last executing test programs: 17.782384585s ago: executing program 2 (id=6486): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xce22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0xa, 0x2, 0x2, 0x5, 0x2, 0x5}, {0x0, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d4, 0x32}, 0x2, @in6=@private1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 14.78536633s ago: executing program 2 (id=6491): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close(0x3) (async) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006002000800a000008002000", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090025bd7000000000000400000008001a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 12.28141361s ago: executing program 2 (id=6494): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) (async) pipe(0x0) (async) r1 = socket(0x14, 0x2, 0x4) accept$nfc_llcp(r1, 0x0, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 3.118029746s ago: executing program 1 (id=6559): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 2.087732827s ago: executing program 1 (id=6569): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x10}}]}}]}, 0x3c}}, 0x4000) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000140)="186168b7a7c0ed1a9718754f7d5a2f40c2d97ebd421483c30798ac71c88624a5099854a4dccb2f29353ebe7038d00660e07551ec15cb1c12f86b0ac1706d10f45a6cd59cf0dc8ff113beb7967729f4008ff515a28c46a782a093f9ccbb55b721048e0cfc386413731b2a397678d3bd0027c3a0232510c3e5e5551b8d2d1c98c42e2755d74a5739") r3 = socket$inet(0x2, 0x3, 0x8d6) sendmmsg(r3, &(0x7f0000000e40), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000}, 0x94) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x20000000) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7ff, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @bcast]}) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @null, @bpq0, 0xfd, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000006795000000862ba92d000095eaff0000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, r8, 0x25, 0x2, @val=@tracing={0x0, 0x8}}, 0x20) 1.705233381s ago: executing program 1 (id=6574): r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000380)=0x1000, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x90) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000180)={0xfffffffd}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) 1.62961793s ago: executing program 4 (id=6575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) ioctl$NILFS_IOCTL_GET_BDESCS(r4, 0xc0186e87, &(0x7f0000000280)={&(0x7f0000000180)=[{0x5, 0x8, 0x1, 0xe5, 0x6}, {0x3, 0xfd6a, 0x6, 0x8dc, 0xad}, {0xb, 0x81, 0x6fc2, 0x1, 0x7}, {0x1, 0xdd4, 0xd, 0x4, 0x5}, {0x6, 0x0, 0x4, 0xaa, 0x7}, {0x7, 0x3, 0x6, 0x7e665565, 0xfffffff9}], 0x6, 0x28, 0xfff7, 0x53deec0d}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) 1.621379105s ago: executing program 3 (id=6576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x62) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.560821618s ago: executing program 1 (id=6577): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) r6 = getpid() sendmsg$unix(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1.403894326s ago: executing program 4 (id=6579): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 1.396483905s ago: executing program 0 (id=6580): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 1.156061361s ago: executing program 0 (id=6581): socket$netlink(0x10, 0x3, 0x1) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000003000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000"], 0x48}, 0x1, 0x0, 0x400000000000000, 0x20040884}, 0x0) 1.154701664s ago: executing program 4 (id=6582): socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000440), 0x4) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x25, &(0x7f00000000c0)=0x7a, 0x4) splice(r1, &(0x7f00000000c0)=0x9, r2, &(0x7f0000000100)=0x24, 0xa8, 0x4) listen(r1, 0x5) r5 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x8, 0xfff, 0xfffffffa, 0x6}, &(0x7f0000000080)=0x14) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 988.805791ms ago: executing program 3 (id=6583): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x10}}]}}]}, 0x3c}}, 0x4000) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000140)="186168b7a7c0ed1a9718754f7d5a2f40c2d97ebd421483c30798ac71c88624a5099854a4dccb2f29353ebe7038d00660e07551ec15cb1c12f86b0ac1706d10f45a6cd59cf0dc8ff113beb7967729f4008ff515a28c46a782a093f9ccbb55b721048e0cfc386413731b2a397678d3bd0027c3a0232510c3e5e5551b8d2d1c98c42e2755d74a5739") r3 = socket$inet(0x2, 0x3, 0x8d6) sendmmsg(r3, &(0x7f0000000e40), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000}, 0x94) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x20000000) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7ff, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @bcast]}) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @null, @bpq0, 0xfd, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000006795000000862ba92d000095eaff0000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, r8, 0x25, 0x2, @val=@tracing={0x0, 0x8}}, 0x20) 979.66975ms ago: executing program 4 (id=6584): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x16, 0x0, 0x290) r1 = socket(0x8, 0x4, 0x0) readv(r1, &(0x7f0000001080)=[{&(0x7f0000000000)=""/94, 0x5e}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2) 916.236603ms ago: executing program 0 (id=6585): socket$netlink(0x10, 0x3, 0x12) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100003b00015300000000fbdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000400), 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @random="6cf6566994c6", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x58, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @rand_addr=0x64010101}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x11, 0x1, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "263292fb99d5157ac6a6ec526f6518c7"}, @md5sig={0x13, 0x12, "a7e8ec95aa6295ea40a52b32e98fdeef"}, @generic={0x22, 0x9, "0d4eb00f4f5270"}]}}}}}}}, 0x0) 729.136689ms ago: executing program 4 (id=6586): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)={0xd4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xc0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x40004) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="384086be1c0dffffffff000000010000000800cb8004000880100001800c00108008000c00000000000000000800000000000000003c408560e751eae73073711c1188e8a39c5caf20cfb773cf6fa7a372bde76eb23eabce6a17976b52f349525c6b3aa36908"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9c, r2, 0x4}, 0x38) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 719.800574ms ago: executing program 0 (id=6587): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x6, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000140), 0x0}, 0x20) r4 = socket(0x15, 0x5, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40012160, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x208081, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x19, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}]}, &(0x7f00000005c0)='syzkaller\x00', 0x9, 0xa3, &(0x7f0000000600)=""/163, 0x41100, 0x1, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x5, 0x9, 0x4}, 0x10, 0x2b625, 0xffffffffffffffff, 0x5, &(0x7f0000000740)=[r1, r1], &(0x7f0000000780)=[{0x2, 0x2, 0x9, 0xc}, {0x2, 0x4, 0x7, 0x9}, {0x2, 0x1, 0xe, 0xc}, {0x5, 0x4, 0xe, 0xb}, {0x5, 0x2, 0x5}], 0x10, 0x5}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000000200), 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0x0) listen(r7, 0x0) close(0x3) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000008c0)=r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r9, 0x29, 0xc8, &(0x7f0000000340), 0x4) getsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f00000001c0), &(0x7f0000000940)=0x4) setsockopt$MRT6_DONE(r9, 0x29, 0xc9, 0x12, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x11, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x20000000}, @tail_call, @cb_func={0x18, 0xf, 0x4, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}], &(0x7f0000000000)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x1}, 0x94) 716.517358ms ago: executing program 2 (id=6498): socket(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000014000780080012400000000005001500020000000500010006000000050005000200000005000400000000000900"], 0x4c}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x7, 0x0, 0x5}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getroute={0x5c, 0x1a, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, [@RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '\x00'}}}, @RTA_EXPIRES={0x8, 0x17, 0x10000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x200088c0) (async) socket$can_bcm(0x1d, 0x2, 0x2) 590.592686ms ago: executing program 1 (id=6588): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4802860}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000c89c2d60936268e4d6b8c4387c4313d149cb857d58c67b8afb36579c00830105dd4e3802bcb98b368199fdbae897085e9d96258ded9c45766416da972d1cf29ae2b40a9c0c06e85142e5ebec861bcdf16ad1ddc600805f38949d19cd90e675800fddbbe04ae7973cd08972aa5688d4b16d6083bd5ba0783e0da6e81a6feace8912e932d551ee18545d73", @ANYRES16=r3, @ANYBLOB="00082cbd7000ffdbdf251a400000050092001b0000000800010041000000bcd0fad24111fcadb9184bb61211cc8f94b0f190f9e185f70a43988c0c3354df977f6ea61e235450de36", @ANYRES16=r4, @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0xc32341bb22e18d55}, 0x48840) (async) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4802860}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000c89c2d60936268e4d6b8c4387c4313d149cb857d58c67b8afb36579c00830105dd4e3802bcb98b368199fdbae897085e9d96258ded9c45766416da972d1cf29ae2b40a9c0c06e85142e5ebec861bcdf16ad1ddc600805f38949d19cd90e675800fddbbe04ae7973cd08972aa5688d4b16d6083bd5ba0783e0da6e81a6feace8912e932d551ee18545d73", @ANYRES16=r3, @ANYBLOB="00082cbd7000ffdbdf251a400000050092001b0000000800010041000000bcd0fad24111fcadb9184bb61211cc8f94b0f190f9e185f70a43988c0c3354df977f6ea61e235450de36", @ANYRES16=r4, @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0xc32341bb22e18d55}, 0x48840) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) sendmsg$key(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) shutdown(0xffffffffffffffff, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="97080000", @ANYRES16=r7, @ANYBLOB="110128bd7000fedbdf250900000008000300", @ANYRES32=r8, @ANYBLOB="0500080001000000050007000200fab92be6f4fcb36753451237c65acdeda82e54e78370fc9a6ebaaf11a671ad3d48cb5f9a244a904c4366141a98bc7031d068485638dbfa4d13a842571ebd90eb17d6adda5f81a8be98d14f493dcebe6d532fa8d5fb6a3ad6b64a87075d09ee20a6ee0ad52ebb50368e6fdd"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x48814) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="97080000", @ANYRES16=r7, @ANYBLOB="110128bd7000fedbdf250900000008000300", @ANYRES32=r8, @ANYBLOB="0500080001000000050007000200fab92be6f4fcb36753451237c65acdeda82e54e78370fc9a6ebaaf11a671ad3d48cb5f9a244a904c4366141a98bc7031d068485638dbfa4d13a842571ebd90eb17d6adda5f81a8be98d14f493dcebe6d532fa8d5fb6a3ad6b64a87075d09ee20a6ee0ad52ebb50368e6fdd"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x48814) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x12000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) socket$kcm(0x11, 0x3, 0x0) r11 = socket$inet(0x2, 0x4, 0x10) setsockopt$inet_opts(r11, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3", 0x1c) (async) setsockopt$inet_opts(r11, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3", 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64=r3], 0x74}, 0x1, 0x0, 0x0, 0x40970}, 0x10) 534.096537ms ago: executing program 2 (id=6589): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000ea030000730e1147a74ce5e300005395de5b0cd72b502d29b9c785b1b7fdfeaf008ec091f77ff431fa11490cfd1886e2f8ec44004ac6efc16a1190d2f3b6985f1e19977844ef782eb3de397b587c589271547fba01a7d4cb7a3a13f0c91f8c2ae82f9306f0ca57315b52143074c9bc", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES16=r0, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 501.668174ms ago: executing program 3 (id=6590): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 497.523872ms ago: executing program 4 (id=6591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x40d, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY={0x8}]}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0xfffffffc}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1}]}, 0x64}}, 0x0) 421.080521ms ago: executing program 0 (id=6592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0008000103"], 0x42) (async, rerun: 64) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="0f539af21094aaaaaaaaaabb86dd601200b000483a0000000000000000000000000084b60738bacd7fbbadb0022c1900000000ff02000000000000000000000000000104009078000000006000000000002c00fc010000000000000000000000000000200100000000000000000000000000012f0100000000000007fd1d4e9caa259c5a2541306a0822ebffff00fc0000000000000000"], 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @remote, 0x0, "d009000000000000006404000000dc3f0900000000000000d800000000000400", 0x0, 0x0, 0xfffffd, 0xfffffffd}, 0x3c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async, rerun: 64) r4 = socket(0x21, 0x3, 0x0) (rerun: 64) ioctl$NILFS_IOCTL_GET_CPSTAT(r4, 0x80186e83, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000010400000000000000000800c28a", @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800b00010067656e6576650000040002800a0001000f"], 0x40}}, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f0000000000)=0x4) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@newnexthop={0x1c, 0x68, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x10}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4880) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) (async, rerun: 64) sendmsg$tipc(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001000)="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", 0x1ca}], 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079100000000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c1250843791e0e134073a88cfcabe01ba5e03ab30"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) 372.053013ms ago: executing program 2 (id=6593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0x4}]}]}], {0x14, 0x10}}, 0xb8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3}}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r3, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) 330.633534ms ago: executing program 3 (id=6594): socket$netlink(0x10, 0x3, 0x1) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000003000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000"], 0x48}, 0x1, 0x0, 0xa1ffffffffffffff, 0x20040884}, 0x0) 155.751059ms ago: executing program 1 (id=6595): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1={0xfc, 0x1, '\x00', 0xfd}}}}}}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r6, &(0x7f0000000080)="05000000010001", 0x7) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0xfc, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xea, 0xf2, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb", @typed={0x4, 0xe9}]}]}, 0xfc}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010000", 0x7) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x1d, &(0x7f0000000000), 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd60687b2d00180085860120010000000000000000000000000000fe80000000000000000000000000001c080200000000000000000000000000000000ffffe000"], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000000001500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) 135.172795ms ago: executing program 0 (id=6596): syz_emit_ethernet(0xae, &(0x7f0000000840)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1, [{0x2, 0xa, "4efd30cc4fd5778d2eddbb50dcd9592d82d0f4824d00292bde7a4c3cbb9c8830e44d8bbf5cff62cb5652b1896b224ca8865ab267c2ec2c252e258b84b7dd7c3df974dd93dc0c51e30171cab29c79"}]}}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'tunl0\x00'}}, 0x1e) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00072f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e00"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x8facad2495c0b68c, &(0x7f00000002c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9}, 0x50) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd700004000000050000000800090002000000080008000000000000000b000000000006000100070000000500120009000000db227011a2238b48a24f4018561d4b3e4f3b0fef4b0b6e7e912ec1"], 0x3c}}, 0x20) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) syz_init_net_socket$ax25(0x3, 0x3, 0x7) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000001f701"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="0100fdfffffffcdbdf250200000008000300", @ANYRES32=0x0, @ANYBLOB="a47e3c144d8ac86afc2cee62ed3922c3f6f534659cb5cd288a9515240afe03f12909223f67a177"], 0x1c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x18, 0x0, 0x1, 0x70bd26, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 66.098218ms ago: executing program 3 (id=6597): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x1}, 0x14}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x3b, 0x0, 0x0, 0x0, "33a1b62ce530f264a9d74bb9c87767f5bb9e7a195967aa16e8a1db19469ee0cefda125916467c31ddf17507dc79bfc5086ae42b82b633e138c63f903e2ec0f2c"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) 0s ago: executing program 3 (id=6598): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) (async) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="fff50000140003000700000000000000000000000000000014000100ff"], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r9, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000011}, 0x40040) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) kernel console output (not intermixed with test programs): 3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 724.854111][T25588] RSP: 002b:00007f40937d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 724.854135][T25588] RAX: ffffffffffffffda RBX: 00007f40937d26c0 RCX: 00007f409295d04e [ 724.854150][T25588] RDX: 000000000000000f RSI: 00007f40937d20a0 RDI: 0000000000000004 [ 724.854163][T25588] RBP: 00007f40937d2090 R08: 0000000000000000 R09: 0000000000000000 [ 724.854175][T25588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 724.854188][T25588] R13: 00007f4092c16038 R14: 00007f4092c15fa0 R15: 00007ffe60a30c68 [ 724.854223][T25588] [ 725.619608][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.628736][ T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.666561][T25625] tipc: Enabling of bearer rejected, failed to enable media [ 725.801998][T25639] FAULT_INJECTION: forcing a failure. [ 725.801998][T25639] name failslab, interval 1, probability 0, space 0, times 0 [ 725.880494][T25644] __nla_validate_parse: 12 callbacks suppressed [ 725.880516][T25644] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5706'. [ 725.918508][T25639] CPU: 1 UID: 0 PID: 25639 Comm: syz.2.5705 Not tainted syzkaller #0 PREEMPT(full) [ 725.918539][T25639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 725.918552][T25639] Call Trace: [ 725.918561][T25639] [ 725.918578][T25639] dump_stack_lvl+0xe8/0x150 [ 725.918614][T25639] should_fail_ex+0x412/0x560 [ 725.918649][T25639] should_failslab+0xa8/0x100 [ 725.918673][T25639] __kmalloc_cache_noprof+0x88/0x660 [ 725.918702][T25639] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 725.918726][T25639] ? sctp_association_new+0x89/0x25e0 [ 725.918761][T25639] ? __asan_memcpy+0x40/0x70 [ 725.918791][T25639] sctp_association_new+0x89/0x25e0 [ 725.918820][T25639] ? sctp_do_bind+0x661/0x9d0 [ 725.918854][T25639] ? __ipv6_addr_type+0x10c/0x2f0 [ 725.918888][T25639] sctp_connect_new_asoc+0x2e4/0x6b0 [ 725.918928][T25639] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 725.918969][T25639] ? __local_bh_enable_ip+0xd0/0x130 [ 725.918995][T25639] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 725.919013][T25639] ? security_sctp_bind_connect+0x7e/0x2c0 [ 725.919040][T25639] sctp_sendmsg+0x1528/0x2c10 [ 725.919065][T25639] ? unwind_next_frame+0xa6/0x2550 [ 725.919102][T25639] ? __pfx_sctp_sendmsg+0x10/0x10 [ 725.919132][T25639] ? aa_sk_perm+0x6d5/0x900 [ 725.919168][T25639] ? __pfx_aa_sk_perm+0x10/0x10 [ 725.919205][T25639] ? sock_rps_record_flow+0x19/0x350 [ 725.919230][T25639] ? inet_sendmsg+0x2f4/0x370 [ 725.919254][T25639] ____sys_sendmsg+0x80a/0x9f0 [ 725.919295][T25639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.919337][T25639] ? import_iovec+0x73/0xa0 [ 725.919362][T25639] ___sys_sendmsg+0x2a5/0x360 [ 725.919391][T25639] ? __lock_acquire+0x6b5/0x2cf0 [ 725.919423][T25639] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.919501][T25639] ? __fget_files+0x2a/0x420 [ 725.919527][T25639] ? __fget_files+0x3a0/0x420 [ 725.919565][T25639] __x64_sys_sendmsg+0x1bd/0x2a0 [ 725.919600][T25639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 725.919641][T25639] ? __pfx_ksys_write+0x10/0x10 [ 725.919681][T25639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.919705][T25639] do_syscall_64+0x15f/0xf80 [ 725.919730][T25639] ? trace_irq_disable+0x3b/0x140 [ 725.919753][T25639] ? clear_bhb_loop+0x40/0x90 [ 725.919778][T25639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.919798][T25639] RIP: 0033:0x7f409299c819 [ 725.919819][T25639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.919838][T25639] RSP: 002b:00007f40937d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.919861][T25639] RAX: ffffffffffffffda RBX: 00007f4092c15fa0 RCX: 00007f409299c819 [ 725.919877][T25639] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 725.919891][T25639] RBP: 00007f40937d2090 R08: 0000000000000000 R09: 0000000000000000 [ 725.919903][T25639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.919915][T25639] R13: 00007f4092c16038 R14: 00007f4092c15fa0 R15: 00007ffe60a30c68 [ 725.919947][T25639] [ 726.286668][T25654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5708'. [ 726.360021][T25656] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5709'. [ 726.374328][T25644] bond1 (unregistering): Released all slaves [ 726.515644][T25660] netlink: 'syz.2.5712': attribute type 1 has an invalid length. [ 726.523767][T25660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5712'. [ 727.038593][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.048476][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.089514][T25691] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5721'. [ 727.597109][T25703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5723'. [ 727.644966][T25703] nbd: must specify at least one socket [ 727.766163][T25690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.781514][T25709] x_tables: duplicate underflow at hook 3 [ 727.787393][T25710] tipc: Enabling of bearer rejected, already enabled [ 727.869882][ T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.176511][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.184875][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.217451][T25735] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5731'. [ 728.546997][T25744] Cannot find set identified by id 3 to match [ 728.658015][T25748] netlink: 'syz.4.5735': attribute type 39 has an invalid length. [ 728.725590][T25751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5736'. [ 728.893052][T25751] 8021q: adding VLAN 0 to HW filter on device bond5 [ 729.379504][T25764] tipc: Enabling of bearer rejected, failed to enable media [ 729.419254][T25765] macvlan3: entered promiscuous mode [ 729.433966][T25765] macvlan3: entered allmulticast mode [ 729.492704][T25794] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5742'. [ 729.757051][T25802] FAULT_INJECTION: forcing a failure. [ 729.757051][T25802] name failslab, interval 1, probability 0, space 0, times 0 [ 729.779686][T25802] CPU: 1 UID: 0 PID: 25802 Comm: syz.2.5743 Not tainted syzkaller #0 PREEMPT(full) [ 729.779716][T25802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 729.779729][T25802] Call Trace: [ 729.779738][T25802] [ 729.779748][T25802] dump_stack_lvl+0xe8/0x150 [ 729.779784][T25802] should_fail_ex+0x412/0x560 [ 729.779821][T25802] should_failslab+0xa8/0x100 [ 729.779844][T25802] __kmalloc_cache_noprof+0x88/0x660 [ 729.779876][T25802] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 729.779900][T25802] ? sctp_add_bind_addr+0x8c/0x370 [ 729.779929][T25802] sctp_add_bind_addr+0x8c/0x370 [ 729.779957][T25802] sctp_copy_local_addr_list+0x314/0x4f0 [ 729.779984][T25802] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 729.780008][T25802] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 729.780035][T25802] ? sctp_v6_is_any+0x64/0x80 [ 729.780061][T25802] ? sctp_copy_one_addr+0x93/0x360 [ 729.780090][T25802] sctp_bind_addr_copy+0xb3/0x3c0 [ 729.780115][T25802] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 729.780151][T25802] sctp_connect_new_asoc+0x2ff/0x6b0 [ 729.780183][T25802] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 729.780220][T25802] ? __local_bh_enable_ip+0xd0/0x130 [ 729.780246][T25802] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 729.780268][T25802] ? security_sctp_bind_connect+0x7e/0x2c0 [ 729.780297][T25802] sctp_sendmsg+0x1528/0x2c10 [ 729.780323][T25802] ? unwind_next_frame+0xa6/0x2550 [ 729.780359][T25802] ? __pfx_sctp_sendmsg+0x10/0x10 [ 729.780392][T25802] ? aa_sk_perm+0x6d5/0x900 [ 729.780438][T25802] ? __pfx_aa_sk_perm+0x10/0x10 [ 729.780467][T25802] ? sock_rps_record_flow+0x19/0x350 [ 729.780491][T25802] ? inet_sendmsg+0x2f4/0x370 [ 729.780516][T25802] ____sys_sendmsg+0x80a/0x9f0 [ 729.780569][T25802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.780616][T25802] ? import_iovec+0x73/0xa0 [ 729.780651][T25802] ___sys_sendmsg+0x2a5/0x360 [ 729.780679][T25802] ? __lock_acquire+0x6b5/0x2cf0 [ 729.780712][T25802] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.780795][T25802] ? __fget_files+0x2a/0x420 [ 729.780821][T25802] ? __fget_files+0x3a0/0x420 [ 729.780868][T25802] __x64_sys_sendmsg+0x1bd/0x2a0 [ 729.780903][T25802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.780946][T25802] ? __pfx_ksys_write+0x10/0x10 [ 729.780994][T25802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.781018][T25802] do_syscall_64+0x15f/0xf80 [ 729.781042][T25802] ? trace_irq_disable+0x3b/0x140 [ 729.781066][T25802] ? clear_bhb_loop+0x40/0x90 [ 729.781092][T25802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.781110][T25802] RIP: 0033:0x7f409299c819 [ 729.781128][T25802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.781146][T25802] RSP: 002b:00007f40937d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.781177][T25802] RAX: ffffffffffffffda RBX: 00007f4092c15fa0 RCX: 00007f409299c819 [ 729.781193][T25802] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 729.781207][T25802] RBP: 00007f40937d2090 R08: 0000000000000000 R09: 0000000000000000 [ 729.781220][T25802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.781232][T25802] R13: 00007f4092c16038 R14: 00007f4092c15fa0 R15: 00007ffe60a30c68 [ 729.781268][T25802] [ 729.869964][T25808] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5746'. [ 730.240623][T25821] Cannot find set identified by id 3 to match [ 730.438807][ T3551] net_ratelimit: 2 callbacks suppressed [ 730.438832][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.538295][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.549863][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.601611][T25807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.999683][T25857] tipc: Enabling of bearer rejected, already enabled [ 731.695768][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.704523][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.728763][T25895] __nla_validate_parse: 1 callbacks suppressed [ 731.728785][T25895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5762'. [ 731.769886][T25900] tipc: Enabling of bearer rejected, failed to enable media [ 731.829448][T25905] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5766'. [ 731.850841][T25910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5769'. [ 732.399746][T25934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5773'. [ 732.413966][T25932] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5772'. [ 732.440721][T25932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5772'. [ 732.694940][T25950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5777'. [ 732.764359][T25956] netlink: 'syz.4.5779': attribute type 12 has an invalid length. [ 732.827288][ T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.845138][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.034505][T25971] netlink: 'syz.0.5783': attribute type 20 has an invalid length. [ 733.036725][T25974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5781'. [ 733.069321][T25971] IPv6: NLM_F_CREATE should be specified when creating new route [ 733.187240][T25978] tipc: Enabling of bearer rejected, failed to enable media [ 733.330668][T25986] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5786'. [ 733.367645][T25986] openvswitch: netlink: Flow actions attr not present in new flow. [ 733.466453][T25995] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5786'. [ 733.633680][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.995313][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.041026][T26019] ipt_rpfilter: unknown options [ 734.400807][T26041] veth1_macvtap: left promiscuous mode [ 734.466477][T26047] netlink: 'syz.2.5800': attribute type 28 has an invalid length. [ 734.492745][T26049] bridge_slave_1: left allmulticast mode [ 734.526764][T26049] bridge_slave_1: left promiscuous mode [ 734.547423][T26049] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.611117][T26049] bridge_slave_0: left allmulticast mode [ 734.624204][T26049] bridge_slave_0: left promiscuous mode [ 734.644894][T26049] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.727727][T26058] tipc: Enabling of bearer rejected, already enabled [ 735.337301][T26091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.529627][T26100] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 735.561288][T26100] bond9: (slave lo): Enslaving as an active interface with an up link [ 735.573758][T26100] net_ratelimit: 6 callbacks suppressed [ 735.573780][T26100] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 735.986283][T26121] openvswitch: netlink: Flow actions attr not present in new flow. [ 736.188400][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.206188][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.268691][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.385923][T26137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.666805][T26154] syzkaller0: entered promiscuous mode [ 736.672628][T26154] syzkaller0: entered allmulticast mode [ 737.173963][T26175] __nla_validate_parse: 13 callbacks suppressed [ 737.173988][T26175] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5836'. [ 737.345327][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.418232][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.816946][T26208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5844'. [ 737.849786][T26202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5842'. [ 737.984325][T26212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5843'. [ 738.031073][T26205] syzkaller0: entered promiscuous mode [ 738.042736][T26212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5843'. [ 738.055724][T26205] syzkaller0: entered allmulticast mode [ 738.476555][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.590079][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.843298][T26216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.387231][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.713036][ T48] net_ratelimit: 2 callbacks suppressed [ 740.713060][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.835604][ T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.708871][T26250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5853'. [ 741.796529][T26250] netlink: 'syz.1.5853': attribute type 1 has an invalid length. [ 741.837103][T26250] netlink: 'syz.1.5853': attribute type 2 has an invalid length. [ 741.847336][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.863931][T26257] netlink: 'syz.3.5854': attribute type 1 has an invalid length. [ 741.874972][T26259] netlink: 'syz.0.5855': attribute type 10 has an invalid length. [ 741.893550][T26257] netlink: 'syz.3.5854': attribute type 4 has an invalid length. [ 741.914906][T26257] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5854'. [ 741.948543][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.958330][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.369931][T26275] syzkaller0: entered promiscuous mode [ 742.382446][T26275] syzkaller0: entered allmulticast mode [ 742.390332][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5865'. [ 742.411111][T26282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5864'. [ 742.411828][T26290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5865'. [ 742.451626][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5864'. [ 742.455737][T26290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5865'. [ 742.691711][T26301] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5870'. [ 742.961932][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.107465][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.096855][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.262655][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.149271][ T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.773292][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5865'. [ 745.795237][T26290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5865'. [ 745.810209][ T1164] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.829607][T26290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5865'. [ 745.842388][ T1164] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.876085][ T1164] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.904950][ T1164] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.976911][T26317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5876'. [ 746.141220][T26321] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 746.399677][ T69] net_ratelimit: 2 callbacks suppressed [ 746.399701][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.496826][T26338] FAULT_INJECTION: forcing a failure. [ 746.496826][T26338] name failslab, interval 1, probability 0, space 0, times 0 [ 746.516503][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.549830][T26338] CPU: 0 UID: 0 PID: 26338 Comm: syz.3.5881 Not tainted syzkaller #0 PREEMPT(full) [ 746.549860][T26338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 746.549873][T26338] Call Trace: [ 746.549897][T26338] [ 746.549906][T26338] dump_stack_lvl+0xe8/0x150 [ 746.549942][T26338] should_fail_ex+0x412/0x560 [ 746.549979][T26338] should_failslab+0xa8/0x100 [ 746.550013][T26338] __kmalloc_cache_noprof+0x88/0x660 [ 746.550043][T26338] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 746.550065][T26338] ? sctp_v6_cmp_addr+0x15/0xd0 [ 746.550086][T26338] ? sctp_add_bind_addr+0x8c/0x370 [ 746.550115][T26338] sctp_add_bind_addr+0x8c/0x370 [ 746.550144][T26338] sctp_copy_local_addr_list+0x314/0x4f0 [ 746.550172][T26338] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 746.550195][T26338] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 746.550220][T26338] ? sctp_v6_is_any+0x64/0x80 [ 746.550245][T26338] ? sctp_copy_one_addr+0x93/0x360 [ 746.550272][T26338] sctp_bind_addr_copy+0xb3/0x3c0 [ 746.550298][T26338] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 746.550333][T26338] sctp_connect_new_asoc+0x2ff/0x6b0 [ 746.550364][T26338] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 746.550406][T26338] ? __local_bh_enable_ip+0xd0/0x130 [ 746.550432][T26338] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 746.550453][T26338] ? security_sctp_bind_connect+0x7e/0x2c0 [ 746.550479][T26338] sctp_sendmsg+0x1528/0x2c10 [ 746.550503][T26338] ? unwind_next_frame+0xa6/0x2550 [ 746.550539][T26338] ? __pfx_sctp_sendmsg+0x10/0x10 [ 746.550571][T26338] ? aa_sk_perm+0x6d5/0x900 [ 746.550606][T26338] ? __pfx_aa_sk_perm+0x10/0x10 [ 746.550636][T26338] ? sock_rps_record_flow+0x19/0x350 [ 746.550661][T26338] ? inet_sendmsg+0x2f4/0x370 [ 746.550686][T26338] ____sys_sendmsg+0x80a/0x9f0 [ 746.550727][T26338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.550767][T26338] ? import_iovec+0x73/0xa0 [ 746.550792][T26338] ___sys_sendmsg+0x2a5/0x360 [ 746.550821][T26338] ? __lock_acquire+0x6b5/0x2cf0 [ 746.550852][T26338] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.550920][T26338] ? __fget_files+0x2a/0x420 [ 746.550947][T26338] ? __fget_files+0x3a0/0x420 [ 746.550984][T26338] __x64_sys_sendmsg+0x1bd/0x2a0 [ 746.551028][T26338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 746.551070][T26338] ? __pfx_ksys_write+0x10/0x10 [ 746.551111][T26338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.551135][T26338] do_syscall_64+0x15f/0xf80 [ 746.551160][T26338] ? trace_irq_disable+0x3b/0x140 [ 746.551184][T26338] ? clear_bhb_loop+0x40/0x90 [ 746.551211][T26338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.551232][T26338] RIP: 0033:0x7f340279c819 [ 746.551252][T26338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.551270][T26338] RSP: 002b:00007f3403572028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.551295][T26338] RAX: ffffffffffffffda RBX: 00007f3402a15fa0 RCX: 00007f340279c819 [ 746.551311][T26338] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 746.551324][T26338] RBP: 00007f3403572090 R08: 0000000000000000 R09: 0000000000000000 [ 746.551337][T26338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.551350][T26338] R13: 00007f3402a16038 R14: 00007f3402a15fa0 R15: 00007ffe8aa40fd8 [ 746.551386][T26338] [ 746.557427][T26343] nbd: illegal input index 2958377 [ 746.811499][T26347] syzkaller0: entered promiscuous mode [ 746.820361][T26344] netlink: 'syz.4.5885': attribute type 9 has an invalid length. [ 746.918629][T26347] syzkaller0: entered allmulticast mode [ 746.934400][T26352] netlink: 'syz.1.5888': attribute type 32 has an invalid length. [ 747.302037][T26370] netlink: 'syz.2.5890': attribute type 1 has an invalid length. [ 747.311388][T26370] netlink: 'syz.2.5890': attribute type 2 has an invalid length. [ 747.320194][T26370] netlink: 'syz.2.5890': attribute type 2 has an invalid length. [ 747.353396][T26370] netlink: 'syz.2.5890': attribute type 2 has an invalid length. [ 747.605224][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.651433][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.716705][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.728092][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.775497][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.865348][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.905651][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.287526][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.349400][T26352] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 750.350535][T26359] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 750.566151][T26381] __nla_validate_parse: 6 callbacks suppressed [ 750.566176][T26381] netlink: 404 bytes leftover after parsing attributes in process `syz.3.5894'. [ 750.653495][T26381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5894'. [ 750.698006][T26391] IPVS: ip_vs_edit_dest(): server weight less than zero [ 750.714252][T26381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5894'. [ 750.737934][T26394] FAULT_INJECTION: forcing a failure. [ 750.737934][T26394] name failslab, interval 1, probability 0, space 0, times 0 [ 750.761188][T26381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5894'. [ 750.766353][T26394] CPU: 1 UID: 0 PID: 26394 Comm: syz.1.5898 Not tainted syzkaller #0 PREEMPT(full) [ 750.766386][T26394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 750.766397][T26394] Call Trace: [ 750.766405][T26394] [ 750.766414][T26394] dump_stack_lvl+0xe8/0x150 [ 750.766448][T26394] should_fail_ex+0x412/0x560 [ 750.766480][T26394] should_failslab+0xa8/0x100 [ 750.766508][T26394] __kmalloc_cache_noprof+0x88/0x660 [ 750.766534][T26394] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 750.766557][T26394] ? sctp_add_bind_addr+0x8c/0x370 [ 750.766583][T26394] sctp_add_bind_addr+0x8c/0x370 [ 750.766609][T26394] sctp_copy_local_addr_list+0x314/0x4f0 [ 750.766634][T26394] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 750.766655][T26394] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 750.766679][T26394] ? sctp_v6_is_any+0x64/0x80 [ 750.766702][T26394] ? sctp_copy_one_addr+0x93/0x360 [ 750.766727][T26394] sctp_bind_addr_copy+0xb3/0x3c0 [ 750.766749][T26394] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 750.766781][T26394] sctp_connect_new_asoc+0x2ff/0x6b0 [ 750.766811][T26394] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 750.766843][T26394] ? __local_bh_enable_ip+0xd0/0x130 [ 750.766867][T26394] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 750.766886][T26394] ? security_sctp_bind_connect+0x7e/0x2c0 [ 750.766911][T26394] sctp_sendmsg+0x1528/0x2c10 [ 750.766934][T26394] ? unwind_next_frame+0xa6/0x2550 [ 750.766968][T26394] ? __pfx_sctp_sendmsg+0x10/0x10 [ 750.766997][T26394] ? aa_sk_perm+0x6d5/0x900 [ 750.767029][T26394] ? __pfx_aa_sk_perm+0x10/0x10 [ 750.767056][T26394] ? sock_rps_record_flow+0x19/0x350 [ 750.767079][T26394] ? inet_sendmsg+0x2f4/0x370 [ 750.767101][T26394] ____sys_sendmsg+0x80a/0x9f0 [ 750.767147][T26394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 750.767184][T26394] ? import_iovec+0x73/0xa0 [ 750.767208][T26394] ___sys_sendmsg+0x2a5/0x360 [ 750.767234][T26394] ? __lock_acquire+0x6b5/0x2cf0 [ 750.767264][T26394] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.767329][T26394] ? __fget_files+0x2a/0x420 [ 750.767352][T26394] ? __fget_files+0x3a0/0x420 [ 750.767385][T26394] __x64_sys_sendmsg+0x1bd/0x2a0 [ 750.767417][T26394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 750.767454][T26394] ? __pfx_ksys_write+0x10/0x10 [ 750.767492][T26394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.767512][T26394] do_syscall_64+0x15f/0xf80 [ 750.767535][T26394] ? trace_irq_disable+0x3b/0x140 [ 750.767556][T26394] ? clear_bhb_loop+0x40/0x90 [ 750.767579][T26394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.767598][T26394] RIP: 0033:0x7f578f59c819 [ 750.767617][T26394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.767633][T26394] RSP: 002b:00007f57904c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.767655][T26394] RAX: ffffffffffffffda RBX: 00007f578f815fa0 RCX: 00007f578f59c819 [ 750.767669][T26394] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 750.767681][T26394] RBP: 00007f57904c8090 R08: 0000000000000000 R09: 0000000000000000 [ 750.767692][T26394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.767704][T26394] R13: 00007f578f816038 R14: 00007f578f815fa0 R15: 00007ffd8c02d508 [ 750.767737][T26394] [ 751.377971][T26428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5904'. [ 751.482084][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5901'. [ 752.136869][ T3551] net_ratelimit: 2 callbacks suppressed [ 752.136904][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.166582][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.240640][T26464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5906'. [ 752.250540][T26464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5906'. [ 753.256468][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.323581][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.471527][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.365391][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.455504][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.385902][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.488981][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.556488][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.686687][T26502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5919'. [ 755.738527][T26502] bridge5: entered promiscuous mode [ 755.768403][T26502] bridge5: entered allmulticast mode [ 755.859287][T26509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5923'. [ 755.887154][T26509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5923'. [ 756.263206][T26537] veth0: entered promiscuous mode [ 756.355248][T26541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5929'. [ 756.366649][T26536] veth0: left promiscuous mode [ 756.415816][T26541] netlink: 'syz.0.5929': attribute type 32 has an invalid length. [ 756.439445][T26541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5929'. [ 756.476410][T26546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5929'. [ 756.631351][T26541] bond7: Setting coupled_control to off (0) [ 756.791032][T26572] netlink: 'syz.4.5938': attribute type 32 has an invalid length. [ 756.806523][T26572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5938'. [ 756.882554][T26572] bond9: option coupled_control: invalid value (20) [ 756.892285][T26572] bond9 (unregistering): Released all slaves [ 756.990234][T26583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5942'. [ 757.048947][T26589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5942'. [ 757.461158][T26611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5952'. [ 757.509609][T26611] netlink: 'syz.1.5952': attribute type 7 has an invalid length. [ 757.542731][T26615] netlink: 'syz.3.5954': attribute type 2 has an invalid length. [ 757.560139][T26611] erspan0: entered promiscuous mode [ 757.567496][T26611] gretap0: entered promiscuous mode [ 757.595058][T26619] netlink: 'syz.4.5955': attribute type 2 has an invalid length. [ 757.616599][T26619] netlink: 'syz.4.5955': attribute type 2 has an invalid length. [ 757.648597][T26618] netlink: 'syz.4.5955': attribute type 2 has an invalid length. [ 757.665490][T26618] netlink: 'syz.4.5955': attribute type 2 has an invalid length. [ 757.788021][ T3551] net_ratelimit: 2 callbacks suppressed [ 757.788052][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.836584][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.267978][T26655] netlink: 'syz.1.5967': attribute type 6 has an invalid length. [ 758.293737][T26655] netlink: 'syz.1.5967': attribute type 6 has an invalid length. [ 758.557700][T26668] lo: left allmulticast mode [ 758.570595][T26669] netlink: Unknown conntrack attr (0) [ 758.738447][T26673] wg1: entered promiscuous mode [ 758.757302][T26673] wg1: entered allmulticast mode [ 758.947144][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.985354][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.061289][T26688] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 759.115027][T26697] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 759.238929][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.968324][T26748] syzkaller0: entered promiscuous mode [ 759.978554][T26748] syzkaller0: entered allmulticast mode [ 760.086520][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.096238][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.168818][T26762] FAULT_INJECTION: forcing a failure. [ 760.168818][T26762] name failslab, interval 1, probability 0, space 0, times 0 [ 760.206627][T26762] CPU: 1 UID: 0 PID: 26762 Comm: syz.0.6000 Not tainted syzkaller #0 PREEMPT(full) [ 760.206660][T26762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 760.206673][T26762] Call Trace: [ 760.206682][T26762] [ 760.206692][T26762] dump_stack_lvl+0xe8/0x150 [ 760.206729][T26762] should_fail_ex+0x412/0x560 [ 760.206765][T26762] should_failslab+0xa8/0x100 [ 760.206789][T26762] __kmalloc_cache_noprof+0x88/0x660 [ 760.206820][T26762] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 760.206843][T26762] ? sctp_add_bind_addr+0x8c/0x370 [ 760.206872][T26762] sctp_add_bind_addr+0x8c/0x370 [ 760.206901][T26762] sctp_copy_local_addr_list+0x314/0x4f0 [ 760.206930][T26762] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 760.206955][T26762] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 760.206981][T26762] ? sctp_v6_is_any+0x64/0x80 [ 760.207008][T26762] ? sctp_copy_one_addr+0x93/0x360 [ 760.207044][T26762] sctp_bind_addr_copy+0xb3/0x3c0 [ 760.207070][T26762] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 760.207106][T26762] sctp_connect_new_asoc+0x2ff/0x6b0 [ 760.207139][T26762] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 760.207177][T26762] ? __local_bh_enable_ip+0xd0/0x130 [ 760.207204][T26762] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 760.207225][T26762] ? security_sctp_bind_connect+0x7e/0x2c0 [ 760.207252][T26762] sctp_sendmsg+0x1528/0x2c10 [ 760.207277][T26762] ? unwind_next_frame+0xa6/0x2550 [ 760.207314][T26762] ? __pfx_sctp_sendmsg+0x10/0x10 [ 760.207345][T26762] ? aa_sk_perm+0x6d5/0x900 [ 760.207380][T26762] ? __pfx_aa_sk_perm+0x10/0x10 [ 760.207410][T26762] ? sock_rps_record_flow+0x19/0x350 [ 760.207435][T26762] ? inet_sendmsg+0x2f4/0x370 [ 760.207459][T26762] ____sys_sendmsg+0x80a/0x9f0 [ 760.207499][T26762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.207549][T26762] ? import_iovec+0x73/0xa0 [ 760.207574][T26762] ___sys_sendmsg+0x2a5/0x360 [ 760.207602][T26762] ? __lock_acquire+0x6b5/0x2cf0 [ 760.207631][T26762] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.207694][T26762] ? __fget_files+0x2a/0x420 [ 760.207718][T26762] ? __fget_files+0x3a0/0x420 [ 760.207758][T26762] __x64_sys_sendmsg+0x1bd/0x2a0 [ 760.207791][T26762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.207831][T26762] ? __pfx_ksys_write+0x10/0x10 [ 760.207869][T26762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.207890][T26762] do_syscall_64+0x15f/0xf80 [ 760.207915][T26762] ? trace_irq_disable+0x3b/0x140 [ 760.207939][T26762] ? clear_bhb_loop+0x40/0x90 [ 760.207963][T26762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.207983][T26762] RIP: 0033:0x7f56a359c819 [ 760.208005][T26762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.208023][T26762] RSP: 002b:00007f56a4488028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.208054][T26762] RAX: ffffffffffffffda RBX: 00007f56a3815fa0 RCX: 00007f56a359c819 [ 760.208070][T26762] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 760.208084][T26762] RBP: 00007f56a4488090 R08: 0000000000000000 R09: 0000000000000000 [ 760.208096][T26762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 760.208109][T26762] R13: 00007f56a3816038 R14: 00007f56a3815fa0 R15: 00007ffcff379978 [ 760.208145][T26762] [ 760.623765][T26769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.749789][T26774] __nla_validate_parse: 20 callbacks suppressed [ 760.749823][T26774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6007'. [ 760.853151][T26784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6011'. [ 761.110093][T26798] FAULT_INJECTION: forcing a failure. [ 761.110093][T26798] name failslab, interval 1, probability 0, space 0, times 0 [ 761.123839][T26798] CPU: 0 UID: 0 PID: 26798 Comm: syz.0.6017 Not tainted syzkaller #0 PREEMPT(full) [ 761.123870][T26798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 761.123882][T26798] Call Trace: [ 761.123891][T26798] [ 761.123900][T26798] dump_stack_lvl+0xe8/0x150 [ 761.123936][T26798] should_fail_ex+0x412/0x560 [ 761.123981][T26798] should_failslab+0xa8/0x100 [ 761.124006][T26798] __kmalloc_cache_noprof+0x88/0x660 [ 761.124036][T26798] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 761.124058][T26798] ? sctp_add_bind_addr+0x8c/0x370 [ 761.124086][T26798] sctp_add_bind_addr+0x8c/0x370 [ 761.124115][T26798] sctp_copy_local_addr_list+0x314/0x4f0 [ 761.124143][T26798] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 761.124167][T26798] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 761.124194][T26798] ? sctp_v6_is_any+0x64/0x80 [ 761.124219][T26798] ? sctp_copy_one_addr+0x93/0x360 [ 761.124246][T26798] sctp_bind_addr_copy+0xb3/0x3c0 [ 761.124271][T26798] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 761.124307][T26798] sctp_connect_new_asoc+0x2ff/0x6b0 [ 761.124339][T26798] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 761.124373][T26798] ? __local_bh_enable_ip+0xd0/0x130 [ 761.124399][T26798] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 761.124419][T26798] ? security_sctp_bind_connect+0x7e/0x2c0 [ 761.124445][T26798] sctp_sendmsg+0x1528/0x2c10 [ 761.124470][T26798] ? unwind_next_frame+0xa6/0x2550 [ 761.124507][T26798] ? __pfx_sctp_sendmsg+0x10/0x10 [ 761.124538][T26798] ? aa_sk_perm+0x6d5/0x900 [ 761.124575][T26798] ? __pfx_aa_sk_perm+0x10/0x10 [ 761.124604][T26798] ? sock_rps_record_flow+0x19/0x350 [ 761.124628][T26798] ? inet_sendmsg+0x2f4/0x370 [ 761.124658][T26798] ____sys_sendmsg+0x80a/0x9f0 [ 761.124698][T26798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.124739][T26798] ? import_iovec+0x73/0xa0 [ 761.124764][T26798] ___sys_sendmsg+0x2a5/0x360 [ 761.124793][T26798] ? __lock_acquire+0x6b5/0x2cf0 [ 761.124825][T26798] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.124894][T26798] ? __fget_files+0x2a/0x420 [ 761.124919][T26798] ? __fget_files+0x3a0/0x420 [ 761.124956][T26798] __x64_sys_sendmsg+0x1bd/0x2a0 [ 761.124998][T26798] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 761.125039][T26798] ? __pfx_ksys_write+0x10/0x10 [ 761.125078][T26798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.125101][T26798] do_syscall_64+0x15f/0xf80 [ 761.125125][T26798] ? trace_irq_disable+0x3b/0x140 [ 761.125147][T26798] ? clear_bhb_loop+0x40/0x90 [ 761.125172][T26798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.125193][T26798] RIP: 0033:0x7f56a359c819 [ 761.125214][T26798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.125232][T26798] RSP: 002b:00007f56a4488028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.125255][T26798] RAX: ffffffffffffffda RBX: 00007f56a3815fa0 RCX: 00007f56a359c819 [ 761.125270][T26798] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 761.125283][T26798] RBP: 00007f56a4488090 R08: 0000000000000000 R09: 0000000000000000 [ 761.125296][T26798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 761.125309][T26798] R13: 00007f56a3816038 R14: 00007f56a3815fa0 R15: 00007ffcff379978 [ 761.125343][T26798] [ 761.147471][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.624455][T26819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6022'. [ 761.638668][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.712384][T26824] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6025'. [ 761.750969][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6023'. [ 761.843583][T26833] validate_nla: 3 callbacks suppressed [ 761.843606][T26833] netlink: 'syz.2.6026': attribute type 6 has an invalid length. [ 762.009445][T26840] dvmrp1: entered allmulticast mode [ 762.134472][T26848] netlink: 'syz.4.6034': attribute type 1 has an invalid length. [ 762.143809][T26848] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6034'. [ 762.154428][T26848] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6034'. [ 762.166116][T26848] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6034'. [ 762.178612][T26849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6033'. [ 762.379363][T26862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6038'. [ 762.393443][T26854] syzkaller0: entered promiscuous mode [ 762.408966][T26854] syzkaller0: entered allmulticast mode [ 762.452131][T26865] netlink: 'syz.0.6040': attribute type 15 has an invalid length. [ 762.765007][T26884] netlink: 'syz.4.6043': attribute type 6 has an invalid length. [ 762.773063][T26884] netlink: 'syz.4.6043': attribute type 5 has an invalid length. [ 763.901143][ T1112] net_ratelimit: 4 callbacks suppressed [ 763.901166][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.915562][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.007851][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.053883][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.068048][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.065359][T26865] netlink: 'syz.0.6040': attribute type 15 has an invalid length. [ 766.073574][T26865] __nla_validate_parse: 6 callbacks suppressed [ 766.073593][T26865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6040'. [ 766.077334][T26883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6044'. [ 766.108920][T26884] team0 (unregistering): Port device team_slave_1 removed [ 766.140296][T26884] team0 (unregistering): Port device dummy0 removed [ 766.177172][T26873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.191435][ T81] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 766.209471][ T81] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 766.219439][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.228510][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.251302][ T81] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 766.272326][ T81] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 766.581761][T26905] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 766.589526][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.600556][T26915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6053'. [ 766.778020][T26920] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 766.934532][T26926] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.6058'. [ 766.949940][T26927] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.6058'. [ 767.217692][T26937] IPv6: NLM_F_CREATE should be specified when creating new route [ 767.358757][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.392255][T26949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6063'. [ 767.563739][T26954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6066'. [ 767.616112][T26960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6068'. [ 767.646897][T26960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6068'. [ 767.759577][T26964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6070'. [ 767.985702][T26978] "syz.2.6074" (26978) uses obsolete ecb(arc4) skcipher [ 768.256048][T26992] netlink: 'syz.3.6079': attribute type 10 has an invalid length. [ 768.591109][T27002] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 768.639741][T27001] xt_hashlimit: size too large, truncated to 1048576 [ 769.595108][ T1164] net_ratelimit: 5 callbacks suppressed [ 769.595129][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.612150][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.834859][T25078] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 769.846798][T25078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 769.869059][T25078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 769.890827][T25078] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 769.900468][T25078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 770.407249][T27073] xt_hashlimit: size too large, truncated to 1048576 [ 770.736660][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.746500][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.980258][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.074394][T27092] netlink: 'syz.3.6113': attribute type 29 has an invalid length. [ 771.091096][T27092] __nla_validate_parse: 7 callbacks suppressed [ 771.091120][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6113'. [ 771.218934][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.422610][T27110] netlink: 'syz.2.6119': attribute type 21 has an invalid length. [ 771.463927][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.490745][T27113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6120'. [ 771.500600][T27110] netlink: 'syz.2.6119': attribute type 1 has an invalid length. [ 771.621264][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.677520][T27054] chnl_net:caif_netlink_parms(): no params data found [ 771.887588][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.896956][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.945359][ T5832] Bluetooth: hci5: command tx timeout [ 771.998059][T27138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6126'. [ 772.025826][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.069779][T27143] FAULT_INJECTION: forcing a failure. [ 772.069779][T27143] name failslab, interval 1, probability 0, space 0, times 0 [ 772.091007][T27144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6129'. [ 772.102454][T27143] CPU: 0 UID: 0 PID: 27143 Comm: syz.4.6128 Not tainted syzkaller #0 PREEMPT(full) [ 772.102485][T27143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 772.102498][T27143] Call Trace: [ 772.102506][T27143] [ 772.102516][T27143] dump_stack_lvl+0xe8/0x150 [ 772.102553][T27143] should_fail_ex+0x412/0x560 [ 772.102588][T27143] should_failslab+0xa8/0x100 [ 772.102613][T27143] __kmalloc_cache_noprof+0x88/0x660 [ 772.102643][T27143] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 772.102668][T27143] ? sctp_add_bind_addr+0x8c/0x370 [ 772.102698][T27143] sctp_add_bind_addr+0x8c/0x370 [ 772.102727][T27143] sctp_copy_local_addr_list+0x314/0x4f0 [ 772.102754][T27143] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 772.102777][T27143] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 772.102803][T27143] ? sctp_v6_is_any+0x64/0x80 [ 772.102840][T27143] ? sctp_copy_one_addr+0x93/0x360 [ 772.102869][T27143] sctp_bind_addr_copy+0xb3/0x3c0 [ 772.102895][T27143] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 772.102932][T27143] sctp_connect_new_asoc+0x2ff/0x6b0 [ 772.102966][T27143] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 772.103004][T27143] ? __local_bh_enable_ip+0xd0/0x130 [ 772.103031][T27143] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 772.103053][T27143] ? security_sctp_bind_connect+0x7e/0x2c0 [ 772.103082][T27143] sctp_sendmsg+0x1528/0x2c10 [ 772.103108][T27143] ? unwind_next_frame+0xa6/0x2550 [ 772.103147][T27143] ? __pfx_sctp_sendmsg+0x10/0x10 [ 772.103180][T27143] ? aa_sk_perm+0x6d5/0x900 [ 772.103218][T27143] ? __pfx_aa_sk_perm+0x10/0x10 [ 772.103248][T27143] ? sock_rps_record_flow+0x19/0x350 [ 772.103275][T27143] ? inet_sendmsg+0x2f4/0x370 [ 772.103301][T27143] ____sys_sendmsg+0x80a/0x9f0 [ 772.103345][T27143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 772.103388][T27143] ? import_iovec+0x73/0xa0 [ 772.103416][T27143] ___sys_sendmsg+0x2a5/0x360 [ 772.103446][T27143] ? __lock_acquire+0x6b5/0x2cf0 [ 772.103480][T27143] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.103556][T27143] ? __fget_files+0x2a/0x420 [ 772.103582][T27143] ? __fget_files+0x3a0/0x420 [ 772.103622][T27143] __x64_sys_sendmsg+0x1bd/0x2a0 [ 772.103658][T27143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 772.103701][T27143] ? __pfx_ksys_write+0x10/0x10 [ 772.103742][T27143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.103765][T27143] do_syscall_64+0x15f/0xf80 [ 772.103789][T27143] ? trace_irq_disable+0x3b/0x140 [ 772.103811][T27143] ? clear_bhb_loop+0x40/0x90 [ 772.103845][T27143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.103864][T27143] RIP: 0033:0x7fb2a2f9c819 [ 772.103892][T27143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.103908][T27143] RSP: 002b:00007fb2a3ebd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.103933][T27143] RAX: ffffffffffffffda RBX: 00007fb2a3215fa0 RCX: 00007fb2a2f9c819 [ 772.103948][T27143] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 772.103961][T27143] RBP: 00007fb2a3ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 772.103973][T27143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 772.103985][T27143] R13: 00007fb2a3216038 R14: 00007fb2a3215fa0 R15: 00007fff3a748b98 [ 772.104020][T27143] [ 772.531792][T27151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6131'. [ 772.563346][T27054] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.571246][T27054] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.578950][T27054] bridge_slave_0: entered allmulticast mode [ 772.587710][T27054] bridge_slave_0: entered promiscuous mode [ 772.598055][T27054] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.605576][T27054] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.614642][T27054] bridge_slave_1: entered allmulticast mode [ 772.623751][T27054] bridge_slave_1: entered promiscuous mode [ 772.632483][T27149] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 772.740814][T27159] netlink: 'syz.4.6132': attribute type 2 has an invalid length. [ 772.766278][T27054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.779364][T27054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.833690][T27162] xt_policy: output policy not valid in PREROUTING and INPUT [ 772.845578][ T48] bridge_slave_1: left allmulticast mode [ 772.851913][ T48] bridge_slave_1: left promiscuous mode [ 772.858382][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.871988][ T48] bridge_slave_0: left promiscuous mode [ 772.878274][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.880731][T27156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.906492][T27156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6132'. [ 772.930635][ T48] tipc: Resetting bearer [ 773.173501][ T48] erspan0 (unregistering): left promiscuous mode [ 773.213982][ T48] gretap0 (unregistering): left promiscuous mode [ 773.247110][ T48] bond2 (unregistering): (slave gretap1): Releasing active interface [ 773.298433][ T48] team0: Port device gretap3 removed [ 773.328125][ T48] bond8 (unregistering): (slave gretap4): Releasing active interface [ 773.335539][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.345348][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.606724][ T48] tipc: Disabling bearer [ 773.721114][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.732902][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.743339][ T48] bond0 (unregistering): Released all slaves [ 773.759049][ T48] bond1 (unregistering): Released all slaves [ 773.774137][ T48] bond2 (unregistering): Released all slaves [ 773.789520][ T48] bond3 (unregistering): Released all slaves [ 773.805209][ T48] bond4 (unregistering): Released all slaves [ 773.833330][ T48] bond5 (unregistering): Released all slaves [ 773.853639][ T48] bond6 (unregistering): Released all slaves [ 773.868943][ T48] bond7 (unregistering): Released all slaves [ 773.888390][ T48] bond8 (unregistering): Released all slaves [ 773.903893][ T48] bond9 (unregistering): (slave lo): Releasing backup interface [ 773.912585][ T48] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 773.931760][ T48] bond9 (unregistering): Released all slaves [ 773.953225][T27159] 9: entered promiscuous mode [ 773.963569][T27054] team0: Port device team_slave_0 added [ 774.012736][T27054] team0: Port device team_slave_1 added [ 774.024934][ T5832] Bluetooth: hci5: command tx timeout [ 774.113780][T27054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.138471][T27054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.181873][T27054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.227987][T27174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6136'. [ 774.253646][T27054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.261762][T27054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.262338][T27179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6137'. [ 774.297010][T27054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.299028][T27178] netlink: 'syz.2.6139': attribute type 1 has an invalid length. [ 774.321353][T27179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6137'. [ 774.331649][T27179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6137'. [ 774.442357][T27185] FAULT_INJECTION: forcing a failure. [ 774.442357][T27185] name failslab, interval 1, probability 0, space 0, times 0 [ 774.475953][ T48] tipc: Disabling bearer [ 774.481528][T27185] CPU: 1 UID: 0 PID: 27185 Comm: syz.0.6140 Not tainted syzkaller #0 PREEMPT(full) [ 774.481555][T27185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 774.481568][T27185] Call Trace: [ 774.481577][T27185] [ 774.481586][T27185] dump_stack_lvl+0xe8/0x150 [ 774.481622][T27185] should_fail_ex+0x412/0x560 [ 774.481665][T27185] should_failslab+0xa8/0x100 [ 774.481683][ T48] tipc: Left network mode [ 774.481690][T27185] __kmalloc_cache_noprof+0x88/0x660 [ 774.481721][T27185] ? sctp_v6_cmp_addr+0x15/0xd0 [ 774.481743][T27185] ? sctp_add_bind_addr+0x8c/0x370 [ 774.481769][T27185] sctp_add_bind_addr+0x8c/0x370 [ 774.481795][T27185] sctp_copy_local_addr_list+0x314/0x4f0 [ 774.481820][T27185] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 774.481842][T27185] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 774.481865][T27185] ? sctp_v6_is_any+0x64/0x80 [ 774.481889][T27185] ? sctp_copy_one_addr+0x93/0x360 [ 774.481914][T27185] sctp_bind_addr_copy+0xb3/0x3c0 [ 774.481937][T27185] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 774.481969][T27185] sctp_connect_new_asoc+0x2ff/0x6b0 [ 774.481998][T27185] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 774.482031][T27185] ? __local_bh_enable_ip+0xd0/0x130 [ 774.482054][T27185] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 774.482073][T27185] ? security_sctp_bind_connect+0x7e/0x2c0 [ 774.482106][T27185] sctp_sendmsg+0x1528/0x2c10 [ 774.482128][T27185] ? unwind_next_frame+0xa6/0x2550 [ 774.482162][T27185] ? __pfx_sctp_sendmsg+0x10/0x10 [ 774.482191][T27185] ? aa_sk_perm+0x6d5/0x900 [ 774.482224][T27185] ? __pfx_aa_sk_perm+0x10/0x10 [ 774.482251][T27185] ? sock_rps_record_flow+0x19/0x350 [ 774.482273][T27185] ? inet_sendmsg+0x2f4/0x370 [ 774.482296][T27185] ____sys_sendmsg+0x80a/0x9f0 [ 774.482334][T27185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.482371][T27185] ? import_iovec+0x73/0xa0 [ 774.482395][T27185] ___sys_sendmsg+0x2a5/0x360 [ 774.482421][T27185] ? __lock_acquire+0x6b5/0x2cf0 [ 774.482450][T27185] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.482515][T27185] ? __fget_files+0x2a/0x420 [ 774.482537][T27185] ? __fget_files+0x3a0/0x420 [ 774.482571][T27185] __x64_sys_sendmsg+0x1bd/0x2a0 [ 774.482602][T27185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 774.482640][T27185] ? __pfx_ksys_write+0x10/0x10 [ 774.482684][T27185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.482704][T27185] do_syscall_64+0x15f/0xf80 [ 774.482726][T27185] ? trace_irq_disable+0x3b/0x140 [ 774.482747][T27185] ? clear_bhb_loop+0x40/0x90 [ 774.482771][T27185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.482789][T27185] RIP: 0033:0x7f56a359c819 [ 774.482809][T27185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.482826][T27185] RSP: 002b:00007f56a4488028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.482847][T27185] RAX: ffffffffffffffda RBX: 00007f56a3815fa0 RCX: 00007f56a359c819 [ 774.482861][T27185] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 774.482873][T27185] RBP: 00007f56a4488090 R08: 0000000000000000 R09: 0000000000000000 [ 774.482885][T27185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 774.482896][T27185] R13: 00007f56a3816038 R14: 00007f56a3815fa0 R15: 00007ffcff379978 [ 774.482929][T27185] [ 774.660197][T27189] netlink: 'syz.2.6142': attribute type 5 has an invalid length. [ 774.696874][T27191] sctp: [Deprecated]: syz.0.6144 (pid 27191) Use of int in max_burst socket option. [ 774.696874][T27191] Use struct sctp_assoc_value instead [ 774.714877][T27189] netlink: 'syz.2.6142': attribute type 6 has an invalid length. [ 775.138766][T27054] hsr_slave_0: entered promiscuous mode [ 775.158570][T27054] hsr_slave_1: entered promiscuous mode [ 775.180295][T27054] debugfs: 'hsr0' already exists in 'hsr' [ 775.189918][T27054] Cannot create hsr debugfs directory [ 775.205829][T27193] syzkaller0: entered promiscuous mode [ 775.212771][T27193] syzkaller0: entered allmulticast mode [ 775.227744][T27208] ip6tnl0: Caught tx_queue_len zero misconfig [ 775.452051][T27217] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 775.610782][ T1164] net_ratelimit: 3 callbacks suppressed [ 775.610802][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.624837][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.813477][ T5887] IPVS: starting estimator thread 0... [ 775.872265][T27240] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 775.902117][T27246] FAULT_INJECTION: forcing a failure. [ 775.902117][T27246] name failslab, interval 1, probability 0, space 0, times 0 [ 775.923666][T27240] IPVS: lc: FWM 3 0x00000003 - no destination available [ 775.932672][T27246] CPU: 0 UID: 0 PID: 27246 Comm: syz.0.6153 Not tainted syzkaller #0 PREEMPT(full) [ 775.932704][T27246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 775.932717][T27246] Call Trace: [ 775.932726][T27246] [ 775.932736][T27246] dump_stack_lvl+0xe8/0x150 [ 775.932773][T27246] should_fail_ex+0x412/0x560 [ 775.932809][T27246] should_failslab+0xa8/0x100 [ 775.932835][T27246] __kmalloc_cache_noprof+0x88/0x660 [ 775.932864][T27246] ? sctp_v6_cmp_addr+0x15/0xd0 [ 775.932890][T27246] ? sctp_add_bind_addr+0x8c/0x370 [ 775.932920][T27246] sctp_add_bind_addr+0x8c/0x370 [ 775.932950][T27246] sctp_copy_local_addr_list+0x314/0x4f0 [ 775.932980][T27246] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 775.933005][T27246] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 775.933031][T27246] ? sctp_v6_is_any+0x64/0x80 [ 775.933056][T27246] ? sctp_copy_one_addr+0x93/0x360 [ 775.933083][T27246] sctp_bind_addr_copy+0xb3/0x3c0 [ 775.933108][T27246] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 775.933145][T27246] sctp_connect_new_asoc+0x2ff/0x6b0 [ 775.933177][T27246] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 775.933215][T27246] ? __local_bh_enable_ip+0xd0/0x130 [ 775.933241][T27246] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 775.933262][T27246] ? security_sctp_bind_connect+0x7e/0x2c0 [ 775.933290][T27246] sctp_sendmsg+0x1528/0x2c10 [ 775.933316][T27246] ? unwind_next_frame+0xa6/0x2550 [ 775.933354][T27246] ? __pfx_sctp_sendmsg+0x10/0x10 [ 775.933386][T27246] ? aa_sk_perm+0x6d5/0x900 [ 775.933423][T27246] ? __pfx_aa_sk_perm+0x10/0x10 [ 775.933452][T27246] ? sock_rps_record_flow+0x19/0x350 [ 775.933476][T27246] ? inet_sendmsg+0x2f4/0x370 [ 775.933501][T27246] ____sys_sendmsg+0x80a/0x9f0 [ 775.933544][T27246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.933589][T27246] ? import_iovec+0x73/0xa0 [ 775.933625][T27246] ___sys_sendmsg+0x2a5/0x360 [ 775.933654][T27246] ? __lock_acquire+0x6b5/0x2cf0 [ 775.933685][T27246] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.933758][T27246] ? __fget_files+0x2a/0x420 [ 775.933785][T27246] ? __fget_files+0x3a0/0x420 [ 775.933824][T27246] __x64_sys_sendmsg+0x1bd/0x2a0 [ 775.933858][T27246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 775.933901][T27246] ? __pfx_ksys_write+0x10/0x10 [ 775.933942][T27246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.933966][T27246] do_syscall_64+0x15f/0xf80 [ 775.933991][T27246] ? trace_irq_disable+0x3b/0x140 [ 775.934014][T27246] ? clear_bhb_loop+0x40/0x90 [ 775.934040][T27246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.934061][T27246] RIP: 0033:0x7f56a359c819 [ 775.934081][T27246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.934100][T27246] RSP: 002b:00007f56a4488028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.934123][T27246] RAX: ffffffffffffffda RBX: 00007f56a3815fa0 RCX: 00007f56a359c819 [ 775.934139][T27246] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 775.934153][T27246] RBP: 00007f56a4488090 R08: 0000000000000000 R09: 0000000000000000 [ 775.934166][T27246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.934179][T27246] R13: 00007f56a3816038 R14: 00007f56a3815fa0 R15: 00007ffcff379978 [ 775.934222][T27246] [ 776.335858][T27241] IPVS: using max 24 ests per chain, 57600 per kthread [ 776.343882][ T5832] Bluetooth: hci5: command tx timeout [ 776.542055][ T48] hsr_slave_0: left promiscuous mode [ 776.726524][ T48] veth1_vlan: left allmulticast mode [ 776.755163][ T48] vlan0: left allmulticast mode [ 776.763561][ T48] veth0_vlan: left allmulticast mode [ 776.777858][ T48] vlan0: left promiscuous mode [ 776.786929][ T48] veth0_macvtap: left promiscuous mode [ 776.805111][ T48] veth1_vlan: left promiscuous mode [ 776.810816][ T48] veth0_vlan: left promiscuous mode [ 776.975692][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.984393][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.046856][T27280] __nla_validate_parse: 4 callbacks suppressed [ 777.046879][T27280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6160'. [ 777.145638][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.849279][ T48] team0 (unregistering): Port device team_slave_1 removed [ 777.872457][ T48] team0 (unregistering): Port device team_slave_0 removed [ 778.022798][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 778.085996][T27282] netlink: 'syz.2.6160': attribute type 5 has an invalid length. [ 778.093914][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6160'. [ 778.106238][ T227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.117044][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.427372][ T5832] Bluetooth: hci5: command tx timeout [ 778.583724][T27303] netlink: 'syz.3.6167': attribute type 32 has an invalid length. [ 778.614028][T27303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6167'. [ 778.766622][T27303] bond1: option coupled_control: invalid value (20) [ 778.780068][T27303] bond1 (unregistering): Released all slaves [ 779.220643][T27313] syzkaller0: entered promiscuous mode [ 779.237711][T27313] syzkaller0: entered allmulticast mode [ 779.247149][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.255993][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.458882][ T48] IPVS: stop unused estimator thread 0... [ 779.877198][T27356] netlink: 'syz.2.6178': attribute type 6 has an invalid length. [ 781.505388][ T36] net_ratelimit: 3 callbacks suppressed [ 781.505411][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.519653][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.631491][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.640662][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.906983][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.372821][ T48] team0: left promiscuous mode [ 783.392867][ T48] team_slave_0: left promiscuous mode [ 783.412370][ T48] team_slave_1: left promiscuous mode [ 783.438728][ T48] bridge0: port 3(team0) entered disabled state [ 783.472064][ T48] bridge_slave_1: left allmulticast mode [ 783.491175][ T48] bridge_slave_1: left promiscuous mode [ 783.506597][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.551895][ T48] bridge_slave_0: left promiscuous mode [ 783.571219][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.578167][T27392] x_tables: duplicate underflow at hook 1 [ 783.659011][T27396] SET target dimension over the limit! [ 784.022177][ T48] bond6 (unregistering): (slave ip6gre1): Releasing backup interface [ 784.149045][ T48] bond7 (unregistering): (slave gretap2): Releasing backup interface [ 784.158340][ T48] gretap2 (unregistering): left promiscuous mode [ 784.214009][ T48] bond3 (unregistering): (slave geneve3): Releasing active interface [ 784.237474][ T48] bond1 (unregistering): (slave geneve2): Releasing active interface [ 784.389958][ T48] team0: Port device bridge3 removed [ 784.490016][ T48] bond15 (unregistering): (slave bridge5): Releasing backup interface [ 784.498674][ T48] bond15 (unregistering): (slave bridge5): the permanent HWaddr of slave - 22:ca:d0:db:b3:52 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 784.601402][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.615720][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.626657][ T48] bond0 (unregistering): Released all slaves [ 784.639093][ T48] bond1 (unregistering): Released all slaves [ 784.653821][ T48] bond2 (unregistering): Released all slaves [ 784.670675][ T48] bond3 (unregistering): Released all slaves [ 784.686477][ T48] bond4 (unregistering): Released all slaves [ 784.717307][ T48] bond5 (unregistering): Released all slaves [ 784.733108][ T48] bond6 (unregistering): Released all slaves [ 784.757379][ T48] bond7 (unregistering): Released all slaves [ 784.778084][ T48] bond8 (unregistering): Released all slaves [ 784.800177][ T48] bond9 (unregistering): (slave batadv1): Releasing active interface [ 784.809116][ T48] batadv1: left promiscuous mode [ 784.814374][ T48] batadv1: left allmulticast mode [ 784.827221][ T48] bond9 (unregistering): Released all slaves [ 784.847718][ T48] bond10 (unregistering): (slave lo): Releasing backup interface [ 784.856901][ T48] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 784.869780][ T48] bond10 (unregistering): Released all slaves [ 784.890445][ T48] bond11 (unregistering): Released all slaves [ 784.913383][ T48] bond12 (unregistering): Released all slaves [ 784.929070][ T48] bond13 (unregistering): Released all slaves [ 784.949446][ T48] bond14 (unregistering): Released all slaves [ 784.965974][ T48] bond15 (unregistering): (slave veth5): Releasing backup interface [ 784.977430][ T48] bond15 (unregistering): Released all slaves [ 785.385599][T27417] xt_HMARK: proto mask must be zero with L3 mode [ 785.440363][T27054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 785.913425][T27054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.923004][T27054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 785.973152][T27054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 786.003505][ T48] tipc: Disabling bearer [ 786.047238][ T48] tipc: Left network mode [ 786.169003][T27437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6194'. [ 786.227606][T27054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 786.281792][T27054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 786.328639][T27054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 786.365840][T27448] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 786.369284][T27054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 786.404750][T27437] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 786.796101][T27476] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.6201'. [ 786.913619][T27476] openvswitch: netlink: Message has 6 unknown bytes. [ 787.101314][T27486] syzkaller0: entered promiscuous mode [ 787.112674][T27486] syzkaller0: entered allmulticast mode [ 787.246447][T27479] syzkaller0: entered promiscuous mode [ 787.254006][T27479] syzkaller0: entered allmulticast mode [ 787.413093][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6203'. [ 787.417555][T27499] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6204'. [ 787.489848][T27499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6204'. [ 787.555943][T27499] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6204'. [ 787.700995][T27511] netlink: 'syz.0.6207': attribute type 1 has an invalid length. [ 787.715696][T27511] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6207'. [ 787.748576][T27499] bond1 (unregistering): Released all slaves [ 787.921747][T27519] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6209'. [ 788.113922][T27054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.207197][T27534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6214'. [ 788.240650][T27054] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.308716][T27531] syzkaller0: entered promiscuous mode [ 788.330405][T27531] syzkaller0: entered allmulticast mode [ 788.363568][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.370952][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.560282][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.568019][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.777487][T27564] netlink: 'syz.4.6219': attribute type 25 has an invalid length. [ 788.833887][T27565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6221'. [ 789.115067][T27568] syzkaller0: entered promiscuous mode [ 789.121872][T27568] syzkaller0: entered allmulticast mode [ 789.293309][ T48] hsr_slave_0: left promiscuous mode [ 789.321097][ T48] hsr_slave_1: left promiscuous mode [ 789.333538][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.346749][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.361915][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.380288][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.430857][ T48] veth1_macvtap: left promiscuous mode [ 789.441188][ T48] veth0_macvtap: left promiscuous mode [ 789.457469][ T48] veth1_vlan: left promiscuous mode [ 789.565828][T27614] xt_limit: Overflow, try lower: 604147548/4200216962 [ 790.067550][ T48] pim6reg (unregistering): left allmulticast mode [ 790.483214][ T48] team_slave_1 (unregistering): left allmulticast mode [ 790.495156][ T48] team0 (unregistering): Port device team_slave_1 removed [ 790.544252][ T48] team_slave_0 (unregistering): left allmulticast mode [ 790.553369][ T48] team0 (unregistering): Port device team_slave_0 removed [ 790.747838][T25078] Bluetooth: hci1: command 0x0406 tx timeout [ 791.409186][T27054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.575773][T27690] netlink: 'syz.2.6240': attribute type 1 has an invalid length. [ 791.593783][ T48] IPVS: stop unused estimator thread 0... [ 791.664609][T27695] netlink: 'syz.3.6241': attribute type 10 has an invalid length. [ 791.669023][T27696] netlink: 'syz.0.6242': attribute type 28 has an invalid length. [ 791.706329][T27696] netlink: 'syz.0.6242': attribute type 3 has an invalid length. [ 791.723464][T27696] __nla_validate_parse: 2 callbacks suppressed [ 791.723486][T27696] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6242'. [ 791.760730][T27690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6240'. [ 791.784245][T27692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 791.801313][T27692] bond7: (slave bond8): making interface the new active one [ 791.809760][T27692] bond7: (slave bond8): Enslaving as an active interface with an up link [ 791.821819][T27054] veth0_vlan: entered promiscuous mode [ 791.944380][T27695] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 791.977343][T27699] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 791.989393][T27693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.007336][T27690] 8021q: adding VLAN 0 to HW filter on device bond7 [ 792.016953][T27714] netlink: 'syz.0.6245': attribute type 32 has an invalid length. [ 792.026012][T27714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6245'. [ 792.038897][T27054] veth1_vlan: entered promiscuous mode [ 792.099407][T27714] bond8: option coupled_control: invalid value (20) [ 792.108420][T27714] bond8 (unregistering): Released all slaves [ 792.144980][T27708] syzkaller0: entered promiscuous mode [ 792.157308][T27708] syzkaller0: entered allmulticast mode [ 792.365191][T27054] veth0_macvtap: entered promiscuous mode [ 792.431777][T27054] veth1_macvtap: entered promiscuous mode [ 792.482546][T27054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.526496][T27731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'. [ 792.541342][T27054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.666920][T27589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.711438][ T3551] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.760296][ T3551] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.786481][ T3551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.828814][T27734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6249'. [ 793.131453][T27749] veth0: entered promiscuous mode [ 793.150942][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.176268][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.209385][T27748] veth0: left promiscuous mode [ 793.285966][T27586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.324342][T27586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.390692][T27761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6256'. [ 793.428027][T27761] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6256'. [ 793.592268][T27768] syzkaller0: entered promiscuous mode [ 793.608727][T27768] syzkaller0: entered allmulticast mode [ 793.766544][T27786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6260'. [ 793.911114][T27790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.170861][T27799] tls_set_device_offload_rx: netdev not found [ 794.341526][T27806] netlink: 'syz.1.6268': attribute type 1 has an invalid length. [ 794.496482][T25078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 794.515071][T25078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 794.523928][T25078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 794.537214][T25078] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 794.553477][T25078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 794.662597][T27812] bridge4: entered promiscuous mode [ 794.679494][T27812] bridge4: entered allmulticast mode [ 794.856253][T27814] tipc: Resetting bearer [ 794.982571][T27827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6274'. [ 795.041491][T27834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6275'. [ 795.392427][T27852] netlink: 'syz.1.6279': attribute type 32 has an invalid length. [ 795.512440][T27852] bond1: option coupled_control: invalid value (20) [ 795.546780][T27852] bond1 (unregistering): Released all slaves [ 795.660315][T27590] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.690211][T27590] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.752089][T27590] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.780785][T27590] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.260300][T27892] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.268276][T27892] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.664998][T25078] Bluetooth: hci0: command tx timeout [ 796.812684][T27814] chnl_net:caif_netlink_parms(): no params data found [ 796.877832][T27926] __nla_validate_parse: 5 callbacks suppressed [ 796.877854][T27926] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.6294'. [ 796.895164][T27923] netlink: 'syz.3.6292': attribute type 3 has an invalid length. [ 796.910153][T27923] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6292'. [ 796.928058][T27921] netlink: 'syz.2.6293': attribute type 9 has an invalid length. [ 797.170845][T27814] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.182352][T27814] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.190491][T27814] bridge_slave_0: entered allmulticast mode [ 797.211176][T27814] bridge_slave_0: entered promiscuous mode [ 797.240409][T27946] tipc: Started in network mode [ 797.259235][T27946] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 797.276193][T27946] tipc: Enabled bearer , priority 10 [ 797.292864][T27814] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.317208][T27814] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.335893][T27814] bridge_slave_1: entered allmulticast mode [ 797.363225][T27814] bridge_slave_1: entered promiscuous mode [ 797.424441][T27814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.438568][T27814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.473350][T27958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6298'. [ 797.579357][T27964] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6301'. [ 797.601254][T27814] team0: Port device team_slave_0 added [ 797.623512][T27814] team0: Port device team_slave_1 added [ 797.780684][T27972] openvswitch: netlink: IP tunnel TTL not specified. [ 797.845756][T27814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.862877][T27814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.928743][T27814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.000115][T27814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.021055][T27814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.070697][T27984] FAULT_INJECTION: forcing a failure. [ 798.070697][T27984] name failslab, interval 1, probability 0, space 0, times 0 [ 798.084852][T27814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.095865][T27984] CPU: 1 UID: 0 PID: 27984 Comm: syz.1.6304 Not tainted syzkaller #0 PREEMPT(full) [ 798.095895][T27984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 798.095908][T27984] Call Trace: [ 798.095917][T27984] [ 798.095926][T27984] dump_stack_lvl+0xe8/0x150 [ 798.095962][T27984] should_fail_ex+0x412/0x560 [ 798.095996][T27984] should_failslab+0xa8/0x100 [ 798.096020][T27984] __kmalloc_cache_noprof+0x88/0x660 [ 798.096050][T27984] ? sctp_add_bind_addr+0x8c/0x370 [ 798.096079][T27984] sctp_add_bind_addr+0x8c/0x370 [ 798.096107][T27984] sctp_copy_local_addr_list+0x314/0x4f0 [ 798.096134][T27984] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 798.096157][T27984] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 798.096183][T27984] ? sctp_v6_is_any+0x64/0x80 [ 798.096211][T27984] ? sctp_copy_one_addr+0x93/0x360 [ 798.096239][T27984] sctp_bind_addr_copy+0xb3/0x3c0 [ 798.096272][T27984] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 798.096424][T27984] sctp_connect_new_asoc+0x2ff/0x6b0 [ 798.096457][T27984] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 798.096494][T27984] ? __local_bh_enable_ip+0xd0/0x130 [ 798.096521][T27984] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 798.096542][T27984] ? security_sctp_bind_connect+0x7e/0x2c0 [ 798.096569][T27984] sctp_sendmsg+0x1528/0x2c10 [ 798.096594][T27984] ? unwind_next_frame+0xa6/0x2550 [ 798.096634][T27984] ? __pfx_sctp_sendmsg+0x10/0x10 [ 798.096666][T27984] ? aa_sk_perm+0x6d5/0x900 [ 798.096703][T27984] ? __pfx_aa_sk_perm+0x10/0x10 [ 798.096734][T27984] ? sock_rps_record_flow+0x19/0x350 [ 798.096760][T27984] ? inet_sendmsg+0x2f4/0x370 [ 798.096786][T27984] ____sys_sendmsg+0x80a/0x9f0 [ 798.096830][T27984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.096873][T27984] ? import_iovec+0x73/0xa0 [ 798.096900][T27984] ___sys_sendmsg+0x2a5/0x360 [ 798.096928][T27984] ? __lock_acquire+0x6b5/0x2cf0 [ 798.096961][T27984] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.097031][T27984] ? __fget_files+0x2a/0x420 [ 798.097054][T27984] ? __fget_files+0x3a0/0x420 [ 798.097091][T27984] __x64_sys_sendmsg+0x1bd/0x2a0 [ 798.097125][T27984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.097168][T27984] ? __pfx_ksys_write+0x10/0x10 [ 798.097209][T27984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.097233][T27984] do_syscall_64+0x15f/0xf80 [ 798.097257][T27984] ? trace_irq_disable+0x3b/0x140 [ 798.097280][T27984] ? clear_bhb_loop+0x40/0x90 [ 798.097319][T27984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.097341][T27984] RIP: 0033:0x7fc995d9c819 [ 798.097363][T27984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.097383][T27984] RSP: 002b:00007fc996cbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.097407][T27984] RAX: ffffffffffffffda RBX: 00007fc996015fa0 RCX: 00007fc995d9c819 [ 798.097423][T27984] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 798.097437][T27984] RBP: 00007fc996cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 798.097450][T27984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.097462][T27984] R13: 00007fc996016038 R14: 00007fc996015fa0 R15: 00007fff295e9788 [ 798.097496][T27984] [ 798.482189][T27988] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6307'. [ 798.520728][T27987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6306'. [ 798.550263][ T5887] tipc: Node number set to 10136234 [ 798.615815][T27814] hsr_slave_0: entered promiscuous mode [ 798.622689][T27814] hsr_slave_1: entered promiscuous mode [ 798.636428][T27814] debugfs: 'hsr0' already exists in 'hsr' [ 798.678048][T27814] Cannot create hsr debugfs directory [ 798.762233][T25078] Bluetooth: hci0: command tx timeout [ 799.211575][T27814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.227622][T27814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 799.240735][T28024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6316'. [ 799.340775][T28030] IPv6: NLM_F_REPLACE set, but no existing node found! [ 799.348063][T28031] IPv6: NLM_F_REPLACE set, but no existing node found! [ 799.442634][T27814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.475750][T27814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 799.533594][T28038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6319'. [ 799.655503][T28044] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6320'. [ 799.693101][T27814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.731242][T27814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 800.018707][T27814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.070027][T27814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 800.463536][T28069] Bluetooth: MGMT ver 1.23 [ 800.650431][T27814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 800.664385][T27814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 800.675531][T27814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 800.690481][T27814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 800.699960][T27814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 800.721111][T27814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 800.785483][T27814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 800.805771][T27814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 800.826008][T25078] Bluetooth: hci0: command tx timeout [ 800.981572][T28079] FAULT_INJECTION: forcing a failure. [ 800.981572][T28079] name failslab, interval 1, probability 0, space 0, times 0 [ 800.995741][T28079] CPU: 1 UID: 0 PID: 28079 Comm: syz.3.6327 Not tainted syzkaller #0 PREEMPT(full) [ 800.995772][T28079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 800.995784][T28079] Call Trace: [ 800.995799][T28079] [ 800.995808][T28079] dump_stack_lvl+0xe8/0x150 [ 800.995845][T28079] should_fail_ex+0x412/0x560 [ 800.995879][T28079] should_failslab+0xa8/0x100 [ 800.995900][T28079] ? skb_clone+0x212/0x3a0 [ 800.995919][T28079] kmem_cache_alloc_noprof+0x87/0x650 [ 800.995949][T28079] ? __netlink_lookup+0xc6/0x8b0 [ 800.995984][T28079] skb_clone+0x212/0x3a0 [ 800.996009][T28079] __netlink_deliver_tap+0x404/0x850 [ 800.996052][T28079] ? netlink_deliver_tap+0x2e/0x1b0 [ 800.996084][T28079] netlink_deliver_tap+0x19c/0x1b0 [ 800.996114][T28079] netlink_unicast+0x730/0x8e0 [ 800.996153][T28079] netlink_sendmsg+0x813/0xb40 [ 800.996193][T28079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.996228][T28079] ? aa_sock_msg_perm+0xf1/0x1b0 [ 800.996269][T28079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 800.996303][T28079] ____sys_sendmsg+0x972/0x9f0 [ 800.996334][T28079] ? __might_fault+0xaf/0x130 [ 800.996369][T28079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 800.996411][T28079] ? import_iovec+0x73/0xa0 [ 800.996445][T28079] ___sys_sendmsg+0x2a5/0x360 [ 800.996475][T28079] ? __lock_acquire+0x6b5/0x2cf0 [ 800.996506][T28079] ? __pfx____sys_sendmsg+0x10/0x10 [ 800.996579][T28079] ? __fget_files+0x2a/0x420 [ 800.996604][T28079] ? __fget_files+0x3a0/0x420 [ 800.996642][T28079] __x64_sys_sendmsg+0x1bd/0x2a0 [ 800.996677][T28079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 800.996721][T28079] ? __pfx_ksys_write+0x10/0x10 [ 800.996761][T28079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.996785][T28079] do_syscall_64+0x15f/0xf80 [ 800.996810][T28079] ? trace_irq_disable+0x3b/0x140 [ 800.996833][T28079] ? clear_bhb_loop+0x40/0x90 [ 800.996860][T28079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.996881][T28079] RIP: 0033:0x7f340279c819 [ 800.996902][T28079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.996920][T28079] RSP: 002b:00007f3403572028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.996943][T28079] RAX: ffffffffffffffda RBX: 00007f3402a15fa0 RCX: 00007f340279c819 [ 800.996960][T28079] RDX: 0000000020004010 RSI: 0000200000000b80 RDI: 0000000000000003 [ 800.996975][T28079] RBP: 00007f3403572090 R08: 0000000000000000 R09: 0000000000000000 [ 800.996988][T28079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.997001][T28079] R13: 00007f3402a16038 R14: 00007f3402a15fa0 R15: 00007ffe8aa40fd8 [ 800.997037][T28079] [ 801.295743][T27814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.342696][T27814] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.356281][T27590] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.363705][T27590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.447754][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.455209][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.563755][T28084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6329'. [ 801.634030][T28086] tipc: Enabling of bearer rejected, failed to enable media [ 801.652355][T28086] syzkaller0: entered promiscuous mode [ 801.659019][T28086] syzkaller0: entered allmulticast mode [ 801.817179][T28096] netlink: 'syz.3.6334': attribute type 3 has an invalid length. [ 802.136803][T28110] netlink: 'syz.4.6338': attribute type 9 has an invalid length. [ 802.146454][T28114] __nla_validate_parse: 1 callbacks suppressed [ 802.146473][T28114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6339'. [ 802.167155][T28110] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6338'. [ 802.180945][T28114] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6339'. [ 802.195654][T28114] netlink: 'syz.1.6339': attribute type 5 has an invalid length. [ 802.199535][T27814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.301770][T27814] veth0_vlan: entered promiscuous mode [ 802.341681][T27814] veth1_vlan: entered promiscuous mode [ 802.415957][T27814] veth0_macvtap: entered promiscuous mode [ 802.447923][T27814] veth1_macvtap: entered promiscuous mode [ 802.523389][T27814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.539237][T28124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6343'. [ 802.562485][T27814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.616157][T27586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.641318][T27586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.680605][T27586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.703748][T27586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.735131][T28135] tipc: Enabling of bearer rejected, failed to enable media [ 802.779263][T28135] syzkaller0: entered promiscuous mode [ 802.795451][T28135] syzkaller0: entered allmulticast mode [ 802.921898][T25078] Bluetooth: hci0: command tx timeout [ 803.157304][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.167698][T28152] xt_hashlimit: size too large, truncated to 1048576 [ 803.181723][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.238691][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6353'. [ 803.256575][T28159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.280158][T28160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6354'. [ 803.299356][T27586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.331309][T27586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.494151][T28163] syzkaller0: entered promiscuous mode [ 803.507926][T28163] syzkaller0: entered allmulticast mode [ 803.539638][T28163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6357'. [ 803.557716][T28163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6357'. [ 803.572361][T28171] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6265'. [ 803.816890][T28179] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6359'. [ 803.851238][T28181] FAULT_INJECTION: forcing a failure. [ 803.851238][T28181] name failslab, interval 1, probability 0, space 0, times 0 [ 803.899400][T28181] CPU: 0 UID: 0 PID: 28181 Comm: syz.3.6360 Not tainted syzkaller #0 PREEMPT(full) [ 803.899441][T28181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 803.899454][T28181] Call Trace: [ 803.899462][T28181] [ 803.899471][T28181] dump_stack_lvl+0xe8/0x150 [ 803.899508][T28181] should_fail_ex+0x412/0x560 [ 803.899544][T28181] should_failslab+0xa8/0x100 [ 803.899568][T28181] __kmalloc_noprof+0xe8/0x760 [ 803.899599][T28181] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 803.899631][T28181] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 803.899665][T28181] genl_family_rcv_msg_doit+0xd9/0x330 [ 803.899696][T28181] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 803.899729][T28181] ? apparmor_capable+0x126/0x170 [ 803.899753][T28181] ? bpf_lsm_capable+0x9/0x20 [ 803.899776][T28181] ? security_capable+0x7e/0x2c0 [ 803.899810][T28181] genl_rcv_msg+0x61c/0x7a0 [ 803.899840][T28181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.899861][T28181] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 803.899902][T28181] netlink_rcv_skb+0x232/0x4b0 [ 803.899928][T28181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.899949][T28181] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 803.899989][T28181] ? down_read+0x270/0x2e0 [ 803.900011][T28181] ? genl_rcv+0xd/0x40 [ 803.900031][T28181] genl_rcv+0x28/0x40 [ 803.900048][T28181] netlink_unicast+0x75c/0x8e0 [ 803.900082][T28181] netlink_sendmsg+0x813/0xb40 [ 803.900117][T28181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.900146][T28181] ? aa_sock_msg_perm+0xf1/0x1b0 [ 803.900171][T28181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 803.900201][T28181] ____sys_sendmsg+0x972/0x9f0 [ 803.900233][T28181] ? __might_fault+0xaf/0x130 [ 803.900264][T28181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.900300][T28181] ? import_iovec+0x73/0xa0 [ 803.900323][T28181] ___sys_sendmsg+0x2a5/0x360 [ 803.900348][T28181] ? __lock_acquire+0x6b5/0x2cf0 [ 803.900376][T28181] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.900446][T28181] ? __fget_files+0x2a/0x420 [ 803.900467][T28181] ? __fget_files+0x3a0/0x420 [ 803.900498][T28181] __x64_sys_sendmsg+0x1bd/0x2a0 [ 803.900527][T28181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 803.900565][T28181] ? __pfx_ksys_write+0x10/0x10 [ 803.900601][T28181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.900620][T28181] do_syscall_64+0x15f/0xf80 [ 803.900642][T28181] ? trace_irq_disable+0x3b/0x140 [ 803.900661][T28181] ? clear_bhb_loop+0x40/0x90 [ 803.900683][T28181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.900702][T28181] RIP: 0033:0x7f340279c819 [ 803.900720][T28181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.900736][T28181] RSP: 002b:00007f3403572028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.900757][T28181] RAX: ffffffffffffffda RBX: 00007f3402a15fa0 RCX: 00007f340279c819 [ 803.900770][T28181] RDX: 0000000000064040 RSI: 0000200000000340 RDI: 0000000000000004 [ 803.900783][T28181] RBP: 00007f3403572090 R08: 0000000000000000 R09: 0000000000000000 [ 803.900795][T28181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.900807][T28181] R13: 00007f3402a16038 R14: 00007f3402a15fa0 R15: 00007ffe8aa40fd8 [ 803.900840][T28181] [ 804.247135][T28183] netlink: 'syz.0.6359': attribute type 8 has an invalid length. [ 808.050789][T28227] FAULT_INJECTION: forcing a failure. [ 808.050789][T28227] name failslab, interval 1, probability 0, space 0, times 0 [ 808.090887][T28227] CPU: 0 UID: 0 PID: 28227 Comm: syz.1.6372 Not tainted syzkaller #0 PREEMPT(full) [ 808.090920][T28227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 808.090934][T28227] Call Trace: [ 808.090943][T28227] [ 808.090952][T28227] dump_stack_lvl+0xe8/0x150 [ 808.090989][T28227] should_fail_ex+0x412/0x560 [ 808.091025][T28227] should_failslab+0xa8/0x100 [ 808.091051][T28227] __kmalloc_cache_noprof+0x88/0x660 [ 808.091083][T28227] ? netlbl_mgmt_add_common+0x57/0x13b0 [ 808.091117][T28227] netlbl_mgmt_add_common+0x57/0x13b0 [ 808.091155][T28227] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 808.091197][T28227] netlbl_mgmt_adddef+0x28f/0x330 [ 808.091228][T28227] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 808.091260][T28227] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 808.091285][T28227] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 808.091318][T28227] genl_family_rcv_msg_doit+0x22a/0x330 [ 808.091351][T28227] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 808.091390][T28227] ? bpf_lsm_capable+0x9/0x20 [ 808.091413][T28227] ? security_capable+0x7e/0x2c0 [ 808.091457][T28227] genl_rcv_msg+0x61c/0x7a0 [ 808.091489][T28227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 808.091512][T28227] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 808.091556][T28227] netlink_rcv_skb+0x232/0x4b0 [ 808.091587][T28227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 808.091611][T28227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 808.091660][T28227] ? down_read+0x270/0x2e0 [ 808.091685][T28227] ? genl_rcv+0xd/0x40 [ 808.091709][T28227] genl_rcv+0x28/0x40 [ 808.091730][T28227] netlink_unicast+0x75c/0x8e0 [ 808.091771][T28227] netlink_sendmsg+0x813/0xb40 [ 808.091812][T28227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.091845][T28227] ? aa_sock_msg_perm+0xf1/0x1b0 [ 808.091875][T28227] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 808.091909][T28227] ____sys_sendmsg+0x972/0x9f0 [ 808.091941][T28227] ? __might_fault+0xaf/0x130 [ 808.091976][T28227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.092019][T28227] ? import_iovec+0x73/0xa0 [ 808.092047][T28227] ___sys_sendmsg+0x2a5/0x360 [ 808.092076][T28227] ? __lock_acquire+0x6b5/0x2cf0 [ 808.092109][T28227] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.092194][T28227] ? __fget_files+0x2a/0x420 [ 808.092221][T28227] ? __fget_files+0x3a0/0x420 [ 808.092259][T28227] __x64_sys_sendmsg+0x1bd/0x2a0 [ 808.092299][T28227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 808.092342][T28227] ? __pfx_ksys_write+0x10/0x10 [ 808.092381][T28227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.092405][T28227] do_syscall_64+0x15f/0xf80 [ 808.092428][T28227] ? trace_irq_disable+0x3b/0x140 [ 808.092451][T28227] ? clear_bhb_loop+0x40/0x90 [ 808.092476][T28227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.092497][T28227] RIP: 0033:0x7fc995d9c819 [ 808.092519][T28227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.092537][T28227] RSP: 002b:00007fc996cbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.092571][T28227] RAX: ffffffffffffffda RBX: 00007fc996015fa0 RCX: 00007fc995d9c819 [ 808.092592][T28227] RDX: 0000000000064040 RSI: 0000200000000340 RDI: 0000000000000004 [ 808.092606][T28227] RBP: 00007fc996cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 808.092619][T28227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.092633][T28227] R13: 00007fc996016038 R14: 00007fc996015fa0 R15: 00007fff295e9788 [ 808.092669][T28227] [ 808.469518][T28233] __nla_validate_parse: 3 callbacks suppressed [ 808.469540][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6373'. [ 808.949210][T28246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.033711][T27586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.057131][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 809.064887][T28254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6379'. [ 809.085499][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 809.098243][T27586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 809.110129][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 809.120175][T27586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 809.132306][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 809.140931][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 809.251791][T28256] netlink: 'syz.1.6381': attribute type 1 has an invalid length. [ 809.279485][T28256] netlink: 'syz.1.6381': attribute type 1 has an invalid length. [ 809.315038][T28256] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.6381'. [ 809.335832][T27586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.360116][T27586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 809.382036][T27586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 809.629851][T27586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.667069][T27586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 809.701987][T27586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 809.726646][T28282] netlink: 'syz.1.6389': attribute type 12 has an invalid length. [ 809.740879][T28284] IPVS: lc: FWM 3 0x00000003 - no destination available [ 809.920036][T27586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.946549][T27586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 809.962934][T27586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 810.033943][T28286] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 810.203874][T28294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 810.230039][T28288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 810.466016][T28306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6396'. [ 810.922901][T27586] bridge_slave_1: left allmulticast mode [ 810.939184][T27586] bridge_slave_1: left promiscuous mode [ 810.959562][T27586] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.006397][T27586] bridge_slave_0: left allmulticast mode [ 811.023302][T27586] bridge_slave_0: left promiscuous mode [ 811.056643][T27586] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.234965][T25078] Bluetooth: hci3: command tx timeout [ 811.320374][T27586] bond3 (unregistering): (slave gretap1): Releasing active interface [ 811.356491][T27586] bond6 (unregistering): (slave geneve4): Releasing active interface [ 811.376675][T27586] bond2 (unregistering): (slave geneve2): Releasing active interface [ 811.656597][T27586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.667296][T27586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.678187][T27586] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 811.692467][T27586] bond0 (unregistering): Released all slaves [ 811.707835][T27586] bond1 (unregistering): Released all slaves [ 811.726399][T27586] bond2 (unregistering): Released all slaves [ 811.742226][T27586] bond3 (unregistering): Released all slaves [ 811.761889][T27586] bond4 (unregistering): Released all slaves [ 811.780177][T27586] bond5 (unregistering): Released all slaves [ 811.799635][T27586] bond6 (unregistering): Released all slaves [ 811.819874][T27586] bond7 (unregistering): Released all slaves [ 811.838908][T27586] bond8 (unregistering): (slave vxcan2): Releasing backup interface [ 811.849631][T27586] bond8 (unregistering): (slave vxcan4): Releasing backup interface [ 811.861955][T27586] bond8 (unregistering): Released all slaves [ 811.947289][T25078] Bluetooth: hci0: command 0x080f tx timeout [ 812.074567][T28248] chnl_net:caif_netlink_parms(): no params data found [ 812.166364][T27586] 9: left promiscuous mode [ 812.369873][T27586] tipc: Disabling bearer [ 812.375952][T27586] tipc: Disabling bearer [ 812.403896][T27586] tipc: Left network mode [ 812.506724][T28355] syzkaller0: entered promiscuous mode [ 812.519200][T28360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6411'. [ 812.538376][T28355] syzkaller0: entered allmulticast mode [ 812.773692][T28374] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 812.978560][T28248] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.011684][T28248] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.029882][T28384] delete_channel: no stack [ 813.042609][T28248] bridge_slave_0: entered allmulticast mode [ 813.065341][T28248] bridge_slave_0: entered promiscuous mode [ 813.105227][T28248] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.131624][T28248] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.157174][T28384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6415'. [ 813.165077][T28248] bridge_slave_1: entered allmulticast mode [ 813.174886][T28384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6415'. [ 813.195963][T28248] bridge_slave_1: entered promiscuous mode [ 813.309032][T25078] Bluetooth: hci3: command tx timeout [ 813.346320][T28403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 813.511982][T28409] Bluetooth: MGMT ver 1.23 [ 813.522089][T28248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.649700][T28248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.964245][T28248] team0: Port device team_slave_0 added [ 813.997163][T28248] team0: Port device team_slave_1 added [ 814.011548][T28427] netlink: 'syz.2.6424': attribute type 10 has an invalid length. [ 814.027477][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 814.092297][T28427] team0: Device ipvlan1 failed to register rx_handler [ 814.133381][T28429] netlink: 'syz.2.6424': attribute type 10 has an invalid length. [ 814.341250][T28248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.358145][T28248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.387782][T28248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.438060][T28429] team0: Device ipvlan1 failed to register rx_handler [ 814.472636][T28248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.492018][T28248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.548077][T28248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.696532][T28444] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6429'. [ 814.799205][T27586] hsr_slave_0: left promiscuous mode [ 814.913418][T28454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6431'. [ 815.385019][T25078] Bluetooth: hci3: command tx timeout [ 815.753405][T28248] hsr_slave_0: entered promiscuous mode [ 815.765584][T28248] hsr_slave_1: entered promiscuous mode [ 815.780743][T28248] debugfs: 'hsr0' already exists in 'hsr' [ 815.790152][T28248] Cannot create hsr debugfs directory [ 815.844391][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 816.190468][T28506] netlink: 'syz.1.6441': attribute type 2 has an invalid length. [ 816.268521][T28510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6441'. [ 816.382041][T28506] v: entered promiscuous mode [ 816.512855][T27586] IPVS: stop unused estimator thread 0... [ 817.096791][T28550] Cannot find add_set index 0 as target [ 817.466196][T25078] Bluetooth: hci3: command tx timeout [ 817.573800][T28574] "syz.0.6457" (28574) uses obsolete ecb(arc4) skcipher [ 817.588813][T28571] Bluetooth: MGMT ver 1.23 [ 817.640268][T28567] netlink: 'syz.0.6457': attribute type 9 has an invalid length. [ 818.132954][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6463'. [ 818.158814][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6463'. [ 818.420603][T28248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 818.460808][T28603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6466'. [ 818.464047][T28248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 818.510883][T28248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 818.557604][T28248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.581074][T28248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 818.623663][T28248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.649919][T28248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 818.693751][T28248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.788438][T28625] netlink: 'syz.0.6469': attribute type 10 has an invalid length. [ 818.831781][T28627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6471'. [ 818.902452][T28625] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 818.966857][T28639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6472'. [ 819.018028][T28641] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 819.089590][T28632] gtp0: entered promiscuous mode [ 819.113784][T28632] gtp0: entered allmulticast mode [ 819.503253][T28248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.572690][T28248] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.668614][T28663] netlink: 'syz.0.6479': attribute type 2 has an invalid length. [ 819.750002][T28663] 9: entered promiscuous mode [ 819.827390][T28673] netlink: 'syz.2.6481': attribute type 21 has an invalid length. [ 819.848383][T28501] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.855816][T28501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.906396][T28679] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6481'. [ 819.929514][T28679] netlink: 'syz.2.6481': attribute type 2 has an invalid length. [ 819.936346][T28673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6481'. [ 819.940149][T28679] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6481'. [ 819.993063][T28501] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.000595][T28501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.292630][T28700] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6485'. [ 820.309039][T28699] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 820.531456][T28712] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 820.627892][T28248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.073590][T28732] syzkaller0: entered promiscuous mode [ 821.080264][T28732] syzkaller0: entered allmulticast mode [ 821.290222][T28248] veth0_vlan: entered promiscuous mode [ 821.314418][T28248] veth1_vlan: entered promiscuous mode [ 821.496210][T28248] veth0_macvtap: entered promiscuous mode [ 821.510100][T28248] veth1_macvtap: entered promiscuous mode [ 821.541562][T28248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.566673][T28248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.584588][T27595] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.604162][T27595] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.633529][T27595] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.664308][T27595] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.020233][T28684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.518869][T28766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6491'. [ 825.543966][T28501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.569677][T28501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.669838][T27602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.698451][T27602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.428800][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 826.454058][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 826.467243][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 826.480394][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 826.490241][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 826.771794][T28828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6501'. [ 828.613717][ T5832] Bluetooth: hci4: command tx timeout [ 830.047082][T28824] ip6gre1: entered allmulticast mode [ 830.235037][T28841] netlink: 'syz.1.6504': attribute type 26 has an invalid length. [ 830.263054][T28840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6502'. [ 830.332146][T28847] netlink: 'syz.0.6505': attribute type 12 has an invalid length. [ 830.502459][T28855] Cannot find add_set index 2 as target [ 830.526580][T28860] IPVS: set_ctl: invalid protocol: 44 172.30.0.2:20004 [ 830.543297][T28855] netlink: 'syz.3.6507': attribute type 4 has an invalid length. [ 830.558176][T28860] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20000 [ 830.587439][T28847] bond1: option primary_reselect: invalid value (255) [ 830.596301][T28855] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6507'. [ 830.630955][T28847] bond1 (unregistering): Released all slaves [ 830.668614][ T5832] Bluetooth: hci4: command tx timeout [ 830.793625][T28866] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6510'. [ 830.942246][T28874] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6511'. [ 831.014825][T28868] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 831.023692][T28868] bond1: option packets_per_slave: allowed values 0 - 65535 [ 831.034360][T28868] bond1 (unregistering): Released all slaves [ 831.170767][T28881] netlink: 'syz.3.6515': attribute type 32 has an invalid length. [ 831.191185][T28881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6515'. [ 831.202098][T28883] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 831.359216][T28881] bond1: option coupled_control: invalid value (20) [ 831.379701][T28881] bond1 (unregistering): Released all slaves [ 831.382785][T28889] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6517'. [ 831.580991][T28821] chnl_net:caif_netlink_parms(): no params data found [ 831.781249][T28821] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.807889][T28821] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.817579][T28821] bridge_slave_0: entered allmulticast mode [ 831.831166][T28821] bridge_slave_0: entered promiscuous mode [ 831.841995][T28821] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.850926][T28821] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.859359][T28821] bridge_slave_1: entered allmulticast mode [ 831.869336][T28821] bridge_slave_1: entered promiscuous mode [ 831.927428][T28821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.951467][T28821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.136502][T28821] team0: Port device team_slave_0 added [ 832.178583][T28821] team0: Port device team_slave_1 added [ 832.309907][T28821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.328018][T28821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.382532][T28821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.413102][T28821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.415690][T28929] netlink: 'syz.4.6528': attribute type 32 has an invalid length. [ 832.423303][T28821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.472428][T28929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6528'. [ 832.484231][T28821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.554355][T28929] bond1: option coupled_control: invalid value (20) [ 832.567024][T28929] bond1 (unregistering): Released all slaves [ 832.662524][T28937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6530'. [ 832.666885][T28939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6532'. [ 832.745817][ T5832] Bluetooth: hci4: command tx timeout [ 832.776364][T28821] hsr_slave_0: entered promiscuous mode [ 832.802043][T28821] hsr_slave_1: entered promiscuous mode [ 832.819066][T28821] debugfs: 'hsr0' already exists in 'hsr' [ 832.835317][T28821] Cannot create hsr debugfs directory [ 832.911750][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032858800: rx timeout, send abort [ 833.134876][T28954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6538'. [ 833.147151][T28954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6538'. [ 833.325292][T28821] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.349296][T28821] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.413278][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803285bc00: rx timeout, send abort [ 833.422462][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032858800: abort rx timeout. Force session deactivation [ 833.524805][T28821] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.546262][T28821] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.640898][T28821] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.672699][T28821] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.732410][T28975] netlink: 'syz.3.6543': attribute type 32 has an invalid length. [ 833.843616][T28975] bond1: option coupled_control: invalid value (20) [ 833.867727][T28975] bond1 (unregistering): Released all slaves [ 833.885409][T28985] xt_SECMARK: invalid mode: 9 [ 833.911727][T28821] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.922224][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803285bc00: abort rx timeout. Force session deactivation [ 833.941387][T28821] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.476839][T28821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 834.501041][T28821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 834.533750][T28821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 834.548719][T28821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.558432][T28821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 834.572825][T28821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.586333][T28821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 834.617247][T28821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.826312][ T5832] Bluetooth: hci4: command tx timeout [ 834.878266][T29031] IPv6: NLM_F_REPLACE set, but no existing node found! [ 834.902572][T29034] netlink: 'syz.0.6558': attribute type 32 has an invalid length. [ 834.985789][T29034] bond1: option coupled_control: invalid value (20) [ 834.994901][T29034] bond1 (unregistering): Released all slaves [ 835.087098][T28821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.135606][T28821] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.165566][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.172906][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.230636][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.238325][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.404010][T29052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.563613][T29056] IPVS: Scheduler module ip_vs_sip not found [ 835.628998][T29064] __nla_validate_parse: 5 callbacks suppressed [ 835.629017][T29064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6567'. [ 835.645395][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6567'. [ 835.656371][T29064] netlink: 'syz.4.6567': attribute type 1 has an invalid length. [ 835.689994][T29063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6567'. [ 835.693504][T28821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.727520][T29063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6567'. [ 835.919507][T28821] veth0_vlan: entered promiscuous mode [ 835.996255][T28821] veth1_vlan: entered promiscuous mode [ 836.130833][T29076] Cannot find add_set index 0 as target [ 836.152312][T28821] veth0_macvtap: entered promiscuous mode [ 836.182650][T28821] veth1_macvtap: entered promiscuous mode [ 836.287697][T28821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.331709][T28821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.387293][T28501] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.429973][T28501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.444365][T28501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.457409][T29087] netlink: 'syz.4.6575': attribute type 3 has an invalid length. [ 836.490602][T28501] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.533386][T29093] netlink: 'syz.1.6577': attribute type 4 has an invalid length. [ 836.555979][T29093] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6577'. [ 836.597758][T29093] .`: renamed from bond0 (while UP) [ 836.656615][T29091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.872527][T27602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.879364][T29105] netlink: 'syz.4.6582': attribute type 1 has an invalid length. [ 836.913324][T27602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.038812][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.059866][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.644004][T29148] netlink: 'syz.2.6593': attribute type 1 has an invalid length. [ 837.955131][T29140] nbd1: detected capacity change from 0 to 63 [ 838.077559][T29141] [ 838.080121][T29141] ====================================================== [ 838.087685][T29141] WARNING: possible circular locking dependency detected [ 838.094709][T29141] syzkaller #0 Not tainted [ 838.099145][T29141] ------------------------------------------------------ [ 838.106242][T29141] syz.4.6591/29141 is trying to acquire lock: [ 838.112391][T29141] ffff8880272bb418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 838.121903][T29141] [ 838.121903][T29141] but task is already holding lock: [ 838.129319][T29141] ffff8880272baef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 838.139629][T29141] [ 838.139629][T29141] which lock already depends on the new lock. [ 838.139629][T29141] [ 838.150138][T29141] [ 838.150138][T29141] the existing dependency chain (in reverse order) is: [ 838.159674][T29141] [ 838.159674][T29141] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 838.168862][T29141] blk_alloc_queue+0x546/0x680 [ 838.174454][T29141] __blk_mq_alloc_disk+0x197/0x390 [ 838.180267][T29141] nbd_dev_add+0x499/0xb50 [ 838.185398][T29141] nbd_init+0x168/0x1f0 [ 838.190113][T29141] do_one_initcall+0x250/0x870 [ 838.195431][T29141] do_initcall_level+0x104/0x190 [ 838.201004][T29141] do_initcalls+0x59/0xa0 [ 838.205875][T29141] kernel_init_freeable+0x2a6/0x3e0 [ 838.211604][T29141] kernel_init+0x1d/0x1d0 [ 838.216468][T29141] ret_from_fork+0x514/0xb70 [ 838.221592][T29141] ret_from_fork_asm+0x1a/0x30 [ 838.227069][T29141] [ 838.227069][T29141] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 838.234385][T29141] fs_reclaim_acquire+0x71/0x100 [ 838.239898][T29141] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 838.246246][T29141] __alloc_skb+0x1d0/0x7d0 [ 838.251226][T29141] __ip6_append_data+0x2d6d/0x3f70 [ 838.256956][T29141] ip6_append_data+0x10f/0x280 [ 838.262442][T29141] rawv6_sendmsg+0x12d3/0x18e0 [ 838.267820][T29141] ____sys_sendmsg+0x80a/0x9f0 [ 838.273538][T29141] ___sys_sendmsg+0x2a5/0x360 [ 838.278926][T29141] __x64_sys_sendmsg+0x1bd/0x2a0 [ 838.284481][T29141] do_syscall_64+0x15f/0xf80 [ 838.289596][T29141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.296464][T29141] [ 838.296464][T29141] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 838.304291][T29141] lock_sock_nested+0x41/0x100 [ 838.309671][T29141] inet_shutdown+0x6a/0x390 [ 838.314718][T29141] nbd_mark_nsock_dead+0x2e9/0x560 [ 838.320706][T29141] recv_work+0x1c2e/0x1d40 [ 838.325739][T29141] process_scheduled_works+0xb5d/0x1860 [ 838.331891][T29141] worker_thread+0xa53/0xfc0 [ 838.337018][T29141] kthread+0x388/0x470 [ 838.341610][T29141] ret_from_fork+0x514/0xb70 [ 838.346751][T29141] ret_from_fork_asm+0x1a/0x30 [ 838.352341][T29141] [ 838.352341][T29141] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 838.360196][T29141] __mutex_lock+0x1a3/0x1550 [ 838.365349][T29141] nbd_queue_rq+0x37b/0x1100 [ 838.370675][T29141] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 838.376841][T29141] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 838.384058][T29141] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 838.390826][T29141] blk_mq_run_hw_queue+0x348/0x4f0 [ 838.396562][T29141] blk_mq_dispatch_list+0xd16/0xe10 [ 838.402556][T29141] blk_mq_flush_plug_list+0x48d/0x570 [ 838.408477][T29141] __blk_flush_plug+0x3ed/0x4d0 [ 838.413859][T29141] __submit_bio+0x28d/0x580 [ 838.418956][T29141] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 838.425117][T29141] block_read_full_folio+0x599/0x830 [ 838.431397][T29141] filemap_read_folio+0x137/0x3b0 [ 838.437213][T29141] do_read_cache_folio+0x358/0x590 [ 838.443025][T29141] read_part_sector+0xb6/0x2b0 [ 838.448309][T29141] adfspart_check_ICS+0xb1/0x960 [ 838.453800][T29141] bdev_disk_changed+0x817/0x1770 [ 838.459619][T29141] blkdev_get_whole+0x380/0x510 [ 838.465311][T29141] bdev_open+0x31e/0xd30 [ 838.470091][T29141] blkdev_open+0x470/0x610 [ 838.475660][T29141] do_dentry_open+0x785/0x14e0 [ 838.481055][T29141] vfs_open+0x3b/0x340 [ 838.485655][T29141] path_openat+0x2e08/0x3860 [ 838.491020][T29141] do_file_open+0x23e/0x4a0 [ 838.496067][T29141] do_sys_openat2+0x113/0x200 [ 838.501271][T29141] __x64_sys_openat+0x138/0x170 [ 838.507085][T29141] do_syscall_64+0x15f/0xf80 [ 838.512308][T29141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.518728][T29141] [ 838.518728][T29141] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 838.525953][T29141] __mutex_lock+0x1a3/0x1550 [ 838.531228][T29141] nbd_queue_rq+0xc6/0x1100 [ 838.536343][T29141] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 838.542505][T29141] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 838.549533][T29141] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 838.556212][T29141] blk_mq_run_hw_queue+0x348/0x4f0 [ 838.561962][T29141] blk_mq_dispatch_list+0xd16/0xe10 [ 838.567719][T29141] blk_mq_flush_plug_list+0x48d/0x570 [ 838.573615][T29141] __blk_flush_plug+0x3ed/0x4d0 [ 838.579262][T29141] __submit_bio+0x28d/0x580 [ 838.584296][T29141] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 838.590451][T29141] block_read_full_folio+0x599/0x830 [ 838.596267][T29141] filemap_read_folio+0x137/0x3b0 [ 838.601993][T29141] do_read_cache_folio+0x358/0x590 [ 838.607627][T29141] read_part_sector+0xb6/0x2b0 [ 838.613089][T29141] adfspart_check_ICS+0xb1/0x960 [ 838.618642][T29141] bdev_disk_changed+0x817/0x1770 [ 838.624375][T29141] blkdev_get_whole+0x380/0x510 [ 838.630025][T29141] bdev_open+0x31e/0xd30 [ 838.635236][T29141] blkdev_open+0x470/0x610 [ 838.640267][T29141] do_dentry_open+0x785/0x14e0 [ 838.645581][T29141] vfs_open+0x3b/0x340 [ 838.650185][T29141] path_openat+0x2e08/0x3860 [ 838.655314][T29141] do_file_open+0x23e/0x4a0 [ 838.660532][T29141] do_sys_openat2+0x113/0x200 [ 838.665823][T29141] __x64_sys_openat+0x138/0x170 [ 838.671288][T29141] do_syscall_64+0x15f/0xf80 [ 838.676520][T29141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.682952][T29141] [ 838.682952][T29141] -> #1 (set->srcu){.+.+}-{0:0}: [ 838.690176][T29141] __synchronize_srcu+0xca/0x300 [ 838.695657][T29141] elevator_switch+0x1e8/0x7a0 [ 838.701148][T29141] elevator_change+0x2cc/0x450 [ 838.706438][T29141] elevator_set_default+0x36c/0x430 [ 838.712422][T29141] blk_register_queue+0x3e9/0x4e0 [ 838.718060][T29141] __add_disk+0x677/0xd50 [ 838.722929][T29141] add_disk_fwnode+0xfb/0x480 [ 838.728307][T29141] nbd_dev_add+0x72c/0xb50 [ 838.733628][T29141] nbd_init+0x168/0x1f0 [ 838.738411][T29141] do_one_initcall+0x250/0x870 [ 838.743818][T29141] do_initcall_level+0x104/0x190 [ 838.749370][T29141] do_initcalls+0x59/0xa0 [ 838.754228][T29141] kernel_init_freeable+0x2a6/0x3e0 [ 838.760041][T29141] kernel_init+0x1d/0x1d0 [ 838.765088][T29141] ret_from_fork+0x514/0xb70 [ 838.770397][T29141] ret_from_fork_asm+0x1a/0x30 [ 838.775787][T29141] [ 838.775787][T29141] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 838.783715][T29141] __lock_acquire+0x15a5/0x2cf0 [ 838.789301][T29141] lock_acquire+0x106/0x350 [ 838.794348][T29141] __mutex_lock+0x1a3/0x1550 [ 838.799478][T29141] elevator_change+0x1b3/0x450 [ 838.804774][T29141] elevator_set_none+0xb5/0x140 [ 838.810422][T29141] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 838.817138][T29141] nbd_start_device+0x17f/0xb10 [ 838.822613][T29141] nbd_genl_connect+0x165b/0x1cf0 [ 838.828246][T29141] genl_family_rcv_msg_doit+0x22a/0x330 [ 838.834409][T29141] genl_rcv_msg+0x61c/0x7a0 [ 838.839572][T29141] netlink_rcv_skb+0x232/0x4b0 [ 838.844870][T29141] genl_rcv+0x28/0x40 [ 838.849474][T29141] netlink_unicast+0x75c/0x8e0 [ 838.854776][T29141] netlink_sendmsg+0x813/0xb40 [ 838.860328][T29141] ____sys_sendmsg+0x972/0x9f0 [ 838.865713][T29141] ___sys_sendmsg+0x2a5/0x360 [ 838.871098][T29141] __x64_sys_sendmsg+0x1bd/0x2a0 [ 838.876568][T29141] do_syscall_64+0x15f/0xf80 [ 838.881778][T29141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.888194][T29141] [ 838.888194][T29141] other info that might help us debug this: [ 838.888194][T29141] [ 838.898597][T29141] Chain exists of: [ 838.898597][T29141] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 838.898597][T29141] [ 838.912781][T29141] Possible unsafe locking scenario: [ 838.912781][T29141] [ 838.920235][T29141] CPU0 CPU1 [ 838.925774][T29141] ---- ---- [ 838.931138][T29141] lock(&q->q_usage_counter(io)#51); [ 838.936754][T29141] lock(fs_reclaim); [ 838.943459][T29141] lock(&q->q_usage_counter(io)#51); [ 838.951622][T29141] lock(&q->elevator_lock); [ 838.956310][T29141] [ 838.956310][T29141] *** DEADLOCK *** [ 838.956310][T29141] [ 838.964714][T29141] 6 locks held by syz.4.6591/29141: [ 838.970003][T29141] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 838.978208][T29141] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 838.987278][T29141] #2: ffff88802726d1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 838.998779][T29141] #3: ffff88802726d0d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 839.009761][T29141] #4: ffff8880272baef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 839.020648][T29141] #5: ffff8880272baf28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 839.031620][T29141] [ 839.031620][T29141] stack backtrace: [ 839.037697][T29141] CPU: 1 UID: 0 PID: 29141 Comm: syz.4.6591 Not tainted syzkaller #0 PREEMPT(full) [ 839.037722][T29141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 839.037732][T29141] Call Trace: [ 839.037743][T29141] [ 839.037751][T29141] dump_stack_lvl+0xe8/0x150 [ 839.037779][T29141] print_circular_bug+0x2e1/0x300 [ 839.037806][T29141] check_noncircular+0x12e/0x150 [ 839.037833][T29141] __lock_acquire+0x15a5/0x2cf0 [ 839.037861][T29141] ? elevator_change+0x1b3/0x450 [ 839.037876][T29141] lock_acquire+0x106/0x350 [ 839.037896][T29141] ? elevator_change+0x1b3/0x450 [ 839.037916][T29141] __mutex_lock+0x1a3/0x1550 [ 839.037936][T29141] ? elevator_change+0x1b3/0x450 [ 839.037952][T29141] ? rcu_is_watching+0x15/0xb0 [ 839.037976][T29141] ? work_grab_pending+0x3d1/0x990 [ 839.037999][T29141] ? elevator_change+0x1b3/0x450 [ 839.038014][T29141] ? __pfx___mutex_lock+0x10/0x10 [ 839.038041][T29141] ? enable_work+0x17f/0x230 [ 839.038054][T29141] ? lockdep_hardirqs_on+0x7a/0x110 [ 839.038075][T29141] ? __cancel_work_sync+0xf7/0x110 [ 839.038090][T29141] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 839.038109][T29141] elevator_change+0x1b3/0x450 [ 839.038127][T29141] elevator_set_none+0xb5/0x140 [ 839.038143][T29141] ? __pfx_elevator_set_none+0x10/0x10 [ 839.038160][T29141] ? xa_load+0x1db/0x210 [ 839.038182][T29141] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 839.038207][T29141] ? kernfs_add_one+0x477/0x5c0 [ 839.038229][T29141] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 839.038252][T29141] ? sysfs_add_file_mode_ns+0x259/0x300 [ 839.038273][T29141] nbd_start_device+0x17f/0xb10 [ 839.038293][T29141] ? device_create_file+0xf4/0x1b0 [ 839.038311][T29141] nbd_genl_connect+0x165b/0x1cf0 [ 839.038328][T29141] ? __pfx___nla_validate_parse+0x10/0x10 [ 839.038348][T29141] ? __pfx_nbd_genl_connect+0x10/0x10 [ 839.038366][T29141] ? rcu_is_watching+0x15/0xb0 [ 839.038388][T29141] ? trace_kmalloc+0x2a/0xf0 [ 839.038413][T29141] ? __nla_parse+0x40/0x60 [ 839.038429][T29141] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 839.038447][T29141] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 839.038468][T29141] genl_family_rcv_msg_doit+0x22a/0x330 [ 839.038488][T29141] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 839.038509][T29141] ? __lock_acquire+0x6b5/0x2cf0 [ 839.038532][T29141] genl_rcv_msg+0x61c/0x7a0 [ 839.038551][T29141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.038567][T29141] ? __pfx_nbd_genl_connect+0x10/0x10 [ 839.038588][T29141] netlink_rcv_skb+0x232/0x4b0 [ 839.038611][T29141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.038628][T29141] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 839.038654][T29141] ? down_read+0x270/0x2e0 [ 839.038674][T29141] ? genl_rcv+0xd/0x40 [ 839.038690][T29141] genl_rcv+0x28/0x40 [ 839.038705][T29141] netlink_unicast+0x75c/0x8e0 [ 839.038728][T29141] netlink_sendmsg+0x813/0xb40 [ 839.038753][T29141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.038777][T29141] ? aa_sock_msg_perm+0xf1/0x1b0 [ 839.038799][T29141] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 839.038824][T29141] ____sys_sendmsg+0x972/0x9f0 [ 839.038852][T29141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.038879][T29141] ? import_iovec+0x73/0xa0 [ 839.038896][T29141] ___sys_sendmsg+0x2a5/0x360 [ 839.038918][T29141] ? __lock_acquire+0x6b5/0x2cf0 [ 839.038940][T29141] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.038965][T29141] ? futex_wait+0x2a2/0x390 [ 839.038991][T29141] ? __fget_files+0x2a/0x420 [ 839.039011][T29141] ? __fget_files+0x3a0/0x420 [ 839.039041][T29141] __x64_sys_sendmsg+0x1bd/0x2a0 [ 839.039065][T29141] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.039092][T29141] ? rcu_is_watching+0x15/0xb0 [ 839.039118][T29141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.039135][T29141] do_syscall_64+0x15f/0xf80 [ 839.039154][T29141] ? trace_irq_disable+0x3b/0x140 [ 839.039171][T29141] ? clear_bhb_loop+0x40/0x90 [ 839.039189][T29141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.039205][T29141] RIP: 0033:0x7fb22cf9c819 [ 839.039222][T29141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.039237][T29141] RSP: 002b:00007fb22ddcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.039257][T29141] RAX: ffffffffffffffda RBX: 00007fb22d216090 RCX: 00007fb22cf9c819 [ 839.039269][T29141] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 839.039280][T29141] RBP: 00007fb22d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 839.039290][T29141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.039301][T29141] R13: 00007fb22d216128 R14: 00007fb22d216090 R15: 00007ffdf9f34bc8 [ 839.039319][T29141] [ 839.506548][ T5832] block nbd1: Receive control failed (result -104) [ 839.509495][T25078] block nbd1: Receive control failed (result -32) [ 839.548501][ T5832] block nbd2: Receive control failed (result -32) [ 839.556221][T25078] block nbd2: Receive control failed (result -32) [ 839.605767][T29141] nbd2: detected capacity change from 0 to 63 [ 839.620680][T29175] block nbd2: Dead connection, failed to find a fallback [ 839.649308][T29175] block nbd2: shutting down sockets [ 839.654599][T29175] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.665709][T29175] Buffer I/O error on dev nbd2, logical block 0, async page read [ 839.673745][T29175] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.686873][T29175] Buffer I/O error on dev nbd2, logical block 1, async page read [ 839.696092][T29175] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.705881][T29175] Buffer I/O error on dev nbd2, logical block 2, async page read [ 839.715221][T29175] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.725484][T29175] Buffer I/O error on dev nbd2, logical block 3, async page read [ 839.733730][T29175] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.743326][T29175] Buffer I/O error on dev nbd2, logical block 0, async page read [ 839.751748][T29175] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.761973][T29175] Buffer I/O error on dev nbd2, logical block 1, async page read [ 839.770758][T29175] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.780162][T29175] Buffer I/O error on dev nbd2, logical block 2, async page read [ 839.788347][T29175] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.797910][T29175] Buffer I/O error on dev nbd2, logical block 3, async page read [ 839.806181][T29175] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.815508][T29175] Buffer I/O error on dev nbd2, logical block 0, async page read [ 839.823434][T29175] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.833412][T29175] Buffer I/O error on dev nbd2, logical block 1, async page read [ 839.843284][T29175] ldm_validate_partition_table(): Disk read failed. [ 839.851031][T29175] Dev nbd2: unable to read RDB block 0 [ 839.857946][T29175] nbd2: unable to read partition table [ 839.868806][T29175] ldm_validate_partition_table(): Disk read failed. [ 839.878730][T29175] Dev nbd2: unable to read RDB block 0 [ 839.886445][T29175] nbd2: unable to read partition table