last executing test programs: 4.383042637s ago: executing program 3 (id=8200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x1f, 0x5, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x3, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000002bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000003f40)={@ifindex, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000003f80)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003fc0)={@fallback=r0, r2, 0x2f, 0x2038, 0x4, @void, @void, @value=r3}, 0x20) 4.135663563s ago: executing program 3 (id=8202): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000003c0)=0xc) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4010) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e628}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="010530000a002800060000006000"], 0x64) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x3, 0x1, 0x9) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f00000006c0)=@abs, 0x6e) epoll_pwait(r9, &(0x7f0000000740)=[{}], 0x1, 0x4857, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000780)={0x20000014}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r8], 0x54}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x7, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="8520ec0a9300"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r0, 0x80000000) 3.815053948s ago: executing program 0 (id=8207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x8001, 0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000780)='syzkaller\x00', 0x2}, 0x90) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r6, 0x11, 0x6, @local}, 0x10) (async) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000240)={r6, 0x11, 0x6, @local}, 0x10) (async) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)='2', 0x1}], 0x1}}], 0x1, 0x8000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)='2', 0x1}], 0x1}}], 0x1, 0x20000854) 3.814802474s ago: executing program 4 (id=8208): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000000013bc87d4507c2164c00000000000504020e80ff000740000000000800170099e3b7d3280017000000000d0000000200000003000000040000000900000c680000000900000008000000810ca25b6bbba6474eb0a2015f7337c087c1c8c426d880aac18d6bc1c9a2c1a5bc01dea4c93aa46ccddfd7281dd2ed9263bad69186561d7c386cf404bd63e57ab836e452d71981bf37896f64902087e36064b201a2fe46e98ed0a5cbd5c052bf9508441abc6045bc"], 0x5c}}, 0x2000a000) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0) 3.678157667s ago: executing program 4 (id=8210): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000080), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x8, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}}, 0x4001) 3.495615849s ago: executing program 3 (id=8212): socket(0x40000000015, 0x805, 0x0) (async, rerun: 32) r0 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) bind$inet(r0, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f00000004c0)=""/102393, &(0x7f00000194c0)=0x18ff9) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000001, 0x6, 0x0, 0x100, 0x4, 0x540000, r5}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f00000003c0), 0x4) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180105, r5}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000ffc18e250700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000019500)={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8}, {0xa, 0x4e23, 0x100, @private1}, 0x0, {[0xe350, 0xc, 0x3, 0x4, 0x6, 0x76, 0x800, 0x1ff]}}, 0x5c) (async) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0xc, r5, 0x33}, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fbdbdf2503000000050002"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x200010d0) 2.979309742s ago: executing program 3 (id=8217): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0xc4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r1) 2.806603273s ago: executing program 2 (id=8219): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20040054) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x401, 0x0, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001400b595000000000000f2000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c000014"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) unshare(0x400) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x2d8, 0x2e0, 0x2e0, 0x2d8, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xf0, 0x158, 0x0, {0x1000000}, [@common=@unspec=@limit={{0x48}, {0x2000007a, 0x0, 0x40, 0x8, 0xe6, 0x75800a43, 0xfffffffffffffff9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x8, 0x6, 0x462, 'syz1\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], 'nr0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x33, 0x0, 0x3, 0x3d}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x8, 0x5, 0x9, 0x81, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 0x46, 0x2001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6cb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r6 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB=' \x00'], 0x50) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000440), 0x4000000000001f2, 0xfc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001540)={{0xffffffffffffffff, &(0x7f0000000440)='vlan\x00', 0x0, &(0x7f0000000480)={@align=0x81, {0x3, 0x3278, 0x8000, 0x3ff}}, 0x100, &(0x7f00000004c0), &(0x7f0000000500)=0x3}, {[0x6, 0xeba7, 0x4, 0x7937]}, 0x5, 0x1000, &(0x7f0000000540)=""/4096}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000001d40)=ANY=[@ANYBLOB="9feb010018000000000000008800000088000000050000000400000000000006000000000900000000000008020000000e00003b01040000040000000e0000008ae505e5554d24310300000006000000ffffffff0d000000000000000100004f580800000a000000000200000800000007000000090000b6080000000a0000000900000008000000070000000300000005000000080000000100000604000000060000000200000000005f2e00"], &(0x7f0000001800)=""/2, 0xa5, 0x2, 0x0, 0x2}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001900)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780)=r9, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x4}, 0x94) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a80)=@o_path={&(0x7f0000001a40)='./file0\x00', 0x0, 0x0, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b40)={{0x1, 0xffffffffffffffff}, &(0x7f0000001ac0), &(0x7f0000001b00)}, 0x20) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001b80)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000001bc0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xb, 0xd, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x0, 0x5, 0xb, 0x6, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}]}, &(0x7f0000001640)='GPL\x00', 0x9, 0xa0, &(0x7f0000001680)=""/160, 0x41100, 0x3, '\x00', r3, @fallback, r8, 0x8, &(0x7f0000001880)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000018c0)={0x1, 0x6, 0xff, 0xe76}, 0x10, r9, r10, 0x1, &(0x7f0000001c00)=[r11, r12], &(0x7f0000001c40)=[{0x1, 0x5, 0x4, 0x7}], 0x10, 0xb91}, 0x94) 2.743644539s ago: executing program 0 (id=8220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000000)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x0, 0x1, 0x7, 0x5, 0x6, 0x4, 0x508b8a7374be6127}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0xda, 0x29, &(0x7f00000000c0)=""/41, 0x40e00, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1, 0x4, 0x10001, 0x1000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x2, 0x2, 0x5, 0x1}, {0x5, 0x2, 0x4, 0x5}], 0x10, 0x6eaf}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000000000000900010073797a3000000000090002006f30303000000000080003400000000720000480060001000002000005000200110000000c000300080001000000001e54000000120a01010000000000000000020000000900010073797a3000000000090002006f303130000000000800034000000007200004800600fc000002000005000200110000000c0003"], 0x3204}}, 0x0) 2.500118082s ago: executing program 0 (id=8221): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xffffff6a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000100), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14}}], 0xffffffffffffffb0}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0xff02, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f0000000840)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14) sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="6f3b740e8e07e3fb361087ce956b506a11db0850f82717e195c2c702a18c9dfb9f8cf0378a7718d6dcde79f7bdf4c75dc3c1b3bb3b5a6b758f92518eaaf47b7869e77ffd72fa7fdf9c5d53adae08d116398c54de5c55c4e7d8160680e5e86f02086b54aaef0c3984df86c9e6196547f0b665c3da5ec353a49fa73b266f084c674824210388a71819667db8ca9ad0aa704159acb6ef5fde8ca804da7a1796ea91c12f2be4d96af449204a3a4f975f5c68a90981b307cd9e33c99f76eb", 0xbc}, {&(0x7f0000000340)="a0ca7d4ef2c8989bf13e92b50a4104eaa2eab49660be682327e58e9b1c42e2ac572dd9ea53a96411ee7453286f8bc206c58c9e37a3f690fc667799ee7ea3b757886ab55adf6f72c4b77e152504e0ff6c87e64c977cbc5c0499798be1b805b28073d67be824fbc8b8ddb49696b9a860ad46ef54cb88127d08f60940df57830c012851ac09a8e96cecda9c0ffc09beb1f485dbff7ef0cb463dd8f44b21e72ccb093dd0bfb6568a70cd31923e0f947993", 0xaf}, {&(0x7f0000000400)="d8eb191eb18d7268cb2ae9173b3b1fe68069a2a060066162ae", 0x19}, {&(0x7f0000000700)="303ecd416f5e7e005e1aac9e3cd3bb02bc9493c40baeb8cfd893d89e0e8546abb3468f6574f2a4f6a258a7d93f7312aa6b63b653125b01171449c7fc6f0d22362f0497430075e096e6bcb3d6905c0db48026b1a10f71106a96677d16c2ff6904253ddf84d99ad547b865bcc2bb632ed31d581f7ad71404ccf7e5b402f632cb1801169e6dcdfdd73cc735b409aab004d2b0e4f16bcb7882532dbfb965800b70328f5a0205c812fa0a73c5adbd32c405c0d2196328", 0xb4}], 0x4, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x5b, [@remote, @loopback, @multicast2, @broadcast, @rand_addr=0x64010101]}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x1b, 0x2, [{0x0, 0x8, "20acbe099c47"}, {0x7, 0x7, "ff16585e0d"}, {0x7, 0x6, "f30690ca"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x130}, 0x4000001) sendfile(r0, r1, 0x0, 0xffffffff000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) socket$kcm(0x29, 0x5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000080), 0xffffff6a) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000100), 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14}}], 0xffffffffffffffb0}, 0x2000) (async) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0xff02, 0x0) (async) socket(0x11, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000800)) (async) bind$packet(r4, &(0x7f0000000840)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="6f3b740e8e07e3fb361087ce956b506a11db0850f82717e195c2c702a18c9dfb9f8cf0378a7718d6dcde79f7bdf4c75dc3c1b3bb3b5a6b758f92518eaaf47b7869e77ffd72fa7fdf9c5d53adae08d116398c54de5c55c4e7d8160680e5e86f02086b54aaef0c3984df86c9e6196547f0b665c3da5ec353a49fa73b266f084c674824210388a71819667db8ca9ad0aa704159acb6ef5fde8ca804da7a1796ea91c12f2be4d96af449204a3a4f975f5c68a90981b307cd9e33c99f76eb", 0xbc}, {&(0x7f0000000340)="a0ca7d4ef2c8989bf13e92b50a4104eaa2eab49660be682327e58e9b1c42e2ac572dd9ea53a96411ee7453286f8bc206c58c9e37a3f690fc667799ee7ea3b757886ab55adf6f72c4b77e152504e0ff6c87e64c977cbc5c0499798be1b805b28073d67be824fbc8b8ddb49696b9a860ad46ef54cb88127d08f60940df57830c012851ac09a8e96cecda9c0ffc09beb1f485dbff7ef0cb463dd8f44b21e72ccb093dd0bfb6568a70cd31923e0f947993", 0xaf}, {&(0x7f0000000400)="d8eb191eb18d7268cb2ae9173b3b1fe68069a2a060066162ae", 0x19}, {&(0x7f0000000700)="303ecd416f5e7e005e1aac9e3cd3bb02bc9493c40baeb8cfd893d89e0e8546abb3468f6574f2a4f6a258a7d93f7312aa6b63b653125b01171449c7fc6f0d22362f0497430075e096e6bcb3d6905c0db48026b1a10f71106a96677d16c2ff6904253ddf84d99ad547b865bcc2bb632ed31d581f7ad71404ccf7e5b402f632cb1801169e6dcdfdd73cc735b409aab004d2b0e4f16bcb7882532dbfb965800b70328f5a0205c812fa0a73c5adbd32c405c0d2196328", 0xb4}], 0x4, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x5b, [@remote, @loopback, @multicast2, @broadcast, @rand_addr=0x64010101]}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x1b, 0x2, [{0x0, 0x8, "20acbe099c47"}, {0x7, 0x7, "ff16585e0d"}, {0x7, 0x6, "f30690ca"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x130}, 0x4000001) (async) sendfile(r0, r1, 0x0, 0xffffffff000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) (async) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) 2.287512919s ago: executing program 4 (id=8223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="fef8e32cd200", 0x6}], 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="230000000800000002000000ffff000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x38) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=@delsa={0x1e0, 0x11, 0x200, 0x70bd25, 0x25dfdbfd, {@in6=@private2, 0x4d5, 0xa, 0x33}, [@sa_dir={0x5, 0x21, 0x1}, @sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x4e24, 0x0, 0x4e22, 0x8001, 0x2, 0x80, 0x80, 0x0, 0x0, r3}, {@in=@private=0xa010100, 0x4d2, 0x2b}, @in6=@empty, {0x1, 0x50, 0x9, 0x8000000000000001, 0x4, 0xa124, 0x1, 0x5}, {0x8, 0x0, 0x2}, {0x0, 0x58f03e62, 0x2}, 0x70bd2c, 0x3506, 0xa, 0x0, 0x8, 0x46}}, @tmpl={0xc4, 0x5, [{{@in6=@loopback, 0x4d3, 0xff}, 0xa, @in6=@mcast2, 0x3503, 0x0, 0x3, 0x8, 0x1000, 0xfff, 0x100}, {{@in6=@empty, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3506, 0x1, 0x2, 0x6, 0x4, 0x9dd, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x6c}, 0xa, @in=@empty, 0x3505, 0x5, 0x3, 0x7, 0x0, 0x9, 0x2}]}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x881}, 0x8001) 2.166194415s ago: executing program 1 (id=8224): r0 = socket$netlink(0x10, 0x3, 0x0) write(0xca, &(0x7f0000000b00)="0434aefa7597f118e1", 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000200030001f006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x25f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r4, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@allocspi={0xf8, 0x16, 0x1, 0x3, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=r5, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001160000003200000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000ff0000000000000000000000000000000a"], 0xf8}}, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x69, &(0x7f0000000280)=""/249, &(0x7f0000000380)=0xf9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={&(0x7f00000003c0)="82c174f24382819f59c79023b56b832d1930042999da93528d2421295d3cbc38b98601a1a3d903c7116bf0294e62620b21b8eb5ccec593dbd47d7fbba7326b3357b3df5b70723723d2fbffaa8d672928994a06464ae5eaa4380f5a2176259f4f16da3a5ffb3f44982e00b3e4496be649b21c23c473cb90a4f422d975cb18123204ea7dca4410f5641172b9dd20a0d2271541b2d03e3ade306e", &(0x7f0000000480)=""/181, &(0x7f0000000540)="4bebd0cbb09663923359f768d0d2373a16702306f6bc99c64f60ca13c1f17fabc2e02d1ad6a792ded2c05f8b75338c1c72ed472a822354c42fe3d1a6d93a00c5f319332fc38bd1b7444a5c0cdd02336e037e9f29d8243037ab95f9333c14f55cbdff225c02e6e4afe056414be7a1d04b6046a95a28a6c1a79492c2a5635237cc284c41ab519bd618017abf61e5bbd3b67a75197d535018bade856cd5ac5880cb971cda4a4eb549e079c3ce1229a06f4773bb541e26181763fbb0132bbff05b7136556f04ba41149adf1447db84a1ac0a9fda08994da6829d7ecc0782531d", &(0x7f0000000640)="61f57013ebd29c011e9f21faca52612e9f6bd452671e45ce385a9afe7894a6fd57344b45c0666ac5e57caa01c98f64b385b4760e6d5f09be1489d6d414790e7716bfee7454f6eb0dabd7e60eb5460bad96b776b50df148ef896e23713bf1dc76ce36e45c2bb3565833f6049c84af4fe3395a2c451d17ab774fa104ecbc8aad8d53caae4762f9c87348e96bf94253d5ff73f17b0f6278fce2b690def1d0b644756b", 0x57, r2}, 0x38) 2.120230486s ago: executing program 2 (id=8225): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000c80)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x440, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000740)={'dvmrp0\x00', 0x100}) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r4 = socket$tipc(0x1e, 0x0, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) (async) r7 = socket(0x1a, 0x5, 0x6) bind$can_j1939(r7, &(0x7f0000000240)={0x1d, r6, 0x2, {0x0, 0xf0}, 0x2}, 0x18) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000008c0)={r2, &(0x7f0000000100)='syzkaller1\x00', 0x100, &(0x7f0000000800)={@align=0x8000, {0xc, 0xfff7, 0xffffffff, 0x3}}, 0x89, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x4}) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000340)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x88d0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000010000009500000db2000000"], &(0x7f00000005c0)='GPL\x00', 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000148dbce3a073696d3000000000000005000c000100000200"/44, @ANYRES64=r4], 0x44}, 0x1, 0x0, 0x0, 0x200080c0}, 0x800) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000780)) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1dc93ffedbdf2000"/23], 0x10}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES64=r3], 0x0, 0x3a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0xf, &(0x7f0000000280)=ANY=[@ANYRESDEC=r10], &(0x7f00000003c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001ed72797a31000000000900030073797a320000000014000000110001", @ANYRESDEC=r12, @ANYRES32=r12, @ANYRES8=0x0, @ANYRES32, @ANYRES16=r5], 0x7c}, 0x1, 0x0, 0x0, 0x1004c005}, 0x4000000) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) 1.985504223s ago: executing program 4 (id=8226): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000005c0)={0x1, 'bond_slave_1\x00', {}, 0xfd4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b505000000000000711048000000000006000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000240)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0xfffffffffffffd56, 0x10, &(0x7f0000000380), 0x1dd}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000600)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000640)='illinois', 0x8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000680)=0xa3, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000700), 0xffffffffffffffef, 0x15, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a0101000000000100797a3000000000090002006f30303000000000080003400000000720000480060001000002000005000200110000000c000300080001000000001e54000000120a0101000000010073797a3000000000090002006f303130000000000800034000000007200004800600fc000002000005000200110000000c000353d39cf6b192410fdf3bbcf309b04bd62e87f5949a2de8ef13f4", @ANYRESDEC=r3], 0x3204}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.859367904s ago: executing program 1 (id=8227): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b704000000000000850000001c00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.754698039s ago: executing program 2 (id=8228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r6], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x2400c085) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x24008880) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 1.705460937s ago: executing program 1 (id=8229): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040) 1.388703079s ago: executing program 1 (id=8230): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xe, 0x4, &(0x7f0000000a40)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b705000000000000d38b7400dc2f1a8d0400000000000000950000000000730c"], &(0x7f0000000580)='GPL\x00', 0x5, 0xfd90, &(0x7f00000005c0)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x52, 0x10, &(0x7f00000006c0), 0xfffffffffffffc79}, 0x2a) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24200400858d00002c0012800e00010069703665727370616e00000018000280050016000200080006809501180001000000040002002d8dcb85f00074030b8b80169b30ce709a683f7c86188a757b9098d9fb1ad00103fbc038ec167c07f79f4e7f70b05a4c2e2cdf587985638db17e4b33218227cc12cfe19f30e14a61"], 0x4c}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000140)) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f00000008c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f0000000440)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a708000000000000000300cf5cdb32e36f73a3edea48a94f155e8010924daceaf8e12d10cff7a900945c395d8f7ebe6457b491e7a22ccdd2700c9a4e9302fcb6c8716525ad21c64919af09ffb220d14822c0f15358674eb004f3a3a009ef71d37b8fa81872a65635e3dafe6570a4b299cd9749399dcc3edfc7a606ae31a6401618e812f1d4c1374c922b4d9deb", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x4810) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r9) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r10, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xd0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x5555555555540404}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x10}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd2, &(0x7f0000000ac0)=""/210, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) 1.384942807s ago: executing program 2 (id=8231): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x81200, 0xffffffffffffffff, 0x5}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x81200, 0xffffffffffffffff, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000500)='syzkaller\x00'}, 0x80) r3 = socket(0x2c, 0x4, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r4) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000d40)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x800) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000d40)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x800) r8 = gettid() sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r8}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r8}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'syz_tun\x00', 0x0}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, r11, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x88}}, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a40)={'ip_vti0\x00', r10, 0x8000, 0x20, 0x8, 0x6, {{0x18, 0x4, 0x2, 0x1f, 0x60, 0x65, 0x0, 0x2e, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x4b, 0x3, 0x5, [{@broadcast, 0xc8}, {@broadcast, 0x3}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x2a, 0x0, 0x4, [0xfffffff9, 0x503c79a4, 0x7, 0x94]}, @generic={0x89, 0x5, "f7de40"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x76, [@multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, @remote]}]}}}}}) r12 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r14 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r14, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r13, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) connect$pppl2tp(r14, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r13, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendto$inet6(r12, 0x0, 0x0, 0x8c0, 0xfffffffffffffffd, 0x0) r15 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r15, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00b976f87ff5bb52dd5add4a00005e00674e64b2c6bdbbbf4e8f341140a8b79a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}, 0x1, 0x0, 0x0, 0xc4000}, 0x0) recvmmsg$unix(r15, &(0x7f0000000e40)=[{{0x0, 0x402, &(0x7f0000000e80)=[{&(0x7f0000000ec0)=""/4096, 0x1041}], 0x1}}], 0x14, 0x0, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000001ec0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xb, 0x2, 0x3, 0x2, 0x3, 0x3, 0x7f, {0x9f, 0x1f, "bf6f8002588cb78850596f5d0a7eac8b7211265bdb62a7b3243496e99d6a11"}, 0x1, 0x3, 0x7, 0xf9}}, 0x30) (async) write$nci(0xffffffffffffffff, &(0x7f0000001ec0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xb, 0x2, 0x3, 0x2, 0x3, 0x3, 0x7f, {0x9f, 0x1f, "bf6f8002588cb78850596f5d0a7eac8b7211265bdb62a7b3243496e99d6a11"}, 0x1, 0x3, 0x7, 0xf9}}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000010000000000000000000001839000003000000000000000000000095000000000000004b9a73ba5728ed1a8ee7538f930d2f3a0effa31bb1aa28d9e625be7d81264a332bebfa91445689ca548ab463fc58d08999e835fec1028b0abfce306cdd278cdab1919165a6b3b0d61c6932e498d8240c4e4f1ab26d6b3bc1cf5e99ac1f6d525961e9b3abacd11792fa549c067d5e1d8da89711ba06bceb3a559c8b993db2c3a09cc3dca2f1118a51587c6667ffa05bd110fe9a910ef36071a542b1b0371f5f3ae7f688520b6fcdc78906f7540b998c33dcb556e55f737e9ccc666a7583e83a271015caf534dbaa7873ce5e224df0"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 1.261201818s ago: executing program 3 (id=8232): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000a80)={&(0x7f0000000ac0)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg$kcm(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x36, 0x0, &(0x7f0000000400)="52540012345652540012345786dd6000000000003b400000031f8bce6af7cc4200000000000100000000000000000000000100000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x44, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'bond0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008041) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x48010) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xbb}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c814}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5f, 0x1, '\x00'}}]}, 0x44}}, 0x0) 919.795006ms ago: executing program 0 (id=8233): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0xd0, 0x248, 0xfeffffff, 0x178, 0x248, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff000000, 0xffffff00], 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0xffff, 0x3, 0xfa, 0x85, 0xffffffd9}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010102, @loopback, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'veth1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 530.006942ms ago: executing program 0 (id=8234): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8, 0x10, 0x10000}]}, 0x24}}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r2, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc, 0x19}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 481.303286ms ago: executing program 4 (id=8235): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000003a7288cf0091121600000000009500000000000000f0fc312c78a0c182f9fd012a1e79a0b32d44f7ad15690e38d4f5af5dc95ae0fa95b1fc8b315b51b27d0782e91450f929db831300b1ee9e65fc4734d453ff74a4b0bed932f4b257b109f4da65ecdf965a14b35d956e6bde14265dadd1f9ee62b4a93c2d09399e4928ba81d561826ca7febc337fa7f037777a866b636d49921bd987fa3e7cdeeab11804e7ff1197f1"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0xdc, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xb0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x9, 0xe, 0x1}, {0x80000000, 0x80000000, 0x1, 0x7f}, {0x81, 0x1, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x62ec, 0x9, 0xf, 0x4, 0x7, 0x7, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) 408.225198ms ago: executing program 1 (id=8236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, &(0x7f00000001c0)=""/4096}, 0x20) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@broadcast, @random="0000460000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "f713203d034924cefb3aa4124204a80e3111a8cba78223135637b4140dd4830a", "f215dfded9b7597b3bd726080008be74", {"c67e3156519335a6439de2415e73c917", "ae097b1b51983edc73255f55b35fc41d"}}}}}}}}, 0x0) 381.968559ms ago: executing program 2 (id=8237): r0 = socket(0x15, 0x5, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 352.187479ms ago: executing program 3 (id=8238): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1100000004000000", @ANYRES32, @ANYBLOB="0600"], 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x5dbd, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 256.237185ms ago: executing program 0 (id=8239): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socket(0x18, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000b40)) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r4}, &(0x7f0000000e80), &(0x7f0000000ec0)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000f80)="63eced8e46dc3f2ddf33c9e99d86", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) r6 = socket$inet6(0xa, 0x80003, 0x6) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r7, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f0000000180)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r9, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) connect$inet6(r6, &(0x7f0000000e00)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000f40), 0x2e9, 0x0) r11 = socket$inet6(0xa, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000f7ffffbe0000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x8}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 183.653234ms ago: executing program 1 (id=8240): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xf5af99b}, 0x1c) sendmmsg$sock(r1, &(0x7f00000000c0)=[{{&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 150.052927ms ago: executing program 2 (id=8241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101040000000000000000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000150000060003002710000008000700000003e81000058008000100667470"], 0x9c}}, 0x0) 0s ago: executing program 4 (id=8242): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0xc4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r1) kernel console output (not intermixed with test programs): atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 822.906567][T32757] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 823.023113][T32762] netlink: 'syz.3.6782': attribute type 2 has an invalid length. [ 823.361043][ T309] __nla_validate_parse: 1 callbacks suppressed [ 823.361065][ T309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6786'. [ 823.364386][T22349] smbdirect: ib_dev[syz2] removed [ 823.740324][ T316] FAULT_INJECTION: forcing a failure. [ 823.740324][ T316] name failslab, interval 1, probability 0, space 0, times 0 [ 823.740361][ T316] CPU: 0 UID: 0 PID: 316 Comm: syz.1.6788 Not tainted syzkaller #0 PREEMPT(full) [ 823.740387][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 823.740402][ T316] Call Trace: [ 823.740412][ T316] [ 823.740422][ T316] dump_stack_lvl+0xe8/0x150 [ 823.740462][ T316] should_fail_ex+0x410/0x560 [ 823.740500][ T316] ? __alloc_skb+0x1db/0x7a0 [ 823.740532][ T316] should_failslab+0xa8/0x100 [ 823.740567][ T316] ? __alloc_skb+0x1db/0x7a0 [ 823.740597][ T316] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 823.740627][ T316] ? __alloc_skb+0x18d/0x7a0 [ 823.740659][ T316] ? __alloc_skb+0x1db/0x7a0 [ 823.740699][ T316] __alloc_skb+0x1db/0x7a0 [ 823.740736][ T316] netlink_ack+0x136/0xb30 [ 823.740762][ T316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 823.740797][ T316] ? __pfx_nl80211_post_doit+0x10/0x10 [ 823.740850][ T316] netlink_rcv_skb+0x2a4/0x4a0 [ 823.740880][ T316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 823.740917][ T316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 823.740964][ T316] ? down_read+0x2b9/0x320 [ 823.740995][ T316] genl_rcv+0x28/0x40 [ 823.741028][ T316] netlink_unicast+0x8ef/0xa80 [ 823.741075][ T316] netlink_sendmsg+0x7f0/0xb20 [ 823.741119][ T316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.741154][ T316] ? aa_sock_msg_perm+0x144/0x210 [ 823.741189][ T316] ? apparmor_socket_sendmsg+0x98/0x360 [ 823.741217][ T316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.741246][ T316] sock_sendmsg_nosec+0x14e/0x190 [ 823.741278][ T316] ____sys_sendmsg+0x54e/0x850 [ 823.741322][ T316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.741372][ T316] ? import_iovec+0x73/0xa0 [ 823.741410][ T316] ___sys_sendmsg+0x2a5/0x360 [ 823.741444][ T316] ? __lock_acquire+0x747/0x2de0 [ 823.741475][ T316] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.741554][ T316] ? __fget_files+0x3a2/0x420 [ 823.741579][ T316] ? __fget_files+0x2a/0x420 [ 823.741616][ T316] __x64_sys_sendmsg+0x1b1/0x290 [ 823.741642][ T316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.741705][ T316] do_syscall_64+0x166/0x520 [ 823.741728][ T316] ? trace_irq_disable+0x3b/0x140 [ 823.741755][ T316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.741778][ T316] ? clear_bhb_loop+0x70/0xc0 [ 823.741807][ T316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.741830][ T316] RIP: 0033:0x7f9cc7b9f559 [ 823.741852][ T316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.741873][ T316] RSP: 002b:00007f9cc8a90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.741898][ T316] RAX: ffffffffffffffda RBX: 00007f9cc7e25fa0 RCX: 00007f9cc7b9f559 [ 823.741915][ T316] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000004 [ 823.741931][ T316] RBP: 00007f9cc8a90090 R08: 0000000000000000 R09: 0000000000000000 [ 823.741945][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.741959][ T316] R13: 00007f9cc7e26038 R14: 00007f9cc7e25fa0 R15: 00007ffc3e438688 [ 823.741998][ T316] [ 824.637818][ T334] netlink: 'syz.0.6791': attribute type 29 has an invalid length. [ 824.637844][ T334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6791'. [ 824.747026][ T334] netlink: 'syz.0.6791': attribute type 29 has an invalid length. [ 824.747052][ T334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6791'. [ 824.800415][ T343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6793'. [ 824.954451][ T343] team0 (unregistering): Port device team_slave_0 removed [ 825.123219][ T344] syzkaller0: entered promiscuous mode [ 825.123246][ T344] syzkaller0: entered allmulticast mode [ 825.154789][ T364] x_tables: duplicate underflow at hook 1 [ 825.264581][ T369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6796'. [ 825.351221][ T373] xt_REDIRECT: bad MAP_IPS. [ 825.352300][ T373] tipc: Trying to set illegal importance in message [ 825.511136][ T378] FAULT_INJECTION: forcing a failure. [ 825.511136][ T378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.511174][ T378] CPU: 0 UID: 0 PID: 378 Comm: syz.1.6799 Not tainted syzkaller #0 PREEMPT(full) [ 825.511206][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 825.511220][ T378] Call Trace: [ 825.511229][ T378] [ 825.511239][ T378] dump_stack_lvl+0xe8/0x150 [ 825.511279][ T378] should_fail_ex+0x410/0x560 [ 825.511319][ T378] _copy_to_user+0x31/0xb0 [ 825.511356][ T378] simple_read_from_buffer+0xe1/0x170 [ 825.511388][ T378] proc_fail_nth_read+0x1bb/0x230 [ 825.511422][ T378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 825.511460][ T378] ? rw_verify_area+0x24a/0x4c0 [ 825.511488][ T378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 825.511520][ T378] vfs_read+0x213/0xa80 [ 825.511553][ T378] ? __pfx___mutex_lock+0x10/0x10 [ 825.511579][ T378] ? __pfx_vfs_read+0x10/0x10 [ 825.511607][ T378] ? __fget_files+0x2a/0x420 [ 825.511630][ T378] ? __fget_files+0x3a2/0x420 [ 825.511653][ T378] ? __fget_files+0x2a/0x420 [ 825.511682][ T378] ? fdget+0x1ac/0x250 [ 825.511715][ T378] ksys_read+0x150/0x270 [ 825.511745][ T378] ? __pfx_ksys_read+0x10/0x10 [ 825.511786][ T378] do_syscall_64+0x166/0x520 [ 825.511808][ T378] ? trace_irq_disable+0x3b/0x140 [ 825.511835][ T378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.511858][ T378] ? clear_bhb_loop+0x70/0xc0 [ 825.511897][ T378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.511921][ T378] RIP: 0033:0x7f9cc7b5fd8e [ 825.511943][ T378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 825.511962][ T378] RSP: 002b:00007f9cc8a6efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 825.511986][ T378] RAX: ffffffffffffffda RBX: 00007f9cc8a6f6c0 RCX: 00007f9cc7b5fd8e [ 825.512004][ T378] RDX: 000000000000000f RSI: 00007f9cc8a6f0a0 RDI: 0000000000000005 [ 825.512018][ T378] RBP: 00007f9cc8a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 825.512034][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.512048][ T378] R13: 00007f9cc7e26128 R14: 00007f9cc7e26090 R15: 00007ffc3e438688 [ 825.512099][ T378] [ 827.612127][ C1] net_ratelimit: 9 callbacks suppressed [ 827.612144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.612543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.612681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.612800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.613073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.613191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.619012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.619238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.621758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.693580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.988215][ T450] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 829.014283][ T450] bond2 (unregistering): Released all slaves [ 829.473297][ T470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6815'. [ 829.511127][ T470] xfrm1: entered promiscuous mode [ 829.511152][ T470] xfrm1: entered allmulticast mode [ 829.546616][ T470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6815'. [ 829.732852][ T478] netlink: 'syz.1.6817': attribute type 3 has an invalid length. [ 829.952381][ T491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6822'. [ 829.986300][ T493] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 [ 830.066870][ T497] netlink: 'syz.0.6825': attribute type 32 has an invalid length. [ 830.066894][ T497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6825'. [ 830.257888][ T497] bond2: Setting coupled_control to off (0) [ 830.836557][ T523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6831'. [ 831.012824][ T9997] IPVS: starting estimator thread 0... [ 831.102749][ T532] IPVS: using max 25 ests per chain, 60000 per kthread [ 831.146502][ T534] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6833'. [ 831.280398][ T538] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6834'. [ 831.318097][ T540] 8021q: VLANs not supported on ip6tnl0 [ 831.544875][T18191] hid-generic 0005:4C4A:8001.0001: item fetching failed at offset 0/1 [ 831.545996][T18191] hid-generic 0005:4C4A:8001.0001: probe with driver hid-generic failed with error -22 [ 832.649803][ C1] net_ratelimit: 6 callbacks suppressed [ 832.649828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.650510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.650699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.651074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.651256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.651437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.659018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.659278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.660791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.729414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.025140][ T636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6856'. [ 834.188669][ T642] syzkaller0: entered promiscuous mode [ 834.188696][ T642] syzkaller0: entered allmulticast mode [ 834.323701][T10001] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 834.339209][ T658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6860'. [ 835.901857][ T719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6872'. [ 837.068004][ T642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 837.101164][ T746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6875'. [ 837.249825][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6876'. [ 837.249855][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6876'. [ 837.254067][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6876'. [ 837.254092][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6876'. [ 837.278934][ T751] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6876'. [ 837.307409][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6876'. [ 837.307434][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6876'. [ 837.316225][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6876'. [ 837.689276][ C1] net_ratelimit: 6 callbacks suppressed [ 837.689298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.689354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.689577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.690076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.690120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.690284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.690462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.690785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.690987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.691266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.171255][ T790] syzkaller0: entered promiscuous mode [ 838.171281][ T790] syzkaller0: entered allmulticast mode [ 838.538359][ T802] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 838.677158][ T807] syzkaller0: entered promiscuous mode [ 838.677183][ T807] syzkaller0: entered allmulticast mode [ 839.007786][ T809] FAULT_INJECTION: forcing a failure. [ 839.007786][ T809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.007824][ T809] CPU: 1 UID: 0 PID: 809 Comm: syz.3.6895 Not tainted syzkaller #0 PREEMPT(full) [ 839.007850][ T809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 839.007864][ T809] Call Trace: [ 839.007874][ T809] [ 839.007885][ T809] dump_stack_lvl+0xe8/0x150 [ 839.007924][ T809] should_fail_ex+0x410/0x560 [ 839.007964][ T809] _copy_from_user+0x2d/0xb0 [ 839.007999][ T809] ___sys_sendmsg+0x1c6/0x360 [ 839.008034][ T809] ? __lock_acquire+0x747/0x2de0 [ 839.008066][ T809] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.008144][ T809] ? __fget_files+0x3a2/0x420 [ 839.008168][ T809] ? __fget_files+0x2a/0x420 [ 839.008204][ T809] __x64_sys_sendmsg+0x1b1/0x290 [ 839.008230][ T809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.008291][ T809] do_syscall_64+0x166/0x520 [ 839.008314][ T809] ? trace_irq_disable+0x3b/0x140 [ 839.008342][ T809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.008365][ T809] ? clear_bhb_loop+0x70/0xc0 [ 839.008401][ T809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.008424][ T809] RIP: 0033:0x7f7c9cb9f559 [ 839.008444][ T809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.008464][ T809] RSP: 002b:00007f7c9dad2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.008489][ T809] RAX: ffffffffffffffda RBX: 00007f7c9ce25fa0 RCX: 00007f7c9cb9f559 [ 839.008511][ T809] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 839.008526][ T809] RBP: 00007f7c9dad2090 R08: 0000000000000000 R09: 0000000000000000 [ 839.008541][ T809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.008554][ T809] R13: 00007f7c9ce26038 R14: 00007f7c9ce25fa0 R15: 00007ffe0ca10c38 [ 839.008591][ T809] [ 840.505544][ T888] netlink: 'syz.1.6915': attribute type 83 has an invalid length. [ 840.533214][ T882] can: request_module (can-proto-4) failed. [ 840.627593][ T897] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 840.678679][ T889] block nbd0: Unsupported socket: should be TCP or UNIX. [ 840.727403][ T892] netlink: 'syz.0.6918': attribute type 178 has an invalid length. [ 841.128290][ T923] __nla_validate_parse: 100 callbacks suppressed [ 841.128314][ T923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6926'. [ 841.300550][ T929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6927'. [ 841.323847][ T929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6927'. [ 841.402813][ T946] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 841.908115][ T30] audit: type=1800 audit(1793312817.552:19): pid=972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6936" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=804 res=0 errno=-22 [ 842.086429][ T975] tunl0: entered promiscuous mode [ 842.097604][ T975] netlink: 'syz.2.6938': attribute type 3 has an invalid length. [ 842.097631][ T975] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6938'. [ 842.253557][ T977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6939'. [ 842.287211][ T979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6940'. [ 842.339355][ T981] netlink: 'syz.4.6940': attribute type 4 has an invalid length. [ 842.339383][ T981] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6940'. [ 842.377455][ T981] .`: renamed from bond0 (while UP) [ 842.591654][ T987] x_tables: duplicate underflow at hook 2 [ 842.729278][ C1] net_ratelimit: 72 callbacks suppressed [ 842.729301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.729465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.729652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.729684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.730103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.730380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.730603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.731470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.731708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.731928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.052364][ T1004] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6949'. [ 843.514957][T10001] IPVS: starting estimator thread 0... [ 843.550355][ T1034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6957'. [ 843.554111][ T1034] wg0: entered promiscuous mode [ 843.588482][ T1036] netlink: 'syz.3.6955': attribute type 1 has an invalid length. [ 843.600649][ T1030] IPVS: using max 27 ests per chain, 64800 per kthread [ 843.916656][ T1043] 8021q: adding VLAN 0 to HW filter on device .` [ 844.047152][ T1043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 844.185726][ T1043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6960'. [ 844.186398][ T1043] tc_dump_action: action bad kind [ 845.104999][ T1103] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 845.599741][ T1124] netlink: 'syz.4.6980': attribute type 12 has an invalid length. [ 845.600726][ T1125] netlink: 'syz.4.6980': attribute type 12 has an invalid length. [ 845.678370][ T1124] tcf_pedit_act: 7 callbacks suppressed [ 845.678391][ T1124] tc action pedit unable to extract header offset for header type (0x4) [ 845.678408][ T1124] tc action pedit unable to extract header offset for header type (0x4) [ 845.678423][ T1124] tc action pedit unable to extract header offset for header type (0x4) [ 845.678449][ T1124] tc action pedit unable to extract header offset for header type (0x4) [ 845.678462][ T1124] tc action pedit unable to extract header offset for header type (0x4) [ 845.678476][ T1124] tc action pedit unable to extract header offset for header type (0x4) [ 845.678490][ T1124] tc action pedit unable to extract header offset for header type (0x4) [ 845.678504][ T1124] tc action pedit unable to extract header offset for header type (0x4) [ 845.678517][ T1124] tc action pedit unable to extract header offset for header type (0x4) [ 845.678531][ T1124] tc action pedit unable to extract header offset for header type (0x4) [ 846.207002][ T1142] netlink: 'syz.4.6987': attribute type 1 has an invalid length. [ 846.208382][ T1142] netlink: 'syz.4.6987': attribute type 8 has an invalid length. [ 846.275450][ T1144] __nla_validate_parse: 7 callbacks suppressed [ 846.275473][ T1144] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6988'. [ 846.853687][ T1169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6995'. [ 846.910383][ T5630] Bluetooth: hci4: unexpected cc 0x100c length: 5 > 3 [ 846.910426][ T5630] Bluetooth: hci4: unexpected event for opcode 0x100c [ 847.107093][ T1176] can: request_module (can-proto-0) failed. [ 847.139802][ T1157] FAULT_INJECTION: forcing a failure. [ 847.139802][ T1157] name failslab, interval 1, probability 0, space 0, times 0 [ 847.139838][ T1157] CPU: 0 UID: 0 PID: 1157 Comm: syz.0.6991 Not tainted syzkaller #0 PREEMPT(full) [ 847.139863][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 847.139877][ T1157] Call Trace: [ 847.139886][ T1157] [ 847.139896][ T1157] dump_stack_lvl+0xe8/0x150 [ 847.139936][ T1157] should_fail_ex+0x410/0x560 [ 847.139972][ T1157] ? __alloc_skb+0x1db/0x7a0 [ 847.140003][ T1157] should_failslab+0xa8/0x100 [ 847.140038][ T1157] ? __alloc_skb+0x1db/0x7a0 [ 847.140066][ T1157] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 847.140094][ T1157] ? __alloc_skb+0x18d/0x7a0 [ 847.140125][ T1157] ? __alloc_skb+0x1db/0x7a0 [ 847.140163][ T1157] __alloc_skb+0x1db/0x7a0 [ 847.140199][ T1157] netlink_ack+0x136/0xb30 [ 847.140232][ T1157] ? __pfx___up_read+0x10/0x10 [ 847.140275][ T1157] rdma_nl_rcv+0x40a/0xa40 [ 847.140316][ T1157] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 847.140366][ T1157] ? netlink_deliver_tap+0x2e/0x1b0 [ 847.140402][ T1157] ? netlink_deliver_tap+0x2e/0x1b0 [ 847.140437][ T1157] netlink_unicast+0x8ef/0xa80 [ 847.140482][ T1157] netlink_sendmsg+0x7f0/0xb20 [ 847.140518][ T1157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.140552][ T1157] ? aa_sock_msg_perm+0x144/0x210 [ 847.140587][ T1157] ? apparmor_socket_sendmsg+0x98/0x360 [ 847.140613][ T1157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.140641][ T1157] sock_sendmsg_nosec+0x14e/0x190 [ 847.140672][ T1157] ____sys_sendmsg+0x54e/0x850 [ 847.140716][ T1157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.140761][ T1157] ? import_iovec+0x73/0xa0 [ 847.140797][ T1157] ___sys_sendmsg+0x2a5/0x360 [ 847.140829][ T1157] ? __lock_acquire+0x747/0x2de0 [ 847.140859][ T1157] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.140935][ T1157] ? __fget_files+0x3a2/0x420 [ 847.140959][ T1157] ? __fget_files+0x2a/0x420 [ 847.141013][ T1157] __x64_sys_sendmsg+0x1b1/0x290 [ 847.141039][ T1157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 847.141100][ T1157] do_syscall_64+0x166/0x520 [ 847.141122][ T1157] ? trace_irq_disable+0x3b/0x140 [ 847.141150][ T1157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.141174][ T1157] ? clear_bhb_loop+0x70/0xc0 [ 847.141203][ T1157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.141228][ T1157] RIP: 0033:0x7f43f2f9f559 [ 847.141249][ T1157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.141270][ T1157] RSP: 002b:00007f43f3ddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.141296][ T1157] RAX: ffffffffffffffda RBX: 00007f43f3225fa0 RCX: 00007f43f2f9f559 [ 847.141314][ T1157] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 847.141329][ T1157] RBP: 00007f43f3ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 847.141345][ T1157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.141359][ T1157] R13: 00007f43f3226038 R14: 00007f43f3225fa0 R15: 00007fff8393d4f8 [ 847.141414][ T1157] [ 847.526047][ T1194] FAULT_INJECTION: forcing a failure. [ 847.526047][ T1194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.526086][ T1194] CPU: 0 UID: 0 PID: 1194 Comm: syz.4.7000 Not tainted syzkaller #0 PREEMPT(full) [ 847.526112][ T1194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 847.526126][ T1194] Call Trace: [ 847.526135][ T1194] [ 847.526145][ T1194] dump_stack_lvl+0xe8/0x150 [ 847.526185][ T1194] should_fail_ex+0x410/0x560 [ 847.526228][ T1194] _copy_from_iter+0x1d3/0x1660 [ 847.526261][ T1194] ? __alloc_skb+0x27a/0x7a0 [ 847.526296][ T1194] ? __alloc_skb+0x27a/0x7a0 [ 847.526331][ T1194] ? __alloc_skb+0x27a/0x7a0 [ 847.526363][ T1194] ? __pfx__copy_from_iter+0x10/0x10 [ 847.526392][ T1194] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 847.526428][ T1194] ? __alloc_skb+0x27a/0x7a0 [ 847.526458][ T1194] ? __alloc_skb+0x27a/0x7a0 [ 847.526498][ T1194] ? netlink_sendmsg+0x64f/0xb20 [ 847.526527][ T1194] ? skb_put+0x112/0x210 [ 847.526563][ T1194] netlink_sendmsg+0x6bb/0xb20 [ 847.526600][ T1194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.526633][ T1194] ? aa_sock_msg_perm+0x144/0x210 [ 847.526667][ T1194] ? apparmor_socket_sendmsg+0x98/0x360 [ 847.526695][ T1194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.526725][ T1194] sock_sendmsg_nosec+0x14e/0x190 [ 847.526757][ T1194] ____sys_sendmsg+0x54e/0x850 [ 847.526799][ T1194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.526847][ T1194] ? import_iovec+0x73/0xa0 [ 847.526885][ T1194] ___sys_sendmsg+0x2a5/0x360 [ 847.526918][ T1194] ? __lock_acquire+0x747/0x2de0 [ 847.526951][ T1194] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.527030][ T1194] ? __fget_files+0x3a2/0x420 [ 847.527054][ T1194] ? __fget_files+0x2a/0x420 [ 847.527091][ T1194] __x64_sys_sendmsg+0x1b1/0x290 [ 847.527118][ T1194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 847.527181][ T1194] do_syscall_64+0x166/0x520 [ 847.527204][ T1194] ? trace_irq_disable+0x3b/0x140 [ 847.527231][ T1194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.527255][ T1194] ? clear_bhb_loop+0x70/0xc0 [ 847.527284][ T1194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.527307][ T1194] RIP: 0033:0x7f068379f559 [ 847.527328][ T1194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.527349][ T1194] RSP: 002b:00007f0681993028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.527373][ T1194] RAX: ffffffffffffffda RBX: 00007f0683a26270 RCX: 00007f068379f559 [ 847.527390][ T1194] RDX: 0000000000000000 RSI: 0000200000001940 RDI: 0000000000000004 [ 847.527413][ T1194] RBP: 00007f0681993090 R08: 0000000000000000 R09: 0000000000000000 [ 847.527427][ T1194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.527441][ T1194] R13: 00007f0683a26308 R14: 00007f0683a26270 R15: 00007fff9e6834f8 [ 847.527479][ T1194] [ 847.775306][ C1] net_ratelimit: 8 callbacks suppressed [ 847.775334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.776113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.776340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.776528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.776863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.777125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.780313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.780863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.782039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.853349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.179596][ T1201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7003'. [ 848.264695][ T1201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7003'. [ 849.014198][ T1240] syzkaller1: entered allmulticast mode [ 849.578710][ T1270] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7022'. [ 849.660808][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7025'. [ 849.698470][ T1279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7022'. [ 849.698503][ T1279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7022'. [ 849.843071][ T1283] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7024'. [ 849.887123][ T1283] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7024'. [ 849.949247][ T1286] xt_NETMAP: bad MAP_IPS. [ 850.313246][ T1310] netlink: 'syz.1.7032': attribute type 13 has an invalid length. [ 850.716117][ T1329] Bluetooth: MGMT ver 1.23 [ 850.722610][ T1329] veth0: entered promiscuous mode [ 850.746921][ T1331] smc: net device lo applied user defined pnetid SYZ0 [ 850.748317][ T1327] veth0: left promiscuous mode [ 850.924873][ T1341] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 850.925919][ T1341] netlink: 'syz.4.7038': attribute type 29 has an invalid length. [ 850.979065][T22375] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.979116][T22375] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.979155][T22375] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.979192][T22375] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 851.177699][ T1354] netlink: 'syz.3.7043': attribute type 1 has an invalid length. [ 851.390028][ T1360] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 851.688987][T23113] Bluetooth: hci5: command 0x0406 tx timeout [ 851.965777][ T1399] __nla_validate_parse: 2 callbacks suppressed [ 851.965800][ T1399] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7051'. [ 851.994921][ T1399] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7051'. [ 852.090931][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.091058][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.091387][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.091525][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.152347][ T1403] bridge_slave_1: left allmulticast mode [ 852.152378][ T1403] bridge_slave_1: left promiscuous mode [ 852.152615][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.181845][ T1403] bridge_slave_0: left allmulticast mode [ 852.181873][ T1403] bridge_slave_0: left promiscuous mode [ 852.182208][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.541757][ T1423] netlink: 'syz.0.7058': attribute type 3 has an invalid length. [ 852.634507][ T1430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7059'. [ 852.634532][ T1430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7059'. [ 852.667422][ T1429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7060'. [ 852.812785][ C1] net_ratelimit: 25 callbacks suppressed [ 852.812814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.813973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.814197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.814580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.814789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.814970][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.819217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.819439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.820807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.893811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.182754][ T1458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7068'. [ 853.216642][ T1458] netlink: 'syz.3.7068': attribute type 9 has an invalid length. [ 853.216668][ T1458] netlink: 23 bytes leftover after parsing attributes in process `syz.3.7068'. [ 853.626879][ T1478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7070'. [ 853.707394][ T1481] netlink: 'syz.2.7075': attribute type 1 has an invalid length. [ 853.828729][ T1481] bond1 (unregistering): Released all slaves [ 853.866131][ T1488] syzkaller1: entered promiscuous mode [ 853.866149][ T1488] syzkaller1: entered allmulticast mode [ 854.126666][ T1502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7076'. [ 854.150373][ T1508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7076'. [ 854.535586][ T1526] netdevsim netdevsim4 netdevsim2: IPsec offload requires 128 bit authentication [ 854.934144][ T1555] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 854.998255][ T1555] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 855.027429][ T1555] debugfs: 'hsr1' already exists in 'hsr' [ 855.027459][ T1555] Cannot create hsr debugfs directory [ 855.028079][ T1555] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 855.164758][ T1541] Bluetooth: hci5: SCO packet too small [ 855.234819][ T1541] Bluetooth: hci5: SCO packet too small [ 855.864517][ T1589] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.096546][ T1609] netlink: 'syz.3.7102': attribute type 1 has an invalid length. [ 856.191406][ T1609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 856.270629][ T1609] bond3: (slave geneve2): making interface the new active one [ 856.273390][ T1609] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 856.736787][ T1628] bond6: entered allmulticast mode [ 856.737361][ T1628] 8021q: adding VLAN 0 to HW filter on device bond6 [ 856.811673][ T1541] Bluetooth: hci1: command 0x0406 tx timeout [ 857.820684][ T1677] netlink: 'syz.4.7125': attribute type 9 has an invalid length. [ 857.820742][ T1677] __nla_validate_parse: 12 callbacks suppressed [ 857.820757][ T1677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7125'. [ 857.821499][ T1677] netlink: 'syz.4.7125': attribute type 9 has an invalid length. [ 857.821518][ T1677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7125'. [ 857.856576][ C1] net_ratelimit: 539 callbacks suppressed [ 857.856598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.857774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.857926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.858050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.858393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.858515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.859049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.859242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.859774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.874603][ T1681] FAULT_INJECTION: forcing a failure. [ 857.874603][ T1681] name failslab, interval 1, probability 0, space 0, times 0 [ 857.874685][ T1681] CPU: 0 UID: 0 PID: 1681 Comm: syz.2.7126 Not tainted syzkaller #0 PREEMPT(full) [ 857.874750][ T1681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 857.874791][ T1681] Call Trace: [ 857.874812][ T1681] [ 857.874842][ T1681] dump_stack_lvl+0xe8/0x150 [ 857.874942][ T1681] should_fail_ex+0x410/0x560 [ 857.875046][ T1681] should_failslab+0xa8/0x100 [ 857.875139][ T1681] __kvmalloc_node_noprof+0x171/0x820 [ 857.875240][ T1681] ? __rhashtable_init_noprof+0x5fa/0xbd0 [ 857.875321][ T1681] ? __rhashtable_init_noprof+0x5fa/0xbd0 [ 857.875422][ T1681] __rhashtable_init_noprof+0x5fa/0xbd0 [ 857.875487][ T1681] tcf_proto_create+0x248/0x330 [ 857.875525][ T1681] tc_new_tfilter+0x1495/0x1900 [ 857.875569][ T1681] ? __lock_acquire+0x747/0x2de0 [ 857.875640][ T1681] ? __pfx_tc_new_tfilter+0x10/0x10 [ 857.875721][ T1681] ? __dev_queue_xmit+0x29b/0x3920 [ 857.875841][ T1681] ? lock_acquire+0x115/0x350 [ 857.875951][ T1681] ? __pfx_tc_new_tfilter+0x10/0x10 [ 857.876023][ T1681] rtnetlink_rcv_msg+0x802/0xc00 [ 857.876124][ T1681] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 857.876223][ T1681] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 857.876317][ T1681] ? __copy_skb_header+0xa3/0x4a0 [ 857.876409][ T1681] netlink_rcv_skb+0x226/0x4a0 [ 857.876489][ T1681] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 857.876581][ T1681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 857.876687][ T1681] ? netlink_deliver_tap+0x2e/0x1b0 [ 857.876767][ T1681] ? netlink_deliver_tap+0x2e/0x1b0 [ 857.876858][ T1681] netlink_unicast+0x8ef/0xa80 [ 857.876979][ T1681] netlink_sendmsg+0x7f0/0xb20 [ 857.877058][ T1681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 857.877162][ T1681] ? aa_sock_msg_perm+0x144/0x210 [ 857.877261][ T1681] ? apparmor_socket_sendmsg+0x98/0x360 [ 857.877333][ T1681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 857.877406][ T1681] sock_sendmsg_nosec+0x14e/0x190 [ 857.877486][ T1681] ____sys_sendmsg+0x54e/0x850 [ 857.877589][ T1681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 857.877705][ T1681] ? import_iovec+0x73/0xa0 [ 857.877804][ T1681] ___sys_sendmsg+0x2a5/0x360 [ 857.877887][ T1681] ? __lock_acquire+0x747/0x2de0 [ 857.877968][ T1681] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.878164][ T1681] ? __fget_files+0x3a2/0x420 [ 857.878233][ T1681] ? __fget_files+0x2a/0x420 [ 857.878323][ T1681] __x64_sys_sendmsg+0x1b1/0x290 [ 857.878388][ T1681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 857.878577][ T1681] do_syscall_64+0x166/0x520 [ 857.878632][ T1681] ? trace_irq_disable+0x3b/0x140 [ 857.878706][ T1681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.878767][ T1681] ? clear_bhb_loop+0x70/0xc0 [ 857.878837][ T1681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.878904][ T1681] RIP: 0033:0x7f6e8eb9f559 [ 857.878959][ T1681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.879010][ T1681] RSP: 002b:00007f6e8fb07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.879071][ T1681] RAX: ffffffffffffffda RBX: 00007f6e8ee25fa0 RCX: 00007f6e8eb9f559 [ 857.879121][ T1681] RDX: 0000000000000000 RSI: 0000200000001940 RDI: 0000000000000004 [ 857.879160][ T1681] RBP: 00007f6e8fb07090 R08: 0000000000000000 R09: 0000000000000000 [ 857.879202][ T1681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.879241][ T1681] R13: 00007f6e8ee26038 R14: 00007f6e8ee25fa0 R15: 00007fff9f758188 [ 857.879350][ T1681] [ 857.935611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.453037][ T1687] netlink: 'syz.2.7129': attribute type 83 has an invalid length. [ 859.341816][ T1730] FAULT_INJECTION: forcing a failure. [ 859.341816][ T1730] name failslab, interval 1, probability 0, space 0, times 0 [ 859.341853][ T1730] CPU: 1 UID: 0 PID: 1730 Comm: syz.3.7139 Not tainted syzkaller #0 PREEMPT(full) [ 859.341879][ T1730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 859.341894][ T1730] Call Trace: [ 859.341904][ T1730] [ 859.341914][ T1730] dump_stack_lvl+0xe8/0x150 [ 859.341955][ T1730] should_fail_ex+0x410/0x560 [ 859.341994][ T1730] should_failslab+0xa8/0x100 [ 859.342035][ T1730] __kmalloc_cache_noprof+0x9e/0x600 [ 859.342075][ T1730] ? fl_change+0x159/0x38c0 [ 859.342106][ T1730] ? fl_change+0x159/0x38c0 [ 859.342145][ T1730] fl_change+0x159/0x38c0 [ 859.342180][ T1730] ? lock_acquire+0x115/0x350 [ 859.342207][ T1730] ? fl_get+0x9a/0x3b0 [ 859.342245][ T1730] ? fl_get+0x9a/0x3b0 [ 859.342276][ T1730] ? fl_get+0x9a/0x3b0 [ 859.342310][ T1730] ? fl_get+0x336/0x3b0 [ 859.342340][ T1730] ? __pfx_fl_change+0x10/0x10 [ 859.342373][ T1730] ? __pfx_fl_get+0x10/0x10 [ 859.342414][ T1730] tc_new_tfilter+0x1324/0x1900 [ 859.342473][ T1730] ? __pfx_tc_new_tfilter+0x10/0x10 [ 859.342501][ T1730] ? __dev_queue_xmit+0x29b/0x3920 [ 859.342546][ T1730] ? lock_acquire+0x115/0x350 [ 859.342589][ T1730] ? __pfx_tc_new_tfilter+0x10/0x10 [ 859.342618][ T1730] rtnetlink_rcv_msg+0x802/0xc00 [ 859.342658][ T1730] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 859.342694][ T1730] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 859.342731][ T1730] ? __copy_skb_header+0xa3/0x4a0 [ 859.342768][ T1730] netlink_rcv_skb+0x226/0x4a0 [ 859.342804][ T1730] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 859.342842][ T1730] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 859.342884][ T1730] ? netlink_deliver_tap+0x2e/0x1b0 [ 859.342913][ T1730] ? netlink_deliver_tap+0x2e/0x1b0 [ 859.342948][ T1730] netlink_unicast+0x8ef/0xa80 [ 859.342993][ T1730] netlink_sendmsg+0x7f0/0xb20 [ 859.343031][ T1730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.343074][ T1730] ? aa_sock_msg_perm+0x144/0x210 [ 859.343108][ T1730] ? apparmor_socket_sendmsg+0x98/0x360 [ 859.343136][ T1730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.343165][ T1730] sock_sendmsg_nosec+0x14e/0x190 [ 859.343196][ T1730] ____sys_sendmsg+0x54e/0x850 [ 859.343243][ T1730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.343290][ T1730] ? import_iovec+0x73/0xa0 [ 859.343328][ T1730] ___sys_sendmsg+0x2a5/0x360 [ 859.343361][ T1730] ? __lock_acquire+0x747/0x2de0 [ 859.343393][ T1730] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.343470][ T1730] ? __fget_files+0x3a2/0x420 [ 859.343494][ T1730] ? __fget_files+0x2a/0x420 [ 859.343529][ T1730] __x64_sys_sendmsg+0x1b1/0x290 [ 859.343555][ T1730] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 859.343614][ T1730] do_syscall_64+0x166/0x520 [ 859.343638][ T1730] ? trace_irq_disable+0x3b/0x140 [ 859.343665][ T1730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.343689][ T1730] ? clear_bhb_loop+0x70/0xc0 [ 859.343718][ T1730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.343740][ T1730] RIP: 0033:0x7f7c9cb9f559 [ 859.343763][ T1730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.343783][ T1730] RSP: 002b:00007f7c9dad2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.343806][ T1730] RAX: ffffffffffffffda RBX: 00007f7c9ce25fa0 RCX: 00007f7c9cb9f559 [ 859.343824][ T1730] RDX: 0000000000000000 RSI: 0000200000001940 RDI: 0000000000000004 [ 859.343838][ T1730] RBP: 00007f7c9dad2090 R08: 0000000000000000 R09: 0000000000000000 [ 859.343852][ T1730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 859.343865][ T1730] R13: 00007f7c9ce26038 R14: 00007f7c9ce25fa0 R15: 00007ffe0ca10c38 [ 859.343900][ T1730] [ 859.429161][ T1731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7140'. [ 859.773369][ T1733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7141'. [ 860.017985][ T1739] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7143'. [ 860.049968][ T1740] geneve0: entered allmulticast mode [ 860.106561][ T1740] netlink: 'syz.3.7144': attribute type 1 has an invalid length. [ 860.106588][ T1740] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7144'. [ 860.106616][ T1740] block nbd0: NBD_DISCONNECT [ 860.106639][ T1740] block nbd0: Send disconnect failed -32 [ 860.106659][ T1740] block nbd0: shutting down sockets [ 860.393595][ T1756] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7147'. [ 860.665986][ T1768] xt_TPROXY: Can be used only with -p tcp or -p udp [ 860.987557][ T1779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7156'. [ 861.549156][ T1797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7160'. [ 861.613615][ T1794] syzkaller0: entered promiscuous mode [ 861.613644][ T1794] syzkaller0: entered allmulticast mode [ 861.932166][ T1801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7162'. [ 862.889125][ C1] net_ratelimit: 10 callbacks suppressed [ 862.889151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.892606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.892671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.892817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.892862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.893218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.893401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.893537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.893574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.975282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.936723][ T1830] wg0 speed is unknown, defaulting to 1000 [ 865.936818][ T1830] wg0 speed is unknown, defaulting to 1000 [ 865.937651][ T1830] wg0 speed is unknown, defaulting to 1000 [ 865.955252][ T1830] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 865.955363][ T1830] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 865.955507][ T1830] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 866.087250][ T1833] bond4: entered allmulticast mode [ 866.087909][ T1833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 866.114265][ T1843] __nla_validate_parse: 1 callbacks suppressed [ 866.114281][ T1843] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7168'. [ 866.290710][ T1830] wg0 speed is unknown, defaulting to 1000 [ 866.341443][ T1843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.348469][ T1843] bond0 (unregistering): Released all slaves [ 866.444682][ T1848] syzkaller0: entered promiscuous mode [ 866.444708][ T1848] syzkaller0: entered allmulticast mode [ 866.458523][ T1830] wg0 speed is unknown, defaulting to 1000 [ 866.512089][ T1830] wg0 speed is unknown, defaulting to 1000 [ 866.522205][ T1830] wg0 speed is unknown, defaulting to 1000 [ 866.524071][ T1830] wg0 speed is unknown, defaulting to 1000 [ 866.525881][ T1830] wg0 speed is unknown, defaulting to 1000 [ 866.527716][ T1830] wg0 speed is unknown, defaulting to 1000 [ 866.554623][ T1830] wg0 speed is unknown, defaulting to 1000 [ 866.556540][ T1830] wg0 speed is unknown, defaulting to 1000 [ 866.677023][ T1864] can: request_module (can-proto-0) failed. [ 867.200159][ T30] audit: type=1800 audit(1793312842.852:20): pid=1879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7177" name="memory.events" dev="tmpfs" ino=1028 res=0 errno=-22 [ 867.753786][ T1911] netlink: 23 bytes leftover after parsing attributes in process `syz.3.7182'. [ 867.824946][ T1913] tipc: Enabling of bearer rejected, failed to enable media [ 867.929202][ C1] net_ratelimit: 9 callbacks suppressed [ 867.929225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.929411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.929647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.930967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.930997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.931224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.931449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.931959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.010130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.010232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.095270][ T1920] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7185'. [ 868.095463][ T1920] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7185'. [ 868.095482][ T1920] netlink: 19 bytes leftover after parsing attributes in process `syz.2.7185'. [ 868.362705][ T1938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7191'. [ 868.434147][ T1945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7193'. [ 868.434209][ T1945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7193'. [ 868.435041][ T1945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7193'. [ 868.707663][ T1954] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7197'. [ 868.955588][ T1971] ip6t_ah: unknown flags 5 [ 869.483165][ T2001] netlink: 'syz.3.7211': attribute type 1 has an invalid length. [ 870.510888][ T2053] netlink: 'syz.4.7229': attribute type 7 has an invalid length. [ 870.573179][ T2062] IPv6: NLM_F_CREATE should be specified when creating new route [ 872.969375][ C0] net_ratelimit: 19 callbacks suppressed [ 872.969400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.969533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.969663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.970139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.971146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.971344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.971714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.971900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.972095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.052396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.373639][ T2182] __nla_validate_parse: 13 callbacks suppressed [ 873.373662][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7261'. [ 873.746583][ T2199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7269'. [ 873.783167][ T2199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7269'. [ 873.934589][ T2208] netlink: 'syz.0.7274': attribute type 10 has an invalid length. [ 873.974923][ T2208] .`: (slave bridge0): Enslaving as an active interface with an up link [ 874.198989][ T2218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7277'. [ 874.231873][ T2218] dummy0: left promiscuous mode [ 874.721794][ T2240] netlink: 'syz.1.7283': attribute type 1 has an invalid length. [ 874.820693][ T2240] 8021q: adding VLAN 0 to HW filter on device bond7 [ 874.845555][ T2240] netlink: 'syz.1.7283': attribute type 10 has an invalid length. [ 874.845582][ T2240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7283'. [ 874.914683][ T2246] bridge0: port 1(batadv1) entered blocking state [ 874.914871][ T2246] bridge0: port 1(batadv1) entered disabled state [ 874.915037][ T2246] batadv1: entered allmulticast mode [ 874.920199][ T2246] batadv1: entered promiscuous mode [ 875.023440][ T2254] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7288'. [ 875.409084][T22350] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 875.409106][T22350] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 875.877399][ T2289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7299'. [ 875.877423][ T2289] tc_dump_action: action bad kind [ 875.878164][ T2293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7299'. [ 875.878183][ T2293] tc_dump_action: action bad kind [ 875.956014][ T2299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7300'. [ 876.050178][ T2301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7302'. [ 876.538453][ T2335] netlink: 'syz.1.7311': attribute type 16 has an invalid length. [ 876.538480][ T2335] netlink: 'syz.1.7311': attribute type 17 has an invalid length. [ 876.752699][ T2335] 8021q: adding VLAN 0 to HW filter on device .` [ 876.772927][ T2335] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.812542][ T2335] wg0: left promiscuous mode [ 877.016129][ T2335] bridge0: entered allmulticast mode [ 877.017412][ T2335] bridge0: entered promiscuous mode [ 877.017968][ T2335] macvtap1: left allmulticast mode [ 877.017988][ T2335] bridge0: left allmulticast mode [ 877.042523][ T2335] bridge0: entered allmulticast mode [ 877.053223][ T2335] macvtap2: left allmulticast mode [ 877.053246][ T2335] bridge0: left allmulticast mode [ 877.057063][ T2335] geneve2: left promiscuous mode [ 877.171897][ T2335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 877.213782][ T2335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 877.237334][ T2335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 877.244418][ T2335] 8021q: adding VLAN 0 to HW filter on device bond4 [ 877.262583][ T2335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 877.266021][ T2335] bond6: left allmulticast mode [ 877.289227][T23113] Bluetooth: hci2: command 0x0406 tx timeout [ 877.335000][T25193] virt_wifi0 speed is unknown, defaulting to 1000 [ 877.794619][ T2373] netlink: 'syz.0.7320': attribute type 10 has an invalid length. [ 877.794821][ T2373] veth1_macvtap: left promiscuous mode [ 877.820595][ T2373] veth1_macvtap: entered promiscuous mode [ 877.841423][ T2373] .`: (slave macsec0): Enslaving as an active interface with an up link [ 878.009243][ C1] net_ratelimit: 54 callbacks suppressed [ 878.009269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.009796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.009994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.010305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.010956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.010978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.011158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.011342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.011673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.011847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.335684][ T2322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 879.557550][ T2383] netlink: 'syz.4.7322': attribute type 3 has an invalid length. [ 880.296073][ T2412] syzkaller0: entered promiscuous mode [ 880.296100][ T2412] syzkaller0: entered allmulticast mode [ 880.317375][ T2412] sctp: [Deprecated]: syz.4.7332 (pid 2412) Use of int in maxseg socket option. [ 880.317375][ T2412] Use struct sctp_assoc_value instead [ 881.231987][ T2471] syzkaller0: entered promiscuous mode [ 881.232014][ T2471] syzkaller0: entered allmulticast mode [ 881.496475][ T2481] x_tables: duplicate underflow at hook 1 [ 881.576783][ T2490] __nla_validate_parse: 2 callbacks suppressed [ 881.576809][ T2490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7351'. [ 881.617934][ T2493] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7353'. [ 881.640404][ T2495] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7355'. [ 881.671849][ T2503] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 882.013970][ T2520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7360'. [ 882.255216][ T2534] FAULT_INJECTION: forcing a failure. [ 882.255216][ T2534] name failslab, interval 1, probability 0, space 0, times 0 [ 882.255253][ T2534] CPU: 1 UID: 0 PID: 2534 Comm: syz.0.7364 Not tainted syzkaller #0 PREEMPT(full) [ 882.255278][ T2534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 882.255293][ T2534] Call Trace: [ 882.255302][ T2534] [ 882.255312][ T2534] dump_stack_lvl+0xe8/0x150 [ 882.255351][ T2534] should_fail_ex+0x410/0x560 [ 882.255392][ T2534] should_failslab+0xa8/0x100 [ 882.255433][ T2534] __kmalloc_cache_noprof+0x9e/0x600 [ 882.255465][ T2534] ? dst_cow_metrics_generic+0x56/0x1c0 [ 882.255493][ T2534] ? dst_cow_metrics_generic+0x56/0x1c0 [ 882.255529][ T2534] dst_cow_metrics_generic+0x56/0x1c0 [ 882.255562][ T2534] xfrm_resolve_and_create_bundle+0x174e/0x3400 [ 882.255587][ T2534] ? unwind_get_return_address+0x4d/0x90 [ 882.255616][ T2534] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 882.255647][ T2534] ? xfrm_resolve_and_create_bundle+0x1443/0x3400 [ 882.255695][ T2534] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 882.255721][ T2534] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 882.255755][ T2534] ? ref_tracker_alloc+0x390/0x530 [ 882.255823][ T2534] ? xfrm_sk_policy_lookup+0x6db/0x720 [ 882.255863][ T2534] ? xfrm_expand_policies+0x489/0x740 [ 882.255895][ T2534] xfrm_lookup_with_ifid+0x2a6/0x1e30 [ 882.255931][ T2534] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 882.255978][ T2534] ? lock_acquire+0x115/0x350 [ 882.256016][ T2534] xfrm_lookup_route+0x3c/0x1c0 [ 882.256043][ T2534] udp_sendmsg+0x144a/0x2140 [ 882.256087][ T2534] ? __pfx_udp_sendmsg+0x10/0x10 [ 882.256132][ T2534] ? current_check_autobind_udp_socket+0x210/0x4b0 [ 882.256182][ T2534] ? aa_sock_msg_perm+0xfc/0x210 [ 882.256207][ T2534] ? sock_rps_record_flow+0x19/0x350 [ 882.256243][ T2534] ? inet_sendmsg+0x23e/0x320 [ 882.256273][ T2534] ? apparmor_socket_sendmsg+0x98/0x360 [ 882.256299][ T2534] ? __pfx_inet_sendmsg+0x10/0x10 [ 882.256330][ T2534] sock_sendmsg_nosec+0x10f/0x190 [ 882.256362][ T2534] sock_write_iter+0x2de/0x3e0 [ 882.256389][ T2534] ? __pfx_sock_write_iter+0x10/0x10 [ 882.256423][ T2534] ? bpf_lsm_file_permission+0x9/0x20 [ 882.256445][ T2534] ? security_file_permission+0x75/0x260 [ 882.256476][ T2534] vfs_write+0x612/0xba0 [ 882.256512][ T2534] ? __pfx_vfs_write+0x10/0x10 [ 882.256542][ T2534] ? __fget_files+0x3a2/0x420 [ 882.256565][ T2534] ? __fget_files+0x2a/0x420 [ 882.256593][ T2534] ? fdget+0x1ac/0x250 [ 882.256624][ T2534] ksys_write+0x150/0x270 [ 882.256653][ T2534] ? __pfx_ksys_write+0x10/0x10 [ 882.256693][ T2534] do_syscall_64+0x166/0x520 [ 882.256715][ T2534] ? trace_irq_disable+0x3b/0x140 [ 882.256741][ T2534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.256764][ T2534] ? clear_bhb_loop+0x70/0xc0 [ 882.256792][ T2534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.256814][ T2534] RIP: 0033:0x7f43f2f9f559 [ 882.256834][ T2534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.256854][ T2534] RSP: 002b:00007f43f3ddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 882.256878][ T2534] RAX: ffffffffffffffda RBX: 00007f43f3225fa0 RCX: 00007f43f2f9f559 [ 882.256895][ T2534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 882.256908][ T2534] RBP: 00007f43f3ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 882.256922][ T2534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.256936][ T2534] R13: 00007f43f3226038 R14: 00007f43f3225fa0 R15: 00007fff8393d4f8 [ 882.256979][ T2534] [ 883.049465][ C1] net_ratelimit: 32 callbacks suppressed [ 883.049488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.049507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.049686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.050530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.051124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.051313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.051850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.052053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.052231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.055221][ T2555] ip_tables: iptables: counters copy to user failed while replacing table [ 883.224672][ T2569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7374'. [ 883.226631][ T2569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7374'. [ 883.365850][ T2575] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7377'. [ 883.631709][ T1541] Bluetooth: hci5: unexpected event for opcode 0x100c [ 883.636301][ T2598] C: entered promiscuous mode [ 883.636899][ T2598] tunl0: entered promiscuous mode [ 883.676248][ T2598] gre0: entered promiscuous mode [ 883.728151][ T2598] gretap0: entered promiscuous mode [ 883.755616][ T2598] erspan0: entered promiscuous mode [ 883.770409][ T2598] ip_vti0: entered promiscuous mode [ 884.112980][ T2620] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7385'. [ 884.272246][ T2631] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7388'. [ 884.549956][ T2649] FAULT_INJECTION: forcing a failure. [ 884.549956][ T2649] name failslab, interval 1, probability 0, space 0, times 0 [ 884.549993][ T2649] CPU: 1 UID: 0 PID: 2649 Comm: syz.1.7391 Not tainted syzkaller #0 PREEMPT(full) [ 884.550019][ T2649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 884.550034][ T2649] Call Trace: [ 884.550044][ T2649] [ 884.550054][ T2649] dump_stack_lvl+0xe8/0x150 [ 884.550094][ T2649] should_fail_ex+0x410/0x560 [ 884.550132][ T2649] ? __alloc_skb+0x1db/0x7a0 [ 884.550164][ T2649] should_failslab+0xa8/0x100 [ 884.550200][ T2649] ? __alloc_skb+0x1db/0x7a0 [ 884.550238][ T2649] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 884.550267][ T2649] ? __alloc_skb+0x18d/0x7a0 [ 884.550300][ T2649] ? __alloc_skb+0x1db/0x7a0 [ 884.550340][ T2649] __alloc_skb+0x1db/0x7a0 [ 884.550378][ T2649] alloc_skb_with_frags+0xc6/0x760 [ 884.550410][ T2649] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 884.550448][ T2649] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 884.550482][ T2649] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 884.550514][ T2649] sock_alloc_send_pskb+0xc69/0xd90 [ 884.550566][ T2649] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 884.550611][ T2649] __ip_append_data+0x29ea/0x3cf0 [ 884.550670][ T2649] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 884.550732][ T2649] ? __pfx___ip_append_data+0x10/0x10 [ 884.550769][ T2649] ? xfrm_mtu+0x6a/0x1c0 [ 884.550798][ T2649] ? ip_setup_cork+0x512/0x920 [ 884.550837][ T2649] ip_make_skb+0x22e/0x440 [ 884.550866][ T2649] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 884.550903][ T2649] ? __pfx_ip_make_skb+0x10/0x10 [ 884.550948][ T2649] udp_sendmsg+0x1937/0x2140 [ 884.550999][ T2649] ? __pfx_udp_sendmsg+0x10/0x10 [ 884.551046][ T2649] ? current_check_autobind_udp_socket+0x210/0x4b0 [ 884.551099][ T2649] ? aa_sock_msg_perm+0xfc/0x210 [ 884.551125][ T2649] ? sock_rps_record_flow+0x19/0x350 [ 884.551164][ T2649] ? inet_sendmsg+0x23e/0x320 [ 884.551196][ T2649] ? apparmor_socket_sendmsg+0x98/0x360 [ 884.551232][ T2649] ? __pfx_inet_sendmsg+0x10/0x10 [ 884.551264][ T2649] sock_sendmsg_nosec+0x10f/0x190 [ 884.551296][ T2649] sock_write_iter+0x2de/0x3e0 [ 884.551326][ T2649] ? __pfx_sock_write_iter+0x10/0x10 [ 884.551361][ T2649] ? bpf_lsm_file_permission+0x9/0x20 [ 884.551386][ T2649] ? security_file_permission+0x75/0x260 [ 884.551420][ T2649] vfs_write+0x612/0xba0 [ 884.551458][ T2649] ? __pfx_vfs_write+0x10/0x10 [ 884.551490][ T2649] ? __fget_files+0x3a2/0x420 [ 884.551515][ T2649] ? __fget_files+0x2a/0x420 [ 884.551543][ T2649] ? fdget+0x1ac/0x250 [ 884.551575][ T2649] ksys_write+0x150/0x270 [ 884.551606][ T2649] ? __pfx_ksys_write+0x10/0x10 [ 884.551647][ T2649] do_syscall_64+0x166/0x520 [ 884.551668][ T2649] ? trace_irq_disable+0x3b/0x140 [ 884.551690][ T2649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.551710][ T2649] ? clear_bhb_loop+0x70/0xc0 [ 884.551733][ T2649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.551752][ T2649] RIP: 0033:0x7f9cc7b9f559 [ 884.551772][ T2649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.551789][ T2649] RSP: 002b:00007f9cc8a90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 884.551808][ T2649] RAX: ffffffffffffffda RBX: 00007f9cc7e25fa0 RCX: 00007f9cc7b9f559 [ 884.551822][ T2649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 884.551833][ T2649] RBP: 00007f9cc8a90090 R08: 0000000000000000 R09: 0000000000000000 [ 884.551845][ T2649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.551856][ T2649] R13: 00007f9cc7e26038 R14: 00007f9cc7e25fa0 R15: 00007ffc3e438688 [ 884.551886][ T2649] [ 884.992981][ T2654] netlink: 'syz.1.7392': attribute type 11 has an invalid length. [ 884.993006][ T2654] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7392'. [ 886.597249][ T2693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 886.941714][ T2720] netlink: 'syz.1.7404': attribute type 2 has an invalid length. [ 886.941741][ T2720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7404'. [ 887.096918][ T2734] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 887.903457][ T2765] netlink: 'syz.1.7416': attribute type 9 has an invalid length. [ 887.903484][ T2765] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.7416'. [ 888.089069][ C0] net_ratelimit: 15 callbacks suppressed [ 888.089093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.089236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.089327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.090336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.090569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.090776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.091164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.091209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.091362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.169191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.284833][ T2766] netlink: 'syz.1.7416': attribute type 9 has an invalid length. [ 888.284859][ T2766] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.7416'. [ 888.448206][ T2784] FAULT_INJECTION: forcing a failure. [ 888.448206][ T2784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.448242][ T2784] CPU: 0 UID: 0 PID: 2784 Comm: syz.4.7421 Not tainted syzkaller #0 PREEMPT(full) [ 888.448268][ T2784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 888.448283][ T2784] Call Trace: [ 888.448293][ T2784] [ 888.448303][ T2784] dump_stack_lvl+0xe8/0x150 [ 888.448343][ T2784] should_fail_ex+0x410/0x560 [ 888.448384][ T2784] _copy_from_user+0x2d/0xb0 [ 888.448420][ T2784] kstrtouint_from_user+0xd6/0x180 [ 888.448453][ T2784] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 888.448493][ T2784] ? lock_acquire+0x115/0x350 [ 888.448527][ T2784] proc_fail_nth_write+0x8e/0x210 [ 888.448566][ T2784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 888.448610][ T2784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 888.448643][ T2784] vfs_write+0x296/0xba0 [ 888.448679][ T2784] ? __pfx_vfs_write+0x10/0x10 [ 888.448711][ T2784] ? __fget_files+0x2a/0x420 [ 888.448735][ T2784] ? __fget_files+0x3a2/0x420 [ 888.448758][ T2784] ? __fget_files+0x2a/0x420 [ 888.448787][ T2784] ? fdget+0x1ac/0x250 [ 888.448828][ T2784] ksys_write+0x150/0x270 [ 888.448859][ T2784] ? __pfx_ksys_write+0x10/0x10 [ 888.448902][ T2784] do_syscall_64+0x166/0x520 [ 888.448925][ T2784] ? trace_irq_disable+0x3b/0x140 [ 888.448953][ T2784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.448976][ T2784] ? clear_bhb_loop+0x70/0xc0 [ 888.449006][ T2784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.449028][ T2784] RIP: 0033:0x7f068375fd8e [ 888.449050][ T2784] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 888.449081][ T2784] RSP: 002b:00007f06819f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 888.449105][ T2784] RAX: ffffffffffffffda RBX: 00007f06819f66c0 RCX: 00007f068375fd8e [ 888.449122][ T2784] RDX: 0000000000000001 RSI: 00007f06819f60a0 RDI: 0000000000000005 [ 888.449137][ T2784] RBP: 00007f06819f6090 R08: 0000000000000000 R09: 0000000000000000 [ 888.449152][ T2784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.449166][ T2784] R13: 00007f0683a26038 R14: 00007f0683a25fa0 R15: 00007fff9e6834f8 [ 888.449203][ T2784] [ 888.826464][ T2796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7425'. [ 888.834483][ T2797] netlink: 'syz.3.7424': attribute type 1 has an invalid length. [ 888.872534][ T2796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7425'. [ 888.884690][ T2796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7425'. [ 888.885393][ T2796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7425'. [ 888.886037][ T2796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7425'. [ 888.898551][ T2796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7425'. [ 888.926966][ T2796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7425'. [ 891.061202][ T2927] x_tables: unsorted underflow at hook 3 [ 891.212433][ T2932] can: request_module (can-proto-0) failed. [ 891.557182][ T2960] ip6t_hbh: Not strict - not implemented [ 892.005550][ T2973] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 892.284202][ T2985] netlink: 'syz.1.7467': attribute type 17 has an invalid length. [ 892.284226][ T2985] __nla_validate_parse: 30 callbacks suppressed [ 892.284240][ T2985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7467'. [ 892.284267][ T2985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7467'. [ 892.456969][ T2998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7472'. [ 892.457110][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.506964][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.899240][ T3020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7477'. [ 892.899326][ T3020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7477'. [ 892.922069][ T3021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7478'. [ 892.935292][ T3022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7478'. [ 892.992473][ T3025] netlink: 'syz.3.7479': attribute type 1 has an invalid length. [ 893.081324][ T3034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7479'. [ 893.129039][ C0] net_ratelimit: 1527 callbacks suppressed [ 893.129062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.129187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.129278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.129780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.130435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.130617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.131000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.131184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.131366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.209459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.343450][ T3045] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7481'. [ 893.624553][ T3063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7488'. [ 894.507439][ T3074] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 894.507473][ T3074] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 894.601440][ T3074] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 894.601461][ T3074] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 894.708629][ T3107] tipc: Started in network mode [ 894.708665][ T3107] tipc: Node identity ac14140f, cluster identity 4711 [ 894.722643][ T3107] tipc: New replicast peer: 255.255.255.255 [ 894.723273][ T3074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 894.723293][ T3074] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 894.727029][ T3107] tipc: Enabled bearer , priority 10 [ 894.940269][ T3074] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 894.940297][ T3074] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 895.067340][ T3074] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 895.067367][ T3074] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 895.117112][ T3115] sctp: [Deprecated]: syz.3.7496 (pid 3115) Use of int in max_burst socket option. [ 895.117112][ T3115] Use struct sctp_assoc_value instead [ 895.720082][ T5050] tipc: Node number set to 2886997007 [ 896.137371][ T3168] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 896.165159][ T3170] tun0: tun_chr_ioctl cmd 1074025675 [ 896.165184][ T3170] tun0: persist enabled [ 897.026198][ T3200] set match dimension is over the limit! [ 897.248310][ T3230] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 897.269813][ T3228] syzkaller0: entered promiscuous mode [ 897.269852][ T3228] syzkaller0: entered allmulticast mode [ 897.276231][ T3228] xt_MASQUERADE: bad MAP_IPS. [ 897.517723][ T3250] __nla_validate_parse: 12 callbacks suppressed [ 897.517747][ T3250] netlink: 872 bytes leftover after parsing attributes in process `syz.0.7538'. [ 897.604591][ T3253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7541'. [ 898.006223][ T3276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7546'. [ 898.073371][ T3279] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7547'. [ 898.146498][ T3281] bond8: entered promiscuous mode [ 898.146570][ T3281] bond8: entered allmulticast mode [ 898.147080][ T3281] 8021q: adding VLAN 0 to HW filter on device bond8 [ 898.168899][ C0] net_ratelimit: 36 callbacks suppressed [ 898.168920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.169141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.169913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.169961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.171476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.171678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.171865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.172224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.172392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.248902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.452181][ T3291] bond4: entered promiscuous mode [ 898.452258][ T3291] bond4: entered allmulticast mode [ 898.452738][ T3291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 899.445017][ T3329] SET target dimension over the limit! [ 899.494786][ T3334] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7564'. [ 899.495155][ T3336] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7564'. [ 899.952518][ T3355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7571'. [ 900.012973][ T3357] IPv6: NLM_F_CREATE should be specified when creating new route [ 900.958305][ T3400] netlink: 'syz.2.7579': attribute type 1 has an invalid length. [ 901.112911][ T3400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 901.178383][ T3402] bond1: (slave gretap1): making interface the new active one [ 901.188938][ T3402] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 901.456549][ T3421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7585'. [ 901.456574][ T3421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7585'. [ 901.456795][ T3421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7585'. [ 902.196325][ T3467] netlink: 'syz.3.7596': attribute type 4 has an invalid length. [ 902.197469][ T3467] netlink: 'syz.3.7596': attribute type 4 has an invalid length. [ 902.328688][ T3467] ovs-dp0: entered promiscuous mode [ 902.466396][ T3476] netlink: 'syz.1.7597': attribute type 16 has an invalid length. [ 902.466431][ T3476] netlink: 'syz.1.7597': attribute type 17 has an invalid length. [ 902.550865][ T3479] netlink: 'syz.2.7598': attribute type 1 has an invalid length. [ 902.557472][ T3480] netlink: 'syz.2.7598': attribute type 1 has an invalid length. [ 902.722855][ T3489] netlink: 'syz.0.7600': attribute type 1 has an invalid length. [ 902.824828][ T3482] bond2: (slave gretap2): making interface the new active one [ 902.837985][ T3482] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 902.865495][ T3499] __nla_validate_parse: 1 callbacks suppressed [ 902.865517][ T3499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7602'. [ 902.865545][ T3499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7602'. [ 902.900887][ T3483] macvlan2: entered promiscuous mode [ 902.900912][ T3483] macvlan2: entered allmulticast mode [ 902.901588][ T3483] bond2: entered promiscuous mode [ 902.901606][ T3483] gretap2: entered promiscuous mode [ 902.906357][ T3483] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 902.947622][ T3483] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 902.947755][ T3483] bond2: left promiscuous mode [ 902.947773][ T3483] gretap2: left promiscuous mode [ 903.010007][ T3488] macvlan2: entered promiscuous mode [ 903.010033][ T3488] macvlan2: entered allmulticast mode [ 903.010791][ T3488] bond2: entered promiscuous mode [ 903.010810][ T3488] gretap2: entered promiscuous mode [ 903.011833][ T3488] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 903.012855][ T3488] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 903.012946][ T3488] bond2: left promiscuous mode [ 903.012961][ T3488] gretap2: left promiscuous mode [ 903.209352][ C0] net_ratelimit: 22 callbacks suppressed [ 903.209373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.209391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.209582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.209904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.210878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.211061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.211086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.211267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.211465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.211639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.451042][ T3518] lo: entered allmulticast mode [ 903.527748][ T3513] lo: left allmulticast mode [ 903.646262][ T3526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7611'. [ 903.650064][ T3527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7611'. [ 904.211689][ T3529] 8021q: VLANs not supported on ip_vti0 [ 904.216891][ T3529] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7612'. [ 904.293375][ T3550] netlink: 'syz.1.7619': attribute type 2 has an invalid length. [ 904.412336][ T3560] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7617'. [ 904.415024][ T3555] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7617'. [ 904.552872][ T3565] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7620'. [ 905.033540][ T3586] syzkaller0: entered promiscuous mode [ 905.033570][ T3586] syzkaller0: entered allmulticast mode [ 905.244299][ T3601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7632'. [ 905.814317][ T3638] xt_recent: Unsupported userspace flags (000000b1) [ 905.814821][ T3636] xt_recent: Unsupported userspace flags (000000b1) [ 906.505918][ T3668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7648'. [ 906.920662][ T3698] netlink: 'syz.2.7656': attribute type 1 has an invalid length. [ 906.955663][ T3698] 8021q: adding VLAN 0 to HW filter on device bond3 [ 908.248954][ C0] net_ratelimit: 31 callbacks suppressed [ 908.248998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.249168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.249224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.250162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.250308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.250506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.250696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.251027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.251201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.329974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.528624][ T3790] __nla_validate_parse: 2 callbacks suppressed [ 908.528649][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7683'. [ 908.995278][ T3827] veth0: entered promiscuous mode [ 908.997162][ T3827] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7695'. [ 909.014353][ T3824] veth0: left promiscuous mode [ 909.105643][ T3831] netlink: 18 bytes leftover after parsing attributes in process `syz.4.7697'. [ 909.122504][ T3834] netlink: 18 bytes leftover after parsing attributes in process `syz.4.7697'. [ 909.326273][ T3846] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7701'. [ 909.326303][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7701'. [ 909.326320][ T3846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7701'. [ 910.019685][ T3871] xt_esp: unknown flags DD [ 910.116025][ T3883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7712'. [ 910.118365][ T3884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7711'. [ 910.230320][ T3887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7713'. [ 910.530854][ T3908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 910.853745][ T3921] bridge0: Device is already in use. [ 910.862801][ T3921] bridge0: Device is already in use. [ 911.191585][ T3939] netlink: 'syz.1.7728': attribute type 39 has an invalid length. [ 911.711712][ T3966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 912.071446][ T2829] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 912.174548][ T2829] bond17 (unregistering): (slave geneve4): Releasing active interface [ 912.196624][ T2829] bond13 (unregistering): (slave geneve2): Releasing active interface [ 912.296754][ T2829] bond16 (unregistering): (slave bridge5): Releasing backup interface [ 912.296782][ T2829] bond16 (unregistering): (slave bridge5): the permanent HWaddr of slave - 66:44:11:96:3b:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 912.296812][ T2829] bridge5 (unregistering): left promiscuous mode [ 912.296837][ T2829] bond16 (unregistering): (slave bridge6): making interface the new active one [ 912.296859][ T2829] bridge6 (unregistering): entered promiscuous mode [ 912.355905][ T2829] bond16 (unregistering): (slave bridge6): Releasing backup interface [ 912.355936][ T2829] bridge6 (unregistering): left promiscuous mode [ 912.355962][ T2829] bond16 (unregistering): (slave bridge7): making interface the new active one [ 912.355984][ T2829] bridge7 (unregistering): entered promiscuous mode [ 912.376926][ T2829] bond16 (unregistering): (slave bridge7): Releasing backup interface [ 912.376999][ T2829] bridge7 (unregistering): left promiscuous mode [ 912.377103][ T2829] bond16 (unregistering): (slave bridge8): making interface the new active one [ 912.377153][ T2829] bridge8 (unregistering): entered promiscuous mode [ 912.428538][ T2829] bond16 (unregistering): (slave bridge8): Releasing backup interface [ 912.428568][ T2829] bridge8 (unregistering): left promiscuous mode [ 912.428599][ T2829] bond16 (unregistering): (slave bridge9): making interface the new active one [ 912.428612][ T2829] bridge9 (unregistering): entered promiscuous mode [ 912.467222][ T2829] bond16 (unregistering): (slave bridge9): Releasing backup interface [ 912.467253][ T2829] bridge9 (unregistering): left promiscuous mode [ 912.467280][ T2829] bond16 (unregistering): (slave bridge10): making interface the new active one [ 912.467299][ T2829] bridge10 (unregistering): entered promiscuous mode [ 912.496611][ T2829] bond16 (unregistering): (slave bridge10): Releasing backup interface [ 912.496686][ T2829] bridge10 (unregistering): left promiscuous mode [ 912.496758][ T2829] bond16 (unregistering): (slave bridge11): making interface the new active one [ 912.496800][ T2829] bridge11 (unregistering): entered promiscuous mode [ 912.553012][ T2829] bond16 (unregistering): (slave bridge11): Releasing backup interface [ 912.553043][ T2829] bridge11 (unregistering): left promiscuous mode [ 912.553069][ T2829] bond16 (unregistering): (slave bridge12): making interface the new active one [ 912.553087][ T2829] bridge12 (unregistering): entered promiscuous mode [ 912.596799][ T2829] bond16 (unregistering): (slave bridge12): Releasing backup interface [ 912.596829][ T2829] bridge12 (unregistering): left promiscuous mode [ 912.596855][ T2829] bond16 (unregistering): (slave bridge13): making interface the new active one [ 912.596872][ T2829] bridge13 (unregistering): entered promiscuous mode [ 912.638493][ T2829] bond16 (unregistering): (slave bridge13): Releasing backup interface [ 912.638523][ T2829] bridge13 (unregistering): left promiscuous mode [ 912.638550][ T2829] bond16 (unregistering): (slave bridge14): making interface the new active one [ 912.638567][ T2829] bridge14 (unregistering): entered promiscuous mode [ 912.683845][ T2829] bond16 (unregistering): (slave bridge14): Releasing backup interface [ 912.683875][ T2829] bridge14 (unregistering): left promiscuous mode [ 912.683901][ T2829] bond16 (unregistering): (slave bridge15): making interface the new active one [ 912.683918][ T2829] bridge15 (unregistering): entered promiscuous mode [ 912.734690][ T2829] bond16 (unregistering): (slave bridge15): Releasing backup interface [ 912.734729][ T2829] bridge15 (unregistering): left promiscuous mode [ 912.734755][ T2829] bond16 (unregistering): (slave bridge16): making interface the new active one [ 912.734772][ T2829] bridge16 (unregistering): entered promiscuous mode [ 912.778404][ T2829] bond16 (unregistering): (slave bridge16): Releasing backup interface [ 912.778434][ T2829] bridge16 (unregistering): left promiscuous mode [ 912.778462][ T2829] bond16 (unregistering): (slave bridge17): making interface the new active one [ 912.778479][ T2829] bridge17 (unregistering): entered promiscuous mode [ 912.824795][ T2829] bond16 (unregistering): (slave bridge17): Releasing backup interface [ 912.824829][ T2829] bridge17 (unregistering): left promiscuous mode [ 912.824868][ T2829] bond16 (unregistering): (slave bridge18): making interface the new active one [ 912.824885][ T2829] bridge18 (unregistering): entered promiscuous mode [ 912.902188][ T2829] bond16 (unregistering): (slave bridge18): Releasing backup interface [ 912.902220][ T2829] bridge18 (unregistering): left promiscuous mode [ 912.904377][ T2829] bond16 (unregistering): (slave bridge19): making interface the new active one [ 912.904400][ T2829] bridge19 (unregistering): entered promiscuous mode [ 913.050644][ T2829] bond16 (unregistering): (slave bridge19): Releasing backup interface [ 913.050675][ T2829] bridge19 (unregistering): left promiscuous mode [ 913.050702][ T2829] bond16 (unregistering): (slave bridge20): making interface the new active one [ 913.050720][ T2829] bridge20 (unregistering): entered promiscuous mode [ 913.289284][ C0] net_ratelimit: 28 callbacks suppressed [ 913.289311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.289427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.289500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.290031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.291085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.291293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.291685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.291883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.292067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.370331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.373966][ T2829] bond16 (unregistering): (slave bridge20): Releasing backup interface [ 913.373996][ T2829] bridge20 (unregistering): left promiscuous mode [ 913.374023][ T2829] bond16 (unregistering): (slave bridge21): making interface the new active one [ 913.374040][ T2829] bridge21 (unregistering): entered promiscuous mode [ 913.450883][ T2829] bond16 (unregistering): (slave bridge21): Releasing backup interface [ 913.450914][ T2829] bridge21 (unregistering): left promiscuous mode [ 913.450939][ T2829] bond16 (unregistering): (slave bridge22): making interface the new active one [ 913.450956][ T2829] bridge22 (unregistering): entered promiscuous mode [ 913.641691][ T2829] bond16 (unregistering): (slave bridge22): Releasing backup interface [ 913.641723][ T2829] bridge22 (unregistering): left promiscuous mode [ 913.641749][ T2829] bond16 (unregistering): (slave bridge23): making interface the new active one [ 913.641767][ T2829] bridge23 (unregistering): entered promiscuous mode [ 913.704144][ T2829] bond16 (unregistering): (slave bridge23): Releasing backup interface [ 913.704175][ T2829] bridge23 (unregistering): left promiscuous mode [ 913.704199][ T2829] bond16 (unregistering): (slave bridge24): making interface the new active one [ 913.704217][ T2829] bridge24 (unregistering): entered promiscuous mode [ 913.745436][ T2829] bond16 (unregistering): (slave bridge24): Releasing backup interface [ 913.745466][ T2829] bridge24 (unregistering): left promiscuous mode [ 913.745492][ T2829] bond16 (unregistering): (slave bridge25): making interface the new active one [ 913.745508][ T2829] bridge25 (unregistering): entered promiscuous mode [ 913.784927][ T2829] bond16 (unregistering): (slave bridge25): Releasing backup interface [ 913.784956][ T2829] bridge25 (unregistering): left promiscuous mode [ 913.784982][ T2829] bond16 (unregistering): (slave bridge26): making interface the new active one [ 913.784999][ T2829] bridge26 (unregistering): entered promiscuous mode [ 913.816750][ T2829] bond16 (unregistering): (slave bridge26): Releasing backup interface [ 913.816830][ T2829] bridge26 (unregistering): left promiscuous mode [ 913.848295][ T2829] .` (unregistering): Released all slaves [ 913.864811][ T2829] bond1 (unregistering): (slave bond2): Releasing backup interface [ 913.865612][ T2829] bond1 (unregistering): Released all slaves [ 913.901279][ T2829] bond2 (unregistering): Released all slaves [ 913.925650][ T2829] bond3 (unregistering): Released all slaves [ 913.962340][ T2829] bond4 (unregistering): Released all slaves [ 913.965135][ T3993] __nla_validate_parse: 14 callbacks suppressed [ 913.965155][ T3993] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7739'. [ 914.004442][ T2829] bond5 (unregistering): Released all slaves [ 914.032176][ T2829] bond6 (unregistering): Released all slaves [ 914.050386][ T2829] bond7 (unregistering): Released all slaves [ 914.068461][ T2829] bond8 (unregistering): Released all slaves [ 914.087012][ T2829] bond9 (unregistering): Released all slaves [ 914.113655][ T2829] bond0 (unregistering): Released all slaves [ 914.133175][ T2829] bond10 (unregistering): Released all slaves [ 914.153070][ T2829] bond11 (unregistering): Released all slaves [ 914.174195][ T2829] bond12 (unregistering): Released all slaves [ 914.203970][ T2829] bond13 (unregistering): Released all slaves [ 914.226546][ T2829] bond14 (unregistering): Released all slaves [ 914.244810][ T2829] bond15 (unregistering): Released all slaves [ 914.274209][ T2829] bond16 (unregistering): Released all slaves [ 914.291788][ T2829] bond17 (unregistering): Released all slaves [ 914.308563][ T2829] bond18 (unregistering): Released all slaves [ 914.613611][ T2829] !;: left promiscuous mode [ 914.750681][ T4005] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7742'. [ 914.799994][ T2829] tipc: Disabling bearer [ 914.800144][ T2829] tipc: Disabling bearer [ 914.803631][ T2829] tipc: Left network mode [ 914.805800][ T4007] syzkaller1: entered promiscuous mode [ 914.805824][ T4007] syzkaller1: entered allmulticast mode [ 914.824297][ T4012] xt_socket: unknown flags 0x4 [ 914.928002][ T2829] IPVS: stopping backup sync thread 29780 ... [ 915.197722][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7748'. [ 915.278640][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7752'. [ 915.278671][ T4030] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7752'. [ 915.301981][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7752'. [ 915.302005][ T4030] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7752'. [ 915.302214][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7752'. [ 915.302232][ T4030] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7752'. [ 915.302438][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7752'. [ 916.006915][ T2829] hsr_slave_0: left promiscuous mode [ 916.021508][ T2829] veth0_macvtap: left promiscuous mode [ 916.511395][ T4082] netlink: 'syz.3.7763': attribute type 1 has an invalid length. [ 916.736699][ T2827] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 916.811467][ T4085] bridge0: port 3(gretap0) entered blocking state [ 916.811651][ T4085] bridge0: port 3(gretap0) entered disabled state [ 916.811832][ T4085] gretap0: entered allmulticast mode [ 917.097889][ T4090] netlink: 'syz.0.7764': attribute type 1 has an invalid length. [ 917.202964][ T4090] bond5: entered promiscuous mode [ 917.203307][ T4090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 917.286270][ T4090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 917.286735][ T4090] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 917.286758][ T4090] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 917.325663][ T4092] sctp: [Deprecated]: syz.3.7765 (pid 4092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 917.325663][ T4092] Use struct sctp_sack_info instead [ 917.374389][ T4090] bond5: (slave ip6gre1): making interface the new active one [ 917.374415][ T4090] ip6gre1: entered promiscuous mode [ 917.397664][ T4090] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 917.423351][ T4095] tipc: Invalid UDP bearer configuration [ 917.423404][ T4095] tipc: Enabling of bearer rejected, failed to enable media [ 917.426263][ T2829] IPVS: stop unused estimator thread 0... [ 917.708450][ T4117] netlink: 'syz.2.7773': attribute type 2 has an invalid length. [ 917.896962][ T4131] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 917.912910][ T4132] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 918.328900][ C0] net_ratelimit: 177 callbacks suppressed [ 918.328923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.329126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.329181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.329637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.330574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.330781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.330987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.331326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.331504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.331797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.195166][ T4236] __nla_validate_parse: 73 callbacks suppressed [ 920.195189][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7806'. [ 920.195242][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7806'. [ 920.228514][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7806'. [ 920.228560][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7806'. [ 920.370231][ T4246] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7808'. [ 920.796083][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7812'. [ 921.605663][ T4305] veth0: entered promiscuous mode [ 921.617528][ T4304] veth0: left promiscuous mode [ 921.705985][ T4315] netlink: 'syz.4.7825': attribute type 27 has an invalid length. [ 922.014029][ T4327] 8021q: adding VLAN 0 to HW filter on device bond6 [ 922.014847][ T4329] netlink: 'syz.3.7828': attribute type 4 has an invalid length. [ 922.014867][ T4329] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7828'. [ 922.210599][ T4346] netlink: 'syz.1.7834': attribute type 1 has an invalid length. [ 922.217552][ T4347] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 922.244227][ T4347] sctp: [Deprecated]: syz.1.7834 (pid 4347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 922.244227][ T4347] Use struct sctp_sack_info instead [ 922.347536][ T4355] netlink: 'syz.0.7835': attribute type 21 has an invalid length. [ 922.347565][ T4355] IPv6: NLM_F_CREATE should be specified when creating new route [ 922.347663][ T4355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 922.347675][ T4355] IPv6: NLM_F_CREATE should be set when creating new route [ 922.347724][ T4355] IPv6: NLM_F_CREATE should be set when creating new route [ 922.347750][ T4355] IPv6: NLM_F_CREATE should be set when creating new route [ 922.558984][ T4362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7837'. [ 922.584925][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7838'. [ 922.672282][ T4364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.675121][ T4352] syzkaller1: entered promiscuous mode [ 922.675146][ T4352] syzkaller1: entered allmulticast mode [ 922.764997][ T4375] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7839'. [ 922.890994][ T4375] bond4: Unable to set up delay as MII monitoring is disabled [ 922.922666][ T4375] bond4 (unregistering): Released all slaves [ 922.923132][ T4382] xt_l2tp: unknown flags: 43 [ 923.257093][ T4403] FAULT_INJECTION: forcing a failure. [ 923.257093][ T4403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.257130][ T4403] CPU: 1 UID: 0 PID: 4403 Comm: syz.1.7846 Not tainted syzkaller #0 PREEMPT(full) [ 923.257157][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 923.257172][ T4403] Call Trace: [ 923.257181][ T4403] [ 923.257198][ T4403] dump_stack_lvl+0xe8/0x150 [ 923.257238][ T4403] should_fail_ex+0x410/0x560 [ 923.257277][ T4403] _copy_from_iter+0x1d3/0x1660 [ 923.257318][ T4403] ? __lock_acquire+0x747/0x2de0 [ 923.257344][ T4403] ? __pfx__copy_from_iter+0x10/0x10 [ 923.257393][ T4403] tun_get_user+0x265/0x4470 [ 923.257433][ T4403] ? aa_file_perm+0x18b/0x15f0 [ 923.257468][ T4403] ? aa_file_perm+0x4ed/0x15f0 [ 923.257499][ T4403] ? __pfx_tun_get_user+0x10/0x10 [ 923.257537][ T4403] ? __lock_acquire+0x747/0x2de0 [ 923.257565][ T4403] ? kstrtoull+0x137/0x1d0 [ 923.257600][ T4403] ? ref_tracker_alloc+0x172/0x530 [ 923.257634][ T4403] ? lock_acquire+0x115/0x350 [ 923.257665][ T4403] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 923.257703][ T4403] ? lock_acquire+0x115/0x350 [ 923.257729][ T4403] ? tun_get+0x1c/0x2f0 [ 923.257771][ T4403] ? tun_get+0x1c/0x2f0 [ 923.257804][ T4403] ? tun_get+0x1c/0x2f0 [ 923.257844][ T4403] tun_chr_write_iter+0x113/0x200 [ 923.257904][ T4403] vfs_write+0x612/0xba0 [ 923.257942][ T4403] ? __pfx_vfs_write+0x10/0x10 [ 923.257972][ T4403] ? __fget_files+0x3a2/0x420 [ 923.257996][ T4403] ? __fget_files+0x2a/0x420 [ 923.258025][ T4403] ? fdget+0x1ac/0x250 [ 923.258055][ T4403] ksys_write+0x150/0x270 [ 923.258081][ T4403] ? __pfx_ksys_write+0x10/0x10 [ 923.258116][ T4403] do_syscall_64+0x166/0x520 [ 923.258138][ T4403] ? trace_irq_disable+0x3b/0x140 [ 923.258163][ T4403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.258185][ T4403] ? clear_bhb_loop+0x70/0xc0 [ 923.258213][ T4403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.258235][ T4403] RIP: 0033:0x7f9cc7b9f559 [ 923.258256][ T4403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.258275][ T4403] RSP: 002b:00007f9cc8a90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 923.258300][ T4403] RAX: ffffffffffffffda RBX: 00007f9cc7e25fa0 RCX: 00007f9cc7b9f559 [ 923.258316][ T4403] RDX: 000000000000001f RSI: 0000200000000240 RDI: 0000000000000003 [ 923.258330][ T4403] RBP: 00007f9cc8a90090 R08: 0000000000000000 R09: 0000000000000000 [ 923.258345][ T4403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.258359][ T4403] R13: 00007f9cc7e26038 R14: 00007f9cc7e25fa0 R15: 00007ffc3e438688 [ 923.258396][ T4403] [ 923.369530][ C1] net_ratelimit: 16 callbacks suppressed [ 923.369551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.370287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.370508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.371038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.371226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.371537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.371594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.371800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.371989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.449038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.451646][ T4450] netlink: 'syz.1.7862': attribute type 1 has an invalid length. [ 924.725500][ T4467] netlink: 'syz.1.7869': attribute type 1 has an invalid length. [ 925.622815][ T4514] netlink: 'syz.2.7880': attribute type 1 has an invalid length. [ 925.689958][ T4514] 8021q: adding VLAN 0 to HW filter on device bond4 [ 925.862623][ T4523] __nla_validate_parse: 7 callbacks suppressed [ 925.862680][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7883'. [ 925.974795][ T4527] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 926.168347][ T4538] syzkaller1: entered promiscuous mode [ 926.168373][ T4538] syzkaller1: entered allmulticast mode [ 926.272285][ T4543] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7889'. [ 926.481753][ T4551] bond5 (unregistering): Released all slaves [ 927.074129][ T4588] netlink: 'syz.1.7903': attribute type 12 has an invalid length. [ 927.109359][ T2376] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 927.113447][ T4589] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 927.174079][ T2376] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 927.205036][ T4593] netlink: 'syz.0.7904': attribute type 1 has an invalid length. [ 927.253418][ T4593] 8021q: adding VLAN 0 to HW filter on device bond7 [ 927.371890][ T4593] bond7: (slave dummy0): making interface the new active one [ 927.372946][ T4593] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 927.552665][ T4602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7906'. [ 927.818544][ T4612] FAULT_INJECTION: forcing a failure. [ 927.818544][ T4612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.818583][ T4612] CPU: 0 UID: 0 PID: 4612 Comm: syz.4.7909 Not tainted syzkaller #0 PREEMPT(full) [ 927.818609][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 927.818624][ T4612] Call Trace: [ 927.818634][ T4612] [ 927.818644][ T4612] dump_stack_lvl+0xe8/0x150 [ 927.818685][ T4612] should_fail_ex+0x410/0x560 [ 927.818729][ T4612] _copy_to_user+0x31/0xb0 [ 927.818766][ T4612] simple_read_from_buffer+0xe1/0x170 [ 927.818798][ T4612] proc_fail_nth_read+0x1bb/0x230 [ 927.818855][ T4612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 927.818900][ T4612] ? rw_verify_area+0x24a/0x4c0 [ 927.818928][ T4612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 927.818961][ T4612] vfs_read+0x213/0xa80 [ 927.818994][ T4612] ? __pfx___mutex_lock+0x10/0x10 [ 927.819020][ T4612] ? __pfx_vfs_read+0x10/0x10 [ 927.819049][ T4612] ? __fget_files+0x2a/0x420 [ 927.819072][ T4612] ? __fget_files+0x3a2/0x420 [ 927.819096][ T4612] ? __fget_files+0x2a/0x420 [ 927.819126][ T4612] ? fdget+0x1ac/0x250 [ 927.819160][ T4612] ksys_read+0x150/0x270 [ 927.819190][ T4612] ? __pfx_ksys_read+0x10/0x10 [ 927.819231][ T4612] do_syscall_64+0x166/0x520 [ 927.819254][ T4612] ? trace_irq_disable+0x3b/0x140 [ 927.819281][ T4612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.819305][ T4612] ? clear_bhb_loop+0x70/0xc0 [ 927.819333][ T4612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.819356][ T4612] RIP: 0033:0x7f068375fd8e [ 927.819378][ T4612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 927.819398][ T4612] RSP: 002b:00007f06819f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 927.819422][ T4612] RAX: ffffffffffffffda RBX: 00007f06819f66c0 RCX: 00007f068375fd8e [ 927.819439][ T4612] RDX: 000000000000000f RSI: 00007f06819f60a0 RDI: 0000000000000007 [ 927.819453][ T4612] RBP: 00007f06819f6090 R08: 0000000000000000 R09: 0000000000000000 [ 927.819467][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.819481][ T4612] R13: 00007f0683a26038 R14: 00007f0683a25fa0 R15: 00007fff9e6834f8 [ 927.819520][ T4612] [ 928.402018][ T4644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7918'. [ 928.409168][ C1] net_ratelimit: 65 callbacks suppressed [ 928.409192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.409239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.409460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.409517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.413733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.414327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.414848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.416825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.417340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.418968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.533750][ T4643] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7919'. [ 928.744916][ T4662] netlink: 'syz.3.7925': attribute type 1 has an invalid length. [ 928.744942][ T4662] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7925'. [ 928.811568][ T4665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7926'. [ 928.849042][ T4667] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7925'. [ 928.901641][ T4665] netlink: 'syz.2.7926': attribute type 10 has an invalid length. [ 928.927934][ T4665] team0: Device wg2 is of different type [ 929.302738][ T4687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7934'. [ 929.308699][ T4687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7934'. [ 929.630436][ T4706] syzkaller0: entered promiscuous mode [ 929.630462][ T4706] syzkaller0: entered allmulticast mode [ 930.136691][ T4730] netlink: 'syz.1.7943': attribute type 1 has an invalid length. [ 930.136719][ T4730] NCSI netlink: No device for ifindex 0 [ 930.762979][ T4767] netlink: 'syz.4.7949': attribute type 23 has an invalid length. [ 930.991412][ T4783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 930.991432][ T4783] IPv6: NLM_F_CREATE should be set when creating new route [ 930.991482][ T4783] IPv6: NLM_F_CREATE should be set when creating new route [ 930.991510][ T4783] IPv6: NLM_F_CREATE should be set when creating new route [ 931.033058][ T4783] netlink: 'syz.4.7952': attribute type 1 has an invalid length. [ 931.227994][ T4800] __nla_validate_parse: 6 callbacks suppressed [ 931.228018][ T4800] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7957'. [ 931.306048][ T4793] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7954'. [ 931.851000][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7968'. [ 932.002190][ T4840] IPVS: set_ctl: invalid protocol: 41 172.20.20.14:20001 [ 932.218102][ T4853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7976'. [ 932.324383][ T4860] dummy0: invalid flags given to default FDB implementation [ 932.324695][ T4861] dummy0: invalid flags given to default FDB implementation [ 932.435926][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7978'. [ 932.435951][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7978'. [ 932.436693][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7978'. [ 932.436713][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7978'. [ 932.555413][ T4872] netlink: 'syz.1.7981': attribute type 4 has an invalid length. [ 932.582516][ T4870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7979'. [ 932.693207][ T4880] x_tables: duplicate underflow at hook 3 [ 932.880834][ T4894] IPv6: NLM_F_REPLACE set, but no existing node found! [ 932.921780][ T4897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7987'. [ 932.948015][ T4897] bridge0: entered promiscuous mode [ 932.948042][ T4897] bridge0: entered allmulticast mode [ 932.982249][ T4897] team0: Port device bridge0 added [ 933.277436][ T4909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.321100][ T4905] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 933.449102][ C0] net_ratelimit: 70 callbacks suppressed [ 933.449126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.449176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.449293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.449746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.450727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.450887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.451234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.451423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.451594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.529742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.605333][ T4909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.641750][ T4926] bridge3: entered allmulticast mode [ 933.702576][ T4909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.799344][ T4909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.960061][ T2828] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.981359][ T2828] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.010275][ T2818] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.021094][ T2827] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.244519][ T4952] bridge4: entered allmulticast mode [ 934.393010][ T4970] virt_wifi0 speed is unknown, defaulting to 1000 [ 934.396212][ T4970] wg0 speed is unknown, defaulting to 1000 [ 934.951672][ T4996] sit0: entered promiscuous mode [ 934.977502][ T4996] netlink: 'syz.1.8013': attribute type 1 has an invalid length. [ 935.265584][ T5014] vxcan2: entered promiscuous mode [ 935.502416][ T5032] ebt_limit: overflow, try lower: 4278190080/255 [ 936.326341][ T5082] __nla_validate_parse: 20 callbacks suppressed [ 936.326367][ T5082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8036'. [ 936.642398][ T5098] syzkaller1: entered promiscuous mode [ 936.642424][ T5098] syzkaller1: entered allmulticast mode [ 936.891535][ T5109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8044'. [ 936.891578][ T5109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8044'. [ 937.267509][ T5125] pim6reg: entered allmulticast mode [ 937.274634][ T5125] pim6reg: left allmulticast mode [ 937.513941][ T5139] netlink: 'syz.4.8051': attribute type 1 has an invalid length. [ 937.513966][ T5139] netlink: 'syz.4.8051': attribute type 2 has an invalid length. [ 937.548158][ T5139] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8051'. [ 938.012397][ T5156] veth0: entered promiscuous mode [ 938.337155][ T5154] veth0: left promiscuous mode [ 938.488863][ C0] net_ratelimit: 32 callbacks suppressed [ 938.488885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.489090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.489168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.489756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.490309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.490575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.490826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.491241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.491452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.569558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.725341][ T5188] netlink: 'syz.1.8065': attribute type 1 has an invalid length. [ 938.831814][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8066'. [ 938.831841][ T5193] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8066'. [ 939.177142][ T5211] vlan0: entered promiscuous mode [ 939.383153][ T5212] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8069'. [ 939.437925][ T5219] x_tables: unsorted underflow at hook 1 [ 939.481033][ T5222] sctp: [Deprecated]: syz.4.8072 (pid 5222) Use of int in maxseg socket option. [ 939.481033][ T5222] Use struct sctp_assoc_value instead [ 939.753777][ T5204] infiniband syz1: set active [ 939.753891][ T5204] infiniband syz1: added syz_tun [ 939.770066][ T5204] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 939.777376][ T5204] infiniband syz1: Couldn't open port 1 [ 939.777653][ T5204] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 939.777688][ T5204] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 939.777729][ T5204] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 939.878900][ T5204] RDS/IB: syz1: added [ 939.878963][ T5204] smc: adding ib device syz1 with port count 1 [ 939.878984][ T5204] smc: ib device syz1 port 1 has no pnetid [ 939.937055][ T5238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 940.356785][ T5252] x_tables: duplicate underflow at hook 1 [ 940.534041][ T5261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8084'. [ 940.737996][ T5263] tipc: Started in network mode [ 940.738034][ T5263] tipc: Node identity ac14142f, cluster identity 4711 [ 940.738090][ T5263] tipc: Enabling of bearer rejected, failed to enable media [ 940.776470][ T5263] netlink: 'syz.2.8085': attribute type 1 has an invalid length. [ 940.776496][ T5263] netlink: 'syz.2.8085': attribute type 4 has an invalid length. [ 940.776512][ T5263] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8085'. [ 941.255512][ T5280] IPv6: sit3: Disabled Multicast RS [ 942.271884][ T5333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8107'. [ 942.271923][ T5333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8107'. [ 942.360003][ T5333] netlink: 'syz.2.8107': attribute type 83 has an invalid length. [ 942.404512][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8109'. [ 942.407957][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8109'. [ 942.722667][ T5344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8111'. [ 943.269396][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8119'. [ 943.397199][ T5373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8119'. [ 943.441479][ T5379] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8120'. [ 943.487962][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8122'. [ 943.529134][ C0] net_ratelimit: 22 callbacks suppressed [ 943.529158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.529330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.529370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.529873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.531017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.531260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.531761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.532006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.532236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.609366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.733112][ T5385] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 943.733135][ T5385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8125'. [ 943.733316][ T5385] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 943.733520][ T5385] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 943.733747][ T5385] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 943.733941][ T5385] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 943.734132][ T5385] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 943.734429][ T5385] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 943.734628][ T5385] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 943.738490][ T5385] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 943.754258][ T5385] netlink: 'syz.3.8125': attribute type 1 has an invalid length. [ 944.198179][ T5417] bond5 (unregistering): Released all slaves [ 946.459943][ T5511] vlan2: entered promiscuous mode [ 946.459969][ T5511] bond0: entered promiscuous mode [ 946.459985][ T5511] veth0_to_bond: entered promiscuous mode [ 946.991617][ T5547] syzkaller0: entered promiscuous mode [ 946.991644][ T5547] syzkaller0: entered allmulticast mode [ 947.324933][ T5561] __nla_validate_parse: 71 callbacks suppressed [ 947.324957][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8163'. [ 948.568993][ C0] net_ratelimit: 24 callbacks suppressed [ 948.569018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.569223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.569511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.569830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.570569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.570747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.570888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.571200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.571331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.649897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.338012][ T5592] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8170'. [ 952.362734][ T5592] x_tables: duplicate underflow at hook 2 [ 952.393583][ T5595] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8169'. [ 952.460946][ T5596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8169'. [ 952.552491][ T5608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8175'. [ 953.327832][ T5663] syzkaller0: entered promiscuous mode [ 953.327859][ T5663] syzkaller0: entered allmulticast mode [ 953.503883][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8187'. [ 953.507266][ T5670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8187'. [ 953.548536][ T5675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8187'. [ 953.558253][ T5673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8187'. [ 953.609206][ C1] net_ratelimit: 22 callbacks suppressed [ 953.609226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.609244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.609384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.609656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.610287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.611185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.611380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.611964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.612171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.612358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.067434][ T5717] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8195'. [ 954.067801][ T5717] 8021q: VLANs not supported on gre0 [ 954.328215][ T5734] validate_nla: 55 callbacks suppressed [ 954.328240][ T5734] netlink: 'syz.1.8199': attribute type 1 has an invalid length. [ 954.328258][ T5734] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8199'. [ 954.759510][ T3379] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 954.761706][ T5749] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 955.190765][ T5792] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 956.018053][ T5824] xt_limit: Overflow, try lower: 536871034/0 [ 956.508505][ T5846] veth1_macvtap: left promiscuous mode [ 956.975031][ T5863] netlink: 'syz.2.8228': attribute type 13 has an invalid length. [ 957.745731][ T5894] __nla_validate_parse: 10 callbacks suppressed [ 957.745757][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8232'. [ 957.871345][ T5898] xt_HMARK: proto mask must be zero with L3 mode [ 958.501358][ T5922] nbd0: detected capacity change from 0 to 63 [ 958.521303][ T5922] block nbd0: NBD_DISCONNECT [ 958.545525][ T1686] [ 958.547925][ T1686] ====================================================== [ 958.554989][ T1686] WARNING: possible circular locking dependency detected [ 958.562040][ T1686] syzkaller #0 Not tainted [ 958.566481][ T1686] ------------------------------------------------------ [ 958.573525][ T1686] kworker/1:1H/1686 is trying to acquire lock: [ 958.579697][ T1686] ffff8880773a4468 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 958.588730][ T1686] [ 958.588730][ T1686] but task is already holding lock: [ 958.596123][ T1686] ffff88808393e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 958.604625][ T1686] [ 958.604625][ T1686] which lock already depends on the new lock. [ 958.604625][ T1686] [ 958.615054][ T1686] [ 958.615054][ T1686] the existing dependency chain (in reverse order) is: [ 958.624096][ T1686] [ 958.624096][ T1686] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 958.631347][ T1686] __mutex_lock+0x197/0x15a0 [ 958.636500][ T1686] nbd_queue_rq+0xc1/0xff0 [ 958.641486][ T1686] blk_mq_dispatch_rq_list+0x499/0x1990 [ 958.647605][ T1686] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 958.650124][ C0] net_ratelimit: 1179 callbacks suppressed [ 958.650174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.650575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.651799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.684513][ T1686] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 958.691060][ T1686] blk_mq_run_work_fn+0x167/0x2f0 [ 958.696657][ T1686] process_scheduled_works+0xc3d/0x1630 [ 958.702761][ T1686] worker_thread+0xa47/0xfb0 [ 958.707911][ T1686] kthread+0x38b/0x480 [ 958.712536][ T1686] ret_from_fork+0x514/0xb70 [ 958.717763][ T1686] ret_from_fork_asm+0x1a/0x30 [ 958.723080][ T1686] [ 958.723080][ T1686] -> #5 (set->srcu){.+.+}-{0:0}: [ 958.730244][ T1686] __synchronize_srcu+0xca/0x2f0 [ 958.735740][ T1686] elevator_switch+0x1e8/0x7b0 [ 958.741067][ T1686] elevator_change+0x2fa/0x480 [ 958.746398][ T1686] elevator_set_default+0x375/0x440 [ 958.749514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.749921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.751634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.776410][ T1686] blk_register_queue+0x404/0x4f0 [ 958.782004][ T1686] __add_disk+0x6b8/0xdb0 [ 958.786911][ T1686] add_disk_fwnode+0x100/0x3a0 [ 958.792245][ T1686] nbd_dev_add+0x733/0xb60 [ 958.797219][ T1686] nbd_init+0x168/0x1f0 [ 958.801925][ T1686] do_one_initcall+0x250/0x870 [ 958.802795][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8241'. [ 958.802944][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8241'. [ 958.824945][ T1686] do_initcall_level+0x10a/0x1a0 [ 958.830449][ T1686] do_initcalls+0x59/0xa0 [ 958.835333][ T1686] kernel_init_freeable+0x29d/0x3e0 [ 958.841103][ T1686] kernel_init+0x22/0x1d0 [ 958.845988][ T1686] ret_from_fork+0x514/0xb70 [ 958.851138][ T1686] ret_from_fork_asm+0x1a/0x30 [ 958.856479][ T1686] [ 958.856479][ T1686] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 958.864336][ T1686] __mutex_lock+0x197/0x15a0 [ 958.869481][ T1686] elevator_change+0x1af/0x480 [ 958.874802][ T1686] elevator_set_none+0xb5/0x140 [ 958.880221][ T1686] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 958.886585][ T1686] nbd_start_device+0x189/0xb30 [ 958.891999][ T1686] nbd_genl_connect+0x167d/0x1cd0 [ 958.897588][ T1686] genl_family_rcv_msg_doit+0x233/0x340 [ 958.903693][ T1686] genl_rcv_msg+0x614/0x7a0 [ 958.908761][ T1686] netlink_rcv_skb+0x226/0x4a0 [ 958.914086][ T1686] genl_rcv+0x28/0x40 [ 958.918645][ T1686] netlink_unicast+0x8ef/0xa80 [ 958.923961][ T1686] netlink_sendmsg+0x7f0/0xb20 [ 958.929285][ T1686] sock_sendmsg_nosec+0x14e/0x190 [ 958.934866][ T1686] ____sys_sendmsg+0x54e/0x850 [ 958.940193][ T1686] ___sys_sendmsg+0x2a5/0x360 [ 958.945435][ T1686] __x64_sys_sendmsg+0x1b1/0x290 [ 958.950927][ T1686] do_syscall_64+0x166/0x520 [ 958.956073][ T1686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.962517][ T1686] [ 958.962517][ T1686] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 958.971168][ T1686] blk_alloc_queue+0x544/0x690 [ 958.976488][ T1686] __blk_mq_alloc_disk+0x194/0x390 [ 958.982158][ T1686] nbd_dev_add+0x494/0xb60 [ 958.987129][ T1686] nbd_init+0x168/0x1f0 [ 958.991830][ T1686] do_one_initcall+0x250/0x870 [ 958.997172][ T1686] do_initcall_level+0x10a/0x1a0 [ 959.002668][ T1686] do_initcalls+0x59/0xa0 [ 959.007551][ T1686] kernel_init_freeable+0x29d/0x3e0 [ 959.013307][ T1686] kernel_init+0x22/0x1d0 [ 959.018198][ T1686] ret_from_fork+0x514/0xb70 [ 959.023345][ T1686] ret_from_fork_asm+0x1a/0x30 [ 959.028662][ T1686] [ 959.028662][ T1686] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 959.035918][ T1686] fs_reclaim_acquire+0x71/0x100 [ 959.041439][ T1686] __kmalloc_cache_noprof+0x61/0x600 [ 959.047273][ T1686] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 959.053028][ T1686] tcp_sendmsg_locked+0x4d2b/0x53c0 [ 959.058804][ T1686] tcp_sendmsg+0x2f/0x50 [ 959.063645][ T1686] sock_sendmsg_nosec+0x10f/0x190 [ 959.069235][ T1686] __sys_sendto+0x408/0x5a0 [ 959.074308][ T1686] __x64_sys_sendto+0xde/0x100 [ 959.079648][ T1686] do_syscall_64+0x166/0x520 [ 959.084799][ T1686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.091251][ T1686] [ 959.091251][ T1686] -> #1 (sk_lock-AF_INET-NBD){+.+.}-{0:0}: [ 959.099288][ T1686] lock_sock_nested+0x41/0x100 [ 959.104619][ T1686] inet_shutdown+0x6a/0x390 [ 959.109693][ T1686] nbd_mark_nsock_dead+0x2cb/0x550 [ 959.115366][ T1686] recv_work+0x1cee/0x1e10 [ 959.120350][ T1686] process_scheduled_works+0xc3d/0x1630 [ 959.126499][ T1686] worker_thread+0xa47/0xfb0 [ 959.131655][ T1686] kthread+0x38b/0x480 [ 959.136277][ T1686] ret_from_fork+0x514/0xb70 [ 959.141409][ T1686] ret_from_fork_asm+0x1a/0x30 [ 959.146722][ T1686] [ 959.146722][ T1686] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 959.154403][ T1686] __lock_acquire+0x164c/0x2de0 [ 959.159816][ T1686] lock_acquire+0x115/0x350 [ 959.164877][ T1686] __mutex_lock+0x197/0x15a0 [ 959.170104][ T1686] nbd_queue_rq+0x373/0xff0 [ 959.175159][ T1686] blk_mq_dispatch_rq_list+0x499/0x1990 [ 959.181253][ T1686] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 959.188145][ T1686] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 959.194690][ T1686] blk_mq_run_work_fn+0x167/0x2f0 [ 959.200291][ T1686] process_scheduled_works+0xc3d/0x1630 [ 959.206396][ T1686] worker_thread+0xa47/0xfb0 [ 959.211547][ T1686] kthread+0x38b/0x480 [ 959.216168][ T1686] ret_from_fork+0x514/0xb70 [ 959.221313][ T1686] ret_from_fork_asm+0x1a/0x30 [ 959.226634][ T1686] [ 959.226634][ T1686] other info that might help us debug this: [ 959.226634][ T1686] [ 959.236884][ T1686] Chain exists of: [ 959.236884][ T1686] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 959.236884][ T1686] [ 959.248996][ T1686] Possible unsafe locking scenario: [ 959.248996][ T1686] [ 959.256473][ T1686] CPU0 CPU1 [ 959.261862][ T1686] ---- ---- [ 959.267249][ T1686] lock(&cmd->lock); [ 959.271265][ T1686] lock(set->srcu); [ 959.277703][ T1686] lock(&cmd->lock); [ 959.284239][ T1686] lock(&nsock->tx_lock); [ 959.288718][ T1686] [ 959.288718][ T1686] *** DEADLOCK *** [ 959.288718][ T1686] [ 959.296879][ T1686] locks held by kworker/1:1H/1686: 4, last CPU#1: [ 959.303314][ T1686] #0: ffff88801faf8148 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 959.314428][ T1686] #1: ffffc90005d9fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 959.327382][ T1686] #2: ffff8880284aa298 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x13f/0x2f0 [ 959.336850][ T1686] #3: ffff88808393e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 959.345787][ T1686] [ 959.345787][ T1686] stack backtrace: [ 959.351700][ T1686] CPU: 1 UID: 0 PID: 1686 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 959.361181][ T1686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 959.371263][ T1686] Workqueue: kblockd blk_mq_run_work_fn [ 959.376875][ T1686] Call Trace: [ 959.380187][ T1686] [ 959.383149][ T1686] dump_stack_lvl+0xe8/0x150 [ 959.387784][ T1686] print_circular_bug+0x2e2/0x300 [ 959.392867][ T1686] check_noncircular+0x12f/0x150 [ 959.397875][ T1686] __lock_acquire+0x164c/0x2de0 [ 959.402778][ T1686] lock_acquire+0x115/0x350 [ 959.407313][ T1686] ? nbd_queue_rq+0x373/0xff0 [ 959.412048][ T1686] __mutex_lock+0x197/0x15a0 [ 959.416676][ T1686] ? nbd_queue_rq+0x373/0xff0 [ 959.421405][ T1686] ? ret_from_fork_asm+0x1a/0x30 [ 959.426380][ T1686] ? unwind_next_frame+0x8f/0x2550 [ 959.431532][ T1686] ? nbd_queue_rq+0x373/0xff0 [ 959.436248][ T1686] ? __pfx___mutex_lock+0x10/0x10 [ 959.441324][ T1686] ? ret_from_fork_asm+0x1a/0x30 [ 959.446302][ T1686] ? stack_trace_save+0xa9/0x100 [ 959.451289][ T1686] ? __pfx_stack_trace_save+0x10/0x10 [ 959.456715][ T1686] nbd_queue_rq+0x373/0xff0 [ 959.461269][ T1686] ? __lock_acquire+0x1511/0x2de0 [ 959.466344][ T1686] ? __pfx_nbd_queue_rq+0x10/0x10 [ 959.471423][ T1686] blk_mq_dispatch_rq_list+0x499/0x1990 [ 959.477044][ T1686] ? sbitmap_get+0x229/0x390 [ 959.481681][ T1686] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 959.487703][ T1686] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 959.493553][ T1686] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 959.499930][ T1686] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 959.506746][ T1686] ? lock_acquire+0x115/0x350 [ 959.511462][ T1686] ? process_scheduled_works+0x97a/0x1630 [ 959.517229][ T1686] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 959.523262][ T1686] ? blk_mq_run_work_fn+0x13f/0x2f0 [ 959.528516][ T1686] blk_mq_run_work_fn+0x167/0x2f0 [ 959.533583][ T1686] ? process_scheduled_works+0x97a/0x1630 [ 959.539348][ T1686] process_scheduled_works+0xc3d/0x1630 [ 959.544946][ T1686] ? __pfx_process_scheduled_works+0x10/0x10 [ 959.550975][ T1686] ? assign_work+0x3cf/0x5d0 [ 959.555636][ T1686] worker_thread+0xa47/0xfb0 [ 959.560272][ T1686] ? __kthread_parkme+0x71/0x1f0 [ 959.565265][ T1686] kthread+0x38b/0x480 [ 959.569367][ T1686] ? __pfx_worker_thread+0x10/0x10 [ 959.574506][ T1686] ? __pfx_kthread+0x10/0x10 [ 959.579142][ T1686] ret_from_fork+0x514/0xb70 [ 959.583773][ T1686] ? __pfx_ret_from_fork+0x10/0x10 [ 959.588941][ T1686] ? __switch_to+0xc78/0x1410 [ 959.593656][ T1686] ? __pfx_kthread+0x10/0x10 [ 959.598292][ T1686] ret_from_fork_asm+0x1a/0x30 [ 959.603101][ T1686] [ 959.612028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.612612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.612712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.612836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.623522][ T5922] block nbd0: Disconnected due to user request. [ 959.623622][ T5922] block nbd0: shutting down sockets [ 959.631942][ T1686] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 959.632034][ T1686] Buffer I/O error on dev nbd0, logical block 0, async page read [ 959.636193][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 959.636284][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 959.636337][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 959.636378][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 959.652793][ T4957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 959.652829][ T4957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 959.652848][ T4957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 959.652864][ T4957] Buffer I/O error on dev nbd0, logical block 2, async page read [ 959.652879][ T4957] Buffer I/O error on dev nbd0, logical block 3, async page read [ 959.676710][ T4957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 959.676747][ T4957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 959.676765][ T4957] Buffer I/O error on dev nbd0, logical block 1, async page read [ 959.696886][ T4957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 959.698693][ T4957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 959.706812][ T4957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 959.718181][ T4957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 959.737698][ T5936] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 959.737930][ T5936] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 959.738360][ T5733] ldm_validate_partition_table(): Disk read failed. [ 959.746253][ T5733] Dev nbd0: unable to read RDB block 0 [ 959.753908][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8239'. [ 959.753961][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8239'. [ 959.766011][ T5733] nbd0: unable to read partition table [ 959.872968][ T5733] ldm_validate_partition_table(): Disk read failed. [ 959.882771][ T5733] Dev nbd0: unable to read RDB block 0 [ 959.904800][ T5733] nbd0: unable to read partition table [ 963.698847][ C0] net_ratelimit: 21 callbacks suppressed [ 963.698872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.699050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.699708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.768885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.769054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.769084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.769231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.769366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.769435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.769515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog