last executing test programs: 14.789460041s ago: executing program 1 (id=11173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r1], 0x24}}, 0x24008000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xfffff038}, {0x6, 0x7, 0x2, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 14.65315089s ago: executing program 1 (id=11176): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x7, 0x20, 0x1, 0x40, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x65, 0x0, 0x8, 0x24c88ef037f42448, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x35}, {[@lsrr={0x83, 0x7, 0xe5, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x1d, 0x1, 0x7, [{@loopback, 0x8}, {@broadcast, 0x6}, {@multicast1}, {@private=0xa010101, 0x7f}, {@multicast1, 0x8}]}, @end, @end, @rr={0x7, 0x7, 0x50, [@empty]}, @timestamp_addr={0x44, 0xc, 0xfe, 0x1, 0x7, [{@loopback, 0xff}]}, @timestamp={0x44, 0x14, 0x68, 0x0, 0xe, [0x0, 0x3, 0x1b5, 0xe5]}, @timestamp_addr={0x44, 0x1c, 0xfb, 0x1, 0x9, [{@empty}, {@private=0xa010101, 0x5}, {@broadcast, 0x5}]}, @rr={0x7, 0x7, 0x44, [@remote]}]}}}}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000b00)={{r2, &(0x7f0000000380)='\x00', 0x40, &(0x7f00000003c0)={@_ha_fsid={[0xffff0ff9, 0x8]}, {0x2, 0xfff, 0xf6a, 0x3eeb}}, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x3}, 0x6, &(0x7f0000000a40)=[{0x1, 0x5, &(0x7f0000000480)='wlan1\x00', &(0x7f00000004c0)="391f64681124c7990313b73d4e084d16281f", 0x12, 0x38}, {0x2, 0x800, &(0x7f0000000500)='syztnl2\x00', &(0x7f0000000680)="555a922bb7f921b058392f9ac66cd348d5aeda74abbd841848962a72f2d2dcf71ecc3c70aaddb9426eb2f74026bf1a194178aa875b8520ddf235629398d4330f6c01dec76bd81edb12e1f64e0aed1d450fd6bbaa6612ddbd931762ae0062c26b52d7e0565a1a7db37bec89388e6d351a7df9d04651df81f4c628ffa6b0206f427a3bfab62844957d83a17e88dac3afab5ab9d3297778b02810c57e64015eeda4cba407b0a32f56cd553b7528c33e560dc0af5a4987dac5cd6c07a57736795fb645801f", 0xc3, 0x22}, {0x1, 0x5, &(0x7f0000000780)='nl80211\x00', &(0x7f00000007c0)="63cbf12bb85858f5746c547c", 0xc, 0x12}, {0x3, 0x5, &(0x7f0000000800)=',,\x00', &(0x7f0000000840)="216cddadcd99f02981e1b598581ccb4fa68312921a062482933d104c367244eed135698d7b87b2c77c9b10432893b69c0b896b1665f8a4c0a73be47d3e26fa634f48f0add4fe63b06637004fdfa1e68d19f41a6e509d2f6cc63a1d3b881ff2407fbb56b61bc784e610cb779d2409f331ac", 0x71, 0x2}, {0x2, 0x1, &(0x7f00000008c0)='\x00', &(0x7f0000000900)="f166dbfc3ff484ddddf3ccb5abda2f0d4a352516efab251e9aee67ce703a9db98fc93b68d5a373c1142110a5585a09e92913a034cdb41b24353db663957c30645f7097da64463d833092b1493748f11915f822071caa658dcf00835144fd", 0x5e, 0x10}, {0x1, 0xda, &(0x7f0000000980)='nl80211\x00', &(0x7f00000009c0)="7ea462830698a52138075468fba08768d83a00aff9976de6d7cd5deb893f163f2449e9b01e8c1b54a473b50852e2289cadf737bbb3a1795e5b39ddf2e4eda6dc83d4", 0x42, 0x32}]}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000400)={r7, 0xa}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000b80)={0x1, 0x1, 0x80, 0x2, r7}, &(0x7f0000000bc0)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r1, 0x7d3a532c78f1abd1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40060) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x39, '\x00', r0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r9 = socket(0x2, 0x2, 0x1) bind$unix(r9, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r9, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) 13.738771714s ago: executing program 1 (id=11182): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000480)={r5, 0x4}, 0x8) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x7, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 12.816749397s ago: executing program 1 (id=11194): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r3, 0x40000}, 0x8) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 7.134101147s ago: executing program 3 (id=11206): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="10c763e42657dccee6ba3d0000001400ef34761008bd8414e004d5c0ab17f5c45349c966fdaca87e07108129817719f6525aeda377bfa4f03e5fd97e7ce5cd7bf7c1440590bfa58771b6ea0e616f99eb3f0738ba7697e8703434aeb63e6cc7ec4d9459027da63204536d34ba8dc25d45f3815f522cfc417e1bce1b68e058969d349ba9d56a9f7f7693137902d5393b44786348050e08f1255c1defde76455786adccddfa24049cc33a19755a71ca20cee36280d342167bb074cd2787695098e6fa176749cdee61290004253ad68b8c6857f3c40bbdb26ce2bf10424e4aa034153a610fd6dda0eb322aa3555af516659336fbcc129dc5ffb13b"], 0x10}}, 0x40000) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, 0x0, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x7ffefc, 0x8, 0x5, 0x80, 0x81}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) unshare(0x22020400) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000040000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000e1ff000000"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r8, @ANYBLOB="000000009600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000400900000000000000", @ANYRES32=r9, @ANYRES64=r5, @ANYRESDEC=r2, @ANYRESDEC=r3, @ANYRES32], 0x50) sendmsg$nl_generic(r7, 0x0, 0x0) (async, rerun: 32) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) (rerun: 32) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000000200)=0x4, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) connect$inet(r11, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (rerun: 64) sendmmsg$inet(r11, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async) bind$inet(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x4, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 6.970887601s ago: executing program 3 (id=11208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f00000000c0), 0x12) close(r5) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a0104fffffffffffffff50700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x3, r7, 0x1, 0x1, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@bridge_getvlan={0x20, 0x72, 0x100, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000018c0)=ANY=[@ANYBLOB="91104f000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 6.650768335s ago: executing program 3 (id=11212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x2, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 1.267090845s ago: executing program 2 (id=11226): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 1.210548908s ago: executing program 4 (id=11227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r5, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r7) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r8, 0x311, 0x70bd28, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040054) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000) 1.206458277s ago: executing program 3 (id=11228): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x2, 0x7, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8, 0x0}, 0x8) r3 = socket$inet6(0xa, 0x80001, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000400), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)={0x5c, r6, 0x405, 0x70bd2f, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r9) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1c, 0x0, 0xfffffff3, 0x2, 0x44, 0xffffffffffffffff, 0x1, '\x00', r7, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x2a, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0xc, 0xb, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x4b}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x1, 0x3, 0x7, 0xffffffffffffffc0, 0xfffffffffffffffc}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x7, 0x1b, &(0x7f0000000c00)=""/27, 0x40f00, 0x4, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000fc0)=[r11, r0, r0, r0], &(0x7f0000001000)=[{0x2, 0x1, 0xb, 0xb}, {0x3, 0x5, 0x8, 0x3}, {0x2, 0x5}, {0x0, 0x1, 0x2, 0x6}], 0x10, 0x7}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x2a0, r4, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x640bf7b8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe58}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r13, &(0x7f0000000d00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x254, r14, 0xe00, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb1, 0x5, "a459d17bb03ea09e60d71261e3776d0896bc79cdf8cb26c25f80f5a90b3e485cdd29b08509a8426f19b00de0828aba23c5e280b732ce7ae4e9592aeb00b0d4b65e3a31f61ff0879b9a12735d31de07868d45cd9ec8bafa3c0b098e4b88ffda0ecc605aba43d2f569ba1be817d084e52aa93c81e2f6aa6c9d9b6fd5e6cd8f32d045ee8ae63afa1be28d7bcfe940c62f4f06e57c871a3271642c0e1d8ee896276e55ecf9cc36f3e06e4c4f4ecfa3"}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "e02491845c87bd3f548f429f79b7a2dff5abe90f06f38fd3df5f9b211d5e75e784a61fd0de0450ccf4a8e3043094c1a10bf67f77bbe61138d321ddd7526ef7ef3262c342d229a552e65c3bd6970f323dbf"}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "0bb30d25cf8817eb0c2dd90ede89fc729450e48ace246dc2b7bfaad2c6d92d042fa27734e5afacded0f645ffea46d215728f5429e3d2048bf5a5d1f514262cb60f214dadc26e302cd327509aa94aab374a818425c2f1e5bd99ae289266bfb6efbe8d7bc0e027acc7d4f4cc34d3cb230773794d4b9ce36e3a3426d498fceea87ca6839a350aaf097dcb79b5b35d915be7c97b0fc6700ecdbd6b24437342fc94c35e3f01be4bef634ef2275f61c8e8cc4abf0f237ae646fd7b7cf0a29c06d402409fcb5c0f71dd8bd741c4049fa1"}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r12, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@empty, @empty, 0x18, 0x19}}) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x1b, @empty, 0x2}}, {{0xa, 0x1, 0x855f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9124}}}, 0x108) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003480)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r15, @ANYRES32=r15, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="2a024336598098206b25a99651f1c89a7cb5409cd3f2d73a10ec4b17621f4cbc23114bef1b9b8dbf90e583d3ceb13054d220bee191bb518a764188fe5b03a9bb755956993b806e8f8ad551047ebe197b15b84a5c258ecf39466eed16f36da725b0c2e14a44ca72a4e5d2897808eb08e146d7e72dd10ff9065a04ad1ac0eef3fb16c1a39f", @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001280)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x118, 0x0, 0x414, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xe56}, @NL80211_ATTR_MESH_SETUP={0xe4, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x31}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_IE={0xb6, 0x3, "ed91bbb08b58b948dd830f15ec80d5d0950f0b51ec60bde4642c05b90a9db2fd5eb7cba48dcb01f50639c54730338380835ee85c87fc0f0aaf418e02f1518236e1346f5394991053ef42f3f1462bac126d97fe5ac05a44104673baf88bcdeb20723ad8d7f425c0e052d83ad79251bbac2ea6661665ec749f36f532f8f29d8d34305165bd73ad0ab8a57fbf5f39e86cf52c4c557c99466350ccef15cff8652cfc30250e9374e6f0b45c17c98736fbc1423c42"}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4044805}, 0x8000) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r15, @ANYBLOB='/\x00'], 0x20) 1.193400679s ago: executing program 1 (id=11229): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) (async) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r5, 0x4) (async) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000088520300400012800b000100697036746e6c00003000028014000300fe8000000000000000000000000000aa08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="050009"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) 1.12697951s ago: executing program 2 (id=11230): r0 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) 1.064251678s ago: executing program 3 (id=11231): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000480)={r5, 0x4}, 0x8) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x7, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 1.060227552s ago: executing program 0 (id=11242): r0 = epoll_create(0x3ff) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xe373, &(0x7f00000003c0)={[0x800]}, 0x8) (async, rerun: 64) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) unshare(0x2a000000) (async) unshare(0x22020400) pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4}) (async) sendfile(r5, r4, 0x0, 0xf03a0005) (async) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000000)=0x80000000, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) (async) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}}}, 0x108) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.040837554s ago: executing program 2 (id=11232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 925.763186ms ago: executing program 1 (id=11233): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4a805}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket$rds(0x15, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r4, 0x300, 0x3}, 0x14}}, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r1, 0xffffffffffffc000) 925.243055ms ago: executing program 0 (id=11234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000000)=0x1ff, 0x4) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000012c0)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYRESOCT, @ANYRES16=r1, @ANYBLOB="11e06b50893d894492461be8ed4eb0e3b674e50415c4999317c483b44a4c54aa78578e3fefe7ed2f9b2d93134a6baffcb7748aeaf33e405d65f9169114216b20a68028e734cdc93d682736e45df961a8f4ac180e34a05ed564b15c152f942a78b796b8018ff721bd0c878eb63a0faa65010227f196147c753a1957b70d7e9f1ec28133d5ec4c8d745a5da092e1626155", @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="6dbe0bd078c7106740321bf21d04110b316e4028e23cd24099a6833439c11619912d069e93015ec45632ad19df5ad7504c317245536e0aac3ac1c2f6b94474907b7b2a6edb96c530b8b166850150b59d853a8d6bcdf6717b9a01c88b2bda7bdb5f99b9ec213f425ed267e3188170155c9e9b193fabac62ffdbb5e9e5f7098265e124", @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) 881.805727ms ago: executing program 2 (id=11235): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) listen(r0, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) (async) listen(r0, 0x3) (async) 828.039869ms ago: executing program 0 (id=11237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d2861657329fcff0000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x29, 0xc, 0x8, 0x8, @empty, @local, 0x8000, 0x11, 0x6, 0xf}}) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x18, 0x32, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x18044) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcac48dc4}, {0x85, 0x0, 0x0, 0xca}}, @call={0x85, 0x0, 0x0, 0xca}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41100, 0x4, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 725.273915ms ago: executing program 2 (id=11238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf8, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "aa58d62b4134a1d742aace7d939492b69d86b516211be4accb11e6cec742d4e867"}}, @TIPC_NLA_NODE_ID={0x62, 0x3, "c0bb9cc8f6209e5684bf567f4e5c9ac44bfd3cc9bc98350cb9b0a39080a81f6710b5f3a2910e6f5326190d9a4663745c246dbb583868c7b93bca7f349b9329754d433e860320218b882fd5c2893dd9530de62403f747b5706bfef3a58a48"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x67d}, @TIPC_NLA_NODE_ID={0xd, 0x3, "f09496667b51ea8d52"}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40811}, 0xc081) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$unix(0x1, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60, 0x80800) close(r2) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)='\a', 0x1}], 0x1}}], 0x1, 0x4008004) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@private1, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000001300)={'nr0\x00'}) 639.627032ms ago: executing program 0 (id=11239): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) shutdown(r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002060101000060c7cfe900000a00000005000400020000000900020073797a32000000001400078008001340ffffffff080012400000e54a050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x80) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000000000000000000000000000000087f416d37862f4edb244030905f1f54c535dbf8a1e460a7c932229f28095683645aca502339c030c6d45de6227cad807c9fb36052384fc5c0b67ab63c4d8c4f85518acb21c1e823c3d2cbfd5abc9370d1b433a9be575c5ede0f27d66b5c58e944ef9c84b18f7e15c0e2fdfce100adcb1d3807e897f43ad48c58d6a5918b4d14f1938083e9ed1d696eb09e989c949b0ec8805d7f5e9dadc556679032eb14aa881c7e558c26dade80610ecda8fc500"/203, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304001300"/20, @ANYRESHEX=r10, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c000200160000000f0b0000fcff0100fc0f00000600050088a8000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r8, @ANYBLOB], 0x60}}, 0x40488c4) 637.124431ms ago: executing program 2 (id=11240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x2, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 474.360724ms ago: executing program 0 (id=11241): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 422.104677ms ago: executing program 0 (id=11243): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x6400, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x4d74, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0xffffffff, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x468}}, 0x0) 331.716592ms ago: executing program 4 (id=11244): r0 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) 226.559059ms ago: executing program 4 (id=11245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x37b9, 0xf}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 191.498425ms ago: executing program 4 (id=11246): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20024800}, 0x400c1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x37, "8c3c93", 0xf0, 0x4b}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x10, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007baaf8ff00000000b5080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a70000009504000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 122.61097ms ago: executing program 3 (id=11247): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000001, 0x2, 0xfffffffd, 0x0, 0xbd, 0x5, 0xffff, 0x4a, 0x1000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440e4}, 0x4880) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x6c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1300, 0x20}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x97a, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xd}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0x800, 0x200, {{0x29, 0x4, 0x0, 0x4, 0xa4, 0x65, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@end, @timestamp_prespec={0x44, 0x34, 0x56, 0x3, 0x4, [{@rand_addr=0x64010100, 0x2}, {@private=0xa010101, 0x1}, {@multicast2, 0xffffffff}, {@empty, 0x40}, {@rand_addr=0x64010102, 0x8}, {@local, 0x9}]}, @rr={0x7, 0x23, 0x9, [@rand_addr=0x64010100, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @remote, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x74, 0x1, 0xb, [{@rand_addr=0x64010101, 0x9}, {@private=0xa010101, 0x7}]}, @noop, @ssrr={0x89, 0xb, 0x2e, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xce, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x1}, {@private=0xa010100}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x0, 0x4, 0x3, 0xffffff3f, 0x68, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x10, 0x7, 0x4, 0x6}}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r11 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r9, r12, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)={@private, @initdev, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000600)=ANY=[@ANYBLOB="54050000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000002808000600", @ANYRES32=0x0, @ANYBLOB="696e6b757064000000000000000000000300060000268100f8ff07001e00"/56, @ANYRES32=r0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040009000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="880202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000180000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002400040006000802060000000010030609000000410009049e0e0000080002f8030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400800009100200000003004d7f03000000080006000010000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB], 0x554}, 0x1, 0x0, 0x0, 0x800}, 0x82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) unshare(0x6020400) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 10.503982ms ago: executing program 4 (id=11248): unshare(0x400) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=11249): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000600)={0x0, 'netdevsim0\x00', {}, 0x3}) kernel console output (not intermixed with test programs): log [ 1407.083016][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.711991][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.720777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.093205][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.149851][T18133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.710159][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.719565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.178721][T18133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.792763][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10413'. [ 1410.793846][ T9236] validate_nla: 1 callbacks suppressed [ 1410.793868][ T9236] netlink: 'syz.3.10412': attribute type 4 has an invalid length. [ 1410.873202][ T9236] netlink: 'syz.3.10412': attribute type 4 has an invalid length. [ 1411.009487][ T9251] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10409'. [ 1411.174023][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10416'. [ 1411.209163][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.472719][ T9267] vlan1: entered promiscuous mode [ 1411.489920][ T9267] vlan1: entered allmulticast mode [ 1411.504421][ T9267] veth0_vlan: entered allmulticast mode [ 1411.655231][ T9274] syzkaller0: entered promiscuous mode [ 1411.661376][ T9274] syzkaller0: entered allmulticast mode [ 1412.264295][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.825314][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10428'. [ 1413.299407][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.541496][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.552652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.339372][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.396624][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.482777][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.492380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.434098][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.781805][ T9283] netlink: 'syz.0.10426': attribute type 2 has an invalid length. [ 1416.900363][ T9300] netlink: 'syz.0.10431': attribute type 4 has an invalid length. [ 1416.910598][ T9300] netlink: 'syz.0.10431': attribute type 4 has an invalid length. [ 1417.082902][ T9312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.094482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.162852][ T9312] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 1417.173694][ T9312] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 1417.365172][ T9324] netlink: 'syz.1.10439': attribute type 12 has an invalid length. [ 1417.366106][ T9323] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10436'. [ 1417.389470][ T9324] netlink: 'syz.1.10439': attribute type 29 has an invalid length. [ 1417.409243][ T9324] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10439'. [ 1417.432569][ T9324] netlink: 'syz.1.10439': attribute type 1 has an invalid length. [ 1417.453068][ T9324] netlink: 'syz.1.10439': attribute type 2 has an invalid length. [ 1417.454827][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.996763][ T9341] syzkaller0: entered promiscuous mode [ 1418.004136][ T9341] syzkaller0: entered allmulticast mode [ 1418.108626][ T9349] FAULT_INJECTION: forcing a failure. [ 1418.108626][ T9349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1418.167299][ T9349] CPU: 0 UID: 0 PID: 9349 Comm: syz.3.10444 Not tainted syzkaller #0 PREEMPT(full) [ 1418.167328][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1418.167340][ T9349] Call Trace: [ 1418.167349][ T9349] [ 1418.167357][ T9349] dump_stack_lvl+0xe8/0x150 [ 1418.167390][ T9349] should_fail_ex+0x412/0x560 [ 1418.167427][ T9349] _copy_from_user+0x2d/0xb0 [ 1418.167448][ T9349] ___sys_recvmsg+0x175/0x590 [ 1418.167475][ T9349] ? __pfx____sys_recvmsg+0x10/0x10 [ 1418.167498][ T9349] ? __fget_files+0x2a/0x420 [ 1418.167551][ T9349] do_recvmmsg+0x334/0x800 [ 1418.167579][ T9349] ? __pfx_do_recvmmsg+0x10/0x10 [ 1418.167609][ T9349] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1418.167650][ T9349] __x64_sys_recvmmsg+0x198/0x250 [ 1418.167672][ T9349] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1418.167699][ T9349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.167720][ T9349] do_syscall_64+0x15f/0xf80 [ 1418.167741][ T9349] ? trace_irq_disable+0x3b/0x140 [ 1418.167761][ T9349] ? clear_bhb_loop+0x40/0x90 [ 1418.167784][ T9349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.167802][ T9349] RIP: 0033:0x7f11b359c819 [ 1418.167821][ T9349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1418.167837][ T9349] RSP: 002b:00007f11b448e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1418.167858][ T9349] RAX: ffffffffffffffda RBX: 00007f11b3815fa0 RCX: 00007f11b359c819 [ 1418.167872][ T9349] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1418.167885][ T9349] RBP: 00007f11b448e090 R08: 0000000000000000 R09: 0000000000000000 [ 1418.167897][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1418.167909][ T9349] R13: 00007f11b3816038 R14: 00007f11b3815fa0 R15: 00007ffce5c3f888 [ 1418.167940][ T9349] [ 1418.528260][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.300446][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.308923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.596320][ T35] net_ratelimit: 1 callbacks suppressed [ 1420.596341][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.610579][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.618721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.617764][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.663522][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.144450][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1423.702270][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.778950][ T9356] netlink: 'syz.0.10446': attribute type 4 has an invalid length. [ 1423.787983][ T9360] netlink: 'syz.0.10446': attribute type 4 has an invalid length. [ 1424.097247][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10452'. [ 1424.162966][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10452'. [ 1424.254941][ T9396] netlink: 27 bytes leftover after parsing attributes in process `syz.3.10453'. [ 1424.267114][ T6173] IPVS: starting estimator thread 0... [ 1424.399038][ T9397] IPVS: using max 32 ests per chain, 76800 per kthread [ 1424.744623][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.936425][ T9414] bridge_slave_1: left promiscuous mode [ 1424.952848][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.024667][ T9414] bridge_slave_0: left allmulticast mode [ 1425.043050][ T9414] bridge_slave_0: left promiscuous mode [ 1425.049727][ T9199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.058374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.083158][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.217594][T18137] IPVS: starting estimator thread 0... [ 1425.330633][ T9431] IPVS: using max 43 ests per chain, 103200 per kthread [ 1425.360522][ T9430] syzkaller0: entered promiscuous mode [ 1425.376809][ T9430] syzkaller0: entered allmulticast mode [ 1425.455756][ T9436] netlink: 'syz.2.10462': attribute type 4 has an invalid length. [ 1425.499511][ T9437] netlink: 'syz.2.10462': attribute type 4 has an invalid length. [ 1425.637064][ T9442] FAULT_INJECTION: forcing a failure. [ 1425.637064][ T9442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.668418][ T9442] CPU: 0 UID: 0 PID: 9442 Comm: syz.1.10464 Not tainted syzkaller #0 PREEMPT(full) [ 1425.668447][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1425.668459][ T9442] Call Trace: [ 1425.668468][ T9442] [ 1425.668478][ T9442] dump_stack_lvl+0xe8/0x150 [ 1425.668511][ T9442] should_fail_ex+0x412/0x560 [ 1425.668542][ T9442] _copy_from_user+0x2d/0xb0 [ 1425.668563][ T9442] ___sys_recvmsg+0x175/0x590 [ 1425.668589][ T9442] ? __pfx____sys_recvmsg+0x10/0x10 [ 1425.668611][ T9442] ? __fget_files+0x2a/0x420 [ 1425.668664][ T9442] do_recvmmsg+0x334/0x800 [ 1425.668691][ T9442] ? __pfx_do_recvmmsg+0x10/0x10 [ 1425.668722][ T9442] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1425.668768][ T9442] __x64_sys_recvmmsg+0x198/0x250 [ 1425.668788][ T9442] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1425.668811][ T9442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.668829][ T9442] do_syscall_64+0x15f/0xf80 [ 1425.668848][ T9442] ? trace_irq_disable+0x3b/0x140 [ 1425.668866][ T9442] ? clear_bhb_loop+0x40/0x90 [ 1425.668886][ T9442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.668903][ T9442] RIP: 0033:0x7f2520b9c819 [ 1425.668920][ T9442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.668934][ T9442] RSP: 002b:00007f2521a1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1425.668955][ T9442] RAX: ffffffffffffffda RBX: 00007f2520e15fa0 RCX: 00007f2520b9c819 [ 1425.668968][ T9442] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1425.668981][ T9442] RBP: 00007f2521a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.668992][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1425.669003][ T9442] R13: 00007f2520e16038 R14: 00007f2520e15fa0 R15: 00007ffee69ce028 [ 1425.669039][ T9442] [ 1425.861921][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.870907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.899246][T18137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.983762][ T9446] netlink: 'syz.2.10465': attribute type 3 has an invalid length. [ 1426.032872][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10465'. [ 1426.611737][ T9450] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10466'. [ 1426.980424][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.045748][T18137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.908193][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 1428.917403][ C1] lec:lec_tx_timeout: lec0 [ 1429.080343][T18137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.119348][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.810051][ T827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.818486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.146099][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.450313][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.459415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.487182][ T9199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.521918][ T9199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.637622][ T9469] netlink: 27 bytes leftover after parsing attributes in process `syz.0.10469'. [ 1431.986277][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10472'. [ 1432.023764][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10473'. [ 1432.066151][ T9479] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1432.177621][ T9485] netlink: 'syz.4.10477': attribute type 58 has an invalid length. [ 1432.178039][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.203873][ T9486] FAULT_INJECTION: forcing a failure. [ 1432.203873][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1432.227590][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.2.10476 Not tainted syzkaller #0 PREEMPT(full) [ 1432.227614][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1432.227625][ T9486] Call Trace: [ 1432.227633][ T9486] [ 1432.227642][ T9486] dump_stack_lvl+0xe8/0x150 [ 1432.227671][ T9486] should_fail_ex+0x412/0x560 [ 1432.227699][ T9486] _copy_from_user+0x2d/0xb0 [ 1432.227718][ T9486] ___sys_recvmsg+0x175/0x590 [ 1432.227740][ T9486] ? __pfx____sys_recvmsg+0x10/0x10 [ 1432.227761][ T9486] ? __fget_files+0x2a/0x420 [ 1432.227809][ T9486] do_recvmmsg+0x334/0x800 [ 1432.227833][ T9486] ? __pfx_do_recvmmsg+0x10/0x10 [ 1432.227863][ T9486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1432.227903][ T9486] __x64_sys_recvmmsg+0x198/0x250 [ 1432.227924][ T9486] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1432.227960][ T9486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.227980][ T9486] do_syscall_64+0x15f/0xf80 [ 1432.227999][ T9486] ? trace_irq_disable+0x3b/0x140 [ 1432.228018][ T9486] ? clear_bhb_loop+0x40/0x90 [ 1432.228038][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.228055][ T9486] RIP: 0033:0x7fa9e4d9c819 [ 1432.228070][ T9486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.228082][ T9486] RSP: 002b:00007fa9e5c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1432.228095][ T9486] RAX: ffffffffffffffda RBX: 00007fa9e5015fa0 RCX: 00007fa9e4d9c819 [ 1432.228103][ T9486] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1432.228110][ T9486] RBP: 00007fa9e5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 1432.228116][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1432.228123][ T9486] R13: 00007fa9e5016038 R14: 00007fa9e5015fa0 R15: 00007fffaccbed18 [ 1432.228139][ T9486] [ 1432.421446][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10473'. [ 1432.435485][ T9485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10477'. [ 1432.452515][ T9485] nbd: must specify a device to reconfigure [ 1432.950258][ T9498] bond4: option resend_igmp: invalid value (2878) [ 1432.956833][ T9498] bond4: option resend_igmp: allowed values 0 - 255 [ 1432.971389][ T9498] bond4 (unregistering): Released all slaves [ 1433.184396][ T9515] netlink: 26 bytes leftover after parsing attributes in process `syz.4.10486'. [ 1433.215970][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.294642][ T9521] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1433.366505][ T9522] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10485'. [ 1433.390285][ T57] vlan2: left allmulticast mode [ 1433.397991][ T57] geneve0: left allmulticast mode [ 1433.411435][ T9526] FAULT_INJECTION: forcing a failure. [ 1433.411435][ T9526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.415526][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10488'. [ 1433.424928][ T57] vlan2: left promiscuous mode [ 1433.443604][ T57] geneve0: left promiscuous mode [ 1433.448727][ T9526] CPU: 1 UID: 0 PID: 9526 Comm: syz.4.10489 Not tainted syzkaller #0 PREEMPT(full) [ 1433.448756][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1433.448766][ T9526] Call Trace: [ 1433.448776][ T9526] [ 1433.448785][ T9526] dump_stack_lvl+0xe8/0x150 [ 1433.448815][ T9526] should_fail_ex+0x412/0x560 [ 1433.448843][ T9526] _copy_from_user+0x2d/0xb0 [ 1433.448863][ T9526] ___sys_recvmsg+0x175/0x590 [ 1433.448885][ T9526] ? __pfx____sys_recvmsg+0x10/0x10 [ 1433.448905][ T9526] ? __fget_files+0x2a/0x420 [ 1433.448952][ T9526] do_recvmmsg+0x334/0x800 [ 1433.448976][ T9526] ? __pfx_do_recvmmsg+0x10/0x10 [ 1433.449005][ T9526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1433.449053][ T9526] __x64_sys_recvmmsg+0x198/0x250 [ 1433.449074][ T9526] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1433.449102][ T9526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.449122][ T9526] do_syscall_64+0x15f/0xf80 [ 1433.449143][ T9526] ? trace_irq_disable+0x3b/0x140 [ 1433.449163][ T9526] ? clear_bhb_loop+0x40/0x90 [ 1433.449186][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.449204][ T9526] RIP: 0033:0x7f0127d9c819 [ 1433.449223][ T9526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.449240][ T9526] RSP: 002b:00007f0128ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1433.449261][ T9526] RAX: ffffffffffffffda RBX: 00007f0128015fa0 RCX: 00007f0127d9c819 [ 1433.449274][ T9526] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1433.449286][ T9526] RBP: 00007f0128ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1433.449298][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1433.449309][ T9526] R13: 00007f0128016038 R14: 00007f0128015fa0 R15: 00007ffdd364d788 [ 1433.449339][ T9526] [ 1433.509361][ T57] bridge0: port 3(vlan2) entered disabled state [ 1433.649953][ T57] bridge_slave_1: left allmulticast mode [ 1433.655803][ T57] bridge_slave_1: left promiscuous mode [ 1433.665340][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.695673][ T57] bridge_slave_0: left allmulticast mode [ 1433.704913][ T57] bridge_slave_0: left promiscuous mode [ 1433.721125][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.226598][ T57] gretap0 (unregistering): left allmulticast mode [ 1434.234306][ T57] gretap0 (unregistering): left promiscuous mode [ 1434.287013][T18137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.677642][ T57] bond0 (unregistering): left promiscuous mode [ 1434.684176][ T57] bond_slave_0: left promiscuous mode [ 1434.694667][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.704818][ T57] bond0 (unregistering): Released all slaves [ 1434.716566][ T57] bond1 (unregistering): Released all slaves [ 1434.732784][ T57] bond2 (unregistering): Released all slaves [ 1434.746404][ T57] bond3 (unregistering): Released all slaves [ 1435.098495][ T9563] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1435.147431][ T57] tipc: Disabling bearer [ 1435.208202][ T57] tipc: Left network mode [ 1435.294530][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.651927][ T9595] FAULT_INJECTION: forcing a failure. [ 1435.651927][ T9595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1435.704998][ T9595] CPU: 0 UID: 0 PID: 9595 Comm: syz.1.10506 Not tainted syzkaller #0 PREEMPT(full) [ 1435.705027][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1435.705039][ T9595] Call Trace: [ 1435.705047][ T9595] [ 1435.705056][ T9595] dump_stack_lvl+0xe8/0x150 [ 1435.705088][ T9595] should_fail_ex+0x412/0x560 [ 1435.705119][ T9595] _copy_from_user+0x2d/0xb0 [ 1435.705140][ T9595] ___sys_recvmsg+0x175/0x590 [ 1435.705165][ T9595] ? __pfx____sys_recvmsg+0x10/0x10 [ 1435.705219][ T9595] do_recvmmsg+0x334/0x800 [ 1435.705247][ T9595] ? __pfx_do_recvmmsg+0x10/0x10 [ 1435.705277][ T9595] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1435.705317][ T9595] __x64_sys_recvmmsg+0x198/0x250 [ 1435.705340][ T9595] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1435.705364][ T9595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.705384][ T9595] do_syscall_64+0x15f/0xf80 [ 1435.705405][ T9595] ? trace_irq_disable+0x3b/0x140 [ 1435.705425][ T9595] ? clear_bhb_loop+0x40/0x90 [ 1435.705445][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.705461][ T9595] RIP: 0033:0x7f2520b9c819 [ 1435.705478][ T9595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.705494][ T9595] RSP: 002b:00007f2521a1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1435.705514][ T9595] RAX: ffffffffffffffda RBX: 00007f2520e15fa0 RCX: 00007f2520b9c819 [ 1435.705528][ T9595] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1435.705540][ T9595] RBP: 00007f2521a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1435.705552][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1435.705563][ T9595] R13: 00007f2520e16038 R14: 00007f2520e15fa0 R15: 00007ffee69ce028 [ 1435.705594][ T9595] [ 1436.325705][ T9607] netlink: 27 bytes leftover after parsing attributes in process `syz.4.10508'. [ 1436.338461][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.584974][ T9199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.594147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.923779][ T9640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10519'. [ 1437.162626][ T9655] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.10523'. [ 1437.194639][ T57] dummy0: left promiscuous mode [ 1437.216261][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.225275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.240820][ T9659] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10521'. [ 1437.263332][ T57] hsr_slave_0: left promiscuous mode [ 1437.283717][ T57] hsr_slave_1: left promiscuous mode [ 1437.297443][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.321089][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.375108][ T4915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.753422][ T9679] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10525'. [ 1438.277261][ T9678] netlink: 'syz.2.10527': attribute type 4 has an invalid length. [ 1438.395397][ T9680] netlink: 'syz.2.10527': attribute type 4 has an invalid length. [ 1438.419743][ T4915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.529328][ T9691] netlink: 'syz.3.10528': attribute type 4 has an invalid length. [ 1438.583379][ T9693] netlink: 'syz.3.10528': attribute type 4 has an invalid length. [ 1438.594696][ T9695] FAULT_INJECTION: forcing a failure. [ 1438.594696][ T9695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1438.646635][ T9695] CPU: 1 UID: 0 PID: 9695 Comm: syz.2.10529 Not tainted syzkaller #0 PREEMPT(full) [ 1438.646672][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1438.646684][ T9695] Call Trace: [ 1438.646692][ T9695] [ 1438.646701][ T9695] dump_stack_lvl+0xe8/0x150 [ 1438.646734][ T9695] should_fail_ex+0x412/0x560 [ 1438.646763][ T9695] _copy_from_user+0x2d/0xb0 [ 1438.646784][ T9695] ___sys_recvmsg+0x175/0x590 [ 1438.646809][ T9695] ? __pfx____sys_recvmsg+0x10/0x10 [ 1438.646832][ T9695] ? __fget_files+0x2a/0x420 [ 1438.646882][ T9695] do_recvmmsg+0x334/0x800 [ 1438.646909][ T9695] ? __pfx_do_recvmmsg+0x10/0x10 [ 1438.646939][ T9695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1438.646979][ T9695] __x64_sys_recvmmsg+0x198/0x250 [ 1438.647000][ T9695] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1438.647027][ T9695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.647046][ T9695] do_syscall_64+0x15f/0xf80 [ 1438.647066][ T9695] ? trace_irq_disable+0x3b/0x140 [ 1438.647086][ T9695] ? clear_bhb_loop+0x40/0x90 [ 1438.647108][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.647126][ T9695] RIP: 0033:0x7fa9e4d9c819 [ 1438.647144][ T9695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.647161][ T9695] RSP: 002b:00007fa9e5c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1438.647182][ T9695] RAX: ffffffffffffffda RBX: 00007fa9e5015fa0 RCX: 00007fa9e4d9c819 [ 1438.647195][ T9695] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1438.647207][ T9695] RBP: 00007fa9e5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.647219][ T9695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1438.647230][ T9695] R13: 00007fa9e5016038 R14: 00007fa9e5015fa0 R15: 00007fffaccbed18 [ 1438.647261][ T9695] [ 1439.321757][ T57] IPVS: stop unused estimator thread 0... [ 1439.465426][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.492472][ T9720] FAULT_INJECTION: forcing a failure. [ 1439.492472][ T9720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1439.554894][ T9720] CPU: 1 UID: 0 PID: 9720 Comm: syz.4.10537 Not tainted syzkaller #0 PREEMPT(full) [ 1439.554922][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1439.554934][ T9720] Call Trace: [ 1439.554942][ T9720] [ 1439.554951][ T9720] dump_stack_lvl+0xe8/0x150 [ 1439.554983][ T9720] should_fail_ex+0x412/0x560 [ 1439.555014][ T9720] _copy_from_iter+0x1d3/0x1670 [ 1439.555044][ T9720] ? rcu_is_watching+0x15/0xb0 [ 1439.555075][ T9720] ? __pfx__copy_from_iter+0x10/0x10 [ 1439.555109][ T9720] ? __alloc_skb+0x4e5/0x7d0 [ 1439.555132][ T9720] ? skb_put+0x11b/0x210 [ 1439.555159][ T9720] pfkey_sendmsg+0x265/0x1120 [ 1439.555185][ T9720] ? unwind_next_frame+0xa6/0x2550 [ 1439.555218][ T9720] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1439.555249][ T9720] ? aa_sk_perm+0x6d5/0x900 [ 1439.555278][ T9720] ? __pfx_aa_sk_perm+0x10/0x10 [ 1439.555298][ T9720] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1439.555328][ T9720] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1439.555352][ T9720] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1439.555379][ T9720] ____sys_sendmsg+0x972/0x9f0 [ 1439.555402][ T9720] ? __might_fault+0xaf/0x130 [ 1439.555427][ T9720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1439.555458][ T9720] ? import_iovec+0x73/0xa0 [ 1439.555478][ T9720] ___sys_sendmsg+0x2a5/0x360 [ 1439.555501][ T9720] ? __lock_acquire+0x6b5/0x2cf0 [ 1439.555528][ T9720] ? __pfx____sys_sendmsg+0x10/0x10 [ 1439.555589][ T9720] ? __fget_files+0x2a/0x420 [ 1439.555611][ T9720] ? __fget_files+0x3a0/0x420 [ 1439.555641][ T9720] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1439.555668][ T9720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1439.555701][ T9720] ? __pfx_ksys_write+0x10/0x10 [ 1439.555736][ T9720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.555756][ T9720] do_syscall_64+0x15f/0xf80 [ 1439.555777][ T9720] ? trace_irq_disable+0x3b/0x140 [ 1439.555796][ T9720] ? clear_bhb_loop+0x40/0x90 [ 1439.555817][ T9720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.555834][ T9720] RIP: 0033:0x7f0127d9c819 [ 1439.555851][ T9720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.555866][ T9720] RSP: 002b:00007f0128ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1439.555887][ T9720] RAX: ffffffffffffffda RBX: 00007f0128015fa0 RCX: 00007f0127d9c819 [ 1439.555902][ T9720] RDX: 0000000000048004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1439.555913][ T9720] RBP: 00007f0128ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.555924][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1439.555936][ T9720] R13: 00007f0128016038 R14: 00007f0128015fa0 R15: 00007ffdd364d788 [ 1439.555966][ T9720] [ 1440.093893][ T9734] netlink: 'syz.1.10539': attribute type 4 has an invalid length. [ 1440.150402][ T9734] netlink: 'syz.1.10539': attribute type 4 has an invalid length. [ 1440.412064][ T9744] netlink: 'syz.1.10541': attribute type 1 has an invalid length. [ 1440.439564][ T9743] netlink: 'syz.1.10541': attribute type 1 has an invalid length. [ 1440.453821][ T9747] netlink: 27 bytes leftover after parsing attributes in process `syz.4.10540'. [ 1440.470956][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10542'. [ 1440.495333][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.596517][ T9743] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1441.155144][ T9775] FAULT_INJECTION: forcing a failure. [ 1441.155144][ T9775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.208299][ T9775] CPU: 0 UID: 0 PID: 9775 Comm: syz.3.10546 Not tainted syzkaller #0 PREEMPT(full) [ 1441.208327][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1441.208338][ T9775] Call Trace: [ 1441.208347][ T9775] [ 1441.208355][ T9775] dump_stack_lvl+0xe8/0x150 [ 1441.208387][ T9775] should_fail_ex+0x412/0x560 [ 1441.208418][ T9775] _copy_from_user+0x2d/0xb0 [ 1441.208446][ T9775] ___sys_recvmsg+0x175/0x590 [ 1441.208470][ T9775] ? __pfx____sys_recvmsg+0x10/0x10 [ 1441.208494][ T9775] ? irqentry_exit+0x218/0x730 [ 1441.208560][ T9775] do_recvmmsg+0x334/0x800 [ 1441.208587][ T9775] ? __pfx_do_recvmmsg+0x10/0x10 [ 1441.208617][ T9775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1441.208656][ T9775] __x64_sys_recvmmsg+0x198/0x250 [ 1441.208678][ T9775] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1441.208705][ T9775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.208727][ T9775] do_syscall_64+0x15f/0xf80 [ 1441.208750][ T9775] ? trace_irq_disable+0x3b/0x140 [ 1441.208767][ T9775] ? clear_bhb_loop+0x40/0x90 [ 1441.208787][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.208803][ T9775] RIP: 0033:0x7f11b359c819 [ 1441.208819][ T9775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.208834][ T9775] RSP: 002b:00007f11b448e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1441.208855][ T9775] RAX: ffffffffffffffda RBX: 00007f11b3815fa0 RCX: 00007f11b359c819 [ 1441.208867][ T9775] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1441.208879][ T9775] RBP: 00007f11b448e090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.208890][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.208900][ T9775] R13: 00007f11b3816038 R14: 00007f11b3815fa0 R15: 00007ffce5c3f888 [ 1441.208925][ T9775] [ 1441.340401][ T9780] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10548'. [ 1441.534591][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.621295][ T9786] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1441.675849][ T9789] FAULT_INJECTION: forcing a failure. [ 1441.675849][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.719670][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.4.10550 Not tainted syzkaller #0 PREEMPT(full) [ 1441.719697][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1441.719708][ T9789] Call Trace: [ 1441.719715][ T9789] [ 1441.719723][ T9789] dump_stack_lvl+0xe8/0x150 [ 1441.719756][ T9789] should_fail_ex+0x412/0x560 [ 1441.719787][ T9789] should_failslab+0xa8/0x100 [ 1441.719807][ T9789] ? xfrm_state_alloc+0x24/0x2f0 [ 1441.719833][ T9789] kmem_cache_alloc_noprof+0x87/0x650 [ 1441.719868][ T9789] xfrm_state_alloc+0x24/0x2f0 [ 1441.719894][ T9789] pfkey_add+0x700/0x2df0 [ 1441.719922][ T9789] ? kasan_quarantine_put+0x82/0x1f0 [ 1441.719956][ T9789] ? __pfx_pfkey_add+0x10/0x10 [ 1441.719988][ T9789] pfkey_sendmsg+0xc56/0x1120 [ 1441.720013][ T9789] ? unwind_next_frame+0xa6/0x2550 [ 1441.720048][ T9789] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1441.720099][ T9789] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1441.720130][ T9789] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1441.720161][ T9789] ____sys_sendmsg+0x972/0x9f0 [ 1441.720188][ T9789] ? __might_fault+0xaf/0x130 [ 1441.720218][ T9789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1441.720254][ T9789] ? import_iovec+0x73/0xa0 [ 1441.720278][ T9789] ___sys_sendmsg+0x2a5/0x360 [ 1441.720303][ T9789] ? __lock_acquire+0x6b5/0x2cf0 [ 1441.720331][ T9789] ? __pfx____sys_sendmsg+0x10/0x10 [ 1441.720485][ T9789] ? __fget_files+0x2a/0x420 [ 1441.720520][ T9789] ? __fget_files+0x3a0/0x420 [ 1441.720553][ T9789] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1441.720587][ T9789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1441.720624][ T9789] ? __pfx_ksys_write+0x10/0x10 [ 1441.720659][ T9789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.720681][ T9789] do_syscall_64+0x15f/0xf80 [ 1441.720704][ T9789] ? trace_irq_disable+0x3b/0x140 [ 1441.720725][ T9789] ? clear_bhb_loop+0x40/0x90 [ 1441.720750][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.720769][ T9789] RIP: 0033:0x7f0127d9c819 [ 1441.720789][ T9789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.720805][ T9789] RSP: 002b:00007f0128ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1441.720828][ T9789] RAX: ffffffffffffffda RBX: 00007f0128015fa0 RCX: 00007f0127d9c819 [ 1441.720843][ T9789] RDX: 0000000000048004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1441.720856][ T9789] RBP: 00007f0128ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.720869][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.720893][ T9789] R13: 00007f0128016038 R14: 00007f0128015fa0 R15: 00007ffdd364d788 [ 1441.720926][ T9789] [ 1442.098385][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10553'. [ 1442.221758][ T9800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10552'. [ 1442.247649][ T9806] team0: entered allmulticast mode [ 1442.317670][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10555'. [ 1442.323702][ T9806] team_slave_0: entered allmulticast mode [ 1442.333216][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.343056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.364947][ T9806] team_slave_1: entered allmulticast mode [ 1442.391373][ T9806] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1442.422912][ T9822] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1442.589891][ T4915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.643192][ T9830] netlink: 'syz.1.10558': attribute type 4 has an invalid length. [ 1442.686763][ T9833] netlink: 'syz.1.10558': attribute type 4 has an invalid length. [ 1442.722434][ T9835] netlink: 27 bytes leftover after parsing attributes in process `syz.3.10557'. [ 1442.967118][ T9845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10561'. [ 1442.978455][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.987320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.143064][ T9846] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1443.321444][ T9858] FAULT_INJECTION: forcing a failure. [ 1443.321444][ T9858] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.374735][ T9858] CPU: 1 UID: 0 PID: 9858 Comm: syz.2.10564 Not tainted syzkaller #0 PREEMPT(full) [ 1443.374762][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1443.374775][ T9858] Call Trace: [ 1443.374783][ T9858] [ 1443.374792][ T9858] dump_stack_lvl+0xe8/0x150 [ 1443.374824][ T9858] should_fail_ex+0x412/0x560 [ 1443.374855][ T9858] should_failslab+0xa8/0x100 [ 1443.374875][ T9858] ? xfrm_state_alloc+0x24/0x2f0 [ 1443.374900][ T9858] kmem_cache_alloc_noprof+0x87/0x650 [ 1443.374934][ T9858] xfrm_state_alloc+0x24/0x2f0 [ 1443.374960][ T9858] pfkey_add+0x700/0x2df0 [ 1443.374987][ T9858] ? kasan_quarantine_put+0x82/0x1f0 [ 1443.375021][ T9858] ? __pfx_pfkey_add+0x10/0x10 [ 1443.375052][ T9858] pfkey_sendmsg+0xc56/0x1120 [ 1443.375079][ T9858] ? unwind_next_frame+0xa6/0x2550 [ 1443.375112][ T9858] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1443.375163][ T9858] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1443.375196][ T9858] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1443.375226][ T9858] ____sys_sendmsg+0x972/0x9f0 [ 1443.375252][ T9858] ? __might_fault+0xaf/0x130 [ 1443.375280][ T9858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1443.375313][ T9858] ? import_iovec+0x73/0xa0 [ 1443.375334][ T9858] ___sys_sendmsg+0x2a5/0x360 [ 1443.375356][ T9858] ? __lock_acquire+0x6b5/0x2cf0 [ 1443.375380][ T9858] ? __pfx____sys_sendmsg+0x10/0x10 [ 1443.375439][ T9858] ? __fget_files+0x2a/0x420 [ 1443.375460][ T9858] ? __fget_files+0x3a0/0x420 [ 1443.375491][ T9858] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1443.375519][ T9858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1443.375555][ T9858] ? __pfx_ksys_write+0x10/0x10 [ 1443.375588][ T9858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.375609][ T9858] do_syscall_64+0x15f/0xf80 [ 1443.375630][ T9858] ? trace_irq_disable+0x3b/0x140 [ 1443.375651][ T9858] ? clear_bhb_loop+0x40/0x90 [ 1443.375675][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.375692][ T9858] RIP: 0033:0x7fa9e4d9c819 [ 1443.375710][ T9858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.375726][ T9858] RSP: 002b:00007fa9e5c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1443.375747][ T9858] RAX: ffffffffffffffda RBX: 00007fa9e5015fa0 RCX: 00007fa9e4d9c819 [ 1443.375761][ T9858] RDX: 0000000000048004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1443.375774][ T9858] RBP: 00007fa9e5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.375786][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1443.375802][ T9858] R13: 00007fa9e5016038 R14: 00007fa9e5015fa0 R15: 00007fffaccbed18 [ 1443.375834][ T9858] [ 1443.647276][ T4915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.732420][ T9865] FAULT_INJECTION: forcing a failure. [ 1443.732420][ T9865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.775512][ T9865] CPU: 1 UID: 0 PID: 9865 Comm: syz.3.10567 Not tainted syzkaller #0 PREEMPT(full) [ 1443.775539][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1443.775551][ T9865] Call Trace: [ 1443.775559][ T9865] [ 1443.775568][ T9865] dump_stack_lvl+0xe8/0x150 [ 1443.775600][ T9865] should_fail_ex+0x412/0x560 [ 1443.775631][ T9865] _copy_from_user+0x2d/0xb0 [ 1443.775653][ T9865] ___sys_recvmsg+0x175/0x590 [ 1443.775678][ T9865] ? __pfx____sys_recvmsg+0x10/0x10 [ 1443.775701][ T9865] ? __fget_files+0x2a/0x420 [ 1443.775752][ T9865] do_recvmmsg+0x334/0x800 [ 1443.775778][ T9865] ? __pfx_do_recvmmsg+0x10/0x10 [ 1443.775809][ T9865] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1443.775850][ T9865] __x64_sys_recvmmsg+0x198/0x250 [ 1443.775871][ T9865] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1443.775899][ T9865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.775919][ T9865] do_syscall_64+0x15f/0xf80 [ 1443.775942][ T9865] ? clear_bhb_loop+0x40/0x90 [ 1443.776011][ T9865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.776030][ T9865] RIP: 0033:0x7f11b359c819 [ 1443.776048][ T9865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.776063][ T9865] RSP: 002b:00007f11b448e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1443.776083][ T9865] RAX: ffffffffffffffda RBX: 00007f11b3815fa0 RCX: 00007f11b359c819 [ 1443.776097][ T9865] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1443.776110][ T9865] RBP: 00007f11b448e090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.776121][ T9865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.776132][ T9865] R13: 00007f11b3816038 R14: 00007f11b3815fa0 R15: 00007ffce5c3f888 [ 1443.776163][ T9865] [ 1444.248384][ T9881] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10573'. [ 1444.278469][ T9883] netlink: 'syz.1.10572': attribute type 4 has an invalid length. [ 1444.287988][ T9883] netlink: 'syz.1.10572': attribute type 4 has an invalid length. [ 1444.300408][ T9881] netlink: 'syz.2.10573': attribute type 4 has an invalid length. [ 1444.503579][ T9898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1444.510979][ T9898] IPv6: NLM_F_CREATE should be set when creating new route [ 1444.518388][ T9898] IPv6: NLM_F_CREATE should be set when creating new route [ 1444.582306][ T9906] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10579'. [ 1444.654743][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.667301][ T9909] FAULT_INJECTION: forcing a failure. [ 1444.667301][ T9909] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.689353][ T9909] CPU: 0 UID: 0 PID: 9909 Comm: syz.4.10580 Not tainted syzkaller #0 PREEMPT(full) [ 1444.689380][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1444.689391][ T9909] Call Trace: [ 1444.689399][ T9909] [ 1444.689407][ T9909] dump_stack_lvl+0xe8/0x150 [ 1444.689441][ T9909] should_fail_ex+0x412/0x560 [ 1444.689472][ T9909] should_failslab+0xa8/0x100 [ 1444.689494][ T9909] __kmalloc_noprof+0xe8/0x760 [ 1444.689521][ T9909] ? pfkey_add+0xf78/0x2df0 [ 1444.689546][ T9909] pfkey_add+0xf78/0x2df0 [ 1444.689582][ T9909] ? __pfx_pfkey_add+0x10/0x10 [ 1444.689613][ T9909] pfkey_sendmsg+0xc56/0x1120 [ 1444.689639][ T9909] ? unwind_next_frame+0xa6/0x2550 [ 1444.689672][ T9909] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1444.689724][ T9909] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1444.689750][ T9909] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1444.689780][ T9909] ____sys_sendmsg+0x972/0x9f0 [ 1444.689807][ T9909] ? __might_fault+0xaf/0x130 [ 1444.689837][ T9909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1444.689883][ T9909] ? import_iovec+0x73/0xa0 [ 1444.689906][ T9909] ___sys_sendmsg+0x2a5/0x360 [ 1444.689931][ T9909] ? __lock_acquire+0x6b5/0x2cf0 [ 1444.689958][ T9909] ? __pfx____sys_sendmsg+0x10/0x10 [ 1444.690020][ T9909] ? __fget_files+0x2a/0x420 [ 1444.690043][ T9909] ? __fget_files+0x3a0/0x420 [ 1444.690075][ T9909] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1444.690105][ T9909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1444.690139][ T9909] ? __pfx_ksys_write+0x10/0x10 [ 1444.690173][ T9909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.690194][ T9909] do_syscall_64+0x15f/0xf80 [ 1444.690216][ T9909] ? trace_irq_disable+0x3b/0x140 [ 1444.690237][ T9909] ? clear_bhb_loop+0x40/0x90 [ 1444.690260][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.690279][ T9909] RIP: 0033:0x7f0127d9c819 [ 1444.690297][ T9909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1444.690313][ T9909] RSP: 002b:00007f0128ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1444.690339][ T9909] RAX: ffffffffffffffda RBX: 00007f0128015fa0 RCX: 00007f0127d9c819 [ 1444.690353][ T9909] RDX: 0000000000048004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1444.690365][ T9909] RBP: 00007f0128ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.690377][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.690389][ T9909] R13: 00007f0128016038 R14: 00007f0128015fa0 R15: 00007ffdd364d788 [ 1444.690419][ T9909] [ 1445.038022][ T9916] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10577'. [ 1445.078165][ T9912] bond6: (slave bond_slave_1): Device is not our slave [ 1445.140569][ T9912] bond6: option active_slave: invalid value (bond_slave_1) [ 1445.166103][ T9912] bond6 (unregistering): Released all slaves [ 1445.211830][ T9919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10581'. [ 1445.281823][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10581'. [ 1445.363915][ T9927] netlink: 'syz.4.10585': attribute type 4 has an invalid length. [ 1445.377132][ T9927] netlink: 'syz.4.10585': attribute type 4 has an invalid length. [ 1445.389529][ T9912] .70·: renamed from hsr0 (while UP) [ 1445.407005][ T9912] .70·: entered allmulticast mode [ 1445.426326][ T9912] hsr_slave_0: entered allmulticast mode [ 1445.448554][ T9912] hsr_slave_1: entered allmulticast mode [ 1445.467151][ T9912] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1445.525238][ T9936] FAULT_INJECTION: forcing a failure. [ 1445.525238][ T9936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1445.545574][ T9936] CPU: 0 UID: 0 PID: 9936 Comm: syz.4.10587 Not tainted syzkaller #0 PREEMPT(full) [ 1445.545598][ T9936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1445.545609][ T9936] Call Trace: [ 1445.545616][ T9936] [ 1445.545625][ T9936] dump_stack_lvl+0xe8/0x150 [ 1445.545656][ T9936] should_fail_ex+0x412/0x560 [ 1445.545686][ T9936] _copy_from_user+0x2d/0xb0 [ 1445.545703][ T9936] ___sys_sendmsg+0x1c6/0x360 [ 1445.545728][ T9936] ? __lock_acquire+0x6b5/0x2cf0 [ 1445.545755][ T9936] ? __pfx____sys_sendmsg+0x10/0x10 [ 1445.545813][ T9936] ? __fget_files+0x2a/0x420 [ 1445.545836][ T9936] ? __fget_files+0x3a0/0x420 [ 1445.545868][ T9936] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1445.545897][ T9936] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1445.545932][ T9936] ? __pfx_ksys_write+0x10/0x10 [ 1445.545966][ T9936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.545986][ T9936] do_syscall_64+0x15f/0xf80 [ 1445.546008][ T9936] ? trace_irq_disable+0x3b/0x140 [ 1445.546028][ T9936] ? clear_bhb_loop+0x40/0x90 [ 1445.546060][ T9936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.546078][ T9936] RIP: 0033:0x7f0127d9c819 [ 1445.546097][ T9936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.546113][ T9936] RSP: 002b:00007f0128ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1445.546134][ T9936] RAX: ffffffffffffffda RBX: 00007f0128015fa0 RCX: 00007f0127d9c819 [ 1445.546151][ T9936] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003 [ 1445.546163][ T9936] RBP: 00007f0128ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.546176][ T9936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.546186][ T9936] R13: 00007f0128016038 R14: 00007f0128015fa0 R15: 00007ffdd364d788 [ 1445.546215][ T9936] [ 1445.826327][ T9945] FAULT_INJECTION: forcing a failure. [ 1445.826327][ T9945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1445.839975][ T9945] CPU: 0 UID: 0 PID: 9945 Comm: syz.4.10591 Not tainted syzkaller #0 PREEMPT(full) [ 1445.840009][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1445.840020][ T9945] Call Trace: [ 1445.840027][ T9945] [ 1445.840034][ T9945] dump_stack_lvl+0xe8/0x150 [ 1445.840066][ T9945] should_fail_ex+0x412/0x560 [ 1445.840095][ T9945] _copy_from_user+0x2d/0xb0 [ 1445.840116][ T9945] ___sys_recvmsg+0x175/0x590 [ 1445.840141][ T9945] ? __pfx____sys_recvmsg+0x10/0x10 [ 1445.840164][ T9945] ? __fget_files+0x2a/0x420 [ 1445.840216][ T9945] do_recvmmsg+0x334/0x800 [ 1445.840242][ T9945] ? __pfx_do_recvmmsg+0x10/0x10 [ 1445.840273][ T9945] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1445.840312][ T9945] __x64_sys_recvmmsg+0x198/0x250 [ 1445.840333][ T9945] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1445.840360][ T9945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.840380][ T9945] do_syscall_64+0x15f/0xf80 [ 1445.840401][ T9945] ? trace_irq_disable+0x3b/0x140 [ 1445.840421][ T9945] ? clear_bhb_loop+0x40/0x90 [ 1445.840444][ T9945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.840462][ T9945] RIP: 0033:0x7f0127d9c819 [ 1445.840481][ T9945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.840497][ T9945] RSP: 002b:00007f0128ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1445.840518][ T9945] RAX: ffffffffffffffda RBX: 00007f0128015fa0 RCX: 00007f0127d9c819 [ 1445.840532][ T9945] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1445.840544][ T9945] RBP: 00007f0128ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.840557][ T9945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.840568][ T9945] R13: 00007f0128016038 R14: 00007f0128015fa0 R15: 00007ffdd364d788 [ 1445.840600][ T9945] [ 1445.961720][ T9947] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 1446.020960][ T9949] netlink: 'syz.1.10593': attribute type 12 has an invalid length. [ 1446.050562][ T9949] netlink: 'syz.1.10593': attribute type 29 has an invalid length. [ 1446.058808][ T9949] netlink: 'syz.1.10593': attribute type 1 has an invalid length. [ 1446.060727][ T9953] FAULT_INJECTION: forcing a failure. [ 1446.060727][ T9953] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.066779][ T9949] netlink: 'syz.1.10593': attribute type 2 has an invalid length. [ 1446.123929][ T9954] syzkaller0: entered promiscuous mode [ 1446.129869][ T9954] syzkaller0: entered allmulticast mode [ 1446.138472][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz.3.10594 Not tainted syzkaller #0 PREEMPT(full) [ 1446.138499][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1446.138512][ T9953] Call Trace: [ 1446.138520][ T9953] [ 1446.138529][ T9953] dump_stack_lvl+0xe8/0x150 [ 1446.138564][ T9953] should_fail_ex+0x412/0x560 [ 1446.138595][ T9953] should_failslab+0xa8/0x100 [ 1446.138617][ T9953] __kmalloc_noprof+0xe8/0x760 [ 1446.138644][ T9953] ? pfkey_add+0x1500/0x2df0 [ 1446.138668][ T9953] pfkey_add+0x1500/0x2df0 [ 1446.138705][ T9953] ? __pfx_pfkey_add+0x10/0x10 [ 1446.138736][ T9953] pfkey_sendmsg+0xc56/0x1120 [ 1446.138772][ T9953] ? unwind_next_frame+0xa6/0x2550 [ 1446.138801][ T9953] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1446.138848][ T9953] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1446.138872][ T9953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1446.138902][ T9953] ____sys_sendmsg+0x972/0x9f0 [ 1446.138929][ T9953] ? __might_fault+0xaf/0x130 [ 1446.138960][ T9953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1446.138996][ T9953] ? import_iovec+0x73/0xa0 [ 1446.139018][ T9953] ___sys_sendmsg+0x2a5/0x360 [ 1446.139044][ T9953] ? __lock_acquire+0x6b5/0x2cf0 [ 1446.139072][ T9953] ? __pfx____sys_sendmsg+0x10/0x10 [ 1446.139133][ T9953] ? __fget_files+0x2a/0x420 [ 1446.139154][ T9953] ? __fget_files+0x3a0/0x420 [ 1446.139183][ T9953] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1446.139209][ T9953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1446.139242][ T9953] ? __pfx_ksys_write+0x10/0x10 [ 1446.139274][ T9953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.139293][ T9953] do_syscall_64+0x15f/0xf80 [ 1446.139313][ T9953] ? trace_irq_disable+0x3b/0x140 [ 1446.139333][ T9953] ? clear_bhb_loop+0x40/0x90 [ 1446.139354][ T9953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.139372][ T9953] RIP: 0033:0x7f11b359c819 [ 1446.139391][ T9953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.139407][ T9953] RSP: 002b:00007f11b448e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1446.139429][ T9953] RAX: ffffffffffffffda RBX: 00007f11b3815fa0 RCX: 00007f11b359c819 [ 1446.139443][ T9953] RDX: 0000000000048004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1446.139455][ T9953] RBP: 00007f11b448e090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.139467][ T9953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.139479][ T9953] R13: 00007f11b3816038 R14: 00007f11b3815fa0 R15: 00007ffce5c3f888 [ 1446.139508][ T9953] [ 1446.437744][ T9958] netlink: 'syz.2.10597': attribute type 4 has an invalid length. [ 1446.612568][ T9961] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1446.815693][ T4915] net_ratelimit: 1 callbacks suppressed [ 1446.815712][ T4915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.847239][ T9970] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1447.054050][ T9988] syzkaller0: entered promiscuous mode [ 1447.064537][ T9988] syzkaller0: entered allmulticast mode [ 1447.184512][ T9995] FAULT_INJECTION: forcing a failure. [ 1447.184512][ T9995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1447.225981][ T9995] CPU: 0 UID: 0 PID: 9995 Comm: syz.0.10609 Not tainted syzkaller #0 PREEMPT(full) [ 1447.226008][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1447.226018][ T9995] Call Trace: [ 1447.226026][ T9995] [ 1447.226034][ T9995] dump_stack_lvl+0xe8/0x150 [ 1447.226062][ T9995] should_fail_ex+0x412/0x560 [ 1447.226089][ T9995] _copy_from_user+0x2d/0xb0 [ 1447.226109][ T9995] ___sys_recvmsg+0x175/0x590 [ 1447.226134][ T9995] ? __pfx____sys_recvmsg+0x10/0x10 [ 1447.226156][ T9995] ? __fget_files+0x2a/0x420 [ 1447.226204][ T9995] do_recvmmsg+0x334/0x800 [ 1447.226230][ T9995] ? __pfx_do_recvmmsg+0x10/0x10 [ 1447.226259][ T9995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1447.226299][ T9995] __x64_sys_recvmmsg+0x198/0x250 [ 1447.226320][ T9995] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1447.226346][ T9995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.226366][ T9995] do_syscall_64+0x15f/0xf80 [ 1447.226387][ T9995] ? trace_irq_disable+0x3b/0x140 [ 1447.226407][ T9995] ? clear_bhb_loop+0x40/0x90 [ 1447.226430][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.226447][ T9995] RIP: 0033:0x7fba9439c819 [ 1447.226464][ T9995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1447.226479][ T9995] RSP: 002b:00007fba951ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1447.226499][ T9995] RAX: ffffffffffffffda RBX: 00007fba94615fa0 RCX: 00007fba9439c819 [ 1447.226512][ T9995] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1447.226521][ T9995] RBP: 00007fba951ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.226530][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1447.226539][ T9995] R13: 00007fba94616038 R14: 00007fba94615fa0 R15: 00007fff0d113708 [ 1447.226562][ T9995] [ 1447.421402][ T9992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1447.529834][T10001] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1447.656508][ T9199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.668065][ T9199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.806104][T10019] __nla_validate_parse: 6 callbacks suppressed [ 1447.806122][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10616'. [ 1447.853972][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.877944][T10019] ipvlan2: entered allmulticast mode [ 1447.883882][T10019] syz_tun: entered allmulticast mode [ 1448.090528][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.100433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.109980][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.119217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.125321][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10617'. [ 1448.196126][T10035] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10620'. [ 1448.210961][T10036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1448.219123][T10036] IPv6: NLM_F_CREATE should be set when creating new route [ 1448.227370][T10036] IPv6: NLM_F_CREATE should be set when creating new route [ 1448.234784][T10036] IPv6: NLM_F_CREATE should be set when creating new route [ 1448.369434][T10040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10621'. [ 1448.538347][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10623'. [ 1448.598579][T10049] pim6reg: entered allmulticast mode [ 1448.708298][T10051] syzkaller0: entered promiscuous mode [ 1448.725488][T10051] syzkaller0: entered allmulticast mode [ 1448.729593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.889797][ T4915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.984090][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10626'. [ 1449.013388][T10062] FAULT_INJECTION: forcing a failure. [ 1449.013388][T10062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1449.035167][T10062] CPU: 0 UID: 0 PID: 10062 Comm: syz.2.10627 Not tainted syzkaller #0 PREEMPT(full) [ 1449.035196][T10062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1449.035208][T10062] Call Trace: [ 1449.035215][T10062] [ 1449.035223][T10062] dump_stack_lvl+0xe8/0x150 [ 1449.035253][T10062] should_fail_ex+0x412/0x560 [ 1449.035282][T10062] _copy_from_user+0x2d/0xb0 [ 1449.035320][T10062] ___sys_recvmsg+0x175/0x590 [ 1449.035340][T10062] ? __pfx____sys_recvmsg+0x10/0x10 [ 1449.035358][T10062] ? __fget_files+0x2a/0x420 [ 1449.035399][T10062] do_recvmmsg+0x334/0x800 [ 1449.035419][T10062] ? __pfx_do_recvmmsg+0x10/0x10 [ 1449.035442][T10062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1449.035475][T10062] __x64_sys_recvmmsg+0x198/0x250 [ 1449.035492][T10062] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1449.035514][T10062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.035530][T10062] do_syscall_64+0x15f/0xf80 [ 1449.035547][T10062] ? trace_irq_disable+0x3b/0x140 [ 1449.035564][T10062] ? clear_bhb_loop+0x40/0x90 [ 1449.035582][T10062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.035597][T10062] RIP: 0033:0x7fa9e4d9c819 [ 1449.035612][T10062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.035625][T10062] RSP: 002b:00007fa9e5c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1449.035643][T10062] RAX: ffffffffffffffda RBX: 00007fa9e5015fa0 RCX: 00007fa9e4d9c819 [ 1449.035654][T10062] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1449.035676][T10062] RBP: 00007fa9e5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.035684][T10062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1449.035693][T10062] R13: 00007fa9e5016038 R14: 00007fa9e5015fa0 R15: 00007fffaccbed18 [ 1449.035717][T10062] [ 1449.312816][T10063] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1449.340703][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10626'. [ 1449.475388][T10070] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10629'. [ 1449.675641][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10631'. [ 1449.697415][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10631'. [ 1449.946974][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.111799][T10090] openvswitch: netlink: IP tunnel dst address not specified [ 1450.555550][T10103] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1450.576785][T10106] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1450.588721][T10107] syzkaller0: entered promiscuous mode [ 1450.611943][T10107] syzkaller0: entered allmulticast mode [ 1451.107510][T10131] FAULT_INJECTION: forcing a failure. [ 1451.107510][T10131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.149432][T10131] CPU: 0 UID: 0 PID: 10131 Comm: syz.0.10647 Not tainted syzkaller #0 PREEMPT(full) [ 1451.149460][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1451.149472][T10131] Call Trace: [ 1451.149480][T10131] [ 1451.149488][T10131] dump_stack_lvl+0xe8/0x150 [ 1451.149521][T10131] should_fail_ex+0x412/0x560 [ 1451.149550][T10131] _copy_from_user+0x2d/0xb0 [ 1451.149571][T10131] ___sys_recvmsg+0x175/0x590 [ 1451.149596][T10131] ? __pfx____sys_recvmsg+0x10/0x10 [ 1451.149619][T10131] ? __fget_files+0x2a/0x420 [ 1451.149670][T10131] do_recvmmsg+0x334/0x800 [ 1451.149695][T10131] ? __pfx_do_recvmmsg+0x10/0x10 [ 1451.149723][T10131] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1451.149763][T10131] __x64_sys_recvmmsg+0x198/0x250 [ 1451.149784][T10131] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1451.149810][T10131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.149830][T10131] do_syscall_64+0x15f/0xf80 [ 1451.149851][T10131] ? trace_irq_disable+0x3b/0x140 [ 1451.149871][T10131] ? clear_bhb_loop+0x40/0x90 [ 1451.149893][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.149911][T10131] RIP: 0033:0x7fba9439c819 [ 1451.149933][T10131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.149949][T10131] RSP: 002b:00007fba951ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1451.149969][T10131] RAX: ffffffffffffffda RBX: 00007fba94615fa0 RCX: 00007fba9439c819 [ 1451.149983][T10131] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1451.149996][T10131] RBP: 00007fba951ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.150008][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1451.150019][T10131] R13: 00007fba94616038 R14: 00007fba94615fa0 R15: 00007fff0d113708 [ 1451.150049][T10131] [ 1451.904373][T10138] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1451.956557][T10147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1452.018684][ T6173] net_ratelimit: 2 callbacks suppressed [ 1452.018705][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.034387][T10151] FAULT_INJECTION: forcing a failure. [ 1452.034387][T10151] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.074879][T10154] validate_nla: 6 callbacks suppressed [ 1452.074900][T10154] netlink: 'syz.3.10656': attribute type 12 has an invalid length. [ 1452.077997][T10151] CPU: 1 UID: 0 PID: 10151 Comm: syz.2.10665 Not tainted syzkaller #0 PREEMPT(full) [ 1452.078024][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1452.078037][T10151] Call Trace: [ 1452.078044][T10151] [ 1452.078053][T10151] dump_stack_lvl+0xe8/0x150 [ 1452.078086][T10151] should_fail_ex+0x412/0x560 [ 1452.078129][T10151] should_failslab+0xa8/0x100 [ 1452.078150][T10151] __kmalloc_node_noprof+0xf0/0x7c0 [ 1452.078177][T10151] ? crypto_create_tfm_node+0x83/0x3f0 [ 1452.078206][T10151] crypto_create_tfm_node+0x83/0x3f0 [ 1452.078233][T10151] crypto_spawn_tfm2+0x5c/0x90 [ 1452.078257][T10151] crypto_authenc_init_tfm+0x69/0x1c0 [ 1452.078285][T10151] crypto_create_tfm_node+0x18c/0x3f0 [ 1452.078312][T10151] crypto_spawn_tfm2+0x5c/0x90 [ 1452.078339][T10151] aead_init_geniv+0x169/0x240 [ 1452.078364][T10151] crypto_create_tfm_node+0x18c/0x3f0 [ 1452.078392][T10151] crypto_alloc_tfm_node+0x172/0x3f0 [ 1452.078422][T10151] esp6_init_state+0x63c/0x1240 [ 1452.078462][T10151] ? __pfx_esp6_init_state+0x10/0x10 [ 1452.078509][T10151] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1452.078535][T10151] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1452.078567][T10151] ? __xfrm_init_state+0x842/0x1460 [ 1452.078592][T10151] __xfrm_init_state+0xac9/0x1460 [ 1452.078612][T10151] ? __xfrm_init_state+0x842/0x1460 [ 1452.078636][T10151] xfrm_init_state+0x18/0xa0 [ 1452.078653][T10151] pfkey_add+0x1d34/0x2df0 [ 1452.078690][T10151] ? __pfx_pfkey_add+0x10/0x10 [ 1452.078721][T10151] pfkey_sendmsg+0xc56/0x1120 [ 1452.078751][T10151] ? unwind_next_frame+0xa6/0x2550 [ 1452.078787][T10151] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1452.078837][T10151] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1452.078864][T10151] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1452.078893][T10151] ____sys_sendmsg+0x972/0x9f0 [ 1452.078921][T10151] ? __might_fault+0xaf/0x130 [ 1452.078951][T10151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1452.078986][T10151] ? import_iovec+0x73/0xa0 [ 1452.079009][T10151] ___sys_sendmsg+0x2a5/0x360 [ 1452.079034][T10151] ? __lock_acquire+0x6b5/0x2cf0 [ 1452.079063][T10151] ? __pfx____sys_sendmsg+0x10/0x10 [ 1452.079136][T10151] ? __fget_files+0x2a/0x420 [ 1452.079159][T10151] ? __fget_files+0x3a0/0x420 [ 1452.079193][T10151] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1452.079222][T10151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1452.079258][T10151] ? __pfx_ksys_write+0x10/0x10 [ 1452.079293][T10151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.079315][T10151] do_syscall_64+0x15f/0xf80 [ 1452.079355][T10151] ? trace_irq_disable+0x3b/0x140 [ 1452.079375][T10151] ? clear_bhb_loop+0x40/0x90 [ 1452.079399][T10151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.079418][T10151] RIP: 0033:0x7fa9e4d9c819 [ 1452.079439][T10151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.079455][T10151] RSP: 002b:00007fa9e5c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1452.079482][T10151] RAX: ffffffffffffffda RBX: 00007fa9e5015fa0 RCX: 00007fa9e4d9c819 [ 1452.079503][T10151] RDX: 0000000000048004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1452.079516][T10151] RBP: 00007fa9e5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 1452.079528][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1452.079539][T10151] R13: 00007fa9e5016038 R14: 00007fa9e5015fa0 R15: 00007fffaccbed18 [ 1452.079572][T10151] [ 1452.162882][T10159] netlink: 'syz.0.10658': attribute type 4 has an invalid length. [ 1452.166095][T10154] netlink: 'syz.3.10656': attribute type 29 has an invalid length. [ 1452.239159][T10160] netlink: 'syz.0.10658': attribute type 4 has an invalid length. [ 1452.245372][T10154] netlink: 'syz.3.10656': attribute type 1 has an invalid length. [ 1452.474815][T10154] netlink: 'syz.3.10656': attribute type 2 has an invalid length. [ 1452.713430][T10178] FAULT_INJECTION: forcing a failure. [ 1452.713430][T10178] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.759288][T10178] CPU: 0 UID: 0 PID: 10178 Comm: syz.3.10663 Not tainted syzkaller #0 PREEMPT(full) [ 1452.759316][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1452.759327][T10178] Call Trace: [ 1452.759335][T10178] [ 1452.759342][T10178] dump_stack_lvl+0xe8/0x150 [ 1452.759375][T10178] should_fail_ex+0x412/0x560 [ 1452.759407][T10178] should_failslab+0xa8/0x100 [ 1452.759428][T10178] __kmalloc_node_noprof+0xf0/0x7c0 [ 1452.759461][T10178] ? lock_acquire+0x106/0x350 [ 1452.759484][T10178] ? qdisc_alloc+0x92/0x9e0 [ 1452.759513][T10178] qdisc_alloc+0x92/0x9e0 [ 1452.759544][T10178] qdisc_create+0x12c/0xf20 [ 1452.759569][T10178] ? lockdep_rtnl_is_held+0x26/0x40 [ 1452.759588][T10178] ? qdisc_lookup+0x36d/0x6d0 [ 1452.759610][T10178] tc_modify_qdisc+0x16f0/0x2290 [ 1452.759632][T10178] ? rcu_is_watching+0x15/0xb0 [ 1452.759671][T10178] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1452.759694][T10178] ? __dev_queue_xmit+0x2b6/0x3950 [ 1452.759740][T10178] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1452.759761][T10178] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1452.759789][T10178] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1452.759815][T10178] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1452.759837][T10178] ? ref_tracker_free+0x693/0x840 [ 1452.759863][T10178] ? __pfx_ref_tracker_free+0x10/0x10 [ 1452.759898][T10178] netlink_rcv_skb+0x232/0x4b0 [ 1452.759926][T10178] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1452.759951][T10178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1452.759989][T10178] ? netlink_deliver_tap+0x2e/0x1b0 [ 1452.760013][T10178] ? netlink_deliver_tap+0x2e/0x1b0 [ 1452.760044][T10178] netlink_unicast+0x75c/0x8e0 [ 1452.760078][T10178] netlink_sendmsg+0x813/0xb40 [ 1452.760113][T10178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1452.760142][T10178] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1452.760168][T10178] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1452.760197][T10178] ____sys_sendmsg+0x972/0x9f0 [ 1452.760224][T10178] ? __might_fault+0xaf/0x130 [ 1452.760255][T10178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1452.760290][T10178] ? import_iovec+0x73/0xa0 [ 1452.760313][T10178] ___sys_sendmsg+0x2a5/0x360 [ 1452.760339][T10178] ? __lock_acquire+0x6b5/0x2cf0 [ 1452.760366][T10178] ? __pfx____sys_sendmsg+0x10/0x10 [ 1452.760428][T10178] ? __fget_files+0x2a/0x420 [ 1452.760457][T10178] ? __fget_files+0x3a0/0x420 [ 1452.760490][T10178] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1452.760520][T10178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1452.760556][T10178] ? __pfx_ksys_write+0x10/0x10 [ 1452.760591][T10178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.760612][T10178] do_syscall_64+0x15f/0xf80 [ 1452.760634][T10178] ? trace_irq_disable+0x3b/0x140 [ 1452.760655][T10178] ? clear_bhb_loop+0x40/0x90 [ 1452.760679][T10178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.760698][T10178] RIP: 0033:0x7f11b359c819 [ 1452.760717][T10178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.760732][T10178] RSP: 002b:00007f11b448e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1452.760754][T10178] RAX: ffffffffffffffda RBX: 00007f11b3815fa0 RCX: 00007f11b359c819 [ 1452.760768][T10178] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003 [ 1452.760780][T10178] RBP: 00007f11b448e090 R08: 0000000000000000 R09: 0000000000000000 [ 1452.760791][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1452.760803][T10178] R13: 00007f11b3816038 R14: 00007f11b3815fa0 R15: 00007ffce5c3f888 [ 1452.760835][T10178] [ 1452.762914][T10176] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 1453.122284][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.351405][T10201] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1453.416502][T10207] FAULT_INJECTION: forcing a failure. [ 1453.416502][T10207] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.482295][T10208] syzkaller0: entered promiscuous mode [ 1453.490276][T10207] CPU: 0 UID: 0 PID: 10207 Comm: syz.4.10671 Not tainted syzkaller #0 PREEMPT(full) [ 1453.490304][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1453.490316][T10207] Call Trace: [ 1453.490324][T10207] [ 1453.490337][T10207] dump_stack_lvl+0xe8/0x150 [ 1453.490370][T10207] should_fail_ex+0x412/0x560 [ 1453.490401][T10207] should_failslab+0xa8/0x100 [ 1453.490423][T10207] __kmalloc_noprof+0xe8/0x760 [ 1453.490448][T10207] ? esp6_init_state+0x764/0x1240 [ 1453.490479][T10207] esp6_init_state+0x764/0x1240 [ 1453.490516][T10207] ? __pfx_esp6_init_state+0x10/0x10 [ 1453.490556][T10207] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1453.490584][T10207] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1453.490617][T10207] ? __xfrm_init_state+0x842/0x1460 [ 1453.490641][T10207] __xfrm_init_state+0xac9/0x1460 [ 1453.490661][T10207] ? __xfrm_init_state+0x842/0x1460 [ 1453.490688][T10207] xfrm_init_state+0x18/0xa0 [ 1453.490706][T10207] pfkey_add+0x1d34/0x2df0 [ 1453.490744][T10207] ? __pfx_pfkey_add+0x10/0x10 [ 1453.490775][T10207] pfkey_sendmsg+0xc56/0x1120 [ 1453.490800][T10207] ? unwind_next_frame+0xa6/0x2550 [ 1453.490833][T10207] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1453.490885][T10207] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1453.490911][T10207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1453.490941][T10207] ____sys_sendmsg+0x972/0x9f0 [ 1453.490968][T10207] ? __might_fault+0xaf/0x130 [ 1453.490998][T10207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1453.491034][T10207] ? import_iovec+0x73/0xa0 [ 1453.491057][T10207] ___sys_sendmsg+0x2a5/0x360 [ 1453.491083][T10207] ? __lock_acquire+0x6b5/0x2cf0 [ 1453.491111][T10207] ? __pfx____sys_sendmsg+0x10/0x10 [ 1453.491173][T10207] ? __fget_files+0x2a/0x420 [ 1453.491193][T10207] ? __fget_files+0x3a0/0x420 [ 1453.491223][T10207] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1453.491253][T10207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1453.491288][T10207] ? __pfx_ksys_write+0x10/0x10 [ 1453.491321][T10207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.491342][T10207] do_syscall_64+0x15f/0xf80 [ 1453.491365][T10207] ? trace_irq_disable+0x3b/0x140 [ 1453.491384][T10207] ? clear_bhb_loop+0x40/0x90 [ 1453.491407][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.491426][T10207] RIP: 0033:0x7f0127d9c819 [ 1453.491444][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.491460][T10207] RSP: 002b:00007f0128ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1453.491481][T10207] RAX: ffffffffffffffda RBX: 00007f0128015fa0 RCX: 00007f0127d9c819 [ 1453.491495][T10207] RDX: 0000000000048004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1453.491507][T10207] RBP: 00007f0128ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.491518][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1453.491530][T10207] R13: 00007f0128016038 R14: 00007f0128015fa0 R15: 00007ffdd364d788 [ 1453.491561][T10207] [ 1453.492859][T10208] syzkaller0: entered allmulticast mode [ 1453.853982][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.862550][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.871287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.879544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.076834][T10233] FAULT_INJECTION: forcing a failure. [ 1454.076834][T10233] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.137352][T10233] CPU: 0 UID: 0 PID: 10233 Comm: syz.3.10678 Not tainted syzkaller #0 PREEMPT(full) [ 1454.137383][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1454.137395][T10233] Call Trace: [ 1454.137404][T10233] [ 1454.137414][T10233] dump_stack_lvl+0xe8/0x150 [ 1454.137448][T10233] should_fail_ex+0x412/0x560 [ 1454.137481][T10233] should_failslab+0xa8/0x100 [ 1454.137504][T10233] __kmalloc_cache_noprof+0x88/0x660 [ 1454.137534][T10233] ? qdisc_get_rtab+0x211/0x470 [ 1454.137561][T10233] qdisc_get_rtab+0x211/0x470 [ 1454.137580][T10233] ? tbf_change+0x262/0x1640 [ 1454.137616][T10233] tbf_change+0x274/0x1640 [ 1454.137640][T10233] ? __lock_acquire+0x6b5/0x2cf0 [ 1454.137670][T10233] ? __lock_acquire+0x6b5/0x2cf0 [ 1454.137693][T10233] ? __pfx_tbf_change+0x10/0x10 [ 1454.137717][T10233] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1454.137738][T10233] ? lockdep_hardirqs_on+0x7a/0x110 [ 1454.137762][T10233] ? do_raw_spin_lock+0x12b/0x2f0 [ 1454.137795][T10233] ? ktime_get+0x45/0x220 [ 1454.137815][T10233] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1454.137838][T10233] ? ktime_get+0x45/0x220 [ 1454.137854][T10233] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1454.137874][T10233] ? ktime_get+0x1f5/0x220 [ 1454.137898][T10233] ? __pfx_tbf_init+0x10/0x10 [ 1454.137930][T10233] qdisc_create+0x7c4/0xf20 [ 1454.137951][T10233] ? lockdep_rtnl_is_held+0x26/0x40 [ 1454.137972][T10233] tc_modify_qdisc+0x16f0/0x2290 [ 1454.137991][T10233] ? rcu_is_watching+0x15/0xb0 [ 1454.138025][T10233] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1454.138044][T10233] ? __dev_queue_xmit+0x2b6/0x3950 [ 1454.138083][T10233] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1454.138110][T10233] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1454.138145][T10233] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1454.138168][T10233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1454.138189][T10233] ? ref_tracker_free+0x693/0x840 [ 1454.138226][T10233] ? __pfx_ref_tracker_free+0x10/0x10 [ 1454.138265][T10233] netlink_rcv_skb+0x232/0x4b0 [ 1454.138289][T10233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1454.138322][T10233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1454.138357][T10233] ? netlink_deliver_tap+0x2e/0x1b0 [ 1454.138380][T10233] ? netlink_deliver_tap+0x2e/0x1b0 [ 1454.138416][T10233] netlink_unicast+0x75c/0x8e0 [ 1454.138450][T10233] netlink_sendmsg+0x813/0xb40 [ 1454.138485][T10233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1454.138530][T10233] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1454.138556][T10233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1454.138586][T10233] ____sys_sendmsg+0x972/0x9f0 [ 1454.138613][T10233] ? __might_fault+0xaf/0x130 [ 1454.138643][T10233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1454.138678][T10233] ? import_iovec+0x73/0xa0 [ 1454.138701][T10233] ___sys_sendmsg+0x2a5/0x360 [ 1454.138730][T10233] ? __lock_acquire+0x6b5/0x2cf0 [ 1454.138758][T10233] ? __pfx____sys_sendmsg+0x10/0x10 [ 1454.138810][T10233] ? __fget_files+0x2a/0x420 [ 1454.138830][T10233] ? __fget_files+0x3a0/0x420 [ 1454.138859][T10233] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1454.138886][T10233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1454.138916][T10233] ? __pfx_ksys_write+0x10/0x10 [ 1454.138947][T10233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.138964][T10233] do_syscall_64+0x15f/0xf80 [ 1454.138984][T10233] ? trace_irq_disable+0x3b/0x140 [ 1454.139002][T10233] ? clear_bhb_loop+0x40/0x90 [ 1454.139022][T10233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.139037][T10233] RIP: 0033:0x7f11b359c819 [ 1454.139052][T10233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.139066][T10233] RSP: 002b:00007f11b448e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1454.139084][T10233] RAX: ffffffffffffffda RBX: 00007f11b3815fa0 RCX: 00007f11b359c819 [ 1454.139100][T10233] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003 [ 1454.139109][T10233] RBP: 00007f11b448e090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.139118][T10233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.139127][T10233] R13: 00007f11b3816038 R14: 00007f11b3815fa0 R15: 00007ffce5c3f888 [ 1454.139150][T10233] [ 1454.584737][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.597772][T10233] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1454.658167][T10241] __nla_validate_parse: 16 callbacks suppressed [ 1454.658192][T10241] netlink: 27 bytes leftover after parsing attributes in process `syz.0.10676'. [ 1454.863120][T10252] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1455.082168][T10264] tap0: tun_chr_ioctl cmd 1074025677 [ 1455.102370][T10264] tap0: linktype set to 6 [ 1455.217608][T10275] syzkaller0: entered promiscuous mode [ 1455.240272][T10275] syzkaller0: entered allmulticast mode [ 1455.363565][T10281] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1455.377694][T10281] FAULT_INJECTION: forcing a failure. [ 1455.377694][T10281] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.415516][T10281] CPU: 1 UID: 0 PID: 10281 Comm: syz.4.10692 Not tainted syzkaller #0 PREEMPT(full) [ 1455.415545][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1455.415557][T10281] Call Trace: [ 1455.415569][T10281] [ 1455.415579][T10281] dump_stack_lvl+0xe8/0x150 [ 1455.415611][T10281] should_fail_ex+0x412/0x560 [ 1455.415642][T10281] should_failslab+0xa8/0x100 [ 1455.415664][T10281] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1455.415690][T10281] ? __alloc_skb+0x186/0x7d0 [ 1455.415713][T10281] ? __alloc_skb+0x1d0/0x7d0 [ 1455.415735][T10281] ? __local_bh_enable_ip+0xd0/0x130 [ 1455.415763][T10281] __alloc_skb+0x1d0/0x7d0 [ 1455.415786][T10281] ? netlink_ack_tlv_len+0x6c/0x210 [ 1455.415814][T10281] netlink_ack+0x146/0xa50 [ 1455.415836][T10281] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1455.415857][T10281] ? ref_tracker_free+0x693/0x840 [ 1455.415886][T10281] ? __pfx_ref_tracker_free+0x10/0x10 [ 1455.415921][T10281] netlink_rcv_skb+0x2b6/0x4b0 [ 1455.415946][T10281] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1455.415970][T10281] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1455.416003][T10281] ? netlink_deliver_tap+0x2e/0x1b0 [ 1455.416028][T10281] ? netlink_deliver_tap+0x2e/0x1b0 [ 1455.416056][T10281] netlink_unicast+0x75c/0x8e0 [ 1455.416088][T10281] netlink_sendmsg+0x813/0xb40 [ 1455.416121][T10281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1455.416149][T10281] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1455.416175][T10281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1455.416213][T10281] ____sys_sendmsg+0x972/0x9f0 [ 1455.416238][T10281] ? __might_fault+0xaf/0x130 [ 1455.416265][T10281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1455.416297][T10281] ? import_iovec+0x73/0xa0 [ 1455.416320][T10281] ___sys_sendmsg+0x2a5/0x360 [ 1455.416345][T10281] ? __lock_acquire+0x6b5/0x2cf0 [ 1455.416373][T10281] ? __pfx____sys_sendmsg+0x10/0x10 [ 1455.416434][T10281] ? __fget_files+0x2a/0x420 [ 1455.416456][T10281] ? __fget_files+0x3a0/0x420 [ 1455.416488][T10281] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1455.416517][T10281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1455.416552][T10281] ? __pfx_ksys_write+0x10/0x10 [ 1455.416587][T10281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.416607][T10281] do_syscall_64+0x15f/0xf80 [ 1455.416629][T10281] ? trace_irq_disable+0x3b/0x140 [ 1455.416649][T10281] ? clear_bhb_loop+0x40/0x90 [ 1455.416673][T10281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.416692][T10281] RIP: 0033:0x7f0127d9c819 [ 1455.416710][T10281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.416727][T10281] RSP: 002b:00007f0128ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.416748][T10281] RAX: ffffffffffffffda RBX: 00007f0128015fa0 RCX: 00007f0127d9c819 [ 1455.416762][T10281] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003 [ 1455.416774][T10281] RBP: 00007f0128ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.416786][T10281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.416797][T10281] R13: 00007f0128016038 R14: 00007f0128015fa0 R15: 00007ffdd364d788 [ 1455.416829][T10281] [ 1455.735026][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.743913][T10293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10695'. [ 1455.866494][T10294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1456.004058][T10300] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1456.032169][T10301] netlink: 'syz.4.10698': attribute type 1 has an invalid length. [ 1456.154959][T10301] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1456.197547][T10309] vlan3: entered allmulticast mode [ 1456.206241][T10309] bond6: entered allmulticast mode [ 1456.228196][T10316] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10702'. [ 1456.314346][T10301] bond6: (slave geneve2): making interface the new active one [ 1456.377378][T10301] geneve2: entered allmulticast mode [ 1456.420526][T10301] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1456.475342][T10328] syzkaller0: entered promiscuous mode [ 1456.495632][T10328] syzkaller0: entered allmulticast mode [ 1456.522268][T10333] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1456.534776][T10333] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1456.552564][T10333] veth0_to_bridge: entered allmulticast mode [ 1456.571804][T10333] veth0_to_bridge: entered promiscuous mode [ 1456.671637][T10341] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1456.748546][T10346] FAULT_INJECTION: forcing a failure. [ 1456.748546][T10346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1456.778909][T10346] CPU: 0 UID: 0 PID: 10346 Comm: syz.3.10710 Not tainted syzkaller #0 PREEMPT(full) [ 1456.778937][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1456.778950][T10346] Call Trace: [ 1456.778958][T10346] [ 1456.778967][T10346] dump_stack_lvl+0xe8/0x150 [ 1456.778999][T10346] should_fail_ex+0x412/0x560 [ 1456.779039][T10346] _copy_from_user+0x2d/0xb0 [ 1456.779061][T10346] ___sys_recvmsg+0x175/0x590 [ 1456.779086][T10346] ? __pfx____sys_recvmsg+0x10/0x10 [ 1456.779108][T10346] ? __fget_files+0x2a/0x420 [ 1456.779157][T10346] do_recvmmsg+0x334/0x800 [ 1456.779182][T10346] ? __pfx_do_recvmmsg+0x10/0x10 [ 1456.779208][T10346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1456.779244][T10346] __x64_sys_recvmmsg+0x198/0x250 [ 1456.779263][T10346] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1456.779285][T10346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.779301][T10346] do_syscall_64+0x15f/0xf80 [ 1456.779318][T10346] ? trace_irq_disable+0x3b/0x140 [ 1456.779334][T10346] ? clear_bhb_loop+0x40/0x90 [ 1456.779352][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.779366][T10346] RIP: 0033:0x7f11b359c819 [ 1456.779382][T10346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.779395][T10346] RSP: 002b:00007f11b448e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1456.779412][T10346] RAX: ffffffffffffffda RBX: 00007f11b3815fa0 RCX: 00007f11b359c819 [ 1456.779423][T10346] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000004 [ 1456.779433][T10346] RBP: 00007f11b448e090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.779442][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1456.779450][T10346] R13: 00007f11b3816038 R14: 00007f11b3815fa0 R15: 00007ffce5c3f888 [ 1456.779475][T10346] [ 1456.984888][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.019766][T10353] dummy0: entered promiscuous mode [ 1457.026835][T10353] bond0: entered promiscuous mode [ 1457.032427][T10353] bond_slave_0: entered promiscuous mode [ 1457.038336][T10353] bond_slave_1: entered promiscuous mode [ 1457.046000][T10353] mac80211_hwsim hwsim75 wlan1: entered promiscuous mode [ 1457.059455][T10353] hsr0: entered allmulticast mode [ 1457.064830][T10353] dummy0: entered allmulticast mode [ 1457.070189][T10353] bond0: entered allmulticast mode [ 1457.075684][T10353] bond_slave_0: entered allmulticast mode [ 1457.081858][T10353] bond_slave_1: entered allmulticast mode [ 1457.087689][T10353] mac80211_hwsim hwsim75 wlan1: entered allmulticast mode [ 1457.297919][T10363] netlink: 'syz.2.10714': attribute type 4 has an invalid length. [ 1457.346348][T10363] netlink: 'syz.2.10714': attribute type 4 has an invalid length. [ 1457.369111][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10716'. [ 1457.377418][T10369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.390060][T10369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.410928][T10369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.427513][T10369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.446850][T10367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.459502][T10373] netlink: 'syz.0.10716': attribute type 1 has an invalid length. [ 1457.501502][T10367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.549121][T10367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.580030][T10368] bond1: (slave veth7): Enslaving as an active interface with a down link [ 1457.635952][T10368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10716'. [ 1457.654871][T10373] bond1: (slave veth9): Enslaving as an active interface with a down link [ 1457.677042][T10368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1457.802603][T10395] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1457.844877][T10395] FAULT_INJECTION: forcing a failure. [ 1457.844877][T10395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1457.847797][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10723'. [ 1457.870524][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.4.10722 Not tainted syzkaller #0 PREEMPT(full) [ 1457.870550][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1457.870561][T10395] Call Trace: [ 1457.870569][T10395] [ 1457.870577][T10395] dump_stack_lvl+0xe8/0x150 [ 1457.870609][T10395] should_fail_ex+0x412/0x560 [ 1457.870639][T10395] _copy_from_user+0x2d/0xb0 [ 1457.870658][T10395] kstrtouint_from_user+0xd6/0x180 [ 1457.870684][T10395] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1457.870724][T10395] proc_fail_nth_write+0x8e/0x210 [ 1457.870748][T10395] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1457.870778][T10395] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1457.870805][T10395] vfs_write+0x29a/0xb90 [ 1457.870841][T10395] ? __pfx_vfs_write+0x10/0x10 [ 1457.870869][T10395] ? __fget_files+0x2a/0x420 [ 1457.870897][T10395] ? __fget_files+0x3a0/0x420 [ 1457.870919][T10395] ? __fget_files+0x2a/0x420 [ 1457.870950][T10395] ksys_write+0x150/0x270 [ 1457.870980][T10395] ? __pfx_ksys_write+0x10/0x10 [ 1457.871026][T10395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.871046][T10395] do_syscall_64+0x15f/0xf80 [ 1457.871068][T10395] ? trace_irq_disable+0x3b/0x140 [ 1457.871086][T10395] ? clear_bhb_loop+0x40/0x90 [ 1457.871108][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.871125][T10395] RIP: 0033:0x7f0127d5d04e [ 1457.871148][T10395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1457.871163][T10395] RSP: 002b:00007f0128ca5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1457.871185][T10395] RAX: ffffffffffffffda RBX: 00007f0128ca66c0 RCX: 00007f0127d5d04e [ 1457.871199][T10395] RDX: 0000000000000001 RSI: 00007f0128ca60a0 RDI: 0000000000000004 [ 1457.871211][T10395] RBP: 00007f0128ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.871223][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1457.871234][T10395] R13: 00007f0128016038 R14: 00007f0128015fa0 R15: 00007ffdd364d788 [ 1457.871267][T10395] [ 1458.157815][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.194067][T10401] syzkaller0: entered promiscuous mode [ 1458.221013][T10401] syzkaller0: entered allmulticast mode [ 1458.248043][T10393] tipc: Started in network mode [ 1458.254831][T10393] tipc: Node identity e29921baa721, cluster identity 4711 [ 1458.268409][T10393] tipc: Enabled bearer , priority 0 [ 1458.283074][T10404] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1458.299718][T10390] tipc: Resetting bearer [ 1458.333760][T10390] tipc: Disabling bearer [ 1458.558251][T10421] syzkaller0: entered promiscuous mode [ 1458.566489][T10421] syzkaller0: entered allmulticast mode [ 1458.885250][T10443] netlink: 'syz.1.10734': attribute type 58 has an invalid length. [ 1458.982873][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.992156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.049520][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10736'. [ 1459.389743][T10468] netlink: 'syz.4.10742': attribute type 1 has an invalid length. [ 1459.514494][T10473] syzkaller0: entered promiscuous mode [ 1459.529575][T10473] syzkaller0: entered allmulticast mode [ 1460.024561][T10499] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1460.642097][T10526] FAULT_INJECTION: forcing a failure. [ 1460.642097][T10526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.716940][T10526] CPU: 0 UID: 0 PID: 10526 Comm: syz.4.10756 Not tainted syzkaller #0 PREEMPT(full) [ 1460.716968][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1460.716980][T10526] Call Trace: [ 1460.716988][T10526] [ 1460.716996][T10526] dump_stack_lvl+0xe8/0x150 [ 1460.717028][T10526] should_fail_ex+0x412/0x560 [ 1460.717058][T10526] _copy_from_user+0x2d/0xb0 [ 1460.717078][T10526] kstrtouint_from_user+0xd6/0x180 [ 1460.717106][T10526] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1460.717145][T10526] proc_fail_nth_write+0x8e/0x210 [ 1460.717171][T10526] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1460.717202][T10526] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1460.717227][T10526] vfs_write+0x29a/0xb90 [ 1460.717261][T10526] ? __pfx_vfs_write+0x10/0x10 [ 1460.717287][T10526] ? __fget_files+0x2a/0x420 [ 1460.717314][T10526] ? __fget_files+0x3a0/0x420 [ 1460.717335][T10526] ? __fget_files+0x2a/0x420 [ 1460.717366][T10526] ksys_write+0x150/0x270 [ 1460.717394][T10526] ? __pfx_ksys_write+0x10/0x10 [ 1460.717429][T10526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.717450][T10526] do_syscall_64+0x15f/0xf80 [ 1460.717470][T10526] ? trace_irq_disable+0x3b/0x140 [ 1460.717490][T10526] ? clear_bhb_loop+0x40/0x90 [ 1460.717513][T10526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.717530][T10526] RIP: 0033:0x7f0127d5d04e [ 1460.717549][T10526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1460.717565][T10526] RSP: 002b:00007f0128ca5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1460.717587][T10526] RAX: ffffffffffffffda RBX: 00007f0128ca66c0 RCX: 00007f0127d5d04e [ 1460.717601][T10526] RDX: 0000000000000001 RSI: 00007f0128ca60a0 RDI: 0000000000000004 [ 1460.717612][T10526] RBP: 00007f0128ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.717624][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1460.717634][T10526] R13: 00007f0128016038 R14: 00007f0128015fa0 R15: 00007ffdd364d788 [ 1460.717666][T10526] [ 1461.175795][T10536] syzkaller0: entered promiscuous mode [ 1461.181807][T10536] syzkaller0: entered allmulticast mode [ 1461.272785][T10543] netlink: 'syz.1.10760': attribute type 1 has an invalid length. [ 1461.304397][T27206] lec:lec_start_xmit: lec0:No lecd attached [ 1461.312997][T10541] dummy0: entered promiscuous mode [ 1461.319908][T10541] bond0: entered promiscuous mode [ 1461.325179][T10541] bond_slave_0: entered promiscuous mode [ 1461.331618][T10541] bond_slave_1: entered promiscuous mode [ 1461.338503][T10541] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1461.364509][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10761'. [ 1461.441700][T10541] debugfs: 'hsr0' already exists in 'hsr' [ 1461.458065][T10541] Cannot create hsr debugfs directory [ 1461.477288][T10541] hsr0: entered allmulticast mode [ 1461.495556][T10541] dummy0: entered allmulticast mode [ 1461.513092][T10541] bond0: entered allmulticast mode [ 1461.533379][T10541] bond_slave_0: entered allmulticast mode [ 1461.551414][T10541] bond_slave_1: entered allmulticast mode [ 1461.585237][T10541] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1461.679001][T10543] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1461.714673][T10566] netlink: 27 bytes leftover after parsing attributes in process `syz.3.10763'. [ 1461.740263][T10535] bond7: (slave geneve3): making interface the new active one [ 1461.753493][T10535] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1461.876231][T10568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10764'. [ 1462.156498][T10583] netlink: 'syz.0.10768': attribute type 9 has an invalid length. [ 1462.321771][T10586] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1462.734830][T10588] syzkaller0: entered promiscuous mode [ 1462.741723][T10588] syzkaller0: entered allmulticast mode [ 1463.052706][T10624] netlink: 196 bytes leftover after parsing attributes in process `syz.0.10776'. [ 1463.403923][ T6173] net_ratelimit: 6 callbacks suppressed [ 1463.403944][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.104745][ T9199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.113747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.430630][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.389770][ T9568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.400581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.454932][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.516751][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.888876][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 1466.897064][ C1] lec:lec_tx_timeout: lec0 [ 1467.541280][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.122498][T10618] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1468.231712][T10613] syzkaller0: entered promiscuous mode [ 1468.260764][T10613] syzkaller0: entered allmulticast mode [ 1468.574625][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.656798][T10662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10780'. [ 1469.624405][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.857256][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.866319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.679899][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.133605][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.142923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.727358][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.750691][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.245733][T10658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10780'. [ 1473.255753][T10659] netlink: 'syz.0.10781': attribute type 12 has an invalid length. [ 1473.263997][T10659] netlink: 'syz.0.10781': attribute type 29 has an invalid length. [ 1473.272097][T10659] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10781'. [ 1473.282129][T10659] netlink: 'syz.0.10781': attribute type 1 has an invalid length. [ 1473.290376][T10659] netlink: 'syz.0.10781': attribute type 2 has an invalid length. [ 1473.496569][T10675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.672145][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10788'. [ 1473.674228][T10684] tipc: Enabled bearer , priority 0 [ 1473.746159][T10689] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1473.776508][ T6173] net_ratelimit: 9 callbacks suppressed [ 1473.776530][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.801975][T10684] syzkaller0: entered promiscuous mode [ 1473.812650][T10684] syzkaller0: entered allmulticast mode [ 1473.901245][T10684] tipc: Resetting bearer [ 1473.923346][T10683] tipc: Resetting bearer [ 1474.001010][T10683] tipc: Disabling bearer [ 1474.276921][T10693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10789'. [ 1474.573235][T10704] netlink: 'syz.3.10791': attribute type 4 has an invalid length. [ 1474.584185][T10704] netlink: 'syz.3.10791': attribute type 4 has an invalid length. [ 1474.691528][T10707] tipc: Resetting bearer [ 1474.705919][T10707] netlink: 'syz.3.10792': attribute type 10 has an invalid length. [ 1474.714703][T10707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10792'. [ 1474.732103][T10707] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1474.760549][T10707] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.815121][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.839392][T10707] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1474.889416][ T827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.898119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.107047][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10795'. [ 1475.153152][T10717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10795'. [ 1475.428530][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10798'. [ 1475.619216][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10801'. [ 1475.667980][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10801'. [ 1475.859202][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.908440][T10741] netlink: 'syz.2.10802': attribute type 4 has an invalid length. [ 1475.925409][T10741] netlink: 'syz.2.10802': attribute type 4 has an invalid length. [ 1476.048734][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10804'. [ 1476.062278][T10747] netlink: 'syz.2.10805': attribute type 1 has an invalid length. [ 1476.107171][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10805'. [ 1476.287613][T10754] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1476.387802][T10758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.399076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.426148][T10758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.439601][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.458989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.717673][T10773] bond2: entered promiscuous mode [ 1476.724378][T10773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1476.804564][T10773] bond2: entered allmulticast mode [ 1476.941201][T10773] bond2: (slave bridge4): making interface the new active one [ 1476.949091][T10773] bridge4: entered promiscuous mode [ 1476.954741][T10773] bridge4: entered allmulticast mode [ 1476.980933][T10773] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 1477.006991][T10793] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1477.555848][T10830] syzkaller0: entered promiscuous mode [ 1477.562058][T10830] syzkaller0: entered allmulticast mode [ 1478.983065][ T6173] net_ratelimit: 6 callbacks suppressed [ 1478.983090][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.048255][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.745610][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.754189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.072744][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.107930][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.551474][T10837] validate_nla: 4 callbacks suppressed [ 1482.551487][T10837] netlink: 'syz.1.10832': attribute type 4 has an invalid length. [ 1482.565326][T10841] netlink: 'syz.1.10832': attribute type 4 has an invalid length. [ 1482.610317][T10842] dummy0: entered promiscuous mode [ 1482.617004][T10842] bond0: entered promiscuous mode [ 1482.635800][T10842] bond_slave_0: entered promiscuous mode [ 1482.642341][T10842] bond_slave_1: entered promiscuous mode [ 1482.649476][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.652925][T10842] debugfs: 'hsr1' already exists in 'hsr' [ 1482.660494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.663836][T10842] Cannot create hsr debugfs directory [ 1482.677780][T10842] hsr1: entered allmulticast mode [ 1482.683825][T10842] dummy0: entered allmulticast mode [ 1482.693892][T10842] bond0: entered allmulticast mode [ 1482.701187][T10842] bond_slave_0: entered allmulticast mode [ 1482.707078][T10842] bond_slave_1: entered allmulticast mode [ 1483.144372][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.374624][T10898] __nla_validate_parse: 5 callbacks suppressed [ 1483.374646][T10898] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10847'. [ 1483.912138][T10910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.174674][ T6173] net_ratelimit: 1 callbacks suppressed [ 1484.174705][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.225702][T10922] dummy0: entered promiscuous mode [ 1484.241150][T10922] debugfs: 'hsr1' already exists in 'hsr' [ 1484.247768][T10922] Cannot create hsr debugfs directory [ 1484.254990][T10922] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1484.268395][T10922] hsr1: entered allmulticast mode [ 1484.279198][T10922] dummy0: entered allmulticast mode [ 1484.575851][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1484.747323][T10940] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10858'. [ 1484.760899][T10942] netlink: 'syz.1.10859': attribute type 4 has an invalid length. [ 1484.776847][T10942] netlink: 'syz.1.10859': attribute type 4 has an invalid length. [ 1485.125707][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10862'. [ 1485.218949][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.130405][T10976] netlink: 'syz.2.10870': attribute type 4 has an invalid length. [ 1486.239881][T10978] netlink: 'syz.2.10870': attribute type 4 has an invalid length. [ 1486.265434][ T6442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.492192][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.501306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.546118][T10989] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10875'. [ 1486.959660][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10879'. [ 1487.005267][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10880'. [ 1487.423275][T11014] netlink: 'syz.4.10886': attribute type 4 has an invalid length. [ 1487.463274][T11014] netlink: 'syz.4.10886': attribute type 4 has an invalid length. [ 1487.823004][T11038] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10892'. [ 1487.904205][T11032] syzkaller0: entered promiscuous mode [ 1487.926746][T11032] syzkaller0: entered allmulticast mode [ 1487.989055][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10891'. [ 1488.253308][T11047] syzkaller0: entered promiscuous mode [ 1488.259275][T11047] syzkaller0: entered allmulticast mode [ 1489.928900][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 1489.937141][ C1] lec:lec_tx_timeout: lec0 [ 1493.407739][T11072] netlink: 'syz.0.10900': attribute type 4 has an invalid length. [ 1493.433134][T11072] netlink: 'syz.0.10900': attribute type 4 has an invalid length. [ 1493.477345][T11076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10902'. [ 1493.488389][T11076] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10902'. [ 1493.640954][T11083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10904'. [ 1493.666126][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10904'. [ 1493.696231][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10904'. [ 1493.863325][T11091] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.10907'. [ 1493.874880][T11091] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1494.042234][T11098] xt_hashlimit: size too large, truncated to 1048576 [ 1494.141282][T11105] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10912'. [ 1494.355974][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10915'. [ 1494.372198][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10915'. [ 1494.381682][T11115] netlink: 'syz.4.10915': attribute type 21 has an invalid length. [ 1494.523750][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10917'. [ 1494.538720][T11117] syzkaller0: entered promiscuous mode [ 1494.548157][T11117] syzkaller0: entered allmulticast mode [ 1494.640309][T11126] x_tables: duplicate underflow at hook 1 [ 1495.274219][T11164] dvmrp0: entered allmulticast mode [ 1495.695410][T11180] netlink: 'syz.0.10933': attribute type 4 has an invalid length. [ 1495.878152][T11188] netlink: 'syz.0.10934': attribute type 1 has an invalid length. [ 1495.896079][T11188] netlink: 'syz.0.10934': attribute type 1 has an invalid length. [ 1496.353845][ T29] IPVS: starting estimator thread 0... [ 1496.458950][T11210] IPVS: using max 26 ests per chain, 62400 per kthread [ 1496.890004][ T6206] Bluetooth: hci0: command 0x0405 tx timeout [ 1497.015282][T11227] netlink: 'syz.4.10946': attribute type 4 has an invalid length. [ 1497.051999][T11228] netlink: 'syz.4.10946': attribute type 4 has an invalid length. [ 1497.228386][T11232] netlink: 'syz.0.10948': attribute type 4 has an invalid length. [ 1497.245770][T11230] x_tables: duplicate underflow at hook 3 [ 1497.252537][T11232] netlink: 'syz.0.10948': attribute type 4 has an invalid length. [ 1498.167306][T11275] syzkaller1: entered promiscuous mode [ 1498.176245][T11275] syzkaller1: entered allmulticast mode [ 1498.769497][T11299] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1498.793447][T11300] team0: No ports can be present during mode change [ 1499.152464][T11327] validate_nla: 4 callbacks suppressed [ 1499.152484][T11327] netlink: 'syz.2.10974': attribute type 4 has an invalid length. [ 1499.208127][T11333] netlink: 'syz.2.10974': attribute type 4 has an invalid length. [ 1499.288586][T11338] xt_l2tp: v2 doesn't support IP mode [ 1499.360600][T11343] __nla_validate_parse: 11 callbacks suppressed [ 1499.360618][T11343] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10978'. [ 1499.453569][T11352] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1500.056484][T11386] netlink: 'syz.0.10988': attribute type 4 has an invalid length. [ 1500.081885][T11386] netlink: 'syz.0.10988': attribute type 4 has an invalid length. [ 1500.485856][T11397] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1500.854293][T11416] netlink: 'syz.3.10996': attribute type 10 has an invalid length. [ 1500.896108][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10998'. [ 1501.077072][T11416] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1501.137921][T11416] bond4 (unregistering): Released all slaves [ 1501.440657][T11431] bridge0: port 4(vlan1) entered blocking state [ 1501.454767][T11431] bridge0: port 4(vlan1) entered disabled state [ 1501.472559][T11431] vlan1: entered allmulticast mode [ 1501.479823][T11431] geneve0: entered allmulticast mode [ 1501.494974][T11431] vlan1: entered promiscuous mode [ 1501.508123][T11431] geneve0: entered promiscuous mode [ 1501.860497][T11448] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1502.337575][T11476] netlink: 'syz.2.11011': attribute type 4 has an invalid length. [ 1502.359691][T11476] netlink: 'syz.2.11011': attribute type 4 has an invalid length. [ 1502.429869][T11478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1502.521894][T11481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1502.540063][T11480] netlink: 'syz.2.11012': attribute type 4 has an invalid length. [ 1502.561847][T11480] netlink: 'syz.2.11012': attribute type 4 has an invalid length. [ 1503.350255][T11494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11016'. [ 1503.366930][T11499] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1503.435450][T11501] netlink: 'syz.4.11018': attribute type 1 has an invalid length. [ 1504.262820][T11518] netlink: 'syz.4.11022': attribute type 4 has an invalid length. [ 1504.288552][T11519] netlink: 'syz.4.11022': attribute type 4 has an invalid length. [ 1504.818518][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11029'. [ 1504.916516][T11534] syzkaller0: entered promiscuous mode [ 1504.922280][T11534] syzkaller0: entered allmulticast mode [ 1509.655670][T11549] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11031'. [ 1509.661321][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11032'. [ 1509.674000][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11031'. [ 1509.692631][T11550] netlink: 'syz.3.11032': attribute type 14 has an invalid length. [ 1509.875009][T11558] netlink: 'syz.4.11035': attribute type 4 has an invalid length. [ 1509.882757][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11036'. [ 1509.899378][T11558] netlink: 'syz.4.11035': attribute type 4 has an invalid length. [ 1510.084937][T11571] xt_hashlimit: size too large, truncated to 1048576 [ 1510.363269][T11586] x_tables: duplicate underflow at hook 2 [ 1510.424707][T11587] geneve2: entered promiscuous mode [ 1510.442900][ T997] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1510.466748][ T997] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1510.494325][ T997] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1510.525064][ T997] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1510.636023][T11596] syzkaller0: entered promiscuous mode [ 1510.646729][T11596] syzkaller0: entered allmulticast mode [ 1510.698093][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11050'. [ 1510.750886][T11602] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11050'. [ 1510.937104][T11610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11054'. [ 1511.091987][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11052'. [ 1511.306100][T11624] team0: Port device team_slave_0 removed [ 1511.344988][T11613] batman_adv: batadv0: Adding interface: ipvlan2 [ 1511.360732][T11613] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.395106][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1511.407486][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.420178][T11613] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 1511.431330][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11059'. [ 1511.494721][T11638] syzkaller0: entered promiscuous mode [ 1511.513969][T11638] syzkaller0: entered allmulticast mode [ 1511.666129][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11062'. [ 1511.705281][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11062'. [ 1511.724237][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11062'. [ 1511.771429][T11656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11065'. [ 1511.871148][T11658] syzkaller0: entered promiscuous mode [ 1511.904050][T11658] syzkaller0: entered allmulticast mode [ 1512.093628][T11678] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1512.260928][T11689] syzkaller1: entered promiscuous mode [ 1512.269529][T11689] syzkaller1: entered allmulticast mode [ 1512.366198][T11701] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 1512.391342][T11694] vlan2: entered promiscuous mode [ 1512.396824][T11694] bridge0: entered promiscuous mode [ 1512.505622][T11707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1512.512981][T11707] IPv6: NLM_F_CREATE should be set when creating new route [ 1512.520393][T11707] IPv6: NLM_F_CREATE should be set when creating new route [ 1512.527631][T11707] IPv6: NLM_F_CREATE should be set when creating new route [ 1512.742204][T11725] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1513.219713][T11754] netlink: 'syz.3.11095': attribute type 1 has an invalid length. [ 1513.249802][T11752] syzkaller0: entered promiscuous mode [ 1513.255557][T11752] syzkaller0: entered allmulticast mode [ 1513.564191][T11772] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1514.260675][T11807] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1514.314275][T11807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1514.902728][T11829] __nla_validate_parse: 10 callbacks suppressed [ 1514.902746][T11829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11112'. [ 1515.155303][T11840] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1515.836532][T11879] netlink: 'syz.1.11129': attribute type 2 has an invalid length. [ 1515.845168][T11879] netlink: 'syz.1.11129': attribute type 1 has an invalid length. [ 1516.069573][T11885] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1516.617764][T11905] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11138'. [ 1516.697872][T11906] netlink: 'syz.2.11138': attribute type 1 has an invalid length. [ 1516.720801][T11906] netlink: 'syz.2.11138': attribute type 2 has an invalid length. [ 1516.987639][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11140'. [ 1517.058423][T11919] netlink: 'syz.0.11142': attribute type 58 has an invalid length. [ 1517.088160][T11917] netlink: 204 bytes leftover after parsing attributes in process `syz.3.11150'. [ 1517.130060][T11917] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11150'. [ 1517.502659][T11924] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1517.717126][T11933] syzkaller0: entered promiscuous mode [ 1517.733365][T11933] syzkaller0: entered allmulticast mode [ 1517.886437][T11946] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11151'. [ 1518.230458][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11152'. [ 1518.635707][T11972] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11156'. [ 1518.650077][T11972] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11156'. [ 1518.688685][T11973] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11155'. [ 1518.759153][T11978] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1519.984285][T31463] Bluetooth: hci5: link tx timeout [ 1519.998560][T31463] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1520.026672][T12023] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1520.159192][T12032] netlink: 'syz.4.11172': attribute type 12 has an invalid length. [ 1520.412767][T12042] __nla_validate_parse: 1 callbacks suppressed [ 1520.412786][T12042] netlink: 204 bytes leftover after parsing attributes in process `syz.1.11176'. [ 1520.494687][T12042] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11176'. [ 1521.097538][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11181'. [ 1521.296778][T12076] tipc: Failed to remove unknown binding: 66,0,0/0:1991899211/1991899213 [ 1521.306100][T12076] tipc: Failed to remove unknown binding: 66,0,0/0:1991899211/1991899212 [ 1521.316674][T12076] tipc: Failed to remove unknown binding: 66,0,0/0:1991899211/1991899213 [ 1521.325493][T12076] tipc: Failed to remove unknown binding: 66,0,0/0:1991899211/1991899212 [ 1521.335866][T12076] netlink: 'syz.1.11182': attribute type 1 has an invalid length. [ 1521.435636][T12079] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1521.596449][T12083] netlink: 'syz.2.11184': attribute type 4 has an invalid length. [ 1522.008911][ T6206] Bluetooth: hci5: command 0x0406 tx timeout [ 1522.077627][T12098] syzkaller0: entered promiscuous mode [ 1522.090638][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11193'. [ 1522.099916][T12098] syzkaller0: entered allmulticast mode [ 1525.617485][T27206] lec:lec_start_xmit: lec0:No lecd attached [ 1527.002253][T12119] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1527.111023][T12124] netlink: 'syz.0.11197': attribute type 13 has an invalid length. [ 1527.440704][T12124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1527.466843][T12124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1527.632979][T12139] veth5: entered allmulticast mode [ 1527.651073][ T827] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.668970][ T827] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.698210][ T827] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.725415][ T827] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.896505][T12158] netlink: 'syz.4.11207': attribute type 4 has an invalid length. [ 1527.917918][T12158] netlink: 'syz.4.11207': attribute type 4 has an invalid length. [ 1528.074252][T12164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11208'. [ 1528.146530][T12167] tipc: Resetting bearer [ 1528.154510][T12169] netlink: 'syz.0.11209': attribute type 3 has an invalid length. [ 1528.181998][T12167] netlink: 'syz.4.11211': attribute type 10 has an invalid length. [ 1528.193406][T12169] netlink: 666 bytes leftover after parsing attributes in process `syz.0.11209'. [ 1528.203800][T12167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11211'. [ 1528.222907][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11210'. [ 1528.275768][T12167] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1528.287662][T12167] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.316573][T12167] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1528.458708][T12174] syzkaller0: entered promiscuous mode [ 1528.465902][T12174] syzkaller0: entered allmulticast mode [ 1529.733987][T12197] tipc: Failed to remove unknown binding: 66,0,0/0:2601099750/2601099752 [ 1529.742829][T12197] tipc: Failed to remove unknown binding: 66,0,0/0:2601099750/2601099751 [ 1529.754525][T12197] tipc: Failed to remove unknown binding: 66,0,0/0:2601099750/2601099752 [ 1529.763365][T12197] tipc: Failed to remove unknown binding: 66,0,0/0:2601099750/2601099751 [ 1529.773878][T12197] netlink: 'syz.0.11218': attribute type 1 has an invalid length. [ 1530.681517][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11221'. [ 1530.690817][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11221'. [ 1530.893064][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 1530.901182][ C1] lec:lec_tx_timeout: lec0 [ 1530.987349][T12207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11223'. [ 1531.216316][T12212] netlink: 'syz.0.11224': attribute type 10 has an invalid length. [ 1531.224557][T12212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11224'. [ 1531.629382][T12184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1531.808177][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11225'. [ 1533.582993][T12180] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1533.592697][T12211] tipc: Resetting bearer [ 1533.613862][T12212] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1533.621240][T12212] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1533.748262][T12223] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1533.793064][T12227] netlink: 'syz.4.11227': attribute type 3 has an invalid length. [ 1533.815140][T12227] netlink: 666 bytes leftover after parsing attributes in process `syz.4.11227'. [ 1533.980456][T12244] tipc: Failed to remove unknown binding: 66,0,0/4269801488:1373566767/1373566769 [ 1534.017682][T12244] tipc: Failed to remove unknown binding: 66,0,0/4269801488:1373566767/1373566768 [ 1534.043319][T12244] tipc: Failed to remove unknown binding: 66,0,0/4269801488:1373566767/1373566769 [ 1534.062289][T12244] tipc: Failed to remove unknown binding: 66,0,0/4269801488:1373566767/1373566768 [ 1534.107083][T12244] netlink: 'syz.3.11231': attribute type 1 has an invalid length. [ 1534.235757][T12261] tipc: Resetting bearer [ 1534.338333][T12267] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11239'. [ 1534.411648][T12266] syzkaller0: entered promiscuous mode [ 1534.418412][T12266] syzkaller0: entered allmulticast mode [ 1534.907358][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11247'. [ 1535.779603][ C0] ------------[ cut here ]------------ [ 1535.803653][ C0] ODEBUG: free active (active state 0) object: ffff888056a32090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 1535.816651][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: syz.4.11249/12284 [ 1535.827552][ C0] Modules linked in: [ 1535.833556][ C0] CPU: 0 UID: 0 PID: 12284 Comm: syz.4.11249 Not tainted syzkaller #0 PREEMPT(full) [ 1535.843095][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1535.853228][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1535.860150][ C0] Code: 89 44 24 20 e8 47 54 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 f6 27 8c 48 c7 c2 c0 fb 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1535.880418][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 1535.886637][ C0] RAX: ffffffff8a996a90 RBX: ffffffff9a6f72f0 RCX: 0000000000000000 [ 1535.896132][ C0] RDX: ffffffff8c27fbc0 RSI: ffffffff8c27f640 RDI: ffffffff903ce070 [ 1535.904189][ C0] RBP: ffffffff8bcf42a0 R08: ffff888056a32090 R09: ffffffff8bcf5600 [ 1535.912221][ C0] R10: dffffc0000000000 R11: ffffffff81b1dac0 R12: ffff888056a32200 [ 1535.920238][ C0] R13: ffffffff903ce070 R14: ffff888056a32000 R15: ffff888056a32090 [ 1535.928474][ C0] FS: 0000555572479500(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 1535.937561][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1535.944207][ C0] CR2: 000000110c3514af CR3: 0000000079350000 CR4: 00000000003526f0 [ 1535.952229][ C0] Call Trace: [ 1535.955533][ C0] [ 1535.958374][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1535.964199][ C0] kfree+0x13a/0x620 [ 1535.968222][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1535.973391][ C0] rose_timer_expiry+0x4cb/0x600 [ 1535.978355][ C0] call_timer_fn+0x192/0x5e0 [ 1535.983062][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1535.988552][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1535.993283][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1535.998570][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1536.004020][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1536.009915][ C0] __run_timer_base+0x652/0x8b0 [ 1536.015163][ C0] ? ktime_get+0x45/0x220 [ 1536.019563][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1536.025617][ C0] run_timer_softirq+0xb7/0x170 [ 1536.030621][ C0] handle_softirqs+0x22a/0x840 [ 1536.035591][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1536.040417][ C0] __irq_exit_rcu+0xca/0x220 [ 1536.045033][ C0] irq_exit_rcu+0x9/0x30 [ 1536.049342][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1536.055011][ C0] [ 1536.057995][ C0] [ 1536.060978][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1536.067342][ C0] RIP: 0010:qlist_free_all+0x6d/0x100 [ 1536.072794][ C0] Code: 0c 04 49 8b 44 04 08 48 89 c2 48 ff ca a8 01 48 0f 44 d1 0f b6 42 33 c1 e0 18 3d 00 00 00 f5 49 0f 45 d5 4c 8b 62 08 49 8b 2f <49> 63 84 24 b8 00 00 00 49 29 c7 4c 89 e7 4c 89 fe e8 4d e4 ff ff [ 1536.092573][ C0] RSP: 0018:ffffc9000537fbd0 EFLAGS: 00000246 [ 1536.098866][ C0] RAX: 00000000f5000000 RBX: ffffc9000537fc08 RCX: ffffea0000d40000 [ 1536.106870][ C0] RDX: ffffea0000d40000 RSI: ffff888024e4a5a0 RDI: ffff8880350006e0 [ 1536.114896][ C0] RBP: ffff888024e4a4b0 R08: 0000000000000001 R09: ffffffff82313d1c [ 1536.123036][ C0] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffff88813fe2c500 [ 1536.131282][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880350006e0 [ 1536.139525][ C0] ? qlist_free_all+0x8c/0x100 [ 1536.144304][ C0] ? taskstats_exit+0x14a/0xa30 [ 1536.149190][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1536.154682][ C0] __kasan_slab_alloc+0x22/0x80 [ 1536.159594][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1536.165107][ C0] ? taskstats_exit+0x14a/0xa30 [ 1536.170041][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1536.175735][ C0] taskstats_exit+0x14a/0xa30 [ 1536.180475][ C0] ? seccomp_filter_release+0x18a/0x2d0 [ 1536.186056][ C0] do_exit+0x682/0x23c0 [ 1536.190293][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1536.196217][ C0] ? __pfx_do_exit+0x10/0x10 [ 1536.200875][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1536.206141][ C0] do_group_exit+0x21b/0x2d0 [ 1536.210784][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.216969][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1536.222074][ C0] x64_sys_call+0x221a/0x2240 [ 1536.227075][ C0] do_syscall_64+0x15f/0xf80 [ 1536.231740][ C0] ? trace_irq_disable+0x3b/0x140 [ 1536.236818][ C0] ? clear_bhb_loop+0x40/0x90 [ 1536.241557][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.247490][ C0] RIP: 0033:0x7f0127d9c819 [ 1536.251964][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.271777][ C0] RSP: 002b:00007ffdd364dac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1536.280365][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0127d9c819 [ 1536.288418][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1536.296463][ C0] RBP: 00007ffdd364db2c R08: 0000000000000000 R09: 00000000000927c0 [ 1536.304486][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 00000000000001ec [ 1536.312509][ C0] R13: 00000000000927c0 R14: 0000000000176b8a R15: 00007ffdd364db80 [ 1536.320576][ C0] [ 1536.323614][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1536.331070][ C0] CPU: 0 UID: 0 PID: 12284 Comm: syz.4.11249 Not tainted syzkaller #0 PREEMPT(full) [ 1536.340651][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1536.350822][ C0] Call Trace: [ 1536.354141][ C0] [ 1536.356994][ C0] vpanic+0x56c/0xa60 [ 1536.361004][ C0] ? __pfx__printk+0x10/0x10 [ 1536.365604][ C0] ? __pfx_vpanic+0x10/0x10 [ 1536.370113][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1536.375414][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1536.380825][ C0] panic+0xc5/0xd0 [ 1536.384556][ C0] ? __pfx_panic+0x10/0x10 [ 1536.388997][ C0] __warn+0x315/0x4c0 [ 1536.393168][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1536.398942][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1536.404736][ C0] __report_bug+0x29a/0x540 [ 1536.409263][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1536.415132][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1536.420994][ C0] ? __pfx___report_bug+0x10/0x10 [ 1536.426052][ C0] ? kfree+0x1c1/0x620 [ 1536.430129][ C0] ? rose_timer_expiry+0x4c3/0x600 [ 1536.435246][ C0] ? call_timer_fn+0x192/0x5e0 [ 1536.440040][ C0] ? __run_timer_base+0x652/0x8b0 [ 1536.445141][ C0] ? run_timer_softirq+0xb7/0x170 [ 1536.450175][ C0] ? handle_softirqs+0x22a/0x840 [ 1536.455204][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1536.460048][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1536.465979][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1536.472151][ C0] ? qlist_free_all+0x6d/0x100 [ 1536.476924][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1536.482837][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1536.487899][ C0] report_bug_entry+0x19a/0x290 [ 1536.492823][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 1536.498639][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 1536.504467][ C0] handle_bug+0xce/0x200 [ 1536.508736][ C0] exc_invalid_op+0x1a/0x50 [ 1536.513267][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1536.518211][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1536.524580][ C0] Code: 89 44 24 20 e8 47 54 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 f6 27 8c 48 c7 c2 c0 fb 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1536.544453][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 1536.550557][ C0] RAX: ffffffff8a996a90 RBX: ffffffff9a6f72f0 RCX: 0000000000000000 [ 1536.558626][ C0] RDX: ffffffff8c27fbc0 RSI: ffffffff8c27f640 RDI: ffffffff903ce070 [ 1536.566606][ C0] RBP: ffffffff8bcf42a0 R08: ffff888056a32090 R09: ffffffff8bcf5600 [ 1536.574665][ C0] R10: dffffc0000000000 R11: ffffffff81b1dac0 R12: ffff888056a32200 [ 1536.582728][ C0] R13: ffffffff903ce070 R14: ffff888056a32000 R15: ffff888056a32090 [ 1536.590725][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 1536.596131][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1536.601772][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1536.607431][ C0] kfree+0x13a/0x620 [ 1536.611323][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1536.616459][ C0] rose_timer_expiry+0x4cb/0x600 [ 1536.621487][ C0] call_timer_fn+0x192/0x5e0 [ 1536.626105][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1536.631589][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1536.636272][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1536.641389][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1536.646683][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1536.652196][ C0] __run_timer_base+0x652/0x8b0 [ 1536.657222][ C0] ? ktime_get+0x45/0x220 [ 1536.661553][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1536.666964][ C0] run_timer_softirq+0xb7/0x170 [ 1536.671827][ C0] handle_softirqs+0x22a/0x840 [ 1536.676623][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1536.681492][ C0] __irq_exit_rcu+0xca/0x220 [ 1536.686103][ C0] irq_exit_rcu+0x9/0x30 [ 1536.690356][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1536.696101][ C0] [ 1536.699043][ C0] [ 1536.702092][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1536.708111][ C0] RIP: 0010:qlist_free_all+0x6d/0x100 [ 1536.713497][ C0] Code: 0c 04 49 8b 44 04 08 48 89 c2 48 ff ca a8 01 48 0f 44 d1 0f b6 42 33 c1 e0 18 3d 00 00 00 f5 49 0f 45 d5 4c 8b 62 08 49 8b 2f <49> 63 84 24 b8 00 00 00 49 29 c7 4c 89 e7 4c 89 fe e8 4d e4 ff ff [ 1536.733372][ C0] RSP: 0018:ffffc9000537fbd0 EFLAGS: 00000246 [ 1536.739457][ C0] RAX: 00000000f5000000 RBX: ffffc9000537fc08 RCX: ffffea0000d40000 [ 1536.747451][ C0] RDX: ffffea0000d40000 RSI: ffff888024e4a5a0 RDI: ffff8880350006e0 [ 1536.755515][ C0] RBP: ffff888024e4a4b0 R08: 0000000000000001 R09: ffffffff82313d1c [ 1536.763832][ C0] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffff88813fe2c500 [ 1536.771809][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880350006e0 [ 1536.779966][ C0] ? qlist_free_all+0x8c/0x100 [ 1536.784750][ C0] ? taskstats_exit+0x14a/0xa30 [ 1536.789779][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1536.795350][ C0] __kasan_slab_alloc+0x22/0x80 [ 1536.800213][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1536.805689][ C0] ? taskstats_exit+0x14a/0xa30 [ 1536.810551][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1536.816187][ C0] taskstats_exit+0x14a/0xa30 [ 1536.820959][ C0] ? seccomp_filter_release+0x18a/0x2d0 [ 1536.826508][ C0] do_exit+0x682/0x23c0 [ 1536.830664][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1536.836569][ C0] ? __pfx_do_exit+0x10/0x10 [ 1536.841161][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1536.846359][ C0] do_group_exit+0x21b/0x2d0 [ 1536.850970][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.857036][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1536.862070][ C0] x64_sys_call+0x221a/0x2240 [ 1536.866756][ C0] do_syscall_64+0x15f/0xf80 [ 1536.871362][ C0] ? trace_irq_disable+0x3b/0x140 [ 1536.876380][ C0] ? clear_bhb_loop+0x40/0x90 [ 1536.881071][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.886976][ C0] RIP: 0033:0x7f0127d9c819 [ 1536.891411][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.911018][ C0] RSP: 002b:00007ffdd364dac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1536.919431][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0127d9c819 [ 1536.927417][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1536.935387][ C0] RBP: 00007ffdd364db2c R08: 0000000000000000 R09: 00000000000927c0 [ 1536.943374][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 00000000000001ec [ 1536.951342][ C0] R13: 00000000000927c0 R14: 0000000000176b8a R15: 00007ffdd364db80 [ 1536.959342][ C0] [ 1536.962973][ C0] Kernel Offset: disabled [ 1536.967307][ C0] Rebooting in 86400 seconds..