last executing test programs: 12.243283707s ago: executing program 3 (id=4197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=@setlink={0x4c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40601}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x7}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0xffffd8ee, @host}, 0x10) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x200, 0x1c, @private2, @mcast1, 0x7800, 0x10, 0x800, 0x6b90}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 11.075583818s ago: executing program 3 (id=4212): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f140011000200001d000200000020", 0x15) 11.003185741s ago: executing program 3 (id=4214): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async, rerun: 64) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gre0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000009500"/17], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x6, '\x00', r1}, 0x94) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.25974568s ago: executing program 3 (id=4221): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f140011000200000a0002000000200000", 0x17) (fail_nth: 3) 9.855609568s ago: executing program 3 (id=4226): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='&*+\x00', 0xa0200, &(0x7f0000000040)={@_ha_fsid={[0x80000001, 0xb]}, {0x0, 0x1, 0x9, 0x2}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x0, 0xffff, 0x5, 0x7, 0x101}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e23, 0xbea1, @local, 0x6}}}, 0x84) sendmsg$AUDIT_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3e8, 0x20, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4002100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000850}, 0x8800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x86}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000640)='syzkaller\x00', 0x7fff, 0x73, &(0x7f0000000680)=""/115, 0x0, 0x21, '\x00', r3, @sk_msg, r0, 0x8, &(0x7f0000000700)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000740)=[{0x3, 0x5, 0x9, 0x9}, {0x1, 0x2, 0x10, 0xb}, {0x5, 0x3, 0x1, 0xb}, {0x2, 0x2, 0x4, 0xc}, {0x5, 0x2, 0xe, 0xa}, {0x101, 0x5, 0x10}], 0x10, 0xbcea}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xcc, r6, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x4}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40005}, 0x40020) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000a80)=0xfffffff8, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000ac0)={r0, r4, 0x25, 0xb, @val=@perf_event={0xffffffffffffffff}}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c40)={r0, &(0x7f0000000b00)="83ed95b5011470ddab998b8e2246d258ea326ba0806a38c80d4f9679bac48ea501f9bdc8747ab2da667b1afc15b0b9a4622e955d473b6d32a2fb031c0615095d7844dd359298b0be81a9a74ea3617e5d852f660ad2f7d633b9e4fa363eb648720f399b4db9a2e0fae35af9803c0f547b8ccb162129caad12287507f9b14cfbf1d56d1f07dd1ce0604df964c78a0ba232ccadc689a67cd8e62d77cc87af6bfe8f18b32dbc9ac1157cc4043c4ca37a3e680220193299faa863cb462401de6c4a42900aec795d47c374e9a3dd917609a772060045c7b83a0d794649d89f011a138fd9bbc9ce67989a264311863b415c27e813c5", &(0x7f0000000c00)}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000cc0)=0x0) recvfrom(r0, &(0x7f0000000c80)=""/50, 0x32, 0x40000102, &(0x7f0000000d00)=@nfc_llcp={0x27, r7, 0x0, 0x7, 0x6e, 0xf9, "393c017e681107de989e91320ee54f3cdc63b03e92f64d88eae512f05cb38d8eb7e05aa618329d3bd29fda8f36a3b440743308a863d65b78c534740b8cfe1f", 0x17}, 0x80) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000dc0), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'ip6tnl0\x00', r3, 0x29, 0x1, 0x10, 0x2, 0x24, @local, @empty, 0x51, 0x10, 0x2, 0x6}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001000)={'syztnl2\x00', &(0x7f0000000fc0)={'syztnl0\x00', r4, 0x1, 0x7800, 0x6, 0x5, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x67, 0x0, 0xa, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, {[@noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'pimreg\x00', 0x0}) getsockname$packet(r0, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001140)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001200)={'syztnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r3, 0x4, 0x2, 0x1, 0x9, 0x48, @private0, @mcast2, 0x1, 0x7800, 0x7, 0x4}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001240)={0xc48, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x23c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2bfd, 0x9, 0xd, 0x7}, {0x9, 0xdb, 0xff, 0xb}, {0x6, 0x45, 0x96, 0x7fff}, {0x5, 0x0, 0x3, 0x6}, {0x9, 0x9, 0x0, 0x5}, {0xf, 0x5f, 0x39}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x4a, 0xe, 0xb3}, {0x3, 0x7, 0x4, 0x2b7ea0f1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r10}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x30}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc0c3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}, {{0x8, 0x1, r14}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r15}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r17}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd6dc}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x8, 0x4, 0x3}, {0x0, 0x1, 0xfc, 0xffff}, {0x7, 0xe, 0x4, 0x4}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}]}, 0xc48}, 0x1, 0x0, 0x0, 0x4090}, 0x20004083) 9.530236394s ago: executing program 3 (id=4229): r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000002f0009002abd700000000000040000000900118031f9e05e050000d1"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) listen(r0, 0x7fffffff) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000fc001600"/32], 0x20, 0x880}, 0x8050) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xfffd, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24004805}, 0x20000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c3920310040000000000890000000800030002bab0a97c9e433699f27332ffb359ba5f57cb302e7d74c83e411df280e9eafc55a7a4b5898cbb3284583ade3600eb9f22562c73afea08ff091c3ada2602c0f8471a35cf9499a9be30723c2974e1c435eb124c1ff699eab47e8c8b68e878dad44531b8e746f852d93119b881d713cca12ac3eb04f01dda38f3b68517f8f9415a5d962c9824df0c6d1c", @ANYRES32=r12, @ANYBLOB="14001d8010000080060005001200000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000091401002a0000000000000005000100"], 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x8066) 4.020039063s ago: executing program 1 (id=4270): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xe95}], 0x1, 0x8000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="011000003fae88595f02d53e4437b10e0000001d57b0689380ab1f1c94f78966e1000000010000000000000009410000004c0018000000066962000000000000000000000000000000000000000000000000000000632a7a101af05ba71d6deb00000000000000000000000000000000000000000000000000000000000000be1d8b8c139d5802beeb478390778159ef8b9f0ccd0b3c529a41c7c847dcc7444f1bea355f6cd50cf7bc26127d7473b50a82aa027a2974d54a5fe11b8952d40a0f5da6628bb62d"], 0x68}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r8, 0x3, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r12, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240008c0}, 0x4000000) setsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r14, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) 3.395883858s ago: executing program 2 (id=4278): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f140011000200001d0002000000200000", 0x17) (fail_nth: 4) 3.288269331s ago: executing program 1 (id=4282): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) getsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000740)=0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000440)=""/127, &(0x7f00000004c0)=0x7f) recvfrom(r2, &(0x7f0000000280)=""/5, 0x5, 0x40000041, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a00)={'team_slave_1\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x20005, 0xfffffffffffffff7}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r4], 0x6e) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r5, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) (async) connect$netlink(0xffffffffffffffff, &(0x7f0000000280), 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x5e, &(0x7f00000005c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3", @ANYBLOB="9fc6dcaf151e7b032272633a4a136b4bbec76f16ac0a547874a414f5002af2e5121eaf397aaa5673529beb93ab68d4c98fdd0fa9f870a262db9a990fe2ffec085dc8fcc764c0bd3945657ba9673ce555e9ec99376dc8d2644e5dd0b6d7ca1ff88cf1b0525ee12e0a870f14bdae6ca9e0ac2bb4a3cb300e81ac8509c1749b414807550b90bc", @ANYRES16=0x0], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2000000}, 0x10}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x8, 0x2, {{0x7, 0x4, 0x3, 0x2f, 0x1c, 0x66, 0x0, 0xff, 0x2f, 0x0, @multicast2, @multicast1, {[@generic={0x89, 0x8, "09b7d841d488"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000ff7f0000ee0c00000600000000400000", @ANYRES32=r6, @ANYBLOB="27000000000000000000000000000000001164062a22c817ce2fab6ddd1afa1d2e3ec0c9b842205370029818029e260ef4be4e752bc984428e9fe6b9a15734174b0500efcf47a4700e2004fe6e4b6ff23420706224639977b841d0a4da7405556f07f931207a8b9e066a87", @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="000000000400"/28], 0x50) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x1c, 0x10, 0x1, 0x0, 0x25dfdbff, {0x43, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d2e30000"]}]}, 0x45}}, 0xc010) 2.85685104s ago: executing program 1 (id=4285): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f14001100020000130002000000200000", 0x17) (fail_nth: 4) 2.795116555s ago: executing program 2 (id=4286): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) r1 = epoll_create(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000500)={0x90000000}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r3, 0xff, 0x6, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x1000, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000002940), 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[@ANYRES64=r4, @ANYRESDEC=r4, @ANYBLOB="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", @ANYRES16=r4], 0xe8}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.744237313s ago: executing program 2 (id=4288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x130) 2.643860371s ago: executing program 1 (id=4289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002400)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40080) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x8000000}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="e9f584f2300b82e8ab4522c5a3bc374e", 0x10) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$sock_proto_private(r2, 0x89e3, &(0x7f00000002c0)="781fea2669237e9a48eb6370b334284f405f9ca11bdeaa00160201cdb4d54b91e6bf07faeb8c0633c96a51e58be4e3627b745235af0e6d4bcce6f1dc70b8725e4873a3e266180dc0f60390d21a4150edee8e98b6ff9287f59c208144365f2944f3f01d67d3") socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000010c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) setsockopt$inet_tcp_int(r6, 0x6, 0x25, &(0x7f0000000380)=0xffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 2.519805718s ago: executing program 1 (id=4290): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r1, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r1, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000001900)}, 0x101}], 0x1, 0x2100, 0x0) getsockname$packet(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, r0, 0x2a1cf000) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r0, 0x400000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000a00)={0x0, 0xfbc, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000600)={r5, 0x7, 0x5, 0x1}) 2.457202031s ago: executing program 1 (id=4291): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0xfe, 0x3, 0x0, 0x9}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0xff, 0x9, 0x0, 0x4}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x402) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e0200c4f85bec4c00"], 0x0) r8 = socket$alg(0x26, 0x5, 0x0) close(0x3) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40802) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.811298347s ago: executing program 4 (id=4299): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000100)=0x1, 0x4) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x40, 0xdc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 1.692220255s ago: executing program 4 (id=4300): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xe, 0x10}}}, 0x24}}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c00180b0bac0f0001ac0f008197c0cdbc23e658ef4f0bc79696a6787c4a93a0b52c5a7fc3176181cdd42198fe5b04711e00516e89d2553e65a1e5e9054a932f27840ed10647052574029c4f03fd85699fde5f47cdc1e4f7a781a63f9a922f4c89237752bc5ff223e9ba2b9c697a8434b937e0069541f97d1b5b7e5820b99eee891bcc001f0dffe8986971"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='dvmrp1\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000000)=""/32, 0x20}], 0xb}, 0x10000fff}, {{0x0, 0x0, 0x0}, 0x10000004}], 0x1e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000020000bb000000e7ffff940000000000000072d3de002c048a38bcc8e7fbd04d572bcb"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6}, 0x10) 1.210543686s ago: executing program 2 (id=4302): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000001080)=ANY=[@ANYBLOB="18020000fdffffff00000000feffffff850000006d000000180000000300000000000000060000009500"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 1.132859087s ago: executing program 2 (id=4303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14, 0x15c}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e22, @multicast2}}) 754.007194ms ago: executing program 4 (id=4309): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000080)='(#^,}!\x00', 0x404582, &(0x7f00000000c0)={@align=0x400, {0x0, 0x8001, 0x1, 0x6dff}}, 0x67a0, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3}, {[0x9, 0x7fff, 0xfffffffe, 0x2]}, 0x1, 0x0, &(0x7f0000000180)}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xe03, 0x0, r0, 0xffff, '\x00', 0x0, r1, 0x4, 0x5, 0x5}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x61}}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c085}, 0x400) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000580)=0xd580, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x81, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r0, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', 0x0, 0x29, 0xf, 0x66, 0xfd, 0x3c, @local, @empty, 0x40, 0x700, 0x0, 0x7}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000c40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x104, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40004}, 0x4000004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000cc0)={'syztnl1\x00', r11, 0x8, 0x7800, 0x6, 0x42b, {{0x1c, 0x4, 0x3, 0x1e, 0x70, 0x65, 0x0, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ra={0x94, 0x4}, @noop, @cipso={0x86, 0x46, 0x3, [{0x7, 0x7, "61b1d89b2b"}, {0x6, 0xb, "1048cd18ad993ea03a"}, {0x6, 0xe, "561273a32b3118ec25d5f3aa"}, {0x6, 0xc, "109465a0c4d2a186a553"}, {0x2, 0x2}, {0x5, 0x6, "16c426fc"}, {0x2, 0xc, "43c19a6dcc5220100c32"}]}, @generic={0x44, 0xe, "6a8022cc8f7f13b4a9db36c5"}]}}}}}) r13 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x0, 0x4e24, 0x77, 0xa, 0x80, 0x20, 0x3a, r12, r13}, {0x0, 0x5, 0x2, 0x9, 0x8001, 0x4, 0x3800000000000, 0x9}, {0x1, 0x2, 0x3, 0x9}, 0x0, 0x6e6bb9, 0x2, 0x0, 0x3, 0x3}, {{@in=@loopback, 0x4d2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x5, 0x1, 0xe, 0x3800000, 0xd7, 0x4a}}, 0xe8) r14 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ec0)) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r2) sendmsg$TIPC_NL_BEARER_SET(r15, &(0x7f0000001300)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f0000000f80)={0x334, r16, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5c}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x275}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc15d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbb, 0x3, "f2b68105223de657ccd276536142e4510b94fc3c18fb1bc9eabfd1a01dc23a5683b507aaf0ccb962ee3f2990469978b464d10640fa9623e9edd8d5193ef3f63d67d1f8a7925cd8d6900f9eea604d9f3e016cb629d6db6e702f49f613f7181ada9b2df8075087e19d7f4fb8446851d928965ea2268f2f088ac85e46ca7d9f77f2826d2887d47c6ca18e2064edd9d348b446422a5a228695dbd5af9b919f92032a686696b02c3263491c625cf8743f7d76fb67116ac11fe8"}, @TIPC_NLA_NODE_ID={0x85, 0x3, "f6d74d8f1a5d3c7a271b8ec7979684682e238a0676ca7fef4ee7d5fc962d4e5caa5d9f5071ddc8bf5ab92e227b0ef8741c332f43984e0b8769425b3d79d83ab84ff155d5a991ffa1d5be947dc3c40d3937e260bf803c529e3ee97ecffcc3883d4ddc45db12d714fd79ebd2064d4b9dc7fc08981d26fa0ee1c5ccf92e8103de4d19"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x87}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r14, 0xc020662a, &(0x7f0000001340)={0x1, 0x4, 0x4, 0xfff, 0x8, 0x0, [{0x3, 0x78, 0x3, '\x00', 0x80}, {0xe3, 0x12, 0x80000001, '\x00', 0xa}, {0x80000000, 0x0, 0xd, '\x00', 0x2484}, {0x5ee, 0x9, 0x0, '\x00', 0x2a00}, {0x3, 0x5, 0x1, '\x00', 0x1200}, {0x0, 0xc00, 0x2, '\x00', 0x1000}, {0x0, 0x6, 0x7, '\x00', 0xd5b94ea893892b79}, {0x8, 0x5, 0x4, '\x00', 0x200}]}) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x88, r17, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x4480) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r18, &(0x7f0000001980)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001740)={0x1e4, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x8d, 0x45, "3b54e980e27b83525c66b98ba572ccc41c36d40c1a6fbd5ac0698f500fadbf2862610287654dbe72cc72228f6a237ce781f81398522fe60fc26dc41074c8bb9460a133a592d26da9c29b8d93f572a8c48da135ee7f8076f991168153acba954f51ef67d1217380f2665d3a9754a0de2918e7b1cc4a2aac81f5ca60cbfde2deabbfd7bd263bbf1edf65"}, @NL80211_ATTR_TESTDATA={0xdc, 0x45, "4417a2710487fed6c1665d5213753501c696e3383ed4f1a8fe13c45accb7f4b620d6909925f9482866e0443d382db76e4c611997915a7ce79b68fa747092562eb66353c357badca3082b2ddeb0c00ba10366c05517fd1670e8768ce6cf0bc8926a8b3a9d25ea3b6e774a8d76936c757af8e49eb9d64ce636ec2c1d80cc253aa5a9616a0fcd4d706d30b7d88a30187cbe5a7ecadae76a04a5d9e41bbf22a98952976f87966c7c6ce43104d91a8c1fb30796ea9a77923896bc7c75e2ca5776eebf136ab5147eb6d63764f26c59808b62ce7ab0cd170708044a"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "77e49abdfc8d11123f9b1ca30c11d8d20f98675bfb57a1bc32cd286ac99a0d9e2d1d578a671e44b77673297308e35f47d2dd54613005786fa6edba45d6ce10ade1a3b2cbf063249b0933bfc4f8337e8d4fb84f469fcbf49e47af644434"}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4050}, 0x88c0) 656.073864ms ago: executing program 4 (id=4311): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x4b, 0x0, 0x2}, 0x28) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000080)={@private, @rand_addr, @remote}, &(0x7f0000000140)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x1bc8, 0x4) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1) 642.269079ms ago: executing program 2 (id=4312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x200040cc) 536.076673ms ago: executing program 0 (id=4313): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1d, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000002240)=""/4121, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x409}, 0x94) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%-5lx \x00'}, 0x20) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r8, r8, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r8, r8, 0x2f, 0x2010, 0x4, @value=r7}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r9, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r10, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, 0x94) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000d00)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x2, 0x4, &(0x7f00000008c0)=@raw=[@map_idx={0x18, 0xa}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], &(0x7f0000000900)='GPL\x00', 0x8, 0x5f, &(0x7f0000000a00)=""/95, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x9, 0x3, 0x1}, 0x10, 0x0, r1, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r5, r6, r7, r9, 0xffffffffffffffff, r12], 0x0, 0x10, 0x4}, 0x94) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000800)={0x6, 0x1ff, 0x1, 0x800, 0x81, 0x0, 0xa7c2}) accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000400000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000001000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@private0, 0x0}, &(0x7f0000000180)=0x14) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x3, 0x3, 0xa, 0xb, 0x1, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x4, 0x8, 0x4, 0x18, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x7, 0x3, 0x4, 0xffffffffffffffff, 0x8}, @alu={0x7, 0x0, 0xa, 0xf, 0x0, 0xfffffffffffffff8, 0x8}, @jmp={0x5, 0x1, 0xaa898d6cc911f964, 0xa, 0xa, 0xfffffffffffffffc, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb71}], &(0x7f0000000540)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x18, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x8, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x4, 0x3, 0x2, 0xa}, {0x0, 0x1, 0x2, 0x5}], 0x10, 0x9}, 0x94) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e23, 0x4, @private1, 0x4}], 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'veth1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x2000005d, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050030e304dc18913d3500000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0xbc, &(0x7f0000000300)=""/188, 0x41000, 0x14, '\x00', r14, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xd, 0x5}, 0x10, 0x0, r15}, 0x94) 395.739296ms ago: executing program 0 (id=4314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000300000000000000feffffff8500000087000000850000090000000095000039b5ea50d59942bce331a60000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000880)="6dc029d186242d046f5ecf5bc9de", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 353.537794ms ago: executing program 0 (id=4315): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f140003000200001d0002000000200000", 0x17) 319.851322ms ago: executing program 4 (id=4316): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000020601016e261185fb6a07000200000005000100060000000900020073797a3100000000150003006173683a69702c706f00040000000000050005000200"/79], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000906010000000000000000000200040000000000000000000900020073797a3100000000340007800c000180080001407f000001060004405000000005f5a8aade6b8cbc7b001480080001407f0000010500150018000000"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x50, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xc}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}]}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000380)={0x0, 'erspan0\x00', 0xfff}, 0x18) socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44) getuid() r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0xffff, 0x4, 0x1, 0x40, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, &(0x7f0000000240)=""/145}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000018c0)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac08}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007039b923a"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) 186.689477ms ago: executing program 0 (id=4317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0xdfc, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) socket$kcm(0x23, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) recvmmsg(r2, 0x0, 0x0, 0x300, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002f00090027bd70e58566cb82646984f0fbbc5669538f279169d4f515bb"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 112.591127ms ago: executing program 0 (id=4318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = gettid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x1411, 0x2, 0x70bd2c, 0x25dfdbfb}, 0x10}}, 0x4000004) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r6, 0x0) connect$bt_rfcomm(r6, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xa) r7 = gettid() ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000000c0)=r7) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x54, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20010080}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0xcc, r1, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r9 = socket$tipc(0x1e, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRESHEX=0x0, @ANYRESHEX=r7, @ANYRES32=r0, @ANYRES32, @ANYRESOCT=r8], 0x50) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r6], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="00012dcc7000fedbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000006051000000060014010400000005001301010000006f00be00694e24a20025da185c03fd60d1cbaa3e5026c9ab3f66766a7ae014cbdaacf5a0b4f5a1547302c60d6b85ef0f9df828696181a722f93c1ac9b50d5a0e0efaede398d8552e5b68f27c38556976c63b7f908f5302dbde7b2a1e8672a83c2bd8c61632917025af43bce428533d0008001400", @ANYRES32=r10, @ANYBLOB="3100ac006f2fdf15f1bc302e9949aebf714c2a98b178e411e0a7ac8e62f2b3fafb6812158c2311e46f2799854e923d5fcf00000006001200030000001000118004000600040007000400060006001401020000000a00060008021100000000000800a40001000000"], 0x118}, 0x1, 0x0, 0x0, 0x2004c800}, 0x1) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r11, @ANYRESHEX=r0, @ANYRES8=r4, @ANYRES8=r3, @ANYRES32=r8], 0x1c}}, 0x0) (async) getsockopt$sock_int(r9, 0x1, 0x3, 0x0, &(0x7f0000000780)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8983, &(0x7f0000000000)={0x8, 'team0\x00', {'pim6reg\x00'}, 0x8000}) (async) r12 = socket$inet(0x2, 0x80000, 0x101) (async) r13 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r13, 0x28, 0x6, 0x0, 0x22) (async) setsockopt$inet_mreqn(r12, 0x0, 0x20, &(0x7f00000000c0)={@remote, @multicast1}, 0xc) 63.668921ms ago: executing program 4 (id=4319): r0 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040884}, 0x4008000) 0s ago: executing program 0 (id=4320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x21, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020040002000000280012800b00010067656e6576650000180002801400120020010000000000000000000000000002f5f587f4d8f202a9db7456ddad0583ec80dc6aaf3ceaa6b132a31e589baaccdbcef225fbb8dae29caa68ad0ca7f1265edd25ce7feed507e460f7f5930624064116bcce6c63cf3560a032d69fb2865acbcc91b4ab08b078ca526ea85332bf21574664f334df5d46f54ac356a5405549f96665911f9ceecc91"], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x9c0, 0xffffffffffffffff}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4d3, 0x3c}, 0xa, @in6=@empty, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x4000000, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r6, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb30}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x20000884) (async, rerun: 64) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xa, 0xe}, {0xffff, 0xffe0}, {0xfff2, 0xfff3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x10, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9dd}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x200}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x3}, @TCA_FQ_FLOW_PLIMIT={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4890) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000580)={{{@in=@empty, @in=@loopback, 0x4e22, 0xb, 0x4e24, 0x8, 0x2, 0x80, 0x0, 0x16, r9, r10}, {0x1, 0x1, 0x0, 0x80000001, 0x4, 0x1ff, 0x6, 0x7}, {0x7, 0x9, 0x1, 0xfffffffffffffffb}, 0xd, 0x6e6bba, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d6}, 0xa, @in=@loopback, 0x3500, 0x2, 0x1, 0x1, 0xa63, 0x10001, 0x6}}, 0xe8) (async) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) (async) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) (async) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x690}, 0x40) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000011401002dbd7000fcdbdf2508000100"], 0x18}, 0x1, 0x0, 0x0, 0x180d1}, 0x49010) kernel console output (not intermixed with test programs): tlink: 1768 bytes leftover after parsing attributes in process `syz.3.3428'. [ 567.065711][T20327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3426'. [ 567.503737][ T6057] team0 (unregistering): Port device wg2 removed [ 567.685476][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 567.755450][ T3359] bond9: (slave dummy0): failed to get link speed/duplex [ 568.338848][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 568.369353][ T6057] IPVS: stop unused estimator thread 0... [ 568.466141][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 568.804735][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 568.944571][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 569.616635][T20385] __nla_validate_parse: 1 callbacks suppressed [ 569.616659][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 569.684737][T20385] netlink: 'syz.4.3440': attribute type 10 has an invalid length. [ 569.707396][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3440'. [ 569.718245][ T3359] bond9: (slave dummy0): failed to get link speed/duplex [ 569.767064][T20387] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 569.943463][T20385] geneve1: entered promiscuous mode [ 570.020481][T20385] geneve1: entered allmulticast mode [ 570.565184][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 570.897957][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3445'. [ 570.982989][T20421] netlink: 'syz.0.3445': attribute type 5 has an invalid length. [ 571.008074][T14755] bond9: (slave dummy0): failed to get link speed/duplex [ 571.235524][ T64] bond9: (slave dummy0): failed to get link speed/duplex [ 572.136710][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3451'. [ 572.332706][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3450'. [ 572.366701][T20456] FAULT_INJECTION: forcing a failure. [ 572.366701][T20456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.393907][T20448] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.456902][T19994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 572.469511][T20456] CPU: 0 UID: 0 PID: 20456 Comm: syz.0.3452 Not tainted syzkaller #0 PREEMPT(full) [ 572.469543][T20456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.469560][T20456] Call Trace: [ 572.469569][T20456] [ 572.469578][T20456] dump_stack_lvl+0xe8/0x150 [ 572.469744][T20456] should_fail_ex+0x40c/0x560 [ 572.469848][T20456] _copy_to_user+0x31/0xb0 [ 572.469940][T20456] simple_read_from_buffer+0xe1/0x170 [ 572.469999][T20456] proc_fail_nth_read+0x1bb/0x230 [ 572.470038][T20456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.470070][T20456] ? rw_verify_area+0x24a/0x4c0 [ 572.470112][T20456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 572.470153][T20456] vfs_read+0x213/0xa80 [ 572.470188][T20456] ? __pfx___mutex_lock+0x10/0x10 [ 572.470310][T20456] ? __pfx_vfs_read+0x10/0x10 [ 572.470342][T20456] ? __fget_files+0x2a/0x420 [ 572.470380][T20456] ? __fget_files+0x3a2/0x420 [ 572.470405][T20456] ? __fget_files+0x2a/0x420 [ 572.470441][T20456] ksys_read+0x150/0x270 [ 572.470474][T20456] ? __pfx_ksys_read+0x10/0x10 [ 572.470514][T20456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.470558][T20456] do_syscall_64+0x174/0x580 [ 572.470638][T20456] ? clear_bhb_loop+0x70/0xc0 [ 572.470665][T20456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.470686][T20456] RIP: 0033:0x7ffbedb5e90e [ 572.470707][T20456] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 572.470725][T20456] RSP: 002b:00007ffbeea8ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 572.470747][T20456] RAX: ffffffffffffffda RBX: 00007ffbeea906c0 RCX: 00007ffbedb5e90e [ 572.470761][T20456] RDX: 000000000000000f RSI: 00007ffbeea900a0 RDI: 0000000000000004 [ 572.470773][T20456] RBP: 00007ffbeea90090 R08: 0000000000000000 R09: 0000000000000000 [ 572.470785][T20456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.470797][T20456] R13: 00007ffbede26038 R14: 00007ffbede25fa0 R15: 00007ffcf294b858 [ 572.470832][T20456] [ 572.747632][T20463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3455'. [ 572.810796][T19994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.847290][T19994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 572.861714][T20464] netlink: 'syz.4.3454': attribute type 1 has an invalid length. [ 572.901838][T19994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.934977][T19994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 572.960531][T19994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 573.189519][T20464] bond2: entered promiscuous mode [ 573.195054][T20464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.224064][T19994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 573.239200][T19994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.338983][T20482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.346142][T20482] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 573.410967][T20482] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 573.423654][T20482] bond2: (slave xfrm1): making interface the new active one [ 573.431299][T20482] xfrm1: entered promiscuous mode [ 573.445256][T20482] xfrm1: left promiscuous mode [ 573.542493][T20494] netlink: 'syz.2.3460': attribute type 4 has an invalid length. [ 573.556289][T20494] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3460'. [ 573.754491][T19128] net_ratelimit: 5 callbacks suppressed [ 573.754510][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 573.984821][T19994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.048627][T19994] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.125305][T19128] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.132568][T19128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.278061][ T3359] bond9: (slave dummy0): failed to get link speed/duplex [ 574.334095][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.341669][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.358334][T20537] syzkaller0: entered promiscuous mode [ 574.364102][T20537] syzkaller0: entered allmulticast mode [ 574.435558][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 574.460334][T20537] netlink: 'syz.4.3467': attribute type 9 has an invalid length. [ 574.724662][ T3359] bond9: (slave dummy0): failed to get link speed/duplex [ 574.832631][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 574.952621][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 575.021941][T20566] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 575.199583][ T3359] bond9: (slave dummy0): failed to get link speed/duplex [ 575.274404][ C1] bridge0: port 3(veth0) entered forwarding state [ 575.280932][ C1] bridge0: topology change detected, propagating [ 575.298978][ T25] block nbd4: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 180 seconds [ 575.311118][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 575.319287][ T25] block nbd4: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 180 seconds [ 575.332009][ T25] block nbd4: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 180 seconds [ 575.344502][ T25] block nbd4: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 180 seconds [ 575.381682][T14755] bond9: (slave dummy0): failed to get link speed/duplex [ 575.509335][T14755] bond9: (slave dummy0): failed to get link speed/duplex [ 575.801478][T20607] netlink: 'syz.2.3480': attribute type 1 has an invalid length. [ 575.837163][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 575.953333][T20607] smc: net device wg2 erased user defined pnetid SYZ0 [ 575.978692][T20618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 575.992466][T20618] netlink: 'syz.3.3482': attribute type 10 has an invalid length. [ 576.007181][T20607] veth3: entered allmulticast mode [ 576.018279][T20618] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3482'. [ 576.028945][T20607] bond1: (slave veth3): Enslaving as an active interface with a down link [ 576.054888][T20602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.121985][T20602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.146803][T20624] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3480'. [ 576.207471][T19994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.226695][T20620] bond1: (slave veth0_to_bond): making interface the new active one [ 576.246399][T20620] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 576.290160][T20618] geneve2: entered promiscuous mode [ 576.296870][T20618] geneve2: entered allmulticast mode [ 576.482723][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3486'. [ 576.555381][T19994] veth0_vlan: entered promiscuous mode [ 576.571232][T19994] veth1_vlan: entered promiscuous mode [ 576.650239][T19994] veth0_macvtap: entered promiscuous mode [ 576.659624][T20639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3488'. [ 576.662508][T19994] veth1_macvtap: entered promiscuous mode [ 576.681028][T20637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3487'. [ 576.732846][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3488'. [ 576.810984][T20643] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 576.853679][T19994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.865793][T19994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.005404][ T6057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.027812][ T6057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.190583][T14755] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.210328][T19129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.345595][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3495'. [ 577.377569][T19128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.426326][T19128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.521906][T20670] bridge0: port 3(syz_tun) entered disabled state [ 577.583035][T20670] syz_tun (unregistering): left allmulticast mode [ 577.589702][T20670] syz_tun (unregistering): left promiscuous mode [ 577.596308][T20670] bridge0: port 3(syz_tun) entered disabled state [ 577.686290][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3496'. [ 577.710718][T14755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.718822][T14755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.866393][T19129] net_ratelimit: 11 callbacks suppressed [ 578.866415][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 578.992120][T14755] bond9: (slave dummy0): failed to get link speed/duplex [ 579.017241][ T5270] veth0_macvtap: entered promiscuous mode [ 579.306253][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 579.465130][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 579.643332][T14755] bond9: (slave dummy0): failed to get link speed/duplex [ 579.753210][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 579.863344][T14752] bond9: (slave dummy0): failed to get link speed/duplex [ 579.986250][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 580.094494][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 580.239496][T14752] bond9: (slave dummy0): failed to get link speed/duplex [ 580.392500][T20779] netlink: 'syz.3.3517': attribute type 1 has an invalid length. [ 580.866768][T20801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.950471][T20801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.157369][T20815] __nla_validate_parse: 4 callbacks suppressed [ 581.157392][T20815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3526'. [ 581.201486][T20815] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3526'. [ 581.272448][T20815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'. [ 582.137023][T20855] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 582.313466][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3538'. [ 582.392145][T20868] bridge_slave_1: left allmulticast mode [ 582.428981][T20868] bridge_slave_1: left promiscuous mode [ 582.451240][T20868] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.497786][T20868] bridge_slave_0: left allmulticast mode [ 582.533289][T20868] bridge_slave_0: left promiscuous mode [ 582.540737][T20886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3542'. [ 582.561252][T20868] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.925526][T20903] x_tables: duplicate underflow at hook 2 [ 582.978780][T20876] syzkaller0: entered promiscuous mode [ 582.984416][T20876] syzkaller0: entered allmulticast mode [ 583.486878][T20925] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3548'. [ 583.519563][T20925] netlink: 'syz.3.3548': attribute type 2 has an invalid length. [ 583.529142][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3548'. [ 583.542024][T20925] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3548'. [ 583.572893][T20930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 584.644190][T20953] netlink: 'syz.0.3554': attribute type 1 has an invalid length. [ 587.790172][ T4975] udevd[4975]: worker [16034] /devices/virtual/block/nbd4 timeout; kill it [ 587.799116][ T4975] udevd[4975]: seq 20759 '/devices/virtual/block/nbd4' killed [ 587.856200][ T3359] net_ratelimit: 17 callbacks suppressed [ 587.856222][ T3359] bond9: (slave dummy0): failed to get link speed/duplex [ 587.917011][T20945] lo speed is unknown, defaulting to 1000 [ 588.194646][ T64] bond9: (slave dummy0): failed to get link speed/duplex [ 588.305440][ T64] bond9: (slave dummy0): failed to get link speed/duplex [ 588.354937][T20979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3560'. [ 588.484769][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 588.595857][T14752] bond9: (slave dummy0): failed to get link speed/duplex [ 588.637884][T20981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.876688][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 588.934416][T21002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'. [ 588.943346][T21002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'. [ 589.028220][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 589.117122][ T64] bond9: (slave dummy0): failed to get link speed/duplex [ 589.228465][T14752] bond9: (slave dummy0): failed to get link speed/duplex [ 589.256103][T21012] bridge3: entered promiscuous mode [ 589.261379][T21012] bridge3: entered allmulticast mode [ 589.281340][T21012] team0: Port device bridge3 added [ 589.304875][T21012] bridge0: port 4(team0) entered blocking state [ 589.311417][T21012] bridge0: port 4(team0) entered disabled state [ 589.317875][T21012] team0: entered allmulticast mode [ 589.355513][T21012] team_slave_0: entered allmulticast mode [ 589.361318][T21012] team_slave_1: entered allmulticast mode [ 589.374714][T21012] team0: entered promiscuous mode [ 589.379824][T21012] team_slave_0: entered promiscuous mode [ 589.385754][T21012] team_slave_1: entered promiscuous mode [ 589.392410][T21012] bridge0: port 4(team0) entered blocking state [ 589.398858][T21012] bridge0: port 4(team0) entered listening state [ 589.424480][T21012] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3568'. [ 589.460761][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 589.579684][T14752] bond9: (slave dummy0): failed to get link speed/duplex [ 589.842848][T21039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.856644][T21039] team0: Port device bond1 added [ 590.239033][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3578'. [ 590.508077][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3581'. [ 590.515343][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3581'. [ 590.839805][ T5610] Bluetooth: hci5: command 0x0406 tx timeout [ 590.863610][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3583'. [ 590.919214][T21067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3582'. [ 591.591949][T21090] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 591.611744][T21090] tipc: Started in network mode [ 591.618895][T21090] tipc: Node identity ac14140f, cluster identity 4711 [ 591.630573][T21090] tipc: New replicast peer: 255.255.255.255 [ 591.638160][T21090] tipc: Enabled bearer , priority 10 [ 591.647562][T21090] netlink: 'syz.3.3591': attribute type 10 has an invalid length. [ 591.677675][T21090] bridge0: port 4(team0) entered disabled state [ 591.709763][T21090] team0: left allmulticast mode [ 591.735714][T21090] team_slave_0: left allmulticast mode [ 591.763080][T21090] team_slave_1: left allmulticast mode [ 591.787011][T21090] team0: left promiscuous mode [ 591.803985][T21090] team_slave_0: left promiscuous mode [ 591.835776][T21099] netlink: 'syz.2.3594': attribute type 10 has an invalid length. [ 591.844045][T21090] team_slave_1: left promiscuous mode [ 591.869925][T21090] bridge0: port 4(team0) entered disabled state [ 591.922244][T21090] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.958705][T21090] bond0: (slave team0): Enslaving as an active interface with an up link [ 591.986615][T21099] team0 (unregistering): Port device team_slave_0 removed [ 592.019693][T21099] team0 (unregistering): Port device team_slave_1 removed [ 592.490305][T21129] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 592.511813][T21134] veth0: entered promiscuous mode [ 592.520090][T21129] netlink: 'syz.4.3602': attribute type 10 has an invalid length. [ 592.570961][T21129] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.589476][T21129] team0: entered promiscuous mode [ 592.603804][T21129] team_slave_0: entered promiscuous mode [ 592.626707][T21129] team_slave_1: entered promiscuous mode [ 592.647770][T21129] team0: entered allmulticast mode [ 592.659366][T21129] team_slave_0: entered allmulticast mode [ 592.666519][T21129] team_slave_1: entered allmulticast mode [ 592.673993][T21129] bond0: (slave team0): Enslaving as an active interface with an up link [ 592.690637][ T9474] tipc: Node number set to 2886997007 [ 592.964630][T19126] net_ratelimit: 19 callbacks suppressed [ 592.964652][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 593.046141][T21153] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 593.076197][T21149] netlink: 'syz.4.3608': attribute type 1 has an invalid length. [ 593.084899][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 593.098766][T21149] netlink: 'syz.4.3608': attribute type 2 has an invalid length. [ 593.188054][T21153] hsr_slave_1 (unregistering): left promiscuous mode [ 593.294376][ T64] bond9: (slave dummy0): failed to get link speed/duplex [ 593.327439][T21133] veth0: left promiscuous mode [ 593.466813][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 593.576134][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 593.692726][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 593.804012][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 593.840296][T21179] __nla_validate_parse: 10 callbacks suppressed [ 593.840317][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3618'. [ 593.908899][T21171] block nbd6: server does not support multiple connections per device. [ 593.920248][T21171] block nbd6: shutting down sockets [ 593.956876][T21180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'. [ 594.025704][ T3359] bond9: (slave dummy0): failed to get link speed/duplex [ 594.131860][ T64] bond9: (slave dummy0): failed to get link speed/duplex [ 594.247166][ T64] bond9: (slave dummy0): failed to get link speed/duplex [ 594.499672][T21175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 594.523955][T21175] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 595.072176][T21175] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 595.085411][T21175] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 595.247369][T21175] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 595.255152][T21175] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 595.302057][T21214] Bluetooth: hci0: unsupported parameter 5135 [ 595.309992][T21214] Bluetooth: hci0: unsupported parameter 8192 [ 595.317071][T21214] Bluetooth: hci0: unsupported parameter 5135 [ 595.357495][T21214] Bluetooth: hci0: unsupported parameter 8192 [ 595.393926][T21175] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 595.401538][T21175] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 595.957718][T21238] SET target dimension over the limit! [ 596.115922][T21216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3624'. [ 596.293379][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3635'. [ 596.302309][T21253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3635'. [ 596.312262][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3635'. [ 596.321169][T21253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3635'. [ 596.521818][T21260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3638'. [ 596.532919][T21260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3638'. [ 596.933442][T21272] syzkaller1: entered promiscuous mode [ 596.938986][T21272] syzkaller1: entered allmulticast mode [ 597.000667][T21279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3643'. [ 597.539894][T21305] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.548513][T21305] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.567573][T21305] wireguard0: entered promiscuous mode [ 597.573085][T21305] wireguard0: entered allmulticast mode [ 597.678816][T21309] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 597.710019][T21309] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 597.974398][T19129] net_ratelimit: 20 callbacks suppressed [ 597.974417][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 598.190039][T21337] netlink: 'syz.4.3661': attribute type 1 has an invalid length. [ 598.315663][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 598.431429][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 598.556507][T21352] openvswitch: netlink: Key type 62 is out of range max 32 [ 598.585152][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 598.670810][ T3359] IPVS: starting estimator thread 0... [ 598.704615][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 598.834623][T14755] bond9: (slave dummy0): failed to get link speed/duplex [ 598.945148][T21362] IPVS: using max 33 ests per chain, 79200 per kthread [ 598.952438][T19126] bond9: (slave dummy0): failed to get link speed/duplex [ 598.998021][T21376] Bluetooth: hci0: unsupported parameter 5135 [ 599.026037][T21376] Bluetooth: hci0: unsupported parameter 8192 [ 599.046434][T21376] Bluetooth: hci0: unsupported parameter 5135 [ 599.056652][T14752] bond9: (slave dummy0): failed to get link speed/duplex [ 599.068676][T21376] Bluetooth: hci0: unsupported parameter 8192 [ 599.167810][T14755] bond9: (slave dummy0): failed to get link speed/duplex [ 599.403509][T21394] batman_adv: batadv0: Adding interface: ip6gretap1 [ 599.410171][T21394] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.435759][T21394] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 599.496671][T21402] __nla_validate_parse: 10 callbacks suppressed [ 599.496693][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3680'. [ 600.114003][T21413] netlink: 'syz.3.3684': attribute type 4 has an invalid length. [ 600.220584][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3685'. [ 602.586252][T21461] sctp: [Deprecated]: syz.0.3690 (pid 21461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.586252][T21461] Use struct sctp_sack_info instead [ 603.005254][T19128] net_ratelimit: 28 callbacks suppressed [ 603.005277][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 603.108305][T21477] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3694'. [ 603.166570][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 603.255502][T21488] Bluetooth: hci0: unsupported parameter 5135 [ 603.261673][T21488] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 603.289203][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 603.400354][ T3359] bond9: (slave dummy0): failed to get link speed/duplex [ 603.411013][T21493] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.3700'. [ 603.420626][T21494] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3697'. [ 603.437943][T21493] smbdirect: ib_dev[syz0] renamed to [syz2] [ 603.513987][T21499] openvswitch: netlink: Message has 8 unknown bytes. [ 603.601519][T21504] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 603.767149][T21504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 603.895227][T21517] syzkaller1: entered promiscuous mode [ 603.910467][T21517] syzkaller1: entered allmulticast mode [ 603.967539][T21520] Bluetooth: MGMT ver 1.23 [ 604.067004][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 604.122225][T21528] Bluetooth: hci0: unsupported parameter 5135 [ 604.130017][T21528] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 604.177272][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 604.231334][T21535] Bluetooth: hci0: unsupported parameter 5135 [ 604.237713][T21535] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 604.317517][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 604.334269][T21539] FAULT_INJECTION: forcing a failure. [ 604.334269][T21539] name failslab, interval 1, probability 0, space 0, times 0 [ 604.346976][T21539] CPU: 0 UID: 0 PID: 21539 Comm: syz.0.3712 Not tainted syzkaller #0 PREEMPT(full) [ 604.347004][T21539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.347015][T21539] Call Trace: [ 604.347025][T21539] [ 604.347041][T21539] dump_stack_lvl+0xe8/0x150 [ 604.347077][T21539] should_fail_ex+0x40c/0x560 [ 604.347107][T21539] should_failslab+0xa8/0x100 [ 604.347166][T21539] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 604.347202][T21539] ? local_lock_release+0x9c/0x160 [ 604.347307][T21539] ? __alloc_skb+0x1d7/0x7a0 [ 604.347329][T21539] ? __alloc_skb+0x1d7/0x7a0 [ 604.347360][T21539] __alloc_skb+0x1d7/0x7a0 [ 604.347389][T21539] hci_mgmt_cmd+0x1c1/0xfc0 [ 604.347469][T21539] ? hci_send_monitor_ctrl_event+0x3b0/0x600 [ 604.347505][T21539] hci_sock_sendmsg+0x6e1/0xf50 [ 604.347535][T21539] ? __pfx_aa_sk_perm+0x10/0x10 [ 604.347617][T21539] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 604.347644][T21539] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.347678][T21539] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 604.347703][T21539] sock_sendmsg_nosec+0x13a/0x180 [ 604.347764][T21539] sock_write_iter+0x2de/0x3e0 [ 604.347799][T21539] ? __pfx_sock_write_iter+0x10/0x10 [ 604.347840][T21539] ? bpf_lsm_file_permission+0x9/0x20 [ 604.347888][T21539] ? security_file_permission+0x75/0x260 [ 604.347970][T21539] vfs_write+0x612/0xba0 [ 604.348011][T21539] ? __pfx_vfs_write+0x10/0x10 [ 604.348060][T21539] ? __fget_files+0x2a/0x420 [ 604.348096][T21539] ksys_write+0x150/0x270 [ 604.348130][T21539] ? __pfx_ksys_write+0x10/0x10 [ 604.348171][T21539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.348195][T21539] do_syscall_64+0x174/0x580 [ 604.348226][T21539] ? trace_irq_disable+0x3b/0x140 [ 604.348271][T21539] ? clear_bhb_loop+0x70/0xc0 [ 604.348298][T21539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.348319][T21539] RIP: 0033:0x7ffbedb9e0d9 [ 604.348339][T21539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.348358][T21539] RSP: 002b:00007ffbeea90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 604.348380][T21539] RAX: ffffffffffffffda RBX: 00007ffbede25fa0 RCX: 00007ffbedb9e0d9 [ 604.348395][T21539] RDX: 0000000000000017 RSI: 0000200000000000 RDI: 0000000000000004 [ 604.348408][T21539] RBP: 00007ffbeea90090 R08: 0000000000000000 R09: 0000000000000000 [ 604.348421][T21539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.348433][T21539] R13: 00007ffbede26038 R14: 00007ffbede25fa0 R15: 00007ffcf294b858 [ 604.348468][T21539] [ 604.348988][T21539] Bluetooth: hci0: unsupported parameter 5135 [ 604.398707][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 604.515776][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 604.691587][T21539] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 604.959286][T21562] netlink: 'syz.0.3719': attribute type 10 has an invalid length. [ 605.035493][T21561] syzkaller0: entered promiscuous mode [ 605.041237][T21561] syzkaller0: entered allmulticast mode [ 605.328184][T21574] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3719'. [ 605.439124][T21577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'. [ 605.498142][T21562] team0 (unregistering): Port device team_slave_0 removed [ 605.525225][T21562] team0 (unregistering): Port device team_slave_1 removed [ 605.602599][ T25] block nbd4: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 210 seconds [ 605.614304][ T25] block nbd4: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 210 seconds [ 605.626068][ T25] block nbd4: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 210 seconds [ 605.637407][ T25] block nbd4: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 210 seconds [ 605.677633][T21562] team0 (unregistering): Port device bond1 removed [ 605.725689][T21561] tipc: Enabled bearer , priority 0 [ 605.949046][T21582] dummy0: entered promiscuous mode [ 605.965592][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 605.978336][T21582] erspan0: entered promiscuous mode [ 606.007374][T21582] debugfs: 'hsr1' already exists in 'hsr' [ 606.014954][T21582] Cannot create hsr debugfs directory [ 606.020842][T21582] hsr1: entered allmulticast mode [ 606.025985][T21582] dummy0: entered allmulticast mode [ 606.041342][T21582] erspan0: entered allmulticast mode [ 606.185188][T21594] Bluetooth: hci0: unsupported parameter 5135 [ 606.191343][T21594] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 606.394421][T21558] tipc: Resetting bearer [ 606.486281][T21558] tipc: Disabling bearer [ 606.726321][T21606] lo speed is unknown, defaulting to 1000 [ 607.115099][T21629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3737'. [ 607.159109][T21621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'. [ 607.205049][T21633] netlink: 'syz.0.3738': attribute type 1 has an invalid length. [ 607.290931][T21633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.518200][T21636] bond2: (slave geneve2): making interface the new active one [ 607.528088][T21636] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 607.736332][T21641] tipc: Started in network mode [ 607.741611][T21641] tipc: Node identity ac14140f, cluster identity 4711 [ 607.749194][T21641] tipc: New replicast peer: 100.1.1.2 [ 607.755302][T21641] tipc: Enabled bearer , priority 10 [ 608.294776][T21663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3745'. [ 608.303950][T21663] nbd: must specify a device to reconfigure [ 608.624857][ T6052] net_ratelimit: 15 callbacks suppressed [ 608.624879][ T6052] bond9: (slave dummy0): failed to get link speed/duplex [ 608.750807][T21673] syzkaller0: entered promiscuous mode [ 608.756347][T21673] syzkaller0: entered allmulticast mode [ 608.769326][ T6698] tipc: Node number set to 2886997007 [ 608.958238][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 609.074626][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 609.095173][T21695] gretap1: entered promiscuous mode [ 609.240914][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 609.352031][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 609.366024][T21701] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 609.434329][T21713] Bluetooth: hci0: unsupported parameter 5135 [ 609.452639][T21713] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 609.464881][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 609.579467][ T6052] bond9: (slave dummy0): failed to get link speed/duplex [ 609.795269][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 609.978725][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 610.131090][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 610.165494][T21729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3762'. [ 610.292927][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 610.357947][T21720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3762'. [ 610.366982][T21720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3762'. [ 610.424934][T21738] syzkaller0: entered promiscuous mode [ 610.430637][T21738] syzkaller0: entered allmulticast mode [ 610.882708][T21742] tcf_pedit_act: 22 callbacks suppressed [ 610.882728][T21742] tc action pedit offset must be on 32 bit boundaries [ 610.924775][T21741] tc action pedit offset must be on 32 bit boundaries [ 610.962746][T21745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3770'. [ 611.199704][T21757] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3773'. [ 611.258763][T21759] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3773'. [ 611.708613][T21777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3779'. [ 611.731523][T21777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3779'. [ 612.084746][T21791] FAULT_INJECTION: forcing a failure. [ 612.084746][T21791] name failslab, interval 1, probability 0, space 0, times 0 [ 612.097612][T21791] CPU: 0 UID: 0 PID: 21791 Comm: syz.4.3786 Not tainted syzkaller #0 PREEMPT(full) [ 612.097655][T21791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.097673][T21791] Call Trace: [ 612.097682][T21791] [ 612.097690][T21791] dump_stack_lvl+0xe8/0x150 [ 612.097735][T21791] should_fail_ex+0x40c/0x560 [ 612.097764][T21791] ? xt_alloc_table_info+0x40/0xb0 [ 612.097879][T21791] should_failslab+0xa8/0x100 [ 612.097912][T21791] __kvmalloc_node_noprof+0x176/0x860 [ 612.097945][T21791] ? xt_alloc_table_info+0x40/0xb0 [ 612.097975][T21791] xt_alloc_table_info+0x40/0xb0 [ 612.098007][T21791] do_arpt_set_ctl+0x9fe/0x10b0 [ 612.098102][T21791] ? __mutex_trylock_common+0x15f/0x270 [ 612.098153][T21791] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 612.098180][T21791] ? rcu_is_watching+0x15/0xb0 [ 612.098220][T21791] ? trace_contention_end+0x3d/0x140 [ 612.098257][T21791] ? __mutex_unlock_slowpath+0x731/0x900 [ 612.098293][T21791] ? aa_sk_perm+0x6d5/0x900 [ 612.098326][T21791] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 612.098369][T21791] ? __pfx_aa_sk_perm+0x10/0x10 [ 612.098405][T21791] nf_setsockopt+0x26f/0x290 [ 612.098460][T21791] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 612.098486][T21791] do_sock_setsockopt+0x17c/0x1b0 [ 612.098516][T21791] __x64_sys_setsockopt+0x13d/0x1b0 [ 612.098544][T21791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.098568][T21791] do_syscall_64+0x174/0x580 [ 612.098597][T21791] ? trace_irq_disable+0x3b/0x140 [ 612.098623][T21791] ? clear_bhb_loop+0x70/0xc0 [ 612.098648][T21791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.098669][T21791] RIP: 0033:0x7f3acc19e0d9 [ 612.098688][T21791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.098706][T21791] RSP: 002b:00007f3acd0de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 612.098728][T21791] RAX: ffffffffffffffda RBX: 00007f3acc425fa0 RCX: 00007f3acc19e0d9 [ 612.098743][T21791] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 612.098754][T21791] RBP: 00007f3acd0de090 R08: 00000000000003f8 R09: 0000000000000000 [ 612.098766][T21791] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 612.098778][T21791] R13: 00007f3acc426038 R14: 00007f3acc425fa0 R15: 00007ffffa276f48 [ 612.098811][T21791] [ 612.532106][T21797] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3788'. [ 612.638688][T21796] netlink: 'syz.4.3788': attribute type 3 has an invalid length. [ 613.658080][T21843] x_tables: duplicate underflow at hook 1 [ 613.729868][T21846] netlink: 'syz.2.3804': attribute type 32 has an invalid length. [ 613.739124][T14754] net_ratelimit: 21 callbacks suppressed [ 613.739144][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 613.758485][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3803'. [ 613.768385][T21843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3803'. [ 613.824785][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 613.936397][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 613.964224][T21851] xt_hl: Unknown Hop Limit match mode: 4 [ 614.050957][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 614.059605][T21856] FAULT_INJECTION: forcing a failure. [ 614.059605][T21856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.072694][T21856] CPU: 0 UID: 0 PID: 21856 Comm: syz.0.3809 Not tainted syzkaller #0 PREEMPT(full) [ 614.072729][T21856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.072742][T21856] Call Trace: [ 614.072750][T21856] [ 614.072759][T21856] dump_stack_lvl+0xe8/0x150 [ 614.072794][T21856] should_fail_ex+0x40c/0x560 [ 614.072826][T21856] _copy_from_user+0x2d/0xb0 [ 614.072858][T21856] ___sys_sendmsg+0x1c6/0x360 [ 614.072885][T21856] ? __lock_acquire+0x683/0x2cf0 [ 614.072917][T21856] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.072950][T21856] ? kstrtouint+0x6e/0xe0 [ 614.073079][T21856] ? __fget_files+0x2a/0x420 [ 614.073108][T21856] ? __fget_files+0x3a2/0x420 [ 614.073145][T21856] __sys_sendmmsg+0x273/0x4d0 [ 614.073179][T21856] ? __pfx___sys_sendmmsg+0x10/0x10 [ 614.073215][T21856] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 614.073262][T21856] ? ksys_write+0x242/0x270 [ 614.073296][T21856] ? __pfx_ksys_write+0x10/0x10 [ 614.073332][T21856] __x64_sys_sendmmsg+0xa0/0xc0 [ 614.073368][T21856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.073390][T21856] do_syscall_64+0x174/0x580 [ 614.073419][T21856] ? trace_irq_disable+0x3b/0x140 [ 614.073444][T21856] ? clear_bhb_loop+0x70/0xc0 [ 614.073470][T21856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.073497][T21856] RIP: 0033:0x7ffbedb9e0d9 [ 614.073517][T21856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.073535][T21856] RSP: 002b:00007ffbeea90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 614.073557][T21856] RAX: ffffffffffffffda RBX: 00007ffbede25fa0 RCX: 00007ffbedb9e0d9 [ 614.073572][T21856] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000003 [ 614.073585][T21856] RBP: 00007ffbeea90090 R08: 0000000000000000 R09: 0000000000000000 [ 614.073598][T21856] R10: 0000000000008015 R11: 0000000000000246 R12: 0000000000000001 [ 614.073610][T21856] R13: 00007ffbede26038 R14: 00007ffbede25fa0 R15: 00007ffcf294b858 [ 614.073644][T21856] [ 614.344651][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 614.455994][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 614.560466][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 614.680583][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 614.731269][T21878] Bluetooth: hci0: unsupported parameter 5135 [ 614.737393][T21878] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 614.781903][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 614.903140][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 615.797498][T21927] __nla_validate_parse: 4 callbacks suppressed [ 615.797518][T21927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3828'. [ 615.843730][T21929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3831'. [ 615.853222][T21927] syzkaller0: entered promiscuous mode [ 615.871575][T21927] syzkaller0: entered allmulticast mode [ 615.929403][T21927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3828'. [ 616.163518][T21949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3836'. [ 616.174427][T21949] Bluetooth: hci0: unsupported parameter 5135 [ 616.180702][T21949] Bluetooth: hci0: unsupported parameter 8192 [ 616.186824][T21949] Bluetooth: hci0: unsupported parameter 5135 [ 616.193037][T21949] Bluetooth: hci0: unsupported parameter 8192 [ 616.273708][T21953] FAULT_INJECTION: forcing a failure. [ 616.273708][T21953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.286832][T21953] CPU: 0 UID: 0 PID: 21953 Comm: syz.4.3838 Not tainted syzkaller #0 PREEMPT(full) [ 616.286865][T21953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.286879][T21953] Call Trace: [ 616.286889][T21953] [ 616.286899][T21953] dump_stack_lvl+0xe8/0x150 [ 616.286939][T21953] should_fail_ex+0x40c/0x560 [ 616.286973][T21953] _copy_from_user+0x2d/0xb0 [ 616.287016][T21953] do_arpt_set_ctl+0x7cb/0x10b0 [ 616.287062][T21953] ? __mutex_trylock_common+0x15f/0x270 [ 616.287102][T21953] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 616.287134][T21953] ? rcu_is_watching+0x15/0xb0 [ 616.287169][T21953] ? trace_contention_end+0x3d/0x140 [ 616.287213][T21953] ? __mutex_unlock_slowpath+0x731/0x900 [ 616.287250][T21953] ? aa_sk_perm+0x6d5/0x900 [ 616.287288][T21953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 616.287328][T21953] ? __pfx_aa_sk_perm+0x10/0x10 [ 616.287374][T21953] nf_setsockopt+0x26f/0x290 [ 616.287408][T21953] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 616.287435][T21953] do_sock_setsockopt+0x17c/0x1b0 [ 616.287470][T21953] __x64_sys_setsockopt+0x13d/0x1b0 [ 616.287502][T21953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.287528][T21953] do_syscall_64+0x174/0x580 [ 616.287561][T21953] ? trace_irq_disable+0x3b/0x140 [ 616.287590][T21953] ? clear_bhb_loop+0x70/0xc0 [ 616.287618][T21953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.287641][T21953] RIP: 0033:0x7f3acc19e0d9 [ 616.287663][T21953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.287683][T21953] RSP: 002b:00007f3acd0de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 616.287707][T21953] RAX: ffffffffffffffda RBX: 00007f3acc425fa0 RCX: 00007f3acc19e0d9 [ 616.287724][T21953] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 616.287738][T21953] RBP: 00007f3acd0de090 R08: 00000000000003f8 R09: 0000000000000000 [ 616.287753][T21953] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 616.287767][T21953] R13: 00007f3acc426038 R14: 00007f3acc425fa0 R15: 00007ffffa276f48 [ 616.287804][T21953] [ 616.772713][T21962] Bluetooth: hci0: unsupported parameter 5135 [ 616.800885][T21962] Bluetooth: hci0: unsupported parameter 8192 [ 616.807059][T21962] Bluetooth: hci0: unsupported parameter 5135 [ 616.813167][T21962] Bluetooth: hci0: unsupported parameter 8192 [ 617.076829][T21977] netlink: 'syz.4.3846': attribute type 9 has an invalid length. [ 617.084737][T21977] netlink: 'syz.4.3846': attribute type 6 has an invalid length. [ 617.092529][T21977] netlink: 'syz.4.3846': attribute type 7 has an invalid length. [ 617.100290][T21977] netlink: 'syz.4.3846': attribute type 8 has an invalid length. [ 617.546849][T22000] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3852'. [ 617.707983][T22010] FAULT_INJECTION: forcing a failure. [ 617.707983][T22010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.721159][T22010] CPU: 0 UID: 0 PID: 22010 Comm: syz.3.3857 Not tainted syzkaller #0 PREEMPT(full) [ 617.721188][T22010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 617.721200][T22010] Call Trace: [ 617.721208][T22010] [ 617.721216][T22010] dump_stack_lvl+0xe8/0x150 [ 617.721252][T22010] should_fail_ex+0x40c/0x560 [ 617.721281][T22010] _copy_from_user+0x2d/0xb0 [ 617.721313][T22010] copy_from_sockptr_offset+0x66/0xa0 [ 617.721343][T22010] do_arpt_set_ctl+0xa2b/0x10b0 [ 617.721376][T22010] ? __mutex_trylock_common+0x15f/0x270 [ 617.721412][T22010] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 617.721439][T22010] ? rcu_is_watching+0x15/0xb0 [ 617.721470][T22010] ? trace_contention_end+0x3d/0x140 [ 617.721507][T22010] ? __mutex_unlock_slowpath+0x731/0x900 [ 617.721541][T22010] ? aa_sk_perm+0x6d5/0x900 [ 617.721582][T22010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.721618][T22010] ? __pfx_aa_sk_perm+0x10/0x10 [ 617.721654][T22010] nf_setsockopt+0x26f/0x290 [ 617.721679][T22010] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 617.721703][T22010] do_sock_setsockopt+0x17c/0x1b0 [ 617.721733][T22010] __x64_sys_setsockopt+0x13d/0x1b0 [ 617.721762][T22010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.721786][T22010] do_syscall_64+0x174/0x580 [ 617.721817][T22010] ? trace_irq_disable+0x3b/0x140 [ 617.721842][T22010] ? clear_bhb_loop+0x70/0xc0 [ 617.721874][T22010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.721895][T22010] RIP: 0033:0x7f92bad9e0d9 [ 617.721915][T22010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.721933][T22010] RSP: 002b:00007f92bbca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 617.721954][T22010] RAX: ffffffffffffffda RBX: 00007f92bb025fa0 RCX: 00007f92bad9e0d9 [ 617.721970][T22010] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 617.721982][T22010] RBP: 00007f92bbca8090 R08: 00000000000003f8 R09: 0000000000000000 [ 617.721995][T22010] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 617.722007][T22010] R13: 00007f92bb026038 R14: 00007f92bb025fa0 R15: 00007fffd3a0b988 [ 617.722041][T22010] [ 618.256547][T22018] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.264478][T22018] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.393447][T22032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3864'. [ 618.688169][T22037] Bluetooth: hci0: unsupported parameter 5135 [ 618.694323][T22037] Bluetooth: hci0: unsupported parameter 8192 [ 618.700431][T22037] Bluetooth: hci0: unsupported parameter 5135 [ 618.706550][T22037] Bluetooth: hci0: unsupported parameter 8192 [ 618.719951][T22040] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3866'. [ 618.736943][T22041] netlink: 'syz.4.3864': attribute type 2 has an invalid length. [ 618.756999][T22041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 618.909434][T14754] net_ratelimit: 20 callbacks suppressed [ 618.909455][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 618.951483][T22046] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 619.020937][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 619.067480][ T30] audit: type=1804 audit(1787155158.142:14): pid=22052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3871" name="/newroot/61/cgroup.controllers" dev="tmpfs" ino=364 res=1 errno=0 [ 619.096212][ T30] audit: type=1800 audit(1787155158.192:15): pid=22052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3871" name="cgroup.controllers" dev="tmpfs" ino=364 res=0 errno=0 [ 619.148694][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 619.252407][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 619.365309][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 619.485716][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 619.586539][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 619.794391][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 619.908651][T22075] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3878'. [ 619.960820][T22073] syzkaller0: entered promiscuous mode [ 619.966373][T22073] syzkaller0: entered allmulticast mode [ 620.021045][T22078] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 620.054586][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 620.257080][T22078] netlink: 'syz.3.3879': attribute type 13 has an invalid length. [ 620.351125][T22087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3881'. [ 623.697818][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3880'. [ 623.959811][T22100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3884'. [ 623.968845][T22100] netlink: 'syz.4.3884': attribute type 4 has an invalid length. [ 623.976609][T22100] netlink: 'syz.4.3884': attribute type 1 has an invalid length. [ 624.000880][T22105] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 624.031809][T19124] net_ratelimit: 2 callbacks suppressed [ 624.031831][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 624.059513][T22107] Bluetooth: hci0: unsupported parameter 5135 [ 624.094681][T22107] Bluetooth: hci0: unsupported parameter 8192 [ 624.114741][T22107] Bluetooth: hci0: unsupported parameter 5135 [ 624.120889][T22107] Bluetooth: hci0: unsupported parameter 8192 [ 624.165907][T22110] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3889'. [ 624.195048][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 624.217585][T22115] Bluetooth: hci0: unsupported parameter 5135 [ 624.238398][T22115] Bluetooth: hci0: unsupported parameter 8192 [ 624.252415][T22115] Bluetooth: hci0: unsupported parameter 5135 [ 624.285666][T22115] Bluetooth: hci0: unsupported parameter 8192 [ 624.308391][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 624.325728][T22117] x_tables: duplicate underflow at hook 1 [ 624.391841][T22119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3894'. [ 624.475148][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 624.534994][T22127] bridge4: entered promiscuous mode [ 624.541644][T22127] bridge4: entered allmulticast mode [ 624.551458][T22127] team0: Port device bridge4 added [ 624.557048][T22125] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3895'. [ 624.614757][T22131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3898'. [ 624.623861][T22131] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 624.712541][T22135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3898'. [ 624.717090][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 624.827406][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 624.934897][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 625.000744][T22147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3903'. [ 625.156463][T22142] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3902'. [ 625.199230][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 625.353852][T22157] Bluetooth: hci0: invalid len left 17, exp >= 20 [ 625.375894][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 625.613813][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3909'. [ 625.635206][T19129] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.644305][T19129] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.653092][T19129] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.661868][T19129] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.780539][T22169] netlink: 'syz.2.3911': attribute type 1 has an invalid length. [ 626.204524][T22192] Bluetooth: hci0: unsupported parameter 5135 [ 626.216241][T22192] Bluetooth: hci0: unsupported parameter 4369 [ 626.222393][T22192] Bluetooth: hci0: unsupported parameter 8192 [ 626.228580][T22192] Bluetooth: hci0: unsupported parameter 5135 [ 626.234704][T22192] Bluetooth: hci0: unsupported parameter 4369 [ 626.240809][T22192] Bluetooth: hci0: unsupported parameter 8192 [ 626.458667][T22206] x_tables: duplicate underflow at hook 3 [ 626.471912][T22208] Bluetooth: hci0: unsupported parameter 5135 [ 626.483884][T22208] Bluetooth: hci0: unsupported parameter 8192 [ 626.494583][T22208] Bluetooth: hci0: unsupported parameter 5135 [ 626.501262][T22208] Bluetooth: hci0: unsupported parameter 8192 [ 626.616203][T22214] xt_cgroup: invalid path, errno=-2 [ 626.813424][T22219] Bluetooth: hci0: unsupported parameter 5135 [ 626.825830][T22219] Bluetooth: hci0: unsupported parameter 8192 [ 626.832588][T22219] Bluetooth: hci0: unsupported parameter 5135 [ 626.859595][T22219] Bluetooth: hci0: unsupported parameter 8192 [ 627.023523][T22232] Bluetooth: hci0: unsupported parameter 5135 [ 627.029685][T22232] Bluetooth: hci0: unsupported parameter 8192 [ 627.063660][T22232] Bluetooth: hci0: unsupported parameter 5135 [ 627.069827][T22232] Bluetooth: hci0: unsupported parameter 8192 [ 627.217307][T22240] Bluetooth: hci0: unsupported parameter 5135 [ 627.245490][T22240] Bluetooth: hci0: unsupported parameter 8192 [ 627.261482][T22240] Bluetooth: hci0: unsupported parameter 5135 [ 627.278617][T22240] Bluetooth: hci0: unsupported parameter 8192 [ 627.430073][T22247] erspan0: entered promiscuous mode [ 627.534781][T22254] Bluetooth: hci0: unsupported parameter 5135 [ 627.541028][T22254] Bluetooth: hci0: unsupported parameter 8192 [ 627.547160][T22254] Bluetooth: hci0: unsupported parameter 5135 [ 627.553273][T22254] Bluetooth: hci0: unsupported parameter 8192 [ 627.765129][T22267] Bluetooth: hci0: unsupported parameter 5135 [ 627.771286][T22267] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 627.827027][T22269] Bluetooth: hci0: unsupported parameter 5135 [ 627.833234][T22269] Bluetooth: hci0: unsupported parameter 8192 [ 627.879854][T22269] Bluetooth: hci0: unsupported parameter 5135 [ 627.886011][T22269] Bluetooth: hci0: unsupported parameter 8192 [ 628.053794][T22280] Bluetooth: hci0: unsupported parameter 5135 [ 628.125868][T22280] Bluetooth: hci0: unsupported parameter 8192 [ 628.148983][T22280] Bluetooth: hci0: unsupported parameter 5135 [ 628.176788][T22280] Bluetooth: hci0: unsupported parameter 8192 [ 628.446797][T22296] Bluetooth: hci0: unsupported parameter 5135 [ 628.453169][T22296] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 628.486663][T22291] ip6gretap0: entered promiscuous mode [ 628.494907][T22291] macvtap1: entered promiscuous mode [ 628.500533][T22291] macvtap1: entered allmulticast mode [ 628.506064][T22291] ip6gretap0: entered allmulticast mode [ 628.546606][T22291] ip6gretap0: left allmulticast mode [ 628.557454][T22291] ip6gretap0: left promiscuous mode [ 628.645081][T22300] bond3: option lacp_rate: invalid value (3) [ 628.669147][T22300] bond3 (unregistering): Released all slaves [ 629.084392][T14748] net_ratelimit: 26 callbacks suppressed [ 629.084414][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 629.192660][T22329] Bluetooth: hci0: unsupported parameter 5135 [ 629.213987][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 629.244530][T22329] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 629.271355][T22333] Bluetooth: hci0: unsupported parameter 5135 [ 629.277508][T22333] Bluetooth: hci0: unsupported parameter 8192 [ 629.283623][T22333] Bluetooth: hci0: unsupported parameter 5135 [ 629.308311][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 629.324128][T22333] Bluetooth: hci0: unsupported parameter 8192 [ 629.418936][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 629.452571][T22336] Bluetooth: hci0: unsupported parameter 5135 [ 629.470395][T22336] Bluetooth: hci0: unsupported parameter 8192 [ 629.488979][T22336] Bluetooth: hci0: unsupported parameter 5135 [ 629.516601][T22336] Bluetooth: hci0: unsupported parameter 8192 [ 629.540213][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 629.657248][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 629.685968][T22343] netlink: 'syz.1.3971': attribute type 4 has an invalid length. [ 629.703124][T22343] __nla_validate_parse: 8 callbacks suppressed [ 629.703144][T22343] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3971'. [ 629.867060][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 629.954042][T22348] netlink: 'syz.3.3972': attribute type 2 has an invalid length. [ 629.985406][T22348] : entered promiscuous mode [ 630.137716][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 630.213888][ T6055] tipc: Subscription rejected, illegal request [ 630.231344][T22357] Bluetooth: hci0: unsupported parameter 5135 [ 630.245507][T22357] Bluetooth: hci0: unsupported parameter 8192 [ 630.253800][T22357] Bluetooth: hci0: unsupported parameter 5135 [ 630.264225][T22357] Bluetooth: hci0: unsupported parameter 8192 [ 630.272929][T22360] Bluetooth: hci0: unsupported parameter 5135 [ 630.279841][T22360] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 630.288017][T22362] Bluetooth: hci0: unsupported parameter 5135 [ 630.295984][T22362] Bluetooth: hci0: unsupported parameter 8192 [ 630.309327][T22362] Bluetooth: hci0: unsupported parameter 5135 [ 630.321970][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 630.336643][T22362] Bluetooth: hci0: unsupported parameter 8192 [ 630.437244][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 630.638754][T22386] syzkaller1: entered promiscuous mode [ 630.670259][T22386] syzkaller1: entered allmulticast mode [ 630.770357][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3985'. [ 630.893868][T22395] Bluetooth: hci0: unsupported parameter 5135 [ 630.903955][T22395] Bluetooth: hci0: unsupported parameter 8192 [ 630.921740][T22395] Bluetooth: hci0: unsupported parameter 5135 [ 630.947653][T22395] Bluetooth: hci0: unsupported parameter 8192 [ 631.186851][T22389] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.599956][T22414] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 631.857152][T22418] Bluetooth: hci0: unsupported parameter 5135 [ 631.873775][T22418] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 632.481421][T22453] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20000 [ 632.594457][T22461] Bluetooth: hci0: unsupported parameter 5135 [ 632.600611][T22461] Bluetooth: hci0: unsupported parameter 8192 [ 632.606730][T22461] Bluetooth: hci0: unsupported parameter 5135 [ 632.612851][T22461] Bluetooth: hci0: unsupported parameter 8192 [ 632.851033][T22475] Bluetooth: hci0: unsupported parameter 5135 [ 632.857222][T22475] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 633.151902][T22486] Bluetooth: hci0: unsupported parameter 5135 [ 633.170523][T22486] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 633.265775][T22490] team0: No ports can be present during mode change [ 633.279208][T22490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4008'. [ 633.377083][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4010'. [ 633.548101][T22503] Bluetooth: hci0: unsupported parameter 5135 [ 633.561556][ T5270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 633.567759][T22503] Bluetooth: hci0: unsupported parameter 4379 [ 633.585576][T22503] Bluetooth: hci0: unsupported parameter 8192 [ 633.597768][T22503] Bluetooth: hci0: unsupported parameter 5135 [ 633.603916][T22503] Bluetooth: hci0: unsupported parameter 4379 [ 633.612324][T22503] Bluetooth: hci0: unsupported parameter 8192 [ 633.621257][T22506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4013'. [ 633.737130][T22508] syzkaller0: entered promiscuous mode [ 633.742685][T22508] syzkaller0: entered allmulticast mode [ 633.759281][T22508] tipc: Started in network mode [ 633.764225][T22508] tipc: Node identity 22cdb0aa06c4, cluster identity 4711 [ 633.772423][T22510] netlink: 'syz.4.4014': attribute type 1 has an invalid length. [ 633.816776][T22508] tipc: Enabled bearer , priority 0 [ 633.897060][T22515] bond3: (slave geneve1): making interface the new active one [ 633.930329][T22515] bond3: (slave geneve1): Enslaving as an active interface with an up link [ 633.944339][T22508] tipc: Resetting bearer [ 634.048947][T22507] tipc: Resetting bearer [ 634.093480][T22507] tipc: Disabling bearer [ 634.151836][T22520] Bluetooth: hci0: unsupported parameter 5135 [ 634.157999][T22520] Bluetooth: hci0: unsupported parameter 8192 [ 634.164118][T22520] Bluetooth: hci0: unsupported parameter 5135 [ 634.169092][T19124] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 634.185333][T22520] Bluetooth: hci0: unsupported parameter 8192 [ 634.186102][T19124] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 634.201334][T19124] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 634.210991][T19124] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 634.227045][T19124] net_ratelimit: 26 callbacks suppressed [ 634.227065][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 634.349665][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 634.372395][T22536] netlink: 'syz.0.4023': attribute type 5 has an invalid length. [ 634.382558][T22536] x_tables: duplicate underflow at hook 1 [ 634.537530][T22543] Bluetooth: hci0: unsupported parameter 5135 [ 634.543788][T22543] Bluetooth: hci0: unsupported parameter 8192 [ 634.551736][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 634.559926][T22543] Bluetooth: hci0: unsupported parameter 5135 [ 634.571334][T22543] Bluetooth: hci0: unsupported parameter 8192 [ 634.687933][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 634.838417][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 634.985656][T22557] Bluetooth: hci0: unsupported parameter 5135 [ 634.992964][T22557] Bluetooth: hci0: unsupported parameter 8192 [ 634.999845][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 635.008228][T22557] Bluetooth: hci0: unsupported parameter 5135 [ 635.014738][T22557] Bluetooth: hci0: unsupported parameter 8192 [ 635.134636][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 635.182484][T22564] xt_CT: No such helper "snmp_trap" [ 635.263507][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 635.280723][T22573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4036'. [ 635.382774][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 635.510079][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 635.628912][T22581] Bluetooth: hci0: unsupported parameter 5135 [ 635.636319][T22581] Bluetooth: hci0: unsupported parameter 8192 [ 635.642540][T22581] Bluetooth: hci0: unsupported parameter 5135 [ 635.649560][T22581] Bluetooth: hci0: unsupported parameter 8192 [ 635.731759][T22583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4039'. [ 636.094186][ T25] block nbd4: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 240 seconds [ 636.105281][ T25] block nbd4: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 240 seconds [ 636.116839][ T25] block nbd4: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 240 seconds [ 636.128062][ T25] block nbd4: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 240 seconds [ 636.197119][T22594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4043'. [ 636.269418][T22600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4044'. [ 636.273275][T22594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4043'. [ 636.322212][T22594] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4043'. [ 636.568707][T22612] Bluetooth: hci0: unsupported parameter 5135 [ 636.581677][T22612] Bluetooth: hci0: unsupported parameter 8192 [ 636.600523][T22612] Bluetooth: hci0: unsupported parameter 5135 [ 636.608482][T22615] veth0_macvtap: Caught tx_queue_len zero misconfig [ 636.615262][T22612] Bluetooth: hci0: unsupported parameter 8192 [ 636.892693][T22619] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4051'. [ 636.907265][T22623] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 636.940967][T22622] can: request_module (can-proto-3) failed. [ 637.171861][T22635] Unknown options in mask 6 [ 637.175272][T22633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.332799][T22636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4056'. [ 637.414794][T22636] veth1_macvtap: left promiscuous mode [ 637.497405][T22640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4058'. [ 637.506586][T22640] block nbd6: Unsupported socket: should be TCP or UNIX. [ 637.634448][T22643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4058'. [ 637.649926][T22639] syzkaller0: entered promiscuous mode [ 637.699732][T22639] syzkaller0: entered allmulticast mode [ 638.005688][T22658] lo: Caught tx_queue_len zero misconfig [ 638.039633][T22658] bridge0: Caught tx_queue_len zero misconfig [ 638.087185][T22662] "syz.2.4064" (22662) uses obsolete ecb(arc4) skcipher [ 638.401668][T22670] netlink: 'syz.3.4066': attribute type 1 has an invalid length. [ 638.401668][T22669] netlink: 'syz.3.4066': attribute type 1 has an invalid length. [ 638.499367][T22669] bond1: entered promiscuous mode [ 638.522147][T22669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 639.002065][T22688] Bluetooth: hci0: unsupported parameter 5135 [ 639.008229][T22688] Bluetooth: hci0: unsupported parameter 8192 [ 639.014332][T22688] Bluetooth: hci0: unsupported parameter 5135 [ 639.020435][T22688] Bluetooth: hci0: unsupported parameter 8192 [ 639.051012][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056de2000: rx timeout, send abort [ 639.190168][T22692] Bluetooth: hci0: unsupported parameter 5135 [ 639.196324][T22692] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 639.274018][T14748] net_ratelimit: 23 callbacks suppressed [ 639.274036][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 639.389757][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 639.504787][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 639.608787][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056de2000: abort rx timeout. Force session deactivation [ 639.610544][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 639.729677][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 639.845097][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 639.950270][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 640.063374][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 640.125710][T22717] batman_adv: batadv0: Adding interface: macvtap1 [ 640.147456][T22717] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.236301][T22717] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 640.284947][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 640.545016][T22738] __nla_validate_parse: 3 callbacks suppressed [ 640.545035][T22738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4085'. [ 640.635257][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 640.942735][T22751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4091'. [ 641.010359][T22760] Bluetooth: hci0: unsupported parameter 5135 [ 641.016638][T22760] Bluetooth: hci0: unsupported parameter 8192 [ 641.022748][T22760] Bluetooth: hci0: unsupported parameter 5135 [ 641.028858][T22760] Bluetooth: hci0: unsupported parameter 8192 [ 641.048097][T22751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4091'. [ 641.207397][T22771] "syz.4.4095" (22771) uses obsolete ecb(arc4) skcipher [ 641.288463][T22767] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.319871][T22767] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.371693][T22775] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 641.385728][T22777] syzkaller0: entered promiscuous mode [ 641.391268][T22777] syzkaller0: entered allmulticast mode [ 641.403927][T22775] tipc: Started in network mode [ 641.439465][T22775] tipc: Node identity 7f000001, cluster identity 4711 [ 641.446685][T22775] tipc: New replicast peer: 127.0.0.2 [ 641.453873][T22775] tipc: Enabled bearer , priority 10 [ 641.519129][T22767] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.543329][T22767] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.820986][T22767] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.860221][T22767] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.928366][T22791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4100'. [ 642.053603][T22767] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.079573][T22767] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.148908][T22796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4100'. [ 642.157846][T22796] netlink: 'syz.0.4100': attribute type 1 has an invalid length. [ 642.172335][T22799] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 642.328159][T19129] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.337532][T19129] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.454236][T14748] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.462570][T14748] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.475301][T14748] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.483581][T14748] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.494390][T14748] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.502618][T14748] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.563119][ T5719] tipc: Node number set to 2130706433 [ 642.943586][T22814] Bluetooth: hci0: unsupported parameter 5135 [ 642.949747][T22814] Bluetooth: hci0: unsupported parameter 8192 [ 642.955889][T22814] Bluetooth: hci0: unsupported parameter 5135 [ 642.962021][T22814] Bluetooth: hci0: unsupported parameter 8192 [ 643.297118][T22834] Bluetooth: hci0: unsupported parameter 5135 [ 643.306093][T22834] Bluetooth: hci0: unsupported parameter 8192 [ 643.312409][T22834] Bluetooth: hci0: unsupported parameter 5135 [ 643.331701][T22828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4114'. [ 643.386749][T22834] Bluetooth: hci0: unsupported parameter 8192 [ 643.845047][T22857] Bluetooth: hci0: unsupported parameter 5135 [ 643.851209][T22857] Bluetooth: hci0: unsupported parameter 8192 [ 643.857323][T22857] Bluetooth: hci0: unsupported parameter 5135 [ 643.863889][T22857] Bluetooth: hci0: unsupported parameter 8192 [ 643.943631][T22860] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4121'. [ 644.359618][ T6057] net_ratelimit: 19 callbacks suppressed [ 644.359639][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 644.505904][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 644.672672][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 644.685166][T22906] netlink: 'syz.4.4130': attribute type 23 has an invalid length. [ 644.972685][T22923] netlink: 'syz.2.4143': attribute type 1 has an invalid length. [ 645.083177][T22923] bond4: option mode: invalid value (7) [ 645.090027][T22931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4144'. [ 645.100736][T22923] bond4 (unregistering): Released all slaves [ 645.226357][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 645.341299][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 645.377783][T22940] Bluetooth: hci0: unsupported parameter 5135 [ 645.388551][T22940] Bluetooth: hci0: unsupported parameter 8192 [ 645.415081][T22940] Bluetooth: hci0: unsupported parameter 5135 [ 645.421224][T22940] Bluetooth: hci0: unsupported parameter 8192 [ 645.477044][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 645.494166][T22923] netlink: 'syz.2.4143': attribute type 1 has an invalid length. [ 645.547231][T22943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4148'. [ 645.622386][T22923] bond4: option mode: invalid value (7) [ 645.657756][T22923] bond4 (unregistering): Released all slaves [ 645.765719][T22947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4149'. [ 645.899787][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 645.941857][T22955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4152'. [ 646.041253][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 646.250567][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 646.275259][T22967] ip_tables: iptables: counters copy to user failed while replacing table [ 646.285175][T22969] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 646.347044][T22967] ip6gretap0: entered promiscuous mode [ 646.471859][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 646.497515][T22975] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4156'. [ 646.588232][T22981] Bluetooth: hci0: unsupported parameter 5135 [ 646.606552][T22981] Bluetooth: hci0: unsupported parameter 8192 [ 646.622697][T22981] Bluetooth: hci0: unsupported parameter 5135 [ 646.642329][T22981] Bluetooth: hci0: unsupported parameter 8192 [ 646.783978][T22988] x_tables: duplicate underflow at hook 1 [ 646.956758][T22999] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4165'. [ 646.975519][T22999] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4165'. [ 647.545671][T23024] sit1: entered promiscuous mode [ 647.786739][T22992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 647.795679][T22998] netlink: 'syz.4.4161': attribute type 1 has an invalid length. [ 647.803548][T22998] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4161'. [ 647.847749][T23020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.988758][T23033] Bluetooth: hci0: unsupported parameter 5135 [ 648.010563][T23033] Bluetooth: hci0: unsupported parameter 8192 [ 648.016711][T23033] Bluetooth: hci0: unsupported parameter 5135 [ 648.022822][T23033] Bluetooth: hci0: unsupported parameter 8192 [ 648.178868][T23040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4177'. [ 648.202402][T23040] netlink: 'syz.3.4177': attribute type 11 has an invalid length. [ 648.248815][T23040] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4177'. [ 648.517964][T23060] netlink: 'syz.2.4182': attribute type 10 has an invalid length. [ 649.063043][T23082] netlink: 'syz.0.4188': attribute type 8 has an invalid length. [ 649.351975][T14748] net_ratelimit: 18 callbacks suppressed [ 649.352005][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 649.467227][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 649.517106][T23093] FAULT_INJECTION: forcing a failure. [ 649.517106][T23093] name failslab, interval 1, probability 0, space 0, times 0 [ 649.529866][T23093] CPU: 0 UID: 0 PID: 23093 Comm: syz.1.4193 Not tainted syzkaller #0 PREEMPT(full) [ 649.529895][T23093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.529907][T23093] Call Trace: [ 649.529916][T23093] [ 649.529924][T23093] dump_stack_lvl+0xe8/0x150 [ 649.529960][T23093] should_fail_ex+0x40c/0x560 [ 649.529997][T23093] should_failslab+0xa8/0x100 [ 649.530028][T23093] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 649.530053][T23093] ? local_lock_release+0x9c/0x160 [ 649.530078][T23093] ? __alloc_skb+0x1d7/0x7a0 [ 649.530099][T23093] ? __alloc_skb+0x1d7/0x7a0 [ 649.530128][T23093] __alloc_skb+0x1d7/0x7a0 [ 649.530156][T23093] alloc_skb_with_frags+0xc6/0x760 [ 649.530272][T23093] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 649.530309][T23093] sock_alloc_send_pskb+0x878/0x990 [ 649.530358][T23093] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 649.530399][T23093] ? aa_sk_perm+0x6d5/0x900 [ 649.530432][T23093] hci_sock_sendmsg+0x208/0xf50 [ 649.530465][T23093] ? __pfx_aa_sk_perm+0x10/0x10 [ 649.530495][T23093] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 649.530522][T23093] ? aa_sock_msg_perm+0xf1/0x1b0 [ 649.530549][T23093] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 649.530574][T23093] sock_sendmsg_nosec+0x13a/0x180 [ 649.530610][T23093] sock_write_iter+0x2de/0x3e0 [ 649.530643][T23093] ? __pfx_sock_write_iter+0x10/0x10 [ 649.530681][T23093] ? bpf_lsm_file_permission+0x9/0x20 [ 649.530705][T23093] ? security_file_permission+0x75/0x260 [ 649.530742][T23093] vfs_write+0x612/0xba0 [ 649.530782][T23093] ? __pfx_vfs_write+0x10/0x10 [ 649.530824][T23093] ? __fget_files+0x2a/0x420 [ 649.530861][T23093] ksys_write+0x150/0x270 [ 649.530895][T23093] ? __pfx_ksys_write+0x10/0x10 [ 649.530935][T23093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.530959][T23093] do_syscall_64+0x174/0x580 [ 649.530997][T23093] ? trace_irq_disable+0x3b/0x140 [ 649.531023][T23093] ? clear_bhb_loop+0x70/0xc0 [ 649.531049][T23093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.531070][T23093] RIP: 0033:0x7f8d1039e0d9 [ 649.531090][T23093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.531108][T23093] RSP: 002b:00007f8d112ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 649.531130][T23093] RAX: ffffffffffffffda RBX: 00007f8d10625fa0 RCX: 00007f8d1039e0d9 [ 649.531145][T23093] RDX: 0000000000000017 RSI: 0000200000000000 RDI: 0000000000000004 [ 649.531159][T23093] RBP: 00007f8d112ae090 R08: 0000000000000000 R09: 0000000000000000 [ 649.531172][T23093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.531184][T23093] R13: 00007f8d10626038 R14: 00007f8d10625fa0 R15: 00007fff7a369688 [ 649.531217][T23093] [ 649.868787][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 649.918564][T23098] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4195'. [ 649.968975][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 650.110832][T23102] IPv6: addrconf: prefix option has invalid lifetime [ 650.123470][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 650.195208][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 650.303273][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 650.426540][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 650.525530][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 650.654962][T23125] netlink: 'syz.1.4203': attribute type 15 has an invalid length. [ 650.715977][T23132] Bluetooth: hci0: unsupported parameter 5135 [ 650.722123][T23132] Bluetooth: hci0: unsupported parameter 8209 [ 650.728478][T23132] Bluetooth: hci0: unsupported parameter 5135 [ 650.734592][T23132] Bluetooth: hci0: unsupported parameter 8209 [ 650.929045][T23140] lo speed is unknown, defaulting to 1000 [ 651.322723][T23156] Bluetooth: hci0: unsupported parameter 5135 [ 651.328880][T23156] Bluetooth: hci0: unsupported parameter 8192 [ 651.335017][T23156] Bluetooth: hci0: unsupported parameter 5135 [ 651.341123][T23156] Bluetooth: hci0: unsupported parameter 8192 [ 651.602923][T23176] __nla_validate_parse: 3 callbacks suppressed [ 651.602944][T23176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4216'. [ 652.160162][T23187] FAULT_INJECTION: forcing a failure. [ 652.160162][T23187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.183838][T23187] CPU: 0 UID: 0 PID: 23187 Comm: syz.3.4221 Not tainted syzkaller #0 PREEMPT(full) [ 652.183868][T23187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 652.183881][T23187] Call Trace: [ 652.183889][T23187] [ 652.183897][T23187] dump_stack_lvl+0xe8/0x150 [ 652.183934][T23187] should_fail_ex+0x40c/0x560 [ 652.183965][T23187] _copy_from_iter+0x1d3/0x1660 [ 652.184007][T23187] ? __pfx__copy_from_iter+0x10/0x10 [ 652.184062][T23187] ? skb_put+0x112/0x210 [ 652.184091][T23187] hci_sock_sendmsg+0x42a/0xf50 [ 652.184122][T23187] ? __pfx_aa_sk_perm+0x10/0x10 [ 652.184152][T23187] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 652.184179][T23187] ? aa_sock_msg_perm+0xf1/0x1b0 [ 652.184206][T23187] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 652.184231][T23187] sock_sendmsg_nosec+0x13a/0x180 [ 652.184265][T23187] sock_write_iter+0x2de/0x3e0 [ 652.184299][T23187] ? __pfx_sock_write_iter+0x10/0x10 [ 652.184338][T23187] ? bpf_lsm_file_permission+0x9/0x20 [ 652.184360][T23187] ? security_file_permission+0x75/0x260 [ 652.184398][T23187] vfs_write+0x612/0xba0 [ 652.184438][T23187] ? __pfx_vfs_write+0x10/0x10 [ 652.184480][T23187] ? __fget_files+0x2a/0x420 [ 652.184516][T23187] ksys_write+0x150/0x270 [ 652.184551][T23187] ? __pfx_ksys_write+0x10/0x10 [ 652.184590][T23187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.184613][T23187] do_syscall_64+0x174/0x580 [ 652.184643][T23187] ? trace_irq_disable+0x3b/0x140 [ 652.184668][T23187] ? clear_bhb_loop+0x70/0xc0 [ 652.184693][T23187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.184714][T23187] RIP: 0033:0x7f92bad9e0d9 [ 652.184733][T23187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.184751][T23187] RSP: 002b:00007f92bbca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 652.184774][T23187] RAX: ffffffffffffffda RBX: 00007f92bb025fa0 RCX: 00007f92bad9e0d9 [ 652.184789][T23187] RDX: 0000000000000017 RSI: 0000200000000000 RDI: 0000000000000004 [ 652.184801][T23187] RBP: 00007f92bbca8090 R08: 0000000000000000 R09: 0000000000000000 [ 652.184814][T23187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.184825][T23187] R13: 00007f92bb026038 R14: 00007f92bb025fa0 R15: 00007fffd3a0b988 [ 652.184858][T23187] [ 652.518441][T23191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4223'. [ 652.551229][T23191] tc action pedit unable to extract header offset for header type (0x4) [ 652.561728][T23191] tc action pedit unable to extract header offset for header type (0x4) [ 652.570180][T23191] tc action pedit unable to extract header offset for header type (0x4) [ 652.578645][T23191] tc action pedit unable to extract header offset for header type (0x4) [ 652.587062][T23191] tc action pedit unable to extract header offset for header type (0x4) [ 652.595485][T23191] tc action pedit unable to extract header offset for header type (0x4) [ 652.604044][T23191] tc action pedit unable to extract header offset for header type (0x4) [ 652.612514][T23191] tc action pedit unable to extract header offset for header type (0x4) [ 652.620931][T23191] tc action pedit unable to extract header offset for header type (0x4) [ 652.629392][T23191] tc action pedit unable to extract header offset for header type (0x4) [ 652.711741][T23201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4227'. [ 653.055919][T23204] syzkaller0: entered promiscuous mode [ 653.061493][T23204] syzkaller0: entered allmulticast mode [ 653.159536][T23204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4229'. [ 653.193193][T23204] netlink: 'syz.3.4229': attribute type 1 has an invalid length. [ 653.611496][T23230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.623913][T23230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.667624][T23238] Bluetooth: hci0: unsupported parameter 5135 [ 653.674030][T23238] Bluetooth: hci0: unsupported parameter 8192 [ 653.690170][T23238] Bluetooth: hci0: unsupported parameter 5135 [ 653.697736][T23238] Bluetooth: hci0: unsupported parameter 8192 [ 653.855292][ T6057] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.874622][ T6057] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.885551][ T6057] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.981894][T23245] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4239'. [ 654.092960][T23251] FAULT_INJECTION: forcing a failure. [ 654.092960][T23251] name failslab, interval 1, probability 0, space 0, times 0 [ 654.105641][T23251] CPU: 0 UID: 0 PID: 23251 Comm: syz.1.4242 Not tainted syzkaller #0 PREEMPT(full) [ 654.105670][T23251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.105682][T23251] Call Trace: [ 654.105690][T23251] [ 654.105698][T23251] dump_stack_lvl+0xe8/0x150 [ 654.105734][T23251] should_fail_ex+0x40c/0x560 [ 654.105764][T23251] should_failslab+0xa8/0x100 [ 654.105795][T23251] __kmalloc_cache_noprof+0xa8/0x660 [ 654.105821][T23251] ? xt_find_match+0x213/0x260 [ 654.105842][T23251] ? nft_match_select_ops+0x1ea/0x520 [ 654.105966][T23251] ? nft_match_select_ops+0x1ea/0x520 [ 654.106002][T23251] nft_match_select_ops+0x1ea/0x520 [ 654.106033][T23251] ? __nla_parse+0x40/0x60 [ 654.106066][T23251] nf_tables_expr_parse+0x70a/0xa60 [ 654.106129][T23251] ? nf_tables_expr_parse+0x169/0xa60 [ 654.106153][T23251] ? __pfx_nf_tables_expr_parse+0x10/0x10 [ 654.106177][T23251] ? nft_pernet+0x23/0x240 [ 654.106226][T23251] ? nf_tables_newrule+0x11c1/0x28a0 [ 654.106256][T23251] nf_tables_newrule+0x1312/0x28a0 [ 654.106298][T23251] ? __pfx_nf_tables_newrule+0x10/0x10 [ 654.106320][T23251] ? nfnl_pernet+0x23/0x240 [ 654.106372][T23251] ? nfnl_pernet+0x23/0x240 [ 654.106407][T23251] ? __nla_parse+0x40/0x60 [ 654.106440][T23251] nfnetlink_rcv+0x1288/0x28c0 [ 654.106504][T23251] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 654.106583][T23251] ? netlink_deliver_tap+0x2e/0x1b0 [ 654.106652][T23251] ? netlink_deliver_tap+0x2e/0x1b0 [ 654.106680][T23251] ? netlink_deliver_tap+0x2e/0x1b0 [ 654.106712][T23251] netlink_unicast+0x7bb/0x940 [ 654.106750][T23251] netlink_sendmsg+0x813/0xb40 [ 654.106786][T23251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.106820][T23251] ? aa_sock_msg_perm+0xf1/0x1b0 [ 654.106845][T23251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.106871][T23251] sock_sendmsg_nosec+0x13a/0x180 [ 654.106916][T23251] ____sys_sendmsg+0x54e/0x850 [ 654.106950][T23251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.106987][T23251] ? import_iovec+0x73/0xa0 [ 654.107021][T23251] ___sys_sendmsg+0x2a5/0x360 [ 654.107046][T23251] ? __lock_acquire+0x683/0x2cf0 [ 654.107080][T23251] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.107142][T23251] ? __fget_files+0x2a/0x420 [ 654.107171][T23251] ? __fget_files+0x3a2/0x420 [ 654.107207][T23251] __x64_sys_sendmsg+0x1b1/0x290 [ 654.107237][T23251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 654.107284][T23251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.107307][T23251] do_syscall_64+0x174/0x580 [ 654.107336][T23251] ? trace_irq_disable+0x3b/0x140 [ 654.107360][T23251] ? clear_bhb_loop+0x70/0xc0 [ 654.107385][T23251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.107404][T23251] RIP: 0033:0x7f8d1039e0d9 [ 654.107424][T23251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.107441][T23251] RSP: 002b:00007f8d112ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.107462][T23251] RAX: ffffffffffffffda RBX: 00007f8d10625fa0 RCX: 00007f8d1039e0d9 [ 654.107476][T23251] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 654.107488][T23251] RBP: 00007f8d112ae090 R08: 0000000000000000 R09: 0000000000000000 [ 654.107499][T23251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 654.107511][T23251] R13: 00007f8d10626038 R14: 00007f8d10625fa0 R15: 00007fff7a369688 [ 654.107542][T23251] [ 654.501905][T14748] net_ratelimit: 19 callbacks suppressed [ 654.501926][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 654.688354][T23261] Bluetooth: hci0: unsupported parameter 5135 [ 654.694749][T23261] Bluetooth: hci0: unsupported parameter 8192 [ 654.700916][T23261] Bluetooth: hci0: unsupported parameter 5135 [ 654.709774][T23261] Bluetooth: hci0: unsupported parameter 8192 [ 654.718976][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 654.750641][T23262] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 654.835900][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 654.860588][T23268] Bluetooth: hci0: unsupported parameter 5135 [ 654.867327][T23268] Bluetooth: hci0: unsupported parameter 8192 [ 654.873609][T23268] Bluetooth: hci0: unsupported parameter 5135 [ 654.880403][T23268] Bluetooth: hci0: unsupported parameter 8192 [ 654.888798][T23271] FAULT_INJECTION: forcing a failure. [ 654.888798][T23271] name failslab, interval 1, probability 0, space 0, times 0 [ 654.902080][T23271] CPU: 1 UID: 0 PID: 23271 Comm: syz.4.4249 Not tainted syzkaller #0 PREEMPT(full) [ 654.902107][T23271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.902119][T23271] Call Trace: [ 654.902127][T23271] [ 654.902136][T23271] dump_stack_lvl+0xe8/0x150 [ 654.902171][T23271] should_fail_ex+0x40c/0x560 [ 654.902201][T23271] should_failslab+0xa8/0x100 [ 654.902232][T23271] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 654.902255][T23271] ? local_lock_release+0x9c/0x160 [ 654.902280][T23271] ? __alloc_skb+0x1d7/0x7a0 [ 654.902300][T23271] ? __alloc_skb+0x1d7/0x7a0 [ 654.902328][T23271] __alloc_skb+0x1d7/0x7a0 [ 654.902355][T23271] alloc_skb_with_frags+0xc6/0x760 [ 654.902385][T23271] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 654.902420][T23271] sock_alloc_send_pskb+0x878/0x990 [ 654.902475][T23271] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 654.902516][T23271] ? aa_sk_perm+0x6d5/0x900 [ 654.902549][T23271] hci_sock_sendmsg+0x208/0xf50 [ 654.902577][T23271] ? __pfx_aa_sk_perm+0x10/0x10 [ 654.902605][T23271] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 654.902629][T23271] ? aa_sock_msg_perm+0xf1/0x1b0 [ 654.902653][T23271] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 654.902676][T23271] sock_sendmsg_nosec+0x13a/0x180 [ 654.902711][T23271] sock_write_iter+0x2de/0x3e0 [ 654.902743][T23271] ? __pfx_sock_write_iter+0x10/0x10 [ 654.902780][T23271] ? bpf_lsm_file_permission+0x9/0x20 [ 654.902802][T23271] ? security_file_permission+0x75/0x260 [ 654.902837][T23271] vfs_write+0x612/0xba0 [ 654.902876][T23271] ? __pfx_vfs_write+0x10/0x10 [ 654.902915][T23271] ? __fget_files+0x2a/0x420 [ 654.902949][T23271] ksys_write+0x150/0x270 [ 654.902984][T23271] ? __pfx_ksys_write+0x10/0x10 [ 654.903023][T23271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.903045][T23271] do_syscall_64+0x174/0x580 [ 654.903074][T23271] ? trace_irq_disable+0x3b/0x140 [ 654.903096][T23271] ? clear_bhb_loop+0x70/0xc0 [ 654.903119][T23271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.903138][T23271] RIP: 0033:0x7f3acc19e0d9 [ 654.903157][T23271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.903173][T23271] RSP: 002b:00007f3acd0de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 654.903194][T23271] RAX: ffffffffffffffda RBX: 00007f3acc425fa0 RCX: 00007f3acc19e0d9 [ 654.903208][T23271] RDX: 0000000000000017 RSI: 0000200000000000 RDI: 0000000000000004 [ 654.903220][T23271] RBP: 00007f3acd0de090 R08: 0000000000000000 R09: 0000000000000000 [ 654.903233][T23271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.903245][T23271] R13: 00007f3acc426038 R14: 00007f3acc425fa0 R15: 00007ffffa276f48 [ 654.903278][T23271] [ 655.207030][T23273] netlink: 'syz.2.4247': attribute type 13 has an invalid length. [ 655.216040][T23273] netlink: 'syz.2.4247': attribute type 17 has an invalid length. [ 655.305175][T23277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4250'. [ 655.385374][T23282] Bluetooth: hci0: unsupported parameter 5135 [ 655.391584][T23282] Bluetooth: hci0: unsupported parameter 8192 [ 655.397949][T23282] Bluetooth: hci0: unsupported parameter 5135 [ 655.404057][T23282] Bluetooth: hci0: unsupported parameter 8192 [ 655.532312][T23288] FAULT_INJECTION: forcing a failure. [ 655.532312][T23288] name failslab, interval 1, probability 0, space 0, times 0 [ 655.549046][T23288] CPU: 1 UID: 0 PID: 23288 Comm: syz.4.4253 Not tainted syzkaller #0 PREEMPT(full) [ 655.549075][T23288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.549089][T23288] Call Trace: [ 655.549097][T23288] [ 655.549106][T23288] dump_stack_lvl+0xe8/0x150 [ 655.549141][T23288] should_fail_ex+0x40c/0x560 [ 655.549172][T23288] should_failslab+0xa8/0x100 [ 655.549204][T23288] __kmalloc_noprof+0xfe/0x720 [ 655.549230][T23288] ? nft_pernet+0x23/0x240 [ 655.549254][T23288] ? nf_tables_newrule+0x1524/0x28a0 [ 655.549277][T23288] ? nf_tables_newrule+0x1524/0x28a0 [ 655.549307][T23288] nf_tables_newrule+0x1524/0x28a0 [ 655.549356][T23288] ? __pfx_nf_tables_newrule+0x10/0x10 [ 655.549378][T23288] ? nfnl_pernet+0x23/0x240 [ 655.549403][T23288] ? nfnl_pernet+0x23/0x240 [ 655.549438][T23288] ? __nla_parse+0x40/0x60 [ 655.549471][T23288] nfnetlink_rcv+0x1288/0x28c0 [ 655.549534][T23288] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 655.549578][T23288] ? ref_tracker_free+0x689/0x830 [ 655.549712][T23288] ? skb_clone+0x246/0x3a0 [ 655.549744][T23288] ? __netlink_deliver_tap+0x811/0x860 [ 655.549782][T23288] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.549809][T23288] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.549844][T23288] netlink_unicast+0x7bb/0x940 [ 655.549885][T23288] netlink_sendmsg+0x813/0xb40 [ 655.549924][T23288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.549957][T23288] ? aa_sock_msg_perm+0xf1/0x1b0 [ 655.549985][T23288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.550012][T23288] sock_sendmsg_nosec+0x13a/0x180 [ 655.550047][T23288] ____sys_sendmsg+0x54e/0x850 [ 655.550081][T23288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.550118][T23288] ? import_iovec+0x73/0xa0 [ 655.550152][T23288] ___sys_sendmsg+0x2a5/0x360 [ 655.550179][T23288] ? __lock_acquire+0x683/0x2cf0 [ 655.550211][T23288] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.550278][T23288] ? __fget_files+0x2a/0x420 [ 655.550304][T23288] ? __fget_files+0x3a2/0x420 [ 655.550348][T23288] __x64_sys_sendmsg+0x1b1/0x290 [ 655.550379][T23288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 655.550427][T23288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.550449][T23288] do_syscall_64+0x174/0x580 [ 655.550478][T23288] ? trace_irq_disable+0x3b/0x140 [ 655.550504][T23288] ? clear_bhb_loop+0x70/0xc0 [ 655.550529][T23288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.550551][T23288] RIP: 0033:0x7f3acc19e0d9 [ 655.550570][T23288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.550587][T23288] RSP: 002b:00007f3acd0de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.550609][T23288] RAX: ffffffffffffffda RBX: 00007f3acc425fa0 RCX: 00007f3acc19e0d9 [ 655.550625][T23288] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 655.550637][T23288] RBP: 00007f3acd0de090 R08: 0000000000000000 R09: 0000000000000000 [ 655.550650][T23288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 655.550662][T23288] R13: 00007f3acc426038 R14: 00007f3acc425fa0 R15: 00007ffffa276f48 [ 655.550696][T23288] [ 655.999798][T23310] Bluetooth: hci0: unsupported parameter 5135 [ 656.007993][T23310] Bluetooth: hci0: unsupported parameter 8192 [ 656.014689][T23310] Bluetooth: hci0: unsupported parameter 5135 [ 656.021060][T23310] Bluetooth: hci0: unsupported parameter 8192 [ 656.083087][T23312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4256'. [ 656.123516][T23312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4256'. [ 656.134044][T23312] ip_tables: iptables: counters copy to user failed while replacing table [ 656.241615][T23272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.412110][T23272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.084627][T23273] ip6gretap0: left promiscuous mode [ 657.099870][T23273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.111342][T23273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.180104][T23273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.190330][T23273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.200227][T23273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 657.212336][T23273] veth1_vlan: left promiscuous mode [ 657.220344][T23273] veth0_vlan: left promiscuous mode [ 657.227163][T23273] veth0_vlan: entered promiscuous mode [ 657.234886][T23273] veth1_vlan: entered promiscuous mode [ 657.244718][T23273] veth1_macvtap: left promiscuous mode [ 657.251392][T23273] veth0_macvtap: left promiscuous mode [ 657.258370][T23273] veth0_macvtap: entered promiscuous mode [ 657.284883][T23273] veth1_macvtap: entered promiscuous mode [ 657.295118][T23273] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 657.302778][T23273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.314267][T23273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 657.326198][T23273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 657.337578][T23273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 657.352717][T23273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 657.361296][T23273] veth3: left allmulticast mode [ 657.380472][T23273] batman_adv: batadv0: Interface activated: ip6gretap1 [ 657.393591][T23273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.402030][T23273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 657.410385][T23273] ip6gretap0: entered promiscuous mode [ 657.416606][T23273] sit1: left promiscuous mode [ 657.423445][T23273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 657.507596][T23329] netlink: 'syz.4.4259': attribute type 1 has an invalid length. [ 657.515556][T23330] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 657.632030][T23338] tipc: Enabling of bearer rejected, failed to enable media [ 657.651146][T14750] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 657.695263][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 657.763088][T23333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4260'. [ 657.787594][T23344] bond4: Unable to set down delay as MII monitoring is disabled [ 657.796723][T23344] bond4 (unregistering): Released all slaves [ 657.885802][T23348] batadv_slave_1: entered promiscuous mode [ 657.987664][T23354] Bluetooth: hci0: unsupported parameter 5135 [ 657.993834][T23354] Bluetooth: hci0: unsupported parameter 8192 [ 658.000489][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 658.013094][T23354] Bluetooth: hci0: unsupported parameter 5135 [ 658.019249][T23354] Bluetooth: hci0: unsupported parameter 8192 [ 658.135901][T23357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 658.166087][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 658.206362][T23343] batadv_slave_1: left promiscuous mode [ 658.316364][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 658.401578][T23365] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 658.426221][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 658.504978][T23369] FAULT_INJECTION: forcing a failure. [ 658.504978][T23369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.519182][T23369] CPU: 1 UID: 0 PID: 23369 Comm: syz.2.4272 Not tainted syzkaller #0 PREEMPT(full) [ 658.519221][T23369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 658.519233][T23369] Call Trace: [ 658.519241][T23369] [ 658.519250][T23369] dump_stack_lvl+0xe8/0x150 [ 658.519284][T23369] should_fail_ex+0x40c/0x560 [ 658.519315][T23369] _copy_from_iter+0x1d3/0x1660 [ 658.519356][T23369] ? __pfx__copy_from_iter+0x10/0x10 [ 658.519395][T23369] ? skb_put+0x112/0x210 [ 658.519423][T23369] hci_sock_sendmsg+0x42a/0xf50 [ 658.519453][T23369] ? __pfx_aa_sk_perm+0x10/0x10 [ 658.519484][T23369] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 658.519512][T23369] ? aa_sock_msg_perm+0xf1/0x1b0 [ 658.519537][T23369] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 658.519562][T23369] sock_sendmsg_nosec+0x13a/0x180 [ 658.519597][T23369] sock_write_iter+0x2de/0x3e0 [ 658.519631][T23369] ? __pfx_sock_write_iter+0x10/0x10 [ 658.519670][T23369] ? bpf_lsm_file_permission+0x9/0x20 [ 658.519692][T23369] ? security_file_permission+0x75/0x260 [ 658.519729][T23369] vfs_write+0x612/0xba0 [ 658.519770][T23369] ? __pfx_vfs_write+0x10/0x10 [ 658.519812][T23369] ? __fget_files+0x2a/0x420 [ 658.519848][T23369] ksys_write+0x150/0x270 [ 658.519882][T23369] ? __pfx_ksys_write+0x10/0x10 [ 658.519921][T23369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.519945][T23369] do_syscall_64+0x174/0x580 [ 658.519976][T23369] ? trace_irq_disable+0x3b/0x140 [ 658.520001][T23369] ? clear_bhb_loop+0x70/0xc0 [ 658.520026][T23369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.520047][T23369] RIP: 0033:0x7f2afcd9e0d9 [ 658.520067][T23369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.520087][T23369] RSP: 002b:00007f2afdcde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 658.520110][T23369] RAX: ffffffffffffffda RBX: 00007f2afd025fa0 RCX: 00007f2afcd9e0d9 [ 658.520125][T23369] RDX: 0000000000000017 RSI: 0000200000000000 RDI: 0000000000000004 [ 658.520138][T23369] RBP: 00007f2afdcde090 R08: 0000000000000000 R09: 0000000000000000 [ 658.520151][T23369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.520163][T23369] R13: 00007f2afd026038 R14: 00007f2afd025fa0 R15: 00007ffe735729c8 [ 658.520203][T23369] [ 658.848048][T23376] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 659.015567][T23389] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4279'. [ 659.077180][T23392] FAULT_INJECTION: forcing a failure. [ 659.077180][T23392] name failslab, interval 1, probability 0, space 0, times 0 [ 659.120167][T23392] CPU: 1 UID: 0 PID: 23392 Comm: syz.2.4278 Not tainted syzkaller #0 PREEMPT(full) [ 659.120195][T23392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 659.120206][T23392] Call Trace: [ 659.120214][T23392] [ 659.120223][T23392] dump_stack_lvl+0xe8/0x150 [ 659.120259][T23392] should_fail_ex+0x40c/0x560 [ 659.120290][T23392] should_failslab+0xa8/0x100 [ 659.120321][T23392] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 659.120345][T23392] ? local_lock_release+0x9c/0x160 [ 659.120370][T23392] ? __alloc_skb+0x1d7/0x7a0 [ 659.120391][T23392] ? __alloc_skb+0x1d7/0x7a0 [ 659.120422][T23392] __alloc_skb+0x1d7/0x7a0 [ 659.120450][T23392] hci_mgmt_cmd+0x1c1/0xfc0 [ 659.120478][T23392] ? hci_send_monitor_ctrl_event+0x3b0/0x600 [ 659.120515][T23392] hci_sock_sendmsg+0x6e1/0xf50 [ 659.120541][T23392] ? __pfx_aa_sk_perm+0x10/0x10 [ 659.120569][T23392] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 659.120596][T23392] ? aa_sock_msg_perm+0xf1/0x1b0 [ 659.120622][T23392] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 659.120646][T23392] sock_sendmsg_nosec+0x13a/0x180 [ 659.120682][T23392] sock_write_iter+0x2de/0x3e0 [ 659.120715][T23392] ? __pfx_sock_write_iter+0x10/0x10 [ 659.120755][T23392] ? bpf_lsm_file_permission+0x9/0x20 [ 659.120778][T23392] ? security_file_permission+0x75/0x260 [ 659.120815][T23392] vfs_write+0x612/0xba0 [ 659.120857][T23392] ? __pfx_vfs_write+0x10/0x10 [ 659.120900][T23392] ? __fget_files+0x2a/0x420 [ 659.120936][T23392] ksys_write+0x150/0x270 [ 659.120968][T23392] ? __pfx_ksys_write+0x10/0x10 [ 659.121008][T23392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.121040][T23392] do_syscall_64+0x174/0x580 [ 659.121069][T23392] ? trace_irq_disable+0x3b/0x140 [ 659.121094][T23392] ? clear_bhb_loop+0x70/0xc0 [ 659.121120][T23392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.121140][T23392] RIP: 0033:0x7f2afcd9e0d9 [ 659.121164][T23392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.121181][T23392] RSP: 002b:00007f2afdcde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 659.121203][T23392] RAX: ffffffffffffffda RBX: 00007f2afd025fa0 RCX: 00007f2afcd9e0d9 [ 659.121218][T23392] RDX: 0000000000000017 RSI: 0000200000000000 RDI: 0000000000000004 [ 659.121231][T23392] RBP: 00007f2afdcde090 R08: 0000000000000000 R09: 0000000000000000 [ 659.121243][T23392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.121255][T23392] R13: 00007f2afd026038 R14: 00007f2afd025fa0 R15: 00007ffe735729c8 [ 659.121290][T23392] [ 659.121318][T23392] Bluetooth: hci0: unsupported parameter 5135 [ 659.397588][T23392] Bluetooth: hci0: unsupported parameter 8192 [ 659.403816][T23392] Bluetooth: hci0: unsupported parameter 5135 [ 659.411694][T23392] Bluetooth: hci0: unsupported parameter 8192 [ 659.573266][T23410] Bluetooth: hci0: unsupported parameter 5135 [ 659.590037][T23410] Bluetooth: hci0: unsupported parameter 8192 [ 659.614215][T23410] Bluetooth: hci0: unsupported parameter 5135 [ 659.628096][T23410] Bluetooth: hci0: unsupported parameter 8192 [ 659.694358][T14748] net_ratelimit: 4 callbacks suppressed [ 659.694378][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 659.747183][T23417] netlink: 'syz.1.4289': attribute type 10 has an invalid length. [ 659.758808][T23417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.769568][T23417] team0: Port device netdevsim1 added [ 659.831572][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 659.942860][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 659.974188][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4291'. [ 659.983095][T23423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.991719][T23423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.999935][T23423] batman_adv: batadv0: Removing interface: macvtap1 [ 660.052350][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 660.163440][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 660.209521][T23433] Bluetooth: hci0: unsupported parameter 5135 [ 660.215675][T23433] Bluetooth: hci0: unsupported parameter 8192 [ 660.221770][T23433] Bluetooth: hci0: unsupported parameter 5135 [ 660.227883][T23433] Bluetooth: hci0: unsupported parameter 8192 [ 660.268104][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 660.290437][T23435] Bluetooth: hci0: unsupported parameter 5135 [ 660.296559][T23435] Bluetooth: hci0: unsupported parameter 8192 [ 660.302651][T23435] Bluetooth: hci0: unsupported parameter 5135 [ 660.308751][T23435] Bluetooth: hci0: unsupported parameter 8192 [ 660.391770][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 660.497575][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 660.574411][T23447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4299'. [ 660.702361][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 660.734524][T23450] veth1_to_bond: entered allmulticast mode [ 660.740850][T23450] veth1_to_bond: entered promiscuous mode [ 660.813644][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 661.078934][T23452] xfrm1: entered allmulticast mode [ 661.375413][T23465] nbd: socks must be embedded in a SOCK_ITEM attr [ 661.577549][T23448] veth1_to_bond: left promiscuous mode [ 661.584543][T23448] veth1_to_bond: left allmulticast mode [ 662.054458][T23492] Bluetooth: hci0: unsupported parameter 5135 [ 662.060816][T23492] Bluetooth: hci0: unsupported parameter 8192 [ 662.074683][T23492] Bluetooth: hci0: unsupported parameter 5135 [ 662.080865][T23492] Bluetooth: hci0: unsupported parameter 8192 [ 662.094137][T23482] veth0_to_hsr: entered promiscuous mode [ 662.103626][T23482] veth0_to_hsr: left promiscuous mode [ 662.134531][T23494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4316'. [ 662.174548][T23494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4316'. [ 662.184402][T23494] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4316'. [ 662.260873][T23494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4316'. [ 662.389059][T23508] netlink: 'syz.4.4321': attribute type 18 has an invalid length. [ 662.397621][T23508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4321'. [ 662.420441][T23508] netlink: 'syz.4.4321': attribute type 18 has an invalid length. [ 662.428580][T23508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4321'. [ 662.441118][T23508] Bluetooth: hci0: unsupported parameter 5135 [ 662.448096][T14754] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.457427][T23508] Bluetooth: hci0: unsupported parameter 8192 [ 662.463757][T14754] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.481085][T23508] Bluetooth: hci0: unsupported parameter 5135 [ 662.492224][T14754] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.501501][T23508] Bluetooth: hci0: unsupported parameter 8192 [ 662.508452][T14754] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.855421][T23527] pimreg1: renamed from bridge0 (while UP) [ 662.892992][T23527] pimreg1: entered allmulticast mode [ 662.978447][T23530] Bluetooth: hci0: unsupported parameter 5135 [ 662.984775][T23530] Bluetooth: hci0: unsupported parameter 8192 [ 662.991004][T23530] Bluetooth: hci0: unsupported parameter 5135 [ 662.997808][T23530] Bluetooth: hci0: unsupported parameter 8192 [ 664.695654][ T6055] net_ratelimit: 32 callbacks suppressed [ 664.695676][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 664.855022][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 664.964945][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 665.074882][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 665.188207][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 665.294486][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 665.404602][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 665.514429][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 665.624493][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 665.734430][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 666.149093][ T25] block nbd4: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 270 seconds [ 666.159997][ T25] block nbd4: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 270 seconds [ 666.171303][ T25] block nbd4: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 270 seconds [ 666.182382][ T25] block nbd4: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 270 seconds [ 669.711816][T14748] net_ratelimit: 27 callbacks suppressed [ 669.711839][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 669.821000][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 669.934706][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 670.141920][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 670.254344][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 670.356444][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 670.505457][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 670.677957][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 670.788680][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 671.000419][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 674.735875][T14754] net_ratelimit: 28 callbacks suppressed [ 674.735898][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 674.846639][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 675.049532][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 675.167357][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 675.374384][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 675.484540][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 675.589475][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 675.704487][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 675.854487][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 676.020759][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 679.755611][T14748] net_ratelimit: 33 callbacks suppressed [ 679.755635][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 679.979434][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 680.094594][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 680.244712][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 680.409776][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 680.524676][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 680.674939][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 680.839605][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 680.954535][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 681.104434][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 684.847643][ T6055] net_ratelimit: 28 callbacks suppressed [ 684.847670][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 684.964532][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 685.074644][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 685.224469][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 685.389852][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 685.495433][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 685.712052][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 685.829798][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 685.932665][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 686.060119][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 689.906746][T19124] net_ratelimit: 26 callbacks suppressed [ 689.906769][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 690.065603][ T6057] bond9: (slave dummy0): failed to get link speed/duplex [ 690.228923][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 690.338045][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 690.551567][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 690.664500][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 690.774473][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 690.924586][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 691.093272][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 691.219829][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 694.916262][ T6055] net_ratelimit: 27 callbacks suppressed [ 694.916286][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 695.028000][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 695.149149][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 695.265820][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 695.434688][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 695.600674][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 695.715933][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 695.864377][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 696.031811][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 696.144342][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 696.255967][ T25] block nbd4: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 300 seconds [ 696.266873][ T25] block nbd4: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 300 seconds [ 696.278389][ T25] block nbd4: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 300 seconds [ 696.289446][ T25] block nbd4: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 300 seconds [ 700.020446][T19124] net_ratelimit: 30 callbacks suppressed [ 700.020483][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 700.154613][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 700.274304][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 700.386360][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 700.514297][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 700.627180][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 700.754438][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 700.961472][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 701.075137][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 701.176045][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 705.062412][T14748] net_ratelimit: 30 callbacks suppressed [ 705.062451][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 705.174539][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 705.285316][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 705.406648][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 705.526486][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 705.644642][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 705.755301][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 705.864465][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 705.974377][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 706.084420][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 710.075871][T19129] net_ratelimit: 27 callbacks suppressed [ 710.075894][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 710.176653][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 710.394227][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 710.502508][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 710.610028][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 710.729627][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 710.825943][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 711.044387][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 711.150448][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 711.259023][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 715.111611][ T80] net_ratelimit: 29 callbacks suppressed [ 715.111632][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 715.220041][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 715.336415][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 715.541147][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 715.648943][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 715.772332][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 715.971602][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 716.097272][ T80] bond9: (slave dummy0): failed to get link speed/duplex [ 716.188103][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 716.352282][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 720.217201][T14750] net_ratelimit: 31 callbacks suppressed [ 720.217246][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 720.334329][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 720.444342][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 720.554310][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 720.664552][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 720.774393][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 720.894629][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 720.997935][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 721.105367][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 721.220122][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 725.234515][T19129] net_ratelimit: 31 callbacks suppressed [ 725.234543][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 725.398102][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 725.525189][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 725.616671][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 725.839894][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 725.956379][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 726.166907][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 726.326737][ T25] block nbd4: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 330 seconds [ 726.337599][ T25] block nbd4: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 330 seconds [ 726.348920][ T25] block nbd4: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 330 seconds [ 726.360165][ T25] block nbd4: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 330 seconds [ 726.381576][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 726.495257][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 726.600464][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 730.293292][T19129] net_ratelimit: 28 callbacks suppressed [ 730.293315][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 730.386965][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 730.610012][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 730.718255][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 730.931817][T19129] bond9: (slave dummy0): failed to get link speed/duplex [ 731.054183][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 731.146325][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 731.366433][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 731.474072][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 731.580638][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 735.379544][T19128] net_ratelimit: 28 callbacks suppressed [ 735.379567][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 735.494299][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 735.598061][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 735.724563][ T6055] bond9: (slave dummy0): failed to get link speed/duplex [ 735.834930][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 735.908126][ T31] INFO: task udevd:16034 blocked in I/O wait for more than 143 seconds. [ 735.918453][ T31] Not tainted syzkaller #0 [ 735.923517][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.932362][ T31] task:udevd state:D stack:26664 pid:16034 tgid:16034 ppid:4975 task_flags:0x400140 flags:0x00080002 [ 735.944397][ T31] Call Trace: [ 735.947685][ T31] [ 735.950622][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 735.955259][ T31] ? __lock_acquire+0x683/0x2cf0 [ 735.960249][ T31] ? __pfx___schedule+0x10/0x10 [ 735.965914][ T31] ? schedule+0x90/0x2b0 [ 735.970280][ T31] schedule+0x164/0x2b0 [ 735.974557][ T31] io_schedule+0x7f/0xd0 [ 735.979103][ T31] folio_wait_bit_common+0x836/0xbc0 [ 735.988653][ T31] ? filemap_get_entry+0xcd/0x3f0 [ 736.004198][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 736.011624][ T31] ? filemap_read_folio+0x234/0x3a0 [ 736.019695][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 736.034294][ T31] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 736.040421][T14748] bond9: (slave dummy0): failed to get link speed/duplex [ 736.047159][ T31] do_read_cache_folio+0x1ac/0x590 [ 736.059481][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 736.065640][ T31] read_part_sector+0xb6/0x2b0 [ 736.070591][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 736.089901][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 736.129658][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 736.178895][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 736.217382][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 736.237885][ T31] bdev_disk_changed+0x851/0x17a0 [ 736.260553][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 736.266213][T14750] bond9: (slave dummy0): failed to get link speed/duplex [ 736.284354][ T31] blkdev_get_whole+0x372/0x510 [ 736.298400][ T31] bdev_open+0x324/0xd70 [ 736.331935][ T31] blkdev_open+0x461/0x600 [ 736.347110][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 736.370752][ T31] do_dentry_open+0x816/0x1380 [ 736.381293][ T31] vfs_open+0x3b/0x340 [ 736.394173][ T31] ? path_openat+0x2e2d/0x3830 [ 736.399075][ T31] path_openat+0x2e44/0x3830 [ 736.403736][ T31] ? kasan_save_track+0x3e/0x80 [ 736.426739][ T31] ? do_sys_openat2+0xcc/0x200 [ 736.442895][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.461164][ T31] do_file_open+0x23e/0x4a0 [ 736.476337][ T31] ? __pfx_do_file_open+0x10/0x10 [ 736.492552][ T31] ? _raw_spin_unlock+0x28/0x50 [ 736.511188][ T31] ? alloc_fd+0x651/0x6c0 [ 736.528798][ T31] do_sys_openat2+0x115/0x200 [ 736.541216][T14754] bond9: (slave dummy0): failed to get link speed/duplex [ 736.552937][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 736.573768][ T31] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 736.595423][ T31] __x64_sys_openat+0x138/0x170 [ 736.624222][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.630489][ T31] do_syscall_64+0x174/0x580 [ 736.645023][ T31] ? clear_bhb_loop+0x70/0xc0 [ 736.674188][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.682065][ T31] RIP: 0033:0x7fcdd6aa7407 [ 736.704177][ T31] RSP: 002b:00007fff82de1db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 736.725700][ T31] RAX: ffffffffffffffda RBX: 00007fcdd7276880 RCX: 00007fcdd6aa7407 [ 736.749915][T19128] bond9: (slave dummy0): failed to get link speed/duplex [ 736.755927][ T31] RDX: 00000000000a0800 RSI: 000055afcb5726f0 RDI: ffffffffffffff9c [ 736.785153][ T31] RBP: 000055afcb44a910 R08: 0000000000000000 R09: 0000000000000000 [ 736.804495][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055afcb4767b0 [ 736.834701][ T31] R13: 000055afcb458190 R14: 0000000000000000 R15: 000055afcb4767b0 [ 736.855425][ T31] [ 736.869994][ T31] [ 736.869994][ T31] Showing all locks held in the system: [ 736.896714][T19124] bond9: (slave dummy0): failed to get link speed/duplex [ 736.910128][ T31] 1 lock held by khungtaskd/31: [ 736.930624][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 736.991799][ T31] 2 locks held by getty/5363: [ 736.996547][ T31] #0: ffff8880357070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 737.006502][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 737.018237][ T31] 1 lock held by udevd/16034: [ 737.022967][ T31] #0: ffff8880269fa350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 737.032271][ T31] 1 lock held by syz-executor/17239: [ 737.037600][ T31] 1 lock held by syz-executor/17980: [ 737.042921][ T31] 3 locks held by syz-executor/18688: [ 737.048337][ T31] 2 locks held by syz-executor/19309: [ 737.053737][ T31] #0: ffff888046b14ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 737.115302][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 737.126683][ T31] 1 lock held by syz-executor/19994: [ 737.132036][ T31] 3 locks held by kworker/1:4/23318: [ 737.138231][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 737.149643][ T31] #1: ffffc900038ffc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 737.160322][ T31] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 737.186305][ T31] [ 737.190589][ T31] ============================================= [ 737.190589][ T31] [ 737.201681][ T31] NMI backtrace for cpu 1 [ 737.201698][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 737.201719][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 737.201732][ T31] Call Trace: [ 737.201740][ T31] [ 737.201748][ T31] dump_stack_lvl+0xe8/0x150 [ 737.201784][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 737.201905][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 737.201943][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 737.201972][ T31] sys_info+0x135/0x170 [ 737.201994][ T31] watchdog+0xfd7/0x1030 [ 737.202033][ T31] ? watchdog+0x1c7/0x1030 [ 737.202064][ T31] kthread+0x388/0x470 [ 737.202093][ T31] ? __pfx_watchdog+0x10/0x10 [ 737.202115][ T31] ? __pfx_kthread+0x10/0x10 [ 737.202147][ T31] ret_from_fork+0x514/0xb70 [ 737.202195][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 737.202223][ T31] ? __switch_to+0xc89/0x1420 [ 737.202251][ T31] ? __pfx_kthread+0x10/0x10 [ 737.202280][ T31] ret_from_fork_asm+0x1a/0x30 [ 737.202325][ T31] [ 737.202345][ T31] Sending NMI from CPU 1 to CPUs 0: [ 737.312931][ C0] NMI backtrace for cpu 0 [ 737.312949][ C0] CPU: 0 UID: 0 PID: 19994 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 737.312970][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 737.312981][ C0] RIP: 0010:memset_orig+0x67/0xb0 [ 737.313005][ C0] Code: 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 48 8d 7f 08 75 f5 83 e2 [ 737.313021][ C0] RSP: 0018:ffffc90000007d18 EFLAGS: 00000002 [ 737.313037][ C0] RAX: 0000000000000000 RBX: ffff888032870300 RCX: 0000000000000010 [ 737.313048][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000007d38 [ 737.313060][ C0] RBP: 0000000000000000 R08: ffffc90000007d47 R09: 0000000000000000 [ 737.313077][ C0] R10: ffffc90000007d38 R11: fffff52000000fa9 R12: 0000000000000001 [ 737.313089][ C0] R13: dffffc0000000000 R14: ffffffff8bef7f00 R15: 0000000000000000 [ 737.313101][ C0] FS: 0000000000000000(0000) GS:ffff888124f4a000(0000) knlGS:0000000000000000 [ 737.313115][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.313127][ C0] CR2: 0000560bf34edf40 CR3: 000000000e946000 CR4: 00000000003526f0 [ 737.313143][ C0] Call Trace: [ 737.313151][ C0] [ 737.313157][ C0] debug_object_activate+0x38/0x420 [ 737.313257][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 737.313279][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 737.313306][ C0] hrtimer_interrupt+0x448/0x910 [ 737.313338][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 737.313357][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 737.313382][ C0] [ 737.313388][ C0] [ 737.313394][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 737.313413][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 737.313441][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 bc bc 88 00 48 c7 c3 d8 98 6e 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 49 7f c1 11 74 11 83 e0 04 c1 e8 02 5b [ 737.313456][ C0] RSP: 0018:ffffc90003fef6d8 EFLAGS: 00000a06 [ 737.313470][ C0] RAX: 0000000000000000 RBX: ffff8880b86338d8 RCX: 0000000080000001 [ 737.313481][ C0] RDX: ffffffff90e54a00 RSI: ffffffff8c4bbf60 RDI: ffffffff8c4bbf20 [ 737.313494][ C0] RBP: 1ffffffff21ca901 R08: ffffc90003feff48 R09: 0000000000000000 [ 737.313506][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffc90003fe8000 [ 737.313518][ C0] R13: ffffffff8177827f R14: ffffffff8e5057d0 R15: dffffc0000000000 [ 737.313532][ C0] ? unwind_next_frame+0x8f/0x2550 [ 737.313564][ C0] ? rcu_is_watching+0x15/0xb0 [ 737.313594][ C0] lock_release+0x4b/0x3c0 [ 737.313617][ C0] ? unwind_next_frame+0x8f/0x2550 [ 737.313634][ C0] ? unwind_next_frame+0x8f/0x2550 [ 737.313650][ C0] unwind_next_frame+0x1baa/0x2550 [ 737.313669][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.313686][ C0] ? unwind_next_frame+0x8f/0x2550 [ 737.313704][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 737.313725][ C0] arch_stack_walk+0x11b/0x150 [ 737.313748][ C0] stack_trace_save+0xa9/0x100 [ 737.313768][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 737.313788][ C0] ? stack_depot_save_flags+0x33/0x800 [ 737.313813][ C0] save_stack+0x122/0x230 [ 737.313835][ C0] ? __pfx_save_stack+0x10/0x10 [ 737.313855][ C0] ? page_ext_get+0x22/0x2e0 [ 737.313873][ C0] ? free_pages_prepare+0x960/0xa60 [ 737.313891][ C0] ? __free_contig_range_common+0x174/0x340 [ 737.313916][ C0] ? free_pages_bulk+0x48/0x120 [ 737.313937][ C0] ? vfree+0x224/0x4a0 [ 737.313952][ C0] ? kcov_close+0x28/0x50 [ 737.313971][ C0] ? __fput+0x418/0xa50 [ 737.313990][ C0] ? task_work_run+0x1d9/0x270 [ 737.314013][ C0] ? do_exit+0x73a/0x2360 [ 737.314041][ C0] ? do_group_exit+0x22d/0x2f0 [ 737.314063][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 737.314092][ C0] ? x64_sys_call+0x221a/0x2240 [ 737.314117][ C0] ? do_syscall_64+0x174/0x580 [ 737.314143][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.314164][ C0] ? page_ext_put+0x97/0xc0 [ 737.314186][ C0] __reset_page_owner+0x71/0x1f0 [ 737.314209][ C0] free_pages_prepare+0x960/0xa60 [ 737.314231][ C0] __free_contig_range_common+0x174/0x340 [ 737.314261][ C0] free_pages_bulk+0x48/0x120 [ 737.314286][ C0] vfree+0x224/0x4a0 [ 737.314304][ C0] ? __pfx_kcov_close+0x10/0x10 [ 737.314323][ C0] kcov_close+0x28/0x50 [ 737.314341][ C0] __fput+0x418/0xa50 [ 737.314366][ C0] task_work_run+0x1d9/0x270 [ 737.314393][ C0] ? __pfx_task_work_run+0x10/0x10 [ 737.314417][ C0] ? do_exit+0x735/0x2360 [ 737.314439][ C0] ? kmem_cache_free+0x182/0x650 [ 737.314460][ C0] ? put_net+0x191/0x260 [ 737.314480][ C0] do_exit+0x73a/0x2360 [ 737.314509][ C0] ? __pfx_do_exit+0x10/0x10 [ 737.314530][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 737.314554][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 737.314585][ C0] do_group_exit+0x22d/0x2f0 [ 737.314610][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.314628][ C0] __x64_sys_exit_group+0x3f/0x40 [ 737.314652][ C0] x64_sys_call+0x221a/0x2240 [ 737.314676][ C0] do_syscall_64+0x174/0x580 [ 737.314700][ C0] ? trace_irq_disable+0x3b/0x140 [ 737.314721][ C0] ? clear_bhb_loop+0x70/0xc0 [ 737.314742][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.314760][ C0] RIP: 0033:0x7f8d1039e0d9 [ 737.314775][ C0] Code: Unable to access opcode bytes at 0x7f8d1039e0af. [ 737.314784][ C0] RSP: 002b:00007fff7a3698d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 737.314802][ C0] RAX: ffffffffffffffda RBX: 00007f8d10435f6c RCX: 00007f8d1039e0d9 [ 737.314815][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 737.314826][ C0] RBP: 00007f8d10435f7e R08: 0000000000000000 R09: 00000000000927c0 [ 737.314838][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 737.314849][ C0] R13: 00000000000927c0 R14: 00000000000a1d4b R15: 00007fff7a369a80 [ 737.314872][ C0] [ 738.065195][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 738.072138][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 738.081409][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.091694][ T31] Call Trace: [ 738.095007][ T31] [ 738.097992][ T31] vpanic+0x56c/0xa60 [ 738.102058][ T31] ? __pfx___schedule+0x10/0x10 [ 738.106968][ T31] ? __pfx_vpanic+0x10/0x10 [ 738.111522][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 738.117729][ T31] panic+0xc5/0xd0 [ 738.121516][ T31] ? __pfx_panic+0x10/0x10 [ 738.125974][ T31] ? preempt_schedule_common+0x82/0xd0 [ 738.131485][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 738.136898][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 738.143091][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 738.149542][ T31] watchdog+0x1030/0x1030 [ 738.153917][ T31] ? watchdog+0x1c7/0x1030 [ 738.158635][ T31] kthread+0x388/0x470 [ 738.162741][ T31] ? __pfx_watchdog+0x10/0x10 [ 738.167447][ T31] ? __pfx_kthread+0x10/0x10 [ 738.172080][ T31] ret_from_fork+0x514/0xb70 [ 738.176717][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 738.181871][ T31] ? __switch_to+0xc89/0x1420 [ 738.186588][ T31] ? __pfx_kthread+0x10/0x10 [ 738.191218][ T31] ret_from_fork_asm+0x1a/0x30 [ 738.196038][ T31] [ 738.199274][ T31] Kernel Offset: disabled [ 738.203614][ T31] Rebooting in 86400 seconds..