb+0x276/0x7a0 [ 817.151061][T27964] ? netlink_sendmsg+0x650/0xb40 [ 817.151087][T27964] ? skb_put+0x112/0x210 [ 817.151111][T27964] netlink_sendmsg+0x6c0/0xb40 [ 817.151146][T27964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.151176][T27964] ? aa_sock_msg_perm+0xf1/0x1b0 [ 817.151204][T27964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.151228][T27964] sock_sendmsg_nosec+0x13a/0x180 [ 817.151261][T27964] ____sys_sendmsg+0x54e/0x850 [ 817.151292][T27964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 817.151325][T27964] ? import_iovec+0x73/0xa0 [ 817.151346][T27964] ___sys_sendmsg+0x2a5/0x360 [ 817.151365][T27964] ? __lock_acquire+0x683/0x2cf0 [ 817.151394][T27964] ? __pfx____sys_sendmsg+0x10/0x10 [ 817.151453][T27964] ? __fget_files+0x2a/0x420 [ 817.151479][T27964] ? __fget_files+0x3a2/0x420 [ 817.151523][T27964] __x64_sys_sendmsg+0x1b1/0x290 [ 817.151551][T27964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 817.151594][T27964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.151616][T27964] do_syscall_64+0x174/0x580 [ 817.151642][T27964] ? trace_irq_disable+0x3b/0x140 [ 817.151671][T27964] ? clear_bhb_loop+0x40/0x90 [ 817.151695][T27964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.151715][T27964] RIP: 0033:0x7f63e799e0d9 [ 817.151735][T27964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.151752][T27964] RSP: 002b:00007f63e88bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 817.151773][T27964] RAX: ffffffffffffffda RBX: 00007f63e7c25fa0 RCX: 00007f63e799e0d9 [ 817.151788][T27964] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 817.151801][T27964] RBP: 00007f63e88bc090 R08: 0000000000000000 R09: 0000000000000000 [ 817.151814][T27964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.151826][T27964] R13: 00007f63e7c26038 R14: 00007f63e7c25fa0 R15: 00007ffc95ee7718 [ 817.151857][T27964] [ 817.600421][T27969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7515'. [ 817.846922][T27714] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.918444][T27714] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.983992][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.099363][T27981] syzkaller0: entered promiscuous mode [ 818.108667][T27981] syzkaller0: entered allmulticast mode [ 818.117680][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7516'. [ 818.418092][T27989] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7519'. [ 818.597376][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.716405][T27985] syzkaller0: entered promiscuous mode [ 818.744863][T27985] syzkaller0: entered allmulticast mode [ 818.833008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.843774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.845078][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 818.852400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.020295][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.183271][T28011] netlink: 'syz.4.7524': attribute type 4 has an invalid length. [ 819.236185][T28014] netlink: 'syz.4.7524': attribute type 4 has an invalid length. [ 821.168640][ T6280] net_ratelimit: 1 callbacks suppressed [ 821.168660][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.638812][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.198845][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.239486][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.676473][T27714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 823.701252][T27714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.720000][T28045] syzkaller0: entered promiscuous mode [ 823.726502][T28045] syzkaller0: entered allmulticast mode [ 823.737691][T27714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 823.783332][T27714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 823.847314][T27714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 823.883714][T27714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 823.957892][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.966540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.345176][T28067] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7536'. [ 824.380025][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.410778][T27714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 824.468028][T27714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 824.672794][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.344774][T27714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.411986][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.447475][T27714] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.494166][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.501373][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.568611][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.575837][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.608418][T28102] syzkaller0: entered promiscuous mode [ 825.617420][T28102] syzkaller0: entered allmulticast mode [ 825.872382][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 826.304589][T28130] netlink: 'syz.1.7553': attribute type 7 has an invalid length. [ 826.325202][T28130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.370664][ T30] audit: type=1800 audit(1785921477.995:8): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7556" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1224 res=0 errno=0 [ 826.439103][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.347584][T28168] netlink: 'syz.3.7564': attribute type 4 has an invalid length. [ 827.411151][T28169] syzkaller0: entered promiscuous mode [ 827.431150][T28169] syzkaller0: entered allmulticast mode [ 827.489003][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.612508][T28175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.664527][T28175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7567'. [ 827.716908][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.856360][T27714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.126307][T27714] veth0_vlan: entered promiscuous mode [ 828.168736][T28196] FAULT_INJECTION: forcing a failure. [ 828.168736][T28196] name failslab, interval 1, probability 0, space 0, times 0 [ 828.241062][T28196] CPU: 1 UID: 0 PID: 28196 Comm: syz.3.7573 Not tainted syzkaller #0 PREEMPT(full) [ 828.241091][T28196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.241103][T28196] Call Trace: [ 828.241112][T28196] [ 828.241121][T28196] dump_stack_lvl+0xe8/0x150 [ 828.241157][T28196] should_fail_ex+0x40c/0x560 [ 828.241188][T28196] should_failslab+0xa8/0x100 [ 828.241220][T28196] __kmalloc_noprof+0xfe/0x720 [ 828.241248][T28196] ? tomoyo_encode+0x2ad/0x570 [ 828.241271][T28196] ? tomoyo_encode+0x2ad/0x570 [ 828.241299][T28196] tomoyo_encode+0x2ad/0x570 [ 828.241371][T28196] tomoyo_realpath_from_path+0x5fa/0x640 [ 828.241414][T28196] ? tomoyo_path_number_perm+0x219/0x5f0 [ 828.241446][T28196] tomoyo_path_number_perm+0x246/0x5f0 [ 828.241480][T28196] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 828.241509][T28196] ? __lock_acquire+0x683/0x2cf0 [ 828.241552][T28196] ? hook_file_ioctl+0x1f0/0x5f0 [ 828.241593][T28196] ? __fget_files+0x2a/0x420 [ 828.241623][T28196] ? __fget_files+0x2a/0x420 [ 828.241648][T28196] ? __fget_files+0x3a2/0x420 [ 828.241672][T28196] ? __fget_files+0x2a/0x420 [ 828.241702][T28196] security_file_ioctl+0xc3/0x2a0 [ 828.241735][T28196] __se_sys_ioctl+0x47/0x170 [ 828.241756][T28196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.241778][T28196] do_syscall_64+0x174/0x580 [ 828.241804][T28196] ? trace_irq_disable+0x3b/0x140 [ 828.241829][T28196] ? clear_bhb_loop+0x40/0x90 [ 828.241853][T28196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.241873][T28196] RIP: 0033:0x7f083b79e0d9 [ 828.241891][T28196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.241908][T28196] RSP: 002b:00007f083c594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.241930][T28196] RAX: ffffffffffffffda RBX: 00007f083ba25fa0 RCX: 00007f083b79e0d9 [ 828.241944][T28196] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 828.241957][T28196] RBP: 00007f083c594090 R08: 0000000000000000 R09: 0000000000000000 [ 828.241970][T28196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.241981][T28196] R13: 00007f083ba26038 R14: 00007f083ba25fa0 R15: 00007ffc4ffb2ef8 [ 828.242014][T28196] [ 828.468922][T28196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 828.486059][T27714] veth1_vlan: entered promiscuous mode [ 828.628124][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.669238][T27714] veth0_macvtap: entered promiscuous mode [ 828.680254][T27714] veth1_macvtap: entered promiscuous mode [ 828.704396][T27714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.716243][T27714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.827446][ T80] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.849143][ T80] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.034450][ T1010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.080160][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.358665][T28221] netlink: 'syz.0.7581': attribute type 1 has an invalid length. [ 829.396750][T28210] syzkaller0: entered promiscuous mode [ 829.407404][T28210] syzkaller0: entered allmulticast mode [ 829.429553][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.458090][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.467686][T28221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 829.477083][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.659696][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.011690][T28232] FAULT_INJECTION: forcing a failure. [ 830.011690][T28232] name failslab, interval 1, probability 0, space 0, times 0 [ 830.025093][T28232] CPU: 1 UID: 0 PID: 28232 Comm: syz.0.7585 Not tainted syzkaller #0 PREEMPT(full) [ 830.025120][T28232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.025132][T28232] Call Trace: [ 830.025140][T28232] [ 830.025149][T28232] dump_stack_lvl+0xe8/0x150 [ 830.025184][T28232] should_fail_ex+0x40c/0x560 [ 830.025214][T28232] should_failslab+0xa8/0x100 [ 830.025245][T28232] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 830.025278][T28232] ? local_lock_release+0x9c/0x160 [ 830.025302][T28232] ? __alloc_skb+0x1d7/0x7a0 [ 830.025322][T28232] ? __alloc_skb+0x1d7/0x7a0 [ 830.025350][T28232] __alloc_skb+0x1d7/0x7a0 [ 830.025376][T28232] netlink_sendmsg+0x5d4/0xb40 [ 830.025412][T28232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.025442][T28232] ? aa_sock_msg_perm+0xf1/0x1b0 [ 830.025470][T28232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.025494][T28232] sock_sendmsg_nosec+0x13a/0x180 [ 830.025527][T28232] ____sys_sendmsg+0x54e/0x850 [ 830.025557][T28232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.025591][T28232] ? import_iovec+0x73/0xa0 [ 830.025614][T28232] ___sys_sendmsg+0x2a5/0x360 [ 830.025637][T28232] ? __lock_acquire+0x683/0x2cf0 [ 830.025669][T28232] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.025699][T28232] ? kstrtouint+0x6e/0xe0 [ 830.025749][T28232] ? __fget_files+0x2a/0x420 [ 830.025774][T28232] ? __fget_files+0x3a2/0x420 [ 830.025811][T28232] __sys_sendmmsg+0x273/0x4d0 [ 830.025841][T28232] ? __pfx___sys_sendmmsg+0x10/0x10 [ 830.025878][T28232] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 830.025921][T28232] ? ksys_write+0x242/0x270 [ 830.025943][T28232] ? __pfx_ksys_write+0x10/0x10 [ 830.025969][T28232] __x64_sys_sendmmsg+0xa0/0xc0 [ 830.025994][T28232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.026015][T28232] do_syscall_64+0x174/0x580 [ 830.026041][T28232] ? trace_irq_disable+0x3b/0x140 [ 830.026067][T28232] ? clear_bhb_loop+0x40/0x90 [ 830.026090][T28232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.026111][T28232] RIP: 0033:0x7f6cf7b9e0d9 [ 830.026130][T28232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.026147][T28232] RSP: 002b:00007f6cf8b3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 830.026168][T28232] RAX: ffffffffffffffda RBX: 00007f6cf7e25fa0 RCX: 00007f6cf7b9e0d9 [ 830.026183][T28232] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 830.026196][T28232] RBP: 00007f6cf8b3a090 R08: 0000000000000000 R09: 0000000000000000 [ 830.026208][T28232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.026220][T28232] R13: 00007f6cf7e26038 R14: 00007f6cf7e25fa0 R15: 00007fffe5467168 [ 830.026252][T28232] [ 830.678362][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.753922][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.783056][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.842683][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.866723][ T1010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.899046][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.911494][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.799568][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.933929][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.958608][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.995445][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.120036][T28243] FAULT_INJECTION: forcing a failure. [ 834.120036][T28243] name failslab, interval 1, probability 0, space 0, times 0 [ 834.132911][T28243] CPU: 1 UID: 0 PID: 28243 Comm: syz.3.7591 Not tainted syzkaller #0 PREEMPT(full) [ 834.132948][T28243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.132959][T28243] Call Trace: [ 834.132966][T28243] [ 834.132974][T28243] dump_stack_lvl+0xe8/0x150 [ 834.133015][T28243] should_fail_ex+0x40c/0x560 [ 834.133044][T28243] should_failslab+0xa8/0x100 [ 834.133069][T28243] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 834.133092][T28243] ? dst_alloc+0x105/0x170 [ 834.133225][T28243] ? dst_alloc+0x105/0x170 [ 834.133254][T28243] dst_alloc+0x105/0x170 [ 834.133284][T28243] ip_route_input_rcu+0x20ca/0x3190 [ 834.133357][T28243] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 834.133407][T28243] ? ip_route_input_noref+0xad/0x270 [ 834.133431][T28243] ip_route_input_noref+0x17c/0x270 [ 834.133457][T28243] ? __pfx_ip_route_input_noref+0x10/0x10 [ 834.133485][T28243] ? tcp_v4_early_demux+0x465/0x9c0 [ 834.133538][T28243] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 834.133572][T28243] ip_rcv_finish_core+0x593/0x1c00 [ 834.133612][T28243] ip_rcv_finish+0x14c/0x2a0 [ 834.133644][T28243] NF_HOOK+0x336/0x3c0 [ 834.133700][T28243] ? __pfx_ip_rcv_finish+0x10/0x10 [ 834.133728][T28243] ? NF_HOOK+0x9e/0x3c0 [ 834.133754][T28243] ? __pfx_NF_HOOK+0x10/0x10 [ 834.133782][T28243] ? __pfx_ip_rcv_finish+0x10/0x10 [ 834.133823][T28243] ? netif_receive_skb+0x102/0xbf0 [ 834.133906][T28243] ? __pfx_ip_rcv+0x10/0x10 [ 834.133932][T28243] netif_receive_skb+0x45b/0xbf0 [ 834.133966][T28243] ? __pfx_netif_receive_skb+0x10/0x10 [ 834.133999][T28243] ? rcu_is_watching+0x15/0xb0 [ 834.134016][T28243] ? tun_rx_batched+0x185/0x790 [ 834.134038][T28243] tun_rx_batched+0x1de/0x790 [ 834.134063][T28243] ? __pfx_tun_rx_batched+0x10/0x10 [ 834.134081][T28243] ? tun_get_user+0x2717/0x4370 [ 834.134101][T28243] ? tun_get_user+0x2717/0x4370 [ 834.134120][T28243] ? tun_get_user+0x23cb/0x4370 [ 834.134138][T28243] ? tun_get_user+0x23cb/0x4370 [ 834.134156][T28243] ? __local_bh_enable_ip+0xd0/0x130 [ 834.134178][T28243] ? tun_get_user+0x2717/0x4370 [ 834.134195][T28243] ? tun_get_user+0x2717/0x4370 [ 834.134214][T28243] tun_get_user+0x2b44/0x4370 [ 834.134254][T28243] ? aa_file_perm+0x4ed/0x15f0 [ 834.134279][T28243] ? __pfx_tun_get_user+0x10/0x10 [ 834.134300][T28243] ? __lock_acquire+0x683/0x2cf0 [ 834.134341][T28243] ? ref_tracker_alloc+0x341/0x4b0 [ 834.134366][T28243] ? get_pid_task+0x20/0x1f0 [ 834.134398][T28243] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 834.134426][T28243] ? tun_get+0x1c/0x2f0 [ 834.134454][T28243] ? tun_get+0x1c/0x2f0 [ 834.134488][T28243] ? tun_get+0x1c/0x2f0 [ 834.134516][T28243] ? tun_get+0x1c/0x2f0 [ 834.134547][T28243] tun_chr_write_iter+0x113/0x200 [ 834.134579][T28243] vfs_write+0x612/0xba0 [ 834.134608][T28243] ? __pfx_vfs_write+0x10/0x10 [ 834.134638][T28243] ? __fget_files+0x2a/0x420 [ 834.134672][T28243] ksys_write+0x150/0x270 [ 834.134694][T28243] ? __pfx_ksys_write+0x10/0x10 [ 834.134722][T28243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.134744][T28243] do_syscall_64+0x174/0x580 [ 834.134770][T28243] ? trace_irq_disable+0x3b/0x140 [ 834.134793][T28243] ? clear_bhb_loop+0x40/0x90 [ 834.134823][T28243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.134843][T28243] RIP: 0033:0x7f083b75e90e [ 834.134862][T28243] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 834.134879][T28243] RSP: 002b:00007f083c593fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 834.134900][T28243] RAX: ffffffffffffffda RBX: 00007f083c5946c0 RCX: 00007f083b75e90e [ 834.134914][T28243] RDX: 0000000000000036 RSI: 0000200000000080 RDI: 00000000000000c8 [ 834.134926][T28243] RBP: 00007f083c594090 R08: 0000000000000000 R09: 0000000000000000 [ 834.134938][T28243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.134949][T28243] R13: 00007f083ba26038 R14: 00007f083ba25fa0 R15: 00007ffc4ffb2ef8 [ 834.134981][T28243] [ 834.630867][T28247] netlink: 'syz.1.7592': attribute type 1 has an invalid length. [ 834.681006][T28251] xt_hashlimit: size too large, truncated to 1048576 [ 834.843083][T28247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 834.972678][T28255] @0Ù: renamed from bond_slave_1 (while UP) [ 835.017984][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.577562][T28278] syzkaller0: entered promiscuous mode [ 835.620206][T28278] syzkaller0: entered allmulticast mode [ 836.010480][T28292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7605'. [ 836.050423][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.071722][T28293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7605'. [ 836.223482][T28299] FAULT_INJECTION: forcing a failure. [ 836.223482][T28299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.298799][T28299] CPU: 1 UID: 0 PID: 28299 Comm: syz.4.7607 Not tainted syzkaller #0 PREEMPT(full) [ 836.298828][T28299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.298840][T28299] Call Trace: [ 836.298849][T28299] [ 836.298857][T28299] dump_stack_lvl+0xe8/0x150 [ 836.298892][T28299] should_fail_ex+0x40c/0x560 [ 836.298924][T28299] _copy_to_user+0x31/0xb0 [ 836.298947][T28299] simple_read_from_buffer+0xe1/0x170 [ 836.298980][T28299] proc_fail_nth_read+0x1bb/0x230 [ 836.299011][T28299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 836.299042][T28299] ? rw_verify_area+0x24a/0x4c0 [ 836.299060][T28299] ? tun_chr_write_iter+0x18a/0x200 [ 836.299090][T28299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 836.299117][T28299] vfs_read+0x213/0xa80 [ 836.299141][T28299] ? __pfx___mutex_lock+0x10/0x10 [ 836.299170][T28299] ? __pfx_vfs_read+0x10/0x10 [ 836.299198][T28299] ? __fget_files+0x2a/0x420 [ 836.299230][T28299] ? __fget_files+0x3a2/0x420 [ 836.299256][T28299] ? __fget_files+0x2a/0x420 [ 836.299291][T28299] ksys_read+0x150/0x270 [ 836.299313][T28299] ? __pfx_ksys_read+0x10/0x10 [ 836.299341][T28299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.299363][T28299] do_syscall_64+0x174/0x580 [ 836.299389][T28299] ? trace_irq_disable+0x3b/0x140 [ 836.299414][T28299] ? clear_bhb_loop+0x40/0x90 [ 836.299439][T28299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.299459][T28299] RIP: 0033:0x7f96b015e90e [ 836.299477][T28299] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 836.299494][T28299] RSP: 002b:00007f96b0fc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 836.299514][T28299] RAX: ffffffffffffffda RBX: 00007f96b0fca6c0 RCX: 00007f96b015e90e [ 836.299528][T28299] RDX: 000000000000000f RSI: 00007f96b0fca0a0 RDI: 0000000000000005 [ 836.299541][T28299] RBP: 00007f96b0fca090 R08: 0000000000000000 R09: 0000000000000000 [ 836.299553][T28299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.299565][T28299] R13: 00007f96b0426038 R14: 00007f96b0425fa0 R15: 00007ffea86ac2f8 [ 836.299597][T28299] [ 836.675975][T28303] netlink: 'syz.4.7610': attribute type 1 has an invalid length. [ 836.927522][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.000914][T28313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7608'. [ 837.017980][T28310] FAULT_INJECTION: forcing a failure. [ 837.017980][T28310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.033289][T28310] CPU: 1 UID: 0 PID: 28310 Comm: syz.2.7611 Not tainted syzkaller #0 PREEMPT(full) [ 837.033317][T28310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.033328][T28310] Call Trace: [ 837.033337][T28310] [ 837.033345][T28310] dump_stack_lvl+0xe8/0x150 [ 837.033379][T28310] should_fail_ex+0x40c/0x560 [ 837.033408][T28310] _copy_from_user+0x2d/0xb0 [ 837.033429][T28310] bpf_test_init+0xd8/0x150 [ 837.033459][T28310] bpf_prog_test_run_skb+0x31e/0x2230 [ 837.033502][T28310] ? __fget_files+0x3a2/0x420 [ 837.033528][T28310] ? __fget_files+0x2a/0x420 [ 837.033561][T28310] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 837.033587][T28310] bpf_prog_test_run+0x2c5/0x340 [ 837.033620][T28310] __sys_bpf+0xa22/0xd90 [ 837.033654][T28310] ? __pfx___sys_bpf+0x10/0x10 [ 837.033690][T28310] ? __fget_files+0x2a/0x420 [ 837.033731][T28310] ? ksys_write+0x242/0x270 [ 837.033753][T28310] ? __pfx_ksys_write+0x10/0x10 [ 837.033778][T28310] __x64_sys_bpf+0xba/0xd0 [ 837.033802][T28310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.033824][T28310] do_syscall_64+0x174/0x580 [ 837.033851][T28310] ? trace_irq_disable+0x3b/0x140 [ 837.033876][T28310] ? clear_bhb_loop+0x40/0x90 [ 837.033899][T28310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.033916][T28310] RIP: 0033:0x7f10d9d9e0d9 [ 837.033934][T28310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.033951][T28310] RSP: 002b:00007f10dacda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 837.033971][T28310] RAX: ffffffffffffffda RBX: 00007f10da025fa0 RCX: 00007f10d9d9e0d9 [ 837.033986][T28310] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 837.034006][T28310] RBP: 00007f10dacda090 R08: 0000000000000000 R09: 0000000000000000 [ 837.034018][T28310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.034029][T28310] R13: 00007f10da026038 R14: 00007f10da025fa0 R15: 00007ffd0f6cb3c8 [ 837.034060][T28310] [ 837.034713][T28305] veth5: entered allmulticast mode [ 837.248366][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.325535][T28305] bond5: (slave veth5): Enslaving as an active interface with a down link [ 837.380805][T28308] bond5: (slave veth0_to_bond): making interface the new active one [ 837.425477][T28308] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 837.426022][T28317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7612'. [ 837.900102][T28317] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.390139][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.689273][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.320013][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.393409][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.462795][T28382] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 839.483092][T28385] FAULT_INJECTION: forcing a failure. [ 839.483092][T28385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.542865][T28385] CPU: 1 UID: 0 PID: 28385 Comm: syz.0.7636 Not tainted syzkaller #0 PREEMPT(full) [ 839.542890][T28385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.542902][T28385] Call Trace: [ 839.542910][T28385] [ 839.542918][T28385] dump_stack_lvl+0xe8/0x150 [ 839.542953][T28385] should_fail_ex+0x40c/0x560 [ 839.542985][T28385] _copy_from_iter+0x1d3/0x1660 [ 839.543011][T28385] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 839.543038][T28385] ? rcu_is_watching+0x15/0xb0 [ 839.543058][T28385] ? trace_kmem_cache_alloc+0x29/0xe0 [ 839.543084][T28385] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 839.543109][T28385] ? __pfx__copy_from_iter+0x10/0x10 [ 839.543135][T28385] ? __alloc_skb+0x276/0x7a0 [ 839.543155][T28385] ? __alloc_skb+0x276/0x7a0 [ 839.543182][T28385] ? netlink_sendmsg+0x650/0xb40 [ 839.543207][T28385] ? skb_put+0x112/0x210 [ 839.543232][T28385] netlink_sendmsg+0x6c0/0xb40 [ 839.543267][T28385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.543296][T28385] ? aa_sock_msg_perm+0xf1/0x1b0 [ 839.543324][T28385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.543348][T28385] sock_sendmsg_nosec+0x13a/0x180 [ 839.543380][T28385] ____sys_sendmsg+0x54e/0x850 [ 839.543410][T28385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.543444][T28385] ? import_iovec+0x73/0xa0 [ 839.543467][T28385] ___sys_sendmsg+0x2a5/0x360 [ 839.543490][T28385] ? __lock_acquire+0x683/0x2cf0 [ 839.543521][T28385] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.543580][T28385] ? __fget_files+0x2a/0x420 [ 839.543605][T28385] ? __fget_files+0x3a2/0x420 [ 839.543640][T28385] __x64_sys_sendmsg+0x1b1/0x290 [ 839.543673][T28385] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.543723][T28385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.543744][T28385] do_syscall_64+0x174/0x580 [ 839.543773][T28385] ? clear_bhb_loop+0x40/0x90 [ 839.543797][T28385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.543824][T28385] RIP: 0033:0x7f6cf7b9e0d9 [ 839.543843][T28385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.543860][T28385] RSP: 002b:00007f6cf8b3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.543881][T28385] RAX: ffffffffffffffda RBX: 00007f6cf7e25fa0 RCX: 00007f6cf7b9e0d9 [ 839.543895][T28385] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 839.543908][T28385] RBP: 00007f6cf8b3a090 R08: 0000000000000000 R09: 0000000000000000 [ 839.543920][T28385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.543932][T28385] R13: 00007f6cf7e26038 R14: 00007f6cf7e25fa0 R15: 00007fffe5467168 [ 839.543963][T28385] [ 839.548767][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7634'. [ 839.976713][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.995937][T28376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 840.053897][T28383] netlink: 'syz.4.7634': attribute type 11 has an invalid length. [ 840.119743][T28394] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7639'. [ 840.269325][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7634'. [ 840.278620][T12325] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.298281][T12325] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.339740][T28383] netlink: 'syz.4.7634': attribute type 11 has an invalid length. [ 840.341202][T12325] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.381545][T28402] ip_tables: iptables: counters copy to user failed while replacing table [ 840.399251][T28402] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 840.439510][T12325] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.445568][T28405] FAULT_INJECTION: forcing a failure. [ 840.445568][T28405] name failslab, interval 1, probability 0, space 0, times 0 [ 840.462947][T28406] netlink: 'syz.2.7643': attribute type 1 has an invalid length. [ 840.474533][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.488186][T28405] CPU: 1 UID: 0 PID: 28405 Comm: syz.1.7644 Not tainted syzkaller #0 PREEMPT(full) [ 840.488220][T28405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.488232][T28405] Call Trace: [ 840.488240][T28405] [ 840.488248][T28405] dump_stack_lvl+0xe8/0x150 [ 840.488284][T28405] should_fail_ex+0x40c/0x560 [ 840.488315][T28405] should_failslab+0xa8/0x100 [ 840.488346][T28405] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 840.488372][T28405] ? skb_clone+0x212/0x3a0 [ 840.488396][T28405] ? skb_clone+0x212/0x3a0 [ 840.488428][T28405] skb_clone+0x212/0x3a0 [ 840.488456][T28405] __netlink_deliver_tap+0x413/0x860 [ 840.488497][T28405] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.488524][T28405] netlink_deliver_tap+0x19c/0x1b0 [ 840.488550][T28405] netlink_unicast+0x77f/0x940 [ 840.488585][T28405] netlink_sendmsg+0x813/0xb40 [ 840.488621][T28405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.488651][T28405] ? aa_sock_msg_perm+0xf1/0x1b0 [ 840.488680][T28405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.488704][T28405] sock_sendmsg_nosec+0x13a/0x180 [ 840.488737][T28405] ____sys_sendmsg+0x54e/0x850 [ 840.488768][T28405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.488802][T28405] ? import_iovec+0x73/0xa0 [ 840.488825][T28405] ___sys_sendmsg+0x2a5/0x360 [ 840.488848][T28405] ? __lock_acquire+0x683/0x2cf0 [ 840.488881][T28405] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.488942][T28405] ? __fget_files+0x2a/0x420 [ 840.488968][T28405] ? __fget_files+0x3a2/0x420 [ 840.489004][T28405] __x64_sys_sendmsg+0x1b1/0x290 [ 840.489033][T28405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 840.489076][T28405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.489098][T28405] do_syscall_64+0x174/0x580 [ 840.489127][T28405] ? clear_bhb_loop+0x40/0x90 [ 840.489150][T28405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.489170][T28405] RIP: 0033:0x7f63e799e0d9 [ 840.489189][T28405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.489205][T28405] RSP: 002b:00007f63e88bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.489233][T28405] RAX: ffffffffffffffda RBX: 00007f63e7c25fa0 RCX: 00007f63e799e0d9 [ 840.489247][T28405] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 840.489260][T28405] RBP: 00007f63e88bc090 R08: 0000000000000000 R09: 0000000000000000 [ 840.489273][T28405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.489284][T28405] R13: 00007f63e7c26038 R14: 00007f63e7c25fa0 R15: 00007ffc95ee7718 [ 840.489317][T28405] [ 840.491067][T28405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7644'. [ 840.771996][T28404] netlink: 'syz.2.7643': attribute type 1 has an invalid length. [ 840.822845][T28404] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 840.870730][T28410] FAULT_INJECTION: forcing a failure. [ 840.870730][T28410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.922056][T28410] CPU: 1 UID: 0 PID: 28410 Comm: syz.0.7645 Not tainted syzkaller #0 PREEMPT(full) [ 840.922088][T28410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.922100][T28410] Call Trace: [ 840.922109][T28410] [ 840.922118][T28410] dump_stack_lvl+0xe8/0x150 [ 840.922153][T28410] should_fail_ex+0x40c/0x560 [ 840.922186][T28410] _copy_to_user+0x31/0xb0 [ 840.922206][T28410] simple_read_from_buffer+0xe1/0x170 [ 840.922236][T28410] proc_fail_nth_read+0x1bb/0x230 [ 840.922263][T28410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 840.922291][T28410] ? rw_verify_area+0x24a/0x4c0 [ 840.922312][T28410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 840.922336][T28410] vfs_read+0x213/0xa80 [ 840.922360][T28410] ? __pfx___mutex_lock+0x10/0x10 [ 840.922387][T28410] ? __pfx_vfs_read+0x10/0x10 [ 840.922407][T28410] ? __fget_files+0x2a/0x420 [ 840.922437][T28410] ? __fget_files+0x3a2/0x420 [ 840.922460][T28410] ? __fget_files+0x2a/0x420 [ 840.922491][T28410] ksys_read+0x150/0x270 [ 840.922511][T28410] ? __pfx_ksys_read+0x10/0x10 [ 840.922526][T28410] ? fput+0xa0/0xd0 [ 840.922556][T28410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.922576][T28410] do_syscall_64+0x174/0x580 [ 840.922602][T28410] ? trace_irq_disable+0x3b/0x140 [ 840.922628][T28410] ? clear_bhb_loop+0x40/0x90 [ 840.922661][T28410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.922681][T28410] RIP: 0033:0x7f6cf7b5e90e [ 840.922701][T28410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 840.922718][T28410] RSP: 002b:00007f6cf8b18fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 840.922737][T28410] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 840.922751][T28410] RDX: 000000000000000f RSI: 00007f6cf8b190a0 RDI: 0000000000000004 [ 840.922762][T28410] RBP: 00007f6cf8b19090 R08: 0000000000000000 R09: 0000000000000000 [ 840.922774][T28410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.922786][T28410] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 840.922816][T28410] [ 841.664760][T28436] FAULT_INJECTION: forcing a failure. [ 841.664760][T28436] name failslab, interval 1, probability 0, space 0, times 0 [ 841.706106][T28438] FAULT_INJECTION: forcing a failure. [ 841.706106][T28438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.730226][T28436] CPU: 1 UID: 0 PID: 28436 Comm: syz.1.7656 Not tainted syzkaller #0 PREEMPT(full) [ 841.730253][T28436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 841.730265][T28436] Call Trace: [ 841.730274][T28436] [ 841.730283][T28436] dump_stack_lvl+0xe8/0x150 [ 841.730317][T28436] should_fail_ex+0x40c/0x560 [ 841.730348][T28436] should_failslab+0xa8/0x100 [ 841.730380][T28436] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 841.730410][T28436] ? ip6_setup_cork+0x94d/0xf60 [ 841.730429][T28436] ? ip6_setup_cork+0x94d/0xf60 [ 841.730447][T28436] ? ip6_setup_cork+0x613/0xf60 [ 841.730468][T28436] kmemdup_noprof+0x2b/0x70 [ 841.730497][T28436] ip6_setup_cork+0x94d/0xf60 [ 841.730524][T28436] ip6_append_data+0x175/0x270 [ 841.730544][T28436] ? __pfx_raw6_getfrag+0x10/0x10 [ 841.730572][T28436] rawv6_sendmsg+0x1298/0x18c0 [ 841.730610][T28436] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 841.730665][T28436] ? sock_rps_record_flow+0x19/0x350 [ 841.730689][T28436] ? inet_sendmsg+0x298/0x320 [ 841.730713][T28436] ? __pfx_inet_sendmsg+0x10/0x10 [ 841.730735][T28436] sock_sendmsg_nosec+0x10e/0x180 [ 841.730774][T28436] ____sys_sendmsg+0x54e/0x850 [ 841.730805][T28436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.730839][T28436] ? import_iovec+0x73/0xa0 [ 841.730862][T28436] ___sys_sendmsg+0x2a5/0x360 [ 841.730886][T28436] ? __lock_acquire+0x683/0x2cf0 [ 841.730918][T28436] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.730980][T28436] ? __fget_files+0x2a/0x420 [ 841.731005][T28436] ? __fget_files+0x3a2/0x420 [ 841.731049][T28436] __x64_sys_sendmsg+0x1b1/0x290 [ 841.731077][T28436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.731122][T28436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.731144][T28436] do_syscall_64+0x174/0x580 [ 841.731169][T28436] ? trace_irq_disable+0x3b/0x140 [ 841.731194][T28436] ? clear_bhb_loop+0x40/0x90 [ 841.731216][T28436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.731233][T28436] RIP: 0033:0x7f63e799e0d9 [ 841.731254][T28436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.731270][T28436] RSP: 002b:00007f63e88bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.731291][T28436] RAX: ffffffffffffffda RBX: 00007f63e7c25fa0 RCX: 00007f63e799e0d9 [ 841.731306][T28436] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 841.731319][T28436] RBP: 00007f63e88bc090 R08: 0000000000000000 R09: 0000000000000000 [ 841.731331][T28436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.731343][T28436] R13: 00007f63e7c26038 R14: 00007f63e7c25fa0 R15: 00007ffc95ee7718 [ 841.731376][T28436] [ 842.011471][T28438] CPU: 1 UID: 0 PID: 28438 Comm: syz.2.7655 Not tainted syzkaller #0 PREEMPT(full) [ 842.011499][T28438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 842.011511][T28438] Call Trace: [ 842.011519][T28438] [ 842.011528][T28438] dump_stack_lvl+0xe8/0x150 [ 842.011563][T28438] should_fail_ex+0x40c/0x560 [ 842.011593][T28438] _copy_from_iter+0x3b0/0x1660 [ 842.011633][T28438] ? __pfx__copy_from_iter+0x10/0x10 [ 842.011665][T28438] ? dev_get_by_index+0x22/0x2d0 [ 842.011693][T28438] ? dev_get_by_index+0x22/0x2d0 [ 842.011726][T28438] packet_sendmsg+0x2f1d/0x5040 [ 842.011758][T28438] ? aa_label_sk_perm+0x532/0x6e0 [ 842.011791][T28438] ? __kasan_kmalloc+0x93/0xb0 [ 842.011817][T28438] ? __kmalloc_noprof+0x375/0x720 [ 842.011841][T28438] ? iovec_from_user+0x87/0x250 [ 842.011857][T28438] ? __import_iovec+0x15e/0x7e0 [ 842.011874][T28438] ? import_iovec+0x73/0xa0 [ 842.011890][T28438] ? ___sys_sendmsg+0x255/0x360 [ 842.011914][T28438] ? do_syscall_64+0x174/0x580 [ 842.011941][T28438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.011986][T28438] ? __pfx_packet_sendmsg+0x10/0x10 [ 842.012026][T28438] ? __pfx_aa_sk_perm+0x10/0x10 [ 842.012051][T28438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 842.012077][T28438] ? __pfx_packet_sendmsg+0x10/0x10 [ 842.012104][T28438] sock_sendmsg_nosec+0x13a/0x180 [ 842.012144][T28438] ____sys_sendmsg+0x54e/0x850 [ 842.012175][T28438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.012207][T28438] ? import_iovec+0x73/0xa0 [ 842.012228][T28438] ___sys_sendmsg+0x2a5/0x360 [ 842.012249][T28438] ? __lock_acquire+0x683/0x2cf0 [ 842.012277][T28438] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.012335][T28438] ? __fget_files+0x2a/0x420 [ 842.012362][T28438] ? __fget_files+0x3a2/0x420 [ 842.012397][T28438] __x64_sys_sendmsg+0x1b1/0x290 [ 842.012425][T28438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 842.012468][T28438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.012490][T28438] do_syscall_64+0x174/0x580 [ 842.012515][T28438] ? trace_irq_disable+0x3b/0x140 [ 842.012540][T28438] ? clear_bhb_loop+0x40/0x90 [ 842.012564][T28438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.012584][T28438] RIP: 0033:0x7f10d9d9e0d9 [ 842.012603][T28438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.012619][T28438] RSP: 002b:00007f10dacda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.012641][T28438] RAX: ffffffffffffffda RBX: 00007f10da025fa0 RCX: 00007f10d9d9e0d9 [ 842.012655][T28438] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 842.012668][T28438] RBP: 00007f10dacda090 R08: 0000000000000000 R09: 0000000000000000 [ 842.012680][T28438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.012692][T28438] R13: 00007f10da026038 R14: 00007f10da025fa0 R15: 00007ffd0f6cb3c8 [ 842.012723][T28438] [ 842.643505][T28452] FAULT_INJECTION: forcing a failure. [ 842.643505][T28452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.769894][T28452] CPU: 1 UID: 0 PID: 28452 Comm: syz.0.7659 Not tainted syzkaller #0 PREEMPT(full) [ 842.769923][T28452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 842.769936][T28452] Call Trace: [ 842.769944][T28452] [ 842.769953][T28452] dump_stack_lvl+0xe8/0x150 [ 842.769988][T28452] should_fail_ex+0x40c/0x560 [ 842.770018][T28452] _copy_from_iter+0x1d3/0x1660 [ 842.770044][T28452] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 842.770071][T28452] ? rcu_is_watching+0x15/0xb0 [ 842.770091][T28452] ? trace_kmem_cache_alloc+0x29/0xe0 [ 842.770118][T28452] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 842.770142][T28452] ? __pfx__copy_from_iter+0x10/0x10 [ 842.770168][T28452] ? __alloc_skb+0x276/0x7a0 [ 842.770188][T28452] ? __alloc_skb+0x276/0x7a0 [ 842.770215][T28452] ? netlink_sendmsg+0x650/0xb40 [ 842.770241][T28452] ? skb_put+0x112/0x210 [ 842.770266][T28452] netlink_sendmsg+0x6c0/0xb40 [ 842.770300][T28452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.770332][T28452] ? aa_sock_msg_perm+0xf1/0x1b0 [ 842.770360][T28452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.770384][T28452] sock_sendmsg_nosec+0x13a/0x180 [ 842.770417][T28452] ____sys_sendmsg+0x54e/0x850 [ 842.770447][T28452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.770481][T28452] ? import_iovec+0x73/0xa0 [ 842.770503][T28452] ___sys_sendmsg+0x2a5/0x360 [ 842.770526][T28452] ? __lock_acquire+0x683/0x2cf0 [ 842.770557][T28452] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.770616][T28452] ? __fget_files+0x2a/0x420 [ 842.770649][T28452] ? __fget_files+0x3a2/0x420 [ 842.770685][T28452] __x64_sys_sendmsg+0x1b1/0x290 [ 842.770712][T28452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 842.770755][T28452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.770777][T28452] do_syscall_64+0x174/0x580 [ 842.770804][T28452] ? trace_irq_disable+0x3b/0x140 [ 842.770829][T28452] ? clear_bhb_loop+0x40/0x90 [ 842.770853][T28452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.770872][T28452] RIP: 0033:0x7f6cf7b9e0d9 [ 842.770890][T28452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.770907][T28452] RSP: 002b:00007f6cf8b3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.770928][T28452] RAX: ffffffffffffffda RBX: 00007f6cf7e25fa0 RCX: 00007f6cf7b9e0d9 [ 842.770942][T28452] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 842.770955][T28452] RBP: 00007f6cf8b3a090 R08: 0000000000000000 R09: 0000000000000000 [ 842.770967][T28452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.770979][T28452] R13: 00007f6cf7e26038 R14: 00007f6cf7e25fa0 R15: 00007fffe5467168 [ 842.771010][T28452] [ 843.192171][T23111] net_ratelimit: 1 callbacks suppressed [ 843.195249][T28462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7664'. [ 843.197811][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.282083][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.354313][T28466] Bluetooth: MGMT ver 1.23 [ 843.358574][T28468] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7663'. [ 843.371782][T28466] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 843.771057][T28475] lo: entered allmulticast mode [ 843.827463][T28473] lo: left allmulticast mode [ 844.069322][ T30] audit: type=1800 audit(1785921495.695:9): pid=28490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7672" name=680B20 dev="tmpfs" ino=1901 res=0 errno=0 [ 844.082149][T28491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7674'. [ 844.155632][T28494] FAULT_INJECTION: forcing a failure. [ 844.155632][T28494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.169251][T28494] CPU: 1 UID: 0 PID: 28494 Comm: syz.4.7676 Not tainted syzkaller #0 PREEMPT(full) [ 844.169275][T28494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.169286][T28494] Call Trace: [ 844.169293][T28494] [ 844.169302][T28494] dump_stack_lvl+0xe8/0x150 [ 844.169337][T28494] should_fail_ex+0x40c/0x560 [ 844.169364][T28494] _copy_from_iter+0x1d3/0x1660 [ 844.169388][T28494] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 844.169414][T28494] ? rcu_is_watching+0x15/0xb0 [ 844.169433][T28494] ? trace_kmem_cache_alloc+0x29/0xe0 [ 844.169454][T28494] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 844.169478][T28494] ? __pfx__copy_from_iter+0x10/0x10 [ 844.169504][T28494] ? __alloc_skb+0x276/0x7a0 [ 844.169525][T28494] ? __alloc_skb+0x276/0x7a0 [ 844.169552][T28494] ? netlink_sendmsg+0x650/0xb40 [ 844.169577][T28494] ? skb_put+0x112/0x210 [ 844.169608][T28494] netlink_sendmsg+0x6c0/0xb40 [ 844.169639][T28494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.169666][T28494] ? aa_sock_msg_perm+0xf1/0x1b0 [ 844.169691][T28494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 844.169713][T28494] sock_sendmsg_nosec+0x13a/0x180 [ 844.169743][T28494] ____sys_sendmsg+0x54e/0x850 [ 844.169772][T28494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.169804][T28494] ? import_iovec+0x73/0xa0 [ 844.169825][T28494] ___sys_sendmsg+0x2a5/0x360 [ 844.169845][T28494] ? __lock_acquire+0x683/0x2cf0 [ 844.169872][T28494] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.169929][T28494] ? __fget_files+0x2a/0x420 [ 844.169963][T28494] ? __fget_files+0x3a2/0x420 [ 844.169998][T28494] __x64_sys_sendmsg+0x1b1/0x290 [ 844.170025][T28494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 844.170064][T28494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.170084][T28494] do_syscall_64+0x174/0x580 [ 844.170109][T28494] ? trace_irq_disable+0x3b/0x140 [ 844.170132][T28494] ? clear_bhb_loop+0x40/0x90 [ 844.170155][T28494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.170174][T28494] RIP: 0033:0x7f96b019e0d9 [ 844.170191][T28494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.170205][T28494] RSP: 002b:00007f96b0fca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.170225][T28494] RAX: ffffffffffffffda RBX: 00007f96b0425fa0 RCX: 00007f96b019e0d9 [ 844.170238][T28494] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 844.170250][T28494] RBP: 00007f96b0fca090 R08: 0000000000000000 R09: 0000000000000000 [ 844.170262][T28494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.170275][T28494] R13: 00007f96b0426038 R14: 00007f96b0425fa0 R15: 00007ffea86ac2f8 [ 844.170303][T28494] [ 844.447559][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.460386][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.849619][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7679'. [ 844.900398][T28508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7680'. [ 845.473617][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.807772][T28539] FAULT_INJECTION: forcing a failure. [ 845.807772][T28539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.869463][T28541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7697'. [ 845.888637][T28539] CPU: 1 UID: 0 PID: 28539 Comm: syz.3.7696 Not tainted syzkaller #0 PREEMPT(full) [ 845.888665][T28539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 845.888677][T28539] Call Trace: [ 845.888685][T28539] [ 845.888694][T28539] dump_stack_lvl+0xe8/0x150 [ 845.888729][T28539] should_fail_ex+0x40c/0x560 [ 845.888769][T28539] _copy_from_iter+0x1d3/0x1660 [ 845.888795][T28539] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 845.888823][T28539] ? rcu_is_watching+0x15/0xb0 [ 845.888843][T28539] ? trace_kmem_cache_alloc+0x29/0xe0 [ 845.888868][T28539] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 845.888893][T28539] ? __pfx__copy_from_iter+0x10/0x10 [ 845.888919][T28539] ? __alloc_skb+0x276/0x7a0 [ 845.888940][T28539] ? __alloc_skb+0x276/0x7a0 [ 845.888967][T28539] ? netlink_sendmsg+0x650/0xb40 [ 845.888991][T28539] ? skb_put+0x112/0x210 [ 845.889016][T28539] netlink_sendmsg+0x6c0/0xb40 [ 845.889051][T28539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.889081][T28539] ? aa_sock_msg_perm+0xf1/0x1b0 [ 845.889109][T28539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.889133][T28539] sock_sendmsg_nosec+0x13a/0x180 [ 845.889167][T28539] ____sys_sendmsg+0x54e/0x850 [ 845.889197][T28539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 845.889231][T28539] ? import_iovec+0x73/0xa0 [ 845.889253][T28539] ___sys_sendmsg+0x2a5/0x360 [ 845.889276][T28539] ? __lock_acquire+0x683/0x2cf0 [ 845.889307][T28539] ? __pfx____sys_sendmsg+0x10/0x10 [ 845.889367][T28539] ? __fget_files+0x2a/0x420 [ 845.889392][T28539] ? __fget_files+0x3a2/0x420 [ 845.889428][T28539] __x64_sys_sendmsg+0x1b1/0x290 [ 845.889455][T28539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 845.889499][T28539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.889520][T28539] do_syscall_64+0x174/0x580 [ 845.889546][T28539] ? trace_irq_disable+0x3b/0x140 [ 845.889571][T28539] ? clear_bhb_loop+0x40/0x90 [ 845.889594][T28539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.889612][T28539] RIP: 0033:0x7f083b79e0d9 [ 845.889630][T28539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.889645][T28539] RSP: 002b:00007f083c594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.889664][T28539] RAX: ffffffffffffffda RBX: 00007f083ba25fa0 RCX: 00007f083b79e0d9 [ 845.889677][T28539] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 845.889689][T28539] RBP: 00007f083c594090 R08: 0000000000000000 R09: 0000000000000000 [ 845.889700][T28539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.889710][T28539] R13: 00007f083ba26038 R14: 00007f083ba25fa0 R15: 00007ffc4ffb2ef8 [ 845.889746][T28539] [ 846.239089][T28550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7697'. [ 846.245342][T28548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7700'. [ 846.365349][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.391720][T28557] FAULT_INJECTION: forcing a failure. [ 846.391720][T28557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.406637][T28557] CPU: 1 UID: 0 PID: 28557 Comm: syz.0.7701 Not tainted syzkaller #0 PREEMPT(full) [ 846.406665][T28557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.406678][T28557] Call Trace: [ 846.406693][T28557] [ 846.406702][T28557] dump_stack_lvl+0xe8/0x150 [ 846.406737][T28557] should_fail_ex+0x40c/0x560 [ 846.406767][T28557] _copy_from_user+0x2d/0xb0 [ 846.406788][T28557] ____sys_sendmsg+0x303/0x850 [ 846.406819][T28557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 846.406853][T28557] ? import_iovec+0x73/0xa0 [ 846.406876][T28557] ___sys_sendmsg+0x2a5/0x360 [ 846.406899][T28557] ? __lock_acquire+0x683/0x2cf0 [ 846.406931][T28557] ? __pfx____sys_sendmsg+0x10/0x10 [ 846.406989][T28557] ? __fget_files+0x2a/0x420 [ 846.407015][T28557] ? __fget_files+0x3a2/0x420 [ 846.407051][T28557] __x64_sys_sendmsg+0x1b1/0x290 [ 846.407079][T28557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 846.407122][T28557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.407144][T28557] do_syscall_64+0x174/0x580 [ 846.407170][T28557] ? trace_irq_disable+0x3b/0x140 [ 846.407195][T28557] ? clear_bhb_loop+0x40/0x90 [ 846.407219][T28557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.407239][T28557] RIP: 0033:0x7f6cf7b9e0d9 [ 846.407258][T28557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.407275][T28557] RSP: 002b:00007f6cf8b3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.407296][T28557] RAX: ffffffffffffffda RBX: 00007f6cf7e25fa0 RCX: 00007f6cf7b9e0d9 [ 846.407311][T28557] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003 [ 846.407324][T28557] RBP: 00007f6cf8b3a090 R08: 0000000000000000 R09: 0000000000000000 [ 846.407336][T28557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.407347][T28557] R13: 00007f6cf7e26038 R14: 00007f6cf7e25fa0 R15: 00007fffe5467168 [ 846.407378][T28557] [ 846.641759][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.787902][T28561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7705'. [ 846.833743][T28561] netlink: 'syz.2.7705': attribute type 1 has an invalid length. [ 847.003337][T28569] FAULT_INJECTION: forcing a failure. [ 847.003337][T28569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.071917][T28569] CPU: 1 UID: 0 PID: 28569 Comm: syz.0.7707 Not tainted syzkaller #0 PREEMPT(full) [ 847.071945][T28569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 847.071957][T28569] Call Trace: [ 847.071965][T28569] [ 847.071974][T28569] dump_stack_lvl+0xe8/0x150 [ 847.072009][T28569] should_fail_ex+0x40c/0x560 [ 847.072041][T28569] _copy_to_user+0x31/0xb0 [ 847.072064][T28569] simple_read_from_buffer+0xe1/0x170 [ 847.072097][T28569] proc_fail_nth_read+0x1bb/0x230 [ 847.072129][T28569] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 847.072160][T28569] ? rw_verify_area+0x24a/0x4c0 [ 847.072180][T28569] ? tun_chr_write_iter+0x18a/0x200 [ 847.072207][T28569] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 847.072231][T28569] vfs_read+0x213/0xa80 [ 847.072253][T28569] ? __pfx___mutex_lock+0x10/0x10 [ 847.072280][T28569] ? __pfx_vfs_read+0x10/0x10 [ 847.072299][T28569] ? __fget_files+0x2a/0x420 [ 847.072327][T28569] ? __fget_files+0x3a2/0x420 [ 847.072351][T28569] ? __fget_files+0x2a/0x420 [ 847.072384][T28569] ksys_read+0x150/0x270 [ 847.072406][T28569] ? __pfx_ksys_read+0x10/0x10 [ 847.072433][T28569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.072454][T28569] do_syscall_64+0x174/0x580 [ 847.072479][T28569] ? trace_irq_disable+0x3b/0x140 [ 847.072503][T28569] ? clear_bhb_loop+0x40/0x90 [ 847.072525][T28569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.072544][T28569] RIP: 0033:0x7f6cf7b5e90e [ 847.072562][T28569] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 847.072578][T28569] RSP: 002b:00007f6cf8b39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 847.072598][T28569] RAX: ffffffffffffffda RBX: 00007f6cf8b3a6c0 RCX: 00007f6cf7b5e90e [ 847.072612][T28569] RDX: 000000000000000f RSI: 00007f6cf8b3a0a0 RDI: 0000000000000004 [ 847.072623][T28569] RBP: 00007f6cf8b3a090 R08: 0000000000000000 R09: 0000000000000000 [ 847.072635][T28569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.072646][T28569] R13: 00007f6cf7e26038 R14: 00007f6cf7e25fa0 R15: 00007fffe5467168 [ 847.072683][T28569] [ 847.824414][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.974689][T28594] tipc: Failed to remove unknown binding: 66,0,0/3655321148:2984288065/2984288067 [ 848.069114][T28594] tipc: Failed to remove unknown binding: 66,0,0/3655321148:2984288065/2984288066 [ 848.152438][T28594] tipc: Failed to remove unknown binding: 66,0,0/3655321148:2984288065/2984288067 [ 848.224451][T28602] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7719'. [ 848.262751][T28594] tipc: Failed to remove unknown binding: 66,0,0/3655321148:2984288065/2984288066 [ 848.287273][T28602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7719'. [ 848.335478][T28605] FAULT_INJECTION: forcing a failure. [ 848.335478][T28605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.352274][T28602] netlink: 'syz.2.7719': attribute type 1 has an invalid length. [ 848.374033][T28605] CPU: 0 UID: 0 PID: 28605 Comm: syz.3.7720 Not tainted syzkaller #0 PREEMPT(full) [ 848.374060][T28605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.374072][T28605] Call Trace: [ 848.374080][T28605] [ 848.374089][T28605] dump_stack_lvl+0xe8/0x150 [ 848.374123][T28605] should_fail_ex+0x40c/0x560 [ 848.374154][T28605] _copy_to_user+0x31/0xb0 [ 848.374176][T28605] simple_read_from_buffer+0xe1/0x170 [ 848.374209][T28605] proc_fail_nth_read+0x1bb/0x230 [ 848.374240][T28605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.374271][T28605] ? rw_verify_area+0x24a/0x4c0 [ 848.374292][T28605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.374319][T28605] vfs_read+0x213/0xa80 [ 848.374344][T28605] ? __pfx___mutex_lock+0x10/0x10 [ 848.374372][T28605] ? __pfx_vfs_read+0x10/0x10 [ 848.374392][T28605] ? __fget_files+0x2a/0x420 [ 848.374422][T28605] ? __fget_files+0x3a2/0x420 [ 848.374446][T28605] ? __fget_files+0x2a/0x420 [ 848.374481][T28605] ksys_read+0x150/0x270 [ 848.374502][T28605] ? __pfx_ksys_read+0x10/0x10 [ 848.374530][T28605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.374552][T28605] do_syscall_64+0x174/0x580 [ 848.374578][T28605] ? trace_irq_disable+0x3b/0x140 [ 848.374603][T28605] ? clear_bhb_loop+0x40/0x90 [ 848.374627][T28605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.374646][T28605] RIP: 0033:0x7f083b75e90e [ 848.374664][T28605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 848.374681][T28605] RSP: 002b:00007f083c593fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 848.374702][T28605] RAX: ffffffffffffffda RBX: 00007f083c5946c0 RCX: 00007f083b75e90e [ 848.374716][T28605] RDX: 000000000000000f RSI: 00007f083c5940a0 RDI: 0000000000000004 [ 848.374729][T28605] RBP: 00007f083c594090 R08: 0000000000000000 R09: 0000000000000000 [ 848.374741][T28605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.374753][T28605] R13: 00007f083ba26038 R14: 00007f083ba25fa0 R15: 00007ffc4ffb2ef8 [ 848.374782][T28605] [ 848.908536][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.018290][T28611] syzkaller0: entered promiscuous mode [ 849.056701][T28611] syzkaller0: entered allmulticast mode [ 849.392532][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.525132][T28622] netlink: 'syz.3.7727': attribute type 2 has an invalid length. [ 849.647274][T28621] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7728'. [ 849.958744][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.099200][T28632] dummy0: left promiscuous mode [ 850.160511][T28642] FAULT_INJECTION: forcing a failure. [ 850.160511][T28642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.202444][T28642] CPU: 0 UID: 0 PID: 28642 Comm: syz.2.7732 Not tainted syzkaller #0 PREEMPT(full) [ 850.202471][T28642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 850.202483][T28642] Call Trace: [ 850.202490][T28642] [ 850.202499][T28642] dump_stack_lvl+0xe8/0x150 [ 850.202534][T28642] should_fail_ex+0x40c/0x560 [ 850.202563][T28642] _copy_from_iter+0x1d3/0x1660 [ 850.202589][T28642] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 850.202615][T28642] ? rcu_is_watching+0x15/0xb0 [ 850.202634][T28642] ? trace_kmem_cache_alloc+0x29/0xe0 [ 850.202659][T28642] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 850.202683][T28642] ? __pfx__copy_from_iter+0x10/0x10 [ 850.202707][T28642] ? __alloc_skb+0x276/0x7a0 [ 850.202727][T28642] ? __alloc_skb+0x276/0x7a0 [ 850.202751][T28642] ? netlink_sendmsg+0x650/0xb40 [ 850.202775][T28642] ? skb_put+0x112/0x210 [ 850.202799][T28642] netlink_sendmsg+0x6c0/0xb40 [ 850.202840][T28642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.202870][T28642] ? aa_sock_msg_perm+0xf1/0x1b0 [ 850.202897][T28642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.202921][T28642] sock_sendmsg_nosec+0x13a/0x180 [ 850.202953][T28642] ____sys_sendmsg+0x54e/0x850 [ 850.202983][T28642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.203016][T28642] ? import_iovec+0x73/0xa0 [ 850.203038][T28642] ___sys_sendmsg+0x2a5/0x360 [ 850.203061][T28642] ? __lock_acquire+0x683/0x2cf0 [ 850.203092][T28642] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.203151][T28642] ? __fget_files+0x2a/0x420 [ 850.203171][T28642] ? __fget_files+0x3a2/0x420 [ 850.203204][T28642] __x64_sys_sendmsg+0x1b1/0x290 [ 850.203229][T28642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 850.203273][T28642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.203294][T28642] do_syscall_64+0x174/0x580 [ 850.203321][T28642] ? trace_irq_disable+0x3b/0x140 [ 850.203345][T28642] ? clear_bhb_loop+0x40/0x90 [ 850.203368][T28642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.203387][T28642] RIP: 0033:0x7f10d9d9e0d9 [ 850.203405][T28642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.203421][T28642] RSP: 002b:00007f10dacda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.203442][T28642] RAX: ffffffffffffffda RBX: 00007f10da025fa0 RCX: 00007f10d9d9e0d9 [ 850.203457][T28642] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 850.203469][T28642] RBP: 00007f10dacda090 R08: 0000000000000000 R09: 0000000000000000 [ 850.203481][T28642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.203493][T28642] R13: 00007f10da026038 R14: 00007f10da025fa0 R15: 00007ffd0f6cb3c8 [ 850.203524][T28642] [ 850.790299][T28632] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 850.971303][T28636] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 851.008322][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.769482][T28665] FAULT_INJECTION: forcing a failure. [ 851.769482][T28665] name failslab, interval 1, probability 0, space 0, times 0 [ 852.139786][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.152602][T28665] CPU: 1 UID: 0 PID: 28665 Comm: syz.3.7740 Not tainted syzkaller #0 PREEMPT(full) [ 852.152629][T28665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 852.152639][T28665] Call Trace: [ 852.152647][T28665] [ 852.152655][T28665] dump_stack_lvl+0xe8/0x150 [ 852.152691][T28665] should_fail_ex+0x40c/0x560 [ 852.152721][T28665] should_failslab+0xa8/0x100 [ 852.152752][T28665] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 852.152779][T28665] ? skb_clone+0x212/0x3a0 [ 852.152803][T28665] ? skb_clone+0x212/0x3a0 [ 852.152840][T28665] skb_clone+0x212/0x3a0 [ 852.152868][T28665] __netlink_deliver_tap+0x413/0x860 [ 852.152907][T28665] ? netlink_deliver_tap+0x2e/0x1b0 [ 852.152934][T28665] netlink_deliver_tap+0x19c/0x1b0 [ 852.152961][T28665] netlink_unicast+0x77f/0x940 [ 852.152994][T28665] netlink_sendmsg+0x813/0xb40 [ 852.153029][T28665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.153056][T28665] ? aa_sock_msg_perm+0xf1/0x1b0 [ 852.153084][T28665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.153109][T28665] sock_sendmsg_nosec+0x13a/0x180 [ 852.153142][T28665] ____sys_sendmsg+0x54e/0x850 [ 852.153172][T28665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.153206][T28665] ? import_iovec+0x73/0xa0 [ 852.153228][T28665] ___sys_sendmsg+0x2a5/0x360 [ 852.153251][T28665] ? __lock_acquire+0x683/0x2cf0 [ 852.153282][T28665] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.153344][T28665] ? __fget_files+0x2a/0x420 [ 852.153370][T28665] ? __fget_files+0x3a2/0x420 [ 852.153405][T28665] __x64_sys_sendmsg+0x1b1/0x290 [ 852.153430][T28665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.153473][T28665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.153494][T28665] do_syscall_64+0x174/0x580 [ 852.153520][T28665] ? trace_irq_disable+0x3b/0x140 [ 852.153550][T28665] ? clear_bhb_loop+0x40/0x90 [ 852.153574][T28665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.153593][T28665] RIP: 0033:0x7f083b79e0d9 [ 852.153611][T28665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.153628][T28665] RSP: 002b:00007f083c594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.153649][T28665] RAX: ffffffffffffffda RBX: 00007f083ba25fa0 RCX: 00007f083b79e0d9 [ 852.153664][T28665] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 852.153676][T28665] RBP: 00007f083c594090 R08: 0000000000000000 R09: 0000000000000000 [ 852.153689][T28665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.153700][T28665] R13: 00007f083ba26038 R14: 00007f083ba25fa0 R15: 00007ffc4ffb2ef8 [ 852.153732][T28665] [ 853.243384][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.528313][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.034537][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.273430][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.501529][ T1010] IPVS: starting estimator thread 0... [ 854.699808][T28682] IPVS: using max 26 ests per chain, 62400 per kthread [ 854.802228][T28684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7745'. [ 855.321697][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.402940][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.654805][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.492830][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.512381][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 858.563524][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.129292][T28711] netlink: 'syz.1.7756': attribute type 13 has an invalid length. [ 859.656202][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.666089][T28715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7758'. [ 859.733368][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.770695][T28719] FAULT_INJECTION: forcing a failure. [ 859.770695][T28719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.901903][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880330e8000: rx timeout, send abort [ 859.992635][T28719] CPU: 1 UID: 0 PID: 28719 Comm: syz.4.7759 Not tainted syzkaller #0 PREEMPT(full) [ 859.992663][T28719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.992675][T28719] Call Trace: [ 859.992683][T28719] [ 859.992691][T28719] dump_stack_lvl+0xe8/0x150 [ 859.992726][T28719] should_fail_ex+0x40c/0x560 [ 859.992757][T28719] _copy_to_user+0x31/0xb0 [ 859.992779][T28719] csum_and_copy_to_iter+0x662/0x1c60 [ 859.992807][T28719] ? is_bpf_text_address+0x292/0x2b0 [ 859.992853][T28719] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 859.992877][T28719] ? __skb_recv_udp+0x497/0x930 [ 859.993015][T28719] ? __skb_recv_udp+0x497/0x930 [ 859.993036][T28719] ? __local_bh_enable_ip+0xd0/0x130 [ 859.993059][T28719] ? lockdep_hardirqs_on+0x7a/0x110 [ 859.993085][T28719] ? __skb_recv_udp+0x497/0x930 [ 859.993108][T28719] ? __skb_recv_udp+0x846/0x930 [ 859.993136][T28719] __skb_datagram_iter+0x89a/0x980 [ 859.993164][T28719] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 859.993194][T28719] ? csum_partial+0x239/0x2c0 [ 859.993216][T28719] skb_copy_and_csum_datagram_msg+0x1d7/0x440 [ 859.993248][T28719] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 859.993285][T28719] udp_recvmsg+0x2d2/0xd10 [ 859.993323][T28719] ? __pfx_udp_recvmsg+0x10/0x10 [ 859.993350][T28719] ? sock_rps_record_flow+0x19/0x350 [ 859.993376][T28719] ? inet_recvmsg+0xe2/0x120 [ 859.993397][T28719] ? __pfx_inet_recvmsg+0x10/0x10 [ 859.993419][T28719] sock_recvmsg+0x166/0x1e0 [ 859.993453][T28719] ____sys_recvmsg+0x1e6/0x4a0 [ 859.993476][T28719] ? iovec_from_user+0x87/0x250 [ 859.993502][T28719] ? __pfx_____sys_recvmsg+0x10/0x10 [ 859.993543][T28719] ? import_iovec+0x73/0xa0 [ 859.993566][T28719] ___sys_recvmsg+0x213/0x5a0 [ 859.993597][T28719] ? __pfx____sys_recvmsg+0x10/0x10 [ 859.993630][T28719] ? __fget_files+0x2a/0x420 [ 859.993673][T28719] ? __fget_files+0x3a2/0x420 [ 859.993709][T28719] do_recvmmsg+0x31a/0x7f0 [ 859.993744][T28719] ? __pfx_do_recvmmsg+0x10/0x10 [ 859.993781][T28719] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 859.993810][T28719] ? __fget_files+0x3a2/0x420 [ 859.993846][T28719] __x64_sys_recvmmsg+0x198/0x250 [ 859.993875][T28719] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 859.993916][T28719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.993938][T28719] do_syscall_64+0x174/0x580 [ 859.993964][T28719] ? trace_irq_disable+0x3b/0x140 [ 859.993989][T28719] ? clear_bhb_loop+0x40/0x90 [ 859.994013][T28719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.994031][T28719] RIP: 0033:0x7f96b019e0d9 [ 859.994050][T28719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.994067][T28719] RSP: 002b:00007f96b0fa9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 859.994089][T28719] RAX: ffffffffffffffda RBX: 00007f96b0426090 RCX: 00007f96b019e0d9 [ 859.994103][T28719] RDX: 04000000000000f1 RSI: 0000200000000400 RDI: 0000000000000003 [ 859.994117][T28719] RBP: 00007f96b0fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 859.994129][T28719] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000001 [ 859.994141][T28719] R13: 00007f96b0426128 R14: 00007f96b0426090 R15: 00007ffea86ac2f8 [ 859.994173][T28719] [ 860.402101][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880330ebc00: rx timeout, send abort [ 860.413127][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880330e8000: abort rx timeout. Force session deactivation [ 860.443327][ C0] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff8880330ebc00: connection exists (fe ff). last cmd: 20 [ 860.693235][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888050d21800: rx timeout, send abort [ 860.939830][T28724] FAULT_INJECTION: forcing a failure. [ 860.939830][T28724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.063230][T28724] CPU: 1 UID: 0 PID: 28724 Comm: syz.0.7762 Not tainted syzkaller #0 PREEMPT(full) [ 861.063260][T28724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 861.063272][T28724] Call Trace: [ 861.063280][T28724] [ 861.063289][T28724] dump_stack_lvl+0xe8/0x150 [ 861.063323][T28724] should_fail_ex+0x40c/0x560 [ 861.063354][T28724] _copy_from_iter+0x1d3/0x1660 [ 861.063381][T28724] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 861.063408][T28724] ? rcu_is_watching+0x15/0xb0 [ 861.063428][T28724] ? trace_kmem_cache_alloc+0x29/0xe0 [ 861.063454][T28724] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 861.063479][T28724] ? __pfx__copy_from_iter+0x10/0x10 [ 861.063505][T28724] ? __alloc_skb+0x276/0x7a0 [ 861.063526][T28724] ? __alloc_skb+0x276/0x7a0 [ 861.063552][T28724] ? netlink_sendmsg+0x650/0xb40 [ 861.063578][T28724] ? skb_put+0x112/0x210 [ 861.063602][T28724] netlink_sendmsg+0x6c0/0xb40 [ 861.063637][T28724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.063666][T28724] ? aa_sock_msg_perm+0xf1/0x1b0 [ 861.063695][T28724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.063726][T28724] sock_sendmsg_nosec+0x13a/0x180 [ 861.063759][T28724] ____sys_sendmsg+0x54e/0x850 [ 861.063790][T28724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.063824][T28724] ? import_iovec+0x73/0xa0 [ 861.063846][T28724] ___sys_sendmsg+0x2a5/0x360 [ 861.063869][T28724] ? __lock_acquire+0x683/0x2cf0 [ 861.063901][T28724] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.063960][T28724] ? __fget_files+0x2a/0x420 [ 861.063986][T28724] ? __fget_files+0x3a2/0x420 [ 861.064022][T28724] __x64_sys_sendmsg+0x1b1/0x290 [ 861.064050][T28724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.064092][T28724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.064114][T28724] do_syscall_64+0x174/0x580 [ 861.064140][T28724] ? trace_irq_disable+0x3b/0x140 [ 861.064165][T28724] ? clear_bhb_loop+0x40/0x90 [ 861.064190][T28724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.064209][T28724] RIP: 0033:0x7f6cf7b9e0d9 [ 861.064227][T28724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.064244][T28724] RSP: 002b:00007f6cf8b3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.064265][T28724] RAX: ffffffffffffffda RBX: 00007f6cf7e25fa0 RCX: 00007f6cf7b9e0d9 [ 861.064279][T28724] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 861.064292][T28724] RBP: 00007f6cf8b3a090 R08: 0000000000000000 R09: 0000000000000000 [ 861.064305][T28724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.064317][T28724] R13: 00007f6cf7e26038 R14: 00007f6cf7e25fa0 R15: 00007fffe5467168 [ 861.064348][T28724] [ 861.201651][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888050d21800: abort rx timeout. Force session deactivation [ 862.704672][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.758442][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.862531][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.871906][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.447626][T28741] x_tables: duplicate underflow at hook 2 [ 865.082863][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.796098][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.897080][T28753] FAULT_INJECTION: forcing a failure. [ 865.897080][T28753] name failslab, interval 1, probability 0, space 0, times 0 [ 866.161361][T28753] CPU: 1 UID: 0 PID: 28753 Comm: syz.1.7770 Not tainted syzkaller #0 PREEMPT(full) [ 866.161390][T28753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.161403][T28753] Call Trace: [ 866.161411][T28753] [ 866.161420][T28753] dump_stack_lvl+0xe8/0x150 [ 866.161457][T28753] should_fail_ex+0x40c/0x560 [ 866.161488][T28753] should_failslab+0xa8/0x100 [ 866.161520][T28753] __kmalloc_noprof+0xfe/0x720 [ 866.161547][T28753] ? tomoyo_encode+0x2ad/0x570 [ 866.161569][T28753] ? tomoyo_encode+0x2ad/0x570 [ 866.161598][T28753] tomoyo_encode+0x2ad/0x570 [ 866.161627][T28753] tomoyo_realpath_from_path+0x5fa/0x640 [ 866.161661][T28753] ? tomoyo_path_number_perm+0x219/0x5f0 [ 866.161692][T28753] tomoyo_path_number_perm+0x246/0x5f0 [ 866.161726][T28753] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 866.161755][T28753] ? __lock_acquire+0x683/0x2cf0 [ 866.161798][T28753] ? hook_file_ioctl+0x1f0/0x5f0 [ 866.161839][T28753] ? __fget_files+0x2a/0x420 [ 866.161869][T28753] ? __fget_files+0x2a/0x420 [ 866.161894][T28753] ? __fget_files+0x3a2/0x420 [ 866.161918][T28753] ? __fget_files+0x2a/0x420 [ 866.161948][T28753] security_file_ioctl+0xc3/0x2a0 [ 866.161980][T28753] __se_sys_ioctl+0x47/0x170 [ 866.162001][T28753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.162024][T28753] do_syscall_64+0x174/0x580 [ 866.162050][T28753] ? trace_irq_disable+0x3b/0x140 [ 866.162076][T28753] ? clear_bhb_loop+0x40/0x90 [ 866.162101][T28753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.162120][T28753] RIP: 0033:0x7f63e799e0d9 [ 866.162140][T28753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.162155][T28753] RSP: 002b:00007f63e88bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.162180][T28753] RAX: ffffffffffffffda RBX: 00007f63e7c25fa0 RCX: 00007f63e799e0d9 [ 866.162192][T28753] RDX: 0000200000000300 RSI: 00000000000089f3 RDI: 0000000000000003 [ 866.162204][T28753] RBP: 00007f63e88bc090 R08: 0000000000000000 R09: 0000000000000000 [ 866.162215][T28753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.162226][T28753] R13: 00007f63e7c26038 R14: 00007f63e7c25fa0 R15: 00007ffc95ee7718 [ 866.162267][T28753] [ 866.397391][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.622476][T28753] ERROR: Out of memory at tomoyo_realpath_from_path. [ 867.459887][T28765] FAULT_INJECTION: forcing a failure. [ 867.459887][T28765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.681774][T28765] CPU: 1 UID: 0 PID: 28765 Comm: syz.3.7775 Not tainted syzkaller #0 PREEMPT(full) [ 867.681802][T28765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.681814][T28765] Call Trace: [ 867.681822][T28765] [ 867.681831][T28765] dump_stack_lvl+0xe8/0x150 [ 867.681866][T28765] should_fail_ex+0x40c/0x560 [ 867.681897][T28765] _copy_from_iter+0x1d3/0x1660 [ 867.681923][T28765] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 867.681950][T28765] ? rcu_is_watching+0x15/0xb0 [ 867.681970][T28765] ? trace_kmem_cache_alloc+0x29/0xe0 [ 867.681996][T28765] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 867.682021][T28765] ? __pfx__copy_from_iter+0x10/0x10 [ 867.682047][T28765] ? __alloc_skb+0x276/0x7a0 [ 867.682067][T28765] ? __alloc_skb+0x276/0x7a0 [ 867.682094][T28765] ? netlink_sendmsg+0x650/0xb40 [ 867.682120][T28765] ? skb_put+0x112/0x210 [ 867.682192][T28765] netlink_sendmsg+0x6c0/0xb40 [ 867.682224][T28765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.682253][T28765] ? aa_sock_msg_perm+0xf1/0x1b0 [ 867.682281][T28765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.682305][T28765] sock_sendmsg_nosec+0x13a/0x180 [ 867.682339][T28765] ____sys_sendmsg+0x54e/0x850 [ 867.682369][T28765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.682403][T28765] ? import_iovec+0x73/0xa0 [ 867.682425][T28765] ___sys_sendmsg+0x2a5/0x360 [ 867.682448][T28765] ? __lock_acquire+0x683/0x2cf0 [ 867.682480][T28765] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.682539][T28765] ? __fget_files+0x2a/0x420 [ 867.682565][T28765] ? __fget_files+0x3a2/0x420 [ 867.682600][T28765] __x64_sys_sendmsg+0x1b1/0x290 [ 867.682627][T28765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.682669][T28765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.682691][T28765] do_syscall_64+0x174/0x580 [ 867.682717][T28765] ? trace_irq_disable+0x3b/0x140 [ 867.682742][T28765] ? clear_bhb_loop+0x40/0x90 [ 867.682766][T28765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.682795][T28765] RIP: 0033:0x7f083b79e0d9 [ 867.682813][T28765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.682829][T28765] RSP: 002b:00007f083c594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.682851][T28765] RAX: ffffffffffffffda RBX: 00007f083ba25fa0 RCX: 00007f083b79e0d9 [ 867.682865][T28765] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 867.682878][T28765] RBP: 00007f083c594090 R08: 0000000000000000 R09: 0000000000000000 [ 867.682890][T28765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.682902][T28765] R13: 00007f083ba26038 R14: 00007f083ba25fa0 R15: 00007ffc4ffb2ef8 [ 867.682933][T28765] [ 867.894898][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.404145][T28769] FAULT_INJECTION: forcing a failure. [ 868.404145][T28769] name failslab, interval 1, probability 0, space 0, times 0 [ 868.568215][T28769] CPU: 1 UID: 0 PID: 28769 Comm: syz.1.7776 Not tainted syzkaller #0 PREEMPT(full) [ 868.568243][T28769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 868.568255][T28769] Call Trace: [ 868.568263][T28769] [ 868.568272][T28769] dump_stack_lvl+0xe8/0x150 [ 868.568307][T28769] should_fail_ex+0x40c/0x560 [ 868.568337][T28769] should_failslab+0xa8/0x100 [ 868.568369][T28769] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 868.568393][T28769] ? local_lock_release+0x9c/0x160 [ 868.568418][T28769] ? __alloc_skb+0x1d7/0x7a0 [ 868.568436][T28769] ? __alloc_skb+0x1d7/0x7a0 [ 868.568463][T28769] __alloc_skb+0x1d7/0x7a0 [ 868.568489][T28769] netlink_sendmsg+0x5d4/0xb40 [ 868.568525][T28769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 868.568555][T28769] ? aa_sock_msg_perm+0xf1/0x1b0 [ 868.568583][T28769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 868.568607][T28769] sock_sendmsg_nosec+0x13a/0x180 [ 868.568640][T28769] ____sys_sendmsg+0x54e/0x850 [ 868.568670][T28769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 868.568703][T28769] ? import_iovec+0x73/0xa0 [ 868.568727][T28769] ___sys_sendmsg+0x2a5/0x360 [ 868.568750][T28769] ? __lock_acquire+0x683/0x2cf0 [ 868.568782][T28769] ? __pfx____sys_sendmsg+0x10/0x10 [ 868.568841][T28769] ? __fget_files+0x2a/0x420 [ 868.568867][T28769] ? __fget_files+0x3a2/0x420 [ 868.568902][T28769] __x64_sys_sendmsg+0x1b1/0x290 [ 868.568930][T28769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 868.568973][T28769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.568994][T28769] do_syscall_64+0x174/0x580 [ 868.569020][T28769] ? trace_irq_disable+0x3b/0x140 [ 868.569046][T28769] ? clear_bhb_loop+0x40/0x90 [ 868.569069][T28769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.569088][T28769] RIP: 0033:0x7f63e799e0d9 [ 868.569107][T28769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.569131][T28769] RSP: 002b:00007f63e88bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.569152][T28769] RAX: ffffffffffffffda RBX: 00007f63e7c25fa0 RCX: 00007f63e799e0d9 [ 868.569167][T28769] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 868.569179][T28769] RBP: 00007f63e88bc090 R08: 0000000000000000 R09: 0000000000000000 [ 868.569191][T28769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.569203][T28769] R13: 00007f63e7c26038 R14: 00007f63e7c25fa0 R15: 00007ffc95ee7718 [ 868.569234][T28769] [ 869.126343][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.168828][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.302360][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7780'. [ 869.453145][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7780'. [ 869.472268][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7780'. [ 869.618742][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7780'. [ 869.706300][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7780'. [ 869.839509][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7780'. [ 870.010743][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7780'. [ 870.196551][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7780'. [ 870.277863][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.282940][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7780'. [ 870.356167][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7780'. [ 871.317811][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.936575][T28804] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 872.001031][T28811] FAULT_INJECTION: forcing a failure. [ 872.001031][T28811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.152266][T28811] CPU: 1 UID: 0 PID: 28811 Comm: syz.4.7792 Not tainted syzkaller #0 PREEMPT(full) [ 872.152292][T28811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.152304][T28811] Call Trace: [ 872.152312][T28811] [ 872.152321][T28811] dump_stack_lvl+0xe8/0x150 [ 872.152354][T28811] should_fail_ex+0x40c/0x560 [ 872.152384][T28811] _copy_from_iter+0x1d3/0x1660 [ 872.152410][T28811] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 872.152437][T28811] ? rcu_is_watching+0x15/0xb0 [ 872.152457][T28811] ? trace_kmem_cache_alloc+0x29/0xe0 [ 872.152483][T28811] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 872.152507][T28811] ? __pfx__copy_from_iter+0x10/0x10 [ 872.152533][T28811] ? __alloc_skb+0x276/0x7a0 [ 872.152554][T28811] ? __alloc_skb+0x276/0x7a0 [ 872.152581][T28811] ? netlink_sendmsg+0x650/0xb40 [ 872.152606][T28811] ? skb_put+0x112/0x210 [ 872.152630][T28811] netlink_sendmsg+0x6c0/0xb40 [ 872.152665][T28811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.152694][T28811] ? aa_sock_msg_perm+0xf1/0x1b0 [ 872.152722][T28811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.152753][T28811] sock_sendmsg_nosec+0x13a/0x180 [ 872.152786][T28811] ____sys_sendmsg+0x54e/0x850 [ 872.152816][T28811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.152850][T28811] ? import_iovec+0x73/0xa0 [ 872.152872][T28811] ___sys_sendmsg+0x2a5/0x360 [ 872.152895][T28811] ? __lock_acquire+0x683/0x2cf0 [ 872.152927][T28811] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.152986][T28811] ? __fget_files+0x2a/0x420 [ 872.153011][T28811] ? __fget_files+0x3a2/0x420 [ 872.153047][T28811] __x64_sys_sendmsg+0x1b1/0x290 [ 872.153075][T28811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 872.153118][T28811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.153139][T28811] do_syscall_64+0x174/0x580 [ 872.153166][T28811] ? trace_irq_disable+0x3b/0x140 [ 872.153192][T28811] ? clear_bhb_loop+0x40/0x90 [ 872.153216][T28811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.153235][T28811] RIP: 0033:0x7f96b019e0d9 [ 872.153253][T28811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.153271][T28811] RSP: 002b:00007f96b0fca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.153293][T28811] RAX: ffffffffffffffda RBX: 00007f96b0425fa0 RCX: 00007f96b019e0d9 [ 872.153307][T28811] RDX: 0000000000060000 RSI: 0000200000000280 RDI: 0000000000000003 [ 872.153321][T28811] RBP: 00007f96b0fca090 R08: 0000000000000000 R09: 0000000000000000 [ 872.153333][T28811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.153346][T28811] R13: 00007f96b0426038 R14: 00007f96b0425fa0 R15: 00007ffea86ac2f8 [ 872.153377][T28811] [ 872.460209][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.468358][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.476480][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.167537][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.515506][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.845459][T28842] veth1: entered promiscuous mode [ 874.902564][T28842] vlan3: entered promiscuous mode [ 875.062795][T28850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.394408][T28843] vlan3: entered promiscuous mode [ 875.474013][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.557002][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.596926][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.942874][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.085253][T28878] FAULT_INJECTION: forcing a failure. [ 878.085253][T28878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.232345][T28878] CPU: 1 UID: 0 PID: 28878 Comm: syz.3.7814 Not tainted syzkaller #0 PREEMPT(full) [ 878.232373][T28878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.232386][T28878] Call Trace: [ 878.232396][T28878] [ 878.232404][T28878] dump_stack_lvl+0xe8/0x150 [ 878.232441][T28878] should_fail_ex+0x40c/0x560 [ 878.232472][T28878] _copy_from_iter+0x1d3/0x1660 [ 878.232499][T28878] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 878.232525][T28878] ? rcu_is_watching+0x15/0xb0 [ 878.232546][T28878] ? trace_kmem_cache_alloc+0x29/0xe0 [ 878.232573][T28878] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 878.232597][T28878] ? __pfx__copy_from_iter+0x10/0x10 [ 878.232624][T28878] ? __alloc_skb+0x276/0x7a0 [ 878.232644][T28878] ? __alloc_skb+0x276/0x7a0 [ 878.232671][T28878] ? netlink_sendmsg+0x650/0xb40 [ 878.232697][T28878] ? skb_put+0x112/0x210 [ 878.232721][T28878] netlink_sendmsg+0x6c0/0xb40 [ 878.232764][T28878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.232794][T28878] ? aa_sock_msg_perm+0xf1/0x1b0 [ 878.232834][T28878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.232858][T28878] sock_sendmsg_nosec+0x13a/0x180 [ 878.232892][T28878] ____sys_sendmsg+0x54e/0x850 [ 878.232922][T28878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.232956][T28878] ? import_iovec+0x73/0xa0 [ 878.232978][T28878] ___sys_sendmsg+0x2a5/0x360 [ 878.233002][T28878] ? __lock_acquire+0x683/0x2cf0 [ 878.233033][T28878] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.233092][T28878] ? __fget_files+0x2a/0x420 [ 878.233118][T28878] ? __fget_files+0x3a2/0x420 [ 878.233154][T28878] __x64_sys_sendmsg+0x1b1/0x290 [ 878.233181][T28878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.233224][T28878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.233245][T28878] do_syscall_64+0x174/0x580 [ 878.233272][T28878] ? trace_irq_disable+0x3b/0x140 [ 878.233298][T28878] ? clear_bhb_loop+0x40/0x90 [ 878.233323][T28878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.233342][T28878] RIP: 0033:0x7f083b79e0d9 [ 878.233361][T28878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.233378][T28878] RSP: 002b:00007f083c594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.233400][T28878] RAX: ffffffffffffffda RBX: 00007f083ba25fa0 RCX: 00007f083b79e0d9 [ 878.233415][T28878] RDX: 0000000020000010 RSI: 0000200000009b40 RDI: 0000000000000003 [ 878.233429][T28878] RBP: 00007f083c594090 R08: 0000000000000000 R09: 0000000000000000 [ 878.233441][T28878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.233453][T28878] R13: 00007f083ba26038 R14: 00007f083ba25fa0 R15: 00007ffc4ffb2ef8 [ 878.233485][T28878] [ 879.036038][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.078128][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.156247][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.610675][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803535b400: rx timeout, send abort [ 880.619426][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803535b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 881.244397][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.134072][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.334083][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.395450][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.473652][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.380746][T28950] netlink: 'syz.0.7841': attribute type 1 has an invalid length. [ 884.420815][T28951] FAULT_INJECTION: forcing a failure. [ 884.420815][T28951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.446943][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.609747][T28950] 8021q: adding VLAN 0 to HW filter on device bond6 [ 884.622913][T28951] CPU: 1 UID: 0 PID: 28951 Comm: syz.2.7840 Not tainted syzkaller #0 PREEMPT(full) [ 884.622940][T28951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.622951][T28951] Call Trace: [ 884.622958][T28951] [ 884.622967][T28951] dump_stack_lvl+0xe8/0x150 [ 884.623002][T28951] should_fail_ex+0x40c/0x560 [ 884.623030][T28951] _copy_from_iter+0x1d3/0x1660 [ 884.623055][T28951] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 884.623080][T28951] ? rcu_is_watching+0x15/0xb0 [ 884.623098][T28951] ? trace_kmem_cache_alloc+0x29/0xe0 [ 884.623122][T28951] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 884.623145][T28951] ? __pfx__copy_from_iter+0x10/0x10 [ 884.623170][T28951] ? __alloc_skb+0x276/0x7a0 [ 884.623188][T28951] ? __alloc_skb+0x276/0x7a0 [ 884.623213][T28951] ? netlink_sendmsg+0x650/0xb40 [ 884.623238][T28951] ? skb_put+0x112/0x210 [ 884.623261][T28951] netlink_sendmsg+0x6c0/0xb40 [ 884.623293][T28951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.623321][T28951] ? aa_sock_msg_perm+0xf1/0x1b0 [ 884.623349][T28951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.623373][T28951] sock_sendmsg_nosec+0x13a/0x180 [ 884.623406][T28951] ____sys_sendmsg+0x54e/0x850 [ 884.623436][T28951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 884.623469][T28951] ? import_iovec+0x73/0xa0 [ 884.623496][T28951] ___sys_sendmsg+0x2a5/0x360 [ 884.623528][T28951] ? __lock_acquire+0x683/0x2cf0 [ 884.623560][T28951] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.623619][T28951] ? __fget_files+0x2a/0x420 [ 884.623643][T28951] ? __fget_files+0x3a2/0x420 [ 884.623679][T28951] __x64_sys_sendmsg+0x1b1/0x290 [ 884.623707][T28951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.623749][T28951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.623771][T28951] do_syscall_64+0x174/0x580 [ 884.623798][T28951] ? trace_irq_disable+0x3b/0x140 [ 884.623823][T28951] ? clear_bhb_loop+0x40/0x90 [ 884.623847][T28951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.623866][T28951] RIP: 0033:0x7f10d9d9e0d9 [ 884.623885][T28951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.623903][T28951] RSP: 002b:00007f10dacda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.623924][T28951] RAX: ffffffffffffffda RBX: 00007f10da025fa0 RCX: 00007f10d9d9e0d9 [ 884.623938][T28951] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 884.623951][T28951] RBP: 00007f10dacda090 R08: 0000000000000000 R09: 0000000000000000 [ 884.623963][T28951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.623973][T28951] R13: 00007f10da026038 R14: 00007f10da025fa0 R15: 00007ffd0f6cb3c8 [ 884.623998][T28951] [ 885.597505][T28958] ip6gre1: entered promiscuous mode [ 885.709329][T28958] ip6gre1: entered allmulticast mode [ 885.964928][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.063452][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.756886][T12338] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.794172][T28983] netlink: 'syz.0.7850': attribute type 1 has an invalid length. [ 886.806281][T28974] tipc: Failed to remove unknown binding: 66,0,0/0:224822853/224822855 [ 886.990140][T28974] tipc: Failed to remove unknown binding: 66,0,0/0:224822853/224822854 [ 887.167535][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 887.176954][T12338] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 887.194205][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.899729][T28983] 8021q: adding VLAN 0 to HW filter on device bond7 [ 887.991083][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 888.194692][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 888.321409][T28991] netlink: 'syz.3.7851': attribute type 1 has an invalid length. [ 888.864538][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.034398][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.190676][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.695160][T29029] FAULT_INJECTION: forcing a failure. [ 890.695160][T29029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.775456][T29029] CPU: 0 UID: 0 PID: 29029 Comm: syz.3.7864 Not tainted syzkaller #0 PREEMPT(full) [ 890.775485][T29029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 890.775498][T29029] Call Trace: [ 890.775506][T29029] [ 890.775515][T29029] dump_stack_lvl+0xe8/0x150 [ 890.775553][T29029] should_fail_ex+0x40c/0x560 [ 890.775586][T29029] _copy_from_iter+0x1d3/0x1660 [ 890.775612][T29029] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 890.775640][T29029] ? rcu_is_watching+0x15/0xb0 [ 890.775661][T29029] ? trace_kmem_cache_alloc+0x29/0xe0 [ 890.775687][T29029] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 890.775712][T29029] ? __pfx__copy_from_iter+0x10/0x10 [ 890.775738][T29029] ? __alloc_skb+0x276/0x7a0 [ 890.775760][T29029] ? __alloc_skb+0x276/0x7a0 [ 890.775787][T29029] ? netlink_sendmsg+0x650/0xb40 [ 890.775813][T29029] ? skb_put+0x112/0x210 [ 890.775838][T29029] netlink_sendmsg+0x6c0/0xb40 [ 890.775873][T29029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.775903][T29029] ? aa_sock_msg_perm+0xf1/0x1b0 [ 890.775932][T29029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.775956][T29029] sock_sendmsg_nosec+0x13a/0x180 [ 890.775990][T29029] ____sys_sendmsg+0x54e/0x850 [ 890.776021][T29029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.776055][T29029] ? import_iovec+0x73/0xa0 [ 890.776077][T29029] ___sys_sendmsg+0x2a5/0x360 [ 890.776100][T29029] ? __lock_acquire+0x683/0x2cf0 [ 890.776133][T29029] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.776163][T29029] ? kstrtouint+0x6e/0xe0 [ 890.776213][T29029] ? __fget_files+0x2a/0x420 [ 890.776239][T29029] ? __fget_files+0x3a2/0x420 [ 890.776275][T29029] __sys_sendmmsg+0x273/0x4d0 [ 890.776306][T29029] ? __pfx___sys_sendmmsg+0x10/0x10 [ 890.776339][T29029] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 890.776383][T29029] ? ksys_write+0x242/0x270 [ 890.776406][T29029] ? __pfx_ksys_write+0x10/0x10 [ 890.776432][T29029] __x64_sys_sendmmsg+0xa0/0xc0 [ 890.776463][T29029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.776488][T29029] do_syscall_64+0x174/0x580 [ 890.776514][T29029] ? trace_irq_disable+0x3b/0x140 [ 890.776540][T29029] ? clear_bhb_loop+0x40/0x90 [ 890.776564][T29029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.776584][T29029] RIP: 0033:0x7f083b79e0d9 [ 890.776603][T29029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.776620][T29029] RSP: 002b:00007f083c594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 890.776642][T29029] RAX: ffffffffffffffda RBX: 00007f083ba25fa0 RCX: 00007f083b79e0d9 [ 890.776657][T29029] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 890.776670][T29029] RBP: 00007f083c594090 R08: 0000000000000000 R09: 0000000000000000 [ 890.776683][T29029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.776695][T29029] R13: 00007f083ba26038 R14: 00007f083ba25fa0 R15: 00007ffc4ffb2ef8 [ 890.776727][T29029] [ 891.098787][T29036] __nla_validate_parse: 5 callbacks suppressed [ 891.098806][T29036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7865'. [ 891.263300][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.632393][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 892.123925][T28212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.315802][T23111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.073714][T28212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.543115][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.597935][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.196554][T28212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.639434][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.947483][T29059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7868'. [ 896.069869][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7869'. [ 896.102432][T29059] netlink: 'syz.3.7868': attribute type 29 has an invalid length. [ 896.191187][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7868'. [ 896.210647][T29064] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7868'. [ 896.284286][T29069] xt_limit: Overflow, try lower: 268435456/134217728 [ 896.545311][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056b9c400: rx timeout, send abort [ 896.677626][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.045265][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056b9d000: rx timeout, send abort [ 897.056215][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056b9c400: abort rx timeout. Force session deactivation [ 897.062500][T29080] netlink: 'syz.0.7872': attribute type 5 has an invalid length. [ 897.329407][T29080] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7872'. [ 897.553736][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056b9d000: abort rx timeout. Force session deactivation [ 897.715260][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.823805][T29092] tipc: Started in network mode [ 897.828716][T29092] tipc: Node identity 1, cluster identity 4711 [ 897.862234][T29092] tipc: Node number set to 1 [ 898.042528][T29096] FAULT_INJECTION: forcing a failure. [ 898.042528][T29096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.085649][T29096] CPU: 1 UID: 0 PID: 29096 Comm: syz.3.7880 Not tainted syzkaller #0 PREEMPT(full) [ 898.085677][T29096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.085690][T29096] Call Trace: [ 898.085699][T29096] [ 898.085707][T29096] dump_stack_lvl+0xe8/0x150 [ 898.085743][T29096] should_fail_ex+0x40c/0x560 [ 898.085773][T29096] _copy_from_iter+0x1d3/0x1660 [ 898.085799][T29096] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 898.085826][T29096] ? rcu_is_watching+0x15/0xb0 [ 898.085846][T29096] ? trace_kmem_cache_alloc+0x29/0xe0 [ 898.085872][T29096] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 898.085897][T29096] ? __pfx__copy_from_iter+0x10/0x10 [ 898.085923][T29096] ? __alloc_skb+0x276/0x7a0 [ 898.085944][T29096] ? __alloc_skb+0x276/0x7a0 [ 898.085970][T29096] ? netlink_sendmsg+0x650/0xb40 [ 898.085994][T29096] ? skb_put+0x112/0x210 [ 898.086019][T29096] netlink_sendmsg+0x6c0/0xb40 [ 898.086053][T29096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.086083][T29096] ? aa_sock_msg_perm+0xf1/0x1b0 [ 898.086110][T29096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.086134][T29096] sock_sendmsg_nosec+0x13a/0x180 [ 898.086166][T29096] ____sys_sendmsg+0x54e/0x850 [ 898.086196][T29096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 898.086230][T29096] ? import_iovec+0x73/0xa0 [ 898.086252][T29096] ___sys_sendmsg+0x2a5/0x360 [ 898.086275][T29096] ? __lock_acquire+0x683/0x2cf0 [ 898.086312][T29096] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.086372][T29096] ? __fget_files+0x2a/0x420 [ 898.086396][T29096] ? __fget_files+0x3a2/0x420 [ 898.086432][T29096] __x64_sys_sendmsg+0x1b1/0x290 [ 898.086459][T29096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 898.086502][T29096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.086524][T29096] do_syscall_64+0x174/0x580 [ 898.086550][T29096] ? trace_irq_disable+0x3b/0x140 [ 898.086575][T29096] ? clear_bhb_loop+0x40/0x90 [ 898.086599][T29096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.086619][T29096] RIP: 0033:0x7f083b79e0d9 [ 898.086637][T29096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.086654][T29096] RSP: 002b:00007f083c594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.086676][T29096] RAX: ffffffffffffffda RBX: 00007f083ba25fa0 RCX: 00007f083b79e0d9 [ 898.086690][T29096] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000010 [ 898.086703][T29096] RBP: 00007f083c594090 R08: 0000000000000000 R09: 0000000000000000 [ 898.086715][T29096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.086726][T29096] R13: 00007f083ba26038 R14: 00007f083ba25fa0 R15: 00007ffc4ffb2ef8 [ 898.086757][T29096] [ 898.906471][T29100] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 898.976633][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.178096][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.283464][T29112] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7886'. [ 899.975834][T29119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7888'. [ 900.099997][T29121] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 900.160449][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.218979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.272337][T29119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7888'. [ 900.753858][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 901.233263][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.479588][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f831c00: rx timeout, send abort [ 901.488222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.498994][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f831c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 901.818577][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056027000: rx timeout, send abort [ 901.827144][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056027000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 902.203159][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.273233][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.838855][T27716] Bluetooth: hci1: command 0x0406 tx timeout [ 902.930994][T29132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 903.209531][T29132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 903.433662][ T5803] net_ratelimit: 1 callbacks suppressed [ 903.433681][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.663934][T29157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7900'. [ 903.772753][T12338] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.780005][T12338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.524064][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.831419][T12326] IPVS: starting estimator thread 0... [ 904.983518][T29167] IPVS: using max 32 ests per chain, 76800 per kthread [ 905.235321][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.480993][T29174] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 905.554512][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.602676][T29174] FAULT_INJECTION: forcing a failure. [ 905.602676][T29174] name failslab, interval 1, probability 0, space 0, times 0 [ 905.617373][T29174] CPU: 0 UID: 0 PID: 29174 Comm: syz.1.7906 Not tainted syzkaller #0 PREEMPT(full) [ 905.617401][T29174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.617413][T29174] Call Trace: [ 905.617424][T29174] [ 905.617433][T29174] dump_stack_lvl+0xe8/0x150 [ 905.617469][T29174] should_fail_ex+0x40c/0x560 [ 905.617501][T29174] should_failslab+0xa8/0x100 [ 905.617533][T29174] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 905.617566][T29174] ? local_lock_release+0x9c/0x160 [ 905.617590][T29174] ? __alloc_skb+0x1d7/0x7a0 [ 905.617609][T29174] ? __alloc_skb+0x1d7/0x7a0 [ 905.617637][T29174] __alloc_skb+0x1d7/0x7a0 [ 905.617664][T29174] __br_mdb_notify+0x2fc/0xae0 [ 905.617798][T29174] ? br_multicast_eht_clean_sets+0x2d2/0x2f0 [ 905.617834][T29174] br_multicast_del_pg+0x4a9/0x1de0 [ 905.617891][T29174] ? br_mdb_ip_get+0x757/0x830 [ 905.617917][T29174] ? br_mdb_ip_get+0x90/0x830 [ 905.617953][T29174] ? br_multicast_find_del_pg+0x11e/0x150 [ 905.617977][T29174] __br_multicast_disable_port_ctx+0x202/0x640 [ 905.618009][T29174] ? __pfx___br_multicast_disable_port_ctx+0x10/0x10 [ 905.618031][T29174] ? do_raw_spin_lock+0x12b/0x2f0 [ 905.618053][T29174] ? br_multicast_toggle_one_vlan+0x50c/0x670 [ 905.618078][T29174] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 905.618099][T29174] ? br_vlan_lookup+0x8f/0x7a0 [ 905.618159][T29174] ? br_multicast_toggle_one_vlan+0x50c/0x670 [ 905.618189][T29174] br_multicast_toggle_one_vlan+0x541/0x670 [ 905.618219][T29174] br_multicast_toggle_vlan+0x197/0x2b0 [ 905.618249][T29174] br_multicast_toggle_vlan_snooping+0x5d5/0x650 [ 905.618280][T29174] br_vlan_filter_toggle+0x51e/0x5d0 [ 905.618308][T29174] ? __pfx_br_vlan_filter_toggle+0x10/0x10 [ 905.618334][T29174] ? __mutex_trylock_common+0x15f/0x270 [ 905.618359][T29174] ? __pfx___mutex_trylock_common+0x10/0x10 [ 905.618385][T29174] br_changelink+0x53b/0x18e0 [ 905.618432][T29174] ? trace_contention_end+0x3d/0x140 [ 905.618456][T29174] ? __mutex_lock+0x30d/0x1550 [ 905.618484][T29174] ? __pfx_br_changelink+0x10/0x10 [ 905.618513][T29174] ? rtnl_newlink+0xc10/0x1c30 [ 905.618538][T29174] ? __pfx___mutex_lock+0x10/0x10 [ 905.618583][T29174] ? ns_capable+0x89/0xe0 [ 905.618609][T29174] ? rtnl_nets_add+0x16c/0x300 [ 905.618631][T29174] ? refcount_inc+0x46/0x70 [ 905.618653][T29174] rtnl_newlink+0x15fe/0x1c30 [ 905.618690][T29174] ? __pfx_rtnl_newlink+0x10/0x10 [ 905.618710][T29174] ? do_syscall_64+0x174/0x580 [ 905.618735][T29174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.618794][T29174] ? kasan_quarantine_put+0xbb/0x1f0 [ 905.618820][T29174] ? lockdep_hardirqs_on+0x7a/0x110 [ 905.618851][T29174] ? nlmon_xmit+0xb0/0x100 [ 905.618920][T29174] ? kmem_cache_free+0x182/0x650 [ 905.618959][T29174] ? __lock_acquire+0x683/0x2cf0 [ 905.618990][T29174] ? __dev_queue_xmit+0x29b/0x3820 [ 905.619020][T29174] ? __local_bh_enable_ip+0xd0/0x130 [ 905.619044][T29174] ? lockdep_hardirqs_on+0x7a/0x110 [ 905.619068][T29174] ? __dev_queue_xmit+0x29b/0x3820 [ 905.619093][T29174] ? __local_bh_enable_ip+0xd0/0x130 [ 905.619114][T29174] ? __dev_queue_xmit+0x29b/0x3820 [ 905.619147][T29174] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 905.619186][T29174] ? __pfx_rtnl_newlink+0x10/0x10 [ 905.619208][T29174] rtnetlink_rcv_msg+0x802/0xc00 [ 905.619234][T29174] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 905.619256][T29174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 905.619276][T29174] ? ref_tracker_free+0x689/0x830 [ 905.619307][T29174] ? __pfx_ref_tracker_free+0x10/0x10 [ 905.619345][T29174] netlink_rcv_skb+0x226/0x4a0 [ 905.619372][T29174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 905.619397][T29174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 905.619437][T29174] ? netlink_deliver_tap+0x2e/0x1b0 [ 905.619461][T29174] ? netlink_deliver_tap+0x2e/0x1b0 [ 905.619492][T29174] netlink_unicast+0x7bb/0x940 [ 905.619527][T29174] netlink_sendmsg+0x813/0xb40 [ 905.619569][T29174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.619600][T29174] ? aa_sock_msg_perm+0xf1/0x1b0 [ 905.619628][T29174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.619653][T29174] sock_sendmsg_nosec+0x13a/0x180 [ 905.619687][T29174] ____sys_sendmsg+0x54e/0x850 [ 905.619718][T29174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.619753][T29174] ? import_iovec+0x73/0xa0 [ 905.619776][T29174] ___sys_sendmsg+0x2a5/0x360 [ 905.619800][T29174] ? __lock_acquire+0x683/0x2cf0 [ 905.619832][T29174] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.619895][T29174] ? __fget_files+0x2a/0x420 [ 905.619921][T29174] ? __fget_files+0x3a2/0x420 [ 905.619958][T29174] __x64_sys_sendmsg+0x1b1/0x290 [ 905.619987][T29174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 905.620032][T29174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.620053][T29174] do_syscall_64+0x174/0x580 [ 905.620078][T29174] ? trace_irq_disable+0x3b/0x140 [ 905.620104][T29174] ? clear_bhb_loop+0x40/0x90 [ 905.620128][T29174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.620148][T29174] RIP: 0033:0x7f63e799e0d9 [ 905.620169][T29174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.620186][T29174] RSP: 002b:00007f63e88bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.620207][T29174] RAX: ffffffffffffffda RBX: 00007f63e7c25fa0 RCX: 00007f63e799e0d9 [ 905.620221][T29174] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 905.620234][T29174] RBP: 00007f63e88bc090 R08: 0000000000000000 R09: 0000000000000000 [ 905.620246][T29174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.620258][T29174] R13: 00007f63e7c26038 R14: 00007f63e7c25fa0 R15: 00007ffc95ee7718 [ 905.620291][T29174] [ 907.263746][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.083188][T29178] macvlan2: entered promiscuous mode [ 908.292473][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.304996][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.321171][T29196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7914'. [ 908.713658][T29200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 909.313506][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.633848][T29209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7917'. [ 909.797894][T29209] netlink: 'syz.1.7917': attribute type 2 has an invalid length. [ 910.308816][T29209] : entered promiscuous mode [ 910.353224][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.490335][T29220] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7917'. [ 910.649928][T29213] syzkaller0: entered promiscuous mode [ 910.861677][T29213] syzkaller0: entered allmulticast mode [ 910.955481][T29209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.203854][T12326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.315095][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.438351][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.273202][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.519061][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.158321][T29227] batadv0: entered promiscuous mode [ 913.261449][T29227] vlan0: entered promiscuous mode [ 913.553107][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.353351][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.614126][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.699122][T29244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7928'. [ 915.633683][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.752527][T29257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7935'. [ 916.169157][T29267] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 916.239322][T29263] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 916.295322][T29267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.696559][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.152051][T29279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.394136][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.637930][ T9] lwtunnel_output(): recursion limit reached on datapath [ 917.877435][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.672361][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 918.913028][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.068759][T29322] netlink: 'syz.2.7952': attribute type 1 has an invalid length. [ 919.203892][T29321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7950'. [ 919.406487][T29328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7952'. [ 919.421777][T29321] 8021q: VLANs not supported on nlmon0 [ 919.964161][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.433770][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.681972][ T5803] lwtunnel_output(): recursion limit reached on datapath [ 921.282511][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.873999][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.933237][T29359] ip6tnl0: Caught tx_queue_len zero misconfig [ 921.990598][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.017334][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.199234][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.353126][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.398487][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.154466][T29401] BUG: Bad page state in process syz.0.7968 pfn:4c738 [ 924.161392][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x4c738 [ 924.171743][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 924.179042][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 924.187714][T29401] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 924.196386][T29401] page dumped because: page_pool leak [ 924.201793][T29401] page_owner tracks the page as allocated [ 924.208288][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154333738, free_ts 924014007074 [ 924.225641][T29401] post_alloc_hook+0x1f9/0x250 [ 924.230428][T29401] get_page_from_freelist+0x21fa/0x2270 [ 924.236031][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 924.241854][T29401] __alloc_pages_noprof+0x10/0x100 [ 924.247026][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 924.252624][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 924.258798][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 924.263700][T29401] do_xdp_generic+0x770/0x12d0 [ 924.268530][T29401] tun_get_user+0x24f8/0x4370 [ 924.273255][T29401] tun_chr_write_iter+0x113/0x200 [ 924.278294][T29401] vfs_write+0x612/0xba0 [ 924.282588][T29401] ksys_write+0x150/0x270 [ 924.286928][T29401] do_syscall_64+0x174/0x580 [ 924.291532][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.297484][T29401] page last free pid 29369 tgid 29369 stack trace: [ 924.304026][T29401] __free_frozen_pages+0xc1e/0xd10 [ 924.309164][T29401] tlb_remove_table_rcu+0x85/0x100 [ 924.314334][T29401] rcu_core+0x78b/0x10a0 [ 924.318718][T29401] handle_softirqs+0x225/0x840 [ 924.323535][T29401] __irq_exit_rcu+0xca/0x220 [ 924.328140][T29401] irq_exit_rcu+0x9/0x30 [ 924.332435][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 924.338089][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 924.344211][T29401] Modules linked in: [ 924.348127][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Not tainted syzkaller #0 PREEMPT(full) [ 924.348153][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 924.348165][T29401] Call Trace: [ 924.348174][T29401] [ 924.348182][T29401] dump_stack_lvl+0xe8/0x150 [ 924.348217][T29401] bad_page+0x17f/0x1c0 [ 924.348241][T29401] __free_frozen_pages+0xcc2/0xd10 [ 924.348276][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 924.348393][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 924.348453][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 924.348472][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 924.348526][T29401] do_xdp_generic+0xac2/0x12d0 [ 924.348554][T29401] ? __lock_acquire+0x683/0x2cf0 [ 924.348582][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 924.348616][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 924.348655][T29401] ? tun_get_user+0x23cb/0x4370 [ 924.348688][T29401] ? tun_get_user+0x23cb/0x4370 [ 924.348717][T29401] tun_get_user+0x24f8/0x4370 [ 924.348752][T29401] ? aa_file_perm+0x18b/0x15f0 [ 924.348783][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 924.348806][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 924.348827][T29401] ? __lock_acquire+0x683/0x2cf0 [ 924.348859][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 924.348889][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 924.348920][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 924.348949][T29401] ? tun_get+0x1c/0x2f0 [ 924.348979][T29401] ? tun_get+0x1c/0x2f0 [ 924.349015][T29401] ? tun_get+0x1c/0x2f0 [ 924.349043][T29401] ? tun_get+0x1c/0x2f0 [ 924.349075][T29401] tun_chr_write_iter+0x113/0x200 [ 924.349107][T29401] vfs_write+0x612/0xba0 [ 924.349135][T29401] ? __pfx_vfs_write+0x10/0x10 [ 924.349165][T29401] ? __fget_files+0x2a/0x420 [ 924.349201][T29401] ksys_write+0x150/0x270 [ 924.349223][T29401] ? __pfx_ksys_write+0x10/0x10 [ 924.349242][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 924.349290][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.349313][T29401] do_syscall_64+0x174/0x580 [ 924.349342][T29401] ? trace_irq_disable+0x3b/0x140 [ 924.349368][T29401] ? clear_bhb_loop+0x40/0x90 [ 924.349393][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.349413][T29401] RIP: 0033:0x7f6cf7b5e90e [ 924.349433][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 924.349450][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 924.349471][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 924.349486][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 924.349499][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 924.349512][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.349523][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 924.349554][T29401] [ 924.349562][T29401] Disabling lock debugging due to kernel taint [ 924.637942][T29401] BUG: Bad page state in process syz.0.7968 pfn:5bd67 [ 924.644824][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x5bd67 [ 924.654932][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 924.662053][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 924.670677][T29401] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 924.679328][T29401] page dumped because: page_pool leak [ 924.684714][T29401] page_owner tracks the page as allocated [ 924.690427][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154292176, free_ts 924014047456 [ 924.707667][T29401] post_alloc_hook+0x1f9/0x250 [ 924.712479][T29401] get_page_from_freelist+0x21fa/0x2270 [ 924.718042][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 924.723908][T29401] __alloc_pages_noprof+0x10/0x100 [ 924.729037][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 924.734540][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 924.740643][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 924.745528][T29401] do_xdp_generic+0x770/0x12d0 [ 924.750323][T29401] tun_get_user+0x24f8/0x4370 [ 924.755039][T29401] tun_chr_write_iter+0x113/0x200 [ 924.760095][T29401] vfs_write+0x612/0xba0 [ 924.764393][T29401] ksys_write+0x150/0x270 [ 924.768739][T29401] do_syscall_64+0x174/0x580 [ 924.773403][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.779303][T29401] page last free pid 29369 tgid 29369 stack trace: [ 924.785832][T29401] __free_frozen_pages+0xc1e/0xd10 [ 924.790986][T29401] tlb_remove_table_rcu+0x85/0x100 [ 924.796225][T29401] rcu_core+0x78b/0x10a0 [ 924.800491][T29401] handle_softirqs+0x225/0x840 [ 924.805293][T29401] __irq_exit_rcu+0xca/0x220 [ 924.809897][T29401] irq_exit_rcu+0x9/0x30 [ 924.814193][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 924.819848][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 924.825928][T29401] Modules linked in: [ 924.830128][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Tainted: G B syzkaller #0 PREEMPT(full) [ 924.830158][T29401] Tainted: [B]=BAD_PAGE [ 924.830165][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 924.830177][T29401] Call Trace: [ 924.830186][T29401] [ 924.830197][T29401] dump_stack_lvl+0xe8/0x150 [ 924.830230][T29401] bad_page+0x17f/0x1c0 [ 924.830252][T29401] __free_frozen_pages+0xcc2/0xd10 [ 924.830280][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 924.830320][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 924.830347][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 924.830366][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 924.830405][T29401] do_xdp_generic+0xac2/0x12d0 [ 924.830432][T29401] ? __lock_acquire+0x683/0x2cf0 [ 924.830459][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 924.830489][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 924.830521][T29401] ? tun_get_user+0x23cb/0x4370 [ 924.830546][T29401] ? tun_get_user+0x23cb/0x4370 [ 924.830564][T29401] tun_get_user+0x24f8/0x4370 [ 924.830589][T29401] ? aa_file_perm+0x18b/0x15f0 [ 924.830615][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 924.830644][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 924.830663][T29401] ? __lock_acquire+0x683/0x2cf0 [ 924.830691][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 924.830715][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 924.830743][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 924.830770][T29401] ? tun_get+0x1c/0x2f0 [ 924.830798][T29401] ? tun_get+0x1c/0x2f0 [ 924.830827][T29401] ? tun_get+0x1c/0x2f0 [ 924.830854][T29401] ? tun_get+0x1c/0x2f0 [ 924.830884][T29401] tun_chr_write_iter+0x113/0x200 [ 924.830914][T29401] vfs_write+0x612/0xba0 [ 924.830937][T29401] ? __pfx_vfs_write+0x10/0x10 [ 924.830960][T29401] ? __fget_files+0x2a/0x420 [ 924.830989][T29401] ksys_write+0x150/0x270 [ 924.831008][T29401] ? __pfx_ksys_write+0x10/0x10 [ 924.831027][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 924.831053][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.831073][T29401] do_syscall_64+0x174/0x580 [ 924.831100][T29401] ? trace_irq_disable+0x3b/0x140 [ 924.831125][T29401] ? clear_bhb_loop+0x40/0x90 [ 924.831152][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.831172][T29401] RIP: 0033:0x7f6cf7b5e90e [ 924.831190][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 924.831208][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 924.831228][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 924.831243][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 924.831257][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 924.831270][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.831282][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 924.831305][T29401] [ 924.831317][T29401] BUG: Bad page state in process syz.0.7968 pfn:323bc [ 925.126689][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000000e0 pfn:0x323bc [ 925.136289][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 925.143535][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 925.152239][T29401] raw: 00000002000000e0 0000000000000001 00000000ffffffff 0000000000000000 [ 925.160822][T29401] page dumped because: page_pool leak [ 925.166247][T29401] page_owner tracks the page as allocated [ 925.171984][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154274424, free_ts 924014086949 [ 925.189265][T29401] post_alloc_hook+0x1f9/0x250 [ 925.194115][T29401] get_page_from_freelist+0x21fa/0x2270 [ 925.199676][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 925.205537][T29401] __alloc_pages_noprof+0x10/0x100 [ 925.210748][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 925.216255][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 925.222373][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 925.227244][T29401] do_xdp_generic+0x770/0x12d0 [ 925.232019][T29401] tun_get_user+0x24f8/0x4370 [ 925.236814][T29401] tun_chr_write_iter+0x113/0x200 [ 925.241847][T29401] vfs_write+0x612/0xba0 [ 925.246131][T29401] ksys_write+0x150/0x270 [ 925.250473][T29401] do_syscall_64+0x174/0x580 [ 925.255117][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.261018][T29401] page last free pid 29369 tgid 29369 stack trace: [ 925.267552][T29401] __free_frozen_pages+0xc1e/0xd10 [ 925.272710][T29401] tlb_remove_table_rcu+0x85/0x100 [ 925.277919][T29401] rcu_core+0x78b/0x10a0 [ 925.282208][T29401] handle_softirqs+0x225/0x840 [ 925.286976][T29401] __irq_exit_rcu+0xca/0x220 [ 925.291574][T29401] irq_exit_rcu+0x9/0x30 [ 925.295870][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 925.301539][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 925.307573][T29401] Modules linked in: [ 925.311481][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Tainted: G B syzkaller #0 PREEMPT(full) [ 925.311511][T29401] Tainted: [B]=BAD_PAGE [ 925.311519][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 925.311530][T29401] Call Trace: [ 925.311539][T29401] [ 925.311547][T29401] dump_stack_lvl+0xe8/0x150 [ 925.311577][T29401] bad_page+0x17f/0x1c0 [ 925.311598][T29401] __free_frozen_pages+0xcc2/0xd10 [ 925.311624][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 925.311662][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 925.311697][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 925.311715][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 925.311754][T29401] do_xdp_generic+0xac2/0x12d0 [ 925.311778][T29401] ? __lock_acquire+0x683/0x2cf0 [ 925.311804][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 925.311832][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 925.311861][T29401] ? tun_get_user+0x23cb/0x4370 [ 925.311885][T29401] ? tun_get_user+0x23cb/0x4370 [ 925.311898][T29401] tun_get_user+0x24f8/0x4370 [ 925.311920][T29401] ? aa_file_perm+0x18b/0x15f0 [ 925.311946][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 925.311969][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 925.311988][T29401] ? __lock_acquire+0x683/0x2cf0 [ 925.312016][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 925.312039][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 925.312066][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 925.312088][T29401] ? tun_get+0x1c/0x2f0 [ 925.312113][T29401] ? tun_get+0x1c/0x2f0 [ 925.312146][T29401] ? tun_get+0x1c/0x2f0 [ 925.312168][T29401] ? tun_get+0x1c/0x2f0 [ 925.312196][T29401] tun_chr_write_iter+0x113/0x200 [ 925.312220][T29401] vfs_write+0x612/0xba0 [ 925.312239][T29401] ? __pfx_vfs_write+0x10/0x10 [ 925.312257][T29401] ? __fget_files+0x2a/0x420 [ 925.312284][T29401] ksys_write+0x150/0x270 [ 925.312301][T29401] ? __pfx_ksys_write+0x10/0x10 [ 925.312317][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 925.312342][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.312363][T29401] do_syscall_64+0x174/0x580 [ 925.312391][T29401] ? trace_irq_disable+0x3b/0x140 [ 925.312416][T29401] ? clear_bhb_loop+0x40/0x90 [ 925.312438][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.312457][T29401] RIP: 0033:0x7f6cf7b5e90e [ 925.312474][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 925.312489][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 925.312509][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 925.312522][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 925.312534][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 925.312545][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.312556][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 925.312575][T29401] [ 925.598618][T29401] BUG: Bad page state in process syz.0.7968 pfn:66639 [ 925.605515][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x66639 [ 925.615110][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 925.622281][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 925.630881][T29401] raw: 0000000200000000 0000000000000001 00000000ffffffff 0000000000000000 [ 925.639544][T29401] page dumped because: page_pool leak [ 925.644958][T29401] page_owner tracks the page as allocated [ 925.650678][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154256840, free_ts 924014127353 [ 925.668016][T29401] post_alloc_hook+0x1f9/0x250 [ 925.672832][T29401] get_page_from_freelist+0x21fa/0x2270 [ 925.678427][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 925.684367][T29401] __alloc_pages_noprof+0x10/0x100 [ 925.689493][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 925.694991][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 925.701070][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 925.705954][T29401] do_xdp_generic+0x770/0x12d0 [ 925.710736][T29401] tun_get_user+0x24f8/0x4370 [ 925.715444][T29401] tun_chr_write_iter+0x113/0x200 [ 925.720485][T29401] vfs_write+0x612/0xba0 [ 925.724759][T29401] ksys_write+0x150/0x270 [ 925.729106][T29401] do_syscall_64+0x174/0x580 [ 925.733738][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.739649][T29401] page last free pid 29369 tgid 29369 stack trace: [ 925.746271][T29401] __free_frozen_pages+0xc1e/0xd10 [ 925.751399][T29401] tlb_remove_table_rcu+0x85/0x100 [ 925.756544][T29401] rcu_core+0x78b/0x10a0 [ 925.760803][T29401] handle_softirqs+0x225/0x840 [ 925.765601][T29401] __irq_exit_rcu+0xca/0x220 [ 925.770287][T29401] irq_exit_rcu+0x9/0x30 [ 925.774561][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 925.780213][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 925.786280][T29401] Modules linked in: [ 925.790288][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Tainted: G B syzkaller #0 PREEMPT(full) [ 925.790317][T29401] Tainted: [B]=BAD_PAGE [ 925.790325][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 925.790337][T29401] Call Trace: [ 925.790347][T29401] [ 925.790356][T29401] dump_stack_lvl+0xe8/0x150 [ 925.790391][T29401] bad_page+0x17f/0x1c0 [ 925.790413][T29401] __free_frozen_pages+0xcc2/0xd10 [ 925.790442][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 925.790481][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 925.790509][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 925.790527][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 925.790567][T29401] do_xdp_generic+0xac2/0x12d0 [ 925.790594][T29401] ? __lock_acquire+0x683/0x2cf0 [ 925.790622][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 925.790652][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 925.790684][T29401] ? tun_get_user+0x23cb/0x4370 [ 925.790709][T29401] ? tun_get_user+0x23cb/0x4370 [ 925.790727][T29401] tun_get_user+0x24f8/0x4370 [ 925.790752][T29401] ? aa_file_perm+0x18b/0x15f0 [ 925.790778][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 925.790801][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 925.790820][T29401] ? __lock_acquire+0x683/0x2cf0 [ 925.790848][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 925.790872][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 925.790900][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 925.790927][T29401] ? tun_get+0x1c/0x2f0 [ 925.790963][T29401] ? tun_get+0x1c/0x2f0 [ 925.790993][T29401] ? tun_get+0x1c/0x2f0 [ 925.791020][T29401] ? tun_get+0x1c/0x2f0 [ 925.791050][T29401] tun_chr_write_iter+0x113/0x200 [ 925.791085][T29401] vfs_write+0x612/0xba0 [ 925.791107][T29401] ? __pfx_vfs_write+0x10/0x10 [ 925.791130][T29401] ? __fget_files+0x2a/0x420 [ 925.791161][T29401] ksys_write+0x150/0x270 [ 925.791180][T29401] ? __pfx_ksys_write+0x10/0x10 [ 925.791199][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 925.791231][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.791252][T29401] do_syscall_64+0x174/0x580 [ 925.791280][T29401] ? trace_irq_disable+0x3b/0x140 [ 925.791306][T29401] ? clear_bhb_loop+0x40/0x90 [ 925.791327][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.791348][T29401] RIP: 0033:0x7f6cf7b5e90e [ 925.791367][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 925.791394][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 925.791415][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 925.791431][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 925.791444][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 925.791457][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.791469][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 925.791492][T29401] [ 925.791504][T29401] BUG: Bad page state in process syz.0.7968 pfn:777ff [ 926.086536][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x777ff [ 926.096651][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 926.103815][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 926.112441][T29401] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 926.121116][T29401] page dumped because: page_pool leak [ 926.126546][T29401] page_owner tracks the page as allocated [ 926.132300][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154239142, free_ts 924014168900 [ 926.149545][T29401] post_alloc_hook+0x1f9/0x250 [ 926.154394][T29401] get_page_from_freelist+0x21fa/0x2270 [ 926.159969][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 926.165936][T29401] __alloc_pages_noprof+0x10/0x100 [ 926.171070][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 926.176594][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 926.182710][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 926.187625][T29401] do_xdp_generic+0x770/0x12d0 [ 926.192443][T29401] tun_get_user+0x24f8/0x4370 [ 926.197135][T29401] tun_chr_write_iter+0x113/0x200 [ 926.202228][T29401] vfs_write+0x612/0xba0 [ 926.206489][T29401] ksys_write+0x150/0x270 [ 926.210828][T29401] do_syscall_64+0x174/0x580 [ 926.215483][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.221382][T29401] page last free pid 29369 tgid 29369 stack trace: [ 926.227931][T29401] __free_frozen_pages+0xc1e/0xd10 [ 926.233261][T29401] tlb_remove_table_rcu+0x85/0x100 [ 926.238391][T29401] rcu_core+0x78b/0x10a0 [ 926.242688][T29401] handle_softirqs+0x225/0x840 [ 926.247467][T29401] __irq_exit_rcu+0xca/0x220 [ 926.252086][T29401] irq_exit_rcu+0x9/0x30 [ 926.256366][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 926.262012][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 926.268063][T29401] Modules linked in: [ 926.271964][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Tainted: G B syzkaller #0 PREEMPT(full) [ 926.271993][T29401] Tainted: [B]=BAD_PAGE [ 926.272000][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.272013][T29401] Call Trace: [ 926.272021][T29401] [ 926.272035][T29401] dump_stack_lvl+0xe8/0x150 [ 926.272067][T29401] bad_page+0x17f/0x1c0 [ 926.272089][T29401] __free_frozen_pages+0xcc2/0xd10 [ 926.272118][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 926.272161][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 926.272183][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 926.272200][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 926.272236][T29401] do_xdp_generic+0xac2/0x12d0 [ 926.272261][T29401] ? __lock_acquire+0x683/0x2cf0 [ 926.272286][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 926.272315][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 926.272347][T29401] ? tun_get_user+0x23cb/0x4370 [ 926.272372][T29401] ? tun_get_user+0x23cb/0x4370 [ 926.272390][T29401] tun_get_user+0x24f8/0x4370 [ 926.272413][T29401] ? aa_file_perm+0x18b/0x15f0 [ 926.272438][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 926.272460][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 926.272479][T29401] ? __lock_acquire+0x683/0x2cf0 [ 926.272507][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 926.272531][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 926.272558][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 926.272585][T29401] ? tun_get+0x1c/0x2f0 [ 926.272613][T29401] ? tun_get+0x1c/0x2f0 [ 926.272643][T29401] ? tun_get+0x1c/0x2f0 [ 926.272670][T29401] ? tun_get+0x1c/0x2f0 [ 926.272699][T29401] tun_chr_write_iter+0x113/0x200 [ 926.272728][T29401] vfs_write+0x612/0xba0 [ 926.272751][T29401] ? __pfx_vfs_write+0x10/0x10 [ 926.272773][T29401] ? __fget_files+0x2a/0x420 [ 926.272803][T29401] ksys_write+0x150/0x270 [ 926.272823][T29401] ? __pfx_ksys_write+0x10/0x10 [ 926.272841][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 926.272867][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.272887][T29401] do_syscall_64+0x174/0x580 [ 926.272914][T29401] ? trace_irq_disable+0x3b/0x140 [ 926.272939][T29401] ? clear_bhb_loop+0x40/0x90 [ 926.272961][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.272981][T29401] RIP: 0033:0x7f6cf7b5e90e [ 926.272998][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 926.273015][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 926.273042][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 926.273058][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 926.273072][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 926.273085][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.273097][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 926.273120][T29401] [ 926.559341][T29401] BUG: Bad page state in process syz.0.7968 pfn:232a1 [ 926.566229][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880232a1400 pfn:0x232a1 [ 926.576430][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 926.583607][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 926.592224][T29401] raw: ffff8880232a1400 0000000000000001 00000000ffffffff 0000000000000000 [ 926.600806][T29401] page dumped because: page_pool leak [ 926.606206][T29401] page_owner tracks the page as allocated [ 926.612007][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154221487, free_ts 924014208472 [ 926.629246][T29401] post_alloc_hook+0x1f9/0x250 [ 926.632902][T28212] net_ratelimit: 2 callbacks suppressed [ 926.632917][T28212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.634045][T29401] get_page_from_freelist+0x21fa/0x2270 [ 926.653308][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 926.659164][T29401] __alloc_pages_noprof+0x10/0x100 [ 926.664323][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 926.669795][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 926.675901][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 926.680763][T29401] do_xdp_generic+0x770/0x12d0 [ 926.685665][T29401] tun_get_user+0x24f8/0x4370 [ 926.690354][T29401] tun_chr_write_iter+0x113/0x200 [ 926.695435][T29401] vfs_write+0x612/0xba0 [ 926.699694][T29401] ksys_write+0x150/0x270 [ 926.704059][T29401] do_syscall_64+0x174/0x580 [ 926.708665][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.714699][T29401] page last free pid 29369 tgid 29369 stack trace: [ 926.721203][T29401] __free_frozen_pages+0xc1e/0xd10 [ 926.726358][T29401] tlb_remove_table_rcu+0x85/0x100 [ 926.731747][T29401] rcu_core+0x78b/0x10a0 [ 926.736026][T29401] handle_softirqs+0x225/0x840 [ 926.740805][T29401] __irq_exit_rcu+0xca/0x220 [ 926.745443][T29401] irq_exit_rcu+0x9/0x30 [ 926.749736][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 926.755424][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 926.761447][T29401] Modules linked in: [ 926.765389][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Tainted: G B syzkaller #0 PREEMPT(full) [ 926.765418][T29401] Tainted: [B]=BAD_PAGE [ 926.765426][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.765439][T29401] Call Trace: [ 926.765447][T29401] [ 926.765455][T29401] dump_stack_lvl+0xe8/0x150 [ 926.765488][T29401] bad_page+0x17f/0x1c0 [ 926.765510][T29401] __free_frozen_pages+0xcc2/0xd10 [ 926.765539][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 926.765579][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 926.765605][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 926.765624][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 926.765664][T29401] do_xdp_generic+0xac2/0x12d0 [ 926.765692][T29401] ? __lock_acquire+0x683/0x2cf0 [ 926.765720][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 926.765750][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 926.765782][T29401] ? tun_get_user+0x23cb/0x4370 [ 926.765808][T29401] ? tun_get_user+0x23cb/0x4370 [ 926.765826][T29401] tun_get_user+0x24f8/0x4370 [ 926.765850][T29401] ? aa_file_perm+0x18b/0x15f0 [ 926.765876][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 926.765899][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 926.765918][T29401] ? __lock_acquire+0x683/0x2cf0 [ 926.765946][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 926.765970][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 926.765999][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 926.766025][T29401] ? tun_get+0x1c/0x2f0 [ 926.766061][T29401] ? tun_get+0x1c/0x2f0 [ 926.766091][T29401] ? tun_get+0x1c/0x2f0 [ 926.766119][T29401] ? tun_get+0x1c/0x2f0 [ 926.766149][T29401] tun_chr_write_iter+0x113/0x200 [ 926.766178][T29401] vfs_write+0x612/0xba0 [ 926.766200][T29401] ? __pfx_vfs_write+0x10/0x10 [ 926.766223][T29401] ? __fget_files+0x2a/0x420 [ 926.766253][T29401] ksys_write+0x150/0x270 [ 926.766273][T29401] ? __pfx_ksys_write+0x10/0x10 [ 926.766291][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 926.766317][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.766338][T29401] do_syscall_64+0x174/0x580 [ 926.766366][T29401] ? trace_irq_disable+0x3b/0x140 [ 926.766390][T29401] ? clear_bhb_loop+0x40/0x90 [ 926.766412][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.766432][T29401] RIP: 0033:0x7f6cf7b5e90e [ 926.766449][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 926.766467][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 926.766488][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 926.766504][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 926.766517][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 926.766530][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.766541][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 926.766564][T29401] [ 926.766575][T29401] BUG: Bad page state in process syz.0.7968 pfn:57b9a [ 927.061190][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057b9ae00 pfn:0x57b9a [ 927.071505][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 927.078662][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 927.087298][T29401] raw: ffff888057b9ae00 0000000000000001 00000000ffffffff 0000000000000000 [ 927.095922][T29401] page dumped because: page_pool leak [ 927.101294][T29401] page_owner tracks the page as allocated [ 927.107048][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154204095, free_ts 924014249977 [ 927.124305][T29401] post_alloc_hook+0x1f9/0x250 [ 927.129087][T29401] get_page_from_freelist+0x21fa/0x2270 [ 927.134688][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 927.140668][T29401] __alloc_pages_noprof+0x10/0x100 [ 927.145853][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 927.151357][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 927.157458][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 927.162379][T29401] do_xdp_generic+0x770/0x12d0 [ 927.167220][T29401] tun_get_user+0x24f8/0x4370 [ 927.172001][T29401] tun_chr_write_iter+0x113/0x200 [ 927.177181][T29401] vfs_write+0x612/0xba0 [ 927.181429][T29401] ksys_write+0x150/0x270 [ 927.185826][T29401] do_syscall_64+0x174/0x580 [ 927.190439][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.196399][T29401] page last free pid 29369 tgid 29369 stack trace: [ 927.203036][T29401] __free_frozen_pages+0xc1e/0xd10 [ 927.208178][T29401] tlb_remove_table_rcu+0x85/0x100 [ 927.213348][T29401] rcu_core+0x78b/0x10a0 [ 927.218177][T29401] handle_softirqs+0x225/0x840 [ 927.223086][T29401] __irq_exit_rcu+0xca/0x220 [ 927.227688][T29401] irq_exit_rcu+0x9/0x30 [ 927.231992][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 927.237778][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 927.244024][T29401] Modules linked in: [ 927.247941][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Tainted: G B syzkaller #0 PREEMPT(full) [ 927.247970][T29401] Tainted: [B]=BAD_PAGE [ 927.247977][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 927.247995][T29401] Call Trace: [ 927.248005][T29401] [ 927.248014][T29401] dump_stack_lvl+0xe8/0x150 [ 927.248047][T29401] bad_page+0x17f/0x1c0 [ 927.248069][T29401] __free_frozen_pages+0xcc2/0xd10 [ 927.248098][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 927.248138][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 927.248166][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 927.248185][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 927.248225][T29401] do_xdp_generic+0xac2/0x12d0 [ 927.248252][T29401] ? __lock_acquire+0x683/0x2cf0 [ 927.248280][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 927.248310][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 927.248342][T29401] ? tun_get_user+0x23cb/0x4370 [ 927.248368][T29401] ? tun_get_user+0x23cb/0x4370 [ 927.248385][T29401] tun_get_user+0x24f8/0x4370 [ 927.248410][T29401] ? aa_file_perm+0x18b/0x15f0 [ 927.248434][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 927.248457][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 927.248476][T29401] ? __lock_acquire+0x683/0x2cf0 [ 927.248504][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 927.248529][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 927.248557][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 927.248584][T29401] ? tun_get+0x1c/0x2f0 [ 927.248613][T29401] ? tun_get+0x1c/0x2f0 [ 927.248643][T29401] ? tun_get+0x1c/0x2f0 [ 927.248670][T29401] ? tun_get+0x1c/0x2f0 [ 927.248700][T29401] tun_chr_write_iter+0x113/0x200 [ 927.248730][T29401] vfs_write+0x612/0xba0 [ 927.248752][T29401] ? __pfx_vfs_write+0x10/0x10 [ 927.248775][T29401] ? __fget_files+0x2a/0x420 [ 927.248805][T29401] ksys_write+0x150/0x270 [ 927.248825][T29401] ? __pfx_ksys_write+0x10/0x10 [ 927.248843][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 927.248869][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.248889][T29401] do_syscall_64+0x174/0x580 [ 927.248916][T29401] ? trace_irq_disable+0x3b/0x140 [ 927.248941][T29401] ? clear_bhb_loop+0x40/0x90 [ 927.248963][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.248990][T29401] RIP: 0033:0x7f6cf7b5e90e [ 927.249008][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 927.249026][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.249048][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 927.249063][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 927.249075][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 927.249088][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.249100][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 927.249123][T29401] [ 927.249135][T29401] BUG: Bad page state in process syz.0.7968 pfn:7070d [ 927.544646][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7070d [ 927.554782][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 927.561916][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 927.570566][T29401] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 927.579185][T29401] page dumped because: page_pool leak [ 927.584595][T29401] page_owner tracks the page as allocated [ 927.590305][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154186124, free_ts 924014289860 [ 927.607560][T29401] post_alloc_hook+0x1f9/0x250 [ 927.612363][T29401] get_page_from_freelist+0x21fa/0x2270 [ 927.617933][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 927.623800][T29401] __alloc_pages_noprof+0x10/0x100 [ 927.628929][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 927.634436][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 927.640531][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 927.645453][T29401] do_xdp_generic+0x770/0x12d0 [ 927.650253][T29401] tun_get_user+0x24f8/0x4370 [ 927.655065][T29401] tun_chr_write_iter+0x113/0x200 [ 927.660197][T29401] vfs_write+0x612/0xba0 [ 927.664475][T29401] ksys_write+0x150/0x270 [ 927.668813][T29401] do_syscall_64+0x174/0x580 [ 927.673451][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.679357][T29401] page last free pid 29369 tgid 29369 stack trace: [ 927.685998][T29401] __free_frozen_pages+0xc1e/0xd10 [ 927.691584][T29401] tlb_remove_table_rcu+0x85/0x100 [ 927.696958][T29401] rcu_core+0x78b/0x10a0 [ 927.701312][T29401] handle_softirqs+0x225/0x840 [ 927.706336][T29401] __irq_exit_rcu+0xca/0x220 [ 927.711046][T29401] irq_exit_rcu+0x9/0x30 [ 927.715706][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 927.721359][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 927.727680][T29401] Modules linked in: [ 927.731609][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Tainted: G B syzkaller #0 PREEMPT(full) [ 927.731644][T29401] Tainted: [B]=BAD_PAGE [ 927.731652][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 927.731664][T29401] Call Trace: [ 927.731683][T29401] [ 927.731691][T29401] dump_stack_lvl+0xe8/0x150 [ 927.731750][T29401] bad_page+0x17f/0x1c0 [ 927.731771][T29401] __free_frozen_pages+0xcc2/0xd10 [ 927.731818][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 927.731857][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 927.731884][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 927.731902][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 927.731956][T29401] do_xdp_generic+0xac2/0x12d0 [ 927.731984][T29401] ? __lock_acquire+0x683/0x2cf0 [ 927.732011][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 927.732040][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 927.732079][T29401] ? tun_get_user+0x23cb/0x4370 [ 927.732105][T29401] ? tun_get_user+0x23cb/0x4370 [ 927.732146][T29401] tun_get_user+0x24f8/0x4370 [ 927.732168][T29401] ? aa_file_perm+0x18b/0x15f0 [ 927.732191][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 927.732211][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 927.732228][T29401] ? __lock_acquire+0x683/0x2cf0 [ 927.732254][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 927.732276][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 927.732302][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 927.732325][T29401] ? tun_get+0x1c/0x2f0 [ 927.732353][T29401] ? tun_get+0x1c/0x2f0 [ 927.732384][T29401] ? tun_get+0x1c/0x2f0 [ 927.732410][T29401] ? tun_get+0x1c/0x2f0 [ 927.732447][T29401] tun_chr_write_iter+0x113/0x200 [ 927.732478][T29401] vfs_write+0x612/0xba0 [ 927.732500][T29401] ? __pfx_vfs_write+0x10/0x10 [ 927.732523][T29401] ? __fget_files+0x2a/0x420 [ 927.732553][T29401] ksys_write+0x150/0x270 [ 927.732573][T29401] ? __pfx_ksys_write+0x10/0x10 [ 927.732592][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 927.732618][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.732639][T29401] do_syscall_64+0x174/0x580 [ 927.732667][T29401] ? trace_irq_disable+0x3b/0x140 [ 927.732692][T29401] ? clear_bhb_loop+0x40/0x90 [ 927.732714][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.732734][T29401] RIP: 0033:0x7f6cf7b5e90e [ 927.732752][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 927.732771][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.732793][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 927.732809][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 927.732822][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 927.732835][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.732846][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 927.732867][T29401] [ 928.020369][T29401] BUG: Bad page state in process syz.0.7968 pfn:35b2a [ 928.027420][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035b2a700 pfn:0x35b2a [ 928.037634][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 928.044800][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 928.053416][T29401] raw: ffff888035b2a700 0000000000000001 00000000ffffffff 0000000000000000 [ 928.062023][T29401] page dumped because: page_pool leak [ 928.067680][T29401] page_owner tracks the page as allocated [ 928.073415][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154168421, free_ts 924014331096 [ 928.090636][T29401] post_alloc_hook+0x1f9/0x250 [ 928.095435][T29401] get_page_from_freelist+0x21fa/0x2270 [ 928.101083][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 928.106925][T29401] __alloc_pages_noprof+0x10/0x100 [ 928.112052][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 928.117537][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 928.123624][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 928.128480][T29401] do_xdp_generic+0x770/0x12d0 [ 928.133280][T29401] tun_get_user+0x24f8/0x4370 [ 928.137976][T29401] tun_chr_write_iter+0x113/0x200 [ 928.143031][T29401] vfs_write+0x612/0xba0 [ 928.147272][T29401] ksys_write+0x150/0x270 [ 928.151692][T29401] do_syscall_64+0x174/0x580 [ 928.156399][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.162525][T29401] page last free pid 29369 tgid 29369 stack trace: [ 928.169024][T29401] __free_frozen_pages+0xc1e/0xd10 [ 928.174165][T29401] tlb_remove_table_rcu+0x85/0x100 [ 928.179291][T29401] rcu_core+0x78b/0x10a0 [ 928.183578][T29401] handle_softirqs+0x225/0x840 [ 928.188364][T29401] __irq_exit_rcu+0xca/0x220 [ 928.192983][T29401] irq_exit_rcu+0x9/0x30 [ 928.197258][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 928.202921][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 928.209366][T29401] Modules linked in: [ 928.213465][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Tainted: G B syzkaller #0 PREEMPT(full) [ 928.213494][T29401] Tainted: [B]=BAD_PAGE [ 928.213502][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.213515][T29401] Call Trace: [ 928.213525][T29401] [ 928.213534][T29401] dump_stack_lvl+0xe8/0x150 [ 928.213565][T29401] bad_page+0x17f/0x1c0 [ 928.213587][T29401] __free_frozen_pages+0xcc2/0xd10 [ 928.213615][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 928.213655][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 928.213681][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 928.213699][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 928.213740][T29401] do_xdp_generic+0xac2/0x12d0 [ 928.213767][T29401] ? __lock_acquire+0x683/0x2cf0 [ 928.213794][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 928.213824][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 928.213856][T29401] ? tun_get_user+0x23cb/0x4370 [ 928.213882][T29401] ? tun_get_user+0x23cb/0x4370 [ 928.213899][T29401] tun_get_user+0x24f8/0x4370 [ 928.213924][T29401] ? aa_file_perm+0x18b/0x15f0 [ 928.213949][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 928.213972][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 928.213990][T29401] ? __lock_acquire+0x683/0x2cf0 [ 928.214018][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 928.214042][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 928.214070][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 928.214097][T29401] ? tun_get+0x1c/0x2f0 [ 928.214124][T29401] ? tun_get+0x1c/0x2f0 [ 928.214154][T29401] ? tun_get+0x1c/0x2f0 [ 928.214182][T29401] ? tun_get+0x1c/0x2f0 [ 928.214211][T29401] tun_chr_write_iter+0x113/0x200 [ 928.214241][T29401] vfs_write+0x612/0xba0 [ 928.214264][T29401] ? __pfx_vfs_write+0x10/0x10 [ 928.214287][T29401] ? __fget_files+0x2a/0x420 [ 928.214316][T29401] ksys_write+0x150/0x270 [ 928.214342][T29401] ? __pfx_ksys_write+0x10/0x10 [ 928.214360][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 928.214386][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.214406][T29401] do_syscall_64+0x174/0x580 [ 928.214434][T29401] ? trace_irq_disable+0x3b/0x140 [ 928.214458][T29401] ? clear_bhb_loop+0x40/0x90 [ 928.214481][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.214501][T29401] RIP: 0033:0x7f6cf7b5e90e [ 928.214520][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 928.214537][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 928.214558][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 928.214573][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 928.214587][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 928.214600][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.214612][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 928.214635][T29401] [ 928.214646][T29401] BUG: Bad page state in process syz.0.7968 pfn:339b6 [ 928.512065][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000000d8 pfn:0x339b6 [ 928.521609][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 928.528773][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 928.537580][T29401] raw: 00000002000000d8 0000000000000001 00000000ffffffff 0000000000000000 [ 928.546207][T29401] page dumped because: page_pool leak [ 928.551582][T29401] page_owner tracks the page as allocated [ 928.557337][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154150855, free_ts 924014377840 [ 928.574579][T29401] post_alloc_hook+0x1f9/0x250 [ 928.579365][T29401] get_page_from_freelist+0x21fa/0x2270 [ 928.584976][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 928.590887][T29401] __alloc_pages_noprof+0x10/0x100 [ 928.596060][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 928.601539][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 928.607657][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 928.612554][T29401] do_xdp_generic+0x770/0x12d0 [ 928.617335][T29401] tun_get_user+0x24f8/0x4370 [ 928.622015][T29401] tun_chr_write_iter+0x113/0x200 [ 928.627094][T29401] vfs_write+0x612/0xba0 [ 928.631343][T29401] ksys_write+0x150/0x270 [ 928.635713][T29401] do_syscall_64+0x174/0x580 [ 928.640317][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.646251][T29401] page last free pid 29369 tgid 29369 stack trace: [ 928.652784][T29401] __free_frozen_pages+0xc1e/0xd10 [ 928.658701][T29401] tlb_remove_table_rcu+0x85/0x100 [ 928.663868][T29401] rcu_core+0x78b/0x10a0 [ 928.668169][T29401] handle_softirqs+0x225/0x840 [ 928.672983][T29401] __irq_exit_rcu+0xca/0x220 [ 928.677675][T29401] irq_exit_rcu+0x9/0x30 [ 928.681925][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 928.687617][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 928.693640][T29401] Modules linked in: [ 928.697552][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Tainted: G B syzkaller #0 PREEMPT(full) [ 928.697580][T29401] Tainted: [B]=BAD_PAGE [ 928.697588][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.697600][T29401] Call Trace: [ 928.697609][T29401] [ 928.697618][T29401] dump_stack_lvl+0xe8/0x150 [ 928.697650][T29401] bad_page+0x17f/0x1c0 [ 928.697672][T29401] __free_frozen_pages+0xcc2/0xd10 [ 928.697700][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 928.697739][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 928.697763][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 928.697778][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 928.697812][T29401] do_xdp_generic+0xac2/0x12d0 [ 928.697836][T29401] ? __lock_acquire+0x683/0x2cf0 [ 928.697862][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 928.697891][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 928.697921][T29401] ? tun_get_user+0x23cb/0x4370 [ 928.697944][T29401] ? tun_get_user+0x23cb/0x4370 [ 928.697961][T29401] tun_get_user+0x24f8/0x4370 [ 928.697984][T29401] ? aa_file_perm+0x18b/0x15f0 [ 928.698009][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 928.698030][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 928.698048][T29401] ? __lock_acquire+0x683/0x2cf0 [ 928.698075][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 928.698098][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 928.698125][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 928.698151][T29401] ? tun_get+0x1c/0x2f0 [ 928.698176][T29401] ? tun_get+0x1c/0x2f0 [ 928.698200][T29401] ? tun_get+0x1c/0x2f0 [ 928.698223][T29401] ? tun_get+0x1c/0x2f0 [ 928.698250][T29401] tun_chr_write_iter+0x113/0x200 [ 928.698274][T29401] vfs_write+0x612/0xba0 [ 928.698304][T29401] ? __pfx_vfs_write+0x10/0x10 [ 928.698326][T29401] ? __fget_files+0x2a/0x420 [ 928.698355][T29401] ksys_write+0x150/0x270 [ 928.698374][T29401] ? __pfx_ksys_write+0x10/0x10 [ 928.698391][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 928.698417][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.698437][T29401] do_syscall_64+0x174/0x580 [ 928.698462][T29401] ? trace_irq_disable+0x3b/0x140 [ 928.698487][T29401] ? clear_bhb_loop+0x40/0x90 [ 928.698509][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.698529][T29401] RIP: 0033:0x7f6cf7b5e90e [ 928.698547][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 928.698565][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 928.698586][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 928.698601][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 928.698615][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 928.698628][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.698640][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 928.698662][T29401] [ 928.698674][T29401] BUG: Bad page state in process syz.0.7968 pfn:33401 [ 928.993578][T29401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000000d9 pfn:0x33401 [ 929.003292][T29401] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 929.010442][T29401] raw: 00fff00000000000 dead000000000040 ffff88801b14f000 0000000000000000 [ 929.019133][T29401] raw: 00000002000000d9 0000000000000001 00000000ffffffff 0000000000000000 [ 929.027853][T29401] page dumped because: page_pool leak [ 929.033279][T29401] page_owner tracks the page as allocated [ 929.039012][T29401] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 29401, tgid 29395 (syz.0.7968), ts 924154133198, free_ts 924014418168 [ 929.056267][T29401] post_alloc_hook+0x1f9/0x250 [ 929.061067][T29401] get_page_from_freelist+0x21fa/0x2270 [ 929.066688][T29401] __alloc_frozen_pages_noprof+0x18d/0x380 [ 929.072731][T29401] __alloc_pages_noprof+0x10/0x100 [ 929.077876][T29401] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 929.083394][T29401] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 929.089643][T29401] skb_pp_cow_data+0xc08/0x18e0 [ 929.094566][T29401] do_xdp_generic+0x770/0x12d0 [ 929.099563][T29401] tun_get_user+0x24f8/0x4370 [ 929.104290][T29401] tun_chr_write_iter+0x113/0x200 [ 929.109445][T29401] vfs_write+0x612/0xba0 [ 929.113746][T29401] ksys_write+0x150/0x270 [ 929.118086][T29401] do_syscall_64+0x174/0x580 [ 929.122725][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.128712][T29401] page last free pid 29369 tgid 29369 stack trace: [ 929.135419][T29401] __free_frozen_pages+0xc1e/0xd10 [ 929.140561][T29401] tlb_remove_table_rcu+0x85/0x100 [ 929.145757][T29401] rcu_core+0x78b/0x10a0 [ 929.150013][T29401] handle_softirqs+0x225/0x840 [ 929.154843][T29401] __irq_exit_rcu+0xca/0x220 [ 929.159450][T29401] irq_exit_rcu+0x9/0x30 [ 929.163835][T29401] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 929.169528][T29401] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 929.175564][T29401] Modules linked in: [ 929.179471][T29401] CPU: 0 UID: 0 PID: 29401 Comm: syz.0.7968 Tainted: G B syzkaller #0 PREEMPT(full) [ 929.179500][T29401] Tainted: [B]=BAD_PAGE [ 929.179508][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 929.179519][T29401] Call Trace: [ 929.179528][T29401] [ 929.179536][T29401] dump_stack_lvl+0xe8/0x150 [ 929.179570][T29401] bad_page+0x17f/0x1c0 [ 929.179590][T29401] __free_frozen_pages+0xcc2/0xd10 [ 929.179619][T29401] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 929.179659][T29401] bpf_xdp_adjust_tail+0x1ce/0x210 [ 929.179685][T29401] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 929.179704][T29401] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 929.179743][T29401] do_xdp_generic+0xac2/0x12d0 [ 929.179770][T29401] ? __lock_acquire+0x683/0x2cf0 [ 929.179798][T29401] ? do_xdp_generic+0x6ba/0x12d0 [ 929.179827][T29401] ? __pfx_do_xdp_generic+0x10/0x10 [ 929.179860][T29401] ? tun_get_user+0x23cb/0x4370 [ 929.179885][T29401] ? tun_get_user+0x23cb/0x4370 [ 929.179903][T29401] tun_get_user+0x24f8/0x4370 [ 929.179928][T29401] ? aa_file_perm+0x18b/0x15f0 [ 929.179954][T29401] ? aa_file_perm+0x4ed/0x15f0 [ 929.179976][T29401] ? __pfx_tun_get_user+0x10/0x10 [ 929.179995][T29401] ? __lock_acquire+0x683/0x2cf0 [ 929.180023][T29401] ? __pfx_file_ioctl+0x10/0x10 [ 929.180047][T29401] ? ref_tracker_alloc+0x341/0x4b0 [ 929.180075][T29401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 929.180101][T29401] ? tun_get+0x1c/0x2f0 [ 929.180129][T29401] ? tun_get+0x1c/0x2f0 [ 929.180160][T29401] ? tun_get+0x1c/0x2f0 [ 929.180186][T29401] ? tun_get+0x1c/0x2f0 [ 929.180223][T29401] tun_chr_write_iter+0x113/0x200 [ 929.180253][T29401] vfs_write+0x612/0xba0 [ 929.180280][T29401] ? __pfx_vfs_write+0x10/0x10 [ 929.180303][T29401] ? __fget_files+0x2a/0x420 [ 929.180333][T29401] ksys_write+0x150/0x270 [ 929.180353][T29401] ? __pfx_ksys_write+0x10/0x10 [ 929.180371][T29401] ? __pfx_kcov_ioctl+0x10/0x10 [ 929.180398][T29401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.180419][T29401] do_syscall_64+0x174/0x580 [ 929.180447][T29401] ? trace_irq_disable+0x3b/0x140 [ 929.180473][T29401] ? clear_bhb_loop+0x40/0x90 [ 929.180495][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.180515][T29401] RIP: 0033:0x7f6cf7b5e90e [ 929.180533][T29401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 929.180550][T29401] RSP: 002b:00007f6cf8b18fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 929.180571][T29401] RAX: ffffffffffffffda RBX: 00007f6cf8b196c0 RCX: 00007f6cf7b5e90e [ 929.180586][T29401] RDX: 0000000000011dc0 RSI: 0000200000002a00 RDI: 00000000000000c8 [ 929.180599][T29401] RBP: 00007f6cf7c35024 R08: 0000000000000000 R09: 0000000000000000 [ 929.180612][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.180623][T29401] R13: 00007f6cf7e26128 R14: 00007f6cf7e26090 R15: 00007fffe5467168 [ 929.180645][T29401] [ 929.472176][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 929.924380][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.934870][T28212] lwtunnel_output(): recursion limit reached on datapath [ 930.484011][ T6280] lwtunnel_output(): recursion limit reached on datapath [ 930.504644][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.474825][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.553338][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.593530][ T6280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.999729][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.655401][ T6280] lwtunnel_output(): recursion limit reached on datapath [ 933.663027][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog