last executing test programs: 3.245210588s ago: executing program 4 (id=10370): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) syz_emit_ethernet(0x86, &(0x7f0000002bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f81fcb00503a00fc000000000000000000000000000000ff0200000000000000000000000000010400907800000000604aa1d300000000fc01000000000000000000000000000000000000000000000000ffff7f0000012b000400092802002f0004000c28fe0087000000000000003b00d614e3e1b099"], 0x0) listen(r0, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0xff00, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x3]}, 0x6) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x6, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) recvmmsg(r7, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) 3.19745313s ago: executing program 2 (id=10371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x4000040) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) (async) 1.894224333s ago: executing program 4 (id=10378): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x40000001) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec0883e000000000000000000000010ff020000000000000000000000000001"], 0x340a) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x18) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x6e22, 0x1000, @mcast1, 0x9}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x616581, 0x0) socket(0x5, 0x800, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/245, 0xf5}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x9200000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@getqdisc={0x28, 0x26, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xa}, {0xc, 0xffff}}, [{0x4}]}, 0x28}}, 0x20040084) 1.618267722s ago: executing program 2 (id=10380): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb4}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) 1.345039648s ago: executing program 2 (id=10387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000004100020000000061125000001a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.279308998s ago: executing program 1 (id=10388): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x6, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 1.272553589s ago: executing program 3 (id=10389): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0xc01, 0x3, 0x278, 0x0, 0x5002004a, 0x6, 0xd8, 0x3, 0x1e0, 0x3c8, 0x3c8, 0x1e0, 0x3c8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0xff, 'veth1_to_team\x00', 'veth0_vlan\x00', {}, {}, 0x16, 0x2, 0x20}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x3, 0x1403d88f, 0x809, '\x00', 'syz1\x00'}}}, {{@ip={@multicast2, @local, 0x0, 0xff, 'macvlan0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x62, 0x3, 0x42}, 0x0, 0xc0, 0x108, 0x0, {0x16000000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x1000006, {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 1.237916666s ago: executing program 2 (id=10390): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000004000000000800040001000000", 0x24) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.092126345s ago: executing program 2 (id=10392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000080601010000000000000000070000060500bcba466919dbcbba010007000000050001000700000005000100070000000900020073797a32000000000500010007000000a3a4c8e26e1638073ee7d14505000100070000000500010007000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000009c0), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @remote}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xe, 0x10}, {}, {0x10, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x2) close(r8) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="660000000002010400000000000000000a00000704000180040003803c0002802c00018014000300fe80000000000000000000000000003b1400040000000000000000000000ffffe00000020c0002800500010000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$netlink(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r14, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x38}}, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r12, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000041faafbed57cd369c5dfeaee5a27f651be530c8a3c9f8e9d6e25e9876472500c7c10ce162fc4b1ebfba014ae25b7884f2dbf38cb60c8010b0b1c6bb0b810e168a8088273187bb8377db2791a841d54dd", @ANYRES16=r14, @ANYBLOB="20002cbd7000fedbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fe8000000000000000000000000000bb7f0000010000000000000000000000000400000000000000000000000000000090f49abf21558bbe29d31853c11e72bfa1a8277d535e783931f8c88a0f9205308f724da1b6eb2b5f90bba1f0419b72d02f507eab86954d893c3a9e8fa8e959b05fdf5000e1", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000b46b6e00000000000000000000000000000000000a00100000000000000000000c0015000000000000000000"], 0xd8}}, 0x0) 1.090662295s ago: executing program 1 (id=10393): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, 0x0}}], 0x1, 0x4000c010) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.037647584s ago: executing program 3 (id=10394): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x168, 0x98, 0x0, 0x208, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x43}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x700}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x8, @multicast2, 0x4e23}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'vxcan1\x00', {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 1.037354305s ago: executing program 0 (id=10395): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) (async) sendto$inet(r0, &(0x7f0000000000)="c6", 0x1, 0x80, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f00000000c0)=0x101, 0x4) (async) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4b38ff, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000000c0)={{0x84, @dev={0xac, 0x14, 0x14, 0x41}, 0x4e24, 0x2, 'wlc\x00', 0x2, 0xf1d6e30, 0x5}, {@remote, 0x4e22, 0x2, 0x1, 0x81, 0x4}}, 0x44) (rerun: 32) 998.819723ms ago: executing program 1 (id=10396): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x600) 926.959897ms ago: executing program 3 (id=10397): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x168, 0x98, 0x0, 0x208, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x43}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x3d0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x8, @multicast2, 0x4e23}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'vxcan1\x00', {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 788.200482ms ago: executing program 0 (id=10398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80a, 0x0) sendto$x25(r1, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0x1, 0xffffffff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d40)={'ip6tnl0\x00', &(0x7f0000000cc0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x8, 0x8000, 0x4, @private2, @private1, 0x40, 0x20, 0x7, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000065c0)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000006600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006640)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000067c0)=0x0, &(0x7f0000006800)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000068c0)={'ip6gre0\x00', &(0x7f0000006840)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x1ff, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x40, 0x6, 0x10001}}) sendmmsg$inet(r2, &(0x7f0000006e80)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="ad4cd41a21905c2189987c1a4cebf11ccc309fb7259666e34a49647eead0d34a9bfb788f40d41cb431cecf5450208b403fc18586cf18f473352a4d6b5a3a41b28273f36488ee5cd984c90a37345d44ff88c18f90423487e6fc58ab5597546ffa6147a66f09271ab7dbd0c2118dd93cec77c8e62d", 0x74}], 0x1, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7042}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="514316327da10d58596f0320cf91944f341c9d4a7d0e6d0bc441667273b06cd50bfd750df7677f85790afc17a6a641938e0ecc5156f4683e2abd738a99fb122de40af6cc9a74d94c44759d5a652d8963235f826f8389c208293ca427a1664ea92cf6faee40b78b837c354ca3f706248e2f13cfd7f0fbf0b21e857373651469885fc02861f8ecc43b8b2ef06d1aff62124bc93b91534caedc2ffdcc354794e5d37a1770878549ad2cea71cad7dc431cb453a9122f10dc8a2be4bedfe06dc892faff418d203e1f215a489906d9f02659f8356c21188deb81ef18b64374334949", 0xdf}, {&(0x7f0000000440)="b7dabb539986a96ad917f631ef847e9cb99e6ade1abf26e789338da8", 0x1c}, {&(0x7f0000000480)="6dc9542a187a73a7ae0adce09567c8749c569e9d6d7279a1269b6210e2d1ac0e55af4dcc9de56e74c7214697cd4a8d672102f8285da618f5b9c27e61e4f801fe93d0732456304271a7d8d46cd8d1bc5ff2f123339b0fb5ba652a0b89d6086379f925b3fc841a25cd34487da34fd421afdd0d046e167258ab180b384fd2e963761bd0850c24ba064991b735e493a7160345fb4d7f33d8407821d85b7e6389ae7ff8f750d3b98e446d5b55d852b6", 0xad}, {&(0x7f0000000540)="982cb9986d408bab974b99c584773b694ed02562142b7f86177abe541b15671520d1ea42c7b89d759484f8f5bc56f9b05a0387fcd734e56e038617becf45c2edcef0d48eed2169daf98b655735f2740a4eb5ae119f08672b8022", 0x5a}, {&(0x7f00000005c0)="1bae26365b262daee184aadc0b4edb69", 0x10}, {&(0x7f0000000600)="b6d1de849ac51dcf397b0a5c712a781b177cc905a76ea87f01a05d330e9631baf6b777fd9ec5315267f2038029bdc1284282fe04c2c1ae010beb2e802ab7220076256ec441f36825bd85fa9d1d253d7f1644a3c16a8fde66", 0x58}, {&(0x7f0000000680)="2d0f24df1f25ea056ced9cec63a730b1df91657871426d27797462e5c4bc1c5131f6c08c20fa1296c1597f1cb5167b3e8808c7ac0e01687ada96c1b7801183f73ea05f418755876d7023f0bdc0f83b42a0e913a74f3826c02152c64a05f98adfd2bea374283d81c9d6070243cc65019ff757cea2c2ecec56d3aab364e23a38cdaba4a3bfd95e56751d3c1a0cdaa5d067a874ea451d1d7ec68a9ccaed260a619092790a1befb45799454f082a1db1b5fb7535628c637acf5ec90589de", 0xbc}], 0x7, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xfb, 0x0, 0x6, [0x0, 0xf]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xd8, 0x1, 0x2, [{@multicast2, 0x9}, {@rand_addr=0x64010102, 0x4}]}, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x0, 0xb, "9d8b01211e13631206"}, {0x1, 0x2}, {0x0, 0x5, "aab6d4"}, {0x6, 0x6, "82e02104"}, {0x2, 0x5, "65fff4"}, {0x7, 0x5, "12c10f"}, {0x7, 0xa, "9bd5cb308b14894d"}, {0x7, 0xf, "590fdbbd2f6f727ad4a7ba238a"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="064e9ab93cbf0f61ef20bf38128a83c135fe580517eee25ec7c5a3263e96ec20af5394ee43e0dab51b5105a0c8b5aba8e0203bc19e9960fdec7dbea2a9aab8cc2e13e76601cb35feebf7e15a2a6c7f9968bc8685a780253e0709119fbe6fcd81969d638422a6c05e7f896c3ba5818fc7ea12a18b17c45af803df45685ac33519dd", 0x81}, {&(0x7f0000000940)="34995da2548bce0acb7c0707e7e54c0ff869b8af50580447e5ad4c1fa95782b8981bb2294358f89828a6bb5399bba68e41ba533f59b7df78ca11b3e125b397a481e288243934f807dabe223acfeb57ead776cf8ed321c29285bb366bf2e1340a9bc5e320cfde43057c0f1c7a02bfcb2f4737a648c01dccf80e60663307f5a2cdb94c5a7cccfd91e0e34a88ca2e145002", 0x90}, {&(0x7f0000000a00)="d0197032422f512ae202bd53df728711d31b87bdde68de7fffc8fe8bbaae6533a0ff214a907f9b734f1d085dbd8a75a16341b8e3c042a102876ef1ffd3bcd576e962ce321927d6102258411adcfbc5bc3f4ae2aee2", 0x55}, {&(0x7f0000000a80)="b7c7b4bbe14aac428b4ca594cecb38fa9ae3dac6f8245d1363222190fb63d0f897a541c6b3effd9fe780299e7bba1f23d6bf7cb83e461608e6c764b11ddf74d0de3477cc17d9ee3310155c349317d4e2a7bfc9ad3c3b573a88a8b5c3c6448df8a60de409ab685d1944b9c8f5189db72eec6e611abbfb181ea8927aaa3cd00e33d3f7f302521dffd7e9b27503699713e7b0de0e0180c1c5e25d1c4db95d80386319548608bf14ea1d69b64eddb2e5f7dbf40ad5480568330b115e0539c0697664ecf22252add5f66b8c6ff052ed6a7d68cc898a1e48ed94408cafdbde79fff21648f7d72c", 0xe4}], 0x4, &(0x7f0000000bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}}, {{&(0x7f0000000c00)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000c40)="b04731cbde238304ee09ed78f387930a5ca2fec224625edc51455d8377e0daba", 0x20}], 0x1, &(0x7f0000000d80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x300}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xfd, [@rand_addr=0x64010101, @local, @loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x40}]}, @timestamp={0x44, 0x18, 0x7d, 0x0, 0x0, [0x4, 0x2, 0xf, 0x3, 0x2]}, @noop, @noop, @ssrr={0x89, 0x2b, 0x65, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @rand_addr=0x64010102}}}], 0xa8}}, {{&(0x7f0000000e40)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="129924f09d18dc4247f32ec9518a51733c339cc25cb803042ee407d560b53616c39b6f0f6987b097c92cb22c977d6c96a62b9bdb0fb65e7b99533fd2421d1163668973409473c45f522380d5fefb7d07746b9e72b65cd6fd6dcce19cb1fa712f05f34e9e1d9bad0a9e65383495354a280c160d03b4dd7f642bb2f0a0fce191bb355ed69a7c026d48e4b277b289c5525b98500357f151c9", 0x97}, {&(0x7f0000003c00)="0dd744c4e26530d959740540142cb76b672c987622a76b13d7fa777d3d9fa3de3b7fa52746ee25ae40a61e440bfb765b75ec018e2ade3483a9c5f9", 0x3b}], 0x3}}, {{&(0x7f0000003c80)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000006080)=[{&(0x7f0000003cc0)="2e010b3ef043dc90f983c5df664f26741591d641919cbdb370262182a762e3efa80fc098504405fbd70c2a8f0a53c5c7e3b17b94d30c9e7327d69d63feb8fbae3b37a8aaeaf1227f84ab37cf5f59d7f7f818d4945dcbd11157b942b524a236d67b1ce484d77a7390b9a845c893ff3fa7cfd6de04833fe04791a24f347e21ec071e6657934407873522b21b1be30e206e1b672e0de5c78267aba07666b72f", 0x9e}, {&(0x7f0000003d80)="a5afcea73a935217ff2f99517b3363bb2cb274ce8bb5d93bf13d381e9c8ebdcb64c15e8b128a745d617ae9b24182045a45d91c4ce3ad43bcce70bac82dd31e941bc2d833d6f20b209f070768c483b01597f5390d02cdbc5b94dc4cd433d93455f6acbc057456025201851b899d848c1b52f5c3225577c28da125b52852ef12e6ad2b5326cd51bb5ca6ac94d80e6e948630fa2e026571fbeda8a0d667bd04c440fc05a454e7f60d908349ad8fc2f47570b87071d71b3942bebb393e2ca865d32d51401fd32af36b91d92af6c89233bbcc5ab8e15c460b9228cc416ab830171cea17", 0xe1}, {&(0x7f0000003e80)="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", 0x1000}, {&(0x7f0000004e80)="fbb001ad63c4ab3f", 0x8}, {&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f0000005ec0)}, {&(0x7f0000005f00)="9915869aa4632e87d682de336530b89903a134870c3ee4d8fe9735fda4323b998639ebb14500b9d812a1af619e7f762b93af51aeab1a481b85e1b9b0233fb526fd4fa762153ba8c512fe40017836c23550e0b6c8ede313c9f19e5aed214aacf8d8e7e0e8a4fd3470aca847e725db31ee025ffd298ee86b2e9136ece0a67022403a371fbf30996e5963cdd3bce40de226612d589fd6000949fc8ab2fc15ec2dbae8f78e3d43464d0bba7762044ab999579e5f9496321424033c", 0xb9}, {&(0x7f0000005fc0)="34957cfe4be868f6c02d93e6e504fa462f216cae637c24551fbe8159a81f4402d62813a7655e66ca92705b0183f1efdb8ff693540ba862b0f8754abeb13124b6bd530e59b22125af1f96732b934c64c92d6bb778d7e66cc7eadb50cbe1058d6c88da22f00605a6e74b104120fb9465bcd7c8342b982f9ee3a1537c7997704c61a6f50d951beff58dd45120f7", 0x8c}], 0x8, &(0x7f0000006100)=[@ip_retopts={{0x60, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x42, [@loopback, @private=0xa010101, @empty, @remote, @local, @broadcast, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xde, 0x1, 0x3, [{@remote, 0x4}, {@empty, 0x3b}, {@private=0xa010100, 0xf0eb}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x98}}, {{&(0x7f00000061c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000006380)=[{&(0x7f0000006200)="562b97fde685831150763b658cb6151eb55270f3510d2636fa2190e9b5f64a9157e638d17ed7af31415ce5e39a73e593eb07639332537e5c9c76", 0x3a}, {&(0x7f0000006240)="6380bc11407824657ca48b7e45c9d7e49335d9bd1650686c9cd9c87d50e789337f382fbef5f6c4cc1dca348519219c53110383d4ec0a7cbf19bff0f1e9460499ca4b5eb568405e9043489a0dfa3b4d25e191303ad48a76d915912913b954a99e49106e70f47122465415eac53f1a9306f8062a9ace78330c7bab2b954d037ad8c0f3", 0x82}, {&(0x7f0000006300)="9ecd3493a5bba7faf15a7af5305d02992a40362fa1f82cc292a0b078a3b2e2304c09fb5a028ac314fa48a8255c85a7619b944c7ace25eb0e4c170aae0f59441988be7ec1417bfbf7de81e7abfa109e24ff54e1f368a9737dceda3c8dc05f1b40046c09", 0x63}], 0x3, &(0x7f00000063c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x48}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x25, 0x0, 0x0, [0x0, 0x1, 0x5, 0x3bbe534a, 0x6, 0x3, 0x6, 0x3]}, @lsrr={0x83, 0x17, 0x2c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @remote, @multicast1]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f00000064c0)="30185f3bf5ae8b306905592ef90e894183f4defe3459747fc10b1bd9da018840478543904e2ae1eab10179047415078b705b7b6fbd22588209450c0f19c73fb9174e549dcc46e900ef08d26ee24d9909baa5d5f295f9ad894e79cf97c94c7d6cd8b63bf3c2f746913e612adcae136becc5f35b97097e9b95fadde2f833a5cf4a854b", 0x82}], 0x1, &(0x7f0000006680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x98db}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xd8}}, {{&(0x7f0000006780)={0x2, 0x4e20, @local}, 0x10, 0xfffffffffffffffe, 0x0, &(0x7f0000006900)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x64, [@rand_addr=0x64010100]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xab, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x0, 0x10, "7d84861bea239c84ac8871908ef5"}, {0x0, 0x8, "9d84956cdd0a"}, {0x7, 0xe, "9d538bf268ebbd80016a289e"}, {0x1, 0xb, "0ce436164a6ea71e40"}, {0x6, 0xf, "b96e8474757159c3efaafa5ccc"}, {0x0, 0x2}]}, @timestamp={0x44, 0x14, 0xc, 0x0, 0xe, [0x2, 0xc, 0x0, 0x3]}, @timestamp_prespec={0x44, 0x44, 0x71, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x44}, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x101}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x3ff}, {@remote, 0x4}, {@multicast1, 0x5}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x7}]}, @ra={0x94, 0x4}]}}}], 0x180}}, {{&(0x7f0000006a80)={0x2, 0x8000, @private=0xa010100}, 0x10, &(0x7f0000006c80)=[{&(0x7f0000006ac0)="172edd558fe01452c26a96981eacc0d809c0eb1a3b", 0x15}, {&(0x7f0000006b00)="78e2b3f3a23819a6655488c29ae4f80757f8fb6fc302e7be1424f8217611054269932c81345ee86779f85202f2be3c6182b024c367295aebd8c16e97649573737f875f", 0x43}, {&(0x7f0000006b80)="9d9cc977136d5352a74d9dd6682ecfb274db4d9d7a174b30effc6657f571266cc98a7d7c71dd21deee60aa", 0x2b}, {&(0x7f0000006bc0)="a154b2c1abe8c0a0795ce0413ec7cadd53f9e6c7e4c152811c8bbd855cd539444d7c721fc77a871d941413ff390e66621d7ebd337f2975daea6a5a9460e558e4a311a987b1da4d9321cf15e04c22dbc719c62ef4a4c5772860258d65ea1602765a4c7813789e205ae1d1b9022144539e95ed1f0428946dd01c9b6817b6c92dd3f7bcf334dbc40aefca07f3cf2df37e4b4e1f11b5b5381f5c6e0a3a22fac5b9412e7ed548cb826db09737e1052044ead77e9c636a5d553968e69cfd8238", 0xbd}], 0x4, &(0x7f0000006cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14}}, @ip_retopts={{0xec, 0x0, 0x7, {[@generic={0x89, 0x2}, @ssrr={0x89, 0x13, 0x59, [@multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x11}]}, @rr={0x7, 0x17, 0x9e, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @cipso={0x86, 0x1c, 0x2, [{0x1, 0x4, "8802"}, {0x6, 0x3, "b2"}, {0x0, 0x7, "d80c51509c"}, {0x0, 0x8, "3bafd363a419"}]}, @rr={0x7, 0xf, 0xd, [@private=0xa010101, @rand_addr=0x64010101, @multicast2]}, @noop, @timestamp_addr={0x44, 0x44, 0x7a, 0x1, 0x9, [{@remote, 0x6}, {@loopback, 0x7ff}, {@multicast1, 0x5}, {@local, 0x10000}, {@remote, 0x6}, {@local, 0xff}, {@local, 0xffffffff}, {@private=0xa010102, 0x191}]}, @timestamp_addr={0x44, 0x1c, 0xf5, 0x1, 0x7, [{@multicast1, 0xae6}, {@multicast2, 0xa}, {@local, 0x4}]}, @ssrr={0x89, 0x13, 0xd8, [@remote, @multicast1, @local, @empty]}, @rr={0x7, 0xf, 0xf1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x7f}, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x198}}], 0xa, 0x40c1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@dellinkprop={0x20, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x4b904}}, 0x20}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001b00)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="0c0005006c010000000000000c000200ff", @ANYRESOCT=r11], 0x7c}, 0x1, 0x0, 0x0, 0x20001814}, 0x20000000) 787.883807ms ago: executing program 1 (id=10399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x2004c8a0}, 0x20008084) 785.104798ms ago: executing program 4 (id=10400): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x12, 0xffffffffffffffff, 0x91081000) 675.703369ms ago: executing program 3 (id=10401): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffc}, 0x1c) 646.972278ms ago: executing program 1 (id=10402): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305002100000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 645.801767ms ago: executing program 0 (id=10403): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@remote, @rand_addr=0x64010101, 0x1b, 0x6}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r3, r2, 0x80000001, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x51060000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000240)={r3, &(0x7f0000000140)=',:%\x00', 0x12482, &(0x7f0000000180)={@align=0x6, {0x4, 0x3, 0x80000001, 0x9}}, 0x8, &(0x7f00000001c0), &(0x7f0000000200)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@remote, @rand_addr=0x64010101, 0x1b, 0x6}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000000)) (async) tee(r3, r2, 0x80000001, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x51060000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000240)={r3, &(0x7f0000000140)=',:%\x00', 0x12482, &(0x7f0000000180)={@align=0x6, {0x4, 0x3, 0x80000001, 0x9}}, 0x8, &(0x7f00000001c0), &(0x7f0000000200)}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) 585.44863ms ago: executing program 4 (id=10404): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1003}, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xffff, @local, 0xfffffffd}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) 559.839915ms ago: executing program 3 (id=10405): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) r4 = socket(0x10, 0x803, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000340)=@ethtool_channels={0x3d, 0x9, 0x5, 0x7, 0x0, 0x0, 0xe7, 0x101, 0x66e}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r5, 0xcfa3e000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x7) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030428bd7800fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="46060900001701001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB="38fad65873e9042db887d6ee5e3cc65f2affd9df238f94b2bfc9fdb49981e1de2586ef0f236b4cc9cec14dbff01591225e35f4f238f2"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 471.996905ms ago: executing program 4 (id=10406): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, 0x0}}], 0x1, 0x4000c010) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 381.915276ms ago: executing program 0 (id=10407): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0100001a00330625bd7000fddbdf25fe8800000000000000000000000000010000000000000000000000000000000180ff00004e238001000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc020000000000000000000000000001230300000000000001000000000000000700000000000000fdffffffffffffff0c00000000000000be9200000000000006000000000000000000000000000000000000000000000000000400000000000000000000000000fffffffffffffffffbffffff0400000009ca000025bd7000ff3400000a00010009000000000000001c00040001004e214e240000e000000100000000000000000000000048000200"], 0x19c}, 0x1, 0x0, 0x0, 0x44000840}, 0x0) 320.596846ms ago: executing program 0 (id=10408): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2004c047}, 0x8040841) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f300000000040000000002000000000000001400", "e73400", "000000d900"}, 0x38) 241.454668ms ago: executing program 0 (id=10409): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x5e311441f19b61bb) r2 = socket(0x1, 0x80802, 0x0) shutdown(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) r4 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0xb, 0x8, 0x6}}]}}}]}, 0x5c}}, 0x0) sendto$packet(r6, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) syz_emit_ethernet(0xbe, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x88, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x1, "22ec00000000"}, {0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}, {0x18, 0x2, "d46193484019ea65ebb449fc1b8a"}]}}}}}}, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="d80000001200010026bd7000fddbdf25110e09784e204e240800000000000000010000000200000001000000dc0300000100000004000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f05070000080000008a00010023bcc19c8c123b58771a9d54194273f30eedc8f982d4887aa93f6e11b1abd737bab341c31e6bb32805a9f261878fbdb4f1fb089f28a576a871ed9c589a292774ce05ba0394eba042ff3b65965d885d36b484cdc0ceb47de661b7dec9954313da0e4ebd65c39d381511ca186602a857d6e22773d4b67f53b6a82be45a9f84a1c0146f08780000"], 0xd8}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000380), 0x0}, 0x20) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000480)={0x0, 0xe}) 142.278874ms ago: executing program 4 (id=10410): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009000100"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000305b0100140003006e657464657673696d3000000000000034001680300001802c000c8014000100070000004c0400000900000088a800001400016e75040000530700000600000088a8000008"], 0x70}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (fail_nth: 8) 73.513006ms ago: executing program 2 (id=10411): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x86dd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000}, 0x50) 47.769921ms ago: executing program 1 (id=10412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x2004c8a0}, 0x20008084) 0s ago: executing program 3 (id=10413): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x800) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.0.9409'. [ 1173.172923][ T4943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1173.183691][ T4943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1173.197778][ T4943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1173.224166][ T4943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1173.238048][ T4943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1173.294045][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1173.329154][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.355660][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1173.383731][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.733205][ T4255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9412'. [ 1174.120784][ T4272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9419'. [ 1174.539297][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1174.583743][ T4247] lo speed is unknown, defaulting to 1000 [ 1174.610967][ T4247] lo speed is unknown, defaulting to 1000 [ 1174.862332][ T10] net_ratelimit: 4 callbacks suppressed [ 1174.862356][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.182779][ T365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.419867][ T5643] Bluetooth: hci4: command tx timeout [ 1175.431179][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9432'. [ 1175.475100][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.483038][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.490643][ T4247] bridge_slave_0: entered allmulticast mode [ 1175.502128][ T4247] bridge_slave_0: entered promiscuous mode [ 1175.513623][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.526265][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.533960][ T4247] bridge_slave_1: entered allmulticast mode [ 1175.542912][ T4247] bridge_slave_1: entered promiscuous mode [ 1175.628350][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.647288][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.731058][ T4247] team0: Port device team_slave_0 added [ 1175.744643][ T4247] team0: Port device team_slave_1 added [ 1175.751705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.788675][ T4337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9435'. [ 1175.807861][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9436'. [ 1175.821979][T27910] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1175.833515][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.886931][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.905121][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.941118][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.989944][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.015119][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.033925][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.065188][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.154077][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9439'. [ 1176.170009][ T4346] ip6gre1: entered promiscuous mode [ 1176.176613][ T4346] ip6gre1: entered allmulticast mode [ 1176.243850][ T4351] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 1176.290139][ T4247] hsr_slave_0: entered promiscuous mode [ 1176.297437][ T4247] hsr_slave_1: entered promiscuous mode [ 1176.306826][ T4247] debugfs: 'hsr0' already exists in 'hsr' [ 1176.314831][ T4247] Cannot create hsr debugfs directory [ 1176.321441][ T4351] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1176.379733][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.410396][ T4362] netlink: 840 bytes leftover after parsing attributes in process `syz.0.9444'. [ 1176.550956][ T4364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9445'. [ 1176.679566][ T4368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1176.967517][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9453'. [ 1177.059082][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.101197][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.293413][ T4247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1177.305535][ T4247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.344471][ T4388] tipc: Started in network mode [ 1177.359327][ T4388] tipc: Node identity ac14142f, cluster identity 4711 [ 1177.379447][ T4388] tipc: New replicast peer: 0.0.224.0 [ 1177.397250][ T4388] tipc: Enabled bearer , priority 10 [ 1177.507411][ T5643] Bluetooth: hci4: command tx timeout [ 1177.676735][ T4402] netlink: 'syz.4.9459': attribute type 11 has an invalid length. [ 1177.686603][ T4247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1177.719609][ T4247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.766837][T27910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.006866][ T4247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1178.056610][ T4247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.192090][ T4412] xt_hashlimit: max too large, truncated to 1048576 [ 1178.341586][ T4247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1178.356824][ T4247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.510090][ T10] tipc: Node number set to 2886997039 [ 1178.783097][ T4431] __nla_validate_parse: 1 callbacks suppressed [ 1178.783114][ T4431] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9469'. [ 1179.579575][ T5643] Bluetooth: hci4: command tx timeout [ 1179.642521][ T4437] sctp: [Deprecated]: syz.0.9474 (pid 4437) Use of int in maxseg socket option. [ 1179.642521][ T4437] Use struct sctp_assoc_value instead [ 1179.909573][ C0] net_ratelimit: 5 callbacks suppressed [ 1179.909591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.141769][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.455808][ T4391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1180.470164][ T4429] netlink: 'syz.2.9469': attribute type 4 has an invalid length. [ 1180.499593][ T4429] netlink: 240 bytes leftover after parsing attributes in process `syz.2.9469'. [ 1180.587157][ T4247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1180.611455][ T4247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1180.621827][ T4247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1180.650678][ T4247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1180.687081][ T4449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9479'. [ 1180.754977][ T4247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1180.776744][ T4247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1180.802083][ T4247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1180.849378][ T4247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1180.864136][ T4452] openvswitch: netlink: Flow key attr not present in new flow. [ 1180.937522][ T4462] netlink: 'syz.0.9482': attribute type 2 has an invalid length. [ 1180.983937][ T4464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9483'. [ 1181.163138][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.179736][ T369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.232361][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.287339][T27914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.294702][T27914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.309929][ T4478] netlink: 'syz.1.9487': attribute type 4 has an invalid length. [ 1181.358725][ T4479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1181.407858][ T4483] netlink: 'syz.1.9487': attribute type 4 has an invalid length. [ 1181.439874][T27914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.447531][T27914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.580922][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.584285][T27914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.659581][ T5643] Bluetooth: hci4: command tx timeout [ 1181.686142][ T4488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9489'. [ 1182.224632][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.423834][ T4511] FAULT_INJECTION: forcing a failure. [ 1182.423834][ T4511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.439012][ T4511] CPU: 1 UID: 0 PID: 4511 Comm: syz.4.9494 Not tainted syzkaller #0 PREEMPT(full) [ 1182.439059][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1182.439072][ T4511] Call Trace: [ 1182.439081][ T4511] [ 1182.439090][ T4511] dump_stack_lvl+0xe8/0x150 [ 1182.439122][ T4511] should_fail_ex+0x412/0x560 [ 1182.439155][ T4511] _copy_from_user+0x2d/0xb0 [ 1182.439188][ T4511] __copy_msghdr+0x3c5/0x5b0 [ 1182.439216][ T4511] ___sys_sendmsg+0x213/0x360 [ 1182.439239][ T4511] ? __lock_acquire+0x6b5/0x2cf0 [ 1182.439267][ T4511] ? __pfx____sys_sendmsg+0x10/0x10 [ 1182.439327][ T4511] ? __fget_files+0x2a/0x420 [ 1182.439362][ T4511] ? __fget_files+0x3a0/0x420 [ 1182.439398][ T4511] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1182.439425][ T4511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1182.439459][ T4511] ? __pfx_ksys_write+0x10/0x10 [ 1182.439499][ T4511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.439522][ T4511] do_syscall_64+0x15f/0xf80 [ 1182.439541][ T4511] ? trace_irq_disable+0x3b/0x140 [ 1182.439572][ T4511] ? clear_bhb_loop+0x40/0x90 [ 1182.439596][ T4511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.439617][ T4511] RIP: 0033:0x7f0976f9ce59 [ 1182.439635][ T4511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.439653][ T4511] RSP: 002b:00007f0977de9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1182.439675][ T4511] RAX: ffffffffffffffda RBX: 00007f0977215fa0 RCX: 00007f0976f9ce59 [ 1182.439691][ T4511] RDX: 0000000004004004 RSI: 0000200000000140 RDI: 0000000000000004 [ 1182.439705][ T4511] RBP: 00007f0977de9090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.439718][ T4511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.439731][ T4511] R13: 00007f0977216038 R14: 00007f0977215fa0 R15: 00007ffc3d51c618 [ 1182.439761][ T4511] [ 1182.646234][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.878657][T27908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.935280][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.990561][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9496'. [ 1183.097583][ T4247] veth0_vlan: entered promiscuous mode [ 1183.147495][ T4247] veth1_vlan: entered promiscuous mode [ 1183.166298][ T4527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1183.208277][ T4527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.252470][ T4247] veth0_macvtap: entered promiscuous mode [ 1183.302136][ T4247] veth1_macvtap: entered promiscuous mode [ 1183.407605][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.444933][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.481759][T27908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.513706][T27908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.542974][T27908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.574050][T27908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.910777][T14855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.935171][T14855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.058613][T14855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.074648][T14855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.502596][ T4571] netlink: 'syz.3.9512': attribute type 4 has an invalid length. [ 1184.658711][ T4577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9515'. [ 1184.891178][ T4943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1184.913279][ T4943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1184.922800][ T4943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1184.943293][ T4943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1184.957209][ T4943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1184.961199][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9516'. [ 1185.340959][ T369] net_ratelimit: 5 callbacks suppressed [ 1185.340982][ T369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.383924][ T4601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1185.498379][ T4608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9522'. [ 1185.613026][ T4581] lo speed is unknown, defaulting to 1000 [ 1185.635663][ T4581] lo speed is unknown, defaulting to 1000 [ 1185.659979][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.908194][ T4623] FAULT_INJECTION: forcing a failure. [ 1185.908194][ T4623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.948279][ T4623] CPU: 0 UID: 0 PID: 4623 Comm: syz.2.9528 Not tainted syzkaller #0 PREEMPT(full) [ 1185.948309][ T4623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1185.948323][ T4623] Call Trace: [ 1185.948331][ T4623] [ 1185.948340][ T4623] dump_stack_lvl+0xe8/0x150 [ 1185.948372][ T4623] should_fail_ex+0x412/0x560 [ 1185.948416][ T4623] _copy_from_user+0x2d/0xb0 [ 1185.948454][ T4623] ____sys_sendmsg+0x308/0x9f0 [ 1185.948484][ T4623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1185.948514][ T4623] ? import_iovec+0x73/0xa0 [ 1185.948548][ T4623] ___sys_sendmsg+0x2a5/0x360 [ 1185.948568][ T4623] ? __lock_acquire+0x6b5/0x2cf0 [ 1185.948594][ T4623] ? __pfx____sys_sendmsg+0x10/0x10 [ 1185.948623][ T4623] ? kstrtouint+0x6e/0xe0 [ 1185.948678][ T4623] ? __fget_files+0x2a/0x420 [ 1185.948704][ T4623] ? __fget_files+0x3a0/0x420 [ 1185.948741][ T4623] __sys_sendmmsg+0x27c/0x4e0 [ 1185.948772][ T4623] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1185.948794][ T4623] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1185.948844][ T4623] ? ksys_write+0x242/0x270 [ 1185.948877][ T4623] ? __pfx_ksys_write+0x10/0x10 [ 1185.948934][ T4623] __x64_sys_sendmmsg+0xa0/0xc0 [ 1185.948957][ T4623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.948979][ T4623] do_syscall_64+0x15f/0xf80 [ 1185.948999][ T4623] ? trace_irq_disable+0x3b/0x140 [ 1185.949035][ T4623] ? clear_bhb_loop+0x40/0x90 [ 1185.949061][ T4623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.949081][ T4623] RIP: 0033:0x7f2d4359ce59 [ 1185.949102][ T4623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.949119][ T4623] RSP: 002b:00007f2d444b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1185.949141][ T4623] RAX: ffffffffffffffda RBX: 00007f2d43815fa0 RCX: 00007f2d4359ce59 [ 1185.949156][ T4623] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: 0000000000000003 [ 1185.949169][ T4623] RBP: 00007f2d444b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.949181][ T4623] R10: 00000000000008f5 R11: 0000000000000246 R12: 0000000000000001 [ 1185.949193][ T4623] R13: 00007f2d43816038 R14: 00007f2d43815fa0 R15: 00007ffd49561ec8 [ 1185.949226][ T4623] [ 1185.999613][ T4624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9527'. [ 1186.203441][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9527'. [ 1186.380928][ T369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.489807][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9535'. [ 1186.541480][ T4648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1186.963282][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.979332][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.988293][ T4581] bridge_slave_0: entered allmulticast mode [ 1187.012118][ T4581] bridge_slave_0: entered promiscuous mode [ 1187.024192][ T5643] Bluetooth: hci1: command tx timeout [ 1187.034169][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.058916][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.076253][ T4581] bridge_slave_1: entered allmulticast mode [ 1187.091196][ T4581] bridge_slave_1: entered promiscuous mode [ 1187.270148][ T4581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.340896][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.341202][ T4581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.535488][ T4581] team0: Port device team_slave_0 added [ 1187.682973][ T4581] team0: Port device team_slave_1 added [ 1188.015037][T27914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.021341][ T4581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.070267][ T4581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.127865][ T4581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.145597][ T4581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.171745][ T4581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.241539][ T4581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.290989][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9546'. [ 1188.450282][ T4713] netlink: 'syz.1.9550': attribute type 15 has an invalid length. [ 1188.463618][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.469274][ T4713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9550'. [ 1188.496504][ T4581] hsr_slave_0: entered promiscuous mode [ 1188.504950][ T4581] hsr_slave_1: entered promiscuous mode [ 1188.520219][ T4581] debugfs: 'hsr0' already exists in 'hsr' [ 1188.530790][ T4581] Cannot create hsr debugfs directory [ 1188.537938][ T4716] batadv_slave_0: entered promiscuous mode [ 1188.650840][ T4713] batadv_slave_0: left promiscuous mode [ 1188.703697][ T365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.803395][ T4725] netlink: 'syz.1.9553': attribute type 4 has an invalid length. [ 1188.866211][ T4725] netlink: 'syz.1.9553': attribute type 4 has an invalid length. [ 1189.095636][ T4581] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.110661][ T5643] Bluetooth: hci1: command tx timeout [ 1189.213789][ T4581] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.260286][T27914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.395112][ T4741] netlink: 'syz.0.9559': attribute type 20 has an invalid length. [ 1189.417936][ T4581] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.500006][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.592145][ T4581] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.549717][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.180376][T27908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.181477][ T365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.190861][ T5643] Bluetooth: hci1: command tx timeout [ 1191.197556][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.579758][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.820832][ T365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.006126][ T4730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1192.054161][ T4581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1192.091241][ T4581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1192.151095][ T4581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1192.234524][ T4581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1192.270937][ T4581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1192.283291][ T4762] FAULT_INJECTION: forcing a failure. [ 1192.283291][ T4762] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.312567][ T4581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1192.312746][ T4762] CPU: 1 UID: 0 PID: 4762 Comm: syz.2.9566 Not tainted syzkaller #0 PREEMPT(full) [ 1192.312770][ T4762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1192.312782][ T4762] Call Trace: [ 1192.312790][ T4762] [ 1192.312799][ T4762] dump_stack_lvl+0xe8/0x150 [ 1192.312828][ T4762] should_fail_ex+0x412/0x560 [ 1192.312859][ T4762] should_failslab+0xa8/0x100 [ 1192.312890][ T4762] __kmalloc_noprof+0xe8/0x760 [ 1192.312917][ T4762] ? sock_kmalloc+0xd6/0x160 [ 1192.312945][ T4762] sock_kmalloc+0xd6/0x160 [ 1192.312969][ T4762] ____sys_sendmsg+0x1c2/0x9f0 [ 1192.312999][ T4762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1192.313039][ T4762] ? import_iovec+0x73/0xa0 [ 1192.313071][ T4762] ___sys_sendmsg+0x2a5/0x360 [ 1192.313091][ T4762] ? __lock_acquire+0x6b5/0x2cf0 [ 1192.313117][ T4762] ? __pfx____sys_sendmsg+0x10/0x10 [ 1192.313172][ T4762] ? __fget_files+0x2a/0x420 [ 1192.313194][ T4762] ? __fget_files+0x3a0/0x420 [ 1192.313226][ T4762] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1192.313250][ T4762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1192.313280][ T4762] ? __pfx_ksys_write+0x10/0x10 [ 1192.313316][ T4762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.313338][ T4762] do_syscall_64+0x15f/0xf80 [ 1192.313357][ T4762] ? trace_irq_disable+0x3b/0x140 [ 1192.313384][ T4762] ? clear_bhb_loop+0x40/0x90 [ 1192.313407][ T4762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.313426][ T4762] RIP: 0033:0x7f2d4359ce59 [ 1192.313455][ T4762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.313472][ T4762] RSP: 002b:00007f2d444b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1192.313494][ T4762] RAX: ffffffffffffffda RBX: 00007f2d43815fa0 RCX: 00007f2d4359ce59 [ 1192.313508][ T4762] RDX: 0000000004004004 RSI: 0000200000000140 RDI: 0000000000000004 [ 1192.313520][ T4762] RBP: 00007f2d444b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.313532][ T4762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.313543][ T4762] R13: 00007f2d43816038 R14: 00007f2d43815fa0 R15: 00007ffd49561ec8 [ 1192.313575][ T4762] [ 1192.506434][ T4767] netlink: 'syz.3.9569': attribute type 27 has an invalid length. [ 1192.596049][ T4581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1192.619905][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.636782][ T4581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1192.750629][ T4781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9570'. [ 1192.834587][ T4769] xt_hashlimit: max too large, truncated to 1048576 [ 1193.115129][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.123436][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.259566][ T5643] Bluetooth: hci1: command tx timeout [ 1193.300125][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.308065][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.660679][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.703319][ T4581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.734899][T27911] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.817349][T27911] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.894309][T27911] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.907053][T27911] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.949386][ T4581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.989612][T27912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.996993][T27912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.074643][T27912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.081892][T27912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.106383][ T4816] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 1194.119268][ T4816] netlink: 'syz.0.9580': attribute type 61 has an invalid length. [ 1194.127624][ T4816] netlink: 'syz.0.9580': attribute type 62 has an invalid length. [ 1194.220172][ T4822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9583'. [ 1194.556727][ T30] audit: type=1804 audit(1779427092.451:15): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9586" name="/newroot/137/cgroup.controllers" dev="tmpfs" ino=711 res=1 errno=0 [ 1194.623449][ T30] audit: type=1800 audit(1779427092.451:16): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9586" name="cgroup.controllers" dev="tmpfs" ino=711 res=0 errno=0 [ 1195.381752][ T4581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.474560][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9596'. [ 1195.752396][ T370] net_ratelimit: 4 callbacks suppressed [ 1195.752418][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.042713][ T4581] veth0_vlan: entered promiscuous mode [ 1196.076999][ T4581] veth1_vlan: entered promiscuous mode [ 1196.182211][ T4581] veth0_macvtap: entered promiscuous mode [ 1196.211573][ T4581] veth1_macvtap: entered promiscuous mode [ 1196.219462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.228774][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.283427][ T4581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.331535][ T4581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.368984][T27911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.394991][ T4902] xt_hashlimit: max too large, truncated to 1048576 [ 1196.408120][T27911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.455105][ T4901] macsec1: entered allmulticast mode [ 1196.482699][ T4901] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 1196.511680][T27911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.526019][T27911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.581626][ T4906] lo speed is unknown, defaulting to 1000 [ 1196.632695][ T4909] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1196.674537][ T4906] lo speed is unknown, defaulting to 1000 [ 1196.783548][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.829307][ T4913] netlink: 'syz.0.9614': attribute type 8 has an invalid length. [ 1196.839931][T27910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.858481][T27910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.942823][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.034963][T27911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.061561][T27911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.113623][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.247248][ T4930] netlink: 'syz.2.9620': attribute type 1 has an invalid length. [ 1197.260725][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.442728][ T4935] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1197.459107][ T4935] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1197.466875][ T4949] ip6t_srh: unknown srh invflags 4000 [ 1197.483921][ T4935] bond2: (slave vxcan3): making interface the new active one [ 1197.494444][ T4935] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 1197.535134][ T4931] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1197.551184][ T4931] bond2: (slave vxcan5): Enslaving as a backup interface with an up link [ 1197.572038][ T4951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9623'. [ 1197.827650][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.931238][ T4966] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1197.941843][T23110] IPVS: starting estimator thread 0... [ 1198.049316][ T4970] IPVS: using max 25 ests per chain, 60000 per kthread [ 1198.308059][ T4984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.483440][ T4987] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9632'. [ 1199.766176][ T5011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9643'. [ 1199.775855][ T5011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9643'. [ 1199.864591][ T5015] netlink: 'syz.2.9645': attribute type 1 has an invalid length. [ 1199.918594][ T5017] netlink: 'syz.2.9646': attribute type 1 has an invalid length. [ 1199.947065][ T5017] bond3: entered promiscuous mode [ 1199.953422][ T5017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1200.203890][ T4926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1200.214552][ T4937] netlink: 'syz.4.9514': attribute type 11 has an invalid length. [ 1200.401317][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9647'. [ 1200.427601][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9647'. [ 1200.454386][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9647'. [ 1200.602159][ T5032] FAULT_INJECTION: forcing a failure. [ 1200.602159][ T5032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.646383][ T5032] CPU: 0 UID: 0 PID: 5032 Comm: syz.3.9651 Not tainted syzkaller #0 PREEMPT(full) [ 1200.646419][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1200.646431][ T5032] Call Trace: [ 1200.646439][ T5032] [ 1200.646447][ T5032] dump_stack_lvl+0xe8/0x150 [ 1200.646475][ T5032] should_fail_ex+0x412/0x560 [ 1200.646508][ T5032] _copy_from_user+0x2d/0xb0 [ 1200.646539][ T5032] ____sys_sendmsg+0x308/0x9f0 [ 1200.646572][ T5032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1200.646604][ T5032] ? import_iovec+0x73/0xa0 [ 1200.646634][ T5032] ___sys_sendmsg+0x2a5/0x360 [ 1200.646651][ T5032] ? __lock_acquire+0x6b5/0x2cf0 [ 1200.646673][ T5032] ? __pfx____sys_sendmsg+0x10/0x10 [ 1200.646756][ T5032] ? __fget_files+0x2a/0x420 [ 1200.646779][ T5032] ? __fget_files+0x3a0/0x420 [ 1200.646812][ T5032] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1200.646839][ T5032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1200.646872][ T5032] ? __pfx_ksys_write+0x10/0x10 [ 1200.646911][ T5032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.646934][ T5032] do_syscall_64+0x15f/0xf80 [ 1200.646955][ T5032] ? trace_irq_disable+0x3b/0x140 [ 1200.646986][ T5032] ? clear_bhb_loop+0x40/0x90 [ 1200.647013][ T5032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.647033][ T5032] RIP: 0033:0x7f835d59ce59 [ 1200.647055][ T5032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.647074][ T5032] RSP: 002b:00007f835e514028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.647097][ T5032] RAX: ffffffffffffffda RBX: 00007f835d815fa0 RCX: 00007f835d59ce59 [ 1200.647113][ T5032] RDX: 0000000004004004 RSI: 0000200000000140 RDI: 0000000000000004 [ 1200.647126][ T5032] RBP: 00007f835e514090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.647140][ T5032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.647153][ T5032] R13: 00007f835d816038 R14: 00007f835d815fa0 R15: 00007fffc09aa048 [ 1200.647189][ T5032] [ 1201.098982][T23126] net_ratelimit: 8 callbacks suppressed [ 1201.099004][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.272546][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9658'. [ 1201.421441][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.554182][ T5059] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9663'. [ 1201.709894][ T5066] IPv6: Can't replace route, no match found [ 1201.946885][ T5080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1202.060398][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.069535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.121481][ T5086] netlink: 'syz.4.9672': attribute type 21 has an invalid length. [ 1202.131161][ T5086] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9672'. [ 1202.144883][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.154066][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.166576][ T5086] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9672'. [ 1202.374075][ T5093] netlink: 'syz.0.9676': attribute type 11 has an invalid length. [ 1202.486488][ T5096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.657791][ T5106] gre1: entered allmulticast mode [ 1202.722328][ T5108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.018182][ T5119] netlink: 'syz.2.9687': attribute type 21 has an invalid length. [ 1203.181254][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.543850][ T5146] netlink: 'syz.2.9698': attribute type 12 has an invalid length. [ 1203.682279][ T5156] __nla_validate_parse: 9 callbacks suppressed [ 1203.682302][ T5156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9701'. [ 1203.840821][ T5156] syzkaller0: entered promiscuous mode [ 1203.865852][ T5156] syzkaller0: entered allmulticast mode [ 1203.907477][ T5169] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9701'. [ 1204.013744][ T5171] xt_hashlimit: overflow, try lower: 6/0 [ 1204.128758][ T5174] netlink: 42 bytes leftover after parsing attributes in process `syz.1.9706'. [ 1206.294310][ T5133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1206.305797][T23119] net_ratelimit: 14 callbacks suppressed [ 1206.305814][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.322031][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.523353][ T5189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9712'. [ 1206.542246][ T365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.571788][ T5196] netlink: 'syz.1.9713': attribute type 3 has an invalid length. [ 1206.649906][ T5200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9713'. [ 1206.703884][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.746096][ T5197] netlink: 'syz.4.9716': attribute type 2 has an invalid length. [ 1206.792696][ T5206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9717'. [ 1206.954570][ T5214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9717'. [ 1206.991582][ T5220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1207.083590][ T5210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1207.085216][ T5224] netlink: 'syz.0.9726': attribute type 4 has an invalid length. [ 1207.110163][ T5210] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1207.130420][ T5214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1207.172288][ T5219] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9722'. [ 1207.173209][ T5230] netlink: 'syz.0.9726': attribute type 4 has an invalid length. [ 1207.193205][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.194225][ T5219] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1207.206613][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.346291][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.357585][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.459589][ T5241] tipc: Started in network mode [ 1207.478477][ T5241] tipc: Node identity 4, cluster identity 4711 [ 1207.492362][ T5241] tipc: Node number set to 4 [ 1207.514576][ T5241] FAULT_INJECTION: forcing a failure. [ 1207.514576][ T5241] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.529450][ T5241] CPU: 0 UID: 0 PID: 5241 Comm: syz.3.9728 Not tainted syzkaller #0 PREEMPT(full) [ 1207.529480][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1207.529493][ T5241] Call Trace: [ 1207.529502][ T5241] [ 1207.529511][ T5241] dump_stack_lvl+0xe8/0x150 [ 1207.529544][ T5241] should_fail_ex+0x412/0x560 [ 1207.529577][ T5241] should_failslab+0xa8/0x100 [ 1207.529611][ T5241] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1207.529638][ T5241] ? kasan_quarantine_put+0xbb/0x1f0 [ 1207.529668][ T5241] ? __alloc_skb+0x1d0/0x7d0 [ 1207.529695][ T5241] __alloc_skb+0x1d0/0x7d0 [ 1207.529722][ T5241] tipc_msg_create+0x51/0x4d0 [ 1207.529761][ T5241] tipc_group_create_event+0x1f3/0x660 [ 1207.529797][ T5241] ? __pfx_tipc_group_create_event+0x10/0x10 [ 1207.529864][ T5241] tipc_sk_proto_rcv+0x25b/0x17d0 [ 1207.529892][ T5241] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.529928][ T5241] ? unwind_next_frame+0xa6/0x2550 [ 1207.529963][ T5241] ? __pfx_tipc_sk_proto_rcv+0x10/0x10 [ 1207.529992][ T5241] ? unwind_next_frame+0x50/0x2550 [ 1207.530018][ T5241] ? tipc_sk_filtering+0x13c/0x510 [ 1207.530051][ T5241] tipc_sk_filter_rcv+0x312d/0x3370 [ 1207.530094][ T5241] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.530129][ T5241] ? look_up_lock_class+0x57/0x110 [ 1207.530153][ T5241] ? register_lock_class+0x31/0x2e0 [ 1207.530181][ T5241] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.530223][ T5241] ? tipc_sk_lookup+0xb5/0x920 [ 1207.530248][ T5241] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 1207.530292][ T5241] ? tipc_sk_rcv+0x741/0x2b40 [ 1207.530327][ T5241] tipc_sk_rcv+0x87d/0x2b40 [ 1207.530392][ T5241] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 1207.530434][ T5241] ? tipc_loopback_trace+0x48/0x1b0 [ 1207.530471][ T5241] ? __raw_spin_lock_init+0x45/0x100 [ 1207.530506][ T5241] tipc_node_xmit+0x202/0xf10 [ 1207.530550][ T5241] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1207.530579][ T5241] ? kasan_save_free_info+0x46/0x50 [ 1207.530602][ T5241] ? __kasan_slab_free+0x5c/0x80 [ 1207.530630][ T5241] ? kfree+0x1c5/0x640 [ 1207.530653][ T5241] ? tipc_group_delete+0x3c2/0x4c0 [ 1207.530674][ T5241] ? tipc_release+0x3f7/0x2580 [ 1207.530699][ T5241] ? sock_close+0xc3/0x240 [ 1207.530723][ T5241] ? __fput+0x44f/0xa60 [ 1207.530746][ T5241] ? fput_close_sync+0x11f/0x240 [ 1207.530769][ T5241] ? __x64_sys_close+0x7e/0x110 [ 1207.530794][ T5241] ? do_syscall_64+0x15f/0xf80 [ 1207.530814][ T5241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.530866][ T5241] tipc_node_distr_xmit+0x2d8/0x400 [ 1207.530899][ T5241] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 1207.530934][ T5241] ? kfree+0x1c5/0x640 [ 1207.530957][ T5241] ? tipc_group_delete+0x3c2/0x4c0 [ 1207.530975][ T5241] ? tipc_group_proto_xmit+0x278/0x790 [ 1207.531004][ T5241] tipc_group_delete+0x3fa/0x4c0 [ 1207.531036][ T5241] ? __pfx_tipc_group_delete+0x10/0x10 [ 1207.531067][ T5241] ? tipc_release+0xc4/0x2580 [ 1207.531108][ T5241] ? tipc_group_self+0x26/0x1c0 [ 1207.531132][ T5241] tipc_release+0x3f7/0x2580 [ 1207.531175][ T5241] ? __pfx_tipc_release+0x10/0x10 [ 1207.531204][ T5241] ? down_write+0x16d/0x200 [ 1207.531229][ T5241] ? __pfx_down_write+0x10/0x10 [ 1207.531249][ T5241] ? locks_remove_posix+0x14f/0x6a0 [ 1207.531291][ T5241] sock_close+0xc3/0x240 [ 1207.531319][ T5241] ? __pfx_sock_close+0x10/0x10 [ 1207.531344][ T5241] __fput+0x44f/0xa60 [ 1207.531384][ T5241] fput_close_sync+0x11f/0x240 [ 1207.531410][ T5241] ? __pfx_fput_close_sync+0x10/0x10 [ 1207.531440][ T5241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.531465][ T5241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.531487][ T5241] __x64_sys_close+0x7e/0x110 [ 1207.531512][ T5241] do_syscall_64+0x15f/0xf80 [ 1207.531531][ T5241] ? trace_irq_disable+0x3b/0x140 [ 1207.531561][ T5241] ? clear_bhb_loop+0x40/0x90 [ 1207.531586][ T5241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.531606][ T5241] RIP: 0033:0x7f835d59ce59 [ 1207.531629][ T5241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.531645][ T5241] RSP: 002b:00007f835e514028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1207.531670][ T5241] RAX: ffffffffffffffda RBX: 00007f835d815fa0 RCX: 00007f835d59ce59 [ 1207.531685][ T5241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1207.531697][ T5241] RBP: 00007f835e514090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.531708][ T5241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.531720][ T5241] R13: 00007f835d816038 R14: 00007f835d815fa0 R15: 00007fffc09aa048 [ 1207.531755][ T5241] [ 1207.553961][ T5248] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9731'. [ 1207.747900][ T5252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9733'. [ 1207.823296][T27908] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1208.350784][ T5275] gretap0: entered promiscuous mode [ 1208.369585][ T5275] macvlan2: entered allmulticast mode [ 1208.393077][ T5275] gretap0: entered allmulticast mode [ 1208.624922][ T5276] bridge0: port 3(ipvlan2) entered blocking state [ 1208.662732][ T5276] bridge0: port 3(ipvlan2) entered disabled state [ 1208.702055][ T5276] ipvlan2: entered allmulticast mode [ 1208.719290][ T5276] bridge0: entered allmulticast mode [ 1208.748702][ T5276] ipvlan2: left allmulticast mode [ 1208.766827][ T5276] bridge0: left allmulticast mode [ 1208.854932][ T5306] __nla_validate_parse: 3 callbacks suppressed [ 1208.854954][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9745'. [ 1209.099928][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1209.633368][ T5324] Cannot find set identified by id 65534 to match [ 1209.636910][ T5326] netlink: 'syz.0.9749': attribute type 25 has an invalid length. [ 1209.670195][ T5326] netlink: 'syz.0.9749': attribute type 3 has an invalid length. [ 1209.685686][ T5326] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9749'. [ 1209.750259][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9750'. [ 1209.837767][ T5336] netlink: 'syz.0.9752': attribute type 1 has an invalid length. [ 1209.847853][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9751'. [ 1209.875503][ T5336] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9752'. [ 1210.109903][ T5351] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9755'. [ 1210.272908][ T5360] netlink: 'syz.2.9760': attribute type 27 has an invalid length. [ 1210.408383][ T5366] lo speed is unknown, defaulting to 1000 [ 1210.417514][ T5366] lo speed is unknown, defaulting to 1000 [ 1210.653811][ T5367] xt_hashlimit: max too large, truncated to 1048576 [ 1211.005506][ T5377] netlink: 37 bytes leftover after parsing attributes in process `syz.1.9762'. [ 1211.308517][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9768'. [ 1211.323056][ T5389] FAULT_INJECTION: forcing a failure. [ 1211.323056][ T5389] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.354429][ T5389] CPU: 1 UID: 0 PID: 5389 Comm: syz.1.9768 Not tainted syzkaller #0 PREEMPT(full) [ 1211.354460][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1211.354474][ T5389] Call Trace: [ 1211.354483][ T5389] [ 1211.354494][ T5389] dump_stack_lvl+0xe8/0x150 [ 1211.354526][ T5389] should_fail_ex+0x412/0x560 [ 1211.354563][ T5389] should_failslab+0xa8/0x100 [ 1211.354598][ T5389] __kmalloc_cache_noprof+0x88/0x660 [ 1211.354626][ T5389] ? __pfx_stack_trace_save+0x10/0x10 [ 1211.354661][ T5389] ? rtnl_newlink+0x136/0x1bb0 [ 1211.354688][ T5389] rtnl_newlink+0x136/0x1bb0 [ 1211.354711][ T5389] ? kasan_save_track+0x3e/0x80 [ 1211.354738][ T5389] ? kasan_save_free_info+0x46/0x50 [ 1211.354760][ T5389] ? __kasan_slab_free+0x5c/0x80 [ 1211.354789][ T5389] ? dev_hard_start_xmit+0x2cd/0x830 [ 1211.354813][ T5389] ? __dev_queue_xmit+0x14d9/0x3950 [ 1211.354836][ T5389] ? __netlink_deliver_tap+0x5ad/0x850 [ 1211.354859][ T5389] ? netlink_deliver_tap+0x19c/0x1b0 [ 1211.354881][ T5389] ? netlink_unicast+0x730/0x8e0 [ 1211.354899][ T5389] ? netlink_sendmsg+0x813/0xb40 [ 1211.354924][ T5389] ? __pfx_rtnl_newlink+0x10/0x10 [ 1211.354954][ T5389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.355015][ T5389] ? kasan_quarantine_put+0xbb/0x1f0 [ 1211.355043][ T5389] ? lockdep_hardirqs_on+0x7a/0x110 [ 1211.355068][ T5389] ? nlmon_xmit+0xb0/0x100 [ 1211.355096][ T5389] ? kmem_cache_free+0x182/0x650 [ 1211.355138][ T5389] ? __lock_acquire+0x6b5/0x2cf0 [ 1211.355168][ T5389] ? __dev_queue_xmit+0x2b6/0x3950 [ 1211.355197][ T5389] ? __local_bh_enable_ip+0xd0/0x130 [ 1211.355230][ T5389] ? lockdep_hardirqs_on+0x7a/0x110 [ 1211.355250][ T5389] ? __dev_queue_xmit+0x2b6/0x3950 [ 1211.355273][ T5389] ? __local_bh_enable_ip+0xd0/0x130 [ 1211.355293][ T5389] ? __dev_queue_xmit+0x2b6/0x3950 [ 1211.355326][ T5389] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1211.355375][ T5389] ? __pfx_rtnl_newlink+0x10/0x10 [ 1211.355407][ T5389] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1211.355443][ T5389] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1211.355474][ T5389] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1211.355504][ T5389] ? ref_tracker_free+0x693/0x840 [ 1211.355537][ T5389] ? __pfx_ref_tracker_free+0x10/0x10 [ 1211.355579][ T5389] netlink_rcv_skb+0x232/0x4b0 [ 1211.355604][ T5389] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1211.355639][ T5389] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1211.355678][ T5389] ? netlink_deliver_tap+0x2e/0x1b0 [ 1211.355701][ T5389] ? netlink_deliver_tap+0x2e/0x1b0 [ 1211.355731][ T5389] netlink_unicast+0x75c/0x8e0 [ 1211.355765][ T5389] netlink_sendmsg+0x813/0xb40 [ 1211.355800][ T5389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1211.355829][ T5389] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1211.355861][ T5389] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1211.355895][ T5389] ____sys_sendmsg+0x972/0x9f0 [ 1211.355920][ T5389] ? __might_fault+0xaf/0x130 [ 1211.355955][ T5389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1211.355988][ T5389] ? import_iovec+0x73/0xa0 [ 1211.356024][ T5389] ___sys_sendmsg+0x2a5/0x360 [ 1211.356047][ T5389] ? __lock_acquire+0x6b5/0x2cf0 [ 1211.356075][ T5389] ? __pfx____sys_sendmsg+0x10/0x10 [ 1211.356138][ T5389] ? __fget_files+0x2a/0x420 [ 1211.356165][ T5389] ? __fget_files+0x3a0/0x420 [ 1211.356202][ T5389] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1211.356239][ T5389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1211.356274][ T5389] ? __pfx_ksys_write+0x10/0x10 [ 1211.356314][ T5389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.356338][ T5389] do_syscall_64+0x15f/0xf80 [ 1211.356358][ T5389] ? trace_irq_disable+0x3b/0x140 [ 1211.356390][ T5389] ? clear_bhb_loop+0x40/0x90 [ 1211.356417][ T5389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.356438][ T5389] RIP: 0033:0x7fb121b9ce59 [ 1211.356460][ T5389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.356479][ T5389] RSP: 002b:00007fb122a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1211.356504][ T5389] RAX: ffffffffffffffda RBX: 00007fb121e15fa0 RCX: 00007fb121b9ce59 [ 1211.356519][ T5389] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1211.356532][ T5389] RBP: 00007fb122a47090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.356545][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.356557][ T5389] R13: 00007fb121e16038 R14: 00007fb121e15fa0 R15: 00007ffffb74e428 [ 1211.356593][ T5389] [ 1211.792007][T23119] net_ratelimit: 21 callbacks suppressed [ 1211.792029][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.836921][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.242419][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9770'. [ 1212.262853][ T5407] syzkaller0: entered promiscuous mode [ 1212.268692][ T5400] netlink: 'syz.0.9770': attribute type 1 has an invalid length. [ 1212.274529][ T5407] syzkaller0: entered allmulticast mode [ 1212.295097][ T5410] ip6gre1: entered promiscuous mode [ 1212.316330][ T5410] ip6gre1: entered allmulticast mode [ 1212.316342][T27914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.341063][ T5400] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9770'. [ 1212.423445][ T5407] tipc: Enabled bearer , priority 0 [ 1212.440933][ T5412] pim6reg1: entered promiscuous mode [ 1212.453810][ T5412] pim6reg1: entered allmulticast mode [ 1212.485808][ T5405] tipc: Resetting bearer [ 1212.601936][ T5405] tipc: Disabling bearer [ 1212.718203][ T5419] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1212.826418][ T30] audit: type=1804 audit(1779427110.721:17): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9779" name="/newroot/184/cgroup.controllers" dev="tmpfs" ino=956 res=1 errno=0 [ 1212.862277][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.871113][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.877482][ T30] audit: type=1800 audit(1779427110.751:18): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9779" name="cgroup.controllers" dev="tmpfs" ino=956 res=0 errno=0 [ 1212.979174][ T30] audit: type=1804 audit(1779427110.761:19): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9779" name="/newroot/184/cgroup.controllers" dev="tmpfs" ino=956 res=1 errno=0 [ 1213.448534][ T5452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1213.479409][ T5456] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1213.582325][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1213.594995][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.609206][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.673614][ T5460] netlink: 'syz.1.9792': attribute type 4 has an invalid length. [ 1213.681438][ T5462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.682387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.758354][ T5460] netlink: 'syz.1.9792': attribute type 4 has an invalid length. [ 1213.776172][ T5464] ip6gre1: entered promiscuous mode [ 1213.786173][ T5464] ip6gre1: entered allmulticast mode [ 1213.885969][ T5474] __nla_validate_parse: 6 callbacks suppressed [ 1213.885994][ T5474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9798'. [ 1213.977890][ T5478] Cannot find add_set index 0 as target [ 1214.093417][ T5485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9803'. [ 1214.126660][ T5485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9803'. [ 1214.185754][ T5490] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9805'. [ 1214.201055][ T5490] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9805'. [ 1214.317434][ T5492] bond3: Removing last ns target with arp_interval on [ 1215.621815][ T5540] bridge2: entered promiscuous mode [ 1215.643492][ T5540] bridge2: entered allmulticast mode [ 1215.666759][ T5540] team0: Port device bridge2 added [ 1215.771280][ T5540] bridge3: entered promiscuous mode [ 1215.782439][ T5540] bridge3: entered allmulticast mode [ 1215.816703][ T5540] team0: Port device bridge3 added [ 1215.853449][ T5548] macsec1: entered promiscuous mode [ 1216.038969][ T5557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9826'. [ 1216.056834][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9827'. [ 1216.077966][ T5559] ipvlan2: entered allmulticast mode [ 1216.083511][ T5559] gretap0: entered allmulticast mode [ 1216.317106][ T5564] lo speed is unknown, defaulting to 1000 [ 1216.324452][ T5564] lo speed is unknown, defaulting to 1000 [ 1216.954433][ T5568] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9829'. [ 1217.021040][ T369] net_ratelimit: 15 callbacks suppressed [ 1217.021064][ T369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.035739][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.099748][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.429896][T27915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.738329][ T5571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1217.782676][ T5573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9831'. [ 1217.792237][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9831'. [ 1217.804924][ T5573] netlink: 'syz.4.9831': attribute type 1 has an invalid length. [ 1218.062280][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.071810][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.253135][ T5529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1218.528399][ T5587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.873166][ T5603] FAULT_INJECTION: forcing a failure. [ 1218.873166][ T5603] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.912602][ T5603] CPU: 1 UID: 0 PID: 5603 Comm: syz.4.9843 Not tainted syzkaller #0 PREEMPT(full) [ 1218.912635][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1218.912648][ T5603] Call Trace: [ 1218.912657][ T5603] [ 1218.912668][ T5603] dump_stack_lvl+0xe8/0x150 [ 1218.912699][ T5603] should_fail_ex+0x412/0x560 [ 1218.912736][ T5603] should_failslab+0xa8/0x100 [ 1218.912773][ T5603] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1218.912803][ T5603] ? __alloc_skb+0x186/0x7d0 [ 1218.912823][ T5603] ? __alloc_skb+0x1d0/0x7d0 [ 1218.912841][ T5603] ? __local_bh_enable_ip+0xd0/0x130 [ 1218.912870][ T5603] __alloc_skb+0x1d0/0x7d0 [ 1218.912891][ T5603] ? netlink_ack_tlv_len+0x6c/0x210 [ 1218.912918][ T5603] netlink_ack+0x146/0xa50 [ 1218.912940][ T5603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1218.912971][ T5603] ? ref_tracker_free+0x693/0x840 [ 1218.913004][ T5603] ? __pfx_ref_tracker_free+0x10/0x10 [ 1218.913044][ T5603] netlink_rcv_skb+0x2b6/0x4b0 [ 1218.913069][ T5603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1218.913102][ T5603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1218.913141][ T5603] ? netlink_deliver_tap+0x2e/0x1b0 [ 1218.913165][ T5603] ? netlink_deliver_tap+0x2e/0x1b0 [ 1218.913195][ T5603] netlink_unicast+0x75c/0x8e0 [ 1218.913229][ T5603] netlink_sendmsg+0x813/0xb40 [ 1218.913265][ T5603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1218.913303][ T5603] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1218.913334][ T5603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1218.913367][ T5603] ____sys_sendmsg+0x972/0x9f0 [ 1218.913391][ T5603] ? __might_fault+0xaf/0x130 [ 1218.913426][ T5603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1218.913461][ T5603] ? import_iovec+0x73/0xa0 [ 1218.913498][ T5603] ___sys_sendmsg+0x2a5/0x360 [ 1218.913520][ T5603] ? __lock_acquire+0x6b5/0x2cf0 [ 1218.913549][ T5603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1218.913611][ T5603] ? __fget_files+0x2a/0x420 [ 1218.913636][ T5603] ? __fget_files+0x3a0/0x420 [ 1218.913672][ T5603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1218.913699][ T5603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1218.913735][ T5603] ? __pfx_ksys_write+0x10/0x10 [ 1218.913775][ T5603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.913800][ T5603] do_syscall_64+0x15f/0xf80 [ 1218.913820][ T5603] ? trace_irq_disable+0x3b/0x140 [ 1218.913852][ T5603] ? clear_bhb_loop+0x40/0x90 [ 1218.913879][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.913900][ T5603] RIP: 0033:0x7fea9e79ce59 [ 1218.913922][ T5603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.913946][ T5603] RSP: 002b:00007fea9f622028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.913971][ T5603] RAX: ffffffffffffffda RBX: 00007fea9ea15fa0 RCX: 00007fea9e79ce59 [ 1218.913986][ T5603] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1218.914000][ T5603] RBP: 00007fea9f622090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.914013][ T5603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.914026][ T5603] R13: 00007fea9ea16038 R14: 00007fea9ea15fa0 R15: 00007ffd61c065b8 [ 1218.914061][ T5603] [ 1219.227428][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.260466][T27915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.461366][ T5628] __nla_validate_parse: 3 callbacks suppressed [ 1219.461390][ T5628] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9851'. [ 1219.631470][ T5630] vti0: entered promiscuous mode [ 1219.672553][ T5630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9853'. [ 1219.745299][ T5640] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1220.097608][ T5651] syzkaller0: entered promiscuous mode [ 1220.106902][ T5651] syzkaller0: entered allmulticast mode [ 1220.130955][ T5651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9860'. [ 1220.156693][ T5655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9861'. [ 1220.282247][ T5655] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1220.441099][ T5655] bond4 (unregistering): Released all slaves [ 1220.472743][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9863'. [ 1220.592472][ T5663] tipc: Trying to set illegal importance in message [ 1220.704944][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9864'. [ 1220.984995][ T5682] FAULT_INJECTION: forcing a failure. [ 1220.984995][ T5682] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.998264][ T5682] CPU: 0 UID: 0 PID: 5682 Comm: syz.3.9869 Not tainted syzkaller #0 PREEMPT(full) [ 1220.998293][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1220.998306][ T5682] Call Trace: [ 1220.998316][ T5682] [ 1220.998323][ T5682] dump_stack_lvl+0xe8/0x150 [ 1220.998344][ T5682] should_fail_ex+0x412/0x560 [ 1220.998365][ T5682] should_failslab+0xa8/0x100 [ 1220.998386][ T5682] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1220.998405][ T5682] ? __alloc_skb+0x1d0/0x7d0 [ 1220.998430][ T5682] __alloc_skb+0x1d0/0x7d0 [ 1220.998457][ T5682] tipc_msg_create+0x51/0x4d0 [ 1220.998494][ T5682] tipc_group_create_event+0x1f3/0x660 [ 1220.998518][ T5682] ? sock_close+0xc3/0x240 [ 1220.998550][ T5682] ? __pfx_tipc_group_create_event+0x10/0x10 [ 1220.998581][ T5682] tipc_sk_proto_rcv+0x25b/0x17d0 [ 1220.998613][ T5682] ? tipc_data_ready+0xab/0x430 [ 1220.998637][ T5682] ? lock_acquire+0x106/0x350 [ 1220.998666][ T5682] ? __pfx_tipc_sk_proto_rcv+0x10/0x10 [ 1220.998691][ T5682] ? tipc_data_ready+0x60/0x430 [ 1220.998707][ T5682] ? tipc_sk_filtering+0x13c/0x510 [ 1220.998726][ T5682] tipc_sk_filter_rcv+0x312d/0x3370 [ 1220.998746][ T5682] ? __lock_acquire+0x6b5/0x2cf0 [ 1220.998765][ T5682] ? look_up_lock_class+0x57/0x110 [ 1220.998778][ T5682] ? register_lock_class+0x31/0x2e0 [ 1220.998794][ T5682] ? __lock_acquire+0x6b5/0x2cf0 [ 1220.998816][ T5682] ? tipc_sk_lookup+0xb5/0x920 [ 1220.998830][ T5682] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 1220.998854][ T5682] ? tipc_sk_rcv+0x741/0x2b40 [ 1220.998873][ T5682] tipc_sk_rcv+0x87d/0x2b40 [ 1220.998909][ T5682] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 1220.998933][ T5682] ? tipc_loopback_trace+0x48/0x1b0 [ 1220.998954][ T5682] ? __raw_spin_lock_init+0x45/0x100 [ 1220.998973][ T5682] tipc_node_xmit+0x202/0xf10 [ 1220.998997][ T5682] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1220.999037][ T5682] ? kasan_save_free_info+0x46/0x50 [ 1220.999059][ T5682] ? __kasan_slab_free+0x5c/0x80 [ 1220.999085][ T5682] ? kfree+0x1c5/0x640 [ 1220.999107][ T5682] ? tipc_group_delete+0x3c2/0x4c0 [ 1220.999126][ T5682] ? tipc_release+0x3f7/0x2580 [ 1220.999150][ T5682] ? sock_close+0xc3/0x240 [ 1220.999172][ T5682] ? __fput+0x44f/0xa60 [ 1220.999193][ T5682] ? fput_close_sync+0x11f/0x240 [ 1220.999216][ T5682] ? __x64_sys_close+0x7e/0x110 [ 1220.999232][ T5682] ? do_syscall_64+0x15f/0xf80 [ 1220.999243][ T5682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.999270][ T5682] tipc_node_distr_xmit+0x2d8/0x400 [ 1220.999292][ T5682] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 1220.999311][ T5682] ? kfree+0x1c5/0x640 [ 1220.999325][ T5682] ? tipc_group_delete+0x3c2/0x4c0 [ 1220.999337][ T5682] ? tipc_group_proto_xmit+0x278/0x790 [ 1220.999353][ T5682] tipc_group_delete+0x3fa/0x4c0 [ 1220.999372][ T5682] ? __pfx_tipc_group_delete+0x10/0x10 [ 1220.999390][ T5682] ? tipc_release+0xc4/0x2580 [ 1220.999408][ T5682] ? tipc_group_self+0x26/0x1c0 [ 1220.999423][ T5682] tipc_release+0x3f7/0x2580 [ 1220.999446][ T5682] ? __pfx_tipc_release+0x10/0x10 [ 1220.999463][ T5682] ? down_write+0x16d/0x200 [ 1220.999478][ T5682] ? __pfx_down_write+0x10/0x10 [ 1220.999490][ T5682] ? locks_remove_posix+0x14f/0x6a0 [ 1220.999514][ T5682] sock_close+0xc3/0x240 [ 1220.999531][ T5682] ? __pfx_sock_close+0x10/0x10 [ 1220.999547][ T5682] __fput+0x44f/0xa60 [ 1220.999568][ T5682] fput_close_sync+0x11f/0x240 [ 1220.999584][ T5682] ? __pfx_fput_close_sync+0x10/0x10 [ 1220.999602][ T5682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.999616][ T5682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.999629][ T5682] __x64_sys_close+0x7e/0x110 [ 1220.999646][ T5682] do_syscall_64+0x15f/0xf80 [ 1220.999658][ T5682] ? trace_irq_disable+0x3b/0x140 [ 1220.999676][ T5682] ? clear_bhb_loop+0x40/0x90 [ 1220.999692][ T5682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.999711][ T5682] RIP: 0033:0x7f835d59ce59 [ 1220.999734][ T5682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.999751][ T5682] RSP: 002b:00007f835e4f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1220.999775][ T5682] RAX: ffffffffffffffda RBX: 00007f835d816090 RCX: 00007f835d59ce59 [ 1220.999788][ T5682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 1220.999797][ T5682] RBP: 00007f835e4f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.999808][ T5682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.999816][ T5682] R13: 00007f835d816128 R14: 00007f835d816090 R15: 00007fffc09aa048 [ 1220.999836][ T5682] [ 1222.461716][T23126] net_ratelimit: 13 callbacks suppressed [ 1222.461741][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.476609][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.690110][ T5636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1222.700620][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.713309][ T5678] netlink: 840 bytes leftover after parsing attributes in process `syz.0.9868'. [ 1223.061048][ T5696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1223.081249][ T5696] Cannot find set identified by id 65534 to match [ 1223.109936][ T5702] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1223.177342][ T5706] netlink: 'syz.0.9877': attribute type 20 has an invalid length. [ 1223.181079][T27910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.194240][ T365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.202831][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.211416][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.294453][ T5710] geneve2: entered promiscuous mode [ 1223.319152][ T5710] geneve2: entered allmulticast mode [ 1223.466051][ T5713] 0ªX¹¦À: left allmulticast mode [ 1223.501455][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.512801][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.550182][ T5718] block nbd12: Unsupported socket: should be TCP or UNIX. [ 1223.686282][ T5713] ip6gre1: left promiscuous mode [ 1223.698227][ T5713] ip6gre1: left allmulticast mode [ 1223.718447][ T5713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1223.758598][ T5713] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1223.783636][ T5713] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1223.810362][ T5713] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1223.838274][ T5726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9880'. [ 1223.852936][ T5713] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1223.873677][ T5713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1224.303736][ T5730] syzkaller0: entered promiscuous mode [ 1224.321637][ T5755] No such timeout policy "syz1" [ 1224.327594][ T5730] syzkaller0: entered allmulticast mode [ 1224.694487][ T5763] bridge0: port 3(ipvlan2) entered blocking state [ 1224.713253][ T5763] bridge0: port 3(ipvlan2) entered disabled state [ 1224.715973][ T5775] netlink: 'syz.3.9895': attribute type 11 has an invalid length. [ 1224.728813][ T5763] ipvlan2: entered allmulticast mode [ 1224.740917][ T5763] bridge0: entered allmulticast mode [ 1224.749760][ T5776] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9893'. [ 1224.759697][ T5763] ipvlan2: left allmulticast mode [ 1224.778424][ T5763] bridge0: left allmulticast mode [ 1225.247920][ T5786] Cannot find del_set index 1 as target [ 1225.347271][ T5790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9900'. [ 1225.472143][ T5794] netlink: 124 bytes leftover after parsing attributes in process `syz.1.9900'. [ 1225.864315][ T5809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9907'. [ 1225.890854][ T5809] vlan0: entered promiscuous mode [ 1225.928902][ T5815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9909'. [ 1225.948786][ T5815] netlink: 47 bytes leftover after parsing attributes in process `syz.0.9909'. [ 1225.968575][ T5815] netlink: 'syz.0.9909': attribute type 6 has an invalid length. [ 1225.978469][ T5815] netlink: 'syz.0.9909': attribute type 6 has an invalid length. [ 1225.995377][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.223511][ T5819] lo speed is unknown, defaulting to 1000 [ 1226.257885][ T5819] lo speed is unknown, defaulting to 1000 [ 1226.317827][ T5828] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9915'. [ 1226.341264][ T5828] netlink: 'syz.3.9915': attribute type 1 has an invalid length. [ 1226.358066][ T5829] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9913'. [ 1227.509416][ C0] net_ratelimit: 32 callbacks suppressed [ 1227.509440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.660997][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.666467][T27915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.669393][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.979722][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.222322][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.379678][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.620909][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.706187][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.714953][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.781385][ T29] net_ratelimit: 15 callbacks suppressed [ 1232.781409][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.860850][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.869779][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.419897][T27914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.900800][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.909407][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.064356][T27915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.459404][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.700298][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.951276][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.060923][ T370] net_ratelimit: 14 callbacks suppressed [ 1238.060948][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.075741][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.102758][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.111523][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.188682][T27915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.197072][T27916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.660008][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.820004][T27912] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1240.142719][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.151755][ T369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.300135][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.260804][ T368] net_ratelimit: 8 callbacks suppressed [ 1243.260827][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.275435][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.339828][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.311666][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.323061][ T369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.941602][T27915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.949908][T27910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.343548][ T369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.353032][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.740222][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.466059][ T369] net_ratelimit: 10 callbacks suppressed [ 1248.466080][ T369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.480808][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.779877][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.505764][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.514885][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.060812][T27910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.540584][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.548872][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.549290][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.700392][T27910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.661052][T23126] net_ratelimit: 11 callbacks suppressed [ 1253.661078][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.676956][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.901769][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.911634][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.926221][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.937213][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.700152][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.710348][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.860318][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.180017][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.860975][ T370] net_ratelimit: 12 callbacks suppressed [ 1258.860999][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.876372][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.339740][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.902042][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.911956][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.941074][T27915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.941338][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.957682][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.958013][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.975974][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.060916][ T368] net_ratelimit: 16 callbacks suppressed [ 1264.060941][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.075174][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.619485][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.100797][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.109936][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.144100][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.152917][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.540339][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.699928][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.180962][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.259822][T27916] net_ratelimit: 6 callbacks suppressed [ 1269.259847][T27916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.274163][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.282860][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.579748][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.301200][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.309811][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.699700][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.179540][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.188293][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.341156][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.824372][ T8201] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1274.461129][ T368] net_ratelimit: 13 callbacks suppressed [ 1274.461153][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.475692][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.860352][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.019761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.028962][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.404637][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9921'. [ 1275.497828][ T5850] netlink: 324 bytes leftover after parsing attributes in process `syz.0.9919'. [ 1275.515612][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.524891][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.534967][ T5855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9921'. [ 1275.571542][ T5848] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1275.580801][ T5848] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1275.592997][ T5859] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9924'. [ 1275.636719][ T5855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1275.664136][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.711773][ T5861] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1275.943432][ T5874] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9929'. [ 1275.975669][ T5874] netlink: ct family unspecified [ 1276.004178][ T5883] xt_hashlimit: max too large, truncated to 1048576 [ 1276.023624][ T5880] netlink: 'syz.2.9934': attribute type 3 has an invalid length. [ 1276.443861][ T5899] netlink: 'syz.3.9943': attribute type 4 has an invalid length. [ 1276.478775][ T5899] netlink: 'syz.3.9943': attribute type 4 has an invalid length. [ 1276.662272][ T5903] SET target dimension over the limit! [ 1276.891488][ T5915] netlink: 'syz.0.9948': attribute type 2 has an invalid length. [ 1276.914822][ T5905] lo speed is unknown, defaulting to 1000 [ 1276.921263][ T5915] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9948'. [ 1276.942690][ T5905] lo speed is unknown, defaulting to 1000 [ 1277.203344][ T5928] macsec0: entered promiscuous mode [ 1277.216554][ T5928] macsec0: entered allmulticast mode [ 1277.556492][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9957'. [ 1277.598354][ T5937] bridge_slave_1 (unregistering): left allmulticast mode [ 1277.625315][ T5937] bridge_slave_1 (unregistering): left promiscuous mode [ 1277.633932][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.829720][ T5945] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9959'. [ 1278.298746][ T5957] Cannot find del_set index 1 as target [ 1279.084472][ T5985] Cannot find set identified by id 0 to match [ 1279.499523][T27912] net_ratelimit: 23 callbacks suppressed [ 1279.499541][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.660734][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.669722][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.874880][ T5915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1279.884924][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9976'. [ 1279.895878][ T5925] netlink: 'syz.0.9948': attribute type 1 has an invalid length. [ 1279.908962][ T5925] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9948'. [ 1279.937953][ T5994] ip6gre2: entered promiscuous mode [ 1279.974816][ T5994] ip6gre2: entered allmulticast mode [ 1280.057728][ T5994] netlink: 'syz.1.9976': attribute type 1 has an invalid length. [ 1280.098620][ T5994] netlink: 'syz.1.9976': attribute type 2 has an invalid length. [ 1280.131629][ T5994] netlink: 'syz.1.9976': attribute type 1 has an invalid length. [ 1280.139757][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1280.140387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.144336][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.181103][ T5994] netlink: 'syz.1.9976': attribute type 2 has an invalid length. [ 1280.215518][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.239867][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.252606][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.258389][ T6006] netlink: ct family unspecified [ 1280.271579][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.597392][ T6016] netlink: 'syz.3.9984': attribute type 1 has an invalid length. [ 1280.614989][ T6016] __nla_validate_parse: 4 callbacks suppressed [ 1280.615013][ T6016] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9984'. [ 1280.635167][ T6016] NCSI netlink: No device for ifindex 0 [ 1281.104556][ T6022] netlink: 'syz.0.9987': attribute type 11 has an invalid length. [ 1281.112850][ T6024] netlink: 'syz.1.9988': attribute type 4 has an invalid length. [ 1281.142939][ T6024] netlink: 'syz.1.9988': attribute type 4 has an invalid length. [ 1281.467917][ T6042] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9992'. [ 1281.605460][ T6048] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1281.692544][ T6050] ip6gre1: entered promiscuous mode [ 1281.700367][ T6050] ip6gre1: entered allmulticast mode [ 1281.918507][ T6059] netlink: 124 bytes leftover after parsing attributes in process `syz.0.9999'. [ 1281.934796][ T6063] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10001'. [ 1282.041039][ T6066] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10000'. [ 1282.042606][ T6065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10002'. [ 1282.562197][ T6085] lo speed is unknown, defaulting to 1000 [ 1282.588504][ T6085] lo speed is unknown, defaulting to 1000 [ 1282.967770][ T6094] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10012'. [ 1282.974500][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10013'. [ 1282.986422][ T6095] netlink: 'syz.1.10011': attribute type 4 has an invalid length. [ 1283.056853][ T6095] netlink: 'syz.1.10011': attribute type 4 has an invalid length. [ 1283.138640][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10013'. [ 1283.170678][ T6099] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1283.197880][ T6099] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1283.241270][ T6097] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1283.385171][ T6103] syzkaller0: entered promiscuous mode [ 1283.402943][ T6103] syzkaller0: entered allmulticast mode [ 1283.656249][ T6122] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10021'. [ 1283.900445][ T4943] Bluetooth: hci1: command 0x0405 tx timeout [ 1284.620346][ T8201] net_ratelimit: 19 callbacks suppressed [ 1284.620369][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.636040][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.870664][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.885850][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.259324][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1285.274414][T27916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.911917][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.920461][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.469592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.557329][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.961925][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.097530][ T6126] __nla_validate_parse: 2 callbacks suppressed [ 1289.097548][ T6126] netlink: 41 bytes leftover after parsing attributes in process `syz.1.10023'. [ 1289.137654][ T6132] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1289.264999][ T6143] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1289.472668][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10030'. [ 1289.770159][ T6168] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10034'. [ 1290.059408][ T29] net_ratelimit: 10 callbacks suppressed [ 1290.059429][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.073387][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.083330][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.384470][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.394419][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.602336][ T6184] FAULT_INJECTION: forcing a failure. [ 1290.602336][ T6184] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.618376][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.0.10040 Not tainted syzkaller #0 PREEMPT(full) [ 1290.618407][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1290.618420][ T6184] Call Trace: [ 1290.618429][ T6184] [ 1290.618438][ T6184] dump_stack_lvl+0xe8/0x150 [ 1290.618471][ T6184] should_fail_ex+0x412/0x560 [ 1290.618508][ T6184] should_failslab+0xa8/0x100 [ 1290.618540][ T6184] ? security_inode_alloc+0x39/0x310 [ 1290.618571][ T6184] kmem_cache_alloc_noprof+0x87/0x650 [ 1290.618610][ T6184] security_inode_alloc+0x39/0x310 [ 1290.618648][ T6184] inode_init_always_gfp+0x9c8/0xda0 [ 1290.618681][ T6184] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1290.618708][ T6184] alloc_inode+0x82/0x1b0 [ 1290.618734][ T6184] __sock_create+0x12d/0x9d0 [ 1290.618775][ T6184] mptcp_subflow_create_socket+0xfb/0x800 [ 1290.618810][ T6184] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1290.618840][ T6184] ? do_raw_spin_lock+0x12b/0x2f0 [ 1290.618869][ T6184] ? lock_sock_nested+0x6a/0x100 [ 1290.618900][ T6184] __mptcp_nmpc_sk+0x155/0x790 [ 1290.618929][ T6184] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1290.618960][ T6184] ? mptcp_getsockopt+0x1030/0x1ed0 [ 1290.618988][ T6184] ? __local_bh_enable_ip+0xd0/0x130 [ 1290.619015][ T6184] mptcp_getsockopt+0x106e/0x1ed0 [ 1290.619045][ T6184] ? process_measurement+0x195e/0x1c80 [ 1290.619068][ T6184] ? process_measurement+0x341/0x1c80 [ 1290.619088][ T6184] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1290.619125][ T6184] ? __pfx_process_measurement+0x10/0x10 [ 1290.619147][ T6184] ? tomoyo_check_open_permission+0x38e/0x470 [ 1290.619181][ T6184] ? __lock_acquire+0x6b5/0x2cf0 [ 1290.619213][ T6184] ? __lock_acquire+0x6b5/0x2cf0 [ 1290.619249][ T6184] ? unwind_next_frame+0xa6/0x2550 [ 1290.619287][ T6184] ? mas_next_slot+0xc3b/0xd10 [ 1290.619331][ T6184] ? mt_find+0x186/0x630 [ 1290.619357][ T6184] ? cmp_ex_search+0x1e/0x80 [ 1290.619378][ T6184] ? bsearch+0x95/0xc0 [ 1290.619395][ T6184] ? __pfx_cmp_ex_search+0x10/0x10 [ 1290.619415][ T6184] ? rep_movs_alternative+0xf/0x90 [ 1290.619443][ T6184] ? search_extable+0x8f/0xd0 [ 1290.619464][ T6184] ? __pfx_search_extable+0x10/0x10 [ 1290.619485][ T6184] ? rep_movs_alternative+0xf/0x90 [ 1290.619514][ T6184] ? rep_movs_alternative+0xf/0x90 [ 1290.619542][ T6184] ? fixup_exception+0x11aa/0x20d0 [ 1290.619578][ T6184] ? __pfx_fixup_exception+0x10/0x10 [ 1290.619608][ T6184] ? lock_mm_and_find_vma+0x117/0x340 [ 1290.619641][ T6184] ? do_user_addr_fault+0xf26/0x1340 [ 1290.619670][ T6184] ? irqentry_exit+0x218/0x760 [ 1290.619691][ T6184] ? lockdep_hardirqs_on+0x7a/0x110 [ 1290.619710][ T6184] ? irqentry_exit+0x218/0x760 [ 1290.619730][ T6184] ? trace_irq_disable+0x3b/0x140 [ 1290.619785][ T6184] ? sock_common_getsockopt+0x2d/0xb0 [ 1290.619815][ T6184] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1290.619845][ T6184] do_sock_getsockopt+0x51d/0x7e0 [ 1290.619876][ T6184] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1290.619918][ T6184] ? __fget_files+0x3a0/0x420 [ 1290.619943][ T6184] ? __fget_files+0x2a/0x420 [ 1290.620041][ T6184] __x64_sys_getsockopt+0x1a4/0x240 [ 1290.620072][ T6184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.620096][ T6184] do_syscall_64+0x15f/0xf80 [ 1290.620117][ T6184] ? trace_irq_disable+0x3b/0x140 [ 1290.620147][ T6184] ? clear_bhb_loop+0x40/0x90 [ 1290.620175][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.620196][ T6184] RIP: 0033:0x7f44eed9ce59 [ 1290.620218][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.620235][ T6184] RSP: 002b:00007f44efc96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1290.620259][ T6184] RAX: ffffffffffffffda RBX: 00007f44ef015fa0 RCX: 00007f44eed9ce59 [ 1290.620275][ T6184] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 1290.620288][ T6184] RBP: 00007f44efc96090 R08: 0000000000000000 R09: 0000000000000000 [ 1290.620302][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1290.620314][ T6184] R13: 00007f44ef016038 R14: 00007f44ef015fa0 R15: 00007fff0308a2a8 [ 1290.620351][ T6184] [ 1291.026531][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.038818][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.041000][T27911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.054747][ T6184] socket: no more sockets [ 1291.100617][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.449349][ T6182] ip6erspan0: entered allmulticast mode [ 1291.738855][ T6202] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10046'. [ 1291.795001][ T6197] syzkaller0: entered promiscuous mode [ 1291.805415][ T6197] syzkaller0: entered allmulticast mode [ 1291.838924][ T6205] syzkaller1: entered promiscuous mode [ 1291.857722][ T6205] syzkaller1: entered allmulticast mode [ 1292.719757][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10051'. [ 1292.730174][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10051'. [ 1292.904369][ T6217] x_tables: duplicate underflow at hook 1 [ 1295.271304][T23126] net_ratelimit: 12 callbacks suppressed [ 1295.271328][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.285786][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.503949][T27910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.139622][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.311898][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.320522][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.779654][T27908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.805952][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.007141][ T6208] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1297.021242][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10050'. [ 1297.031764][ T6210] tipc: Enabling of bearer rejected, failed to enable media [ 1297.271716][ T6227] openvswitch: netlink: Unknown nsh attribute 0 [ 1297.293134][ T6229] netlink: 41 bytes leftover after parsing attributes in process `syz.2.10055'. [ 1297.304087][ T6224] lo speed is unknown, defaulting to 1000 [ 1297.310553][ T6227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1297.324543][ T6224] lo speed is unknown, defaulting to 1000 [ 1297.333526][ T6229] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10055'. [ 1297.382413][ T6229] netlink: 41 bytes leftover after parsing attributes in process `syz.2.10055'. [ 1297.387935][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10057'. [ 1297.534633][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10058'. [ 1297.536335][ T6236] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.10059'. [ 1297.561280][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10058'. [ 1297.766565][ T6246] Cannot find add_set index 0 as target [ 1298.226672][ T6266] netlink: 'syz.0.10072': attribute type 10 has an invalid length. [ 1298.345206][ T6270] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10070'. [ 1298.368645][ T6271] netlink: 'syz.2.10073': attribute type 2 has an invalid length. [ 1298.373864][ T6266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1298.395624][ T6271] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10073'. [ 1298.481808][ T6275] netlink: 'syz.2.10073': attribute type 1 has an invalid length. [ 1299.251890][ T6301] netlink: 'syz.3.10086': attribute type 6 has an invalid length. [ 1299.308222][ T6301] batadv1: entered promiscuous mode [ 1299.336183][ T6301] batadv1: entered allmulticast mode [ 1299.533511][ T6309] lo speed is unknown, defaulting to 1000 [ 1299.591183][ T6309] lo speed is unknown, defaulting to 1000 [ 1299.610768][ T6313] netlink: 'syz.2.10090': attribute type 10 has an invalid length. [ 1299.953097][ T6317] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1300.001796][ T6317] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1300.026932][ T6320] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1300.275025][ T6322] syzkaller0: entered promiscuous mode [ 1300.289566][ T6322] syzkaller0: entered allmulticast mode [ 1300.483347][T23126] net_ratelimit: 14 callbacks suppressed [ 1300.483372][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.498531][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.632492][T27910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.640789][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.653521][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.941136][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.514716][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.523573][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.831268][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.235694][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.820253][T27916] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1305.672627][T23119] net_ratelimit: 12 callbacks suppressed [ 1305.672645][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.769359][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.301524][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.379878][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.382365][T27912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.400480][T27915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.518390][ T6362] __nla_validate_parse: 11 callbacks suppressed [ 1306.518413][ T6362] netlink: 840 bytes leftover after parsing attributes in process `syz.0.10104'. [ 1306.586662][ T6364] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10106'. [ 1306.597789][ T6364] netlink: Unknown conntrack attr (0) [ 1306.702370][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.792927][ T6376] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1306.814439][ T6377] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1306.883505][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10109'. [ 1307.021582][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.042524][T27908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.067372][ T6379] ipvlan2: entered allmulticast mode [ 1307.093889][ T6379] gretap0: entered allmulticast mode [ 1307.140218][ T6384] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10111'. [ 1307.317278][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10114'. [ 1307.426929][ T6373] sctp: [Deprecated]: syz.2.10105 (pid 6373) Use of int in maxseg socket option. [ 1307.426929][ T6373] Use struct sctp_assoc_value instead [ 1307.460207][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10115'. [ 1307.464711][ T6393] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1307.483186][ T6375] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10105'. [ 1307.485142][ T6393] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1307.497631][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10115'. [ 1307.894896][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10122'. [ 1307.957893][ T6410] bond8: entered promiscuous mode [ 1307.974638][ T6410] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1308.215621][ T6418] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10124'. [ 1308.252649][ T6410] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1308.279973][ T6410] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 1308.317094][ T6410] bond8: (slave sit1): Error -95 calling set_mac_address [ 1309.146523][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.596732][ T6500] netlink: 'syz.3.10150': attribute type 4 has an invalid length. [ 1309.799482][ T6506] bridge0: port 3(ipvlan2) entered blocking state [ 1309.806534][ T6506] bridge0: port 3(ipvlan2) entered disabled state [ 1309.813944][ T6506] ipvlan2: entered allmulticast mode [ 1309.822949][ T6506] bridge0: entered allmulticast mode [ 1309.834584][ T6506] ipvlan2: left allmulticast mode [ 1309.840092][ T6506] bridge0: left allmulticast mode [ 1309.963393][ T6520] FAULT_INJECTION: forcing a failure. [ 1309.963393][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.978659][ T6520] CPU: 1 UID: 0 PID: 6520 Comm: syz.4.10158 Not tainted syzkaller #0 PREEMPT(full) [ 1309.978689][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1309.978701][ T6520] Call Trace: [ 1309.978710][ T6520] [ 1309.978719][ T6520] dump_stack_lvl+0xe8/0x150 [ 1309.978752][ T6520] should_fail_ex+0x412/0x560 [ 1309.978786][ T6520] should_failslab+0xa8/0x100 [ 1309.978818][ T6520] __kmalloc_noprof+0xe8/0x760 [ 1309.978858][ T6520] ? bpf_test_init+0x9f/0x150 [ 1309.978881][ T6520] ? __lock_acquire+0x6b5/0x2cf0 [ 1309.978909][ T6520] bpf_test_init+0x9f/0x150 [ 1309.978934][ T6520] bpf_prog_test_run_skb+0x392/0x2260 [ 1309.978955][ T6520] ? bpf_prog_test_run_skb+0x211/0x2260 [ 1309.979004][ T6520] ? __fget_files+0x3a0/0x420 [ 1309.979030][ T6520] ? __fget_files+0x2a/0x420 [ 1309.979060][ T6520] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1309.979084][ T6520] bpf_prog_test_run+0x2c7/0x340 [ 1309.979111][ T6520] __sys_bpf+0x643/0x950 [ 1309.979144][ T6520] ? __pfx___sys_bpf+0x10/0x10 [ 1309.979192][ T6520] ? ksys_write+0x242/0x270 [ 1309.979221][ T6520] ? __pfx_ksys_write+0x10/0x10 [ 1309.979254][ T6520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.979276][ T6520] __x64_sys_bpf+0x7c/0x90 [ 1309.979307][ T6520] do_syscall_64+0x15f/0xf80 [ 1309.979328][ T6520] ? trace_irq_disable+0x3b/0x140 [ 1309.979358][ T6520] ? clear_bhb_loop+0x40/0x90 [ 1309.979384][ T6520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.979403][ T6520] RIP: 0033:0x7fea9e79ce59 [ 1309.979426][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1309.979444][ T6520] RSP: 002b:00007fea9f622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1309.979468][ T6520] RAX: ffffffffffffffda RBX: 00007fea9ea15fa0 RCX: 00007fea9e79ce59 [ 1309.979482][ T6520] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1309.979496][ T6520] RBP: 00007fea9f622090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.979509][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.979522][ T6520] R13: 00007fea9ea16038 R14: 00007fea9ea15fa0 R15: 00007ffd61c065b8 [ 1309.979557][ T6520] [ 1310.490537][ T6534] netlink: 'syz.4.10163': attribute type 20 has an invalid length. [ 1310.528719][ T6535] gtp0: entered promiscuous mode [ 1310.540754][ T6535] gtp0: entered allmulticast mode [ 1310.558877][ T6535] team0: Device gtp0 is of different type [ 1310.864320][T23126] net_ratelimit: 16 callbacks suppressed [ 1310.864344][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.030839][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.181911][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.341635][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.500099][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.511415][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.901109][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.060771][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.142282][ T6490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.152009][T27913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.940442][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 1313.793200][ T6548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1314.188313][ T6618] SET target dimension over the limit! [ 1314.200842][ T6620] __nla_validate_parse: 6 callbacks suppressed [ 1314.200874][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10192'. [ 1314.541106][ T6638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10198'. [ 1314.664021][ T6643] netlink: 'syz.3.10199': attribute type 1 has an invalid length. [ 1314.914192][ T6653] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1315.043211][ T6660] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.10208'. [ 1315.082987][ T6662] macvtap1: entered promiscuous mode [ 1315.096761][ T6662] macvtap1: entered allmulticast mode [ 1315.109760][ T6662] veth1_vlan: entered allmulticast mode [ 1315.122014][ T6664] netlink: 'syz.2.10206': attribute type 16 has an invalid length. [ 1315.163955][ T30] audit: type=1804 audit(1779427213.061:20): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10207" name="/newroot/267/cgroup.controllers" dev="tmpfs" ino=1389 res=1 errno=0 [ 1315.171275][ T6664] netlink: 'syz.2.10206': attribute type 17 has an invalid length. [ 1315.227250][ T6663] macvtap2: entered promiscuous mode [ 1315.241039][ T6663] macvtap2: entered allmulticast mode [ 1315.248305][ T30] audit: type=1800 audit(1779427213.061:21): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10207" name="cgroup.controllers" dev="tmpfs" ino=1389 res=0 errno=0 [ 1315.515063][ T6664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.546417][ T6664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.711640][ T6664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1315.737263][ T6664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1315.779942][ T6664] veth1_vlan: left promiscuous mode [ 1315.786979][ T6664] veth0_vlan: left promiscuous mode [ 1315.797936][ T6664] veth0_vlan: entered promiscuous mode [ 1315.807555][ T6664] veth1_vlan: entered promiscuous mode [ 1315.818377][ T6664] veth1_macvtap: left promiscuous mode [ 1315.826473][ T6664] veth0_macvtap: left promiscuous mode [ 1315.833740][ T6664] veth0_macvtap: entered promiscuous mode [ 1315.841269][ T6664] veth1_macvtap: entered promiscuous mode [ 1315.847037][ T6664] veth1_macvtap: entered allmulticast mode [ 1315.853660][ T6664] macsec0: left promiscuous mode [ 1315.859281][ T6664] macsec0: left allmulticast mode [ 1315.864445][ T6664] veth1_macvtap: left allmulticast mode [ 1315.881482][ T6664] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1315.889984][ T6664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1315.898714][ T6664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1315.908358][ T6664] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1315.919981][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1315.941827][ T6664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1315.952866][ T6664] bond3: left promiscuous mode [ 1315.958538][ T6664] ip6gre1: left promiscuous mode [ 1315.964417][ T6664] ip6gre1: left allmulticast mode [ 1315.971008][ T6664] bridge2: left promiscuous mode [ 1315.976023][ T6664] bridge2: left allmulticast mode [ 1315.988492][ T6664] bridge3: left promiscuous mode [ 1315.993932][ T6664] bridge3: left allmulticast mode [ 1316.000064][ T29] net_ratelimit: 33 callbacks suppressed [ 1316.000083][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.004444][ T6664] ip6erspan0: left allmulticast mode [ 1316.075434][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.096776][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.104387][ T8216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.219305][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.276767][ T6496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.294933][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.306667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.333064][ T6689] netlink: 'syz.2.10214': attribute type 1 has an invalid length. [ 1316.359100][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.377965][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.387205][T27913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.401959][ T6685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.427750][T27913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.482682][ T6496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.528639][ T6496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.925555][ T6496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.997013][ T6701] tipc: Started in network mode [ 1317.011547][ T6701] tipc: Node identity ac14142f, cluster identity 4711 [ 1317.062753][ T6701] tipc: New replicast peer: 0.0.0.0 [ 1317.078175][ T6701] tipc: Enabled bearer , priority 10 [ 1317.351449][ T6712] FAULT_INJECTION: forcing a failure. [ 1317.351449][ T6712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.408401][ T6712] CPU: 1 UID: 0 PID: 6712 Comm: syz.4.10222 Not tainted syzkaller #0 PREEMPT(full) [ 1317.408433][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1317.408446][ T6712] Call Trace: [ 1317.408456][ T6712] [ 1317.408465][ T6712] dump_stack_lvl+0xe8/0x150 [ 1317.408497][ T6712] should_fail_ex+0x412/0x560 [ 1317.408534][ T6712] _copy_to_user+0x31/0xb0 [ 1317.408570][ T6712] simple_read_from_buffer+0xe1/0x170 [ 1317.408613][ T6712] proc_fail_nth_read+0x1bb/0x230 [ 1317.408645][ T6712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1317.408677][ T6712] ? rw_verify_area+0x2a6/0x4d0 [ 1317.408706][ T6712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1317.408735][ T6712] vfs_read+0x20c/0xa70 [ 1317.408770][ T6712] ? __pfx___mutex_lock+0x10/0x10 [ 1317.408795][ T6712] ? __pfx_vfs_read+0x10/0x10 [ 1317.408827][ T6712] ? __fget_files+0x2a/0x420 [ 1317.408857][ T6712] ? __fget_files+0x3a0/0x420 [ 1317.408881][ T6712] ? __fget_files+0x2a/0x420 [ 1317.408918][ T6712] ksys_read+0x150/0x270 [ 1317.408950][ T6712] ? __pfx_ksys_read+0x10/0x10 [ 1317.408993][ T6712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.409018][ T6712] do_syscall_64+0x15f/0xf80 [ 1317.409038][ T6712] ? trace_irq_disable+0x3b/0x140 [ 1317.409070][ T6712] ? clear_bhb_loop+0x40/0x90 [ 1317.409097][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.409119][ T6712] RIP: 0033:0x7fea9e75d68e [ 1317.409140][ T6712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1317.409159][ T6712] RSP: 002b:00007fea9f621fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1317.409183][ T6712] RAX: ffffffffffffffda RBX: 00007fea9f6226c0 RCX: 00007fea9e75d68e [ 1317.409199][ T6712] RDX: 000000000000000f RSI: 00007fea9f6220a0 RDI: 0000000000000004 [ 1317.409212][ T6712] RBP: 00007fea9f622090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.409225][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.409238][ T6712] R13: 00007fea9ea16038 R14: 00007fea9ea15fa0 R15: 00007ffd61c065b8 [ 1317.409275][ T6712] [ 1317.858878][ T6714] netlink: 124 bytes leftover after parsing attributes in process `syz.4.10224'. [ 1318.079701][ T370] tipc: Node number set to 2886997039 [ 1318.280665][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10227'. [ 1318.591708][ T6726] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1318.655610][ T6726] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1318.848949][ T6733] netlink: 'syz.1.10230': attribute type 32 has an invalid length. [ 1318.891779][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10230'. [ 1319.054247][ T30] audit: type=1804 audit(1779427216.951:22): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.10231" name="/newroot/178/memory.events" dev="tmpfs" ino=927 res=1 errno=0 [ 1319.105182][ T30] audit: type=1800 audit(1779427216.981:23): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10231" name="memory.events" dev="tmpfs" ino=927 res=0 errno=0 [ 1319.145920][ T6733] bond4: option coupled_control: invalid value (12) [ 1319.170389][ T30] audit: type=1804 audit(1779427216.981:24): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.10231" name="/newroot/178/memory.events" dev="tmpfs" ino=927 res=1 errno=0 [ 1319.249828][ T6733] bond4 (unregistering): Released all slaves [ 1319.573249][ T6744] bridge0: port 3(ipvlan2) entered blocking state [ 1319.591874][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10235'. [ 1319.596993][ T6744] bridge0: port 3(ipvlan2) entered disabled state [ 1319.632219][ T6744] ipvlan2: entered allmulticast mode [ 1319.649315][ T6744] bridge0: entered allmulticast mode [ 1319.666419][ T6744] ipvlan2: left allmulticast mode [ 1319.689615][ T6744] bridge0: left allmulticast mode [ 1319.824096][ T6753] syzkaller0: entered promiscuous mode [ 1319.839663][ T6753] syzkaller0: entered allmulticast mode [ 1319.983356][ T6757] tipc: Enabled bearer , priority 0 [ 1320.056895][ T6762] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1320.077566][ T6757] syzkaller0: entered promiscuous mode [ 1320.089311][ T6757] syzkaller0: entered allmulticast mode [ 1320.097020][ T6765] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10242'. [ 1320.215466][ T6770] tipc: Resetting bearer [ 1320.998225][ T6756] tipc: Resetting bearer [ 1321.041339][T23119] net_ratelimit: 48 callbacks suppressed [ 1321.041362][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.058221][ T370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.100283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.102824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.116621][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.124399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.144816][T27913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.157226][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.176175][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.262056][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.308274][ T6756] tipc: Disabling bearer [ 1321.716625][ T6813] tipc: New replicast peer: 0.0.0.0 [ 1321.724386][ T6813] tipc: Enabled bearer , priority 10 [ 1321.807855][ T6817] xt_hashlimit: max too large, truncated to 1048576 [ 1322.003648][ T6822] tipc: Enabled bearer , priority 0 [ 1322.012094][ T6822] syzkaller0: entered promiscuous mode [ 1322.022196][ T6822] syzkaller0: entered allmulticast mode [ 1322.160283][ T6826] netlink: 'syz.1.10255': attribute type 1 has an invalid length. [ 1322.232661][ T6825] tipc: Resetting bearer [ 1322.879773][ T6820] tipc: Resetting bearer [ 1322.901775][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10264'. [ 1322.982895][ T6820] tipc: Disabling bearer [ 1323.114168][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10268'. [ 1323.316480][ T6860] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10270'. [ 1323.785825][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10278'. [ 1323.794346][ T6882] lo speed is unknown, defaulting to 1000 [ 1323.822397][ T6882] lo speed is unknown, defaulting to 1000 [ 1324.028936][ T6890] nbd0: detected capacity change from 0 to 140737484128256 [ 1324.083946][ T6847] block nbd0: Dead connection, failed to find a fallback [ 1324.149467][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10280'. [ 1324.206711][ T6899] netlink: 'syz.4.10280': attribute type 5 has an invalid length. [ 1324.263112][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10280'. [ 1325.032845][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10293'. [ 1325.147318][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10293'. [ 1325.255582][ T6941] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1325.283062][ T6941] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1325.336597][ T6935] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1325.375316][ T6945] syzkaller1: entered promiscuous mode [ 1325.382768][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10296'. [ 1325.388680][ T6945] syzkaller1: entered allmulticast mode [ 1325.836350][ T6971] SET target dimension over the limit! [ 1326.228580][T23126] net_ratelimit: 40 callbacks suppressed [ 1326.228606][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.244282][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.299211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.311381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.380206][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.475445][ T7000] netlink: 'syz.2.10308': attribute type 1 has an invalid length. [ 1326.543617][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.619434][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.644500][ T7008] bond11: entered promiscuous mode [ 1326.658388][ T7008] bond11: entered allmulticast mode [ 1326.670450][ T7008] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1326.830457][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10313'. [ 1326.864935][ T8216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.865226][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.890720][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.890969][ T7027] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.10316'. [ 1326.944996][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10313'. [ 1327.038120][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10317'. [ 1327.065030][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10317'. [ 1327.172712][ T7035] netlink: 840 bytes leftover after parsing attributes in process `syz.3.10318'. [ 1327.684397][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10323'. [ 1327.690072][ T7053] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1328.220075][ T6847] block nbd0: shutting down sockets [ 1328.244577][ T6847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.271070][ T7064] bridge0: port 3(ipvlan2) entered blocking state [ 1328.290140][ T7064] bridge0: port 3(ipvlan2) entered disabled state [ 1328.297238][ T6847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.316953][ T7064] ipvlan2: entered allmulticast mode [ 1328.338768][ T6847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.350085][ T7064] bridge0: entered allmulticast mode [ 1328.368653][ T6847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.381276][ T7064] ipvlan2: left allmulticast mode [ 1328.386525][ T7064] bridge0: left allmulticast mode [ 1328.395336][ T6847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.405318][ T6847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.416635][ T6847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.428551][ T6847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.443214][ T6847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.465605][ T6847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.505966][ T6847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.520419][ T7081] netlink: 'syz.2.10334': attribute type 27 has an invalid length. [ 1328.527672][ T6847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.552362][ T6847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.573485][ T6847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.598372][ T6847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.621481][ T6847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.643404][ T7078] syzkaller1: entered promiscuous mode [ 1328.645070][ T6847] ldm_validate_partition_table(): Disk read failed. [ 1328.661060][ T6847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.665957][ T7078] syzkaller1: entered allmulticast mode [ 1328.673944][ T6847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.685712][ T6847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1328.698207][ T6847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1328.732854][ T6847] Dev nbd0: unable to read RDB block 0 [ 1328.748523][ T6847] nbd0: unable to read partition table [ 1328.815188][ T6847] ldm_validate_partition_table(): Disk read failed. [ 1328.852233][ T6847] Dev nbd0: unable to read RDB block 0 [ 1328.858628][ T6847] nbd0: unable to read partition table [ 1329.057980][ T7086] xt_hashlimit: max too large, truncated to 1048576 [ 1329.067421][ T7095] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1329.135601][ T7098] netlink: 'syz.4.10339': attribute type 39 has an invalid length. [ 1329.778527][ T7117] SET target dimension over the limit! [ 1329.861374][ T7126] netlink: 'syz.1.10348': attribute type 7 has an invalid length. [ 1329.890837][ T7126] netlink: 'syz.1.10348': attribute type 8 has an invalid length. [ 1329.942040][ T7126] erspan0: entered promiscuous mode [ 1329.957381][ T7126] gretap0: entered promiscuous mode [ 1329.965927][ T7126] erspan0: left promiscuous mode [ 1329.981524][ T7126] gretap0: left promiscuous mode [ 1330.025420][ T7134] tipc: Enabling of bearer rejected, failed to enable media [ 1330.053337][ T7128] syzkaller0: entered promiscuous mode [ 1330.080749][ T7128] syzkaller0: entered allmulticast mode [ 1330.196168][ T7145] __nla_validate_parse: 5 callbacks suppressed [ 1330.196190][ T7145] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10358'. [ 1330.317930][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10357'. [ 1330.412389][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10360'. [ 1330.435576][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10360'. [ 1331.032072][ T7179] bond12: entered allmulticast mode [ 1331.072936][ T7189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10369'. [ 1331.419844][ T368] net_ratelimit: 47 callbacks suppressed [ 1331.419934][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.436784][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.447813][ T7208] netlink: 840 bytes leftover after parsing attributes in process `syz.1.10375'. [ 1331.499175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.507764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.582542][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.749358][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.757849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.830371][ T368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.460213][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.460511][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.663620][ T7244] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1332.828854][ T7254] No such timeout policy "syz1" [ 1332.983752][ T7262] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10392'. [ 1333.022019][ T7265] SET target dimension over the limit! [ 1333.178725][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10392'. [ 1333.451029][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10402'. [ 1333.459527][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10404'. [ 1333.472861][ T7291] netlink: 'syz.1.10402': attribute type 7 has an invalid length. [ 1333.497361][ T7291] netlink: 'syz.1.10402': attribute type 8 has an invalid length. [ 1333.507866][ T7297] netlink: 'syz.3.10405': attribute type 1 has an invalid length. [ 1333.657139][ T7297] bond6: entered promiscuous mode [ 1333.685678][ T7297] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1333.714420][ T7291] erspan0: entered promiscuous mode [ 1333.735180][ T7291] gretap0: entered promiscuous mode [ 1333.756457][ T7291] erspan0: left promiscuous mode [ 1333.780495][ T7291] gretap0: left promiscuous mode [ 1334.052953][ T7313] [ 1334.055345][ T7313] ====================================================== [ 1334.062577][ T7313] WARNING: possible circular locking dependency detected [ 1334.069810][ T7313] syzkaller #0 Not tainted [ 1334.074278][ T7313] ------------------------------------------------------ [ 1334.081405][ T7313] syz.0.10409/7313 is trying to acquire lock: [ 1334.087478][ T7313] ffff88805efc0318 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 1334.096456][ T7313] [ 1334.096456][ T7313] but task is already holding lock: [ 1334.103998][ T7313] ffff88802ace2ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1334.113498][ T7313] [ 1334.113498][ T7313] which lock already depends on the new lock. [ 1334.113498][ T7313] [ 1334.123901][ T7313] [ 1334.123901][ T7313] the existing dependency chain (in reverse order) is: [ 1334.133097][ T7313] [ 1334.133097][ T7313] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1334.141028][ T7313] __mutex_lock+0x1a3/0x1550 [ 1334.146249][ T7313] elevator_change+0x1b3/0x450 [ 1334.151719][ T7313] elevator_set_none+0xb5/0x140 [ 1334.157302][ T7313] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1334.163829][ T7313] nbd_start_device+0x17f/0xb10 [ 1334.169481][ T7313] nbd_genl_connect+0x165b/0x1cf0 [ 1334.175204][ T7313] genl_family_rcv_msg_doit+0x22a/0x330 [ 1334.181367][ T7313] genl_rcv_msg+0x61c/0x7a0 [ 1334.186498][ T7313] netlink_rcv_skb+0x232/0x4b0 [ 1334.191822][ T7313] genl_rcv+0x28/0x40 [ 1334.196353][ T7313] netlink_unicast+0x75c/0x8e0 [ 1334.201728][ T7313] netlink_sendmsg+0x813/0xb40 [ 1334.207106][ T7313] ____sys_sendmsg+0x972/0x9f0 [ 1334.212400][ T7313] ___sys_sendmsg+0x2a5/0x360 [ 1334.217698][ T7313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1334.223423][ T7313] do_syscall_64+0x15f/0xf80 [ 1334.228632][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.235059][ T7313] [ 1334.235059][ T7313] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1334.243769][ T7313] blk_alloc_queue+0x546/0x680 [ 1334.249166][ T7313] __blk_mq_alloc_disk+0x197/0x390 [ 1334.254808][ T7313] nbd_dev_add+0x499/0xb50 [ 1334.259760][ T7313] nbd_init+0x168/0x1f0 [ 1334.264526][ T7313] do_one_initcall+0x250/0x870 [ 1334.269819][ T7313] do_initcall_level+0x104/0x190 [ 1334.275285][ T7313] do_initcalls+0x59/0xa0 [ 1334.280140][ T7313] kernel_init_freeable+0x2a6/0x3e0 [ 1334.285873][ T7313] kernel_init+0x1d/0x1d0 [ 1334.290727][ T7313] ret_from_fork+0x514/0xb70 [ 1334.295843][ T7313] ret_from_fork_asm+0x1a/0x30 [ 1334.301133][ T7313] [ 1334.301133][ T7313] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1334.308616][ T7313] fs_reclaim_acquire+0x71/0x100 [ 1334.314188][ T7313] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1334.320526][ T7313] __alloc_skb+0x1d0/0x7d0 [ 1334.325475][ T7313] __ip6_append_data+0x2d3c/0x3f60 [ 1334.331209][ T7313] ip6_append_data+0x10f/0x280 [ 1334.336607][ T7313] rawv6_sendmsg+0x12d3/0x18e0 [ 1334.341912][ T7313] ____sys_sendmsg+0x80a/0x9f0 [ 1334.347389][ T7313] ___sys_sendmsg+0x2a5/0x360 [ 1334.352763][ T7313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1334.358402][ T7313] do_syscall_64+0x15f/0xf80 [ 1334.363522][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.370028][ T7313] [ 1334.370028][ T7313] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1334.378039][ T7313] lock_sock_nested+0x41/0x100 [ 1334.383421][ T7313] inet_shutdown+0x6a/0x390 [ 1334.388635][ T7313] nbd_mark_nsock_dead+0x2e9/0x560 [ 1334.394688][ T7313] recv_work+0x1c2e/0x1d40 [ 1334.399631][ T7313] process_scheduled_works+0xb5d/0x1860 [ 1334.405887][ T7313] worker_thread+0xa53/0xfc0 [ 1334.411089][ T7313] kthread+0x389/0x470 [ 1334.415771][ T7313] ret_from_fork+0x514/0xb70 [ 1334.420901][ T7313] ret_from_fork_asm+0x1a/0x30 [ 1334.426373][ T7313] [ 1334.426373][ T7313] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1334.434471][ T7313] __mutex_lock+0x1a3/0x1550 [ 1334.439591][ T7313] nbd_queue_rq+0x37b/0x1100 [ 1334.444709][ T7313] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1334.450913][ T7313] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1334.457851][ T7313] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1334.464875][ T7313] blk_mq_run_hw_queue+0x348/0x4f0 [ 1334.470694][ T7313] blk_mq_dispatch_list+0xd16/0xe10 [ 1334.476596][ T7313] blk_mq_flush_plug_list+0x48d/0x570 [ 1334.482511][ T7313] __blk_flush_plug+0x3ed/0x4d0 [ 1334.487904][ T7313] __submit_bio+0x28d/0x580 [ 1334.493021][ T7313] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1334.499185][ T7313] block_read_full_folio+0x7b7/0x830 [ 1334.505006][ T7313] filemap_read_folio+0x137/0x3b0 [ 1334.510657][ T7313] do_read_cache_folio+0x358/0x590 [ 1334.516476][ T7313] read_part_sector+0xb6/0x2b0 [ 1334.521856][ T7313] adfspart_check_ICS+0xb1/0x960 [ 1334.527488][ T7313] bdev_disk_changed+0x817/0x1770 [ 1334.533155][ T7313] blkdev_get_whole+0x380/0x510 [ 1334.538544][ T7313] bdev_open+0x31e/0xd30 [ 1334.543527][ T7313] blkdev_open+0x470/0x610 [ 1334.548631][ T7313] do_dentry_open+0x785/0x14e0 [ 1334.554013][ T7313] vfs_open+0x3b/0x340 [ 1334.558796][ T7313] path_openat+0x2e08/0x3860 [ 1334.564005][ T7313] do_file_open+0x23e/0x4a0 [ 1334.569216][ T7313] do_sys_openat2+0x113/0x200 [ 1334.574773][ T7313] __x64_sys_openat+0x138/0x170 [ 1334.580240][ T7313] do_syscall_64+0x15f/0xf80 [ 1334.585352][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.591772][ T7313] [ 1334.591772][ T7313] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1334.599173][ T7313] __mutex_lock+0x1a3/0x1550 [ 1334.604377][ T7313] nbd_queue_rq+0xc6/0x1100 [ 1334.609408][ T7313] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1334.615499][ T7313] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1334.622361][ T7313] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1334.628866][ T7313] blk_mq_run_hw_queue+0x348/0x4f0 [ 1334.634867][ T7313] blk_mq_dispatch_list+0xd16/0xe10 [ 1334.640690][ T7313] blk_mq_flush_plug_list+0x48d/0x570 [ 1334.646798][ T7313] __blk_flush_plug+0x3ed/0x4d0 [ 1334.652195][ T7313] __submit_bio+0x28d/0x580 [ 1334.657221][ T7313] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1334.663649][ T7313] block_read_full_folio+0x7b7/0x830 [ 1334.669466][ T7313] filemap_read_folio+0x137/0x3b0 [ 1334.675116][ T7313] do_read_cache_folio+0x358/0x590 [ 1334.680843][ T7313] read_part_sector+0xb6/0x2b0 [ 1334.686248][ T7313] adfspart_check_ICS+0xb1/0x960 [ 1334.691794][ T7313] bdev_disk_changed+0x817/0x1770 [ 1334.697468][ T7313] blkdev_get_whole+0x380/0x510 [ 1334.702849][ T7313] bdev_open+0x31e/0xd30 [ 1334.707719][ T7313] blkdev_open+0x470/0x610 [ 1334.712833][ T7313] do_dentry_open+0x785/0x14e0 [ 1334.718393][ T7313] vfs_open+0x3b/0x340 [ 1334.723248][ T7313] path_openat+0x2e08/0x3860 [ 1334.728367][ T7313] do_file_open+0x23e/0x4a0 [ 1334.733401][ T7313] do_sys_openat2+0x113/0x200 [ 1334.738602][ T7313] __x64_sys_openat+0x138/0x170 [ 1334.743977][ T7313] do_syscall_64+0x15f/0xf80 [ 1334.749366][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.755958][ T7313] [ 1334.755958][ T7313] -> #0 (set->srcu){.+.+}-{0:0}: [ 1334.763261][ T7313] __lock_acquire+0x15a5/0x2cf0 [ 1334.768642][ T7313] lock_sync+0x9d/0x120 [ 1334.773408][ T7313] __synchronize_srcu+0xca/0x300 [ 1334.778885][ T7313] elevator_switch+0x1e8/0x7a0 [ 1334.784341][ T7313] elevator_change+0x2cc/0x450 [ 1334.789741][ T7313] elevator_set_default+0x36c/0x430 [ 1334.795656][ T7313] blk_register_queue+0x3e9/0x4e0 [ 1334.801328][ T7313] __add_disk+0x677/0xd50 [ 1334.806446][ T7313] add_disk_fwnode+0xfb/0x480 [ 1334.811680][ T7313] nbd_dev_add+0x72c/0xb50 [ 1334.817416][ T7313] nbd_genl_connect+0x962/0x1cf0 [ 1334.822990][ T7313] genl_family_rcv_msg_doit+0x22a/0x330 [ 1334.829082][ T7313] genl_rcv_msg+0x61c/0x7a0 [ 1334.834207][ T7313] netlink_rcv_skb+0x232/0x4b0 [ 1334.839498][ T7313] genl_rcv+0x28/0x40 [ 1334.844011][ T7313] netlink_unicast+0x75c/0x8e0 [ 1334.849474][ T7313] netlink_sendmsg+0x813/0xb40 [ 1334.855032][ T7313] ____sys_sendmsg+0x972/0x9f0 [ 1334.860608][ T7313] ___sys_sendmsg+0x2a5/0x360 [ 1334.865899][ T7313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1334.871710][ T7313] do_syscall_64+0x15f/0xf80 [ 1334.876833][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.883337][ T7313] [ 1334.883337][ T7313] other info that might help us debug this: [ 1334.883337][ T7313] [ 1334.893743][ T7313] Chain exists of: [ 1334.893743][ T7313] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 1334.893743][ T7313] [ 1334.907587][ T7313] Possible unsafe locking scenario: [ 1334.907587][ T7313] [ 1334.915124][ T7313] CPU0 CPU1 [ 1334.920578][ T7313] ---- ---- [ 1334.926030][ T7313] lock(&q->elevator_lock); [ 1334.930625][ T7313] lock(&q->q_usage_counter(io)#49); [ 1334.938615][ T7313] lock(&q->elevator_lock); [ 1334.946248][ T7313] sync(set->srcu); [ 1334.950240][ T7313] [ 1334.950240][ T7313] *** DEADLOCK *** [ 1334.950240][ T7313] [ 1334.958828][ T7313] 6 locks held by syz.0.10409/7313: [ 1334.964197][ T7313] #0: ffffffff8fe42788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1334.972830][ T7313] #1: ffffffff8fe425c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1334.981994][ T7313] #2: ffff88802c0d19c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 1334.992653][ T7313] #3: ffff88802ace2b50 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0 [ 1335.002699][ T7313] #4: ffff88802ace25d8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1335.013666][ T7313] #5: ffff88802ace2ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1335.023630][ T7313] [ 1335.023630][ T7313] stack backtrace: [ 1335.029716][ T7313] CPU: 0 UID: 0 PID: 7313 Comm: syz.0.10409 Not tainted syzkaller #0 PREEMPT(full) [ 1335.029750][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1335.029762][ T7313] Call Trace: [ 1335.029772][ T7313] [ 1335.029781][ T7313] dump_stack_lvl+0xe8/0x150 [ 1335.029806][ T7313] print_circular_bug+0x2e1/0x300 [ 1335.029830][ T7313] check_noncircular+0x12e/0x150 [ 1335.029853][ T7313] __lock_acquire+0x15a5/0x2cf0 [ 1335.029874][ T7313] ? lockdep_unlock+0x5d/0xd0 [ 1335.029889][ T7313] ? __lock_acquire+0x146e/0x2cf0 [ 1335.029907][ T7313] ? __lock_acquire+0x146e/0x2cf0 [ 1335.029924][ T7313] ? __synchronize_srcu+0xb6/0x300 [ 1335.029940][ T7313] lock_sync+0x9d/0x120 [ 1335.029956][ T7313] ? __synchronize_srcu+0xb6/0x300 [ 1335.029974][ T7313] __synchronize_srcu+0xca/0x300 [ 1335.029990][ T7313] ? do_raw_spin_lock+0x12b/0x2f0 [ 1335.030013][ T7313] ? __pfx___synchronize_srcu+0x10/0x10 [ 1335.030033][ T7313] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1335.030057][ T7313] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1335.030082][ T7313] ? synchronize_srcu+0x20d/0x270 [ 1335.030099][ T7313] elevator_switch+0x1e8/0x7a0 [ 1335.030123][ T7313] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1335.030141][ T7313] elevator_change+0x2cc/0x450 [ 1335.030165][ T7313] ? do_raw_spin_unlock+0xf5/0x210 [ 1335.030189][ T7313] elevator_set_default+0x36c/0x430 [ 1335.030214][ T7313] ? __pfx_elevator_set_default+0x10/0x10 [ 1335.030241][ T7313] ? disk_register_independent_access_ranges+0x2db/0x380 [ 1335.030265][ T7313] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1335.030288][ T7313] blk_register_queue+0x3e9/0x4e0 [ 1335.030307][ T7313] __add_disk+0x677/0xd50 [ 1335.030327][ T7313] ? down_read+0x270/0x2e0 [ 1335.030345][ T7313] add_disk_fwnode+0xfb/0x480 [ 1335.030365][ T7313] nbd_dev_add+0x72c/0xb50 [ 1335.030386][ T7313] ? __pfx_nbd_dev_add+0x10/0x10 [ 1335.030410][ T7313] ? bpf_lsm_capable+0x9/0x20 [ 1335.030427][ T7313] ? security_capable+0x7e/0x2c0 [ 1335.030448][ T7313] ? radix_tree_lookup+0x25c/0x290 [ 1335.030471][ T7313] nbd_genl_connect+0x962/0x1cf0 [ 1335.030488][ T7313] ? __pfx___nla_validate_parse+0x10/0x10 [ 1335.030518][ T7313] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1335.030536][ T7313] ? rcu_is_watching+0x15/0xb0 [ 1335.030556][ T7313] ? trace_kmalloc+0x2a/0xf0 [ 1335.030579][ T7313] ? __nla_parse+0x40/0x60 [ 1335.030604][ T7313] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1335.030628][ T7313] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1335.030654][ T7313] genl_family_rcv_msg_doit+0x22a/0x330 [ 1335.030680][ T7313] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1335.030706][ T7313] ? __lock_acquire+0x6b5/0x2cf0 [ 1335.030727][ T7313] genl_rcv_msg+0x61c/0x7a0 [ 1335.030757][ T7313] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1335.030779][ T7313] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1335.030800][ T7313] netlink_rcv_skb+0x232/0x4b0 [ 1335.030818][ T7313] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1335.030840][ T7313] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1335.030862][ T7313] ? down_read+0x270/0x2e0 [ 1335.030878][ T7313] ? genl_rcv+0xd/0x40 [ 1335.030899][ T7313] genl_rcv+0x28/0x40 [ 1335.030919][ T7313] netlink_unicast+0x75c/0x8e0 [ 1335.030938][ T7313] netlink_sendmsg+0x813/0xb40 [ 1335.030959][ T7313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1335.030978][ T7313] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1335.030999][ T7313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1335.031022][ T7313] ____sys_sendmsg+0x972/0x9f0 [ 1335.031040][ T7313] ? __might_fault+0xaf/0x130 [ 1335.031062][ T7313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1335.031082][ T7313] ? import_iovec+0x73/0xa0 [ 1335.031106][ T7313] ___sys_sendmsg+0x2a5/0x360 [ 1335.031123][ T7313] ? __lock_acquire+0x6b5/0x2cf0 [ 1335.031141][ T7313] ? __pfx____sys_sendmsg+0x10/0x10 [ 1335.031160][ T7313] ? futex_wake+0x4ac/0x580 [ 1335.031191][ T7313] ? __fget_files+0x2a/0x420 [ 1335.031209][ T7313] ? __fget_files+0x3a0/0x420 [ 1335.031231][ T7313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1335.031249][ T7313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1335.031269][ T7313] ? rcu_is_watching+0x15/0xb0 [ 1335.031291][ T7313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.031308][ T7313] do_syscall_64+0x15f/0xf80 [ 1335.031324][ T7313] ? trace_irq_disable+0x3b/0x140 [ 1335.031348][ T7313] ? clear_bhb_loop+0x40/0x90 [ 1335.031366][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.031383][ T7313] RIP: 0033:0x7f44eed9ce59 [ 1335.031400][ T7313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.031415][ T7313] RSP: 002b:00007f44efc96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1335.031434][ T7313] RAX: ffffffffffffffda RBX: 00007f44ef015fa0 RCX: 00007f44eed9ce59 [ 1335.031447][ T7313] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1335.031457][ T7313] RBP: 00007f44eee32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1335.031468][ T7313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.031478][ T7313] R13: 00007f44ef016038 R14: 00007f44ef015fa0 R15: 00007fff0308a2a8 [ 1335.031497][ T7313] [ 1335.608521][ T7318] __nla_validate_parse: 6 callbacks suppressed [ 1335.608544][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10409'. [ 1335.642330][ T7318] nbd: device at index 64 is going down [ 1335.703327][ T7345] udevd[7345]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1335.719711][ T7344] udevd[7344]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1335.820163][T27914] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1336.469444][ T364] net_ratelimit: 45 callbacks suppressed [ 1336.469469][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.549391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.558766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.568057][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.576554][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.585568][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.594215][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.602803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.579474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.588336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.580343][T23110] net_ratelimit: 38 callbacks suppressed [ 1341.580369][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.581168][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.604355][ T364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.612874][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.621226][T23110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.739403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.748624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.757505][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.766379][T23126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.829255][T23119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog